chore(deps-dev): bump the dev-dependencies group across 1 directory with 10 updates#126
Merged
hatayama merged 3 commits intoApr 22, 2026
Merged
Conversation
…ith 10 updates Bumps the dev-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` | | [@lavamoat/allow-scripts](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/allow-scripts) | `4.0.0` | `5.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.1` | `25.6.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.58.0` | `8.59.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.58.0` | `8.59.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.2.1` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.58.0` | `8.59.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.2` | `4.1.5` | Updates `@eslint/js` from 9.39.4 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@lavamoat/allow-scripts` from 4.0.0 to 5.0.1 - [Release notes](https://github.com/LavaMoat/LavaMoat/releases) - [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/allow-scripts/CHANGELOG.md) - [Commits](https://github.com/LavaMoat/LavaMoat/commits/aa-v5.0.1/packages/allow-scripts) Updates `@types/node` from 25.5.1 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.58.0 to 8.59.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.58.0 to 8.59.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/parser) Updates `eslint` from 9.39.2 to 10.2.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.2...v10.2.1) Updates `prettier` from 3.8.1 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.8.3) Updates `typescript` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.2...v6.0.3) Updates `typescript-eslint` from 8.58.0 to 8.59.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/typescript-eslint) Updates `vitest` from 4.1.2 to 4.1.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@lavamoat/allow-scripts" dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.59.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.59.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: eslint dependency-version: 10.2.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: prettier dependency-version: 3.8.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: typescript-eslint dependency-version: 8.59.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
2 issues found across 2 files
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name="package.json">
<violation number="1" location="package.json:58">
P3: Use an exact version for `@eslint/js` instead of a caret range to keep dependency resolution reproducible and aligned with the repo policy.</violation>
<violation number="2" location="package.json:64">
P1: Upgrading to ESLint 10 while keeping eslint-plugin-import at 2.32.0 introduces a peer-version mismatch and can break linting/tooling compatibility.</violation>
</file>
Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.
| "@eslint/js": "^9.39.1", | ||
| "@lavamoat/allow-scripts": "4.0.0", | ||
| "@types/node": "25.5.1", | ||
| "@eslint/js": "^10.0.1", |
There was a problem hiding this comment.
P3: Use an exact version for @eslint/js instead of a caret range to keep dependency resolution reproducible and aligned with the repo policy.
Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At package.json, line 58:
<comment>Use an exact version for `@eslint/js` instead of a caret range to keep dependency resolution reproducible and aligned with the repo policy.</comment>
<file context>
@@ -55,21 +55,21 @@
- "@eslint/js": "^9.39.1",
- "@lavamoat/allow-scripts": "4.0.0",
- "@types/node": "25.5.1",
+ "@eslint/js": "^10.0.1",
+ "@lavamoat/allow-scripts": "5.0.1",
+ "@types/node": "25.6.0",
</file context>
Suggested change
| "@eslint/js": "^10.0.1", | |
| "@eslint/js": "10.0.1", |
…rn/dev-dependencies-59e00320e8
Security Audit still cannot install the branch when eslint 10 is included because eslint-plugin-import 2.32.0 only supports eslint 9. Preserve the compatible eslint 9 pair and carry the remaining dev dependency updates so Dependabot can move the toolchain forward without reopening the audit breakage.
hatayama
deleted the
dependabot/npm_and_yarn/dev-dependencies-59e00320e8
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dev-dependencies group with 10 updates in the / directory:
9.39.410.0.14.0.05.0.125.5.125.6.08.58.08.59.08.58.08.59.09.39.210.2.13.8.13.8.36.0.26.0.38.58.08.59.04.1.24.1.5Updates
@eslint/jsfrom 9.39.4 to 10.0.1Release notes
Sourced from
@eslint/js's releases.... (truncated)
Commits
84fb885chore: package.json update for@eslint/jsrelease1f66734chore: addeslinttopeerDependenciesof@eslint/js(#20467)f3fbc2fchore: set@eslint/jsversion to 10.0.0 to skip releasing it (#20466)b4b3127chore: package.json update for@eslint/jsrelease0b14059chore: package.json update for@eslint/jsreleasefa31a60feat!: addnameto configs (#20015)1e2cad5chore: package.json update for@eslint/jsrelease454a292feat!: updateeslint:recommendedconfiguration (#20210)c6358c3feat!: Require Node.js^20.19.0 || ^22.13.0 || >=24(#20160)Updates
@lavamoat/allow-scriptsfrom 4.0.0 to 5.0.1Release notes
Sourced from
@lavamoat/allow-scripts's releases.... (truncated)
Changelog
Sourced from
@lavamoat/allow-scripts's changelog.Commits
d4da884chore: release main (#1957)62f17b4fix(allow-scripts): fix migration logic for v51f023d3chore: release main (#1939)1cb703achore(allow-scripts): documentation improvements (#1940)0bd9805fix(allow-scripts): usability improvements/fixes (#1941)8c834d7fix(deps): update dependency@npmcli/run-scriptto v10.0.4 (#1917)fcf80c5feat(allow-scripts)!: install scripts pinned to versionsfdffea0chore: release main (#1887)71a869cchore: lint the repo03f188dchore: upgrade ESLint v8 to v10 with flat configUpdates
@types/nodefrom 25.5.1 to 25.6.0Commits
Updates
@typescript-eslint/eslint-pluginfrom 8.58.0 to 8.59.0Release notes
Sourced from
@typescript-eslint/eslint-plugin's releases.Changelog
Sourced from
@typescript-eslint/eslint-plugin's changelog.Commits
ea9ae4fchore(release): publish 8.59.0cfca550feat(eslint-plugin): [no-unnecessary-type-assertion] report more cases based ...6d599b4chore(eslint-plugin): switch auto-generated test cases to hand-written in ret...33c8169chore: fix cspell violations in code blocks (#12167)90c2803chore(release): publish 8.58.27c9e06ffix(eslint-plugin): [no-unnecessary-condition] use assignability checks in ch...dae1732chore(eslint-plugin): switch auto-generated test cases to hand-written in unb...be6b49afix: remove tsbuildinfo cache file from published packages (#12187)5311ed3chore(release): publish 8.58.1c3f8ed5fix(eslint-plugin): [no-unused-vars] fix false negative for type predicate pa...Updates
@typescript-eslint/parserfrom 8.58.0 to 8.59.0Release notes
Sourced from
@typescript-eslint/parser's releases.Changelog
Sourced from
@typescript-eslint/parser's changelog.Commits
ea9ae4fchore(release): publish 8.59.090c2803chore(release): publish 8.58.2be6b49afix: remove tsbuildinfo cache file from published packages (#12187)5311ed3chore(release): publish 8.58.1Updates
eslintfrom 9.39.2 to 10.2.1Release notes
Sourced from eslint's releases.
... (truncated)
Commits
4d1d8f910.2.13e33105Build: changelog update for 10.2.1ca92ca0docs: reuse markdown-it instance for markdown filter (#20768)7ddfea9chore: update dependency prettier to v3.8.2 (#20770)57d2ee2docs: Enable Eleventy incremental mode for watch (#20767)c1621b9docs: fix typos in code-path-analyzer.js (#20700)fac40e1ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763)7246f92test: add tests for SuppressionsService.load() error handling (#20734)4f34b1echore: update pnpm/action-setup action to v5 (#20762)1418d52docs: Update READMEUpdates
prettierfrom 3.8.1 to 3.8.3Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
... (truncated)
Commits
d7108a7Release 3.8.3177f908Prevent trailing comma in SCSSif()function (#18471)1cd4066Release@prettier/plugin-oxc@0.1.4a8700e2Update oxc-parser to v0.125.0752157cFix tests053fd41Bump Prettier dependency to 3.8.2904c636Clean changelog_unreleaseddc1f7fcUpdate dependents countb31557cRelease 3.8.296bbaedSupport Angular v21.2 (#18722)Updates
typescriptfrom 6.0.2 to 6.0.3Release notes
Sourced from typescript's releases.
Commits
050880cBump version to 6.0.3 and LKGeeae9dd🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...ad1c695🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)0725fb4🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...Updates
typescript-eslintfrom 8.58.0 to 8.59.0Release notes
Sourced from typescript-eslint's releases.
Changelog
Sourced from typescript-eslint's changelog.
Commits
ea9ae4fchore(release): publish 8.59.090c2803chore(release): publish 8.58.2b3315fdchore: convert import eslint to import js - followup (#12100)be6b49afix: remove tsbuildinfo cache file from published packages (#12187)5311ed3chore(release): publish 8.58.1Updates
vitestfrom 4.1.2 to 4.1.5Release notes
Sourced from vitest's releases.