Skip to content

build(deps-dev): bump the dev-dependencies group across 1 directory with 12 updates - #376

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-c7825c3906
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-c7825c3906

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 12 updates in the / directory:

Package From To
@playwright/test 1.62.1 1.65.0
@types/node 26.4.0 26.6.6
@types/vscode 1.125.0 1.145.0
cspell 10.1.1 10.4.1
eslint 10.9.1 10.14.0
eslint-plugin-import-x 4.17.1 4.18.0
knip 6.33.0 6.44.2
lint-staged 17.4.1 17.6.0
lockfile-lint 5.0.1 5.1.0
preact-render-to-string 6.7.0 6.8.2
serve 14.2.6 14.2.7
typescript-eslint 8.68.0 8.72.1

Updates @playwright/test from 1.62.1 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
      // No other test runs while this one is running.
    });
  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
      test.skip('Not implemented yet');
    });

... (truncated)

Commits
  • a1f35e1 chore: mark v1.65.0 (#43925)
  • a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
  • 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
  • daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
  • 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
  • 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
  • 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
  • d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
  • 6e3f5ff docs: release notes for v1.65 (#43874)
  • aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
  • Additional commits viewable in compare view

Updates @types/node from 26.4.0 to 26.6.6

Commits

Updates @types/vscode from 1.125.0 to 1.145.0

Commits

Updates cspell from 10.1.1 to 10.4.1

Release notes

Sourced from cspell's releases.

v10.4.1

Fixes

fix: Show "stdin" as the file name when checking stdin (#9487)

Summary

When cspell lint checks text from stdin, the issues it reports now name the file stdin. Before, the file name was empty.

This applies to cspell lint stdin, cspell lint --file stdin, and cspell lint stdin://. With stdin://<path>, the issues still show <path>.

Before:

$ echo 'const recieve = 1;' | cspell lint --no-progress --file stdin
:1:7 - Unknown word (recieve) fix: (receive)

After:

$ echo 'const recieve = 1;' | cspell lint --no-progress --file stdin
stdin:1:7 - Unknown word (recieve) fix: (receive)

With --no-relative, the name is also stdin, instead of a stdin: URL that points to the current folder.


fix: Recognize Fortran source files (#9490)

Summary

cspell now recognizes Fortran source files. Each one gets the file type fortran, plus FortranFreeForm or FortranFixedForm, the language IDs used by the Modern Fortran extension for VS Code. Settings and dictionaries can now target Fortran files.

Feature

File type Extensions
fortran all of the extensions below
FortranFreeForm .f90, .f95, .f03, .f08, .f18, .fpp, .fypp, .pf, .cuf (CUDA Fortran)
FortranFixedForm .f, .f77, .for, .ftn

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.4.1 (2026-11-06)

Fixes

fix: cspell init updates the config in the current directory (#9552)

Summary

cspell init now updates the config file in the current directory, so you no longer need -c to point at it. Parent directories are not searched.

Feature

Run cspell init with the options you want, and it updates the config that cspell would load for the current directory:

cspell init --locale en-GB --dictionary python
  • Which file: the first match in cspell's usual search order, including .vscode/ and .config/.
  • package.json: it counts only if it has a cspell section.
  • Creating a new file: --output or --format still creates a new file, even if a config exists. --config still names the file to use.
  • No config found: cspell init creates cspell.config.yaml, as before.

JavaScript and TypeScript configs

cspell init can't edit a config such as cspell.config.mjs, so changes go in a new cspell.config.yaml that imports it. The code file is not changed, and the new file holds only what you asked for.

For example, cspell init --locale en-GB beside cspell.config.mjs creates this file:

# The locale to use when spell checking. (e.g., en, en-GB, de-DE
language: en-GB
# Configuration or packages to import.
import:
  - ./cspell.config.mjs

Before, it created a separate config that did not import the code file, which hid its settings.

The new file takes priority over the code file, so a setting it holds overrides the same setting there. If no option asks for a change, nothing is written.


... (truncated)

Commits
  • ddb1699 v10.4.1
  • 40702f3 chore: Prepare Release v10.4.1 (auto-deploy) (#9467)
  • a94754c ci: Workflow Bot -- Update ALL Dependencies (main) (#9537)
  • 90fce3b chore: Remove the VS Code launch, task, and subfolder settings files (#9557)
  • 0af12c3 chore: Remove the unused cspell-dict-nl-nl dev dependency (#9555)
  • c7129b1 fix: cspell init updates the config in the current directory (#9552)
  • 2b84f78 fix: cspell init only changes what you ask for and handles new JSON paths (...
  • 369b93c fix: cspell init no longer adds the schema to existing config files (#9550)
  • cc6ec10 chore: bump minimatch from 9.0.9 to 11.0.1 (#9523)
  • e82c2fa ci: Workflow Bot -- Update ALL Dependencies (main) (#9531)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cspell since your current version.


Updates eslint from 10.9.1 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])

... (truncated)

Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates eslint-plugin-import-x from 4.17.1 to 4.18.0

Release notes

Sourced from eslint-plugin-import-x's releases.

v4.18.0

Minor Changes

  • #520 802441c Thanks @​SwastikTripathi! - Add a checkSelfReference option to the extensions rule. When set, a package's import of its own subpath export (e.g. pkg/sub from inside pkg) is treated as a package import, so ignorePackages applies to it.

  • #403 f4d0a4b Thanks @​Zamiell! - extensions: when an import has no extension and cannot be resolved as-is, try the extensions configured as always in pattern and use the unique one that resolves for the fix or suggestion. If several resolve, report the missing extension without guessing. When no extension can be determined automatically, explain that in the missing message instead of only reporting a bare missing extension.

  • #572 fc17206 Thanks @​SwastikTripathi! - feat(no-duplicates): add a whitelist option listing entry points that share one declaration file but are different modules, such as svelte and svelte/easing

  • #504 f10dcc4 Thanks @​morgan-coded! - Add a "top" mode to the order rule's warnOnUnassignedImports option for requiring no-specifier ESM imports before assigned imports.

  • #502 9c85ced Thanks @​SukkaW! - Rewrite the module analysis core for performance boosts. The speedup depends on your project, and we expect no performance regression in any setup — if you measure one, please report it.

    Rules like named, default, namespace, no-cycle, no-deprecated, and many more, need to know what the modules you import actually export. Until now, answering that meant running the full ESLint parser over every one of those files — including everything you pull in from node_modules.

    That core has been rewritten:

    • Plain JavaScript is now read with es-module-lexer instead of being parsed. Anything it can't read faithfully — TypeScript, JSX, Flow — still goes through the ESLint parser exactly as before.
    • Analysis is lazy. Much of the work now happens when a rule actually asks for it, so enabling one rule no longer pays for what the others would have needed.
    • Results are cached and shared between rules.

    There are no breaking changes: no configuration changes are needed, and no behavior changes are intended. Every rule should report exactly what it reported before, with one known exception: an imported plain JavaScript file that has a syntax error no longer gets a "Parse errors in imported module" report. ESLint still reports the syntax error when it lints that file itself. The full test suite passes, but there could be some edge cases. If a rule starts reporting something it didn't before, or stops reporting something it should, please open an issue with a minimum reproduction — bug reports on this are very welcome.

  • #456 7b78aae Thanks @​43081j! - Add four barrel file detection rules ported from eslint-plugin-barrel-files: avoid-barrel-files, avoid-importing-barrel-files, avoid-namespace-import and avoid-re-export-all.

    avoid-importing-barrel-files checks every runtime way a module can be referenced — static imports, re-exports (export … from, export * from, export * as ns from), dynamic import() and CommonJS require() — with type-only statements exempt.

  • #157 89cfe42 Thanks @​Zamiell! - feat(no-rename-default): accept names derived from bare package paths and add a whitelist option for modules that mangle their default export names

Patch Changes

  • #562 7cbe683 Thanks @​JounQin! - perf(avoid-importing-barrel-files): skip the surface parse for a dependency that cannot be a barrel

    The rule sizes the runtime module graph behind every imported target, and a target only becomes a candidate once its export count passes amountOfExportsToConsiderModuleAsBarrel. A lexer-analyzed module already reports its export entries, so a count at or below the threshold settles the question without producing the exact export/declaration surface — one parse saved per small plain-JS dependency.

    Anything es-module-lexer does not read faithfully still goes through the parser, and a module whose source declares a default export is never ruled out: the properties of export default { … } are exports no entry count can see (a default that esModuleInterop synthesizes does not count).

    A declarator that binds no name — export const {} = obj, export const { a: {} } = obj — is no longer counted as an export by the barrel surface: it exports nothing, and counting it made the surface disagree with the lexer's entry count.

  • #568 225a5aa Thanks @​SwastikTripathi! - Fix no-extraneous-dependencies telling you to add a package that is already in devDependencies or optionalDependencies when its import resolves through @types/*

... (truncated)

Changelog

Sourced from eslint-plugin-import-x's changelog.

4.18.0

Minor Changes

  • #520 802441c Thanks @​SwastikTripathi! - Add a checkSelfReference option to the extensions rule. When set, a package's import of its own subpath export (e.g. pkg/sub from inside pkg) is treated as a package import, so ignorePackages applies to it.

  • #403 f4d0a4b Thanks @​Zamiell! - extensions: when an import has no extension and cannot be resolved as-is, try the extensions configured as always in pattern and use the unique one that resolves for the fix or suggestion. If several resolve, report the missing extension without guessing. When no extension can be determined automatically, explain that in the missing message instead of only reporting a bare missing extension.

  • #572 fc17206 Thanks @​SwastikTripathi! - feat(no-duplicates): add a whitelist option listing entry points that share one declaration file but are different modules, such as svelte and svelte/easing

  • #504 f10dcc4 Thanks @​morgan-coded! - Add a "top" mode to the order rule's warnOnUnassignedImports option for requiring no-specifier ESM imports before assigned imports.

  • #502 9c85ced Thanks @​SukkaW! - Rewrite the module analysis core for performance boosts. The speedup depends on your project, and we expect no performance regression in any setup — if you measure one, please report it.

    Rules like named, default, namespace, no-cycle, no-deprecated, and many more, need to know what the modules you import actually export. Until now, answering that meant running the full ESLint parser over every one of those files — including everything you pull in from node_modules.

    That core has been rewritten:

    • Plain JavaScript is now read with es-module-lexer instead of being parsed. Anything it can't read faithfully — TypeScript, JSX, Flow — still goes through the ESLint parser exactly as before.
    • Analysis is lazy. Much of the work now happens when a rule actually asks for it, so enabling one rule no longer pays for what the others would have needed.
    • Results are cached and shared between rules.

    There are no breaking changes: no configuration changes are needed, and no behavior changes are intended. Every rule should report exactly what it reported before, with one known exception: an imported plain JavaScript file that has a syntax error no longer gets a "Parse errors in imported module" report. ESLint still reports the syntax error when it lints that file itself. The full test suite passes, but there could be some edge cases. If a rule starts reporting something it didn't before, or stops reporting something it should, please open an issue with a minimum reproduction — bug reports on this are very welcome.

  • #456 7b78aae Thanks @​43081j! - Add four barrel file detection rules ported from eslint-plugin-barrel-files: avoid-barrel-files, avoid-importing-barrel-files, avoid-namespace-import and avoid-re-export-all.

    avoid-importing-barrel-files checks every runtime way a module can be referenced — static imports, re-exports (export … from, export * from, export * as ns from), dynamic import() and CommonJS require() — with type-only statements exempt.

  • #157 89cfe42 Thanks @​Zamiell! - feat(no-rename-default): accept names derived from bare package paths and add a whitelist option for modules that mangle their default export names

Patch Changes

  • #562 7cbe683 Thanks @​JounQin! - perf(avoid-importing-barrel-files): skip the surface parse for a dependency that cannot be a barrel

    The rule sizes the runtime module graph behind every imported target, and a target only becomes a candidate once its export count passes amountOfExportsToConsiderModuleAsBarrel. A lexer-analyzed module already reports its export entries, so a count at or below the threshold settles the question without producing the exact export/declaration surface — one parse saved per small plain-JS dependency.

    Anything es-module-lexer does not read faithfully still goes through the parser, and a module whose source declares a default export is never ruled out: the properties of export default { … } are exports no entry count can see (a default that esModuleInterop synthesizes does not count).

    A declarator that binds no name — export const {} = obj, export const { a: {} } = obj — is no longer counted as an export by the barrel surface: it exports nothing, and counting it made the surface disagree with the lexer's entry count.

... (truncated)

Commits
  • eb711a1 chore: release eslint-plugin-import-x (#514)
  • 89cfe42 feat(no-rename-default): recognize package/path names and add a whitelist opt...
  • fc17206 feat(no-duplicates): add a whitelist option for packages sharing a declaratio...
  • 4afef66 fix(no-relative-packages): keep the imported path in the suggested package im...
  • 0c82c7e fix(extensions): point directory imports at their index file in fixes (#594)
  • 9144c94 fix(order): move all out of order imports of a block in one fix (#593)
  • 7254048 fix: support minimatch v9/v10/v11 and drop makeRe (#570)
  • 47c5419 fix(no-namespace): handle members named like Object.prototype ones in the aut...
  • b2afa70 fix(namespace): don't check heritage clauses against JavaScript modules (#567)
  • 57729ae fix(prefer-namespace-import): keep a namespace specifier when splitting the d...
  • Additional commits viewable in compare view

Updates knip from 6.33.0 to 6.44.2

Release notes

Sourced from knip's releases.

Release 6.44.2

  • Follow extends in Babel configuration files (#2274) (50d9a3c1f66f8fba98cbc9c7634e817e3c8100e1) - thanks @​clean99!
  • Follow extended Stylelint configuration files (#2275) (dd45e47fb1a25c620e34cccba939a077b5df7798) - thanks @​clean99!
  • Add more shell builtins and POSIX utilities to the ignored global binaries (#2277) (7a89dec69836c1e6271dcf12ca7ce9da839d2618) - thanks @​SwastikTripathi!
  • Fix typos and grammar errors (#2279) (0be8782ac0f6e5d32b62ee00473cf3aeb72821f5) - thanks @​deining!
  • Read gatsby-config.mjs and gatsby-node.mjs in the Gatsby plugin (#2280) (daf7d03799e74f56679863cad9e394d2c337acbb) - thanks @​SwastikTripathi!
  • Ignore the uno.css virtual module in the UnoCSS plugin (#2276) (518e67f0b69bd0bb6e70f1ba98b88623713975e0) - thanks @​SwastikTripathi!
  • Read every extension React Router accepts in the React Router plugin (#2281) (97afba1e2f3890e3e0ba6916efd20af8c5d0d19d) - thanks @​SwastikTripathi!
  • Recognize Storybook module config extensions (#2273) (b697baa11feb5cdf36b6d8d813449c01d37f0955) - thanks @​clean99!
  • Skip URL imports in the SCSS compiler (#2289) (eb9892339e2fae552f070fd950264c42cdc0c1d4) - thanks @​gioboa!
  • Support custom coverage providers in the Vitest plugin (#2291) (e9e656c2dffa8167e4aa5aed1cba1372aa7ce744) - thanks @​gioboa!
  • Read npx options only before the package (#2290) (3195963cfed44767c05f39678c00cd876897b2e5) - thanks @​gioboa!
  • Accept jsx and tsx for Storybook main config (86c1133919b76a0021450b106f62c4cd300a00da)
  • Update sanity snapshot (2064858b7014b4363f26217144fc9ced33b597bf)
  • Accept -r as shorthand for --root in the Vitest plugin (30601240480f4363bf94f88a0f893304596da402)
  • Resolve commands executed with vp exec (#2285) (406a776f722b5e7e39b14b9e073bd30fe0fdf5d2) - thanks @​everton-dgn!
  • Keep production entries that bun and nub also run (#2293) (55aa0f8d60c68b4bfda4a0ff9d0804e7097b03d6) - thanks @​gioboa!
  • Remove minimumReleaseAgeExclude items (e97fe7804eebff7d85ee93380c04ee9cb998ed81)
  • Update dependencies (203e380e15c829b1bf5b2f34e165b7aeb3701580)
  • Add some prerequisites to release machinery (736327f891d749ccb6316063b2a8f00b3809d797)

Release 6.44.1

  • Narrow the docs package Node.js engine range to Astro's requirement (60589c42a12b8f26c048318017700f56cbe9bbef)
  • Follow resolve.alias in the Rsbuild plugin (#2251) (4dc61d2febaa15770f41d8a5af7d33f19de25fa3) - thanks @​fixfon!
  • Read SWC plugins from tools.swc in the Rsbuild plugin (#2253) (ad2227a52970044d727e08a73b22e9ebea811dd1) - thanks @​fixfon!
  • Read .release-it.mjs and other c12 extensions in the Release It plugin (#2258) (87816e6f311510c139e998b2b956aed612239b1d) - thanks @​SwastikTripathi!
  • Read .mocharc.mjs in the Mocha plugin (#2259) (16fee14f4ec1bcd3244a1b4cb2ac15343a4e0999) - thanks @​SwastikTripathi!
  • Restart the language server on config changes after a failed start (#2257) (f7db448226066f61ee6ee7e938cdc683bbbf433f) - thanks @​fixfon!
  • Keep the command after boolean flags in the Bun resolver (resolve #2262) (3c84cafb68b2fa3d419b03a3a5e564d60aaeef30)
  • Read babel.config.mts in the Babel plugin (#2267) (04abfd84887e57eeb5dd8e8a9044cd3aa405ad8c) - thanks @​clean99!
  • Track import().then() callback member usage (#2264) (14565eb56ec16140d30708fa498c8b34f23c1f9f) - thanks @​gioboa!
  • Reload the knip config file when the language server restarts (#2261) (fa9ca71a9a67f017e2cf209725f4ab7aa726c220) - thanks @​fixfon!
  • Read all supported CSpell configuration locations (#2265) (c6c5b2cbf6a96abef70f6f30301fc67a0f56a6cd) - thanks @​clean99!
  • Read SVGR configs from cosmiconfig search locations (#2266) (47082a803eb776166cf39399c1e4e06a737c91e7) - thanks @​clean99!
  • Handle extends arrays in the npm-package-json-lint plugin (#2269) (83c8c80a50e0d77babc5422c059ef86c53a2e548) - thanks @​clean99!
  • Read Relay configuration from package.json (#2270) (6ce8b0050006251148b3bbc42989bb430ed484ec) - thanks @​clean99!
  • Read dependencies from SWC config arrays (#2271) (5ffe9276e8a54ba00035976ad8dfe394535b9f50) - thanks @​clean99!
  • Recognize CJS and ESM data files in the Eleventy plugin (#2272) (d939417b0ea7660eae1a119d5e2ddd0aedeadca1) - thanks @​clean99!
  • Unroll case iterations in the SolidJS Vite, Buf, Eve and Nx plugin tests (5f87aabe082b3dc0db5a77d7c37119caa9b31fb3)
  • Hoist remark to the root for the VS Code remark extension (e7772700fb26260fc877e7d66b30005b1acdfef6)
  • Format root Markdown and package READMEs with pnpm remark (58c7670cfb255c395b6dfec0b70b1f25a0860d47)
  • Write readable tests (393b34864396372bd9b90ab50de96c0628ad5d91)
  • Format Markdown with remark (10c0133f697bcaecb17833094749178fb5d5f594)
  • Fix local links in Markdown (a3fd031d853f9ed55cd952a4211c75d43840c921)
  • Treat cloudflare: specifiers as runtime built-ins (#2268) (e7f261e82b0a310141aea03956d52d218929c518) - thanks @​SwastikTripathi!

Release 6.44.0

  • Clarify that custom entry still adds entry files from package.json (#2206) (4099ddeef28406ed8c9b798cf5ce525241818642) - thanks @​MannXo!
  • Resolve expanded package scripts against the directory of their manifest (#2209) (9d8464dd7335b9898a17a0db59c3c33a7ae460f4) - thanks @​fixfon!
  • Track exports through namespace member chains of any depth (#2210) (75697027e89e176c16e3d567cff3d6e016d0e9f0) - thanks @​fixfon!

