Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 10 updates - #359

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-231972818c
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-231972818c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown

Bumps the dev-dependencies group with 10 updates in the / directory:

Package From To
@commitlint/cli 21.2.3 21.2.4
@commitlint/config-conventional 21.2.3 21.2.4
@vitest/coverage-v8 5.0.4 5.0.5
@vitest/mocker 5.0.4 5.0.5
cspell 10.3.6 10.4.0
eslint 10.12.0 10.13.0
gaxios 8.2.0 8.3.2
markdownlint-cli2 0.23.3 0.24.0
typescript-eslint 8.71.1 8.72.0
vitest 5.0.4 5.0.5

Updates @commitlint/cli from 21.2.3 to 21.2.4

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/cli

Commits

Updates @commitlint/config-conventional from 21.2.3 to 21.2.4

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/config-conventional

Commits

Updates @vitest/coverage-v8 from 5.0.4 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vitest/mocker from 5.0.4 to 5.0.5

Release notes

Sourced from @​vitest/mocker's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates cspell from 10.3.6 to 10.4.0

Release notes

Sourced from cspell's releases.

v10.4.0

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"
  • --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
  • CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
  • API: globSymlinks in the lint options.
  • It can't be set in a configuration file.
  • Files are reported by the path through the link. A file reached by two paths is checked under both.
  • It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.
  • The design decisions are recorded in docs/ADRs/glob-symlinks/.
  • Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you choose a narrower width, which helps with large fonts and screen magnifiers. The help in the cspell README now fits on npmjs.com without scrolling sideways.

Feature

Set COLUMNS to pick the output width:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.4.0 (2026-10-14)

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"
  • --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
  • CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
  • API: globSymlinks in the lint options.
  • It can't be set in a configuration file.
  • Files are reported by the path through the link. A file reached by two paths is checked under both.
  • It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.
  • The design decisions are recorded in docs/ADRs/glob-symlinks/.
  • Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you choose a narrower width, which helps with large fonts and screen magnifiers. The help in the cspell README now fits on npmjs.com without scrolling sideways.

Feature

... (truncated)

Commits
  • 7e2bbb5 v10.4.0
  • d2dce3f chore: Prepare Release v10.4.0 (auto-deploy) (#9380)
  • a1509fe chore: Fix the README build after the inject-markdown 6 upgrade (#9429)
  • ab3ae04 fix: Workflow Bot -- Update Dictionaries (main) (#9405)
  • 55c0fbd fix: Show hidden lint options and issue template help in cspell --help (#9387)
  • 628768a v10.4.0-alpha.1
  • 998957b chore: Prepare Release v10.4.0-alpha.1 (auto-deploy) (#9378)
  • 4c287f5 fix: Deprecate cspell-lib/rpc; import from @cspell/rpc (#9376)
  • 7be53ce chore: Prepare Release v10.4.0-alpha.0 (auto-deploy) (#9332)
  • e3b5887 chore: Update README.md (#9368)
  • Additional commits viewable in compare view

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates gaxios from 8.2.0 to 8.3.2

Release notes

Sourced from gaxios's releases.

gaxios: v8.3.2

8.3.2 (2026-10-23)

Bug Fixes

  • gaxios: Narrow fetch types to call signature for @​types/bun (#9699) (2a34528)

gaxios: v8.3.1

8.3.1 (2026-10-14)

Bug Fixes

  • gaxios: Exclude compiled tests and .tsbuildinfo from published tarball (#9612) (7394a38)
  • gaxios: Normalize TimeoutError in _request and propagate retry timeout (#9582) (1b10df0)
  • gaxios: Remove --abort-signal-timeout-shim (#9555) (29d8a5e)
  • gaxios: Remove --bun-plugin-shim and support Bun fetch natively (#9561) (93b426d)
Changelog

Sourced from gaxios's changelog.

8.3.2 (2026-10-23)

Bug Fixes

  • gaxios: Narrow fetch types to call signature for @​types/bun (#9699) (2a34528)

8.3.1 (2026-10-14)

Bug Fixes

  • gaxios: Exclude compiled tests and .tsbuildinfo from published tarball (#9612) (7394a38)
  • gaxios: Normalize TimeoutError in _request and propagate retry timeout (#9582) (1b10df0)
  • gaxios: Remove --abort-signal-timeout-shim (#9555) (29d8a5e)
  • gaxios: Remove --bun-plugin-shim and support Bun fetch natively (#9561) (93b426d)

8.3.0 (2026-10-08)

Features

Commits
  • b3a9687 chore: release main (#9684)
  • 2a34528 fix(gaxios): narrow fetch types to call signature for @​types/bun (#9699)
  • 3821456 test(gaxios): check package.json files per entry instead of deepStrictEqual (...
  • 72f2e23 chore: release main (#9604)
  • 7394a38 fix(gaxios): exclude compiled tests and .tsbuildinfo from published tarball (...
  • 93b426d fix(gaxios): remove --bun-plugin-shim and support Bun fetch natively (#9561)
  • 1b10df0 fix(gaxios): normalize TimeoutError in _request and propagate retry timeout (...
  • 29d8a5e fix(gaxios): remove --abort-signal-timeout-shim (#9555)
  • 703154b chore: release main (#9584)
  • See full diff in compare view

Updates markdownlint-cli2 from 0.23.3 to 0.24.0

Changelog

Sourced from markdownlint-cli2's changelog.

0.24.0

  • Update dependencies (including markdownlint)
Commits
  • 341e2a3 Update to version 0.24.0.
  • 3e4452b Freshen list of external custom rules included with the markdownlint-cli2-rul...
  • e728d6f Update dependency: markdown-it to 15.0.3.
  • 0a869ec Bump eslint-plugin-jsdoc from 65.2.2 to 65.2.4
  • fec2034 Update indirect playwright dependencies.
  • 74ed8f6 Bump @​playwright/test from 1.63.0 to 1.64.0
  • 05659c7 Bump smol-toml from 1.9.0 to 1.9.1
  • 20a66eb Bump execa from 10.0.1 to 10.1.0
  • 692e9cc Bump eslint-plugin-jsdoc from 65.1.0 to 65.2.2
  • 4e634a2 Bump concurrently from 10.0.5 to 10.0.6
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.71.1 to 8.72.0

Release notes

Sourced from typescript-eslint's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
  • type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vitest from 5.0.4 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 10 updates

Bumps the dev-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.3` | `21.2.4` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.3` | `21.2.4` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.4` | `5.0.5` |
| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `5.0.4` | `5.0.5` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.3.6` | `10.4.0` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [gaxios](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gaxios) | `8.2.0` | `8.3.2` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.23.3` | `0.24.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.1` | `8.72.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.4` | `5.0.5` |



Updates `@commitlint/cli` from 21.2.3 to 21.2.4
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.2.3 to 21.2.4
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/config-conventional)

Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `@vitest/mocker` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker)

Updates `cspell` from 10.3.6 to 10.4.0
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.4.0/packages/cspell)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `gaxios` from 8.2.0 to 8.3.2
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/gaxios/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/gaxios-v8.3.2/core/packages/gaxios)

Updates `markdownlint-cli2` from 0.23.3 to 0.24.0
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.23.3...v0.24.0)

Updates `typescript-eslint` from 8.71.1 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint)

Updates `vitest` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@vitest/mocker"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: cspell
  dependency-version: 10.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: gaxios
  dependency-version: 8.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: markdownlint-cli2
  dependency-version: 0.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026
@dependabot
dependabot Bot requested a review from klodr as a code owner November 2, 2026 06:55
@coderabbitai

coderabbitai Bot commented Nov 2, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: Dependabot minor/patch update (dependabot-auto-approve.yml).

@socket-security

Copy link
Copy Markdown

@codecov

codecov Bot commented Nov 2, 2026

Copy link
Copy Markdown

Bundle Report

Bundle size has no change ✅

@codecov

codecov Bot commented Nov 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.39%. Comparing base (ed1e778) to head (447235b).
✅ All tests successful. No failed tests found.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #359   +/-   ##
=======================================
  Coverage   99.39%   99.39%           
=======================================
  Files          35       35           
  Lines        2323     2323           
  Branches      659      659           
=======================================
  Hits         2309     2309           
  Misses         12       12           
  Partials        2        2           

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ed1e778...447235b. Read the comment docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants