Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 23, 2025

Bumps the all-dependencies group with 7 updates in the / directory:

Package From To
@types/diff 7.0.2 8.0.0
@types/node 20.19.13 20.19.17
@typescript-eslint/eslint-plugin 8.43.0 8.44.1
@vscode/vsce 3.6.0 3.6.1
del-cli 6.0.0 7.0.0
esbuild 0.25.9 0.25.10
lint-staged 16.1.6 16.2.0

Updates @types/diff from 7.0.2 to 8.0.0

Commits

Updates @types/node from 20.19.13 to 20.19.17

Commits

Updates @typescript-eslint/eslint-plugin from 8.43.0 to 8.44.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.44.1

8.44.1 (2025-09-22)

🩹 Fixes

  • eslint-plugin: [no-base-to-string] make ignoredTypeNames match type names without generics (#11597)
  • eslint-plugin: [no-unsafe-enum-comparison] support unions of literals (#11599)
  • eslint-plugin: [await-thenable] should not report passing values to promise aggregators which may be a promise in an array literal (#11611)
  • typescript-estree: forbid class property with name constructor (#11590)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.44.0

8.44.0 (2025-09-15)

🚀 Features

  • eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)

🩹 Fixes

  • deps: update dependency @​eslint-community/eslint-utils to v4.8.0 (#11589)
  • eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.44.1 (2025-09-22)

🩹 Fixes

  • eslint-plugin: [await-thenable] should not report passing values to promise aggregators which may be a promise in an array literal (#11611)
  • eslint-plugin: [no-unsafe-enum-comparison] support unions of literals (#11599)
  • eslint-plugin: [no-base-to-string] make ignoredTypeNames match type names without generics (#11597)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.44.0 (2025-09-15)

🚀 Features

  • eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Commits
  • c198052 chore(release): publish 8.44.1
  • c392a0d fix(eslint-plugin): [await-thenable] should not report passing values to prom...
  • 20c3d97 fix(eslint-plugin): [no-unsafe-enum-comparison] support unions of literals (#...
  • 4fde781 fix(eslint-plugin): [no-base-to-string] make ignoredTypeNames match type name...
  • 77056f7 chore(release): publish 8.44.0
  • 684e63f chore(deps): update eslint monorepo to v9.35.0 (#11600)
  • 2ed6857 fix(eslint-plugin): [no-unnecessary-type-conversion] ignore enum members (#11...
  • 85d8dea feat(eslint-plugin): [await-thenable] report invalid (non-promise) values pas...
  • 42527df chore: remove unnecessary nullThrows() (#11580)
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.43.0 to 8.44.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.44.1

8.44.1 (2025-09-22)

🩹 Fixes

  • eslint-plugin: [no-base-to-string] make ignoredTypeNames match type names without generics (#11597)
  • eslint-plugin: [no-unsafe-enum-comparison] support unions of literals (#11599)
  • eslint-plugin: [await-thenable] should not report passing values to promise aggregators which may be a promise in an array literal (#11611)
  • typescript-estree: forbid class property with name constructor (#11590)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.44.0

8.44.0 (2025-09-15)

🚀 Features

  • eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)

🩹 Fixes

  • deps: update dependency @​eslint-community/eslint-utils to v4.8.0 (#11589)
  • eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.44.1 (2025-09-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.44.0 (2025-09-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates @vscode/vsce from 3.6.0 to 3.6.1

Release notes

Sourced from @​vscode/vsce's releases.

v3.6.1

Changes:

  • #1198: chore: bump vsce-sign to 2.0.7
  • #1194: Engineering - do not run Azure Pipeline for pull requests
  • #1193: fix: check exec params
  • #1191: Bump tmp from 0.2.3 to 0.2.4
  • #1188: Avoid Node.js DEP0190 warning by using string form for prepublish command
  • #1190: chore: migrate PR check to GitHub Actions
  • #1189: update secretlint
  • #1187: Bump form-data from 4.0.0 to 4.0.4
  • #1185: chore: onboard OSS pipeline to 1ES template
  • #1179: add commonjs annotation to package.json

This list of changes was auto generated.

v3.6.1-9

Changes:

  • #1198: chore: bump vsce-sign to 2.0.7

This list of changes was auto generated.

v3.6.1-8

Changes:

  • #1194: Engineering - do not run Azure Pipeline for pull requests

This list of changes was auto generated.

v3.6.1-7

Changes:

  • #1193: fix: check exec params

This list of changes was auto generated.

v3.6.1-6

Changes:

... (truncated)

Commits

Updates del-cli from 6.0.0 to 7.0.0

Release notes

Sourced from del-cli's releases.

v7.0.0

Breaking

  • Require Node.js 20 aba3b05

Improvements

  • Improve error presentation 822f27c
  • Fix --dry-run behavior and clarify help text f71aaa6

sindresorhus/del-cli@v6.0.0...v7.0.0

Commits

Updates esbuild from 0.25.9 to 0.25.10

Release notes

Sourced from esbuild's releases.

v0.25.10

  • Fix a panic in a minification edge case (#4287)

    This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

    function identity(x) { return x }
    identity({ y: identity(123) })
  • Fix @supports nested inside pseudo-element (#4265)

    When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

    The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

    However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

    /* Original code */
    ::placeholder {
      color: red;
      body & { color: green }
      @supports (color: blue) { color: blue }
    }
    /* Old output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    {
    color: blue;
    }
    }
    /* New output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    ::placeholder {
    color: blue;
    }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.25.10

  • Fix a panic in a minification edge case (#4287)

    This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

    function identity(x) { return x }
    identity({ y: identity(123) })
  • Fix @supports nested inside pseudo-element (#4265)

    When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

    The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

    However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

    /* Original code */
    ::placeholder {
      color: red;
      body & { color: green }
      @supports (color: blue) { color: blue }
    }
    /* Old output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    {
    color: blue;
    }
    }
    /* New output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    ::placeholder {
    color: blue;

... (truncated)

Commits

Updates lint-staged from 16.1.6 to 16.2.0

Release notes

Sourced from lint-staged's releases.

v16.2.0

Minor Changes

  • #1615 99eb742 Thanks @​iiroj! - Added a new option --fail-on-changes to make lint-staged exit with code 1 when tasks modify any files, making the precommit hook fail. This is similar to the git diff --exit-code option. Using this flag also implies the --no-revert flag which means any changes made by tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.

  • #1611 cd05fd3 Thanks @​rlorenzo! - Added a new option --continue-on-error so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.

  • #1637 82fcc07 Thanks @​iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.

  • #1647 a5ecc06 Thanks @​iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, the DEBUG environment variable is no longer supported — use the --debug to enable debugging

  • #1636 8db2717 Thanks @​iiroj! - Added a new option --hide-unstaged so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags --hide-unstaged --no-hide-partially-staged isn't meaningful and behaves the same as just --hide-unstaged.

    Thanks to @​ItsNickBarry for the idea and initial implementation in #1552.

  • #1648 7900b3b Thanks @​iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.

Patch Changes

  • #1633 7f9e485 Thanks @​dependabot! - Bumps listr2 from 9.0.3 to 9.0.4.

  • #1626 99d5a9b Thanks @​iiroj! - Due to recent phishing attacks, for example chalk@5.6.1 was released with malware. To avoid lint-staged's users being at risk the direct dependencies are pinned to exact versions, instead of allowing future patch versions with the caret (^) range.

  • #1588 035bbf2 Thanks @​outslept! - Increase performance by listing staged files and searching for configuration concurrently.

  • #1645 deba3ad Thanks @​iiroj! - Remove chalk as a dependency due to recent malware issue; read more at chalk/chalk#656.

    If you are having trouble with ANSI color codes when using lint-staged, you can try setting either FORCE_COLOR=true or NO_COLOR=true env variables.

Changelog

Sourced from lint-staged's changelog.

16.2.0

Minor Changes

  • #1615 99eb742 Thanks @​iiroj! - Added a new option --fail-on-changes to make lint-staged exit with code 1 when tasks modify any files, making the precommit hook fail. This is similar to the git diff --exit-code option. Using this flag also implies the --no-revert flag which means any changes made my tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.

  • #1611 cd05fd3 Thanks @​rlorenzo! - Added a new option --continue-on-error so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.

  • #1637 82fcc07 Thanks @​iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.

  • #1647 a5ecc06 Thanks @​iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, the DEBUG environment variable is no longer supported — use the --debug to enable debugging

  • #1636 8db2717 Thanks @​iiroj! - Added a new option --hide-unstaged so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags --hide-unstaged --no-hide-partially-staged isn't meaningful and behaves the same as just --hide-unstaged.

    Thanks to @​ItsNickBarry for the idea and initial implementation in #1552.

  • #1648 7900b3b Thanks @​iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.

Patch Changes

  • #1633 7f9e485 Thanks @​dependabot! - Bumps listr2 from 9.0.3 to 9.0.4.

  • #1626 99d5a9b Thanks @​iiroj! - Due to recent phishing attacks, for example chalk@5.6.1 was released with malware. To avoid lint-staged's users being at risk the direct dependencies are pinned to exact versions, instead of allowing future patch versions with the caret (^) range.

  • #1588 035bbf2 Thanks @​outslept! - Increase performance by listing staged files and searching for configuration concurrently.

  • #1645 deba3ad Thanks @​iiroj! - Remove chalk as a dependency due to recent malware issue; read more at chalk/chalk#656.

    If you are having trouble with ANSI color codes when using lint-staged, you can try setting either FORCE_COLOR=true or NO_COLOR=true env variables.

Commits
  • 54c9bea chore(changeset): release
  • da1ec1d build(deps-dev): bump eslint-plugin-n from 17.23.0 to 17.23.1
  • 63361a8 feat: flag --fail-on-changes implies --no-revert
  • bcde025 docs: removal of debug is "minor" instead of "patch" level change
  • 7900b3b feat: remove lilconfig as a dependency
  • a5ecc06 feat: remove debug as a dependency
  • 616b2d3 ci: use actions/checkout@v5
  • d6397a5 ci: use @​actions/setup-node@​v5
  • 4499b73 ci: run tests with lowest supported Node.js version 20.17.0
  • b4b69e5 fix: pass either FORCE_COLOR or NO_COLOR to tasks based on detected support
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 23, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 23, 2025
Bumps the all-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/diff](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/diff) | `7.0.2` | `8.0.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.13` | `20.19.17` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.43.0` | `8.44.1` |
| [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.6.0` | `3.6.1` |
| [del-cli](https://github.com/sindresorhus/del-cli) | `6.0.0` | `7.0.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.9` | `0.25.10` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.1.6` | `16.2.0` |



Updates `@types/diff` from 7.0.2 to 8.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/diff)

Updates `@types/node` from 20.19.13 to 20.19.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.43.0 to 8.44.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.44.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.43.0 to 8.44.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.44.1/packages/parser)

Updates `@vscode/vsce` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/Microsoft/vsce/releases)
- [Commits](microsoft/vscode-vsce@v3.6.0...v3.6.1)

Updates `del-cli` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/sindresorhus/del-cli/releases)
- [Commits](sindresorhus/del-cli@v6.0.0...v7.0.0)

Updates `esbuild` from 0.25.9 to 0.25.10
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.9...v0.25.10)

Updates `lint-staged` from 16.1.6 to 16.2.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.1.6...v16.2.0)

---
updated-dependencies:
- dependency-name: "@types/diff"
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 20.19.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.44.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.44.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@vscode/vsce"
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: del-cli
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: esbuild
  dependency-version: 0.25.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: lint-staged
  dependency-version: 16.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/all-dependencies-ef3cec1d37 branch from 93b6a03 to 03c21f6 Compare September 25, 2025 20:05
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 29, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 29, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/all-dependencies-ef3cec1d37 branch September 29, 2025 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant