Skip to content

chore(deps): bump the prod-deps group with 3 updates#1549

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/prod-deps-5d1885c535
Closed

chore(deps): bump the prod-deps group with 3 updates#1549
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/prod-deps-5d1885c535

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 5, 2025

Bumps the prod-deps group with 3 updates: eslint, stylelint and zx.

Updates eslint from 9.18.0 to 9.19.0

Release notes

Sourced from eslint's releases.

v9.19.0

Features

  • 1637b8e feat: add --report-unused-inline-configs (#19201) (Josh Goldberg ✨)

Bug Fixes

  • aae6717 fix: sync rule type header comments automatically (#19276) (Francesco Trotta)

Documentation

  • cfea9ab docs: Clarify overrideConfig option (#19370) (Nicholas C. Zakas)
  • 2b84f66 docs: Update README (#19362) (Nicholas C. Zakas)
  • 044f93c docs: clarify frozen rule description (#19351) (Pavel)
  • 797ee7c docs: fix Bluesky links (#19368) (Milos Djermanovic)
  • 81a9c0e docs: Update README (GitHub Actions Bot)
  • 093fb3d docs: replace var with let and const in rule examples (#19365) (Tanuj Kanti)
  • 417de32 docs: replace var with const in rule examples (#19352) (jj)
  • 17f2aae docs: update getting-started config to match default generated config (#19308) (0xDev)
  • 8a0a5a8 docs: better global ignores instruction (#19297) (Jacopo Marrone)
  • 6671a2c docs: Update README (GitHub Actions Bot)
  • e39d3f2 docs: fix divider for rule category (#19264) (Tanuj Kanti)
  • e0cf53f docs: fix search result box position for small screens (#19328) (Tanuj Kanti)
  • f92a680 docs: replace var with let or const in rule examples (#19331) (Ravi Teja Kolla)
  • b04b84b docs: revert accidental changes in TS config files docs (#19336) (Francesco Trotta)

Chores

  • 9b9cb05 chore: upgrade @​eslint/js@​9.19.0 (#19371) (Milos Djermanovic)
  • 58560e7 chore: package.json update for @​eslint/js release (Jenkins)
  • 2089707 test: fix failing test in Node.js v22.13.0 (#19345) (Francesco Trotta)
Changelog

Sourced from eslint's changelog.

v9.19.0 - January 24, 2025

  • 9b9cb05 chore: upgrade @​eslint/js@​9.19.0 (#19371) (Milos Djermanovic)
  • 58560e7 chore: package.json update for @​eslint/js release (Jenkins)
  • cfea9ab docs: Clarify overrideConfig option (#19370) (Nicholas C. Zakas)
  • 2b84f66 docs: Update README (#19362) (Nicholas C. Zakas)
  • 044f93c docs: clarify frozen rule description (#19351) (Pavel)
  • 797ee7c docs: fix Bluesky links (#19368) (Milos Djermanovic)
  • 81a9c0e docs: Update README (GitHub Actions Bot)
  • 093fb3d docs: replace var with let and const in rule examples (#19365) (Tanuj Kanti)
  • 417de32 docs: replace var with const in rule examples (#19352) (jj)
  • 17f2aae docs: update getting-started config to match default generated config (#19308) (0xDev)
  • aae6717 fix: sync rule type header comments automatically (#19276) (Francesco Trotta)
  • 8a0a5a8 docs: better global ignores instruction (#19297) (Jacopo Marrone)
  • 2089707 test: fix failing test in Node.js v22.13.0 (#19345) (Francesco Trotta)
  • 6671a2c docs: Update README (GitHub Actions Bot)
  • 1637b8e feat: add --report-unused-inline-configs (#19201) (Josh Goldberg ✨)
  • e39d3f2 docs: fix divider for rule category (#19264) (Tanuj Kanti)
  • e0cf53f docs: fix search result box position for small screens (#19328) (Tanuj Kanti)
  • f92a680 docs: replace var with let or const in rule examples (#19331) (Ravi Teja Kolla)
  • b04b84b docs: revert accidental changes in TS config files docs (#19336) (Francesco Trotta)
Commits

Updates stylelint from 16.13.2 to 16.14.1

Release notes

Sourced from stylelint's releases.

16.14.1

16.14.0

  • Added: replaced text and corresponding range to Warning type (#8234) (@​romainmenke).
  • Fixed: SyntaxError: The requested module 'table'... (#8325) (@​denisx).
  • Fixed: RuleContext['fix'] type (#8309) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated autofix of border-color and overflow (#8346) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated false negatives for overflow-x and overflow-y (#8340) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated false negatives for scrollbar-color (#8346) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated false positives for non-standard syntax values (#8329) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated warning message for overflow: <keyword> <keyword> (#8340) (@​Mouvedia).
  • Fixed: selector-pseudo-class-no-unknown false positives for :has-slotted (#8332) (@​Mouvedia).
Changelog

Sourced from stylelint's changelog.

16.14.1 - 2025-01-27

It fixes a bug with caching.

16.14.0 - 2025-01-25

It fixes 8 bugs and adds features to our Warning type.

  • Added: replaced text and corresponding range to Warning type (#8234) (@​romainmenke).
  • Fixed: SyntaxError: The requested module 'table'... (#8325) (@​denisx).
  • Fixed: RuleContext['fix'] type (#8309) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated autofix of border-color and overflow (#8346) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated false negatives for overflow-x and overflow-y (#8340) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated false negatives for scrollbar-color (#8346) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated false positives for non-standard syntax values (#8329) (@​Mouvedia).
  • Fixed: declaration-property-value-keyword-no-deprecated warning message for overflow: <keyword> <keyword> (#8340) (@​Mouvedia).
  • Fixed: selector-pseudo-class-no-unknown false positives for :has-slotted (#8332) (@​Mouvedia).
Commits
  • 92eae1d 16.14.1
  • 578a5ac Prepare 16.14.1 (#8360)
  • 8c4fc4a Fix incompatible cache file format (#8359)
  • c33ad7d Refactor at-rule regexes for clarity (#8350)
  • 15b90ad 16.14.0
  • 4fa5a91 Prepare 16.14.0 (#8330)
  • f24921c Fix SyntaxError: The requested module 'table'... (#8325)
  • e9b772f Add declaration-property-value-keyword-no-deprecated autofix for shorthands...
  • 02b814d Fix declaration-property-value-keyword-no-deprecated warning message for `o...
  • 16efbb7 Fix at-rule-descriptor-no-unknown false positives for page and margin conte...
  • Additional commits viewable in compare view

Updates zx from 8.3.0 to 8.3.2

Release notes

Sourced from zx's releases.

8.3.2 – Clogged Drain

Restrics unsafe vals usage on dotenv.stringify #1093 #1094

8.3.1 – Perfect Seal

The release essence: introduced full-featured .env support #461#1060 #1052 #1043 #1037 #1032 #1030 #1022

API

envapi is a tiny 100 LOC dotenv-inspired parser and serializer that we've integrated into zx.

import { dotenv, fs } from 'zx'
// parse
const env = dotenv.parse('A=A\nFOO=BAR') // { A: 'A', FOO: 'BAR' }
// serialize
const raw = dotenv.stringify(env) // A=A\nFOO=BAR
await fs.writeFile('.env', raw)
// load
dotenv.load('.env') // { A: 'A', FOO: 'BAR' }
// update the process.env
dotenv.config('.env')
process.env.A // A

CLI

zx --env .env script.mjs
zx --env-file .env script.mjs

QnA

— Why not use dotenv directly?
— 1) Size does matter 2) We'd like to avoid internal vaults.

— Why not load .env by default?
— 1) Explicit is better than implicit 2) Runtime itself (like bun) may provide the feature.

Chore

  • Provided stdall piping #1033
  • Exposed ProcessPromise fullCmd and unique id #1035
  • Simplified internal regexps #1040 #1038
  • Removed zx globals from unit tests scope #1039
  • Added check if tempfile exists #1041
  • Added ts support in markdown #1042
  • Enabled CodeQL and OSV scanners #1011
  • Configured pre-push git hooks #1044

... (truncated)

Commits
  • 5ba714d fix: check user input on dotenv.stringify (#1094)
  • 2772b44 ci: update gh pages actions (#1092)
  • 81a3940 docs: describe $.defaults and shell setup helpers, mention asyncIterator, a...
  • a94559d ci: update osv scanner action (#1090)
  • 8b01a81 chore: bump version to 8.4.0, update deps zurk, ps, envapi (#1089)
  • 5f40814 test: enable jsr and integration test suites (#1087)
  • 3419ab6 fmt
  • 48decce Remove v7 docs from website
  • 76ea47a Update docs.yml: install @​rollup/rollup-linux-x64-gnu
  • 60e0bb1 Update docs.yml
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 3 updates: [eslint](https://github.com/eslint/eslint), [stylelint](https://github.com/stylelint/stylelint) and [zx](https://github.com/google/zx).


Updates `eslint` from 9.18.0 to 9.19.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v9.18.0...v9.19.0)

Updates `stylelint` from 16.13.2 to 16.14.1
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@16.13.2...16.14.1)

Updates `zx` from 8.3.0 to 8.3.2
- [Release notes](https://github.com/google/zx/releases)
- [Commits](google/zx@8.3.0...8.3.2)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: stylelint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: zx
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Update one or more dependencies version javascript Pull requests that update Javascript code minor Increment the minor version when merged labels Feb 5, 2025
@changeset-bot
Copy link

changeset-bot bot commented Feb 5, 2025

⚠️ No Changeset found

Latest commit: fc96d0a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 7, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 7, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/prod-deps-5d1885c535 branch February 7, 2025 06:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Update one or more dependencies version javascript Pull requests that update Javascript code minor Increment the minor version when merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants