build(deps): Bump the all-npm-dependencies group with 23 updates by dependabot[bot] · Pull Request #4543 · github/gh-aw-firewall

dependabot · 2026-06-08T17:17:36Z

Bumps the all-npm-dependencies group with 23 updates:

Package	From	To
ajv	`8.18.0`	`8.20.0`
chalk	`4.1.2`	`5.6.2`
commander	`12.1.0`	`15.0.0`
execa	`5.1.1`	`9.6.1`
js-yaml	`4.1.1`	`4.2.0`
@babel/core	`7.29.0`	`7.29.7`
@babel/preset-env	`7.29.2`	`7.29.7`
@commitlint/cli	`20.5.0`	`21.0.2`
@commitlint/config-conventional	`20.5.0`	`21.0.2`
@eslint/compat	`2.0.5`	`2.1.0`
@types/node	`25.6.0`	`25.9.2`
@typescript-eslint/eslint-plugin	`8.58.2`	`8.60.1`
@typescript-eslint/parser	`8.58.2`	`8.60.1`
babel-jest	`30.3.0`	`30.4.1`
esbuild	`0.25.12`	`0.28.0`
eslint	`10.2.1`	`10.4.1`
eslint-plugin-security	`3.0.1`	`4.0.0`
globals	`17.5.0`	`17.6.0`
jest	`30.3.0`	`30.4.2`
markdownlint-cli2	`0.21.0`	`0.22.1`
ts-jest	`29.4.9`	`29.4.11`
typescript	`5.9.3`	`6.0.3`
typescript-eslint	`8.58.2`	`8.60.1`

Updates ajv from 8.18.0 to 8.20.0

Release notes

Sourced from ajv's releases.

v8.20.0

What's Changed

fix: add support for node 22/24, drop node 16/21 by @jasoniangreen in ajv-validator/ajv#2580

fix: add ES2022.RegExp for RegExpIndicesArray by @SignpostMarv in ajv-validator/ajv#2604

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

v8.19.0

What's Changed

fix prototype pollution via format keyword using $data ref by @epoberezkin in ajv-validator/ajv#2607

Full Changelog: ajv-validator/ajv@v8.18.0...v8.19.0

Commits

0fba0b8 8.20.0
9caf8d6 fix: add ES2022.RegExp for RegExpIndicesArray; fixes ajv-validator/ajv#2603 (...
2065350 fix: add support for node 22/24, drop node 16/21 (#2580)
154b58d 8.19.0
e8d2bdc test/fix prototype pollution via $data ref with format keyword (#2607)
See full diff in compare view

Updates chalk from 4.1.2 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

Fix vulnerability in 5.6.1, see: chalk/chalk#656

v5.6.0

Make WezTerm terminal use true color a8f5bf7

chalk/chalk@v5.5.0...v5.6.0

v5.5.0

Make Ghostty terminal use true color (#653) 79ee2d3

chalk/chalk@v5.4.1...v5.5.0

v5.4.1

Fix navigator not defined ReferenceError (#642) 4ebb62d

chalk/chalk@v5.4.0...v5.4.1

v5.4.0

Update CIRCLECI environments to return level 3 color support f838120

chalk/chalk@v5.3.0...v5.4.0

v5.3.0

Add sideEffects field to package.json 5aafc0a

Add support for Gitea Actions (#603) 29b8569

chalk/chalk@v5.2.0...v5.3.0

v5.2.0

Improve Deno compatibility (#579) 7443e9f

Detect true-color support for GitHub Actions (#579) 7443e9f

Detect true-color support for Kitty terminal (#579) 7443e9f

Fix test for Azure DevOps environment (#579) 7443e9f

chalk/chalk@v5.1.2...v5.2.0

v5.1.2

Fix exported styles names (#569) a34bcf6

chalk/chalk@v5.1.1...v5.1.2

v5.1.1

Improved the names of exports introduced in 5.1.0 (#567) 6e0df05

We of course preserved the old names.

... (truncated)

Commits

5155778 5.6.2
5c91505 5.6.0
a8f5bf7 Make WezTerm terminal use true color
67db246 5.5.0
79ee2d3 Make Ghostty terminal use true color (#653)
5dbc1e2 5.4.1
4ebb62d Fix navigator not defined ReferenceError (#642)
fc809b6 Readme tweak
83acfcf 5.4.0
f838120 Update CIRCLECI environments to return level 3 color support
Additional commits viewable in compare view

Updates commander from 12.1.0 to 15.0.0

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

Changed

Breaking: migrated Commander implementation from CommonJS to ESM (#2464)

Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).

dev: switch tests from Jest to node:test test runner (#2463)

Deleted

Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

Changed

Breaking: migrated Commander implementation from CommonJS to ESM (#2464)

Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).

dev: switch tests from Jest to node:test test runner (#2463)

Deleted

Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

[14.0.3] (2026-01-31)

Added

Release Policy document (#2462)

Changes

old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)

clarify typing for deprecated callback parameter to .outputHelp() (#2427)

... (truncated)

Commits

ba6d13d Fix release dates in changelog (#2523)
a752ed9 Pin GitHub actions with hash (#2521)
74d5dfe Drop EOL node 20 from test matrix, and add node 26 (#2520)
6df9b68 Update details for 15.0.0 release (#2519)
01ce5d0 Remove jest esm examples (#2517)
d785d8b Update dependencies (#2518)
9098b48 Update dependencies (#2506)
373f660 Use node:util stripVTControlCharacters instead of own code (#2486)
987f289 Use simple match in test (to avoid warning about expensive regex) (#2485)
0ea3bb3 Update dependecies and lint (#2489)
Additional commits viewable in compare view

Updates execa from 5.1.1 to 9.6.1

Release notes

Sourced from execa's releases.

v9.6.1

Fix VerboseOption type not being properly exported (#1215) 7891c39

sindresorhus/execa@v9.6.0...v9.6.1

v9.6.0

Update dependencies d49104a

sindresorhus/execa@v9.5.3...v9.6.0

v9.5.3

Fix Node 24-specific deprecation warning (#1199) 1ac5b91

sindresorhus/execa@v9.5.2...v9.5.3

v9.5.2

Bug fixes

Fix escaping newlines inside template strings. Thanks @aarondandy! (#1176)

v9.5.1

Bug fixes

Fix odd characters being printed in verbose mode on Windows (thanks @IIIMADDINIII). (#1167)

v9.5.0

Features

When redirecting stdout or stderr to a file, allow appending instead of overwriting. (#1166)
await execa({stdout: {file: 'output.txt', append: true}})`npm run build`;
v9.4.1

Bug fixes

Fix using process.execPath with Deno. Thanks @w3cj! (#1160)

v9.4.0

Features

We've created a separate package called nano-spawn. It is similar to Execa but with fewer features, for a much smaller package size. More info.

... (truncated)

Commits

84e1f36 9.6.1
7891c39 Fix VerboseOption type not being properly exported (#1215)
103095f Meta tweaks
23ec6f0 Fix CI tests related to .kill(0) (#1212)
9a2cb79 Meta tweaks
e7cafeb [docs] TTY control is lost only on the FD that uses mixed inherit. (#1209)
5587ae1 Fix CI tests (#1207)
3e8fa32 [docs] A process is not a TTY usually, just connected to one. (#1208)
c468672 [docs] Transforms: Summary: Fix example command and output. (#1206)
a31fe55 9.6.0
Additional commits viewable in compare view

Updates js-yaml from 4.1.1 to 4.2.0

Changelog

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

Added docs/safety.md with notes about processing untrusted YAML.

Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.

Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.

Added sourcemaps to dist/ builds.

Changed

Stop resolving numbers with underscores as numeric scalars, #627.

Switched dev toolchains to Vite / neostandard.

Updated demo.

Reorganized tests.

dist/ files are no longer kept in the repository.

Fixed

Fix parsing of properties on the first implicit block mapping key, #62.

Fix trailing whitespace handling when folding flow scalar lines, #307.

Reject top-level block scalars without content indentation, #280.

Ensure numbers survive round-trip, #737.

Fix test coverage for issue #221.

Fix flow scalar trailing whitespace folding, #307.

Fix digits in YAML named tag handles.

Security

Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

Backported v4.1.1 fix to v3

Commits

See full diff in compare view

Updates @babel/core from 7.29.0 to 7.29.7

Release notes

Sourced from @babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
04ea6b2 v7.29.6
99f498a [7.x packport]Improve input source map handling (#18001)
feba0a3 Preserve original identifier names from input sourcemaps (#17992) (#17998)
See full diff in compare view

Updates @babel/preset-env from 7.29.2 to 7.29.7

Release notes

Sourced from @babel/preset-env's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
3cd910d v7.29.5
3d399f8 [7.x backport]docs(preset-env): update CONTRIBUTING.md (#17976)
183db7b v7.29.3
268f246 Add bugfix plugin for Safari array rest destructuring bug (#17788)
f8524d8 Update compat data (#17686)
See full diff in compare view

Updates @commitlint/cli from 20.5.0 to 21.0.2

Release notes

Sourced from @commitlint/cli's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @escapedcat in conventional-changelog/commitlint#4755

fix: apply oxfmt formatting to get-edit-commit.ts by @escapedcat in conventional-changelog/commitlint#4768

fix(read): fail when --from and --to share no merge-base #4555 by @CervEdin in conventional-changelog/commitlint#4754

fix: disallow same commit hash for --from and --to by @knocte in conventional-changelog/commitlint#4773

Chore/CI

ci: have renovate rebase stale PRs before merging by @escapedcat in conventional-changelog/commitlint#4782

chore: have renovate hold PRs for 3 days after release by @escapedcat in conventional-changelog/commitlint#4788

chore: anchor vite 8 by @escapedcat in conventional-changelog/commitlint#4790

ci: run commitlint once per same-repo PR by @escapedcat in conventional-changelog/commitlint#4795

New Contributors

@CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

fix(load): only resolve relative formatter paths by @escapedcat in conventional-changelog/commitlint#4761

fix(types): add presetConfig to ParserPreset interface by @SAY-5 in conventional-changelog/commitlint#4749

CI

ci: stop spawning schedule jobs on contributors' forks by @knocte in conventional-changelog/commitlint#4753

ci: add weekly non-blocking pnpm audit by @escapedcat in conventional-changelog/commitlint#4766

New Contributors

@SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @commitlint/cli's changelog.

21.0.2 (2026-05-29)

Bug Fixes

disallow same commit hash for --from and --to (#4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @commitlint/cli

21.0.0 (2026-05-08)

chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

drop node v18 and v20 support

Bump engines to >=v22 in all 39 package.json files

Update @types/node to ^22.0.0

Update CI matrix to [22, 24]

Update Ubuntu baseline job to ubuntu:26.04

Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json

Update pre-commit hook to use --ignore-engines

Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @commitlint/cli

... (truncated)

Commits

8069048 v21.0.2
121005e fix: disallow same commit hash for --from and --to (#4773)
db8d7d6 v21.0.1
1329a25 chore: migrate to pnpm (#4762)
db39968 chore: pre pnpm cleanup (#4759)
6099ae5 chore: replace eslint with oxlint (#4756)
f081a8e v21.0.0
40d7e36 feat!: show input from a new line (#4727)
44c3174 chore: update dependency yargs to v18 #4432 (#4686)
ac01464 chore: replace dependencies with Node 22 built-ins (#4681)
Additional commits viewable in compare view

Updates @commitlint/config-conventional from 20.5.0 to 21.0.2

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @escapedcat in conventional-changelog/commitlint#4755

fix: apply oxfmt formatting to get-edit-commit.ts by @escapedcat in conventional-changelog/commitlint#4768

fix(read): fail when --from and --to share no merge-base #4555 by @CervEdin in conventional-changelog/commitlint#4754

fix: disallow same commit hash for --from and --to by @knocte in conventional-changelog/commitlint#4773

Chore/CI

ci: have renovate rebase stale PRs before merging by @escapedcat in conventional-changelog/commitlint#4782

chore: have renovate hold PRs for 3 days after release by @escapedcat in conventional-changelog/commitlint#4788

chore: anchor vite 8 by @escapedcat in conventional-changelog/commitlint#4790

ci: run commitlint once per same-repo PR by @escapedcat in conventional-changelog/commitlint#4795

New Contributors

@CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

fix(load): only resolve relative formatter paths by @escapedcat in conventional-changelog/commitlint#4761

fix(types): add presetConfig to ParserPreset interface by @SAY-5 in conventional-changelog/commitlint#4749

CI

ci: stop spawning schedule jobs on contributors' forks by @knocte in conventional-changelog/commitlint#4753

ci: add weekly non-blocking pnpm audit by @escapedcat in conventional-changelog/commitlint#4766

New Contributors

@SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.0.2 (2026-05-29)

Note: Version bump only for package @commitlint/config-conventional

21.0.1 (2026-05-12)

Note: Version bump only for package @commitlint/config-conventional

21.0.0 (2026-05-08)

chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

drop node v18 and v20 support

Bump engines to >=v22 in all 39 package.json files

Update @types/node to ^22.0.0

Update CI matrix to [22, 24]

Update Ubuntu baseline job to ubuntu:26.04

Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json

Update pre-commit hook to use --ignore-engines

Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @commitlint/config-conventional

Commits

8069048 v21.0.2
db8d7d6 v21.0.1
1329a25 chore: migrate to pnpm (#4762)
6099ae5 chore: replace eslint with oxlint (#4756)
f081a8e v21.0.0
44c3174 chore: update dependency yargs to v18 #4432 (#4686)
ac2b3f4 chore!: minimum node version v22 (#4679)
31e959a v20.5.3
See full diff in compare view

Updates @eslint/compat from 2.0.5 to 2.1.0

Release notes

Sourced from @eslint/compat's releases.

compat: v2.1.0

2.1.0 (2026-05-08)

Features

Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

migrate-config: v2.1.0

2.1.0 (2026-05-08)

Features

Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/config-helpers bumped from ^0.5.5 to ^0.6.0

migrate-config: v2.0.7

2.0.7 (2026-05-01)

Bug Fixes

update espree to the latest (#437) (a8ff72f)

migrate-config: v2.0.6

2.0.6 (2026-04-08)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/compat bumped from ^2.0.4 to ^2.0.5

devDependencies

@eslint/core bumped from ^1.2.0 to ^1.2.1

Changelog

Sourced from @eslint/compat's changelog.

2.1.0 (2026-05-08)

Features

Add new includeIgnoreFile() to config-helpers (#430) (9b51352)

Commits

b894953 chore: release main (#446)
334038d docs: Update README sponsors
9b51352 feat: Add new includeIgnoreFile() to config-helpers (#430)
70b6997 docs: Update README sponsors
35b6b94 chore: update TypeScript to v6 (#417)
7807d71 docs: Update README sponsors
57001ea docs: Update README sponsors
0b62133 docs: Update README sponsors
See full diff in compare view

Updates @types/node from 25.6.0 to 25.9.2

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.58.2 to 8.60.1

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)

eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

❤️ Thank You

lumir

Nevette Bailey @nevette-bailey

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

playground TS version selector is not working (#12326, #12325)

❤️ Thank You

Evyatar Daud @StyleShit

Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.4

8.59.4 (2026-05-18)

🩹 Fixes

eslint-plugin: [no-floating-promises] stack overflow when using recursive types (#12294)

project-service: throw error cause in getParsedConfigFileFromTSServer (#12321)

typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#12340)

❤️ Thank You

Evyatar Daud @StyleShit

Kirk Waiblinger @kirkwaiblinger

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.60.1 (2026-06-01)

🩹 Fixes

eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)

❤️ Thank You

lumir

Nevette Bailey @nevette-bailey

See

Bumps the all-npm-dependencies group with 23 updates: | Package | From | To | | --- | --- | --- | | [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` | | [chalk](https://github.com/chalk/chalk) | `4.1.2` | `5.6.2` | | [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` | | [execa](https://github.com/sindresorhus/execa) | `5.1.1` | `9.6.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.2` | `7.29.7` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.5.0` | `21.0.2` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `20.5.0` | `21.0.2` | | [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.5` | `2.1.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.6.0` | `25.9.2` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.58.2` | `8.60.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.58.2` | `8.60.1` | | [babel-jest](https://github.com/jestjs/jest/tree/HEAD/packages/babel-jest) | `30.3.0` | `30.4.1` | | [esbuild](https://github.com/evanw/esbuild) | `0.25.12` | `0.28.0` | | [eslint](https://github.com/eslint/eslint) | `10.2.1` | `10.4.1` | | [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) | `3.0.1` | `4.0.0` | | [globals](https://github.com/sindresorhus/globals) | `17.5.0` | `17.6.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.3.0` | `30.4.2` | | [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.21.0` | `0.22.1` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.9` | `29.4.11` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.58.2` | `8.60.1` | Updates `ajv` from 8.18.0 to 8.20.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v8.18.0...v8.20.0) Updates `chalk` from 4.1.2 to 5.6.2 - [Release notes](https://github.com/chalk/chalk/releases) - [Commits](chalk/chalk@v4.1.2...v5.6.2) Updates `commander` from 12.1.0 to 15.0.0 - [Release notes](https://github.com/tj/commander.js/releases) - [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md) - [Commits](tj/commander.js@v12.1.0...v15.0.0) Updates `execa` from 5.1.1 to 9.6.1 - [Release notes](https://github.com/sindresorhus/execa/releases) - [Commits](sindresorhus/execa@v5.1.1...v9.6.1) Updates `js-yaml` from 4.1.1 to 4.2.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) Updates `@babel/core` from 7.29.0 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core) Updates `@babel/preset-env` from 7.29.2 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-env) Updates `@commitlint/cli` from 20.5.0 to 21.0.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 20.5.0 to 21.0.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/config-conventional) Updates `@eslint/compat` from 2.0.5 to 2.1.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.0/packages/compat) Updates `@types/node` from 25.6.0 to 25.9.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.58.2 to 8.60.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.58.2 to 8.60.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/parser) Updates `babel-jest` from 30.3.0 to 30.4.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.1/packages/babel-jest) Updates `esbuild` from 0.25.12 to 0.28.0 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md) - [Commits](evanw/esbuild@v0.25.12...v0.28.0) Updates `eslint` from 10.2.1 to 10.4.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.2.1...v10.4.1) Updates `eslint-plugin-security` from 3.0.1 to 4.0.0 - [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases) - [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md) - [Commits](eslint-community/eslint-plugin-security@v3.0.1...eslint-plugin-security-v4.0.0) Updates `globals` from 17.5.0 to 17.6.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.5.0...v17.6.0) Updates `jest` from 30.3.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `markdownlint-cli2` from 0.21.0 to 0.22.1 - [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md) - [Commits](DavidAnson/markdownlint-cli2@v0.21.0...v0.22.1) Updates `ts-jest` from 29.4.9 to 29.4.11 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.9...v29.4.11) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) Updates `typescript-eslint` from 8.58.2 to 8.60.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: ajv dependency-version: 8.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: chalk dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: commander dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: execa dependency-version: 9.6.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: "@babel/core" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-dependencies - dependency-name: "@babel/preset-env" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-dependencies - dependency-name: "@commitlint/cli" dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: "@eslint/compat" dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: "@types/node" dependency-version: 25.9.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.60.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.60.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: babel-jest dependency-version: 30.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: esbuild dependency-version: 0.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: eslint dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: eslint-plugin-security dependency-version: 4.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: globals dependency-version: 17.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: markdownlint-cli2 dependency-version: 0.22.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: ts-jest dependency-version: 29.4.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.60.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-08T17:23:04Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 8, 2026

dependabot Bot had a problem deploying to aoai-model June 8, 2026 17:18 Failure

dependabot Bot temporarily deployed to aoai-model June 8, 2026 17:18 Inactive

lpcox closed this Jun 8, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/all-npm-dependencies-8b4586c782 branch June 8, 2026 17:23

github-actions Bot mentioned this pull request Jun 8, 2026

fix(smoke): run AOAI api-key smoke pre-step in activation job so prompt step outputs resolve #4540

Draft

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the all-npm-dependencies group with 23 updates#4543

build(deps): Bump the all-npm-dependencies group with 23 updates#4543
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-npm-dependencies-8b4586c782

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

v8.20.0

What's Changed

v8.19.0

What's Changed

v5.6.2

v5.6.0

v5.5.0

v5.4.1

v5.4.0

v5.3.0

v5.2.0

v5.1.2

v5.1.1

v15.0.0

Added

Fixed

Changed

Deleted

Migration Tips

v15.0.0-0

Added

Fixed

[15.0.0] (2026-05-29)

Added

Fixed

Changed

Deleted

Migration Tips

[15.0.0-0] (2026-02-22)

[14.0.3] (2026-01-31)

Added

Changes

v9.6.1

v9.6.0

v9.5.3

v9.5.2

Bug fixes

v9.5.1

Bug fixes

v9.5.0

Features

v9.4.1

Bug fixes

v9.4.0

Features

[4.2.0] - 2026-06-01

Added

Changed

Fixed

Security

[3.14.2] - 2025-11-15

Security

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish