[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
globals	17.13.0 → 17.14.0

---

Release Notes

sindresorhus/globals (globals)

v17.14.0

Compare Source

• Update globals (2026-11-01) (#​355) 7abfb5d

---

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	globals@​17.13.0 ⏵ 17.14.0			+1	-2

View full report

[JuliusHenke]

Renovate update review

Verdict: (a) Safe to merge as is.

• globals 17.13.0 → 17.14.0 is a dev-only dependency. It is used by ESLint config for global names, and the release only refreshes the data ("Update globals (2026-11-01)", release notes). There are no breaking changes, deprecations or API changes.
• The diff is limited to frontend/package.json and frontend/yarn.lock, with only the version and checksum for globals changed.
• deps.dev: published 2026-11-01, so it is past the 3-day age gate. MIT licence, not deprecated, no advisories, and the source repo is sindresorhus/globals. Socket checks passed.
• Extra local checks: yarn install --immutable and yarn lint both pass on the PR branch (exit 0, no lint errors).
• CI: frontend_build and the CodeQL javascript_typescript job were still running when I checked. The backend jobs were skipped because no backend files changed. Everything else was green.
• I pushed no commits.

---

Generated by Claude Code

[JuliusHenke]

Renovate update review

Verdict: (a) Safe to merge as is.

• globals 17.13.0 → 17.14.0 is a dev-only bump. The only release note is "Update globals (2026-11-01)", which is a data refresh of the global-name lists with no API change (v17.14.0, compare).
• The only usage in this repo is ...globals.browser in frontend/eslint.config.*, so the worst case is a slightly different set of known browser globals for the no-undef rule.
• Local checks on the PR head: yarn install --immutable succeeded and yarn lint passed with no findings.
• The change is package.json plus yarn.lock only. Following the dependencies skill for Renovate PRs, I did not repeat the full vetting. Socket reports 100 for supply chain security and 100 for vulnerabilities.
• CI at review time: Socket and GitGuardian are green. frontend_build and CodeQL JS/TS were still running. Backend jobs were skipped because no backend files changed.

No commits pushed.

---

Generated by Claude Code

[github-actions]

Visit the preview URL for this PR (updated for commit ed90510):

https://tormap-36f44--pr685-renovate-frontend-mi-axgqv0g8.web.app

_{(expires Thu, 05 Nov 2026 11:36:02 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: 0c1f71965de18e60b0e686b0d0356977fec090dc}