Skip to content

Bump the development-dependencies group with 7 updates - #55

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-36162c3a64
Open

Bump the development-dependencies group with 7 updates#55
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-36162c3a64

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 7 updates:

Package From To
@types/node 26.6.2 26.6.5
oxfmt 0.70.0 0.74.0
tsdown 0.23.0 0.23.2
vitest 5.0.1 5.0.5
@biomejs/biome 2.5.14 2.6.3
dprint 0.57.4 0.64.3
prettier 3.9.9 3.9.10

Updates @types/node from 26.6.2 to 26.6.5

Commits

Updates oxfmt from 0.70.0 to 0.74.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.74.0

🐛 Bug Fixes

  • e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#27957) (leaysgur)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#27955) (leaysgur)
  • 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#27948) (leaysgur)
  • 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#27947) (leaysgur)
  • 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#27946) (leaysgur)
  • c22a9b2 formatter: Treat static block with only empty statements as empty (#27945) (leaysgur)
  • d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#27823) (leaysgur)
  • c4c1727 formatter/sort_imports: Keep comments after the last import (#27822) (leaysgur)
  • a64677e formatter: Print JSDoc embedded snippets with LF (#27821) (leaysgur)
  • 2c1cc20 formatter: Keep comment only Vue bindings as-is (#27820) (leaysgur)
  • 1bf236d formatter/sort_imports: Do not use comments as import source (#27819) (leaysgur)
  • 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#27818) (leaysgur)
  • 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#27814) (leaysgur)
  • a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#27812) (leaysgur)
  • de110ce formatter: Keep more parens around TSInstantiationExpression (#27811) (leaysgur)
  • 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#27785) (leaysgur)
  • 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#27780) (leaysgur)
  • 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#27778) (leaysgur)
  • 5b2acb0 formatter_core: Report error position releative to CRLF source (#27777) (leaysgur)
  • c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#27776) (leaysgur)
  • 3a980c9 formatter_toml: Handle BOM like other languages (#27775) (leaysgur)
  • 97c9fc4 oxfmt: Handle BOM in config JSON (#27774) (leaysgur)
  • 28eb4a7 oxfmt: Print trailing newline for --list-different (#27773) (leaysgur)
  • d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#27737) (leaysgur)
  • 6a95ec1 formatter: Keep comment position on holey array (#27730) (leaysgur)
  • 54769da formatter: Break after dangling line comment in holey array (#27729) (leaysgur)
  • 99077ef formatter_json: Reject unary expressions other than signed numbers (#27728) (leaysgur)
  • 22cd4cd formatter_json: Handle holey array and comments (#27727) (leaysgur)
  • 644ca1c formatter: Do not indent logical chains whose right sides all inline (#27667) (leaysgur)
  • a07a0fb formatter: Wrap comment-only JSX expression container in a group (#27666) (leaysgur)

⚡ Performance

  • e220293 formatter: Check only the operator suppression mark in is_quiet (#27952) (leaysgur)
  • e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#27559) (leaysgur)
  • a342f7e formatter: Skip comment handling for nodes with no comment near them (#27557) (leaysgur)
  • d8ce750 formatter: Write string literals with swapped quotes into the arena (#27558) (Yuji Sugiura)
  • 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#27561) (leaysgur)
  • 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#27673) (leaysgur)

📚 Documentation

  • 1325225 oxfmt: Update useless comment prefix (#27956) (leaysgur)
  • d0dd140 formatter: Note lossy cooked round-trip in template embeds (#27944) (leaysgur)
  • 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#27824) (leaysgur)

... (truncated)

Commits

Updates tsdown from 0.23.0 to 0.23.2

Release notes

Sourced from tsdown's releases.

v0.23.2

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v0.23.1

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates vitest from 5.0.1 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates @biomejs/biome from 2.5.14 to 2.6.3

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.3

2.6.3

Patch Changes

  • #12275 807e616 Thanks @​dyc3! - Added the new nursery rule noArraySortForMinMax, which reports sorting an array only to read its smallest or largest value. Use Math.min() or Math.max() instead.

    const minimum = array.toSorted((a, b) => a - b)[0];

  • #12432 cf61682 Thanks @​dyc3! - Added the nursery rule noBooleanSortComparator, which reports sort comparators that return a boolean instead of a number. For example, array.sort((a, b) => a > b) never puts the first item before the second, so the array isn't sorted correctly.

