Skip to content

chore(deps): (deps-dev): bump the development group across 1 directory with 8 updates#305

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-5b340f0b56
Open

chore(deps): (deps-dev): bump the development group across 1 directory with 8 updates#305
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-5b340f0b56

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the development group with 8 updates in the / directory:

Package From To
@rollup/plugin-commonjs 29.0.2 29.0.3
@types/node 25.6.0 25.9.2
@vitest/coverage-v8 4.1.5 4.1.8
lefthook 2.1.6 2.1.9
node-gyp 12.3.0 12.4.0
oxlint 1.63.0 1.69.0
rollup 4.60.3 4.61.1
vitest 4.1.5 4.1.8

Updates @rollup/plugin-commonjs from 29.0.2 to 29.0.3

Changelog

Sourced from @​rollup/plugin-commonjs's changelog.

v29.0.3

2026-05-29

Bugfixes

Commits

Updates @types/node from 25.6.0 to 25.9.2

Commits

Updates @vitest/coverage-v8 from 4.1.5 to 4.1.8

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • a09d472 chore: release v4.1.7
  • a8fd24c chore: release v4.1.6
  • See full diff in compare view

Updates lefthook from 2.1.6 to 2.1.9

Release notes

Sourced from lefthook's releases.

v2.1.9

Changelog

  • 1d35cbabe1ebaf2a5ed4d2186caa0402de6448e2 chore: add pretty gradient (#1432)
  • 22be6c50e1412c748f3c6b60e9c61cd056dc693b deps: May 2026 (#1415)
  • 1bae568f03dfb88af9185031fa44e9fee285e917 fix: update hooks path after resetting (#1431)

v2.1.8

Changelog

  • 488a5f99a5a496e5837f757f8ce3e6c6d1415792 fix: do not warn if local hooks path is equal to default hooks path (#1421)

v2.1.7

Changelog

  • f415a9d3fce1d4f6af62622cf96c72e04ecf7bd3 chore: go mod tidy
  • cf4ab9ea4580f5aeb0d4b61d4dd169533e5bb0c9 fix: always restore unstaged changes (#1416)
  • 4c0e000d6fe9f35f42efefb9263b0b4cb5dfbd49 fix: apply stage_fixed only if it is safe (#1418)
  • 76aa843ef5ceb6970f61cd2ff28d16dd2ec82272 fix: linter, sacrifice optimization for readability
  • 9d53c36ed9a26d3bf66e341a9650a0ecac9b6a37 fix: separate fallback push branch from pathspecs (#1396)
  • 22c9f773cf93b59005bd244c5b00caab2947a755 fix: try to always restore unstaged changes (#1417)
  • 37d83986d8e6d6bf6792f57e22e7cbb1a9e28064 fix: use contrast colors (#1420)
  • eb1064d0b8c6248627960bea1abf6891db5a21b1 refactor: add new logger without a global state (#1385)
Changelog

Sourced from lefthook's changelog.

2.1.9 (2026-05-29)

2.1.8 (2026-05-19)

  • fix: do not warn if local hooks path is equal to default hooks path (#1421) by @​mrexox

2.1.7 (2026-05-19)

Commits
  • 75f99ff 2.1.9: fix install with --reset-hooks-path
  • 1d35cba chore: add pretty gradient (#1432)
  • 1bae568 fix: update hooks path after resetting (#1431)
  • 22be6c5 deps: May 2026 (#1415)
  • 9e75b21 2.1.8: reduce warning for core.hooksPath if it matches the default
  • 488a5f9 fix: do not warn if local hooks path is equal to default hooks path (#1421)
  • b5c8310 2.1.7: restore unstaged changes when possible
  • 37d8398 fix: use contrast colors (#1420)
  • 4c0e000 fix: apply stage_fixed only if it is safe (#1418)
  • 22c9f77 fix: try to always restore unstaged changes (#1417)
  • Additional commits viewable in compare view

Updates node-gyp from 12.3.0 to 12.4.0

Release notes

Sourced from node-gyp's releases.

v12.4.0

12.4.0 (2026-05-15)

Features

Bug Fixes

Miscellaneous

  • add workflow_dispatch trigger to tests workflow (#3299) (b2fcdcd)
Changelog

Sourced from node-gyp's changelog.

12.4.0 (2026-05-15)

Features

Bug Fixes

Miscellaneous

  • add workflow_dispatch trigger to tests workflow (#3299) (b2fcdcd)
Commits

Updates oxlint from 1.63.0 to 1.69.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

  • 222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)
  • 2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)
  • bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)
  • 5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)
  • 7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)
  • 2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)
  • ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

  • 6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)
  • 6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)
  • 7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)
  • 732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)
  • a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)
  • ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)
  • 3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)
  • ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)
  • e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)
  • 6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)
  • 85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)
  • fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)
  • ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)
  • dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)
  • 989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)
  • cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

  • 25d577e language_server: Start tools in parallel (#15500) (Sysix)
  • 3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)
  • 3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)
  • 9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)
  • 3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)
  • 444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

  • 97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)
  • 2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)
  • a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)
  • 3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)
  • 2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)
  • 57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.69.0] - 2026-06-08

🚀 Features

  • e805174 linter: Add schema for jest/vitest/max-expects (#23105) (Sysix)
  • 7850577 linter: Add schema for jest/vitest/expect-expect (#23104) (Sysix)
  • 75f641a linter: Add schema for jest/vitest/consistent-test-it (#23103) (Sysix)
  • 5125f89 linter/unicorn: Support no-null checkArguments option (#23098) (camc314)
  • b8b9797 linter: Add schema for import-max-dependencies (#23096) (Sysix)
  • 65cb47a linter/eslint: Support no-unused-expressions ignoreDirectives option (#23097) (camc314)
  • f6c36d5 linter: Add schema for import/prefer-default-export (#23091) (Sysix)
  • 0d4a5d1 linter: Add schema for eslint/sort-vars (#23090) (Sysix)
  • fdb5bf5 linter: Add schema for eslint/radix (#23082) (Sysix)
  • 05b4dcf linter: Add schema for eslint/prefer-const (#23081) (Sysix)
  • 5a06c4d linter/vue: Implement next-tick-style rule (#23041) (Alex Peshkov)
  • e38a36a linter: Add schema for eslint/operator-assignment (#23080) (Sysix)
  • 907cee7 linter: Add schema for eslint/no-warning-comments (#23075) (Sysix)
  • 9470bb2 linter: Add schema for eslint/no-unused-vars (#23073) (Sysix)
  • 234b5cf linter: Add schema for eslint/no-shadow (#23072) (Sysix)
  • de0dd8b linter: Add schema for eslint/no-restricted-exports (#23020) (Sysix)
  • faa3e0d linter: Add schema for eslint/no-param-reassign (#23018) (Sysix)
  • dbc9c27 linter: Add schema for eslint/no-magic-numbers (#23017) (Sysix)
  • 38d3569 linter: Add schema for eslint/no-inner-declarations (#23016) (Sysix)
  • 008fa41 linter: Add schema for eslint/no-constant-condition (#22991) (Sysix)
  • ca44623 linter: Add schema for eslint/no-empty-function (#22988) (Sysix)
  • 43eb04d linter: Add schema for eslint/id-match (#22987) (Sysix)
  • a800f27 linter: Add schema for eslint/capitalized-comments (#22984) (Sysix)
  • 96e2d32 linter: Add schema for eslint/id-length (#22963) (Sysix)
  • 545493f linter: Add schema for eslint/complexity (#22960) (Sysix)
  • 5f0b558 linter: Add schema for eslint/class-methods-use-this (#22959) (Sysix)
  • 719b720 linter: Add schema for simple rule configurations (#22948) (Sysix)
  • fd00966 linter: Add right schema for eslint/max-* rules (#22923) (Sysix)
  • 1226d78 linter: Fill schema with rule configurations (#22907) (Sysix)
  • 8f423c1 linter/vue: Implement require-direct-export rule (#17623) (yefan)
  • 78e915b linter/vue: Implement no-reserved-props rule (#22914) (bab)
  • 0f200a9 linter/vue: Implement require-prop-types rule (#22083) (Alex Peshkov)
  • 5da9da9 linter/vue: Implement no-reserved-keys rule (#21780) (bab)
  • 75e14a8 linter/vue: Implement prop-name-casing rule (#22892) (bab)

🐛 Bug Fixes

  • 0383e61 linter: Fix schema for rules without a config (#22946) (Sysix)

📚 Documentation

  • dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)

[1.68.0] - 2026-06-01

🚀 Features

... (truncated)

Commits
  • 44ae845 release(apps): oxlint v1.69.0 && oxfmt v0.54.0 (#23116)
  • e805174 feat(linter): add schema for jest/vitest/max-expects (#23105)
  • 7850577 feat(linter): add schema for jest/vitest/expect-expect (#23104)
  • 75f641a feat(linter): add schema for jest/vitest/consistent-test-it (#23103)
  • d65b860 refactor(linter): reuse non-object references for rules schemas (#23100)
  • 6bcd52c refactor(linter): share "alway" | "never" option across rules (#23099)
  • 5125f89 feat(linter/unicorn): support no-null checkArguments option (#23098)
  • b8b9797 feat(linter): add schema for import-max-dependencies (#23096)
  • 65cb47a feat(linter/eslint): support no-unused-expressions ignoreDirectives option ...
  • f6c36d5 feat(linter): add schema for import/prefer-default-export (#23091)
  • Additional commits viewable in compare view

Updates rollup from 4.60.3 to 4.61.1

Release notes

Sourced from rollup's releases.

v4.61.1

4.61.1

2026-06-04

Bug Fixes

  • Avoid extraneous newlines when adding headers via plugins (#6403)
  • Fix a rare issue where starting Rollup would hang on Windows (#6404)

Pull Requests

v4.61.0

4.61.0

2026-06-01

Features

  • Sort entry modules to make chunk hashes deterministic (#6391)

Pull Requests

v4.60.4

4.60.4

2026-05-14

Bug Fixes

... (truncated)

Changelog

Sourced from rollup's changelog.

4.61.1

2026-06-04

Bug Fixes

  • Avoid extraneous newlines when adding headers via plugins (#6403)
  • Fix a rare issue where starting Rollup would hang on Windows (#6404)

Pull Requests

4.61.0

2026-06-01

Features

  • Sort entry modules to make chunk hashes deterministic (#6391)

Pull Requests

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

... (truncated)

Commits
  • b77daf0 4.61.1
  • 91b6dc4 fix: set report.excludeNetwork=true before getReport() to avoid blocking PTR ...
  • f2a0449 Improve documentation for manualPureFunctions (#6402)
  • 7bdce6c Does not add an extra leading line feed for addons (#6403)
  • 765167f 4.61.0
  • 0f547eb Sort entry modules to make chunk hash names deterministic (#6391)
  • 5838787 docs: fix broken links (#6400)
  • cc0f51a chore(deps): update react monorepo to v19 (#6395)
  • dd30037 fix(deps): update rust crate swc_compiler_base to v57 (#6396)
  • cb86c3e chore(deps): lock file maintenance (#6397)
  • Additional commits viewable in compare view

Updates vitest from 4.1.5 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • a09d472 chore: release v4.1.7
  • a8fd24c chore: release v4.1.6
  • 18af98c fix(browser): simplify orchestrator otel carrier (#10285)
  • 3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 8 updates

Bumps the development group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `29.0.2` | `29.0.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.6.0` | `25.9.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.5` | `4.1.8` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.6` | `2.1.9` |
| [node-gyp](https://github.com/nodejs/node-gyp) | `12.3.0` | `12.4.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.63.0` | `1.69.0` |
| [rollup](https://github.com/rollup/rollup) | `4.60.3` | `4.61.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.8` |



Updates `@rollup/plugin-commonjs` from 29.0.2 to 29.0.3
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.3/packages/commonjs)

Updates `@types/node` from 25.6.0 to 25.9.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.5 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8)

Updates `lefthook` from 2.1.6 to 2.1.9
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.6...v2.1.9)

Updates `node-gyp` from 12.3.0 to 12.4.0
- [Release notes](https://github.com/nodejs/node-gyp/releases)
- [Changelog](https://github.com/nodejs/node-gyp/blob/main/CHANGELOG.md)
- [Commits](nodejs/node-gyp@v12.3.0...v12.4.0)

Updates `oxlint` from 1.63.0 to 1.69.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.69.0/npm/oxlint)

Updates `rollup` from 4.60.3 to 4.61.1
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.3...v4.61.1)

Updates `vitest` from 4.1.5 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 29.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: "@types/node"
  dependency-version: 25.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: lefthook
  dependency-version: 2.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: node-gyp
  dependency-version: 12.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: oxlint
  dependency-version: 1.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: rollup
  dependency-version: 4.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
...

Signed-off-by: dependabot[bot] <support@github.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedvitest@​4.1.8981007998100
Added@​vitest/​coverage-v8@​4.1.8991007998100
Added@​types/​node@​25.9.21001008196100
Addedlefthook@​2.1.99210010094100
Added@​rollup/​plugin-commonjs@​29.0.39910010092100
Addedoxlint@​1.69.0991009296100
Addednode-gyp@​12.4.09910010093100
Addedrollup@​4.61.19710010099100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants