build(deps-dev): bump the dev-dependencies group with 5 updates by dependabot[bot] · Pull Request #8203 · ether/etherpad

dependabot · 2026-09-07T15:27:32Z

Bumps the dev-dependencies group with 5 updates:

Package	From	To
eslint	`10.9.1`	`10.10.0`
mocha	`11.8.0`	`12.0.0`
i18next	`26.4.1`	`26.4.2`
lucide-react	`1.39.0`	`1.41.0`
vitepress	`2.0.0-alpha.19`	`2.0.0-alpha.20`

Updates eslint from 10.9.1 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)

c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)

5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)

427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)

9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)

87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)

8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)

9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

2417cad docs: Update README (GitHub Actions Bot)

9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)

8724829 docs: update compat table links (#21263) (fnx)

5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)

1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))

2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])

3c753f1 chore: update eslint (#21289) (renovate[bot])

1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)

08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)

77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])

007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)

0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

Commits

3f20a57 10.10.0
f4e5284 Build: changelog update for 10.10.0
bb47dc6 fix: update dependency file-entry-cache to v11 (#20801)
427ac0a fix: use format strings in debug calls (#21247)
b3d876b chore: disable npm audit in ecosystem tests (#21306)
9d81532 fix: support __proto__ in /* exported */ comments (#21261)
264b434 feat: add d and v flags to no-unexpected-multiline (#21305)
1696682 ci: restore EMFILE test on Node.js 26 (#21297)
2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296)
87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282)
Additional commits viewable in compare view

Updates mocha from 11.8.0 to 12.0.0

Release notes

Sourced from mocha's releases.

v12.0.0

12.0.0 (2026-08-31)

🩹 Fixes

fixup parsing negative numbers and quoted strings (#6250) (2962875)

preserve FIFO descriptors when respawning (#6254) (3bb317d)

📚 Documentation

fix minor correctness issues (#6215) (e6b9ee7)

link to mochajs.org instead of the wiki (#6216) (8720225)

🧹 Chores

setup Release Please for v12 stable (#6084) (219674f)

v12.0.0-rc.6

12.0.0-rc.6 (2026-08-09)

🩹 Fixes

deps: update dependency starlight-blog to ^0.28.0 (#6153) (6b79044)

docs: restore homepage logo (#6183) (06e81a8)

docs: restore spacing around footer links (#6185) (163d751)

use main instead of exports for the package entry point (#6193) (c32a696)

📚 Documentation

blog: add community contributions post (#6172) (5fcc0fe)

blog: update community-contributions to 2026-community-sponsorships (5462d84)

fix blog/2026-community-sponsorships description (#6177) (98c4746)

sync CLI docs with v12 options and defaults (#6140) (579fd15)

🧹 Chores

deps: update dependency @playwright/test to v1.62.1 (#6197) (dcc539a)

deps: update dependency eslint to v10.8.0 (#6196) (deeeec6)

deps: update dependency globals to v17.9.0 (#6201) (c2c6d63)

deps: update dependency knip to v6.31.0 (#6166) (b7cd1bd)

deps: update dependency sinon to v22.1.0 (#6188) (284f0c2)

deps: update dependency webpack to v5.109.2 (#6194) (badf733)

extract stripLeadingDashes helper + cover CLI arg-parsing edge cases (#6171) (867e175)

fix esm-utils tests when run without coverage (#6160) (c54539f)

... (truncated)

Changelog

Sourced from mocha's changelog.

12.0.0 (2026-08-31)

🩹 Fixes

fixup parsing negative numbers and quoted strings (#6250) (2962875)

preserve FIFO descriptors when respawning (#6254) (3bb317d)

📚 Documentation

fix minor correctness issues (#6215) (e6b9ee7)

link to mochajs.org instead of the wiki (#6216) (8720225)

🧹 Chores

setup Release Please for v12 stable (#6084) (219674f)

12.0.0-rc.6 (2026-08-09)

🩹 Fixes

deps: update dependency starlight-blog to ^0.28.0 (#6153) (6b79044)

docs: restore homepage logo (#6183) (06e81a8)

docs: restore spacing around footer links (#6185) (163d751)

use main instead of exports for the package entry point (#6193) (c32a696)

📚 Documentation

blog: add community contributions post (#6172) (5fcc0fe)

blog: update community-contributions to 2026-community-sponsorships (5462d84)

fix blog/2026-community-sponsorships description (#6177) (98c4746)

sync CLI docs with v12 options and defaults (#6140) (579fd15)

🧹 Chores

deps: update dependency @playwright/test to v1.62.1 (#6197) (dcc539a)

deps: update dependency eslint to v10.8.0 (#6196) (deeeec6)

deps: update dependency globals to v17.9.0 (#6201) (c2c6d63)

deps: update dependency knip to v6.31.0 (#6166) (b7cd1bd)

deps: update dependency sinon to v22.1.0 (#6188) (284f0c2)

deps: update dependency webpack to v5.109.2 (#6194) (badf733)

extract stripLeadingDashes helper + cover CLI arg-parsing edge cases (#6171) (867e175)

fix esm-utils tests when run without coverage (#6160) (c54539f)

keep stderr out of the JSON parsed by the FIFO test (#6187) (ea6489e)

limit token perms in protect-manifest workflow (#6175) (8cf0030)

... (truncated)

Commits

07c92f9 chore(main): release 12.0.0 (#6217)
219674f chore: setup Release Please for v12 stable (#6084)
3bb317d fix: preserve FIFO descriptors when respawning (#6254)
2962875 fix: fixup parsing negative numbers and quoted strings (#6250)
e6b9ee7 docs: fix minor correctness issues (#6215)
8720225 docs: link to mochajs.org instead of the wiki (#6216)
505b5e9 chore(main): release 12.0.0-rc.6 (#6173)
c54539f chore: fix esm-utils tests when run without coverage (#6160)
dcc539a chore(deps): update dependency @playwright/test to v1.62.1 (#6197)
c2c6d63 chore(deps): update dependency globals to v17.9.0 (#6201)
Additional commits viewable in compare view

Updates i18next from 26.4.1 to 26.4.2

Release notes

Sourced from i18next's releases.

v26.4.2

fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @mahirhir (#2447).

Changelog

Sourced from i18next's changelog.

26.4.2

fix: $&, $`, $' and $$ inside a nested value ($t(key)) now stay literal. nest() handed the resolved value straight to String.replace as the replacement argument, so those sequences were read as replacement patterns: $& re-inserted the $t(...) match, $` / $' inserted the text before / after it, and $$ collapsed to $. Through t() the $& case was worse than a wrong string: the nested lookup resets the shared nesting regexp, so the re-inserted $t(...) was matched again on every pass and t() never returned — also under the default escapeValue: true when the value arrives via a variable forwarded through nesting options ($t(key, { "name": "{{name}}" }) with a name containing $&). The value is now $-escaped at the String.replace call, the same guard interpolate() already has, and a non-string value returned by a formatter in the nesting chain ($t(key, myFormat)) is stringified before that. Nested values are still not HTML-escaped (#854). Thanks @mahirhir (#2447).

Commits

4dba50f 26.4.2
e436b62 build
d955fb0 fix: stringify formatter results in nested values, changelog v26.4.2
dfafa3c fix: keep replacement patterns literal in nested values (#2447)
3c9981e chore: keep dev-only and local files out of the npm package
See full diff in compare view

Updates lucide-react from 1.39.0 to 1.41.0

Release notes

Sourced from lucide-react's releases.

Version 1.41.0

What's Changed

feat(icons): Add new icons germ and germ-off by @rrod497 in lucide-icons/lucide#4056

feat(icons): added door-stairwell icon & updated door-* icons by @jguddas in lucide-icons/lucide#3554

feat(icons): added credit-card-reader icon by @jguddas in lucide-icons/lucide#4616

feat(icons): added 'engine' icon by @benhaube in lucide-icons/lucide#4598

feat(icons): fixed germ & germ-off by @karsa-mistmere in lucide-icons/lucide#4789

chore(deps): bump the vue-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4771

feat(icons): added virus/virus-off icon by @karsa-mistmere in lucide-icons/lucide#4765

chore(copilot-reviews): Improve use-cases description. by @ericfennis in lucide-icons/lucide#4558

feat(icons): add can-soda icon by @jaynewey in lucide-icons/lucide#4718

feat(icons): added square-alert Icon by @viralcodex in lucide-icons/lucide#3687

chore(lab): Add label for lab icons by @ericfennis in lucide-icons/lucide#4793

feat(icons): changed lab/bottle-toothbrush-comb icon by @karsa-mistmere in lucide-icons/lucide#4756

ci(@lucide/lab): Create automatic release flow for @lucide/lab by @ericfennis in lucide-icons/lucide#4792

fix(icons): removed trash icon in favour of trash-2 by @jguddas in lucide-icons/lucide#3141

feat(icons): changed leaf icon by @karsa-mistmere in lucide-icons/lucide#4801

New Contributors

@jaynewey made their first contribution in lucide-icons/lucide#4718

@viralcodex made their first contribution in lucide-icons/lucide#3687

Full Changelog: lucide-icons/lucide@1.40.0...1.41.0

Version 1.40.0

What's Changed

feat(icons): added can icon by @l0uisgrange in lucide-icons/lucide#4767

feat(icons): added bridge icon by @Nykoula in lucide-icons/lucide#3949

feat(icons): added shrimp-off icon by @jguddas in lucide-icons/lucide#3613

feat(icons): added shopping-cart-plus & shopping-cart-minus icons by @Ajay199210 in lucide-icons/lucide#4248

fix(docs): updated artboard name on illustrator template by @EthanHazel in lucide-icons/lucide#4724

chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the github-actions group by @dependabot[bot] in lucide-icons/lucide#4781

feat(icons): added lighthouse icon by @Xougui in lucide-icons/lucide#4507

New Contributors

@Nykoula made their first contribution in lucide-icons/lucide#3949

@Ajay199210 made their first contribution in lucide-icons/lucide#4248

@Xougui made their first contribution in lucide-icons/lucide#4507

Full Changelog: lucide-icons/lucide@1.39.0...1.40.0

Commits

See full diff in compare view

Updates vitepress from 2.0.0-alpha.19 to 2.0.0-alpha.20

Release notes

Sourced from vitepress's releases.

v2.0.0-alpha.20

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vitepress's changelog.

2.0.0-alpha.20 (2026-09-04)

Bug Fixes

harden eager frontmatter interpolation (#5413) (09f9672)

key head entries by id and ignore meta content when deduping (b18f306), closes #5362 #5363 #5379

search: respect per-locale markdown options (#5351) (27c4a1a)

serialize config functions as code, not strings revived via new Function (close #3685) (d3b2957)

theme/regression: fix misaligned external link icon (2be52f0)

theme: adjust z-index for VPNavBar and simplify VPNavScreen styles (#5374) (35cf647)

theme: cover the external link icon's paint box with its mask (39b8f9f)

theme: drop the -webkit-backdrop-filter fallbacks (a2a0a92)

theme: fix menu dropdown group dividers (#5365) (49c84f5)

theme: fix nav screen and divider appearance (#5369) (a0401ee)

theme: fix social links spacing in dropdown (#5370) (cb636b2)

theme: handle outline bottom overscroll (#5375) (3fe901d)

theme: keep search beside the title without a nav menu (14f4f09)

theme: keep the search keycap glyphs out of the DOM text (60f656b), closes #5401

theme: mark current navigation links (#5395) (0f0fe13)

theme: paint the navbar divider on its own layer (9bebd09), closes #5399

theme: prevent layout shifts when locking page scroll (310679a), closes #5386

theme: prevent scroll chaining in local nav outline dropdown (#5367) (0a96bae)

theme: remove extra margins from first and last paragraph inside a list element (8dbd782), closes #5353

theme: render sidebar active state during ssr (005aa5c)

theme: render sidebar group toggles as native buttons (ed2bfb2), closes #5366 #5371

theme: rendering of sponsor and team components inside vp-doc containers (#4493) (b7602df)

theme: treat negative scrollY as top (#5368) (9d521db)

theme: use a getter as VPSidebar's open watch source (9aeeb4f)

theme: use relative length units to auto-close nav screen menu (#5387) (c197979)

Features

cli: make shortcuts case-insensitive (#5378) (4ffcdae)

hashed icon styles, offline dev icons, arbitrary iconify collections (#5407) (d00a5e0)

relative base (./) and assetsBase (CDN prefix) (#5406) (feadd9f)

resolve $frontmatter expressions while rendering markdown (#5412) (a1eb284)

ssr: enable throwUnhandledErrorInProduction (#5419) (a6573ff)

theme: add --vp-local-nav-divider-color (110209d)

theme: add opt-in severity-based colors for containers, alerts, and badges (#5373) (45cb85e)

theme: redesign the navbar (#5397) (26b76d6)

theme: scroll toc if active item is out of view (#5377) (72534af)

theme: un-deprecate Theme.setup and compose it across extends (#5404) (ebbd48c)

theme: use relative length units (#5323) (2a91caa)

Commits

22b64ff release: v2.0.0-alpha.20
dcf7fda chore: named imports don't work with json natively
a6573ff feat(ssr): enable throwUnhandledErrorInProduction (#5419)
09f9672 fix: harden eager frontmatter interpolation (#5413)
a1eb284 feat: resolve $frontmatter expressions while rendering markdown (#5412)
73bbaea chore: replace lodash.template with eta (#5411)
1a702fd docs: fix the appearance toggle example
7de3cae chore: generate third-party license notices for bundled deps (#5408)
d00a5e0 feat: hashed icon styles, offline dev icons, arbitrary iconify collections (#...
d3b2957 fix: serialize config functions as code, not strings revived via new Function...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.10.0` | | [mocha](https://github.com/mochajs/mocha) | `11.8.0` | `12.0.0` | | [i18next](https://github.com/i18next/i18next) | `26.4.1` | `26.4.2` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.39.0` | `1.41.0` | | [vitepress](https://github.com/vuejs/vitepress) | `2.0.0-alpha.19` | `2.0.0-alpha.20` | Updates `eslint` from 10.9.1 to 10.10.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.9.1...v10.10.0) Updates `mocha` from 11.8.0 to 12.0.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v11.8.0...v12.0.0) Updates `i18next` from 26.4.1 to 26.4.2 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v26.4.1...v26.4.2) Updates `lucide-react` from 1.39.0 to 1.41.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.41.0/packages/lucide-react) Updates `vitepress` from 2.0.0-alpha.19 to 2.0.0-alpha.20 - [Release notes](https://github.com/vuejs/vitepress/releases) - [Changelog](https://github.com/vuejs/vitepress/blob/main/CHANGELOG.md) - [Commits](vuejs/vitepress@v2.0.0-alpha.19...v2.0.0-alpha.20) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: mocha dependency-version: 12.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: i18next dependency-version: 26.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: lucide-react dependency-version: 1.41.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: vitepress dependency-version: 2.0.0-alpha.20 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 7, 2026

github-actions Bot merged commit 3bcc5aa into develop Sep 7, 2026
28 of 33 checks passed

github-actions Bot deleted the dependabot/npm_and_yarn/dev-dependencies-0c177ad4a1 branch September 7, 2026 15:27

Navigation Menu

Uh oh!

Uh oh!

build(deps-dev): bump the dev-dependencies group with 5 updates - #8203

build(deps-dev): bump the dev-dependencies group with 5 updates#8203
github-actions[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/dev-dependencies-0c177ad4a1

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026

v10.10.0

Features

Bug Fixes

Documentation

Chores

v12.0.0

12.0.0 (2026-08-31)

🩹 Fixes

📚 Documentation

🧹 Chores

v12.0.0-rc.6

12.0.0-rc.6 (2026-08-09)

🩹 Fixes

📚 Documentation

🧹 Chores

12.0.0 (2026-08-31)

🩹 Fixes

📚 Documentation

🧹 Chores

12.0.0-rc.6 (2026-08-09)

🩹 Fixes

📚 Documentation

🧹 Chores

v26.4.2

26.4.2

Version 1.41.0

What's Changed

New Contributors

Version 1.40.0

What's Changed

New Contributors

v2.0.0-alpha.20

2.0.0-alpha.20 (2026-09-04)

Bug Fixes

Features

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants