Skip to content

Bump the dev-dependencies group across 1 directory with 6 updates - #2532

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-904eec7b5f
Open

Bump the dev-dependencies group across 1 directory with 6 updates#2532
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-904eec7b5f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 6 updates in the / directory:

Package From To
@types/node 25.9.1 26.4.0
@typescript/native-preview 7.0.0-dev.20260602.1 7.0.0-dev.20260707.2
danger 13.0.7 14.0.7
globals 17.6.0 17.11.0
prettier 3.8.3 3.9.6
typescript 6.0.3 7.0.2

Updates @types/node from 25.9.1 to 26.4.0

Commits

Updates @typescript/native-preview from 7.0.0-dev.20260602.1 to 7.0.0-dev.20260707.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​typescript/native-preview since your current version.


Updates danger from 13.0.7 to 14.0.7

Changelog

Sourced from danger's changelog.

14.0.7

The Docker image behind the Danger GitHub Action now runs on node 22 instead of node 20. The image had stopped building entirely after the recent binary changes, so this gets the action publishing again. - [@​orta]

14.0.6

The prebuilt macOS binaries (what brew install danger/tap/danger-js gives you) now embed node 24 instead of node 18. Those binaries ship their own copy of node, and the old one was too old for the networking library Danger uses, so every call to GitHub failed with TypeError: terminated. They work again. - [@​orta]

14.0.0-5

Release faff as I migrate to OIDC deploys for danger - orta

14.0.0

Danger now installs undici 7 by default. undici is what Danger uses to talk to GitHub, GitLab and Bitbucket, and version 7 requires node 20.18.1 or newer — so for most people that is Danger's new effective minimum. Node 18 has not been dropped: you can pin undici back to the 6.x line yourself and everything keeps working. - [@​orta]

The reason for the switch is that it puts you in control of your own undici version. Previously Danger pinned undici to the 6.x line, so if a security advisory landed you had to wait for a Danger release to pick up the fix. undici is now an optional peer dependency accepting ^6.28.0 || ^7, which means moving it in either direction is a supported thing to do rather than a workaround.

  • github.reviews now reports the review states GitHub actually sends, so checking for a review that requested changes works - fixes #1443 [@​Socialpranker]
  • GitHub: Fetch all pages of pull request reviews #1383 [@​LeonMAG]
  • Upgrade to undici 6.27.0 to resolve transitive CVEs - fixes #1517 [@​rjatkins]
  • Breaking Default to undici 7, which raises the effective node requirement to 20.18.1. If you are on node 18, add "resolutions": { "undici": "^6.28.0" } (yarn), "overrides": { "undici": "^6.28.0" } (npm), or the same overrides block nested under "pnpm" (pnpm) to your package.json. [@​orta]
  • undici is now an optional peer dependency (^6.28.0 || ^7), so you can move it forward yourself to pick up security fixes without waiting for a Danger release [@​orta]
  • Removed the undici entry from Danger's own resolutions, which had no effect on people installing Danger [@​orta]
  • Danger now runs on node 24 and newer. Signing in as a GitHub App relied on a dependency that used a part of node removed in 24, which crashed Danger on startup before it could do any work. That signing is now done with node's own crypto, so the dependency (and the eleven packages it brought with it) is gone [@​orta]

13.0.9

  • Switch to use the native node-js fetch unidici

13.0.6

  • Fixes a danger local shell execution possibility [@​Junming]

13.0.5

  • Dropped p-limit as a dep

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for danger since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates globals from 17.6.0 to 17.11.0

Release notes

Sourced from globals's releases.

v17.11.0

  • Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

  • Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

v17.7.0

  • Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

Commits

Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-904eec7b5f branch from 069a90a to e3aff88 Compare September 1, 2026 19:15
Bumps the dev-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.4.0` |
| [@typescript/native-preview](https://github.com/microsoft/typescript-go) | `7.0.0-dev.20260602.1` | `7.0.0-dev.20260707.2` |
| [danger](https://github.com/danger/danger-js) | `13.0.7` | `14.0.7` |
| [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.11.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.6` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@types/node` from 25.9.1 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript/native-preview` from 7.0.0-dev.20260602.1 to 7.0.0-dev.20260707.2
- [Release notes](https://github.com/microsoft/typescript-go/releases)
- [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md)
- [Commits](https://github.com/microsoft/typescript-go/commits)

Updates `danger` from 13.0.7 to 14.0.7
- [Release notes](https://github.com/danger/danger-js/releases)
- [Changelog](https://github.com/danger/danger-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/danger/danger-js/commits)

Updates `globals` from 17.6.0 to 17.11.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.6.0...v17.11.0)

Updates `prettier` from 3.8.3 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.6)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@typescript/native-preview"
  dependency-version: 7.0.0-dev.20260707.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: danger
  dependency-version: 13.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-904eec7b5f branch from e3aff88 to 0b6f770 Compare September 1, 2026 20:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code maintainers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants