[Codependence] update dependencies

[yowainwright]

Dependency updates

Auto-generated by [codependence][1] using [create-pull-request][2]
[1]: https://github.com/yowainwright/build-lambda-layer
[2]: https://github.com/peter-evans/create-pull-request

[greptile-apps]

Greptile Summary

Auto-generated dependency update PR bumping 7 packages. Most updates are minor/patch dev dependency bumps (@commitlint/* 20.4.3→20.5.0, @types/node 25.3.5→25.5.0, @typescript-eslint/* 8.56.1→8.57.0). The notable change is the production dependency zip-a-folder jumping from 4.0.4 to 6.1.0 (two major versions). The project uses the basic zip(src, dest) API which remains backward-compatible across these versions.

• zip-a-folder 4.0.4 → 6.1.0: Major version bump on a production dependency. The core zip() function signature used in src/script.ts is unchanged, but the internals were rewritten with native Node.js compression. Worth verifying that zip output works correctly for Lambda layer deployment.
• @commitlint/cli, @commitlint/config-conventional, @commitlint/prompt-cli 20.4.3 → 20.5.0: Minor dev tooling bump.
• @types/node 25.3.5 → 25.5.0: Type definition update (dev only).
• @typescript-eslint/eslint-plugin, @typescript-eslint/parser 8.56.1 → 8.57.0: Minor linting tooling bump.

Confidence Score: 4/5

• This PR is safe to merge with low risk — the core zip API is backward-compatible and all other changes are minor dev dependency bumps.
• Score of 4 reflects that most changes are routine minor/patch dev dependency updates. The zip-a-folder major version jump (4→6) on a production dependency is the only area of note, but the API surface used by this project (basic zip function) is stable across versions. Recommend running the test suite to confirm zip output is correct.
• No files require special attention, though it would be prudent to verify zip-a-folder 6.1.0 produces valid zip output for Lambda layers.

Important Files Changed

Filename	Overview
package.json	Updates 7 dependencies: zip-a-folder 4.0.4→6.1.0 (major bump, production dep), @commitlint/* 20.4.3→20.5.0, @types/node 25.3.5→25.5.0, @typescript-eslint/* 8.56.1→8.57.0 (all dev deps). The zip-a-folder major version jump (skipping v5) is notable but the core API used (import { zip }) remains compatible.
pnpm-lock.yaml	Lockfile updated to reflect the dependency version bumps in package.json. Resolution hashes and peer dependency references updated consistently across ~1293 changed lines.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[codependence auto-update] --> B[package.json]
    B --> C{Dependency Changes}
    C --> D["zip-a-folder\n4.0.4 → 6.1.0\n(production)"]
    C --> E["@commitlint/*\n20.4.3 → 20.5.0\n(dev)"]
    C --> F["@types/node\n25.3.5 → 25.5.0\n(dev)"]
    C --> G["@typescript-eslint/*\n8.56.1 → 8.57.0\n(dev)"]
    B --> H[pnpm-lock.yaml]
    D --> I["src/script.ts\nimport { zip } from 'zip-a-folder'\nAPI unchanged"]

Loading

_{Last reviewed commit: 326241b}