Bump the npm-dependencies group in /companion with 7 updates by dependabot[bot] · Pull Request #66 · ayphr/device

dependabot · 2026-10-08T09:45:44Z

Bumps the npm-dependencies group in /companion with 7 updates:

Package	From	To
@tauri-apps/api	`2.12.0`	`2.12.1`
@tauri-apps/cli	`2.12.0`	`2.12.1`
@types/node	`26.6.3`	`26.6.4`
eslint	`10.11.0`	`10.12.0`
globals	`17.12.0`	`17.13.0`
typescript	`6.0.3`	`7.0.2`
vite	`8.3.1`	`8.3.2`

Updates @tauri-apps/api from 2.12.0 to 2.12.1

Release notes

Sourced from @tauri-apps/api's releases.

`@tauri-apps/api` v2.12.1

All found vulnerabilities were already reviewed and decided to be ignored
2 ignored: 2 high

[2.12.1]

Bug Fixes

c9a3cb892 (#16166 by @FabianLars) The macos-private-api feature flag / macOSPrivateAPI tauri.conf.json value is no longer required to use transparency or fullscreen on macOS.

$ pnpm build && cd ./dist && pnpm publish --access public --loglevel debug --no-git-checks
$ rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m997ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.5s�[22m�[39m
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 336ms
📦 @tauri-apps/api@2.12.1 → https://registry.npmjs.org/
GET https://run-actions-2-azure-eastus.actions.githubusercontent.com/210//idtoken/dd253aee-436e-8e22-8c02-25aaaa05b17c/69013391-05d6-5397-b35a-e76c0a237b30?api-version=2.0&audience=sigstore 200 107ms
Signed provenance statement with source and build information
✅ Published package @tauri-apps/api@2.12.1

Commits

30da1fd feat(ci): run audit before publishing
1aefcf6 fix: pnpm audit
026f260 apply version updates (#16150)
a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
f040897 docs: link WRY and TAO to their repositories (#16163)
c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
64bfdd9 fix: ignore src-tauri in vite configs (#16165)
793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
447fa9f fix(core): tauri-utils publish
See full diff in compare view

Updates @tauri-apps/cli from 2.12.0 to 2.12.1

Release notes

Sourced from @tauri-apps/cli's releases.

@tauri-apps/cli v2.12.1

[2.12.1]

Enhancements

64bfdd909 (#16165 by @Legend-Master) Ignore src-tauri in tauri plugin init example template

Dependencies

Upgraded to tauri-cli@2.12.1

Commits

30da1fd feat(ci): run audit before publishing
1aefcf6 fix: pnpm audit
026f260 apply version updates (#16150)
a4dcca8 fix(plugin): skip build script writes on docs.rs builds (#16186)
f040897 docs: link WRY and TAO to their repositories (#16163)
c9a3cb8 fix: enable macos private apis regardless of feature flags (#16166)
64bfdd9 fix: ignore src-tauri in vite configs (#16165)
793f0c4 fix(window): copy WebView2Loader.dll for nightly (#16164)
d15cf9b fix(bundler): make glob error variants available on all platforms (#16149)
See full diff in compare view

Updates @types/node from 26.6.3 to 26.6.4

Commits

See full diff in compare view

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

4618052 feat: handle astral letters in new-cap (#21357) (sary)

4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)

bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)

efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)

93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)

02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)

b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)

69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)

686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

67eb586 docs: Update README (GitHub Actions Bot)

5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)

8816c1d docs: Update README (GitHub Actions Bot)

3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

152067f chore: update ecosystem plugins (#21362) (ESLint Bot)

b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])

bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)

322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)

d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])

29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])

39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])

f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)

b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])

3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

Commits

a438ec3 10.12.0
32a73f1 Build: changelog update for 10.12.0
bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
152067f chore: update ecosystem plugins (#21362)
b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
67eb586 docs: Update README
bfaea12 perf: cache normalized config globals per languageOptions (#21364)
322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
d166567 chore: update dependency prettier to v3.9.9 (#21371)
Additional commits viewable in compare view

Updates globals from 17.12.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

Update globals (2026-10-01) (#354) b007369

sindresorhus/globals@v17.12.0...v17.13.0

Commits

ce512bc 17.13.0
b007369 Update globals (2026-10-01) (#354)
16cb1fe Meta tweaks
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vite from 8.3.1 to 8.3.2

Release notes

Sourced from vite's releases.

v8.3.2

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)

bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)

bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)

deps: update all non-major dependencies (#23601) (9944fa6)

deps: update rolldown-related dependencies (#23602) (88c1741)

html: resolve percent-encoded srcset urls (#23609) (53f1ce7)

limit size of object and array printing via forwardConsole (#23565) (e64a587)

merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)

optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)

optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)

pass queries to renderBuiltUrl (#23586) (744269e)

server: handle file watcher errors without crashing (#23503) (6894f5c)

server: release previous environments after initialization (#23499) (5a3a010)

ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)

worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

avoid encoding intermediate source maps (#23461) (89574f6)

build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)

only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

Changelog

Sourced from vite's changelog.

8.3.2 (2026-10-01)

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)

bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)

bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)

deps: update all non-major dependencies (#23601) (9944fa6)

deps: update rolldown-related dependencies (#23602) (88c1741)

html: resolve percent-encoded srcset urls (#23609) (53f1ce7)

limit size of object and array printing via forwardConsole (#23565) (e64a587)

merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)

optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)

optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)

pass queries to renderBuiltUrl (#23586) (744269e)

server: handle file watcher errors without crashing (#23503) (6894f5c)

server: release previous environments after initialization (#23499) (5a3a010)

ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)

worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

avoid encoding intermediate source maps (#23461) (89574f6)

build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)

only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

Commits

1003321 release: v8.3.2 (#23623)
24bd331 fix(worker): align worker urls in client and server when using terser (#23614)
94d0080 perf: only register time middleware when debug logging is enabled (#23621)
89574f6 perf: avoid encoding intermediate source maps (#23461)
5a3a010 fix(server): release previous environments after initialization (#23499)
1929b4c docs: fix dead og-image PNG links in vite6/vite7 changelog entries (#23594)
6894f5c fix(server): handle file watcher errors without crashing (#23503)
cf5c028 perf(build): avoid quadratic link scan in the preload helper (#23510)
bba3bb8 fix: merge build.rolldownOptions.output.minify correctly (#23536)
5e4b9ca fix(optimize-deps): avoid "unsupported" warnings for browser:false mappings (...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group in /companion with 7 updates: | Package | From | To | | --- | --- | --- | | [@tauri-apps/api](https://github.com/tauri-apps/tauri) | `2.12.0` | `2.12.1` | | [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.12.0` | `2.12.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.4` | | [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.12.0` | | [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.2` | Updates `@tauri-apps/api` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.12.0...@tauri-apps/api-v2.12.1) Updates `@tauri-apps/cli` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.12.0...@tauri-apps/cli-v2.12.1) Updates `@types/node` from 26.6.3 to 26.6.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.11.0 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.12.0) Updates `globals` from 17.12.0 to 17.13.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.12.0...v17.13.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `vite` from 8.3.1 to 8.3.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite) --- updated-dependencies: - dependency-name: "@tauri-apps/api" dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@tauri-apps/cli" dependency-version: 2.12.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: globals dependency-version: 17.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: vite dependency-version: 8.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-09T00:22:28Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026

dependabot Bot closed this Oct 9, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/companion/npm-dependencies-e101fe54c7 branch October 9, 2026 00:22

Navigation Menu

Repository navigation

Bump the npm-dependencies group in /companion with 7 updates - #66

Bump the npm-dependencies group in /companion with 7 updates#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/companion/npm-dependencies-e101fe54c7

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​tauri-apps/api v2.12.1

[2.12.1]

Bug Fixes

@​tauri-apps/cli v2.12.1

[2.12.1]

Enhancements

Dependencies

v10.12.0

Features

Bug Fixes

Documentation

Chores

v17.13.0

TypeScript 7.0.2

v8.3.2

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

8.3.2 (2026-10-01)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Uh oh!

dependabot Bot commented on behalf of github Oct 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading

`@tauri-apps/api` v2.12.1

`@tauri-apps/cli` v2.12.1