  • #12304 b4654c5 Thanks @​dyc3! - Added the new nursery rule noEagerArrayMethodsInLoops, which reports .map() and .filter() calls in the header of for...of loops. These calls build a new array that is only used by the loop.

    for (const name of users.map((user) => user.name)) {
  console.log(name);
}

  • #12121 66c3791 Thanks @​dyc3! - Added the nursery rule noNewRequire, which disallows calling require with new, such as new require("app-header").

  • #12316 34b520d Thanks @​dyc3! - Added the new nursery rule noObsoleteAttributes, which disallows obsolete attributes on HTML elements and suggests what to use instead.

    <table bgcolor="#ffffff" cellpadding="5"></table>

  • #12258 cce2385 Thanks @​dyc3! - Added the nursery rule noPathConcat, which disallows building file paths and URLs by joining strings to __dirname, __filename, import.meta.dirname, import.meta.filename, or import.meta.url.

    const fullPath = __dirname + "/foo.js"; // reported

  • #12287 e12ad78 Thanks @​dyc3! - Added the new nursery rule noPlaywrightNthMethods, which disallows selecting Playwright elements by position with first(), last(), and nth(). A test that relies on the position of an element can act on a different element when the page changes.

    await page.locator("button").first().click();

  • #12343 62ad123 Thanks @​vibbix! - Added the nursery rule noSelfNestedLayer, which disallows nesting a cascade layer inside a layer with the same name. Layer names inside an @layer block are relative to it, so the inner layer below creates the sublayer components.components instead of adding to components.

    @layer components {
  @layer components {
    .button {
      color: red;
    }

... (truncated)

Commits

Updates dprint from 0.57.4 to 0.64.3

Release notes

Sourced from dprint's releases.

0.64.3

Changes

  • fix: rebase association globs above the config directory instead of dropping them
  • fix: don't let plugin associations move the file walk outside the config directory

Install

Run dprint upgrade or see https://dprint.dev/install/

Verification

These artifacts have build provenance attestations. Verify a download with the GitHub CLI:

gh attestation verify dprint-x86_64-unknown-linux-gnu.zip --repo dprint/dprint

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip b868e1e87d2ed23217e5ea9521989c167ce8392090088bf0e1fb43be727ea752
dprint-aarch64-apple-darwin.zip 94b48820945602fb113a34343db0a9e653a8346c60966f790556dc9ce4084a92
dprint-x86_64-pc-windows-msvc.zip 3beb87a2582f1e43a301efd0840565518484e53f8c7b0ad27b857eee08e0745f
dprint-x86_64-pc-windows-msvc-installer.exe b9786b2a4ed1344040e8761f6eddd06124e19bbe6b4531b72cfaf7643dc08cbe
dprint-aarch64-pc-windows-msvc.zip a6bfe3d9146634d73fbc43d827c8793a1e09fff4e7c4ce4992048f31767499b1
dprint-x86_64-unknown-linux-gnu.zip f71cb7e22d6776439eba168d5cb296092d6413fea7148fe4d70684a2702a4fee
dprint-x86_64-unknown-linux-musl.zip f105dbc2b0bc0d83c644fcabc3e7bd8779469c0d9faeda48365c58b389d5a443
dprint-aarch64-unknown-linux-gnu.zip c820bfc67b0cd6f5f0fa4d00ecdcb056944c86030859f5e50151c88d9164b30d
dprint-aarch64-unknown-linux-musl.zip 61c8936368ff4030a615ce43853adc5a0707ff77973743d0a691aee2cbf64723
dprint-riscv64gc-unknown-linux-gnu.zip 2a91437a5d61d6a47f0f58669238dcb35e765a36cdba71997eff179802c5090b
dprint-riscv64gc-unknown-linux-musl.zip a4b109fed988b73b4416221b698e08444333b97d2b0de673e15e5cc9331063bf
dprint-s390x-unknown-linux-gnu.zip 2d491ad3d9004e4cfdf6d90aaa6e1c7b3b92a8a5557f5ff0bc5df79e39f5ca4c
dprint-loongarch64-unknown-linux-gnu.zip 04a3a540ce665acc3ed7b7304f10259f3c14007211cab9479cb88abbaa29dd39
dprint-loongarch64-unknown-linux-musl.zip 848ff9e36d3a16d6f6f660cb8b4df543214d6fd5bd4a6ff1791d3e4719405cf3
dprint-powerpc64le-unknown-linux-gnu.zip d20524979cf322248610f79cec29f4d9c419b84dc49f919960a54edfad03107e
dprint-powerpc64le-unknown-linux-musl.zip b69e7564558b51eb8be1b1f5fb4cc2a7eb87f4e1ac63ec53f58497c4d56d7002
dprint-aarch64-linux-android.zip 9b9ca3e0465f3f17c818bb411fa315c12b88199459579d328db398073cfa5911
dprint-x86_64-linux-android.zip f741d595cd68c339b2ee1e6a5ca1448d1208315ba96a961704468f719b6388c8
dprint-x86_64-unknown-freebsd.zip 29d39e2a2dd1907b545c34920a9649b0a779d4cf0d993b25d3d79bad5c248012
dprint-aarch64-unknown-freebsd.zip 5760d57bd8d883d044177f3e721d2787854656560c3c5ae1d2da50a0bfff82b0

0.64.2

Changes

  • fix: don't restart process plugins after shutdown (#1377)
  • fix: don't hang formats in flight when a process plugin shuts down (#1385)
  • feat: warn when an npm plugin or config version is deprecated (#1380)

... (truncated)

Commits
  • 3c029b2 0.64.3
  • d55d9d5 Merge commit from fork
  • 2ffe056 0.64.2
  • 0ad0924 perf: disable native unwind info for wasm plugins (#1391)
  • 57d3f6d perf: exit instead of unwinding after a successful run (#1388)
  • e72ea24 perf: upgrade wasmtime to 50 and make call_indirect cheaper in wasm plugins (...
  • ff62658 docs: add the buildifier plugin (#1390)
  • 6ae111d docs: list Markdown as supported by the Oxc plugin (#1386)
  • 87bd93f feat: warn when a plugin's update url says it's deprecated (#1383)
  • 78aa0ca docs: add the Alejandra plugin (#1384)
  • Additional commits viewable in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the development-dependencies group with 7 updates
66df1a8 
Bumps the development-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.5` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.70.0` | `0.74.0` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.23.0` | `0.23.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.5` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.14` | `2.6.3` |
| [dprint](https://github.com/dprint/dprint) | `0.57.4` | `0.64.3` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |


Updates `@types/node` from 26.6.2 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `oxfmt` from 0.70.0 to 0.74.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.74.0/npm/oxfmt)

Updates `tsdown` from 0.23.0 to 0.23.2
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.23.0...v0.23.2)

Updates `vitest` from 5.0.1 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `@biomejs/biome` from 2.5.14 to 2.6.3
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome)

Updates `dprint` from 0.57.4 to 0.64.3
- [Release notes](https://github.com/dprint/dprint/releases)
- [Commits](dprint/dprint@0.57.4...0.64.3)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: oxfmt
  dependency-version: 0.74.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: tsdown
  dependency-version: 0.23.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: dprint
  dependency-version: 0.64.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026
@socket-security

socket-security Bot commented Nov 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updateddprint@​0.57.4 ⏵ 0.64.39110070 +196 +1100
Updatedvitest@​5.0.1 ⏵ 5.0.59810079 +198100
Updated@​types/​node@​26.6.2 ⏵ 26.6.510010081 +196100
Updatedoxfmt@​0.70.0 ⏵ 0.74.087 +110088 +195100
Updatedtsdown@​0.23.0 ⏵ 0.23.298 +11008897 +1100
Updatedprettier@​3.9.9 ⏵ 3.9.10981009797100
Updated@​biomejs/​biome@​2.5.14 ⏵ 2.6.3100100100 +199100

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants