Skip to content

chore(deps-dev): remove unused @octokit/core and @octokit/plugin-paginate-rest - #347

Merged
eFAILution merged 1 commit into
betafrom
chore/remove-unused-octokit
Oct 19, 2026
Merged

eFAILution merged 1 commit into
betafrom
chore/remove-unused-octokit

Conversation

@eFAILution

Copy link
Copy Markdown
Owner

Summary

  • Removes @octokit/core and @octokit/plugin-paginate-rest from devDependencies. Nothing in the repo imports either one; both date back to the initial commit.
  • Replaces chore(deps-dev): bump @octokit/plugin-paginate-rest from 15.0.0 to 16.0.0 #342, which would have bumped @octokit/plugin-paginate-rest to 16.0.0 for no benefit.
  • release-it keeps its own @octokit/rest tree, so releases are unaffected.

Change Type

  • feat
  • fix
  • refactor
  • docs
  • test
  • chore

Context

User-facing impact

  • None. Neither package is bundled into the VSIX.

Validation

Local checks

  • npm ci clean, lockfile regenerated with npm 10 to match CI
  • npm run compile
  • npm test: 525 passing
  • npm run lint
  • npx release-it --version runs and @octokit/rest still resolves

Breaking Changes

  • No breaking changes

Risk and Rollback

  • Main risks: none expected. Rollback is a revert.

Release Notes Draft

  • Internal: drop two unused dev dependencies.

Checklist

  • Branch is up to date with target branch
  • Commit messages follow conventional commits
  • No secrets or tokens in code, logs, screenshots, or test fixtures

@github-actions

github-actions Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

🛡️ Security Hardening Pipeline Results

Branch: chore/remove-unused-octokit
Commit: a8330a9

Workflow Run: 570
Branch: chore/remove-unused-octokit
Commit: a8330a9

Scan Status

Scanner Status
bandit ⏭️ skipped
checkov ⏭️ skipped
clamav ⏭️ skipped
codeql ✅ PASS
container ⏭️ skipped
dependency-review ✅ PASS
gitleaks ✅ PASS
grype ⏭️ skipped
lint ⏭️ skipped
opengrep ⏭️ skipped
osv ✅ PASS
sbom ⏭️ skipped
supply-chain ⏭️ skipped
trivy-container ⏭️ skipped
trivy-iac ⏭️ skipped
zap ⏭️ skipped

✅ All enabled scanners completed successfully.

Summaries Collected: 4

Scanner Results

🔬 CodeQL SAST (Javascript)

Status: Completed

Findings Summary

Critical High Medium Low Total
0 0 0 0 0

No security findings detected for Javascript.

Artifacts: CodeQL Reports (Javascript)

🔗 Dependency Review

Status: ✅ No issues found

No vulnerable or license-violating dependencies detected in this PR.
📋 View full report

🔑 Gitleaks (Secrets)

No 🔑 Gitleaks (Secrets) findings summary was produced.

📦 OSV (Dependencies)

No 📦 OSV (Dependencies) findings summary was produced.


Generated by Argus


Generated by Argus

…nate-rest

Neither package is imported anywhere in the repo. Both date back to the
initial commit. release-it keeps its own @octokit/rest dependency tree.
@eFAILution
eFAILution force-pushed the chore/remove-unused-octokit branch from 6d37fee to 8e87e55 Compare October 19, 2026 14:19
@eFAILution
eFAILution merged commit 15f474e into beta Oct 19, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant