Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore(deps): bump the production-dependencies group across 1 directory with 10 updates

Closed
Number: #47
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: December 09, 2025 at 04:11 PM UTC
(6 months ago)
Updated: December 15, 2025 at 05:18 AM UTC
(6 months ago)
Closed: December 15, 2025 at 05:18 AM UTC
(6 months ago)
Time to Close: 6 days
Labels:
dependencies javascript
Description:

Bumps the production-dependencies group with 10 updates in the / directory:

Package From To
@webgpu/types 0.1.64 0.1.67
chalk 5.6.0 5.6.2
chokidar 4.0.3 5.0.0
is-absolute-url 4.0.1 5.0.0
rimraf 6.0.1 6.1.2
satori 0.18.2 0.18.3
shiki 3.12.2 3.19.0
@types/node 24.10.1 24.10.2
esbuild 0.27.0 0.27.1
prettier 3.7.3 3.7.4

Updates @webgpu/types from 0.1.64 to 0.1.67

Commits

Updates chalk from 5.6.0 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

Commits

Updates chokidar from 4.0.3 to 5.0.0

Release notes

Sourced from chokidar's releases.

5.0.0

  • Make the package ESM-only. Reduces on-disk package size from ~150kb to ~80kb
  • Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs
  • fix: Make types more precise paulmillr/chokidar#1424
  • perf: re-use double slash regex paulmillr/chokidar#1435
  • Update readdirp to ESM-only v5
  • Lots of minor improvements in tests
  • Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt
  • Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

Full Changelog: https://github.com/paulmillr/chokidar/compare/4.0.3...5.0.0

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chokidar since your current version.


Updates is-absolute-url from 4.0.1 to 5.0.0

Release notes

Sourced from is-absolute-url's releases.

v5.0.0

Breaking

  • Require Node.js 20 430699d
  • It now only allows http:// and https:// protocols by default 05e1989
    • To get the old behavior, pass in {httpOnly: false}

Improvements

  • Add httpOnly option and make it the default 05e1989

https://github.com/sindresorhus/is-absolute-url/compare/v4.0.1...v5.0.0

Commits

Updates rimraf from 6.0.1 to 6.1.2

Changelog

Sourced from rimraf's changelog.

6.1

  • Move to native fs/promises usage instead of promisifying manually.

6.0

  • Drop support for nodes before v20
  • Add --version to CLI

5.0

  • No default export, only named exports

4.4

  • Provide Dirent or Stats object as second argument to filter

4.3

  • Return boolean indicating whether the path was fully removed
  • Add filter option
  • bin: add --verbose, -v to print files as they are deleted
  • bin: add --no-verbose, -V to not print files as they are deleted
  • bin: add -i --interactive to be prompted on each deletion
  • bin: add -I --no-interactive to not be prompted on each deletion
  • 4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

  • Brought back glob support, using the new and improved glob v9

v4.1

  • Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.
  • Accept and ignore -rf and -fr arguments to the bin.

v4.0

  • Remove glob dependency entirely. This library now only accepts actual file and folder names to delete.
  • Accept array of paths or single path.
  • Windows performance and reliability improved.
  • All strategies separated into explicitly exported methods.
  • Drop support for Node.js below version 14
  • rewrite in TypeScript

... (truncated)

Commits

Updates satori from 0.18.2 to 0.18.3

Release notes

Sourced from satori's releases.

0.18.3

0.18.3 (2025-09-15)

Bug Fixes

  • Support forwardRef wrapped component (#601)
Commits

Updates shiki from 3.12.2 to 3.19.0

Release notes

Sourced from shiki's releases.

v3.19.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.18.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.17.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.17.0

   🚀 Features

... (truncated)

Commits
  • 61c87e8 chore: release v3.19.0
  • 0cd35ac test: use using in tests
  • a016f19 chore: release v3.18.0
  • 355d207 chore: release v3.17.1
  • b4d3a57 chore: release v3.17.0
  • e6d21b0 fix(shiki): rename createdBundledHighlighter to createBundledHighlighter ...
  • fe08ee0 chore: release v3.16.0
  • 02dab9b feat: update grammars
  • 4bf5be3 chore: update snapshot
  • 63ab64b chore: release v3.15.0
  • Additional commits viewable in compare view

Updates @types/node from 24.10.1 to 24.10.2

Commits

Updates esbuild from 0.27.0 to 0.27.1

Release notes

Sourced from esbuild's releases.

v0.27.1

  • Fix bundler bug with var nested inside if (#4348)

    This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.

  • Fix minifier bug with for inside try inside label (#4351)

    This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:

    // Original code
d: {
  e: {
    try {
      while (1) { break d }
    } catch { break e; }
  }
}

    // Old output (with --minify)
    
a:try{e:for(;;)break a}catch{break e}
    

    // New output (with --minify)
    
a:e:try{for(;;)break a}catch{break e}

  • Inline IIFEs containing a single expression (#4354)

    Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:

    // Original code
const foo = () => {
  const cb = () => {
    console.log(x())
  }
  return cb()
}

    // Old output (with --minify)
    
const foo=()=>(()=>{console.log(x())})();
    

    // New output (with --minify)
    
const foo=()=>{console.log(x())};

  • The minifier now strips empty finally clauses (#4353)

    This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.1

  • Fix bundler bug with var nested inside if (#4348)

    This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.

  • Fix minifier bug with for inside try inside label (#4351)

    This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:

    // Original code
d: {
  e: {
    try {
      while (1) { break d }
    } catch { break e; }
  }
}

    // Old output (with --minify)
    
a:try{e:for(;;)break a}catch{break e}
    

    // New output (with --minify)
    
a:e:try{for(;;)break a}catch{break e}

  • Inline IIFEs containing a single expression (#4354)

    Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:

    // Original code
const foo = () => {
  const cb = () => {
    console.log(x())
  }
  return cb()
}

    // Old output (with --minify)
    
const foo=()=>(()=>{console.log(x())})();
    

    // New output (with --minify)
    
const foo=()=>{console.log(x())};

  • The minifier now strips empty finally clauses (#4353)

    This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

... (truncated)

Commits

Updates prettier from 3.7.3 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->

<div foo="{bar}"></div>


<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->

<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3

type Foo = /** comment / (/* comment */ a | b) | c;


// Prettier 3.7.4

type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)

type X = (A | B) &

(// comment

A | B);


// Prettier 3.7.3 (second format)

type X = (

| A

</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Package:
@types/node
Ecosystem:
npm
Version Change:
24.10.1 → 24.10.2
Update Type:
Patch
Package:
prettier
Ecosystem:
npm
Version Change:
3.7.3 → 3.7.4
Update Type:
Patch
Package:
esbuild
Ecosystem:
npm
Version Change:
0.27.0 → 0.27.1
Update Type:
Patch
Package:
rimraf
Ecosystem:
npm
Version Change:
6.0.1 → 6.1.2
Update Type:
Minor
Package:
is-absolute-url
Ecosystem:
npm
Version Change:
4.0.1 → 5.0.0
Update Type:
Major
Package:
satori
Ecosystem:
npm
Version Change:
0.18.2 → 0.18.3
Update Type:
Patch
Package:
shiki
Ecosystem:
npm
Version Change:
3.12.2 → 3.19.0
Update Type:
Minor
Package:
chalk
Ecosystem:
npm
Version Change:
5.6.0 → 5.6.2
Update Type:
Patch
Package:
chokidar
Ecosystem:
npm
Version Change:
4.0.3 → 5.0.0
Update Type:
Major
Package:
@webgpu/types
Ecosystem:
npm
Version Change:
0.1.64 → 0.1.67
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 12007692
UUID: 3711632965
Node ID: PR_kwDOOraRoM639GmQ
Host: GitHub
Repository: codeyoma/codeyoma.github.io