chore(deps): bump the npm-dependencies group across 1 directory with 13 updates #2680

dependabot · 2025-11-05T10:35:21Z

Bumps the npm-dependencies group with 12 updates in the / directory:

Package	From	To
envalid	`8.1.0`	`8.1.1`
minimatch	`10.0.3`	`10.1.1`
simple-git	`3.29.0`	`3.30.0`
@commitlint/cli	`20.0.0`	`20.1.0`
@eslint/compat	`1.4.0`	`1.4.1`
@types/express	`5.0.4`	`5.0.5`
@types/node	`24.9.2`	`24.10.0`
@types/validator	`13.15.3`	`13.15.4`
@types/yargs	`17.0.33`	`17.0.34`
@typescript-eslint/eslint-plugin	`8.46.2`	`8.46.3`
eslint	`9.38.0`	`9.39.1`
globals	`16.4.0`	`16.5.0`

Updates envalid from 8.1.0 to 8.1.1

Commits

See full diff in compare view

Updates minimatch from 10.0.3 to 10.1.1

Changelog

Sourced from minimatch's changelog.

change log

10.1

Add magicalBraces option for escape

Fix makeRe when partial: true is set.

Fix makeRe when pattern ends in a final ** path part.

10.0

Require node 20 or 22 and higher

9.0

No default export, only named exports.

8.0

Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions

Bump required Node.js version

7.4

Add escape() method

Add unescape() method

Add Minimatch.hasMagic() method

7.3

Add support for posix character classes in a unicode-aware way.

7.2

Add windowsNoMagicRoot option

7.1

Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

7.0

Preprocess patterns to simplify complicated patterns and reduce out .. pattern portions where possible. Note that this means

... (truncated)

Commits

5b83372 10.1.1
7ed71cd do not require * to match something if already matching something
30efec4 fix some typedoc comments and export types
7a71a90 10.1.0
8bc631a changelog 10.1
0a0a7a1 Added missing periods for text consistency
a1b68f2 docs: fix typo
6b88277 remove unnecessary types for brace-expansion
0d27f1c Support magicalBraces option in escape/unescape
281de34 prettier
Additional commits viewable in compare view

Updates simple-git from 3.29.0 to 3.30.0

Release notes

Sourced from simple-git's releases.

simple-git@3.30.0

Minor Changes

bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

Previously git.status would report the current branch name as No. Thank you to @MaddyGuthridge for identifying this issue.

Changelog

Sourced from simple-git's changelog.

3.30.0

Minor Changes

bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

Previously git.status would report the current branch name as No. Thank you to @MaddyGuthridge for identifying this issue.

Commits

See full diff in compare view

Updates @commitlint/cli from 20.0.0 to 20.1.0

Release notes

Sourced from @commitlint/cli's releases.

v20.1.0

20.1.0 (2025-09-30)

Features

feat(config-pnpm-scopes): allow global scope by @ya2s in conventional-changelog/commitlint#4553

Bug Fixes

fix(resolve-extends): add import attribute for JSON config files by @macieklamberski in conventional-changelog/commitlint#4551

New Contributors

@ya2s made their first contribution in conventional-changelog/commitlint#4553

@macieklamberski made their first contribution in conventional-changelog/commitlint#4551

Full Changelog: conventional-changelog/commitlint@v20.0.0...v20.1.0

Changelog

Sourced from @commitlint/cli's changelog.

20.1.0 (2025-09-30)

Note: Version bump only for package @commitlint/cli

Commits

a8e86d2 v20.1.0
See full diff in compare view

Updates @eslint/compat from 1.4.0 to 1.4.1

Release notes

Sourced from @eslint/compat's releases.

migrate-config: v1.4.1

1.4.1 (2025-04-01)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/compat bumped from ^1.2.7 to ^1.2.8

compat: v1.4.1

1.4.1 (2025-10-27)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/core bumped from ^0.16.0 to ^0.17.0

Changelog

Sourced from @eslint/compat's changelog.

1.4.1 (2025-10-27)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/core bumped from ^0.16.0 to ^0.17.0

Commits

f5ecc7e chore: release main (#303)
760fb02 docs: Update README sponsors
da3838f build: add @types/node to compat and mcp (#295)
6030cad docs: Update README sponsors
f1f341d docs: Update README sponsors
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @eslint/compat since your current version.

Updates @types/express from 5.0.4 to 5.0.5

Commits

See full diff in compare view

Updates @types/node from 24.9.2 to 24.10.0

Commits

See full diff in compare view

Updates @types/validator from 13.15.3 to 13.15.4

Commits

See full diff in compare view

Updates @types/yargs from 17.0.33 to 17.0.34

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.46.2 to 8.46.3

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.46.3

8.46.3 (2025-11-03)

🩹 Fixes

eslint-plugin: [no-misused-promises] expand union type to retrieve target property (#11706)

eslint-plugin: [no-duplicate-enum-values] support signed numbers (#11722, #11723)

❤️ Thank You

Evgeny Stepanovych @undsoft

tao

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.46.3 (2025-11-03)

🩹 Fixes

eslint-plugin: [no-duplicate-enum-values] support signed numbers (#11722, #11723)

eslint-plugin: [no-misused-promises] expand union type to retrieve target property (#11706)

❤️ Thank You

Evgeny Stepanovych @undsoft

tao

You can read about our versioning strategy and releases on our website.

Commits

d9f3497 chore(release): publish 8.46.3
26a9f94 fix(eslint-plugin): [no-duplicate-enum-values] support signed numbers (#11722...
b8219d1 fix(eslint-plugin): [no-misused-promises] expand union type to retrieve targe...
See full diff in compare view

Updates @typescript-eslint/parser from 8.46.2 to 8.46.3

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.46.3

8.46.3 (2025-11-03)

🩹 Fixes

eslint-plugin: [no-misused-promises] expand union type to retrieve target property (#11706)

eslint-plugin: [no-duplicate-enum-values] support signed numbers (#11722, #11723)

❤️ Thank You

Evgeny Stepanovych @undsoft

tao

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.46.3 (2025-11-03)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

d9f3497 chore(release): publish 8.46.3
See full diff in compare view

Updates eslint from 9.38.0 to 9.39.1

Release notes

Sourced from eslint's releases.

v9.39.1

Bug Fixes

650753e fix: Only pass node to JS lang visitor methods (#20283) (Nicholas C. Zakas)

Documentation

51b51f4 docs: add a section on when to use extends vs cascading (#20268) (Tanuj Kanti)

b44d426 docs: Update README (GitHub Actions Bot)

Chores

92db329 chore: update @eslint/js version to 9.39.1 (#20284) (Francesco Trotta)

c7ebefc chore: package.json update for @eslint/js release (Jenkins)

61778f6 chore: update eslint-config-eslint dependency @eslint/js to ^9.39.0 (#20275) (renovate[bot])

d9ca2fc ci: Add rangeStrategy to eslint group in renovate config (#20266) (唯然)

009e507 test: fix version tests for ESLint v10 (#20274) (Milos Djermanovic)

v9.39.0

Features

cc57d87 feat: update error loc to key in no-dupe-class-members (#20259) (Tanuj Kanti)

126552f feat: update error location in for-direction and no-dupe-args (#20258) (Tanuj Kanti)

167d097 feat: update complexity rule to highlight only static block header (#20245) (jaymarvelz)

Bug Fixes

15f5c7c fix: forward traversal step.args to visitors (#20253) (jaymarvelz)

5a1a534 fix: allow JSDoc comments in object-shorthand rule (#20167) (Nitin Kumar)

e86b813 fix: Use more types from @eslint/core (#20257) (Nicholas C. Zakas)

927272d fix: correct Scope typings (#20198) (jaymarvelz)

37f76d9 fix: use AST.Program type for Program node (#20244) (Francesco Trotta)

ae07f0b fix: unify timing report for concurrent linting (#20188) (jaymarvelz)

b165d47 fix: correct Rule typings (#20199) (jaymarvelz)

fb97cda fix: improve error message for missing fix function in suggestions (#20218) (jaymarvelz)

Documentation

d3e81e3 docs: Always recommend to include a files property (#20158) (Percy Ma)

0f0385f docs: use consistent naming recommendation (#20250) (Alex M. Spieslechner)

a3b1456 docs: Update README (GitHub Actions Bot)

cf5f2dd docs: fix correct tag of no-useless-constructor (#20255) (Tanuj Kanti)

10b995c docs: add TS options and examples for nofunc in no-use-before-define (#20249) (Tanuj Kanti)

2584187 docs: remove repetitive word in comment (#20242) (reddaisyy)

637216b docs: update CLI flags migration instructions (#20238) (jaymarvelz)

e7cda3b docs: Update README (GitHub Actions Bot)

7b9446f docs: handle empty flags sections on the feature flags page (#20222) (sethamus)

Chores

dfe3c1b chore: update @eslint/js version to 9.39.0 (#20270) (Francesco Trotta)

2375a6d chore: package.json update for @eslint/js release (Jenkins)

a1f4e52 chore: update @eslint dependencies (#20265) (Francesco Trotta)

c7d3229 chore: update dependency @eslint/core to ^0.17.0 (#20256) (renovate[bot])

27549bc chore: update fuzz testing to not error if code sample minimizer fails (#20252) (Milos Djermanovic)

a1370ee ci: bump actions/setup-node from 5 to 6 (#20230) (dependabot[bot])

9e7fad4 chore: add script to auto-generate eslint:recommended configuration (#20208) (唯然)

Commits

e277281 9.39.1
4cdf397 Build: changelog update for 9.39.1
92db329 chore: update @eslint/js version to 9.39.1 (#20284)
c7ebefc chore: package.json update for @eslint/js release
650753e fix: Only pass node to JS lang visitor methods (#20283)
51b51f4 docs: add a section on when to use extends vs cascading (#20268)
61778f6 chore: update eslint-config-eslint dependency @eslint/js to ^9.39.0 (#20275)
d9ca2fc ci: Add rangeStrategy to eslint group in renovate config (#20266)
009e507 test: fix version tests for ESLint v10 (#20274)
b44d426 docs: Update README
Additional commits viewable in compare view

Updates globals from 16.4.0 to 16.5.0

Release notes

Sourced from globals's releases.

v16.5.0

Update globals (2025-11-01) (#316) 6d441ca

Add Vue, Svelte, and Astro globals (#314) ea31521

sindresorhus/globals@v16.4.0...v16.5.0

Commits

46fdf18 16.5.0
6d441ca Update globals (2025-11-01) (#316)
d323da6 Add test for keys and values (#315)
ea31521 Add Vue, Svelte, and Astro globals (#314)
fa8aaae Add date to automated PR title (#311)
b777f09 Update Puppeteer (#310)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…13 updates Bumps the npm-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [envalid](https://github.com/af/envalid) | `8.1.0` | `8.1.1` | | [minimatch](https://github.com/isaacs/minimatch) | `10.0.3` | `10.1.1` | | [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.29.0` | `3.30.0` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.0.0` | `20.1.0` | | [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `1.4.0` | `1.4.1` | | [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.4` | `5.0.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.9.2` | `24.10.0` | | [@types/validator](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/validator) | `13.15.3` | `13.15.4` | | [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) | `17.0.33` | `17.0.34` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.2` | `8.46.3` | | [eslint](https://github.com/eslint/eslint) | `9.38.0` | `9.39.1` | | [globals](https://github.com/sindresorhus/globals) | `16.4.0` | `16.5.0` | Updates `envalid` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/af/envalid/releases) - [Commits](https://github.com/af/envalid/commits) Updates `minimatch` from 10.0.3 to 10.1.1 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v10.0.3...v10.1.1) Updates `simple-git` from 3.29.0 to 3.30.0 - [Release notes](https://github.com/steveukx/git-js/releases) - [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md) - [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.30.0/simple-git) Updates `@commitlint/cli` from 20.0.0 to 20.1.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.1.0/@commitlint/cli) Updates `@eslint/compat` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v1.4.1/packages/compat) Updates `@types/express` from 5.0.4 to 5.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `@types/node` from 24.9.2 to 24.10.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/validator` from 13.15.3 to 13.15.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/validator) Updates `@types/yargs` from 17.0.33 to 17.0.34 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs) Updates `@typescript-eslint/eslint-plugin` from 8.46.2 to 8.46.3 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.3/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.46.2 to 8.46.3 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.3/packages/parser) Updates `eslint` from 9.38.0 to 9.39.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.38.0...v9.39.1) Updates `globals` from 16.4.0 to 16.5.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.4.0...v16.5.0) --- updated-dependencies: - dependency-name: envalid dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: minimatch dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: simple-git dependency-version: 3.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@commitlint/cli" dependency-version: 20.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@eslint/compat" dependency-version: 1.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/express" dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 24.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/validator" dependency-version: 13.15.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/yargs" dependency-version: 17.0.34 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.46.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.46.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 9.39.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: globals dependency-version: 16.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

…c5535ee

dependabot bot added dependabot dependencies labels Nov 5, 2025

dependabot bot requested review from Ani1357, j-zimnowoda and merll as code owners November 5, 2025 10:35

dependabot bot added dependencies dependabot labels Nov 5, 2025

github-actions bot approved these changes Nov 5, 2025

View reviewed changes

svcAPLBot added 2 commits November 5, 2025 12:02

Merge branch 'main' into dependabot/npm_and_yarn/npm-dependencies-013…

a5d4c79

…c5535ee

Merge branch 'main' into dependabot/npm_and_yarn/npm-dependencies-013…

e367f80

…c5535ee

CasLubbers approved these changes Nov 5, 2025

View reviewed changes

CasLubbers merged commit 3ac554c into main Nov 5, 2025
12 checks passed

CasLubbers deleted the dependabot/npm_and_yarn/npm-dependencies-013c5535ee branch November 5, 2025 12:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm-dependencies group across 1 directory with 13 updates #2680

chore(deps): bump the npm-dependencies group across 1 directory with 13 updates #2680

Uh oh!

dependabot bot commented on behalf of github Nov 5, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

chore(deps): bump the npm-dependencies group across 1 directory with 13 updates #2680

chore(deps): bump the npm-dependencies group across 1 directory with 13 updates #2680

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 5, 2025

change log

10.1

10.0

9.0

8.0

7.4

7.3

7.2

7.1

7.0

simple-git@3.30.0

Minor Changes

3.30.0

Minor Changes

v20.1.0

20.1.0 (2025-09-30)

Features

Bug Fixes

New Contributors

20.1.0 (2025-09-30)

migrate-config: v1.4.1

1.4.1 (2025-04-01)

Dependencies

compat: v1.4.1

1.4.1 (2025-10-27)

Dependencies

1.4.1 (2025-10-27)

Dependencies

v8.46.3

8.46.3 (2025-11-03)

🩹 Fixes

❤️ Thank You

8.46.3 (2025-11-03)

🩹 Fixes

❤️ Thank You

v8.46.3

8.46.3 (2025-11-03)

🩹 Fixes

❤️ Thank You

8.46.3 (2025-11-03)

v9.39.1

Bug Fixes

Documentation

Chores

v9.39.0

Features

Bug Fixes

Documentation

Chores

v16.5.0

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants