Skip to content

chore(deps): bump chokidar from 3.6.0 to 5.0.0#5957

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/chokidar-5.0.0
Closed

chore(deps): bump chokidar from 3.6.0 to 5.0.0#5957
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/chokidar-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps chokidar from 3.6.0 to 5.0.0.

Release notes

Sourced from chokidar's releases.

5.0.0

  • Make the package ESM-only. Reduces on-disk package size from ~150kb to ~80kb
  • Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs
  • fix: Make types more precise paulmillr/chokidar#1424
  • perf: re-use double slash regex paulmillr/chokidar#1435
  • Update readdirp to ESM-only v5
  • Lots of minor improvements in tests
  • Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt
  • Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

Full Changelog: paulmillr/chokidar@4.0.3...5.0.0

4.0.3

What's Changed

Full Changelog: paulmillr/chokidar@4.0.2...4.0.3

4.0.2

What's Changed

New Contributors

Full Changelog: paulmillr/chokidar@4.0.1...4.0.2

4.0.1

  • Various fixes and improvements of typescript types

New Contributors

Full Changelog: paulmillr/chokidar@4.0.0...4.0.1

4.0.0

  • Remove glob support
  • Remove bundled fsevents
  • Decrease dependency count from 13 to 1
  • Rewrite in typescript. Makes emitted types more precise
  • The package became hybrid common.js / ESM

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chokidar since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code type::chore labels Apr 1, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 1, 2026 13:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code type::chore labels Apr 1, 2026
Bumps [chokidar](https://github.com/paulmillr/chokidar) from 3.6.0 to 5.0.0.
- [Release notes](https://github.com/paulmillr/chokidar/releases)
- [Commits](paulmillr/chokidar@3.6.0...5.0.0)

---
updated-dependencies:
- dependency-name: chokidar
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/chokidar-5.0.0 branch from acda382 to 2d5ba97 Compare April 14, 2026 13:33
nvanthao added a commit that referenced this pull request Apr 28, 2026
* chore(deps): consolidate dependency bumps from 10 open PRs

Go modules:
- github.com/replicatedhq/troubleshoot 0.123.18 -> 0.127.0
- github.com/vmware-tanzu/velero 1.17.2 -> 1.18.0 (via troubleshoot)
- github.com/distribution/distribution/v3 3.0.0 -> 3.1.0 (via troubleshoot)
- github.com/jackc/pgx/v5 5.9.0 -> 5.9.2
- github.com/mattn/go-isatty 0.0.21 -> 0.0.22

NPM:
- chokidar 3.6.0 -> 5.0.0

GitHub Actions:
- docker/login-action v3 -> v4
- docker/build-push-action v6 -> v7
- sigstore/cosign-installer v4.0.0 -> v4.1.1
- mshick/add-pr-comment v2 -> v3

Closes #5980, #5978, #5977, #5961, #5957, #5951, #5949, #5948, #5947, #5946

* fix: bump golangci-lint to 2.11.4 for Go 1.26 compatibility

v2.8.0 was built with Go 1.25 and fails when the project's go.mod
targets go 1.26.2 (bumped by troubleshoot 0.127.0 dependency).
v2.9.0+ releases are built with Go 1.26, so v2.11.4 resolves this.

* ci: trigger CI validation
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 28, 2026

Looks like chokidar is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 28, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/chokidar-5.0.0 branch April 28, 2026 22:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code type::chore

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants