chore(deps-dev): bump the development-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #796 · NodeSecure/cli

dependabot · 2026-08-10T05:55:06Z

Bumps the development-dependencies group with 10 updates in the / directory:

Package	From	To
@changesets/cli	`2.31.0`	`2.31.1`
@types/node	`26.1.1`	`26.1.2`
c8	`11.0.0`	`12.0.0`
eslint-plugin-jsdoc	`63.0.12`	`63.3.3`
typescript	`6.0.3`	`7.0.2`
vite	`8.1.4`	`8.2.0`
@playwright/test	`1.61.1`	`1.62.1`
@types/semver	`7.7.1`	`7.8.0`
stylelint	`17.14.0`	`17.14.1`
undici	`8.0.2`	`8.10.0`

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@2.31.1

Patch Changes

#2159 15cf592 Thanks @ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

Commits

a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
e8650b9 Version Packages (#2161)
15cf592 Fixed handling of the npm 12 info output (#2159)
9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
8f6acd6 Update dependabot group to exclude major (#2067)
c70c675 Setup backport workflow and sync next setup (#2057)
9672019 Remove SECURITY.md to defer to .github (#2055)
18e1661 Use internal bot for versioning (#2039)
Additional commits viewable in compare view

Updates @types/node from 26.1.1 to 26.1.2

Commits

See full diff in compare view

Updates c8 from 11.0.0 to 12.0.0

Release notes

Sourced from c8's releases.

v12.0.0

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

yargs enforces a stricter range of Node versions ^20.19.0 || ^22.12.0 || >=23

Features

update yargs to 18.x.x (#599) (dc2d6c8)

Changelog

Sourced from c8's changelog.

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

yargs enforces a stricter range of Node versions ^20.19.0 || ^22.12.0 || >=23

Features

update yargs to 18.x.x (#599) (dc2d6c8)

Commits

ae5a0cf chore(main): release 12.0.0 (#600)
dc2d6c8 feat!: update yargs to 18.x.x (#599)
ee2f1cf chore(deps): update dependency @types/node to v24 (#579)
923c238 build: go back to publishing manually
See full diff in compare view

Updates eslint-plugin-jsdoc from 63.0.12 to 63.3.3

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v63.3.3

63.3.3 (2026-08-02)

Bug Fixes

types: add missing tsdoc configs; closes #1739 (4ff1e96)

v63.3.2

63.3.2 (2026-07-28)

Bug Fixes

require-example: support fixer with 1-line JSDoc blocks; fixes #1736 (36f8e9e)

v63.3.1

63.3.1 (2026-07-27)

Bug Fixes

normalize-see-links: minimally escape link targets instead of encodeURI (#1735) (ae27cd2)

v63.3.0

63.3.0 (2026-07-26)

Features

normalize-see-links: autofix delimiter-colliding labels via escape round-trip (#1734) (cfe9cdb)

v63.2.2

63.2.2 (2026-07-24)

Bug Fixes

update jsdoccomment and devDeps. (#1730) (3663803)

v63.2.1

63.2.1 (2026-07-23)

Bug Fixes

update jsdoccomment, spdx-expression-parse, devDeps.; fixes #1727 (#1728) (9fd2f28)

v63.2.0

63.2.0 (2026-07-19)

... (truncated)

Commits

cb41846 chore: update devDeps.
5c17ce4 refactor: fix tsc dev
4ff1e96 fix(types): add missing tsdoc configs; closes #1739
7d5df2e chore: update devDeps.
36f8e9e fix(require-example): support fixer with 1-line JSDoc blocks; fixes #1736
1dbf404 chore: update jsdoccomment and devDeps.
ae27cd2 fix(normalize-see-links): minimally escape link targets instead of encodeURI ...
cfe9cdb feat(normalize-see-links): autofix delimiter-colliding labels via escape roun...
e62e746 docs: explain usage with defineConfig(); fixes #1729 (#1731)
3663803 fix: update jsdoccomment and devDeps. (#1730)
Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vite from 8.1.4 to 8.2.0

Release notes

Sourced from vite's releases.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.0 (2026-07-30)

