Skip to content

build(deps-dev): bump the dev group with 4 updates - #727

Merged
Trott merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-64749767f9
Oct 14, 2026
Merged

Trott merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-64749767f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev group with 4 updates: eslint, eslint-plugin-n, lockfile-lint and prettier.

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
  • 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
  • f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
  • b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
  • 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)
Commits
  • a438ec3 10.12.0
  • 32a73f1 Build: changelog update for 10.12.0
  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
  • 152067f chore: update ecosystem plugins (#21362)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
  • 67eb586 docs: Update README
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371)
  • Additional commits viewable in compare view

Updates eslint-plugin-n from 18.4.0 to 18.4.1

Release notes

Sourced from eslint-plugin-n's releases.

v18.4.1

18.4.1 (2026-10-03)

🩹 Fixes

  • prefer-promises/fs: cover fs.watch (#566) (37bf3a2)
  • properly handle extension override mappings in file-extension-in-import (#572) (995c881)

🧹 Chores

  • cache parsed tsconfig per directory (#571) (1cfd694)
  • Remove stale TypeScript suppressions blocking the Lint job (#574) (73f4d4f)
  • resolve import targets lazily and reuse resolvers (#570) (aff82d1)
Changelog

Sourced from eslint-plugin-n's changelog.

18.4.1 (2026-10-03)

🩹 Fixes

  • prefer-promises/fs: cover fs.watch (#566) (37bf3a2)
  • properly handle extension override mappings in file-extension-in-import (#572) (995c881)

🧹 Chores

  • cache parsed tsconfig per directory (#571) (1cfd694)
  • Remove stale TypeScript suppressions blocking the Lint job (#574) (73f4d4f)
  • resolve import targets lazily and reuse resolvers (#570) (aff82d1)
Commits
  • f1d47af chore(master): release 18.4.1 (#573)
  • 73f4d4f chore: Remove stale TypeScript suppressions blocking the Lint job (#574)
  • 37bf3a2 fix(prefer-promises/fs): cover fs.watch (#566)
  • aff82d1 perf: resolve import targets lazily and reuse resolvers (#570)
  • 1cfd694 perf: cache parsed tsconfig per directory (#571)
  • 995c881 fix: properly handle extension override mappings in file-extension-in-import ...
  • See full diff in compare view

Updates lockfile-lint from 5.0.1 to 5.1.0

Changelog

Sourced from lockfile-lint's changelog.

5.1.0

Minor Changes

  • #222 578511e580a4c3c398ba7f26fc0465e449f39516 Thanks @​deveshsinghal09! - Add opt-in strict SHA-512 integrity validation that detects missing or malformed hashes while allowing Git, local directory, linked workspace and bundled dependencies.

    Exempt Yarn Classic GitHub codeload archives only when pinned to a full 40-hex commit. Resolve npm bundled dependencies against their nearest non-bundled ancestor before flattening: v2/v3 require a non-empty bundleDependencies declaration and an ancestor with valid SHA-512 integrity or an independent source exemption. npm v1 verifies the ancestor but cannot confirm the bundle declaration. Unverified flags and HTTP(S)/local tarball downloads still require integrity.

    Report Yarn Berry as one marked unsupported-format error. The CLI exits non-zero without calling an unsupported format a security finding; other failing validators still report their security findings.

    Require commit pins for all Git-source exemptions, and recognize percent-encoded local tarball extensions before granting directory exemptions.

Patch Changes

Commits
  • d30ce73 chore(release): publish
  • e81ffe9 feat(validators): add URL validator (#52)
  • b481e80 chore(release): publish
  • e183593 feat(cli): add file-based configuration (#75)
  • 3e894df chore(release): publish
  • 3e0eb59 fix(cli): conflicting arguments will error (#72)
  • d894e8a chore(release): publish
  • 6baff98 fix(tests): shebangs don't work on Windows (#71)
  • 6bf3021 chore(release): publish
  • 4fa9090 fix(cli): use path.join when concatenating paths (#70)
  • Additional commits viewable in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 4 updates: [eslint](https://github.com/eslint/eslint), [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n), [lockfile-lint](https://github.com/lirantal/lockfile-lint/tree/HEAD/packages/lockfile-lint) and [prettier](https://github.com/prettier/prettier).


Updates `eslint` from 10.11.0 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.11.0...v10.12.0)

Updates `eslint-plugin-n` from 18.4.0 to 18.4.1
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v18.4.0...v18.4.1)

Updates `lockfile-lint` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/lirantal/lockfile-lint/releases)
- [Changelog](https://github.com/lirantal/lockfile-lint/blob/main/packages/lockfile-lint/CHANGELOG.md)
- [Commits](https://github.com/lirantal/lockfile-lint/commits/lockfile-lint-api@5.1.0/packages/lockfile-lint)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: eslint-plugin-n
  dependency-version: 18.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: lockfile-lint
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 14, 2026
@Trott
Trott merged commit 43c441c into main Oct 14, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-64749767f9 branch October 14, 2026 03:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant