Repository navigation
chore(deps-dev): bump the dev-tooling group across 1 directory with 8 updates - #889
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
… updates Bumps the dev-tooling group with 8 updates in the /ui directory: | Package | From | To | | --- | --- | --- | | [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.19.0` | `24.19.2` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.2` | `5.0.3` | | [jsdom](https://github.com/jsdom/jsdom) | `30.1.1` | `30.1.2` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.85.0` | `1.87.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.2` | `5.0.3` | Updates `@playwright/test` from 1.63.0 to 1.64.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.63.0...v1.64.0) Updates `@types/node` from 24.19.0 to 24.19.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react) Updates `@vitest/coverage-v8` from 5.0.2 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8) Updates `jsdom` from 30.1.1 to 30.1.2 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.1.1...v30.1.2) Updates `oxlint` from 1.85.0 to 1.87.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.87.0/npm/oxlint) Updates `vite` from 8.3.1 to 8.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite) Updates `vitest` from 5.0.2 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: "@types/node" dependency-version: 24.19.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@vitest/coverage-v8" dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: jsdom dependency-version: 30.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: oxlint dependency-version: 1.87.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/ui/dev-tooling-233eec3e4f
branch
from
October 14, 2026 17:18
14128e6 to
88874e1
Compare
rainmanjam
added a commit
that referenced
this pull request
Oct 14, 2026
* chore(deps): bump SonarSource/sonarqube-scan-action from 8.2.2 to 8.3.0 Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 8.2.2 to 8.3.0. - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](SonarSource/sonarqube-scan-action@ba9859e...d209202) --- updated-dependencies: - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump ubuntu from `da6fc2b` to `f144425` Bumps ubuntu from `da6fc2b` to `f144425`. --- updated-dependencies: - dependency-name: ubuntu dependency-version: '26.04' dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump the go-minor-and-patch group across 1 directory with 9 updates Bumps the go-minor-and-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/bluenviron/gortmplib](https://github.com/bluenviron/gortmplib) | `1.0.3` | `1.0.4` | | [github.com/datarhei/gosrt](https://github.com/datarhei/gosrt) | `0.11.0` | `0.12.0` | | [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.8` | `4.26.9` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.60.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.49.0` | `0.51.0` | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.59.0` | `1.60.1` | Updates `github.com/bluenviron/gortmplib` from 1.0.3 to 1.0.4 - [Commits](bluenviron/gortmplib@v1.0.3...v1.0.4) Updates `github.com/datarhei/gosrt` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/datarhei/gosrt/releases) - [Commits](datarhei/gosrt@v0.11.0...v0.12.0) Updates `github.com/shirou/gopsutil/v4` from 4.26.8 to 4.26.9 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v4.26.8...v4.26.9) Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0 - [Commits](golang/crypto@v0.57.0...v0.58.0) Updates `golang.org/x/net` from 0.59.0 to 0.60.0 - [Commits](golang/net@v0.59.0...v0.60.0) Updates `golang.org/x/sys` from 0.48.0 to 0.49.0 - [Commits](golang/sys@v0.48.0...v0.49.0) Updates `golang.org/x/term` from 0.46.0 to 0.47.0 - [Commits](golang/term@v0.46.0...v0.47.0) Updates `golang.org/x/tools` from 0.49.0 to 0.51.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.49.0...v0.51.0) Updates `modernc.org/sqlite` from 1.59.0 to 1.60.1 - [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.59.0...v1.60.1) --- updated-dependencies: - dependency-name: github.com/bluenviron/gortmplib dependency-version: 1.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/datarhei/gosrt dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/shirou/gopsutil/v4 dependency-version: 4.26.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: golang.org/x/crypto dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/net dependency-version: 0.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/sys dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/term dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/tools dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: modernc.org/sqlite dependency-version: 1.60.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 7.0.0 to 7.1.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): batch the October npm bumps for ui and web Applies #893, #891, #889, #887, #886 and #885 in one change (one lockfile regeneration per package instead of six rebases): - ui: @playwright/test 1.64, @types/node 24.19.2, @vitejs/plugin-react 6.1.2, @vitest/coverage-v8 5.0.3, jsdom 30.1.2, oxlint 1.87, vite 8.3.4, lucide-react 1.55, driver.js 1.9.0 (exact, as before), radix group (15). - web: @vitest/coverage-v8 5.0.3, jsdom 30.1.2, wrangler 4.149.0 and @astrojs/markdown-satteri 0.4.3 (both exact, as before). wrangler 4.149's miniflare now depends on undici 7.29.1 and sharp 0.35.5 itself, which is the removal condition recorded for both version-keyed overrides, so they are removed; resolved versions are unchanged. ui: tsc -b, lint, vitest 1113/1113, build. web: astro check, build. osv-scanner 0 for both lockfiles. Claude-Session: https://claude.ai/code/session_01A8N3W5ct9SZtHK9sCDD9cL --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Owner
|
Included in #895 (batched October Dependabot updates), now merged. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/ui/dev-tooling-233eec3e4f
branch
October 14, 2026 17:52
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dev-tooling group with 8 updates in the /ui directory:
1.63.01.64.024.19.024.19.26.1.16.1.25.0.25.0.330.1.130.1.21.85.01.87.08.3.18.3.45.0.25.0.3Updates
@playwright/testfrom 1.63.0 to 1.64.0Release notes
Sourced from @playwright/test's releases.
... (truncated)
Commits
606ecd8cherry-pick(#43192): fix(locators): parse locators the way the client API bui...e4f872ccherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...f6a439echerry-pick(#43189): docs(webmcp): expose WebMCP to all languagese2335c3cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...d2a436echerry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...a0c4b5echerry-pick(#43175): feat(api): return language-specific locator code from re...3f7d535cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide1cde64fcherry-pick(#43170): fix(locators): parse mixed role options8851e72cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classesdcc5065cherry-pick(#43172): fix(locator): parse within and getByRef locatorsUpdates
@types/nodefrom 24.19.0 to 24.19.2Commits
Updates
@vitejs/plugin-reactfrom 6.1.1 to 6.1.2Release notes
Sourced from @vitejs/plugin-react's releases.
Changelog
Sourced from @vitejs/plugin-react's changelog.
Commits
ac47648release: plugin-react@6.1.2 (#1491)98277e7fix(deps): update all non-major dependencies (#1486)12eddeafix(hmr): better handle compound components (#1484)3cfb1d1fix(plugin-react): fixcompiler.logDiagnostics(#1483)6de9915fix(plugin-react): disable refresh for non-jsx with compiler enabled (#1485)ee97d2ffix(deps): update all non-major dependencies (#1445)b0a014dchore: use Babel 8 for babel compiler playgrounds (#1460)61b650ffix(deps): update react-related dependencies (#1452)736efe2chore(deps): update tsdown to v0.23 (#1451)Updates
@vitest/coverage-v8from 5.0.2 to 5.0.3Release notes
Sourced from @vitest/coverage-v8's releases.
Commits
33cadeachore: release v5.0.3 (#11409)a029e76chore: migrate to oxc (#11367)Updates
jsdomfrom 30.1.1 to 30.1.2Release notes
Sourced from jsdom's releases.
Commits
a23bfb730.1.264a75d2Update dependencies and dev dependencies7bf9653Invalidate styles after CSSOM and control state changesfe9009cUpdate focused area handlinga8d28b3Release windows retained by stylesheet parsing05a2c01Deduplicate generated CSS property metadata1efa190Reduce generated CSS property dataa372e12Avoid Document named-property rebuilds after irrelevant tree mutationsb2cd235Update css-color0542d2bRelease idle MutationObserver bookkeepingUpdates
oxlintfrom 1.85.0 to 1.87.0Release notes
Sourced from oxlint's releases.
Commits
2bd08ebrelease(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)2ae2939release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)9d80eedfeat(linter/react/only-export-components): supportallowCompoundComponents...e05b155feat(linter): add typescript/no-generated-empty-object-type (#26958)88a0096chore(oxlint): require tsgolint 7.0.2003 (#27021)Updates
vitefrom 8.3.1 to 8.3.4Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
b6c20f6release: v8.3.4 (#23702)b28db28fix(server): match static aliases on path boundaries (#23643)bc0f21cfeat(bundled-dev): supportimport.meta.hot.acceptExports(#23463)fa71469fix(client): skip rewriting unchanged adopted styles (#23697)2a8c0f0fix(build): correct preloads when chunkImportMap is enabled with non-root bas...3a7f2aefix(html): avoid adding filesystem root to watcher (#23689)facc2fbfix: remove input option unescaping for now (#23694)70d56eafix(dev): a restart requested during a restart used to be dropped (fix #23392...cf52011fix(css): resolve imported preprocessors from their file path with lightningc...fcb6f12fix: don't treat modules ending with js-like query as js (#23687)Updates
vitestfrom 5.0.2 to 5.0.3Release notes
Sourced from vitest's releases.
Commits
33cadeachore: release v5.0.3 (#11409)346d389fix(vm): don't reuse scripts across vite environments (#11395)f6c9a49fix(deps): pinwhy-is-node-runningto3.2.1to avoid users running into `...062c75dchore: fix standalone docs build, update exports maps (#11394)caf2887fix(vm): do not optimize deps from index.html (fix #11329) (#11360)50312ebfix(pool): preserve unique pool ids whengroupOrderis set (#11392)7c36748fix(browser): ignore page crash while cancelling (#11386)92ba7fcfix: scope cache key generators to projects (fix #11281) (#11301)38f9885fix(cache): revalidate imports of cached modules (#11381)b24585ffix: don't retry whentest.failsexpectedly failed (#11219)