Features

add input to server.fs.allow (#23035) (95a3cda)

bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)

bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)

config: include column in config incompatibility location (#23064) (8a24572)

dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)

deps: update all non-major dependencies (#23069) (4c07b74)

hmr: preserve environment snapshot during server restart (#22992) (b1186c3)

importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)

module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)

server: strip base in indexHtml module graph lookup (#22932) (fa005d1)

support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

config CJS module vars in ESM case (#23010) (d8cd388)

8.2.0-beta.0 (2026-07-22)

Features

add input option (#22642) (9beae37)

config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)

css: export PostCSS config type for type-safe configs (#22792) (302c755)

dev: label network URLs with their interface name (#22830) (78accc4)

optimizer: support aube lockfile (#22813) (6319827)

optimizer: support nub lockfile (#22891) (65d3604)

update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)

wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

build: map CSS chunks in chunk import maps (fix #22946) (#22947) (e16ff3a)

config: exclude virtual modules from native config compat check (#22979) (2ced1fe)

css: rewrite urls in OnceExit-injected content (#22983) (abb793e)

deps: update all non-major dependencies (#22985) (04f345b)

deps: update dependency magic-string to v1 (#22998) (c60b4d7)

hmr: remove hot data after prune (#23002) (be96316)

resolve root to real path (#22832) (55bba7b)

Performance Improvements

... (truncated)

Commits

24a611f release: v7.2.4
2d66b7b fix: revert "perf(deps): replace debug with obug (#21107)"
a668014 release: v7.2.3
acfe939 perf(deps): replace debug with obug (#21107)
4f8171e fix(deps): update all non-major dependencies (#21128)
5029720 chore(deps): update rolldown-related dependencies (#21127)
5909efd fix: allow multiple bindCLIShortcuts calls with shortcut merging (#21103)
39a0a15 chore(deps): update rolldown-related dependencies (#21095)
6a34ac3 fix(deps): update all non-major dependencies (#21096)
02ceaec chore(deps): update dependency @rollup/plugin-commonjs to v29 (#21099)
Additional commits viewable in compare view

Updates @playwright/test from 1.61.1 to 1.62.1

Release notes

Sourced from @playwright/test's releases.

v1.62.1

Bug Fixes

#41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)

#41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)

#41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG

#42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62

#42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:
test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});
Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:
const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });
Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:
// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
66c5cc9 chore: mark v1.62.1 (#42020)
9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
e3950d9 chore: mark v1.62.0 (#41981)
f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
Additional commits viewable in compare view

Updates @types/semver from 7.7.1 to 7.8.0

Commits

See full diff in compare view

Updates stylelint from 17.14.0 to 17.14.1

Release notes

Sourced from stylelint's releases.

17.14.1

It fixes 4 bugs.

Fixed: quiet option suppresses report* warning reports (#9387) (@ychampion).

Fixed: reported range of unknown rules (#9385) (@ybiquitous).

Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@sarathfrancis90).

Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@sarathfrancis90).

Changelog

Sourced from stylelint's changelog.

17.14.1 - 2026-07-20

It fixes 4 bugs.

Fixed: quiet option suppresses report* warning reports (#9387) (@ychampion).

Fixed: reported range of unknown rules (#9385) (@ybiquitous).

Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@sarathfrancis90).

Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@sarathfrancis90).

Commits

cd66b03 Release 17.14.1 (#9397)
7c30fc5 Refactor to replace void with undefined in union types (#9395)
57c8d0e Fix rule-empty-line-before false positives for shared-line comments with `e...
226f10a Bump @vscode/windows-process-tree from 0.7.0 to 0.8.0 (#9392)
13c3c5c Bump globby from 16.2.0 to 16.2.1 (#9393)
6dafcf5 Document unknown-effort contributions (#9391)
54c2bc8 Fix test for Yarn PnP with npm v12 (#9390)
3e7eb56 Fix declaration-block-no-redundant-longhand-properties invalid background...
438196e Bump postcss from 8.5.15 to 8.5.16 in the postcss group across 1 directory (#...
c1e1489 Fix quiet option to suppress report* warning reports (#9387)
Additional commits viewable in compare view

Updates undici from 8.0.2 to 8.10.0

Release notes

Sourced from undici's releases.

v8.10.0

What's Changed

feat: namespace h2 options by @metcoder95 in nodejs/undici#5498

test: update WPT expectations by @mcollina in nodejs/undici#5587

test: add cache/dedupe + dns re-dispatch integration tests by @GiHoon1123 in nodejs/undici#5535

fix(websocket): support process.unref by @mcollina in nodejs/undici#5578

fix(h2): ensure every request settles by @mcollina in nodejs/undici#5603

fix(readable): consume a body whose end has already been emitted by @marko1olo in nodejs/undici#5617

fix(retry): skip the content-length checkpoint for HEAD and for a 206 without content-range by @marko1olo in nodejs/undici#5610

fix: revert idle socket validation to setTimeout(0) to prevent stall on idle event loop by @marceli1404 in nodejs/undici#5606

fix(env-http-proxy-agent): match bare IPv6 addresses in no_proxy by @marko1olo in nodejs/undici#5623

test: handle aggregate balanced pool errors by @marko1olo in nodejs/undici#5377

fix(readable): keep body bytes that arrive after setEncoding() by @mcollina in nodejs/undici#5620

fix(socks5): evict unused origin pools by @Kkartik14 in nodejs/undici#5595

fix: skip deduplication for upgrade requests by @Ram-blip in nodejs/undici#5593

fix(retry): forward informational responses by @mcollina in nodejs/undici#5625

fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView reply bodies by @marko1olo in nodejs/undici#5619

fix(interceptors): cache() and deduplicate() silently inert on Client/Pool without opts.origin by @marko1olo in nodejs/undici#5628

build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in nodejs/undici#5633

build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 by @dependabot[bot] in nodejs/undici#5634

build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in nodejs/undici#5636

fix(mock): emit request body lifecycle hooks by @marko1olo in nodejs/undici#5367

fix(h2): detach upgrade close handler after GOAWAY by @pacocartones in nodejs/undici#5641

fix: retry refused HTTP/2 streams by @mcollina in nodejs/undici#5598

fix: preserve DNS origin hostname on sockets by @cyphercodes in nodejs/undici#5577

New Contributors

@marceli1404 made their first contribution in nodejs/undici#5606

@Kkartik14 made their first contribution in nodejs/undici#5595

@pacocartones made their first contribution in nodejs/undici#5641

@cyphercodes made their first contribution in nodejs/undici#5577

Full Changelog: nodejs/undici@v8.9.0...v8.10.0

v8.9.0

⚠️ Security fixes

High severity

GHSA-4cwx-7wf7-3272: malformed qualified private Cache-Control directives could cause cross-user information disclosure in shared caches or a parse-time crash. The cache parser now treats empty qualified directives conservatively and safely handles mixed qualified and unqualified directives. Fixed by 4fe5bc5f with regression coverage in 9f09b49a.

Medium severity

GHSA-m8rv-5g2x-5cg5: a malicious type property on a duck-typed blob-like HTTP/1.1 request body could inject CRLF sequences into the generated content-type header. Undici now coerces and validates the value before adding it to the request. Fixed by 7d3cf924.

GHSA-jr45-8vmc-qm54: optional whitespace around = in qualified no-cache and private directives could bypass shared-cache restrictions and disclose authenticated data across users. Cache-Control parsing now normalizes these forms and applies conservative cache decisions. Fixed by c601fff1.

GHSA-8xcm-r25x-g524: the retry interceptor could expose a stale Content-Length after resuming a partial response, potentially causing downstream response desynchronization, hangs, or corruption. Undici now rejects partial responses whose Content-Length is inconsistent with Content-Range. Fixed by e11a68ed, with corrected fixtures in 2b3f7493.

GHSA-v3r7-h72x-cjcm: unsanitized domain and unparsed values passed to setCookie() could inject cookie attributes. Undici now validates cookie domains, paths, and unparsed attributes more strictly. Fixed by 10d93fc3.

Additional hardening

... (truncated)

Commits

c8d80e6 Bumped v8.10.0 (#5644)
66923b4 fix: preserve DNS origin hostname on sockets (#5577)
3926499 fix: retry refused HTTP/2 streams (#5598)
73d6e9e fix(h2): detach upgrade close handler after GOAWAY (#5641)
b111adb fix(mock): emit request body lifecycle hooks (#5367)
ae4a3e3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)
ec3fbf1 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)
2151720 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)
b96a116 fix(interceptors): allow interceptors without opts.origin (#5628)
a18ef2d fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 10 updates Bumps the development-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@changesets/cli](https://github.com/changesets/changesets) | `2.31.0` | `2.31.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.1.2` | | [c8](https://github.com/bcoe/c8) | `11.0.0` | `12.0.0` | | [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.0.12` | `63.3.3` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.4` | `8.2.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.1` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` | | [stylelint](https://github.com/stylelint/stylelint) | `17.14.0` | `17.14.1` | | [undici](https://github.com/nodejs/undici) | `8.0.2` | `8.10.0` | Updates `@changesets/cli` from 2.31.0 to 2.31.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.31.0...@changesets/cli@2.31.1) Updates `@types/node` from 26.1.1 to 26.1.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `c8` from 11.0.0 to 12.0.0 - [Release notes](https://github.com/bcoe/c8/releases) - [Changelog](https://github.com/bcoe/c8/blob/main/CHANGELOG.md) - [Commits](bcoe/c8@v11.0.0...v12.0.0) Updates `eslint-plugin-jsdoc` from 63.0.12 to 63.3.3 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](gajus/eslint-plugin-jsdoc@v63.0.12...v63.3.3) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vite` from 8.1.4 to 8.2.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite) Updates `@playwright/test` from 1.61.1 to 1.62.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.1) Updates `@types/semver` from 7.7.1 to 7.8.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `stylelint` from 17.14.0 to 17.14.1 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@17.14.0...17.14.1) Updates `undici` from 8.0.2 to 8.10.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.0.2...v8.10.0) --- updated-dependencies: - dependency-name: "@changesets/cli" dependency-version: 2.31.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: c8 dependency-version: 12.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: eslint-plugin-jsdoc dependency-version: 63.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: vite dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@types/semver" dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: stylelint dependency-version: 17.14.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: undici dependency-version: 8.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-08-10T05:55:12Z

⚠️ No Changeset found

Latest commit: a39bfa6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-08-10T05:55:30Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@types/semver@7.7.1 ⏵ 7.8.0		⁺¹
npm/@types/node@26.1.1 ⏵ 26.1.2
npm/vite@8.1.4 ⏵ 8.2.0	⁺¹	⁺¹
npm/typescript@7.0.2
npm/c8@11.0.0 ⏵ 12.0.0			⁺²
npm/@changesets/cli@2.31.0 ⏵ 2.31.1	⁺¹		⁺²
npm/eslint-plugin-jsdoc@63.0.12 ⏵ 63.3.3	⁺¹⁰		⁺¹
npm/stylelint@17.14.0 ⏵ 17.14.1	⁺¹
npm/@playwright/test@1.61.1 ⏵ 1.62.1			⁺¹

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026

Navigation Menu

Uh oh!

chore(deps-dev): bump the development-dependencies group across 1 directory with 10 updates - #796

chore(deps-dev): bump the development-dependencies group across 1 directory with 10 updates#796
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-4879f16ef8

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

changeset-bot Bot commented Aug 10, 2026

Uh oh!

socket-security Bot commented Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026

@​changesets/cli@​2.31.1

Patch Changes

v12.0.0

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

Features

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

Features

v63.3.3

63.3.3 (2026-08-02)

Bug Fixes

v63.3.2

63.3.2 (2026-07-28)

Bug Fixes

v63.3.1

63.3.1 (2026-07-27)

Bug Fixes

v63.3.0

63.3.0 (2026-07-26)

Features

v63.2.2

63.2.2 (2026-07-24)

Bug Fixes

v63.2.1

63.2.1 (2026-07-23)

Bug Fixes

v63.2.0

63.2.0 (2026-07-19)

create-vite@8.2.0

plugin-legacy@8.2.0

v8.2.0

v8.2.0-beta.0

v8.1.5

8.2.0 (2026-07-30)

Features

Bug Fixes

Documentation

Tests

8.2.0-beta.0 (2026-07-22)

Features

Bug Fixes

Performance Improvements

v1.62.1

Bug Fixes

v1.62.0

🧱 New component testing model

🛑 Cancel operations with AbortSignal

🖼️ WebP screenshots

17.14.1

17.14.1 - 2026-07-20

v8.10.0

What's Changed

New Contributors

v8.9.0

⚠️ Security fixes

High severity

Medium severity

Additional hardening

Uh oh!

changeset-bot Bot commented Aug 10, 2026

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@changesets/cli@2`.31.1