Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 14, 2025

Bumps the all-dependencies group with 8 updates in the / directory:

Package From To
@vscode/codicons 0.0.40 0.0.41
@types/node 20.19.18 20.19.21
@typescript-eslint/eslint-plugin 8.45.0 8.46.1
@vscode/test-cli 0.0.11 0.0.12
lint-staged 16.2.3 16.2.4
semver 7.7.2 7.7.3
typescript 5.9.2 5.9.3
winston 3.17.0 3.18.3

Updates @vscode/codicons from 0.0.40 to 0.0.41

Release notes

Sourced from @​vscode/codicons's releases.

v0.0.41

🚀 New icons

🧹 Clean up

Full Changelog: microsoft/vscode-codicons@v0.0.40...v0.0.41

Commits
  • fa04a6b Bump version to 0.0.41
  • d3077d7 Merge pull request #326 from microsoft/mrleemurray/solar-gayal-blush
  • a15f505 docs: update section headers for consistency in README
  • c1ec6b3 docs: remove emojis from README for consistency and clarity
  • 6ca213f feat: add 'thinking' icon to mapping.json and update SVG fill color
  • e2fbc4c feat: add new thinking icon SVG to the icons directory
  • e9d7696 docs: enhance README with emoji for better readability and engagement
  • 3cbe532 Merge pull request #325 from microsoft/mrleemurray/supreme-fly-salmon
  • da4bdeb fix: update settings gear icon to correct dimensions and path
  • 3f2015c Merge pull request #323 from microsoft/mrleemurray/troubled-alligator-yellow
  • Additional commits viewable in compare view

Updates @types/node from 20.19.18 to 20.19.21

Commits

Updates @typescript-eslint/eslint-plugin from 8.45.0 to 8.46.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

  • ast-spec: cleanup TSLiteralType (#11624)
  • eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)
  • eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)

❤️ Thank You

  • Abraham Guo
  • mdm317
  • Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.46.0

8.46.0 (2025-10-06)

🚀 Features

  • eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)
  • eslint-plugin-internal: [no-dynamic-tests] new internal Lint rule to ban dynamic syntax in generating tests (#11323)
  • rule-schema-to-typescript-types: clean up and make public (#11633)
  • typescript-eslint: export util types (#10848, #10849)
  • typescript-estree: mention file specifics in project service allowDefaultProject error (#11635)
  • typescript-estree: private identifiers can only appear on LHS of in expressions (#9232)

🩹 Fixes

  • eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)
  • eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)
  • eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)
  • eslint-plugin: removed error type previously deprecated (#11674)
  • eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#11660)
  • rule-tester: deprecate TestCaseError#type and LintMessage#nodeType (#11628)
  • typescript-estree: forbid abstract modifier in object methods (#11656)
  • typescript-estree: forbid abstract method and accessor to have implementation (#11657)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.46.1 (2025-10-13)

🩹 Fixes

  • eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)
  • eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)

❤️ Thank You

  • mdm317
  • Ronen Amiel

You can read about our versioning strategy and releases on our website.

8.46.0 (2025-10-06)

🚀 Features

  • eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)
  • rule-schema-to-typescript-types: clean up and make public (#11633)

🩹 Fixes

  • eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#11660)
  • typescript-estree: forbid abstract method and accessor to have implementation (#11657)
  • eslint-plugin: removed error type previously deprecated (#11674)
  • eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)
  • eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)
  • rule-tester: deprecate TestCaseError#type and LintMessage#nodeType (#11628)
  • eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Commits
  • 3f5fbf6 chore(release): publish 8.46.1
  • a64b3cc fix(eslint-plugin): [no-misused-promises] special-case .finally not to repo...
  • 73003bf fix(eslint-plugin): [prefer-optional-chain] include mixed "nullish comparison...
  • aec785e chore(release): publish 8.46.0
  • a974191 fix(eslint-plugin): [prefer-readonly-parameter-types] ignore tagged primitive...
  • 02e0278 fix(typescript-estree): forbid abstract method and accessor to have implement...
  • f083798 feat(eslint-plugin): [no-unsafe-member-access] add allowOptionalChaining opti...
  • a62f625 fix(eslint-plugin): removed error type previously deprecated (#11674)
  • 7f5fed7 chore: remove unused batchedSingleLineTests test utility (#11675)
  • f8412ce fix(eslint-plugin): [no-deprecated] ignore deprecated export imports (#11603)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.45.0 to 8.46.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

  • ast-spec: cleanup TSLiteralType (#11624)
  • eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)
  • eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)

❤️ Thank You

  • Abraham Guo
  • mdm317
  • Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.46.0

8.46.0 (2025-10-06)

🚀 Features

  • eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)
  • eslint-plugin-internal: [no-dynamic-tests] new internal Lint rule to ban dynamic syntax in generating tests (#11323)
  • rule-schema-to-typescript-types: clean up and make public (#11633)
  • typescript-eslint: export util types (#10848, #10849)
  • typescript-estree: mention file specifics in project service allowDefaultProject error (#11635)
  • typescript-estree: private identifiers can only appear on LHS of in expressions (#9232)

🩹 Fixes

  • eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)
  • eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)
  • eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)
  • eslint-plugin: removed error type previously deprecated (#11674)
  • eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#11660)
  • rule-tester: deprecate TestCaseError#type and LintMessage#nodeType (#11628)
  • typescript-estree: forbid abstract modifier in object methods (#11656)
  • typescript-estree: forbid abstract method and accessor to have implementation (#11657)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.46.1 (2025-10-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.46.0 (2025-10-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates @vscode/test-cli from 0.0.11 to 0.0.12

Changelog

Sourced from @​vscode/test-cli's changelog.

0.0.12 - 2025-10-09

  • Package version bumps
Commits

Updates lint-staged from 16.2.3 to 16.2.4

Release notes

Sourced from lint-staged's releases.

v16.2.4

Patch Changes

Changelog

Sourced from lint-staged's changelog.

16.2.4

Patch Changes

Commits

Updates mocha from 11.7.2 to 11.7.4

Release notes

Sourced from mocha's releases.

v11.7.4

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

v11.7.3

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)
Changelog

Sourced from mocha's changelog.

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)
Commits
  • 8649f39 chore(main): release 11.7.4 (#5473)
  • c2667c3 fix: watch mode using chokidar v4 (#5379)
  • 7f68e5c chore: remove trailing spaces (#5475)
  • bff9166 Docs: migrate remaining legacy wiki pages to main documentation (#5465)
  • c805327 chore(main): release 11.7.3 (#5455)
  • ebdbc48 fix: use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION ...
  • 4122c7d docs: add security escalation policy (#5466)
  • 1164b9d docs: fix duplicate global leak documentation (#5461)
  • 48c6f40 build(deps): bump actions/setup-node in the github-actions group (#5459)
  • 6654704 docs: migrate third party UIs wiki page to docs (#5434)
  • Additional commits viewable in compare view

Updates semver from 7.7.2 to 7.7.3

Release notes

Sourced from semver's releases.

v7.7.3

7.7.3 (2025-10-06)

Bug Fixes

Chores

Changelog

Sourced from semver's changelog.

7.7.3 (2025-10-06)

Bug Fixes

Chores

Commits
  • a25789b chore: release 7.7.3 (#812)
  • e37e0ca fix: faster paths for compare (#813)
  • 2471d75 fix: x-range build metadata support
  • 8f05c87 chore: bump @​npmcli/template-oss from 4.25.0 to 4.25.1 (#807)
  • d17aebf chore: bump @​npmcli/template-oss from 4.24.4 to 4.25.0 (#797)
  • 3b03e3b chore: bump @​npmcli/template-oss from 4.24.3 to 4.24.4 (#790)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for semver since your current version.


Updates typescript from 5.9.2 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

Commits
  • c63de15 Bump version to 5.9.3 and LKG
  • 8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
  • a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
  • 0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
  • bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
  • 0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
  • 2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
  • See full diff in compare view

Updates winston from 3.17.0 to 3.18.3

Release notes

Sourced from winston's releases.

v3.18.3

  • Update diagnostics dependency (removes fix-esm transitive dependency) a15a9e9

winstonjs/winston@v3.18.2...v3.18.3

v3.18.2

  • Bump diagnostics package to resolve #2583 (again) f4582c3

winstonjs/winston@v3.18.1...v3.18.2

v3.18.1

  • Bump diagnostics package to resolve #2583 e668c2c

winstonjs/winston@v3.18.0...v3.18.1

v3.18.0

  • Update diagnostics package to latest version to remove vulnerability 376e331
  • add @​initd.sg/winston-cloudwatch (#2532) 71ee92a
  • Update transports.md (#2549) 3547a95
  • docs: update transport.md (#2550) dc88db0
  • feat: adds helper function for highest log level (#2514) c69cdb0

winstonjs/winston@v3.17.0...v3.18.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @award999.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@vscode/codicons](https://github.com/microsoft/vscode-codicons) | `0.0.40` | `0.0.41` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.18` | `20.19.21` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.45.0` | `8.46.1` |
| [@vscode/test-cli](https://github.com/Microsoft/vscode-test-cli) | `0.0.11` | `0.0.12` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.3` | `16.2.4` |
| [semver](https://github.com/npm/node-semver) | `7.7.2` | `7.7.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `5.9.3` |
| [winston](https://github.com/winstonjs/winston) | `3.17.0` | `3.18.3` |



Updates `@vscode/codicons` from 0.0.40 to 0.0.41
- [Release notes](https://github.com/microsoft/vscode-codicons/releases)
- [Commits](microsoft/vscode-codicons@v0.0.40...v0.0.41)

Updates `@types/node` from 20.19.18 to 20.19.21
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.45.0 to 8.46.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.45.0 to 8.46.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.1/packages/parser)

Updates `@vscode/test-cli` from 0.0.11 to 0.0.12
- [Changelog](https://github.com/microsoft/vscode-test-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/vscode-test-cli/commits)

Updates `lint-staged` from 16.2.3 to 16.2.4
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.2.3...v16.2.4)

Updates `mocha` from 11.7.2 to 11.7.4
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.2...v11.7.4)

Updates `semver` from 7.7.2 to 7.7.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.2...v7.7.3)

Updates `typescript` from 5.9.2 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.9.2...v5.9.3)

Updates `winston` from 3.17.0 to 3.18.3
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.17.0...v3.18.3)

---
updated-dependencies:
- dependency-name: "@vscode/codicons"
  dependency-version: 0.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 20.19.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.46.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.46.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@vscode/test-cli"
  dependency-version: 0.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: lint-staged
  dependency-version: 16.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: mocha
  dependency-version: 11.7.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: semver
  dependency-version: 7.7.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: winston
  dependency-version: 3.18.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2025
@dependabot dependabot bot added the javascript Pull requests that update javascript code label Oct 14, 2025
@award999
Copy link
Contributor

@dependabot squash and merge

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 14, 2025

Beginning January 27, 2026, Dependabot will no longer support the @dependabot squash and merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 14, 2025

One of your CI runs failed on this pull request, so Dependabot won't merge it.

Dependabot will still automatically merge this pull request if you amend it and your tests pass.

@dependabot dependabot bot merged commit d5bc6fb into main Oct 14, 2025
45 of 46 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/all-dependencies-9a77c62f59 branch October 14, 2025 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants