Skip to content

chore(deps-dev): bump the development-dependencies group with 8 updates - #465

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-e77ba609a0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-e77ba609a0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 8 updates:

Package From To
@rushstack/eslint-config 4.4.0 4.8.0
@rushstack/heft 0.74.2 1.3.1
@rushstack/heft-node-rig 2.11.27 2.11.51
@types/node 24.2.0 26.6.2
eslint 9.32.0 10.11.0
mocha 11.7.1 12.0.2
typescript 5.9.2 7.0.2
webpack 5.104.1 5.111.1

Updates @rushstack/eslint-config from 4.4.0 to 4.8.0

Changelog

Sourced from @​rushstack/eslint-config's changelog.

4.8.0

Tue, 22 Sep 2026 17:35:41 GMT

Minor changes

  • Globally ignore build-output folders (lib, lib-*, dist, temp, coverage) so that generated output is not linted, which matters for tools that enumerate files from the ESLint configuration (ESLint's flat config does not respect .gitignore).

Patches

  • Update the eslint-plugin-tsdoc dependency to ~0.5.3.

4.7.0

Mon, 14 Sep 2026 22:42:32 GMT

Minor changes

  • Group the profile's type-aware rules into an exported typeAwareRules set and add a flat/without-type-information helper for linting files that are not part of the TypeScript program with only the non-type-aware rules.

Patches

  • Author the package in TypeScript (built to CommonJS via Heft). The existing subpath entry points are preserved via a package.json "exports" map and the compiled configuration is runtime-identical to the previous JavaScript.

4.6.6

Sat, 05 Sep 2026 00:15:08 GMT

Version update only

4.6.5

Thu, 20 Aug 2026 00:16:38 GMT

Version update only

4.6.4

Wed, 25 Feb 2026 21:39:42 GMT

Patches

  • Bump eslint-plugin-tsdoc to ~0.5.1 to mitigate CVE-2026-26996.
  • Bump @typescript-eslint/* dependencies to ~8.56.1.

4.6.3

Fri, 20 Feb 2026 00:15:04 GMT

Version update only

4.6.2

Thu, 19 Feb 2026 00:04:52 GMT

Patches

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​rushstack/eslint-config since your current version.


Updates @rushstack/heft from 0.74.2 to 1.3.1

Changelog

Sourced from @​rushstack/heft's changelog.

1.3.1

Tue, 22 Sep 2026 17:35:41 GMT

Version update only

1.3.0

Mon, 14 Sep 2026 22:42:32 GMT

Minor changes

  • Emit negotiated structured child output and diagnostics when Rush provides a reporter descriptor, while preserving standalone terminal behavior.

Patches

  • Recognize inherited reporter pipes on Windows while continuing to reject regular-file descriptors.

1.2.26

Sat, 05 Sep 2026 00:15:08 GMT

Version update only

1.2.25

Fri, 21 Aug 2026 15:16:34 GMT

Version update only

1.2.24

Thu, 20 Aug 2026 00:16:38 GMT

Version update only

1.2.23

Fri, 14 Aug 2026 00:18:07 GMT

Version update only

1.2.22

Tue, 21 Jul 2026 02:53:22 GMT

Version update only

1.2.21

Fri, 17 Jul 2026 00:15:59 GMT

Patches

  • Replace @override with the override keyword.

1.2.20

Thu, 16 Jul 2026 00:16:13 GMT

... (truncated)

Commits
  • 4444a90 Bump versions [skip ci]
  • 2e69104 Update changelogs [skip ci]
  • 6d669f1 Normalize the output folders to lib-commonjs, lib-dts, and lib-esm for ...
  • d61ddd6 Bump versions [skip ci]
  • bd434ef Update changelogs [skip ci]
  • 0b1bf0b Bump versions [skip ci]
  • 357886c Update changelogs [skip ci]
  • 6a8cc6f Bump versions [skip ci]
  • 3f3c718 Update changelogs [skip ci]
  • 3e188a5 Bump versions [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​rushstack/heft since your current version.


Updates @rushstack/heft-node-rig from 2.11.27 to 2.11.51

Changelog

Sourced from @​rushstack/heft-node-rig's changelog.

2.11.51

Tue, 22 Sep 2026 17:35:41 GMT

Version update only

2.11.50

Mon, 14 Sep 2026 22:42:32 GMT

Version update only

2.11.49

Sat, 05 Sep 2026 00:15:08 GMT

Version update only

2.11.48

Fri, 21 Aug 2026 15:16:34 GMT

Version update only

2.11.47

Thu, 20 Aug 2026 00:16:38 GMT

Patches

  • Update the default TypeScript library definitions to ES2022.
  • Expose ES2022 library definitions in the default TypeScript configuration.

2.11.46

Fri, 14 Aug 2026 00:18:07 GMT

Version update only

2.11.45

Tue, 21 Jul 2026 02:53:23 GMT

Version update only

2.11.44

Fri, 17 Jul 2026 00:15:59 GMT

Version update only

2.11.43

Thu, 16 Jul 2026 00:16:13 GMT

Version update only

2.11.42

Sat, 13 Jun 2026 00:16:19 GMT

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​rushstack/heft-node-rig since your current version.


Updates @types/node from 24.2.0 to 26.6.2

Commits

Updates eslint from 9.32.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))

... (truncated)

Commits
  • 3c0b7c6 10.11.0
  • 321f0a7 Build: changelog update for 10.11.0
  • 520dd77 perf: Implement fast paths in critical areas (#21210)
  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
  • 24310e3 chore: update ecosystem plugins (#21324)
  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.


Updates mocha from 11.7.1 to 12.0.2

Release notes

Sourced from mocha's releases.

v12.0.2

12.0.2 (2026-09-17)

🩹 Fixes

  • fail nested tests on beforeEach failure (#6292) (a75b43b)
  • give CLI reporter-option precedence over config file (#6331) (571110f)
  • propagate spec file path on parallel worker death (#6268) (55a544a)
  • use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342) (a652ff5)
  • watch existing dirs so first run starts armed (#6263) (f5c8aca)

📚 Documentation

🧹 Chores

v12.0.1

12.0.1 (2026-09-08)

... (truncated)

Changelog

Sourced from mocha's changelog.

12.0.2 (2026-09-17)

🩹 Fixes

  • fail nested tests on beforeEach failure (#6292) (a75b43b)
  • give CLI reporter-option precedence over config file (#6331) (571110f)
  • propagate spec file path on parallel worker death (#6268) (55a544a)
  • use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342) (a652ff5)
  • watch existing dirs so first run starts armed (#6263) (f5c8aca)

📚 Documentation

🧹 Chores

12.0.1 (2026-09-08)

🩹 Fixes

... (truncated)

Commits
  • 70db1c7 chore(main): release 12.0.2 (#6300)
  • 571110f fix: give CLI reporter-option precedence over config file (#6331)
  • a652ff5 fix: use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342)
  • a8309fd chore: stop auto-adding PRs to project (#6352)
  • 2668e71 chore: replace find-conflicts with improved smoke versions (#6344)
  • 6728030 chore: add folder for reproducing issues (#6330)
  • e7b7fe1 chore: exclude "v11.x" from "stale branch" workflow (#6338)
  • a923e25 Ping maintainers on stale branch review issues (#6326)
  • 633480c chore: fixup workflow perms in-job (#6327)
  • cd2a730 chore: set author to Mark Wiemer (#6305)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mocha since your current version.


Updates typescript from 5.9.2 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

... (truncated)

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates webpack from 5.104.1 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

... (truncated)

Commits
  • 5a10675 chore(release): new release (#22105)
  • 9c448c4 test: consolidate loose harness files under test/harness (#22163)
  • a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
  • db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
  • d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
  • 39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
  • 0835411 test: move suite drivers into test/templates (#22159)
  • b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
  • a774f10 test: define the webpack major instead of bundling package.json (#22160)
  • 4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@rushstack/eslint-config](https://github.com/microsoft/rushstack/tree/HEAD/eslint/eslint-config) | `4.4.0` | `4.8.0` |
| [@rushstack/heft](https://github.com/microsoft/rushstack/tree/HEAD/apps/heft) | `0.74.2` | `1.3.1` |
| [@rushstack/heft-node-rig](https://github.com/microsoft/rushstack/tree/HEAD/rigs/heft-node-rig) | `2.11.27` | `2.11.51` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.2.0` | `26.6.2` |
| [eslint](https://github.com/eslint/eslint) | `9.32.0` | `10.11.0` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.1` | `12.0.2` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `7.0.2` |
| [webpack](https://github.com/webpack/webpack) | `5.104.1` | `5.111.1` |


Updates `@rushstack/eslint-config` from 4.4.0 to 4.8.0
- [Changelog](https://github.com/microsoft/rushstack/blob/main/eslint/eslint-config/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@rushstack/ts-command-line_v4.8.0/eslint/eslint-config)

Updates `@rushstack/heft` from 0.74.2 to 1.3.1
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/heft/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@rushstack/heft-web-rig_v1.3.1/apps/heft)

Updates `@rushstack/heft-node-rig` from 2.11.27 to 2.11.51
- [Changelog](https://github.com/microsoft/rushstack/blob/main/rigs/heft-node-rig/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/HEAD/rigs/heft-node-rig)

Updates `@types/node` from 24.2.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 9.32.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.32.0...v10.11.0)

Updates `mocha` from 11.7.1 to 12.0.2
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.1...v12.0.2)

Updates `typescript` from 5.9.2 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.2...v7.0.2)

Updates `webpack` from 5.104.1 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.104.1...v5.111.1)

---
updated-dependencies:
- dependency-name: "@rushstack/eslint-config"
  dependency-version: 4.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@rushstack/heft"
  dependency-version: 1.3.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@rushstack/heft-node-rig"
  dependency-version: 2.11.51
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: mocha
  dependency-version: 12.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 28, 2026
KevinTCoughlin added a commit that referenced this pull request Oct 2, 2026
…ipt 7 (#466)

Grouped PRs now only carry minor/patch updates; majors get their own PRs
so one breaking bump doesn't block the rest. TypeScript majors are ignored
for now since 7.0 breaks the heft build (#465).


Claude-Session: https://claude.ai/code/session_01VrVRzYtNjoXCr4yDNQtTvx

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@KevinTCoughlin

Copy link
Copy Markdown
Collaborator

Superseded by #466: majors now open as individual PRs and TypeScript 7 is held, so Dependabot will regenerate this group.

@dependabot @github

dependabot Bot commented on behalf of github Oct 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

@dependabot @github

dependabot Bot commented on behalf of github Oct 2, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-e77ba609a0 branch October 2, 2026 23:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant