Bump @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2 #19184

dependabot · 2025-11-21T15:55:08Z

Bumps @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2.

Release notes

Sourced from @octokit/plugin-paginate-rest's releases.

v9.2.2

9.2.2 (2025-02-15)

Bug Fixes

ReDos regex vulnerability, reported by @DayShift (#660) (e1e4489)

v9.2.1

9.2.1 (2024-03-01)

Bug Fixes

pkg: pin @octokit/core peerDependency to v5 (#599) (5b84386)

v9.2.0

9.2.0 (2024-02-22)

Features

new /orgs/{org}/organization-roles/{role_id}/teams and /orgs/{org}/organization-roles/{role_id}/users endpoints (#594) (75aeaaf)

v9.1.5

9.1.5 (2023-12-04)

Bug Fixes

bump octokit/types minor version (#581) (65baec4)

v9.1.4

9.1.4 (2023-11-12)

Bug Fixes

deps: bump @octokit/types (#575) (27db9ae)

v9.1.3

9.1.3 (2023-11-09)

Bug Fixes

deps: bump @octokit/types (#574) (0940cb7)

v9.1.2

9.1.2 (2023-10-26)

... (truncated)

Commits

e1e4489 fix: ReDos regex vulnerability, reported by @DayShift (#660)
5b84386 fix(pkg): pin @octokit/core peerDependency to v5 (#599)
fa01f94 ci(action): update actions/add-to-project action to v0.6.0 (#598)
75aeaaf feat: new /orgs/{org}/organization-roles/{role_id}/teams and `/orgs/{org}/o...
54d6bcf chore(deps): update dependency prettier to v3.2.5
1bfa2f8 chore(deps): update dependency npm-run-all2 to v6
eb4a8fe chore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.0
11ef779 chore(deps): update dependency esbuild to ^0.20.0
2b6cc98 ci(action): update peter-evans/create-or-update-comment action to v4
d7c9de5 chore(deps): update dependency prettier to v3.2.4 (#588)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

Chores
- Updated internal dependencies to maintain compatibility and performance.

Note: This release contains no user-facing changes or new features.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

vercel · 2025-11-21T15:55:12Z

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Preview	Comments	Updated (UTC)
pipedream-docs	Ignored			Dec 2, 2025 5:50pm
pipedream-docs-redirect-do-not-edit	Ignored			Dec 2, 2025 5:50pm

coderabbitai · 2025-11-21T15:55:21Z

Walkthrough

A dependency version for @octokit/plugin-paginate-rest was updated from ^2.17.0 to ^9.2.2 in the components/github package.json file. No code modifications or public entity declarations were altered.

Changes

Cohort / File(s)	Summary
Dependency Update `components/github/package.json`	Updated `@octokit/plugin-paginate-rest` from `^2.17.0` to `^9.2.2`

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Note: While the diff itself is straightforward, verify that the major version bump (2.x → 9.x) does not introduce breaking changes affecting the components/github module's integration points or API usage.

Pre-merge checks and finishing touches

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The description is auto-generated by Dependabot and contains release notes, commit history, and compatibility information, but does not follow the repository's WHY template structure.	Add a 'WHY' section explaining the motivation for this dependency bump (e.g., security fix, bug fixes, or new features required).

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title directly and accurately describes the main change: bumping a specific dependency from one version to another.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch dependabot/npm_and_yarn/octokit/plugin-paginate-rest-9.2.2

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between deb8554 and aa232bb.

⛔ Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

components/github/package.json (1 hunks)

🧰 Additional context used

🧠 Learnings (1)

📚 Learning: 2024-12-12T19:23:09.039Z

Learnt from: jcortes
Repo: PipedreamHQ/pipedream PR: 14935
File: components/sailpoint/package.json:15-18
Timestamp: 2024-12-12T19:23:09.039Z
Learning: When developing Pipedream components, do not add built-in Node.js modules like `fs` to `package.json` dependencies, as they are native modules provided by the Node.js runtime.

Applied to files:

components/github/package.json

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (4)

GitHub Check: pnpm publish
GitHub Check: Lint Code Base
GitHub Check: Publish TypeScript components
GitHub Check: Verify TypeScript components

🔇 Additional comments (1)

components/github/package.json (1)

14-14: No action required. The upgrade to @octokit/plugin-paginate-rest@^9.2.2 is compatible with the current @octokit/core@^4.2.4 version. The @octokit/plugin-paginate-rest@9.2.2 peer dependency declares @octokit/core@>=2, which is satisfied by the installed version. Additionally, v9.2.2 is a security patch that fixes a ReDoS vulnerability in the paginate iterator with no breaking changes, and the existing code usage patterns remain fully compatible.

Likely an incorrect or invalid review comment.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

pipedream-component-development · 2025-11-21T15:55:25Z

Thank you so much for submitting this! We've added it to our backlog to review, and our team has been notified.

pipedream-component-development · 2025-11-21T15:55:26Z

Bumps [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) from 2.21.3 to 9.2.2. - [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases) - [Commits](octokit/plugin-paginate-rest.js@v2.21.3...v9.2.2) --- updated-dependencies: - dependency-name: "@octokit/plugin-paginate-rest" dependency-version: 9.2.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 21, 2025

adolfo-pd added the User submitted Submitted by a user label Nov 21, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/octokit/plugin-paginate-rest-9.2.2 branch from 189ddaa to aa232bb Compare December 2, 2025 17:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2 #19184

Bump @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2 #19184

dependabot bot commented on behalf of github Nov 21, 2025 •

edited

Loading

Uh oh!

vercel bot commented Nov 21, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Nov 21, 2025 •

edited

Loading

Uh oh!

pipedream-component-development commented Nov 21, 2025

Uh oh!

pipedream-component-development commented Nov 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Bump @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2 #19184

Are you sure you want to change the base?

Bump @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2 #19184

Conversation

dependabot bot commented on behalf of github Nov 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v9.2.2

9.2.2 (2025-02-15)

Bug Fixes

v9.2.1

9.2.1 (2024-03-01)

Bug Fixes

v9.2.0

9.2.0 (2024-02-22)

Features

v9.1.5

9.1.5 (2023-12-04)

Bug Fixes

v9.1.4

9.1.4 (2023-11-12)

Bug Fixes

v9.1.3

9.1.3 (2023-11-09)

Bug Fixes

v9.1.2

9.1.2 (2023-10-26)

Summary by CodeRabbit

Uh oh!

vercel bot commented Nov 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai bot commented Nov 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Pre-merge checks and finishing touches

Uh oh!

pipedream-component-development commented Nov 21, 2025

Uh oh!

pipedream-component-development commented Nov 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependabot bot commented on behalf of github Nov 21, 2025 •

edited

Loading

vercel bot commented Nov 21, 2025 •

edited

Loading

coderabbitai bot commented Nov 21, 2025 •

edited

Loading