chore(deps): (deps-dev): bump the development group with 7 updates #257

dependabot · 2025-12-17T02:10:21Z

Bumps the development group with 7 updates:

Package	From	To
@types/node	`24.10.2`	`25.0.3`
@vitest/coverage-v8	`4.0.15`	`4.0.16`
esbuild	`0.27.1`	`0.27.2`
lefthook	`2.0.9`	`2.0.12`
oxlint	`1.32.0`	`1.33.0`
rollup	`4.53.3`	`4.53.5`
vitest	`4.0.15`	`4.0.16`

Updates @types/node from 24.10.2 to 25.0.3

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.0.15 to 4.0.16

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.0.16

🐞 Bug Fixes

Fix browser mode default testTimeout back to 15 seconds - by @hi-ogawa in vitest-dev/vitest#9167 (da0ad)

Avoid crashing on process.versions stub - by @AriPerkkio in vitest-dev/vitest#9174 (78cfb)

Reject calling suite function inside test - by @hi-ogawa in vitest-dev/vitest#9198 (1a259)

Allow inlining fully dynamic import - by @hi-ogawa in vitest-dev/vitest#9137 (56851)

Fix module graph UI on html reporter with headless browser mode - by @hi-ogawa in vitest-dev/vitest#9219 (60642)

Log deprecated test.poolOptions if it's set - by @sheremet-va in vitest-dev/vitest#9226 (f7f6a)

browser:

Import recordArtifact from the vitest package - by @macarie in vitest-dev/vitest#9186 (01c56)

Fix import.meta.env define - by @hi-ogawa in vitest-dev/vitest#9205 (01a9a)

String formatting bug when including placeholders in console.log - by @michael-debs and @hi-ogawa in vitest-dev/vitest#9030 and vitest-dev/vitest#9131 (84a30)

coverage:

Istanbul untested files source maps are off - by @AriPerkkio in vitest-dev/vitest#9208 (372e8)

experimental:

Export setupEnvironment for custom pools - by @AriPerkkio in vitest-dev/vitest#9187 (5d26b)

View changes on GitHub

Commits

b46d744 chore: release v4.0.16
See full diff in compare view

Updates esbuild from 0.27.1 to 0.27.2

Release notes

Sourced from esbuild's releases.

v0.27.2
Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by @hybrist.
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:
/* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}
This change was contributed by @BPJEnnova.
Additional minification of switch statements (#4176, #4359)

This release contains additional minification patterns for reducing switch statements. Here is an example:
// Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}
// New output (with --minify)

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.2
Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by @hybrist.
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:
/* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}
This change was contributed by @BPJEnnova.
Additional minification of switch statements (#4176, #4359)

This release contains additional minification patterns for reducing switch statements. Here is an example:
// Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}

... (truncated)

Commits

cd83297 publish 0.27.2 to npm
2759721 additional tests for switch with break
fd2b4b3 update release notes
c8d93a7 fix #4357: -webkit- prefix for mask shorthand (#4358)
92ff12c compat table: update @types/node
a35eceb compat table: fix a type error with the new types
f598984 fix make compat-table to install dependencies
f7f6df0 release notes for #4361
6f8ec15 fix: allow subpath imports that start with #/ (#4361)
f7ae61f minify some switch statements to if-else statement
Additional commits viewable in compare view

Updates lefthook from 2.0.9 to 2.0.12

Release notes

Sourced from lefthook's releases.

v2.0.12

Changelog

303e3f7f27239baf5e04ff27d70fb466a97ed87f chore: small changes on diff printing (#1242)

a4223e947ffb0a704bc14c11c3c35661ec20b62f feat: ability to show diff when failing on changes (#1227)

2b4c717882bb3a1254744a4d3a40408fc8ee7404 fix(git): make short status parser more robust (#1236)

v2.0.11

Changelog

dcb45c027230c883f3b9a360896708aa9d6b50a3 ci: npm trusted publishing (#1234)

fd62bbb6586477b7d090e356c27f8a9e987c82a3 feat: more rudimentary shell completions (#1230)

f7bfafdd87868ea85de46c87802ab53278b77f67 feat: refetch and cleanup on ref change (#1210)

v2.0.10

Changelog

b3791f6b3abdbea78b7c43ef85e0d3ededb69a15 feat: add no_auto_install to lefthook.yml (#1231)

1f7303df83e2af58015292986ebe2b8177c77667 fix: skip if empty files template (#1233)

Changelog

Sourced from lefthook's changelog.

2.0.12 (2025-12-15)

chore: small changes on diff printing (#1242) by @mrexox

feat: ability to show diff when failing on changes (#1227) by @scop

fix: make short status parser more robust (#1236) by @scop

docs: fix readme (#1235) by @matdibu

2.0.11 (2025-12-12)

feat: refetch and cleanup on ref change (#1210) by @mrexox

ci: npm trusted publishing (#1234) by @mrexox

feat: more rudimentary shell completions (#1230) by @scop

2.0.10 (2025-12-12)

feat: add no_auto_install to lefthook.yml (#1231) by @pavelzw

fix: skip if empty files template (#1233) by @mrexox

Commits

737b956 2.0.12: add fail_on_changes_diff hook setting
303e3f7 chore: small changes on diff printing (#1242)
a4223e9 feat: ability to show diff when failing on changes (#1227)
2b4c717 fix(git): make short status parser more robust (#1236)
59d25a3 docs: fix readme (#1235)
cffbf6c 2.0.11: improved remotes fetching, flags completion
f7bfafd feat: refetch and cleanup on ref change (#1210)
dcb45c0 ci: npm trusted publishing (#1234)
fd62bbb feat: more rudimentary shell completions (#1230)
8d74b7c 2.0.10: no_auto_install option + fix for empty {files} template
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lefthook since your current version.

Updates oxlint from 1.32.0 to 1.33.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)

2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)

bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)

5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)

7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)

2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)

ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)

6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)

7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)

732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)

a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)

ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)

3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)

ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)

e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)

6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)

85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)

fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)

ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)

dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)

989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)

cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

25d577e language_server: Start tools in parallel (#15500) (Sysix)

3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)

3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)

9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)

3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)

444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)

2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)

a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)

3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)

2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)

57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Commits

5b1bf4a release(apps): oxlint v1.33.0 && oxfmt v0.18.0 (#16888)
7510414 chore(linter): Ensure that no unknown fields are allowed in OxlintOverride st...
b1d6bac chore(oxlint): bump min tsgolint pkg version to 0.9.0 (#16829)
913b1b3 refactor(linter): rename GlobalValue::Writeable to Writable (#16609)
See full diff in compare view

Updates rollup from 4.53.3 to 4.53.5

Release notes

Sourced from rollup's releases.

v4.53.5

4.53.5

2025-12-16

Bug Fixes

Fix wrong semicolon insertion position when using JSX (#6206)

Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

#6196: fix: set sourcesContent to undefined instead of null when excluding sources content (@TrickyPi)

#6206: Fix semicolon order in JSX (@TrickyPi)

v4.53.4

4.53.4

2025-12-15

Bug Fixes

Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

#6185: chore(deps): update dependency @inquirer/prompts to v8 (@renovate[bot], @lukastaegert)

#6186: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6187: chore(deps): lock file maintenance (@renovate[bot])

#6188: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6190: Fix syntax error in manualChunks example (@jonnyeom)

#6194: chore(deps): update actions/checkout action to v6 (@renovate[bot])

#6195: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6202: fix(deps): update swc monorepo (major) (@renovate[bot])

#6203: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6209: Do not tree-shake handlers for "using" (@lukastaegert)

Changelog

Sourced from rollup's changelog.

4.53.5

2025-12-16

Bug Fixes

Fix wrong semicolon insertion position when using JSX (#6206)

Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

#6196: fix: set sourcesContent to undefined instead of null when excluding sources content (@TrickyPi)

#6206: Fix semicolon order in JSX (@TrickyPi)

4.53.4

2025-12-15

Bug Fixes

Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

#6185: chore(deps): update dependency @inquirer/prompts to v8 (@renovate[bot], @lukastaegert)

#6186: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6187: chore(deps): lock file maintenance (@renovate[bot])

#6188: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6190: Fix syntax error in manualChunks example (@jonnyeom)

#6194: chore(deps): update actions/checkout action to v6 (@renovate[bot])

#6195: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6202: fix(deps): update swc monorepo (major) (@renovate[bot])

#6203: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6209: Do not tree-shake handlers for "using" (@lukastaegert)

Commits

31bb66e 4.53.5
459c636 Fix semicolon order in JSX (#6206)
d761365 fix: set sourcesContent to undefined instead of null when excluding sources c...
7df7947 4.53.4
eb7ffe9 Do not tree-shake handlers for "using" (#6209)
02c3e4d fix(deps): lock file maintenance minor/patch updates (#6203)
55668b3 fix(deps): update swc monorepo (major) (#6202)
c5f3e1d Fix syntax error in manualChunks example (#6190)
7dcce8a fix(deps): lock file maintenance minor/patch updates (#6195)
61eb141 chore(deps): update actions/checkout action to v6 (#6194)
Additional commits viewable in compare view

Updates vitest from 4.0.15 to 4.0.16

Release notes

Sourced from vitest's releases.

v4.0.16

🐞 Bug Fixes

Fix browser mode default testTimeout back to 15 seconds - by @hi-ogawa in vitest-dev/vitest#9167 (da0ad)

Avoid crashing on process.versions stub - by @AriPerkkio in vitest-dev/vitest#9174 (78cfb)

Reject calling suite function inside test - by @hi-ogawa in vitest-dev/vitest#9198 (1a259)

Allow inlining fully dynamic import - by @hi-ogawa in vitest-dev/vitest#9137 (56851)

Fix module graph UI on html reporter with headless browser mode - by @hi-ogawa in vitest-dev/vitest#9219 (60642)

Log deprecated test.poolOptions if it's set - by @sheremet-va in vitest-dev/vitest#9226 (f7f6a)

browser:

Import recordArtifact from the vitest package - by @macarie in vitest-dev/vitest#9186 (01c56)

Fix import.meta.env define - by @hi-ogawa in vitest-dev/vitest#9205 (01a9a)

String formatting bug when including placeholders in console.log - by @michael-debs and @hi-ogawa in vitest-dev/vitest#9030 and vitest-dev/vitest#9131 (84a30)

coverage:

Istanbul untested files source maps are off - by @AriPerkkio in vitest-dev/vitest#9208 (372e8)

experimental:

Export setupEnvironment for custom pools - by @AriPerkkio in vitest-dev/vitest#9187 (5d26b)

View changes on GitHub

Commits

b46d744 chore: release v4.0.16
84a3062 fix(browser): string formatting bug when including placeholders in console.lo...
f7f6aa8 fix: log deprecated test.poolOptions if it's set (#9226)
568513c fix: allow inlining fully dynamic import (#9137)
5d26b87 fix(experimental): export setupEnvironment for custom pools (#9187)
f17eb42 refactor: avoid using isFileServingAllowed from Vite (#9160)
78cfbf9 fix: avoid crashing on process.versions stub (#9174)
da0ade2 fix: fix browser mode default testTimeout back to 15 seconds (#9167)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development group with 7 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.2` | `25.0.3` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.15` | `4.0.16` | | [esbuild](https://github.com/evanw/esbuild) | `0.27.1` | `0.27.2` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.0.9` | `2.0.12` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.32.0` | `1.33.0` | | [rollup](https://github.com/rollup/rollup) | `4.53.3` | `4.53.5` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.15` | `4.0.16` | Updates `@types/node` from 24.10.2 to 25.0.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/coverage-v8` from 4.0.15 to 4.0.16 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/coverage-v8) Updates `esbuild` from 0.27.1 to 0.27.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.27.1...v0.27.2) Updates `lefthook` from 2.0.9 to 2.0.12 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.0.9...v2.0.12) Updates `oxlint` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.33.0/npm/oxlint) Updates `rollup` from 4.53.3 to 4.53.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.53.3...v4.53.5) Updates `vitest` from 4.0.15 to 4.0.16 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/vitest) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: esbuild dependency-version: 0.27.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: lefthook dependency-version: 2.0.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: oxlint dependency-version: 1.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: rollup dependency-version: 4.53.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: vitest dependency-version: 4.0.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development ... Signed-off-by: dependabot[bot] <[email protected]>

socket-security · 2025-12-17T02:10:42Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@vitest/coverage-v8@4.0.15 ⏵ 4.0.16			^-1
esbuild@0.27.1 ⏵ 0.27.2
vitest@4.0.15 ⏵ 4.0.16	⁺¹	⁺¹	⁺²
@types/node@24.10.2 ⏵ 25.0.3			⁺¹
rollup@4.53.3 ⏵ 4.53.5	^-9
oxlint@1.32.0 ⏵ 1.33.0			⁺¹
lefthook@2.0.9 ⏵ 2.0.12	⁺¹		⁺¹

View full report

socket-security · 2025-12-17T02:10:44Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `vite` is 91.0% likely obfuscated Confidence: 0.91 Location: Package overview From: pnpm-lock.yaml → `npm/[email protected]` → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot bot added the dependencies label Dec 17, 2025

cb1kenobi merged commit 99945b7 into main Dec 17, 2025
5 checks passed

cb1kenobi deleted the dependabot/npm_and_yarn/development-7bf9275f9d branch December 17, 2025 03:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): (deps-dev): bump the development group with 7 updates #257

chore(deps): (deps-dev): bump the development group with 7 updates #257

Uh oh!

dependabot bot commented on behalf of github Dec 17, 2025

Uh oh!

socket-security bot commented Dec 17, 2025

Uh oh!

socket-security bot commented Dec 17, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

chore(deps): (deps-dev): bump the development group with 7 updates #257

chore(deps): (deps-dev): bump the development group with 7 updates #257

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 17, 2025

v4.0.16

🐞 Bug Fixes

View changes on GitHub

v0.27.2

0.27.2

v2.0.12

Changelog

v2.0.11

Changelog

v2.0.10

Changelog

2.0.12 (2025-12-15)

2.0.11 (2025-12-12)

2.0.10 (2025-12-12)

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

Oxfmt v0.12.0

v4.53.5

4.53.5

Bug Fixes

Pull Requests

v4.53.4

4.53.4

Bug Fixes

Pull Requests

4.53.5

Bug Fixes

Pull Requests

4.53.4

Bug Fixes

Pull Requests

v4.0.16

🐞 Bug Fixes

View changes on GitHub

Uh oh!

socket-security bot commented Dec 17, 2025

Uh oh!

socket-security bot commented Dec 17, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants