Skip to content

chore(deps): bump the minor-and-patch group with 10 updates#877

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-5fef9e1f3f
Open

chore(deps): bump the minor-and-patch group with 10 updates#877
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-5fef9e1f3f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 10 updates:

Package From To
@svgdotjs/svg.js 3.2.5 3.2.6
@typescript-eslint/eslint-plugin 8.63.0 8.64.0
@typescript-eslint/parser 8.63.0 8.64.0
firebase-tools 15.23.0 15.24.0
lint-staged 17.0.8 17.1.0
svgdom 0.1.23 0.1.27
tsx 4.23.0 4.23.1
turbo 2.10.4 2.10.5
ws 8.21.0 8.21.1
astro 7.0.7 7.1.1

Updates @svgdotjs/svg.js from 3.2.5 to 3.2.6

Release notes

Sourced from @​svgdotjs/svg.js's releases.

Release 3.2.6

Changed

  • upgrade svgdom and the development dependencies, including Babel 8
  • migrate builds from Rollup to Rolldown and code-quality checks from ESLint and Prettier to Oxlint and Oxfmt
  • use the standard Browserslist defaults and remove obsolete Sauce Labs tooling

Fixed

  • preserve namespaces and escaping when serializing SVG in the IE polyfill
  • make the IE outerHTML polyfill replace the target element and reject invalid markup
  • return complete inline styles, including values containing colons and !important
  • allow zero width or height in animated size() calls
  • keep the animator scheduler running after a callback throws
  • honor zero-valued transform positions
  • resolve references safely and match exact targets when IDs contain CSS-special characters
  • preserve multiline text metadata when writing SVG.js data to the DOM
  • align TypeScript declarations with the package's runtime exports and behavior
  • point published browser, ESM, and CommonJS entry points at the built distributions
  • isolate cached parser elements when switching between documents
  • handle document fragments correctly in parents()
  • restore the previous window context when a withWindow() callback throws
  • remove every matching listener when the same callback is registered multiple times
Changelog

Sourced from @​svgdotjs/svg.js's changelog.

[3.2.6]

Changed

  • upgrade svgdom and the development dependencies, including Babel 8
  • migrate builds from Rollup to Rolldown and code-quality checks from ESLint and Prettier to Oxlint and Oxfmt
  • use the standard Browserslist defaults and remove obsolete Sauce Labs tooling

Fixed

  • preserve namespaces and escaping when serializing SVG in the IE polyfill
  • make the IE outerHTML polyfill replace the target element and reject invalid markup
  • return complete inline styles, including values containing colons and !important
  • allow zero width or height in animated size() calls
  • keep the animator scheduler running after a callback throws
  • honor zero-valued transform positions
  • resolve references safely and match exact targets when IDs contain CSS-special characters
  • preserve multiline text metadata when writing SVG.js data to the DOM
  • align TypeScript declarations with the package's runtime exports and behavior
  • point published browser, ESM, and CommonJS entry points at the built distributions
  • isolate cached parser elements when switching between documents
  • handle document fragments correctly in parents()
  • restore the previous window context when a withWindow() callback throws
  • remove every matching listener when the same callback is registered multiple times
Commits
  • 653ab3c release 3.2.6
  • bd9b28c Align public API declarations
  • 26519a5 Modernize development toolchain
  • 14db829 Fix event cleanup and Corepack setup
  • f449179 Make release builds side-effect free
  • 04f49ad Make build banners reproducible
  • 1ec323f Expand packed package contract tests
  • 4018bea Fix image fixture loading tests
  • 55809e2 Remove unused test coverage checker
  • 56281be Use native XML serialization in IE polyfill
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.63.0 to 8.64.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

  • support parsing import defer (#12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.64.0 (2026-07-13)

🚀 Features

  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 414d9ab chore(release): publish 8.64.0
  • bcfe16f feat(eslint-plugin): [no-loop-func] support using / await using declarati...
  • 5b5bfde fix(eslint-plugin): [require-array-sort-compare] handle constrained arrays (#...
  • 321856c chore: cleanup cspell config (#12526)
  • b418cf5 feat(typescript-estree): throw for invalid definite assignment in class prope...
  • 737de2b docs: align unified-signatures correct example parameter (#12506)
  • a63c17a docs: fix shadowed parameter name in unified-signatures example (#12502)
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.63.0 to 8.64.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

  • support parsing import defer (#12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates firebase-tools from 15.23.0 to 15.24.0

Release notes

Sourced from firebase-tools's releases.

v15.24.0

  • Add declarative security support and automated rolling IAM role grants/revocations for 2nd gen Cloud Functions
  • Fixed an issue in apps:create where App Store ID was always prompted for even when unnecessary.
  • Add functions:lifecycle:list and functions:lifecycle:run commands to view and run lifecycle hooks in isolation.
  • Updated the Firebase SQL Connect local toolkit to v3.4.15, which supports for 1:1 nested mutations. (#10773)
  • Support for specifying that the input for a string or string[] param in Functions must be non-empty (#10678)
  • Removed the warning that Dart functions may not yet be visible in the Firebase Console, since they are now shown.
  • Fixed dataconnect:execute command help text. The right env var should be FIREBASE_DATA_CONNECT_EMULATOR_HOST, with an underscore between DATA and CONNECT.
  • Updated the Firebase SQL Connect local toolkit to v3.4.16, which includes the following changes:
    • Updated the Golang dependency version to 1.25.12.
  • Fixed a Hosting emulator timeout when a web frameworks request with a body falls through to a function rewrite. (#10760)
Commits
  • 6e56bbf 15.24.0
  • 58e5520 feat: implement progressive CLI help disclosure and dynamic deploy help (#10772)
  • f86d2fa preserve request body when a web frameworks rewrite falls through to a Cloud ...
  • c925ef7 chore: upgrade firebase-admin and firebase-functions in E2E tests (#10793)
  • 6f7e5ef Update FDC emulator to v3.4.16 (#10798)
  • 8ed5f8f Fix env var name in dataconnect:execute help text. (#10771)
  • c5fc05b Release v2.4.2 (#10745)
  • c5ba39a Rename DeploymentEvent to LifecycleEvent to ensure we have consistent naming ...
  • 83570ee fix(security): default service account sentinel and partial deploy validation...
  • bdf7c51 feat: prompt user before executing lifecycle hooks when recovering from parti...
  • Additional commits viewable in compare view

Updates lint-staged from 17.0.8 to 17.1.0

Release notes

Sourced from lint-staged's releases.

v17.1.0

Minor Changes

  • #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

    Before:

    Size of node_modules/ after installing: 1561.7 kB with 29 packages.

    Fancy interactive spinners, but output dynamically changes:

    ✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...

    After:

    Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

    Simpler but more explicit output:

    ⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!

Patch Changes

  • #1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

  • #1818 efb23a2 - Console output colors are enabled/disabled more consistently.

  • #1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

Changelog

Sourced from lint-staged's changelog.

17.1.0

Minor Changes

  • #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

    Before:

    Size of node_modules/ after installing: 1561.7 kB with 29 packages.

    Fancy interactive spinners, but output dynamically changes:

    ✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...

    After:

    Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

    Simpler but more explicit output:

    ⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!

Patch Changes

  • #1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

  • #1818 efb23a2 - Console output colors are enabled/disabled more consistently.

... (truncated)

Commits
  • dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
  • aad7f3b chore(changeset): release
  • 11b1d5c Merge pull request #1818 from lint-staged/fixes
  • efb23a2 fix: enable colors globally based on option
  • 26112a1 fix: function task failure kills other tasks, unless --continue-on-error wa...
  • 9b98b7f fix: handle error when calculating hash of unstaged changes
  • d43432b fix: do not allow NaN concurrency
  • bd4dcbf fix: do not drop backup stash when restoring unstaged changes fails and using...
  • 9153a77 Merge pull request #1816 from lint-staged/replace-listr2
  • 290e618 refactor: use common identity function
  • Additional commits viewable in compare view

Updates svgdom from 0.1.23 to 0.1.27

Changelog

Sourced from svgdom's changelog.

0.1.27 - 2026-07-18

Changed

  • Documented common server-side, testing, and asset-pipeline use cases for svgdom.

Fixed

  • Fixed getBoundingClientRect() for SVG elements embedded under plain HTML parents.
  • Bounded arc-length approximation to prevent stack overflows and return finite lengths for difficult arcs.
  • Preserved extrema of nearly quadratic cubic curves in path bounding boxes.
  • Included letter-spacing when calculating text bounding boxes.

0.1.26 - 2026-07-17

Changed

  • Raised the minimum supported Node.js version to 22.13, allowing CommonJS consumers to load svgdom directly with require().
  • Updated image-size and Mocha, removed the obsolete webpack toolchain, and patched transitive test dependencies.

0.1.25 - 2026-07-16

Added

  • Added selector support for :empty, :has(), :is(), :where(), nested functional pseudo-classes, and the of <selector> syntax for :nth-child() and :nth-last-child().
  • Added a CSSStyleDeclaration implementation for Element.style with cssText, custom properties, priorities, ordered enumeration, and synchronized style attributes.

Changed

  • Moved development and dependency management from npm to pnpm.
  • Separated semantic linting with ESLint from code formatting with Prettier.

Fixed

  • Structural child pseudo-classes now count only element siblings and correctly support An+B formulas, including negative coefficients and whitespace.
  • Fixed namespace-aware DOM creation, lookup, fragment parsing, and XML serialization, including inherited bindings, prefix collisions, namespaced attributes, CDATA, and foreign elements.
Commits
  • 790b319 release 0.1.27
  • 9a0603b docs: explain svgdom use cases (#44)
  • 7b6ca49 fix: include letter spacing in text bounding boxes (#9)
  • babb12c fix: retain cubic path extrema in bounding boxes (#89)
  • 32a185b fix: bound arc length approximation (#91)
  • 59f1ef6 fix: support SVG client rects under HTML parents (#139)
  • aaf1b5b release 0.1.26 with dependency updates
  • 42493b5 Require Node 22.13 or newer
  • a4d0a56 release 0.1.25
  • 621b37d chore: ignore formatting commit in blame
  • Additional commits viewable in compare view

Updates tsx from 4.23.0 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

  • support tsImport after global preload (8d4ffc2)
  • watch: avoid clearing piped output (95d0672)
  • watch: treat script and dependency paths literally (79fddde)

Performance Improvements

  • index transform cache lazily (e818ad6)
  • load esbuild lazily in CLI (d067938)
  • map Node TypeScript formats directly (cdcc623)
  • use sync module hooks on Node v22.22.3+ (f8992f1)

This release is also available on:

Commits
  • 79fddde fix(watch): treat script and dependency paths literally
  • e818ad6 perf: index transform cache lazily
  • cdcc623 perf: map Node TypeScript formats directly
  • d067938 perf: load esbuild lazily in CLI
  • 95d0672 fix(watch): avoid clearing piped output
  • 6fd4607 docs: add per-page metadata
  • f4176d8 docs: generate sitemap
  • 8d4ffc2 fix: support tsImport after global preload
  • f0e89b2 docs: document Node's public type-stripping API vs internal loader path
  • f8992f1 perf: use sync module hooks on Node v22.22.3+
  • See full diff in compare view

Updates turbo from 2.10.4 to 2.10.5

Release notes

Sourced from turbo's releases.

Turborepo v2.10.5

What's Changed

Changelog

... (truncated)

Commits

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • a2f4e7c [fix] Count empty fragments toward the limit (#2329)
  • e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
  • 4ea355d [doc] Document 32-bit signed integer coercion for option values
  • 2120f4c [example] Remove uuid dependency
  • 4c534a6 [security] Add latest vulnerability to SECURITY.md
  • See full diff in compare view

Updates astro from 7.0.7 to 7.1.1

Release notes

Sourced from astro's releases.

astro@7.1.1

Patch Changes

astro@7.1.0

Minor Changes

  • #17302 5f4dc03 Thanks @​astrobot-houston! - Adds a new deferRender option to the glob() content loader

    When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

    This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.

    // src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});

    By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.

  • #17296 30698a2 Thanks @​ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

    By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

    Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: 'chunked',
},
});

    Because each part file is named by a hash of its contents, unchanged parts keep the same name across builds and are not rewritten, and identical parts are deduplicated. The default value is 'single-file', which preserves the current behavior.

  • #17214 44c4989 Thanks @​ematipico! - Adds support for the more specific CSP directives script-src-elem, script-src-attr, style-src-elem, and style-src-attr through a new kind option.

    Previously, CSP was only scoped to generic script-src/style-src directives. Now each source or hash can be scoped to a narrower directive — for example, to allow inline style attributes (such as those from define:vars or Shiki) without loosening the policy for your <style> and <link> elements.

    Scoping sources and hashes in your config

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.1

Patch Changes

7.1.0

Minor Changes

  • #17302 5f4dc03 Thanks @​astrobot-houston! - Adds a new deferRender option to the glob() content loader

    When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

    This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.

    // src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});

    By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.

  • #17296 30698a2 Thanks @​ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

    By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

    Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: 'chunked',
},
});

    Because each part file is named by a hash of its contents, unchanged parts keep the same name across builds and are not rewritten, and identical parts are deduplicated. The default value is 'single-file', which preserves the current behavior.

  • #17214 44c4989 Thanks @​ematipico! - Adds support for the more specific CSP directives script-src-elem, script-src-attr, style-src-elem, and style-src-attr through a new kind option.

    Previously, CSP was only scoped to generic script-src/style-src directives. Now each source or hash can be scoped to a narrower directive — for example, to allow inline style attributes (such as those from define:vars or Shiki) without loosening the policy for your <style> and <link> elements.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-and-patch group with 10 updates
f1198e8 
Bumps the minor-and-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@svgdotjs/svg.js](https://github.com/svgdotjs/svg.js) | `3.2.5` | `3.2.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.63.0` | `8.64.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.63.0` | `8.64.0` |
| [firebase-tools](https://github.com/firebase/firebase-tools) | `15.23.0` | `15.24.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.8` | `17.1.0` |
| [svgdom](https://github.com/svgdotjs/svgdom) | `0.1.23` | `0.1.27` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.1` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.4` | `2.10.5` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.0.7` | `7.1.1` |


Updates `@svgdotjs/svg.js` from 3.2.5 to 3.2.6
- [Release notes](https://github.com/svgdotjs/svg.js/releases)
- [Changelog](https://github.com/svgdotjs/svg.js/blob/master/CHANGELOG.md)
- [Commits](svgdotjs/svg.js@3.2.5...3.2.6)

Updates `@typescript-eslint/eslint-plugin` from 8.63.0 to 8.64.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.63.0 to 8.64.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/parser)

Updates `firebase-tools` from 15.23.0 to 15.24.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v15.23.0...v15.24.0)

Updates `lint-staged` from 17.0.8 to 17.1.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.0.8...v17.1.0)

Updates `svgdom` from 0.1.23 to 0.1.27
- [Changelog](https://github.com/svgdotjs/svgdom/blob/master/changelog.md)
- [Commits](svgdotjs/svgdom@0.1.23...0.1.27)

Updates `tsx` from 4.23.0 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.1)

Updates `turbo` from 2.10.4 to 2.10.5
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.4...v2.10.5)

Updates `ws` from 8.21.0 to 8.21.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.1)

Updates `astro` from 7.0.7 to 7.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.1/packages/astro)

---
updated-dependencies:
- dependency-name: "@svgdotjs/svg.js"
  dependency-version: 3.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: firebase-tools
  dependency-version: 15.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lint-staged
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: svgdom
  dependency-version: 0.1.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: turbo
  dependency-version: 2.10.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ws
  dependency-version: 8.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: astro
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026
@dependabot
dependabot Bot requested a review from niklam as a code owner July 19, 2026 02:58
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026
@github-actions github-actions Bot added the type: chore Maintenance label Jul 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@niklam niklam Awaiting requested review from niklam niklam is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code type: chore Maintenance

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants