Skip to content

chore(deps-dev): bump knip from 5.88.1 to 6.37.0 - #72

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/knip-6.33.0
Closed

chore(deps-dev): bump knip from 5.88.1 to 6.37.0#72
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/knip-6.33.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps knip from 5.88.1 to 6.37.0.

Release notes

Sourced from knip's releases.

Release 6.37.0

  • fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @​RobHannay!
  • fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @​addielaruee!
  • Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)
  • Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)
  • Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)
  • Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)
  • Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)
  • Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)
  • Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)
  • Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @​bytedoe!

Release 6.36.0

  • Add @​tailwindcss/webpack as Tailwind plugin enabler (#2027) (b5ac0cf734dda3c6c6c51c817981dfc558b7c582) - thanks @​igas!
  • Fix Next.js Turbopack loader dependencies (23419b4edfd48796dd484fa880e1bad49a043d2e)
  • Explain ambiguous star exports in traces (#2025) (3c2c1a53f9c2b7ff3057a4e46761791979e0b09c) - thanks @​gioboa!
  • Fix eslintrc parserOptions.parser handling in ESLint plugin (#2028) (c79463cec81d09518eda325ec00e6f12327dea8d) - thanks @​bytedoe!
  • fix(compilers): require word boundary around import keyword (#2029) (68bbe51c39b564022b63942bc83cb570778cca00) - thanks @​thanadolps!
  • fix: recover from corrupt cache file (#2034) (30ff7568c84e0a6731ca634a52314228d23d1a2b) - thanks @​gioboa!
  • fix: fix trailing comma on dependency removal (#2033) (adfaf4f78878b6d55b0939a92d70a1fbb0ae1240) - thanks @​gioboa!
  • Document built-in compiler scope (a05e155276dad4ead16992580d17572cebf045e7)
  • Add babel, khan and oxc to projects and optimize svgs (1c26560b98bc3109e93d15761d02f089213bfb6c)
  • Add section to test preview packages & extension (d911c18385f0aa41f53653a2a15cc90a1e0251b8)
  • Fix shared info/exclude handling in linked Git worktrees (#2037) (c1f18d5a7d25fc5a614747bbcbd62d043457eb48) - thanks @​kenfdev!
  • Shard Node specs on Windows and enable Bun test parallelism (66e966b6edec4460b40b05847fefa9f90ee69068)
  • Add Varlock plugin support (#2000) (e4fbf46acff08e78370e72b142e795bd81f28561) - thanks @​Joehoel!
  • Apply NODE_OPTIONS inputs to package manager binaries (#2038) (c8df8a28e9a19484efe7097f984abc0c6556aff5) - thanks @​giaBaoJS!
  • Handle array form of import/resolver setting in ESLint plugin (#2041) (a80d386a80fdafc89c610d4887ec82184ac178db) - thanks @​bytedoe!
  • fix(node): add valueless Node CLI flags to boolean options (#2042) (4c6768501f7115a894d7ece9e5c32090b684cc6f) - thanks @​shoutoutuoadi325!
  • fix(typedoc): accept string form of plugin and theme options (#2043) (ce387b05c8f136546e860ec73e29557563c63afa) - thanks @​giaBaoJS!
  • Add textlint plugin (#2039) (532dab595fc9a910e320418dc0390222fb2d7478) - thanks @​anandghegde!
  • fix: Correctly resolve Vitest setupFiles from nested configs (#2040) (84a494334e125d229dc865893b21d69d0d201e85) - thanks @​CruseCtrl!
  • Add n8n to projects (3f756a7e70c4164d57a7dbbd58f3604afe4043e2)
  • Resolve re-export traces to their defining bindings (43b3f9bbd7701ab44fca0554908f7550fbe84649)
  • Show ambiguous, shadowed and converged exports (f1e97b998d80906f0cef3f5e3946833b7166cbdc)
  • Document export tracing and editor contention (0188e7da1a481c7f6493d50580dfa8a7ecdf8c72)
  • Resolve local extends files in eslintrc configs (#2044) (62b5bf5aef5e6d3fc4784a1b5ef9933d383609ea) - thanks @​bytedoe!
  • docs: link each page to its own OG image (#2045) (a85eb4e2aab46c3fa0813b1f1e13e93e134b8be7) - thanks @​bytedoe!
  • fix: fix language server bundled knip fallback (#2035) (882ba3abb0b99c2bfe3e13a241d889376fe87c4c) - thanks @​gioboa!

Release 6.35.1

  • Exit with code 2 when a plugin config file fails to load (#1947) (37b26426694380ef70ee45f63358faf63355a58d) - thanks @​WooWan!
  • Fix sponsorship income calculations (0d9cf344b8cc0104c06d11e2c78f3f01b1df548b)
  • Update sponsors page (2659063d87f558b4fc18369a4b143849eaa7543e)
  • Fix npm alias attribution under Yarn PnP (resolve #2024) (7be11aa4fd50b8a3d6e276f03efb450d6d142c26)

Release 6.35.0

  • fix: track pnpm workspace override catalogs (#1999) (c6497a18c6534ee914b27bb459d7778a7b93a914) - thanks @​gioboa!
  • fix: track spreads under string-literal keys (#2003) (9ce68ed42a3c22fa4f4711b06d6d80a0e7f2ba13) - thanks @​gioboa!
  • fix: don't flag a tag that suppresses member issues (#2004) (2e7d498cf1e53f0bbad5e16c335c5e1417432ffd) - thanks @​devYRPauli!

... (truncated)

Commits
  • 675c1b1 Release knip@6.37.0
  • 1269e98 Fix --format name resolution in the ESLint plugin (#2046)
  • 038ea17 Update dependencies
  • 4237010 Respect npx no-install flags before the executable
  • c1d7d75 Separate shell binary expectations from reporting exemptions (resolve #2022)
  • e67dfcb Correct binary provider metadata in Relay fixtures
  • 54af171 Preserve executable references across package manager commands
  • c5bdb69 Match binaries only to their actual dependency providers
  • 5b21dc9 fix: enable JSX in the config loader (#1959)
  • 06a68fc fix(graphql-codegen): mark near-operation-file outputs as entries, not the do...
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@dependabot
chore(deps-dev): bump knip from 5.88.1 to 6.37.0
c307951 
Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) from 5.88.1 to 6.37.0.
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.37.0/packages/knip)

---
updated-dependencies:
- dependency-name: knip
  dependency-version: 6.33.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump knip from 5.88.1 to 6.33.0 chore(deps-dev): bump knip from 5.88.1 to 6.37.0 Sep 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/knip-6.33.0 branch from c4ae07a to c307951 Compare September 24, 2026 13:14
bvisible added a commit that referenced this pull request Oct 8, 2026
@bvisible
fix(deps): clear the advisories published since beta.1
bfd3dd3 
Engine: @modelcontextprotocol/sdk 1.32.1, and npm audit fix for fast-uri,
ip-address, proxy-addr (critical, via express), smol-toml and
brace-expansion. knip 6 (Dependabot #72) brings its own micromatch fix; it no
longer pulls @types/node in, so the typecheck now declares it, and it reports
the operating-system tools the code starts, listed in knip.jsonc.

Interface: source-map-js. Desktop: undici, http-cache-semantics, fast-uri and
brace-expansion, with app-builder-lib aligned on electron-builder 26.17.0.
Eight moderate desktop findings remain, all sprintf-js under electron-builder's
download helper: there is no fixed release upstream, and none of it ships in
the application.

npm audit: 0 in the engine (dev included) and the interface, 0 high in the
desktop build. dist/ui rebuilt byte-identical.
@bvisible

bvisible commented Oct 8, 2026

Copy link
Copy Markdown
Owner

Not on main: knip 6 requires Node ^20.19 || >=22.12, and this branch's quality job still runs on Node 18, where it fails (it also stops pulling in @types/node, which the typecheck needs). The V4 branch (#80) already carries knip 6 with @types/node declared and the operating-system binaries listed in knip.jsonc; it reaches main with 4.0.0.

@bvisible bvisible closed this Oct 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/knip-6.33.0 branch October 8, 2026 08:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bvisible