Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 15 updates - #828

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-76fc078a86
Open

chore(deps-dev): bump the development-dependencies group across 1 directory with 15 updates#828
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-76fc078a86

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 15 updates in the / directory:

Package From To
@changesets/changelog-github 1.0.0 1.0.1
@changesets/cli 3.0.0 3.0.3
@openally/config.eslint 2.4.3 3.0.2
@types/node 26.2.0 26.6.6
eslint-plugin-jsdoc 64.1.0 65.4.3
pkg-ok 4.0.0 5.0.0
rimraf 6.1.3 6.1.4
typescript 6.0.3 7.0.2
vite 8.2.1 8.3.5
@types/bytes 3.1.5 3.1.6
@playwright/test 1.62.1 1.64.1
@stylistic/stylelint-plugin 5.3.0 6.0.0
stylelint 17.14.1 18.0.0
stylelint-config-standard 40.0.0 41.0.0
undici 8.0.2 8.12.3

Updates @changesets/changelog-github from 1.0.0 to 1.0.1

Release notes

Sourced from @​changesets/changelog-github's releases.

@​changesets/changelog-github@​1.0.1

Patch Changes

  • Updated dependencies [4d7b4fb]:
    • @​changesets/get-github-info@​1.0.1
Changelog

Sourced from @​changesets/changelog-github's changelog.

1.0.1

Patch Changes

  • Updated dependencies [4d7b4fb]:
    • @​changesets/get-github-info@​1.0.1
Commits

Updates @changesets/cli from 3.0.0 to 3.0.3

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1

@​changesets/cli@​3.0.2

Patch Changes

@​changesets/cli@​3.0.1

Patch Changes

Changelog

Sourced from @​changesets/cli's changelog.

3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1

3.0.2

Patch Changes

3.0.1

Patch Changes

Commits

Updates @openally/config.eslint from 2.4.3 to 3.0.2

Release notes

Sourced from @​openally/config.eslint's releases.

@​openally/config.eslint@3.0.2

Patch Changes

@​openally/config.eslint@3.0.1

Patch Changes

@​openally/config.eslint@3.0.0

Major Changes

Changelog

Sourced from @​openally/config.eslint's changelog.

3.0.2

Patch Changes

3.0.1

Patch Changes

3.0.0

Major Changes

Commits
  • 24818f1 chore: update versions (#205)
  • 3b64cae fix(eslint): turn off function-paren-newline (#206)
  • 9ef6cb0 chore(deps): bump the dependencies group across 1 directory with 5 updates (#...
  • 6b7d8d2 chore: setup initial shared stylelint configuration (#199)
  • 5e403f6 chore: update versions (#198)
  • c207b1b fix(eslint): @​stylistic/function-paren-newline to multiline-arguments (#197)
  • aa608e7 chore: update versions (#186)
  • 3130c62 chore(deps): bump the dependencies group with 6 updates (#192)
  • a0565ac refactor(eslint): re-enforce strict rules for agentic (IA) era
  • 9d75a12 refactor(eslint)!: enhance CustomRules and fix TSLint deprecation (#184)
  • See full diff in compare view

Updates @types/node from 26.2.0 to 26.6.6

Commits

Updates eslint-plugin-jsdoc from 64.1.0 to 65.4.3

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v65.4.3

65.4.3 (2026-11-03)

Bug Fixes

  • require-param: add missing @param tags only once per fix; fixes #770 (ce20134)

v65.4.2

65.4.2 (2026-10-23)

Bug Fixes

  • ts-method-signature-style: do not turn optional or readonly function properties into method signatures (94952b2)
  • ts-method-signature-style: keep ? when converting between function properties and method signatures (a4040aa)

v65.4.1

65.4.1 (2026-10-22)

Bug Fixes

  • ts-prefer-function-type: do not throw on call signatures inside object fields, parameters or return types, and keep the type when fixing (8830b2e)

v65.4.0

65.4.0 (2026-10-20)

Features

v65.3.16

65.3.16 (2026-10-20)

Bug Fixes

v65.3.15

65.3.15 (2026-10-19)

Bug Fixes

  • prefer-import-tag: only exempt @typedef itself, not every name-defining tag (4901870)
  • prefer-import-tag: only use @typedef names as aliases for import() types (df6e281)

... (truncated)

Commits
  • ce20134 fix(require-param): add missing @param tags only once per fix; fixes #770
  • a4040aa fix(ts-method-signature-style): keep ? when converting between function p...
  • 94952b2 fix(ts-method-signature-style): do not turn optional or readonly function p...
  • e4a69dd refactor: share rule defaults between code and meta.defaultOptions
  • 45c789c chore: lint rule files with eslint-plugin-eslint-plugin
  • 44a3c45 chore: update jsdoccomment, devDep
  • 8830b2e fix(ts-prefer-function-type): do not throw on call signatures inside object...
  • 0a1b435 docs: move nojekyll file to /docs
  • a218be3 docs: avoid jekyll processing
  • 1b32353 docs: fix issues with GH Pages
  • Additional commits viewable in compare view

Updates pkg-ok from 4.0.0 to 5.0.0

Release notes

Sourced from pkg-ok's releases.

v5.0.0

What's Changed

Full Changelog: abraham/pkg-ok@v4.0.0...v5.0.0

Changelog

Sourced from pkg-ok's changelog.

5.0.0

Breaking

  • Require Node 22.17+, 24, or 26
  • Check that field paths will be published, using npm pack --dry-run; packages that passed before can now fail, and npm must be installed. Turn off with --no-published or published: false
  • Write errors to stderr instead of stdout

Features

  • Check several packages at once: pass multiple paths, package.json files, or quoted globs; node_modules is skipped

Fixes

  • Fix crash on nested exports conditions, null exports, and false browser values
  • Skip exports subpath patterns (./features/*.js) instead of reporting them as missing paths
  • Report a clear error when package.json isn't a JSON object

Other

  • Publish declaration maps, and include TypeScript sources in source maps
  • Stop publishing eslint.config.mjs
  • Update chalk to 6 and normalize-newline to 5
Commits

Updates rimraf from 6.1.3 to 6.1.4

Commits

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates vite from 8.2.1 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
  • bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
  • bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
  • bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
  • bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
  • bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
  • bundled-dev: normalize served output files (#23684) (df4e02c)
  • bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
  • css: don't fail on a literal % in url() (#23676) (50b382d)
  • deps: update all non-major dependencies (#23731) (cf80aa5)
  • deps: update all non-major dependencies (#23826) (77d8373)
  • deps: update rolldown-related dependencies (#23733) (43f0d05)
  • deps: update rolldown-related dependencies (#23827) (c2e0418)
  • optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
  • optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
  • optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
  • optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
  • resolve: support subpath imports with multiple # (#23631) (0d86b34)
  • resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
  • server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
  • server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

  • ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

Code Refactoring

  • deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
  • dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
  • dev: separate import resolution from URL conversion (#23791) (6116689)
  • dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
  • dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

v8.3.4

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.5 (2026-10-21)

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
  • bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
  • bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
  • bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
  • bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
  • bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
  • bundled-dev: normalize served output files (#23684) (df4e02c)
  • bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
  • css: don't fail on a literal % in url() (#23676) (50b382d)
  • deps: update all non-major dependencies (#23731) (cf80aa5)
  • deps: update all non-major dependencies (#23826) (77d8373)
  • deps: update rolldown-related dependencies (#23733) (43f0d05)
  • deps: update rolldown-related dependencies (#23827) (c2e0418)
  • optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
  • optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
  • optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
  • optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
  • resolve: support subpath imports with multiple # (#23631) (0d86b34)
  • resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
  • server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
  • server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

  • ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

Code Refactoring

  • deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
  • dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
  • dev: separate import resolution from URL conversion (#23791) (6116689)
  • dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
  • dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

8.3.4 (2026-10-08)

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

... (truncated)

Commits
  • 981f07f release: v8.3.5 (#23856)
  • 0d86b34 fix(resolve): support subpath imports with multiple # (#23631)
  • 6a02780 perf(ssr): extract inline source maps without a regexp (#23775)
  • 8e890e1 fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)
  • 197daf6 fix(bundled-dev): declare utf-8 charset in fallback page (#23846)
  • 4d16e7c fix(build): include preload dependencies to chunk import map hashing (#23793)
  • df7b40e refactor(dev): consolidate moduleURL to file path utilities (#23828)
  • a162990 refactor(dev): use ModuleURLs throughout HTML transforms (#23815)
  • 6116689 refactor(dev): separate import resolution from URL conversion (#23791)
  • 446954c refactor(dev): share ModuleURL and BrowserURL conversions (#23790)
  • Additional commits viewable in compare view

Updates @types/bytes from 3.1.5 to 3.1.6

Commits

Updates @playwright/test from 1.62.1 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

@dependabot
chore(deps-dev): bump the development-dependencies group across 1 dir…
fa63fd1 
…ectory with 15 updates

Bumps the development-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/changelog-github](https://github.com/changesets/changesets/tree/HEAD/packages/changelog-github) | `1.0.0` | `1.0.1` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.0` | `3.0.3` |
| [@openally/config.eslint](https://github.com/OpenAlly/configs/tree/HEAD/src/eslint) | `2.4.3` | `3.0.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.6` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `64.1.0` | `65.4.3` |
| [pkg-ok](https://github.com/abraham/pkg-ok) | `4.0.0` | `5.0.0` |
| [rimraf](https://github.com/isaacs/rimraf) | `6.1.3` | `6.1.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.3.5` |
| [@types/bytes](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bytes) | `3.1.5` | `3.1.6` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.64.1` |
| [@stylistic/stylelint-plugin](https://github.com/stylelint-stylistic/stylelint-stylistic) | `5.3.0` | `6.0.0` |
| [stylelint](https://github.com/stylelint/stylelint) | `17.14.1` | `18.0.0` |
| [stylelint-config-standard](https://github.com/stylelint/stylelint-config-standard) | `40.0.0` | `41.0.0` |
| [undici](https://github.com/nodejs/undici) | `8.0.2` | `8.12.3` |



Updates `@changesets/changelog-github` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/changelog-github/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/changelog-github@1.0.1/packages/changelog-github)

Updates `@changesets/cli` from 3.0.0 to 3.0.3
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli)

Updates `@openally/config.eslint` from 2.4.3 to 3.0.2
- [Release notes](https://github.com/OpenAlly/configs/releases)
- [Changelog](https://github.com/OpenAlly/configs/blob/main/src/eslint/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/configs/commits/@openally/config.eslint@3.0.2/src/eslint)

Updates `@types/node` from 26.2.0 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-plugin-jsdoc` from 64.1.0 to 65.4.3
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v64.1.0...v65.4.3)

Updates `pkg-ok` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/abraham/pkg-ok/releases)
- [Changelog](https://github.com/abraham/pkg-ok/blob/main/CHANGELOG.md)
- [Commits](abraham/pkg-ok@v4.0.0...v5.0.0)

Updates `rimraf` from 6.1.3 to 6.1.4
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.1.3...v6.1.4)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `vite` from 8.2.1 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

Updates `@types/bytes` from 3.1.5 to 3.1.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bytes)

Updates `@playwright/test` from 1.62.1 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.64.1)

Updates `@stylistic/stylelint-plugin` from 5.3.0 to 6.0.0
- [Release notes](https://github.com/stylelint-stylistic/stylelint-stylistic/releases)
- [Changelog](https://github.com/stylelint-stylistic/stylelint-stylistic/blob/main/CHANGELOG.md)
- [Commits](stylelint-stylistic/stylelint-stylistic@v5.3.0...v6.0.0)

Updates `stylelint` from 17.14.1 to 18.0.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.14.1...18.0.0)

Updates `stylelint-config-standard` from 40.0.0 to 41.0.0
- [Release notes](https://github.com/stylelint/stylelint-config-standard/releases)
- [Changelog](https://github.com/stylelint/stylelint-config-standard/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint-config-standard@40.0.0...41.0.0)

Updates `undici` from 8.0.2 to 8.12.3
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.0.2...v8.12.3)

---
updated-dependencies:
- dependency-name: "@changesets/changelog-github"
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@openally/config.eslint"
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.4.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: pkg-ok
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: rimraf
  dependency-version: 6.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@types/bytes"
  dependency-version: 3.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@stylistic/stylelint-plugin"
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: stylelint
  dependency-version: 18.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: stylelint-config-standard
  dependency-version: 41.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: undici
  dependency-version: 8.12.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 9, 2026
@changeset-bot

changeset-bot Bot commented Nov 9, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: fa63fd1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Nov 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​changesets/​cli@​3.0.0 ⏵ 3.0.399 +110074 +191 -5100
Updatednpm/​pkg-ok@​4.0.0 ⏵ 5.0.076 +310094 +789 +1100
Updatednpm/​@​openally/​config.eslint@​2.4.3 ⏵ 3.0.279 +110094 +194 +4100
Updatednpm/​rimraf@​6.1.3 ⏵ 6.1.410010010082 -6100
Updatednpm/​vite@​8.2.1 ⏵ 8.3.599 +1100 +2282 +197100
Updatednpm/​@​types/​bytes@​3.1.5 ⏵ 3.1.610010098 +1686 +7100
Addednpm/​typescript@​7.0.29910089100100
Updatednpm/​undici@​8.0.2 ⏵ 8.12.392 -4100 +75100 +198 +2100
Updatednpm/​stylelint-config-standard@​40.0.0 ⏵ 41.0.0100 +110010092100
Updatednpm/​@​stylistic/​stylelint-plugin@​5.3.0 ⏵ 6.0.0100 +110095 +494 +4100
Updatednpm/​stylelint@​17.14.1 ⏵ 18.0.099 +110010095 -1100
Updatednpm/​@​changesets/​changelog-github@​1.0.0 ⏵ 1.0.11001009595 +2100
Updatednpm/​eslint-plugin-jsdoc@​64.1.0 ⏵ 65.4.39910010096100
Updatednpm/​@​playwright/​test@​1.62.1 ⏵ 1.64.110010010099100

View full report

@socket-security

socket-security Bot commented Nov 9, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Priority Alert  (click "▶" to expand/collapse) Action
Low priority
License policy violation: npm playwright-core under MIT WITH Google-Patent-WebM

License: MIT WITH Google-Patent-WebM - The applicable license policy does not permit this license (5) (package/lib/webp_codec.LICENSE)

From: workspaces/cli/package.json → npm/@playwright/test@1.64.1 → npm/playwright-core@1.64.1

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/playwright-core@1.64.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants