Skip to content

Bump the development-dependencies group across 1 directory with 9 updates - #133

Merged
bluwy merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-c841deb419
Sep 1, 2026
Merged

Bump the development-dependencies group across 1 directory with 9 updates#133
bluwy merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-c841deb419

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 9 updates in the / directory:

Package From To
@changesets/cli 3.0.0 3.0.1
@graphql-codegen/cli 7.2.0 7.3.1
@tsconfig/node22 22.0.5 22.0.6
@types/node 26.1.1 26.3.0
oxfmt 0.59.0 0.65.0
oxlint 1.74.0 1.80.0
publint 0.3.21 0.3.24
tsdown 0.22.12 0.22.14
vitest 4.1.10 4.1.11

Updates @changesets/cli from 3.0.0 to 3.0.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.1

Patch Changes

Changelog

Sourced from @​changesets/cli's changelog.

3.0.1

Patch Changes

Commits

Updates @graphql-codegen/cli from 7.2.0 to 7.3.1

Changelog

Sourced from @​graphql-codegen/cli's changelog.

7.3.1

Patch Changes

  • #10924 0c8f5ba Thanks @​eddeee888! - Fix profiler output not being written to the filesystem in watch mode (--profile --watch)

    The profiler trace was only written on the non-watch code path, after the watch-mode early return, so a profiled watch session never produced a codegen-*.json file.

    The profiler now writes a fresh trace file after the initial run and after every rebuild, with each file containing only that run's events. A failed rebuild does not produce a trace and its events are discarded so they don't leak into the next successful run.

    The Profiler now owns its own trace lifecycle:

    • a new clear() method starts a new trace
    • a new outputName property provides the filename for the current trace (null for the noop profiler)
    • filename generation was removed from CodegenContext

  • Updated dependencies [0c8f5ba]:

    • @​graphql-codegen/plugin-helpers@​7.2.1

7.3.0

Minor Changes

  • #10921 58cdb31 Thanks @​eddeee888! - Extend overwrite with overwrite.removeStaleFiles and overwrite.updateExistingFiles

    overwrite was being used to both remove stale files in watch mode and update existing files. Some plugins such as Server Preset may dynamically return files to write between watch runs (for performance purposes).

    The overwrite can now take an object with overwrite.removeStaleFiles and overwrite.updateExistingFiles fields to allow granular control over actions.

    This is not a breaking change because overwrite=true|false still works.

Patch Changes

  • Updated dependencies [58cdb31]:
    • @​graphql-codegen/plugin-helpers@​7.2.0
Commits

Updates @tsconfig/node22 from 22.0.5 to 22.0.6

Commits

Updates @types/node from 26.1.1 to 26.3.0

Commits

Updates oxfmt from 0.59.0 to 0.65.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.64.0] - 2026-08-18

🚀 Features

  • c07fe7c oxfmt: Support experimentalOperatorPosition (#25643) (leaysgur)

📚 Documentation

  • fed6681 oxfmt: Skip expanding overrides options (#25572) (leaysgur)

[0.62.0] - 2026-08-03

🐛 Bug Fixes

  • e6e584b oxfmt: Type jsdoc. enum options (#25008) (leaysgur)
Commits
  • 97e99b8 release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)
  • 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
  • c07fe7c feat(oxfmt): support experimentalOperatorPosition (#25643)
  • fed6681 docs(oxfmt): skip expanding overrides options (#25572)
  • c42d639 release(apps): oxlint v1.78.0 && oxfmt v0.63.0 (#25473)
  • 00f490d refactor(oxfmt,formatter): split sortImports validation and use type enum (...
  • 9a423f2 release(apps): oxlint v1.77.0 && oxfmt v0.62.0 (#25251)
  • e6e584b fix(oxfmt): type jsdoc. enum options (#25008)
  • 65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
  • 83abe3b release(apps): oxlint v1.75.0 && oxfmt v0.60.0 (#24713)
  • Additional commits viewable in compare view

Updates oxlint from 1.74.0 to 1.80.0

Release notes

Sourced from oxlint's releases.

oxlint v1.80.0 & oxfmt v0.65.0

Table of Contents

Oxlint v1.80.0

🚀 Features

  • 70c3e35 linter/typescript/no-confusing-non-null-assertion: Implement suggestion (#26012) (Mikhail Baev)

🐛 Bug Fixes

  • 17ae11c linter/oxc/double-comparisons: Handle grouped logical expressions (#26044) (camc314)
  • 8a353a7 linter/eslint/no-control-regex: Refine help message text (#25996) (Rahul Mishra)
  • 8a9bdbd estree: Include decorators in FormalParameterRest spans (#26021) (camc314)
  • 8d94cd1 linter/eslint/no-useless-rename: Preserve type modifiers (#26020) (Cameron)
  • 2cde1f6 rust: Address nightly deprecations (#25998) (Boshen)
  • 51d36d7 linter/vue: Resolve vue imports via shared import helpers (#25903) (Connor Shea)
  • 83a68d2 linter/react/no-react-children: Resolve react imports by symbol (#25901) (Connor Shea)
  • 124e196 linter: Resolve globals by reference, not by name (#25905) (Connor Shea)
  • a701bcc linter: Remove invalid React compiler doc links (#25900) (Boshen)

📚 Documentation

  • 9b7e153 linter: Set version to 1.79.0 for rules shipped in 1.79.0 (#25902) (connorshea)

Oxfmt v0.65.0

🐛 Bug Fixes

  • bf37dd5 formatter: Preserve class decorators before export when the statement is suppressed (#26034) (leaysgur)

oxlint v1.79.0 & oxfmt v0.64.0

Table of Contents

Oxlint v1.79.0

💥 BREAKING CHANGES

  • 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

See React Compiler Support for details.

🚀 Features

  • 9b7394e linter/typescript/no-empty-object-type: Implement suggestion (#25833) (Mikhail Baev)

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

  • 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

  • 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
  • aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
  • 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
  • beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
  • 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
  • 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
  • 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

  • ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)
  • d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)
  • 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

  • 9573937 linter/typescript: Validate ban-ts-comment description_format (#25320) (Mikhail Baev)

[1.77.0] - 2026-08-03

🐛 Bug Fixes

  • 5c0fa61 linter/eslint/no-warning-comments: Unify config structs and remove manual options docs (#25151) (Mikhail Baev)

📚 Documentation

  • 9dc7756 linter/typescript/no-unnecessary-condition: Clarify options (#25110) (camc314)

[1.76.0] - 2026-07-27

🚀 Features

  • 8d31dfa linter: Verify eslint/no-restricted-globals config schema (#24598) (vigneshwar)
  • 7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (#24724) (Bartok)

... (truncated)

Commits
  • 97e99b8 release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)
  • 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
  • 228e8e0 fix(linter): resolve inactive React compiler rules (#25830)
  • aa49d86 fix(linter): allow spread rule options in config types (#25675)
  • 8922381 refactor(linter): remove inactive react config rule (#25740)
  • 8c4552d feat(linter)!: split react/react-compiler into per-category rules (#25500)
  • 36f8451 fix(linter/eslint/no-eval): align indirect default with ESLint (#25656)
  • beb724d fix(linter/eslint/no-unused-vars): report bare underscore parameters (#25663)
  • 4004c10 fix(linter/eslint/no-irregular-whitespace): check comments by default (#25660)
  • 285820e fix(linter/no-large-snapshots): precompile and document allowed snapshot matc...
  • Additional commits viewable in compare view

Updates publint from 0.3.21 to 0.3.24

Release notes

Sourced from publint's releases.

publint@0.3.24

Patch Changes

  • #257 7c4d25a - Check the repository.url value even when repository.type is omitted. type is optional and defaults to git, so packages using the object form without it were previously skipped for the deprecated-protocol, invalid-git-url, and shorthand-URL checks.

publint@0.3.23

Patch Changes

  • #248 9ff88ac - Recursively detect test files (e.g. *.test.js, *.spec.ts) for the USE_FILES suggestion.

  • #245 ad737a3 - The USE_FILES message now reports which internal files or directories triggered it via args.internalFilePaths

publint@0.3.22

Patch Changes

  • #241 7740a62 - Support npm v12 and pnpm v11

  • cad0425 - Relax git url regex for repository validation

  • #244 393ac4d - Recognize more common internal files for the USE_FILES suggestion.

  • #242 4a8dc75 - Refactor supported package manager handling from @publint/pack

Changelog

Sourced from publint's changelog.

0.3.24

Patch Changes

  • #257 7c4d25a - Check the repository.url value even when repository.type is omitted. type is optional and defaults to git, so packages using the object form without it were previously skipped for the deprecated-protocol, invalid-git-url, and shorthand-URL checks.

0.3.23

Patch Changes

  • #248 9ff88ac - Recursively detect test files (e.g. *.test.js, *.spec.ts) for the USE_FILES suggestion.

  • #245 ad737a3 - The USE_FILES message now reports which internal files or directories triggered it via args.internalFilePaths

0.3.22

Patch Changes

  • #241 7740a62 - Support npm v12 and pnpm v11

  • cad0425 - Relax git url regex for repository validation

  • #244 393ac4d - Recognize more common internal files for the USE_FILES suggestion.

  • #242 4a8dc75 - Refactor supported package manager handling from @publint/pack

Commits

Updates tsdown from 0.22.12 to 0.22.14

Release notes

Sourced from tsdown's releases.

v0.22.14

   🚀 Features

  • Add CLI build concurrency option  -  by @​sxzz and Jeroen Zwartepoorte (8a14c)
    View changes on GitHub

v0.22.13

   🚀 Features

  • deps: Support neverBundle: true to externalize all dependencies  -  by @​sxzz (d30a7)

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • ff3bdbd chore: release v0.22.14
  • 8a14c35 feat: add CLI build concurrency option
  • 0525465 docs: add note about cjsDefault only applying to explicit entry modules
  • a3a3551 refactor: fix lint
  • 3dec506 refactor: use native Promise.withResolvers
  • e0266c1 docs: add tsdown users image
  • a733505 refactor: upgrade verkit, simplify version parse
  • e5fe2ca style: format
  • 3e1fc63 chore: release v0.22.13
  • a6c8734 chore: upgrade deps
  • Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the development-dependencies group across 1 directory with 9 upd…
22d1d64 
…ates

Bumps the development-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.0` | `3.0.1` |
| [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli) | `7.2.0` | `7.3.1` |
| [@tsconfig/node22](https://github.com/tsconfig/bases/tree/HEAD/bases) | `22.0.5` | `22.0.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.3.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.59.0` | `0.65.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.74.0` | `1.80.0` |
| [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.21` | `0.3.24` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.22.12` | `0.22.14` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |



Updates `@changesets/cli` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.1/packages/cli)

Updates `@graphql-codegen/cli` from 7.2.0 to 7.3.1
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@7.3.1/packages/graphql-codegen-cli)

Updates `@tsconfig/node22` from 22.0.5 to 22.0.6
- [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases)

Updates `@types/node` from 26.1.1 to 26.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `oxfmt` from 0.59.0 to 0.65.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt)

Updates `oxlint` from 1.74.0 to 1.80.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint)

Updates `publint` from 0.3.21 to 0.3.24
- [Release notes](https://github.com/publint/publint/releases)
- [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md)
- [Commits](https://github.com/publint/publint/commits/publint@0.3.24/packages/publint)

Updates `tsdown` from 0.22.12 to 0.22.14
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.22.12...v0.22.14)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@tsconfig/node22"
  dependency-version: 22.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxfmt
  dependency-version: 0.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxlint
  dependency-version: 1.80.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: publint
  dependency-version: 0.3.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: tsdown
  dependency-version: 0.22.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@socket-security

socket-security Bot commented Sep 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​tsconfig/​node22@​22.0.61001007189100
Added@​changesets/​cli@​3.0.1991007497100
Added@​graphql-codegen/​cli@​7.3.1951007799100
Addedvitest@​4.1.11981007999100
Added@​types/​node@​26.3.01001008196100
Addedpublint@​0.3.241001008193100
Addedoxfmt@​0.65.0861008896100
Addedtsdown@​0.22.14981008898100
Addedoxlint@​1.80.0991009196100

View full report

@bluwy
bluwy added this pull request to the merge queue Sep 1, 2026
Merged via the queue into main with commit 26aae50 Sep 1, 2026
9 checks passed
@bluwy
bluwy deleted the dependabot/npm_and_yarn/development-dependencies-c841deb419 branch September 1, 2026 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bluwy bluwy bluwy approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bluwy