... (truncated)

Commits
  • 3b3c9a6 Release knip@6.44.2
  • 203e380 Update dependencies
  • 55aa0f8 Keep production entries that bun and nub also run (#2293)
  • 406a776 Resolve commands executed with vp exec (#2285)
  • 3060124 Accept -r as shorthand for --root in the Vitest plugin
  • 86c1133 Accept jsx and tsx for Storybook main config
  • 3195963 Read npx options only before the package (#2290)
  • e9e656c Support custom coverage providers in the Vitest plugin (#2291)
  • eb98923 Skip URL imports in the SCSS compiler (#2289)
  • b697baa Recognize Storybook module config extensions (#2273)
  • Additional commits viewable in compare view

Updates lint-staged from 17.4.1 to 17.6.0

Release notes

Sourced from lint-staged's releases.

v17.6.0

Minor Changes

  • #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

    import { defineConfig } from 'lint-staged/config'
    export default defineConfig({
    '*': {
    title: 'Fail if PDF files are committed',
    task: async (filepaths, { log }) => {
    const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
    if (pdfFiles.length > 0) {
    log('PDF files should not be committed: %s', pdfFiles)
    throw new Error('Failed')
    }
    },
    },
    })

  • #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

    If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

  • #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

  • #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

    import { defineConfig } from 'lint-staged/config'
    export default defineConfig({
    '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
    })

  • #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

  • #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

v17.5.1

Patch Changes

  • #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

    A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.6.0

Minor Changes

  • #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

    import { defineConfig } from 'lint-staged/config'
    export default defineConfig({
    '*': {
    title: 'Fail if PDF files are committed',
    task: async (filepaths, { log }) => {
    const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
    if (pdfFiles.length > 0) {
    log('PDF files should not be committed: %s', pdfFiles)
    throw new Error('Failed')
    }
    },
    },
    })

  • #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured glo...

    Description has been truncated

…ith 12 updates

Bumps the dev-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.65.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.6.6` |
| [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.125.0` | `1.145.0` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.1.1` | `10.4.1` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.14.0` |
| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.17.1` | `4.18.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.33.0` | `6.44.2` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.6.0` |
| [lockfile-lint](https://github.com/lirantal/lockfile-lint/tree/HEAD/packages/lockfile-lint) | `5.0.1` | `5.1.0` |
| [preact-render-to-string](https://github.com/preactjs/preact-render-to-string) | `6.7.0` | `6.8.2` |
| [serve](https://github.com/vercel/serve) | `14.2.6` | `14.2.7` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.68.0` | `8.72.1` |



Updates `@playwright/test` from 1.62.1 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.65.0)

Updates `@types/node` from 26.4.0 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/vscode` from 1.125.0 to 1.145.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode)

Updates `cspell` from 10.1.1 to 10.4.1
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.4.1/packages/cspell)

Updates `eslint` from 10.9.1 to 10.14.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.14.0)

Updates `eslint-plugin-import-x` from 4.17.1 to 4.18.0
- [Release notes](https://github.com/un-ts/eslint-plugin-import-x/releases)
- [Changelog](https://github.com/un-ts/eslint-plugin-import-x/blob/master/CHANGELOG.md)
- [Commits](un-ts/eslint-plugin-import-x@v4.17.1...v4.18.0)

Updates `knip` from 6.33.0 to 6.44.2
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.44.2/packages/knip)

Updates `lint-staged` from 17.4.1 to 17.6.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.4.1...v17.6.0)

Updates `lockfile-lint` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/lirantal/lockfile-lint/releases)
- [Changelog](https://github.com/lirantal/lockfile-lint/blob/main/packages/lockfile-lint/CHANGELOG.md)
- [Commits](https://github.com/lirantal/lockfile-lint/commits/lockfile-lint-api@5.1.0/packages/lockfile-lint)

Updates `preact-render-to-string` from 6.7.0 to 6.8.2
- [Release notes](https://github.com/preactjs/preact-render-to-string/releases)
- [Changelog](https://github.com/preactjs/preact-render-to-string/blob/main/CHANGELOG.md)
- [Commits](preactjs/preact-render-to-string@v6.7.0...v6.8.2)

Updates `serve` from 14.2.6 to 14.2.7
- [Release notes](https://github.com/vercel/serve/releases)
- [Changelog](https://github.com/vercel/serve/blob/main/CHANGELOG.md)
- [Commits](vercel/serve@v14.2.6...v14.2.7)

Updates `typescript-eslint` from 8.68.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@types/vscode"
  dependency-version: 1.145.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: cspell
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-version: 10.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-import-x
  dependency-version: 4.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: knip
  dependency-version: 6.44.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: lint-staged
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: lockfile-lint
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: preact-render-to-string
  dependency-version: 6.8.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: serve
  dependency-version: 14.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2026
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants