Repository navigation
chore(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates - #49
dependabot[bot] wants to merge 1 commit into
Conversation
…ith 8 updates Bumps the dev-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `2.30.0` | `3.0.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.6.0` | `26.6.5` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.58.2` | `8.72.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.58.2` | `8.72.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.1` | `10.13.0` | | [tsup](https://github.com/egoist/tsup) | `8.5.1` | `9.0.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.4` | `5.0.5` | Updates `@changesets/cli` from 2.30.0 to 3.0.3 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli) Updates `@types/node` from 25.6.0 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.58.2 to 8.72.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.58.2 to 8.72.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/parser) Updates `eslint` from 9.39.1 to 10.13.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.1...v10.13.0) Updates `tsup` from 8.5.1 to 9.0.0 - [Release notes](https://github.com/egoist/tsup/releases) - [Commits](egoist/tsup@v8.5.1...v9.0.0) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) Updates `vitest` from 4.1.4 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) --- updated-dependencies: - dependency-name: "@changesets/cli" dependency-version: 3.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: eslint dependency-version: 10.13.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: tsup dependency-version: 9.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 61b425b714
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| specifier: ^3.0.3 | ||
| version: 3.0.3 |
There was a problem hiding this comment.
Retain the lockfile override metadata
The regenerated lockfile drops the root overrides entry while package.json still configures glob@>=10.2.0 <10.5.0. In a clean checkout, pnpm install --frozen-lockfile now exits with ERR_PNPM_LOCKFILE_CONFIG_MISMATCH; both .github/workflows/publish.yml and .github/workflows/changeset-bot.yml use that command, so their jobs stop during dependency installation. Regenerate the lockfile while preserving the configured override.
Useful? React with 👍 / 👎.
| "devDependencies": { | ||
| "@changesets/cli": "^2.30.0", | ||
| "@types/node": "^25.6.0", | ||
| "@changesets/cli": "^3.0.3", |
There was a problem hiding this comment.
Keep the release CLI compatible with Node 20
The version-and-publish workflow explicitly selects Node 20 in .github/workflows/publish.yml before running pnpm version-packages, but @changesets/cli@3.0.3 declares support only for ^22.11 || ^24 || >=26 in this lockfile. Once the frozen-lockfile issue is corrected, the release job would invoke the new CLI on an unsupported runtime; either retain Changesets 2 or update the workflow's Node version.
Useful? React with 👍 / 👎.
| "vitest": "^4.1.4" | ||
| "eslint": "^10.13.0", | ||
| "tsup": "^9.0.0", | ||
| "typescript": "^7.0.2", |
There was a problem hiding this comment.
Use a TypeScript version supported by the ESLint parser
The selected @typescript-eslint/parser@8.72.0 and ESLint plugin both declare a TypeScript peer range of >=4.8.4 <6.1.0, while this change installs TypeScript 7.0.2. Consequently the repository's eslint.config.js runs the parser with an explicitly unsupported compiler API, producing an invalid peer combination and risking incorrect parsing or lint failures; keep TypeScript within the supported range or upgrade the TypeScript-ESLint packages to a release that supports 7.x.
Useful? React with 👍 / 👎.
Bumps the dev-dependencies group with 8 updates in the / directory:
2.30.03.0.325.6.026.6.58.58.28.72.08.58.28.72.09.39.110.13.08.5.19.0.05.9.37.0.24.1.45.0.5Updates
@changesets/clifrom 2.30.0 to 3.0.3Release notes
Sourced from @changesets/cli's releases.
... (truncated)
Changelog
Sourced from @changesets/cli's changelog.
... (truncated)
Commits
c9269c0Version Packages (#2291)ca9d110Fix pnpm 10 publishing with npm 12 (#2276)7be7fdeBuild(deps): Bump the production-dependencies group across 1 directory with 6...b430ce0Move e2e tests to an on-demand workspace (#2275)93314a8test: add happy path tests foradd(#2289)d13a39etest: use inline snapshots for publish plan tests (#2284)d7e4a2dVersion Packages (#2266)68affeeUpgrade to Vitest 5 (#2281)5eeb012Build(deps): Bump human-id in the production-dependencies group (#2279)a0a4dc6Add review message on pre exit (#2270)Updates
@types/nodefrom 25.6.0 to 26.6.5Commits
Updates
@typescript-eslint/eslint-pluginfrom 8.58.2 to 8.72.0Release notes
Sourced from @typescript-eslint/eslint-plugin's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/eslint-plugin's changelog.
... (truncated)
Commits
a4c2603chore(release): publish 8.72.0c6eb98cfeat(eslint-plugin): [await-thenable] addallowMixedPromiseArraysoption (#...b382b74fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...79edd89fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...e7d57ddfix(eslint-plugin): [require-array-sort-compare] check tuples (#13058)2d107aefix(eslint-plugin): use isTypeLiteralType instead of type.isLiteral() to incl...e4695b3feat(eslint-plugin): lazy load rules (#13010)a1a912bfix(eslint-plugin): [no-deprecated] report deprecated properties in object li...1edc975fix(eslint-plugin): [prefer-readonly-parameter-types] check where allowed typ...61cb700chore: fix alleslint-plugin-internal/no-multiple-lines-of-errors(#12893)Updates
@typescript-eslint/parserfrom 8.58.2 to 8.72.0Release notes
Sourced from @typescript-eslint/parser's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/parser's changelog.
... (truncated)
Commits
a4c2603chore(release): publish 8.72.07488d68chore(release): publish 8.71.2d57b8dachore(release): publish 8.71.18695664chore(release): publish 8.71.023d38cechore(release): publish 8.70.17ee7608chore(release): publish 8.70.09a6e546chore(release): publish 8.69.08f4e00achore(release): publish 8.68.055f6d5dchore: enable source maps (#12677)20a261fchore(release): publish 8.67.0Updates
eslintfrom 9.39.1 to 10.13.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
4637f9810.13.096df05cBuild: changelog update for 10.13.04783a68docs: Update READMEb59d889chore: update github/codeql-action action to v4.38.3 (#21412)95e51a0ci: re-enable@typescript-eslint/typescript-eslintin ecosystem tests (#21410)317fcb3chore: update ecosystem plugins (#21409)48d5cc4feat: report references inside IIFEs inno-use-before-define(#21238)43f0ac9docs: clarify parameter description ingetText(#21287)a39d9fbfeat: addglobalThistono-obj-calls(#21382)b92decfperf: skip no-redeclare scan for single-declaration variables (#21365)Maintainer changes
This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.
Updates
tsupfrom 8.5.1 to 9.0.0Release notes
Sourced from tsup's releases.
Commits
198479bchore: release v9.0.03079ea3feat(type): expose the Plugin type (#1264)13f68ebci: enable npm stage publishing380e94etest: fix failing testsb601adfchore: merge test lockfile into the root as a pnpm workspace00139a4chore: cleanup lockfile6cec950chore: build tsup with its own source via tsx6705d39chore: upgrade deps, replace source-map with source-map-jsa2c0810feat: upgrade esbuild & chokidar980525efix: removebaseUrlin tsconfig (#1390)Updates
typescriptfrom 5.9.3 to 7.0.2Release notes
Sourced from typescript's releases.
Commits
1e4744dMerge branch 'main' into ts7-releasea5a219cmicrosoft/typescript-go#4558ecfe30dUpdate status localization5de25b5Hide executable name in TypeScript statusd7ce74aShow bundled TypeScript version for packaged servers29be66aCorrect TS 7 release version to 7.0.2ed2bd1bMerge branch 'main' into ts7-release8873075Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...9427131Set up stable / nightly extension split, other prep (microsoft/typescript-go#...d4eaca5microsoft/typescript-go#4549Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.
Updates
vitestfrom 4.1.4 to 5.0.5Release notes
Sourced from vitest's releases.