Bump @humanfs/node from 0.16.6 to 0.16.8

[dependabot]

Bumps @humanfs/node from 0.16.6 to 0.16.8.

Release notes

Sourced from @​humanfs/node's releases.

node: v0.16.8

0.16.8 (2026-04-17)

Bug Fixes

• Include type dependencies at runtime (956ce7a), closes #145

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​humanfs/core bumped from ^0.19.1 to ^0.19.2

node: v0.16.7

0.16.7 (2024-11-27)

Bug Fixes

• Add directory to package.json (f691b60)

Changelog

Sourced from @​humanfs/node's changelog.

0.16.8 (2026-04-17)

Bug Fixes

• Ensure symlinks are copied as symlinks in copy() and copyAll() (22bbaa44)
• Include type dependencies at runtime (956ce7a), closes #145

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​humanfs/core bumped from ^0.19.1 to ^0.19.2

0.16.7 (2024-11-27)

Bug Fixes

• Add directory to package.json (f691b60)

Commits

• e96070e chore: release main (#146)
• 22bbaa4 Merge commit from fork
• 956ce7a fix: Include type dependencies at runtime
• 257b7b5 chore: release main (#142)
• f691b60 fix: Add directory to package.json
• 7b81d9a chore(deps): Upgrading retry dependency in node package. (#140)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[fossabot]

⏳ Analysis Queued

Your fossabot analysis was queued at 2026-09-02 19:50:15 UTC. We'll start as soon as a worker picks it up.

---

fossabot will update this comment as the analysis progresses.

[fossabot]

App impact analysis skipped — out of credits

Breaking change detection completed but more credits are needed to enable usage detection, impact analysis, fix suggestions, and get your final upgrade determination.

@humanfs/node 0.16.6 → 0.16.8

We found 1 breaking change.

• copy() method signature changed from synchronous to async - now returns a Promise and requires consumers to use await (v0.16.8, package source)

View more changes for @humanfs/node

• Add directory to package.json (f691b60) (v0.16.6-0.16.7, release notes)
• Include type dependencies at runtime (956ce7a), closes #145 (v0.16.7-0.16.8, release notes)
• The following workspace dependencies were updated (v0.16.7-0.16.8, release notes)
• dependencies (v0.16.7-0.16.8, release notes)
• Added symbolic link support to copy() method - symbolic links are now preserved during file copying instead of being followed (v0.16.8, package source)
• Added symbolic link support to copyAll() method - symbolic links are now properly handled in directory copying operations (v0.16.8, package source)
• Updated @​humanwhocodes/retry dependency from ^0.3.0 to ^0.4.0 (v0.16.7, package source)
• Added 'directory' field to repository configuration pointing to 'packages/node' (v0.16.7, package source)
• Moved @​humanfs/types from devDependencies to dependencies (v0.16.8, package source)
• Updated @​humanfs/core dependency from ^0.19.1 to ^0.19.2 (v0.16.8, package source)

---

You have no credits left. Reach out to autoupdates@fossa.com and we'll top you up.

Credits are consumed when dependency updates are reviewed or proposed.

Re-run with @fossabot analyze.

Mute out-of-credit notifications until next month (expires 2026-10-01T00:00:00.000Z)

[fossabot]

App impact analysis skipped — out of credits

Breaking change detection completed but more credits are needed to enable usage detection, impact analysis, fix suggestions, and get your final upgrade determination.

@humanfs/node 0.16.6 → 0.16.8

We found 1 breaking change.

• copy() method signature changed from synchronous to async - now returns a Promise and requires consumers to use await (v0.16.8, package source)

View more changes for @humanfs/node

• Add directory to package.json (f691b60) (v0.16.6-0.16.7, release notes)
• Include type dependencies at runtime (956ce7a), closes #145 (v0.16.7-0.16.8, release notes)
• The following workspace dependencies were updated (v0.16.7-0.16.8, release notes)
• dependencies (v0.16.7-0.16.8, release notes)
• Added symbolic link support to copy() method - symbolic links are now preserved during file copying instead of being followed (v0.16.8, package source)
• Added symbolic link support to copyAll() method - symbolic links are now properly handled in directory copying operations (v0.16.8, package source)
• Updated @​humanwhocodes/retry dependency from ^0.3.0 to ^0.4.0 (v0.16.7, package source)
• Added 'directory' field to repository configuration pointing to 'packages/node' (v0.16.7, package source)
• Moved @​humanfs/types from devDependencies to dependencies (v0.16.8, package source)
• Updated @​humanfs/core dependency from ^0.19.1 to ^0.19.2 (v0.16.8, package source)

---

You have no credits left. Reach out to autoupdates@fossa.com and we'll top you up.

Credits are consumed when dependency updates are reviewed or proposed.

Re-run with @fossabot analyze.

Mute out-of-credit notifications until next month (expires 2026-10-01T00:00:00.000Z)

[depintel-bot]

🟢 Ready to merge

🟢 Ready to merge

Lapisa checked (lockfile) - → - against the interfaces this repository uses; no affected usage was found.

View evidence and analysis receipt

depintel verdict: safe

Package: (lockfile) - -> -

_{review lockface-a49a1c81-clean · engine 7657149}

Impact: NONE found — OK to merge on this evidence.

lock-only refresh: no phantom-direct hits — indirect resolution moves are the declared deps' maintainers' responsibility face (reviewed law); lock locations added 1 / removed 1 / modified 2

additional: lock location inventory

• modified: node_modules/@humanfs/core
• modified: node_modules/@humanfs/node
• added: node_modules/@humanfs/types
• removed: node_modules/@humanfs/node/node_modules/@humanwhocodes/retry

Basis: lock-only refresh: no phantom-direct hits — indirect resolution moves are the declared deps' maintainers' responsibility face (reviewed law); lock locations added 1 / removed 1 / modified 2

additional: lock location inventory

• modified: node_modules/@humanfs/core
• modified: node_modules/@humanfs/node
• added: node_modules/@humanfs/types
• removed: node_modules/@humanfs/node/node_modules/@humanwhocodes/retry

Run: 20260902T195450Z-dfe6319c96e0

---

Evidence is static analysis plus release evidence available to depintel at run time. This advisory verdict is not a substitute for maintainer review.