chore(deps-dev): bump the dev-dependencies group across 1 directory with 19 updates - #1882
Conversation
…ith 19 updates Bumps the dev-dependencies group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@eslint-react/eslint-plugin](https://github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin) | `5.10.4` | `5.18.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.0` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.3` | `10.0.4` | | [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) | `10.2.0` | `10.2.1` | | [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.8.0` | | [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.6` | | [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.5` | `25.0.8` | | [stylelint](https://github.com/stylelint/stylelint) | `17.14.0` | `17.14.1` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.11` | `29.4.12` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.1` | `8.65.0` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.7` | `5.6.8` | | [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.109.0` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.1.0` | `7.2.1` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.6` | `6.0.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.1` | | [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.10.1` | `3.10.2` | | [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.10.1` | `3.10.2` | Updates `@eslint-react/eslint-plugin` from 5.10.4 to 5.18.0 - [Release notes](https://github.com/Rel1cx/eslint-react/releases) - [Changelog](https://github.com/Rel1cx/eslint-react/blob/main/CHANGELOG.md) - [Commits](https://github.com/Rel1cx/eslint-react/commits/v5.18.0/plugins/eslint-plugin) Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.0 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.9.1...v7.0.0) Updates `concurrently` from 10.0.3 to 10.0.4 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v10.0.3...v10.0.4) Updates `conventional-changelog-conventionalcommits` from 10.2.0 to 10.2.1 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v10.2.1/packages/conventional-changelog-conventionalcommits) Updates `eslint` from 10.6.0 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.6.0...v10.8.0) Updates `prettier` from 3.9.4 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.4...3.9.6) Updates `semantic-release` from 25.0.5 to 25.0.8 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v25.0.5...v25.0.8) Updates `stylelint` from 17.14.0 to 17.14.1 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@17.14.0...17.14.1) Updates `ts-jest` from 29.4.11 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.11...v29.4.12) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `typescript-eslint` from 8.62.1 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint) Updates `html-webpack-plugin` from 5.6.7 to 5.6.8 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v5.6.7...v5.6.8) Updates `webpack` from 5.108.4 to 5.109.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.4...v5.109.0) Updates `webpack-cli` from 7.1.0 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.1.0...webpack-cli@7.2.1) Updates `webpack-dev-server` from 5.2.6 to 6.0.0 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.6...v6.0.0) Updates `@playwright/test` from 1.61.1 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.0) Updates `@types/node` from 26.1.0 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@docusaurus/core` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus) Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic) --- updated-dependencies: - dependency-name: "@docusaurus/core" dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@docusaurus/preset-classic" dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@eslint-react/eslint-plugin" dependency-version: 5.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@playwright/test" dependency-version: 1.62.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@testing-library/jest-dom" dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: concurrently dependency-version: 10.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: conventional-changelog-conventionalcommits dependency-version: 10.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: html-webpack-plugin dependency-version: 5.6.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: semantic-release dependency-version: 25.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: stylelint dependency-version: 17.14.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: typescript-eslint dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: webpack dependency-version: 5.109.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: webpack-cli dependency-version: 7.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: webpack-dev-server dependency-version: 6.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
c4f737e to
b0c26de
Compare
…sqlite3 13 Closes the two security alerts Dependabot structurally cannot fix (its security PRs target `main`, which requires the `Require head branch == beta` check). - shell-quote 1.8.4 -> 1.9.0 (quadratic-complexity DoS in parse(), high, dev-only), fixed upstream via concurrently 10.0.4 rather than an override. Supersedes #1869. - js-yaml 4.2.0 -> 4.3.0 (merge-key quadratic CPU, high, dev-only); the root `overrides` entry was itself pinning the vulnerable version. - Dependabot ignore rules for `typescript` majors (ts-jest peer is `>=4.3 <7`, breaks `npm ci`, #1882) and `better-sqlite3` majors (v13 dropped prebuild-install, breaks the Docker build, #1889). npm audit: 10 findings (6 high) -> 7 (3 high).
|
Status update — this PR is still blocked, and cannot self-heal yet. Why it fails: it bumps What changed: #1927 (merged to Caveat: Dependabot reads its config from the default branch, so that ignore rule only takes effect once Recommended: leave it open and let Dependabot regenerate it after the next promotion, or close it and let the Monday schedule open a fresh one. Either way, no dev-dependency updates are lost. |
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the dev-dependencies group with 19 updates in the / directory:
5.10.45.18.06.9.17.0.010.0.310.0.410.2.010.2.110.6.010.8.03.9.43.9.625.0.525.0.817.14.017.14.129.4.1129.4.126.0.37.0.28.62.18.65.05.6.75.6.85.108.45.109.07.1.07.2.15.2.66.0.01.61.11.62.026.1.026.1.13.10.13.10.23.10.13.10.2Updates
@eslint-react/eslint-pluginfrom 5.10.4 to 5.18.0Release notes
Sourced from @eslint-react/eslint-plugin's releases.
... (truncated)
Changelog
Sourced from @eslint-react/eslint-plugin's changelog.
... (truncated)
Commits
560237arelease: 5.18.0f1ed21cchore(deps): bump tsdown, react, next, and postcss85e5761chore: revert #1919, keep nub solely as vite-node replacementac837cffix: pass --pack npm to publint so lint:publish works without pnpm284d70dchore: replace pnpm, node --run, and vite-node with nub (#1919)3026dc6release: 5.17.3e0b4db2release: 5.17.2bcff9fftest: extract shared test helpers into@local/testkit(#1915)b421bfarelease: 5.17.11364c9echore(deps): bump tsdown to 0.22.8, tsl-dx to 0.13.3, import-integrity-lint t...Updates
@testing-library/jest-domfrom 6.9.1 to 7.0.0Release notes
Sourced from @testing-library/jest-dom's releases.
Commits
1e39089feat: add toContainAnyBy* and toContainOneBy* query matcherscae44dffeat: add toContainAnyBy* and toContainOneBy* query matchers (#731)55c07ceci: switch release to npm trusted publishing (#726)213256fdocs: move toHaveSelection from the deprecated section (#717)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@testing-library/jest-domsince your current version.Updates
concurrentlyfrom 10.0.3 to 10.0.4Release notes
Sourced from concurrently's releases.
Commits
2524b6510.0.41080199fix: avoid kill timeout exit delays (#601)e668211ci: publish to latest only on npm163b60fchore: sync@types/nodewith current min versionbcde2f5chore: remove@types/shell-quote49f7eb4deps: upgrade shell-quote to 1.9.0 (#599)Updates
conventional-changelog-conventionalcommitsfrom 10.2.0 to 10.2.1Release notes
Sourced from conventional-changelog-conventionalcommits's releases.
Changelog
Sourced from conventional-changelog-conventionalcommits's changelog.
Commits
b82a462chore(release): monorepo release (#1500)04796e2fix: point package homepages and docs to documentation websiteUpdates
eslintfrom 10.6.0 to 10.8.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
749dfed10.8.04bd0d75Build: changelog update for 10.8.04fbf46dtest: pinwebpackversion to 5.108.4 (#21137)6ddf858docs: fix broken Specify Parser Options anchor link (#21106)784dfbedocs: Clarifyno-eq-nulldescription (#21120)6b8d2f7fix: escape reserved characters in rule id inhtmlformatter (#21129)2d063e2chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)eccbe7btest: add error locations tono-class-assign(#21123)2fee9bbfeat: exportConfigObjectfromeslint/config(#21082)e7d1e43ci: bump actions/setup-go from 6 to 7 (#21118)Updates
prettierfrom 3.9.4 to 3.9.6Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
... (truncated)
Commits
8f0c950Release 3.9.6e910764Update changelogec3f1c7Update typescript-eslint to v8.65.0 (#19675)73d2efcUpdate Yuku parser to v0.7.0 (#19664)dd5e24ePreserve quotes forTSMethodSignaturenodes namednew(#19621)c03ab4eUpdate dependency eslint-plugin-unicorn to v72 (#19633)b74dd53Update Yuku parser to v0.6.5 (#19654)f1b594eUpdate dependency eslint-plugin-simple-import-sort to v14 (#19655)0d9dfb6Update Yuku parser to v0.6.4 (#19650)3bbb815Removetypescript-onlydirectory (#19636)Updates
semantic-releasefrom 25.0.5 to 25.0.8Release notes
Sourced from semantic-release's releases.
Commits
1bfdc52fix: mask sensitive environment variables and improve commit handling (#4252)0a60004fix: handle potential null values in commit message and gitTags trimmingf121540fix: prevent template evaluation syntax in branch expansion and tag formatting973d763fix(hide-sensitive): mask key/auth/webhook env vars474e5a3ci(action): update github/codeql-action action to v4.37.1 (#4254)fc9382cdocs: fix issue template links (#4251)e34c52dci(action): update actions/setup-node action to v7 (#4250)8020ec6ci(action): update actions/setup-node action to v6.5.0 (#4249)956baf4chore(deps): update npm to v12.0.1 (#4247)c46dbdafix: argument Injection via repositoryUrl in package.json (#4245)Updates
stylelintfrom 17.14.0 to 17.14.1Release notes
Sourced from stylelint's releases.
Changelog
Sourced from stylelint's changelog.
Commits
cd66b03Release 17.14.1 (#9397)7c30fc5Refactor to replacevoidwithundefinedin union types (#9395)57c8d0eFixrule-empty-line-beforefalse positives for shared-line comments with `e...226f10aBump@vscode/windows-process-treefrom 0.7.0 to 0.8.0 (#9392)13c3c5cBump globby from 16.2.0 to 16.2.1 (#9393)6dafcf5Document unknown-effort contributions (#9391)54c2bc8Fix test for Yarn PnP with npm v12 (#9390)3e7eb56Fixdeclaration-block-no-redundant-longhand-propertiesinvalidbackground...438196eBump postcss from 8.5.15 to 8.5.16 in the postcss group across 1 directory (#...c1e1489Fixquietoption to suppressreport*warning reports (#9387)Updates
ts-jestfrom 29.4.11 to 29.4.12Release notes
Sourced from ts-jest's releases.
Changelog
Sourced from ts-jest's changelog.
Commits
3f05625chore(release): 29.4.12df28b27docs: clarify TypeScript version prerequisitesc8a614adocs: mention TypeScript 7 setup in README06c79d4fix: address TypeScript 7 review feedbackf107460docs: explain TypeScript 7 compatibility setup3388227test(e2e): add TypeScript compatibility matrix891dc73fix(compiler): support TypeScript 7 compatibility aliaseseb135ebbuild(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 in /examplesd5d80a3ci: pin google osv scan action at v2.3.56bf293fbuild(deps): bump shell-quote from 1.8.4 to 1.10.0 in /websiteUpdates
typescriptfrom 6.0.3 to 7.0.2Commits
Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.
Updates
typescript-eslintfrom 8.62.1 to 8.65.0Release notes
Sourced from typescript-eslint's releases.
... (truncated)
Changelog
Sourced from typescript-eslint's changelog.
Commits
63ba81bchore(release): publish 8.65.0eaf4576feat: add warning when TS 7 is detected (#12529)0d06406chore: add attw validation to repo (#12437)c2386e4chore(deps): update dependency prettier to v3.9.5 (#12486)414d9abchore(release): publish 8.64.0290cf6cchore(release): publish 8.63.0Updates
html-webpack-pluginfrom 5.6.7 to 5.6.8Changelog
Sourced from html-webpack-plugin's changelog.
Commits
cf9c701chore(release): 5.6.88057b14fix: extend@rspack/corepeer dependency range (#1893)Updates
webpackfrom 5.108.4 to 5.109.0Release notes
Sourced from webpack's releases.