An open index of dependabot pull requests across open source projects.

chore(deps-dev): bump the all group across 1 directory with 3 updates

Open
Number: #1728
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: May 04, 2026 at 12:25 AM UTC
(3 months ago)
Updated: May 22, 2026 at 07:12 PM UTC
(2 months ago)
Labels:
dependencies javascript
Description:

Bumps the all group with 3 updates in the / directory: eslint, neostandard and pre-commit.

Updates eslint from 9.39.4 to 10.4.0

Release notes

Sourced from eslint's releases.

v10.4.0

Features

  • 1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)
  • 450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

  • 544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)
  • 6799431 fix: update dependency @​eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])
  • f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

  • 7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)
  • db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)
  • 9084664 docs: Update README (GitHub Actions Bot)
  • 9cc7387 docs: Update README (GitHub Actions Bot)
  • 3d7b548 docs: Update README (GitHub Actions Bot)
  • 191ec3c docs: Update README (GitHub Actions Bot)

Chores

  • 6616856 chore: upgrade knip to v6 (#20875) (Pixel998)
  • d13b084 ci: ensure auto-created PRs run CI (#20860) (lumir)
  • e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862) (dependabot[bot])
  • d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863) (kuldeep kumar)
  • 24db8cb test: add tests for SuppressionsService.save() (#20802) (kuldeep kumar)
  • 2ef0549 chore: update ecosystem plugins (#20857) (github-actions[bot])
  • a429791 ci: remove eslint-webpack-plugin types integration test (#20668) (Milos Djermanovic)
  • 9e37386 chore: replace recast with range approach in code-sample-minimizer (#20682) (Copilot)
  • 0dd1f9f test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#20845) (Francesco Trotta)
  • 9da3c7b refactor: remove deprecated meta.language and migrate meta.dialects (#20716) (Pixel998)
  • 2099ed1 refactor: add meta.defaultOptions to more rules, enable linting (#20800) (xbinaryx)
  • f1dfbc9 chore: update ecosystem plugins (#20836) (github-actions[bot])
  • c759413 ci: bump pnpm/action-setup from 6.0.3 to 6.0.5 (#20843) (dependabot[bot])
  • 5b817d6 test: add unit tests for lib/shared/ast-utils (#20838) (kuldeep kumar)
  • 1c13ae3 test: add unit tests for lib/shared/severity (#20835) (kuldeep kumar)

v10.3.0

Features

  • 379571a feat: add suggestions for no-unused-private-class-members (#20773) (sethamus)

Bug Fixes

  • b6ae5cf fix: handle unavailable require cache (#20812) (Simon Podlipsky)
  • 6fb3685 fix: rule suggestions cause continuation in class body (#20787) (Milos Djermanovic)

Documentation

  • 32cc7ab docs: fix typos in docs and comments (#20809) (Tanuj Kanti)
  • 7f47937 docs: Update README (GitHub Actions Bot)

Chores

  • d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826) (Francesco Trotta)
  • 3ffb14e chore: clean up typos in comments and JSDoc (#20821) (Pixel998)

... (truncated)

Commits

Updates neostandard from 0.12.2 to 0.13.0

Release notes

Sourced from neostandard's releases.

v0.13.0

0.13.0 (2026-02-26)

⚠ BREAKING CHANGES

  • Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339)
  • eslint-plugin-import-x is no longer included by default. Projects relying on import-x rules will need to manually install and configure eslint-plugin-import-x. See the "Adding back import checking" section in the README for migration instructions. As an alternative, we recommend using TypeScript's compiler (tsc --noEmit) for import validation, which provides more comprehensive checking.
  • update dependency globals to v17 (#335)

🌟 Features

  • deps: update dependency globals to ^17.2.0 (#347) (66d504e)
  • deps: update dependency typescript-eslint to ^8.54.0 (#348) (2cdd443)
  • deps: update dependency typescript-eslint to ^8.56.0 (#357) (fe4ba92)
  • remove eslint-plugin-import-x and related dependencies (#330) (248de35)
  • Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339) (ba575f3)
  • update dependency globals to v17 (#335) (a856b81)

🩹 Fixes

  • deps: update dependency eslint-plugin-n to ^17.23.2 (#303) (76d50ed)
  • deps: update dependency find-up to v8 (#324) (d95b6e3)
  • deps: update dependency globals to ^17.3.0 (#351) (94ab3ce)
  • deps: update dependency peowly to ^1.3.3 (#356) (b873608)
  • deps: update dependency typescript-eslint to ^8.53.1 (#322) (6beb36b)

🧹 Chores

Changelog

Sourced from neostandard's changelog.

0.13.0 (2026-02-26)

⚠ BREAKING CHANGES

  • Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339)
  • eslint-plugin-import-x is no longer included by default. Projects relying on import-x rules will need to manually install and configure eslint-plugin-import-x. See the "Adding back import checking" section in the README for migration instructions. As an alternative, we recommend using TypeScript's compiler (tsc --noEmit) for import validation, which provides more comprehensive checking.
  • update dependency globals to v17 (#335)

🌟 Features

  • deps: update dependency globals to ^17.2.0 (#347) (66d504e)
  • deps: update dependency typescript-eslint to ^8.54.0 (#348) (2cdd443)
  • deps: update dependency typescript-eslint to ^8.56.0 (#357) (fe4ba92)
  • remove eslint-plugin-import-x and related dependencies (#330) (248de35)
  • Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339) (ba575f3)
  • update dependency globals to v17 (#335) (a856b81)

🩹 Fixes

  • deps: update dependency eslint-plugin-n to ^17.23.2 (#303) (76d50ed)
  • deps: update dependency find-up to v8 (#324) (d95b6e3)
  • deps: update dependency globals to ^17.3.0 (#351) (94ab3ce)
  • deps: update dependency peowly to ^1.3.3 (#356) (b873608)
  • deps: update dependency typescript-eslint to ^8.53.1 (#322) (6beb36b)

🧹 Chores

Commits
  • cc16b7e chore(main): release 0.13.0 (#337)
  • d3af897 chore(dependents): update canary npm data (#346)
  • d95b6e3 fix(deps): update dependency find-up to v8 (#324)
  • fe4ba92 feat(deps): update dependency typescript-eslint to ^8.56.0 (#357)
  • bb772ac chore(deps): update all non-major dev dependencies (#352)
  • caed7a7 chore(deps): update dependency npm-run-all2 to v8 (#294)
  • 33c7dd8 chore(deps): update dependency installed-check to v10 (#359)
  • 94ab3ce fix(deps): update dependency globals to ^17.3.0 (#351)
  • b873608 fix(deps): update dependency peowly to ^1.3.3 (#356)
  • ba575f3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for neostandard since your current version.


Updates pre-commit from 1.2.2 to 2.0.0

Changelog

Sourced from pre-commit's changelog.

2.0.0

  • Breaking: requires Node.js 16.13 or newer. engines.node is now declared as ">=16.13.0" to match the minimum required by which@4.
  • Breaking: cross-spawn upgraded ^5 β†’ ^7.0.5, fixing the ReDoS vulnerability (GHSA-3xgq-45jj-v275). cross-spawn's spawnSync now returns status/signal/error instead of code; index.js was updated to match.
  • Breaking: which upgraded 1.2.x β†’ ^4. The spawn-sync runtime dependency is dropped in favor of cross-spawn's built-in spawnSync.
  • Breaking: the generated .git/hooks/pre-commit wrapper is rewritten. It is now a small bash script that execs the package's hook file via an absolute path (single-line invocation instead of multi-line inline bash). Anyone parsing the wrapper file will need to adjust.
  • Breaking: hook file mode tightened from 0777 to 0755 (CIS 6.1.10).
  • Breaking: submodule installs now write to <super>/.git/modules/<sub>/hooks/pre-commit. The previous behavior silently walked up to the super-project's .git directory and installed there because the gitdir-parsing branch was unreachable. Linked worktrees (whose .git is also a file) are handled correctly too.
  • The hook now unsets GIT_LITERAL_PATHSPECS, so commits triggered from emacs/magit behave the same as on the command line (magit FAQ).
  • The hook now cds to the git root before resolving pre-commit via require.resolve, so Yarn Plug'n'Play and GUI git clients that invoke hooks with an unexpected cwd resolve dependencies correctly.
  • The hook is resilient to a missing pre-commit package: switching to a branch without node_modules (or removing the package) no longer blocks commits β€” it exits 0 with a warning instead of throwing a Node module-not-found stack trace.
  • Fixed handling of null close codes and signal-terminated scripts; the hook no longer treats a signal kill as success.
  • Hardened install.js gitdir parsing against missing matches and bad input; gitdir: paths are resolved relative to the directory containing the .git file (was incorrectly resolved against the package root).
  • install.js: typo fix ("backuped" β†’ "backed up").
  • Dev tooling refresh: mocha 3 β†’ 10, assume 1 β†’ 2, dropped istanbul for nyc.

1.0.2

  • Check /usr/local/bin/node if we cannot find the binaries in the PATH.

1.0.1

  • Corrected the hook file so it doesn't attempt to run your index.js but ours instead.

1.0

  • Create symlinks instead of a copying the hook file so we can depend on modules.
  • More readable output messages.

... (truncated)

Commits

Package Dependencies
Package:
eslint
Ecosystem:
npm
Version Change:
9.39.4 β†’ 10.4.0
Update Type:
Major
Package:
neostandard
Ecosystem:
npm
Version Change:
0.12.2 β†’ 0.13.0
Update Type:
Minor
Package:
pre-commit
Ecosystem:
npm
Version Change:
1.2.2 β†’ 2.0.0
Update Type:
Major
Technical Details
ID: 15882193
UUID: 4373390233
Node ID: PR_kwDOBNnUgs7X2F_P
Host: GitHub
Repository: nodejs/node-addon-api