Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 6, 2025

Bumps the dev-dependencies group with 8 updates in the / directory:

Package From To
@commitlint/cli 20.1.0 20.2.0
@commitlint/config-conventional 20.0.0 20.2.0
@vitest/eslint-plugin 1.4.1 1.5.1
jsdom 27.1.0 27.2.0
prettier 3.6.2 3.7.4
typescript-eslint 8.46.3 8.48.1
vitest 4.0.8 4.0.15
web-ext 9.1.0 9.2.0

Updates @commitlint/cli from 20.1.0 to 20.2.0

Release notes

Sourced from @​commitlint/cli's releases.

v20.2.0

20.2.0 (2025-12-05)

Features

Chore, docs, etc

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.1.0...v20.2.0

Changelog

Sourced from @​commitlint/cli's changelog.

20.2.0 (2025-12-05)

Note: Version bump only for package @​commitlint/cli

Commits

Updates @commitlint/config-conventional from 20.0.0 to 20.2.0

Release notes

Sourced from @​commitlint/config-conventional's releases.

v20.2.0

20.2.0 (2025-12-05)

Features

Chore, docs, etc

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.1.0...v20.2.0

v20.1.0

20.1.0 (2025-09-30)

Features

Bug Fixes

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.0.0...v20.1.0

Changelog

Sourced from @​commitlint/config-conventional's changelog.

20.2.0 (2025-12-05)

Note: Version bump only for package @​commitlint/config-conventional

Commits

Updates @vitest/eslint-plugin from 1.4.1 to 1.5.1

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.5.1

   🐞 Bug Fixes

    View changes on GitHub

v1.5.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

What's Changed

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.4.4...v1.5.0

v1.4.4

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

What's Changed

New Contributors

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.4.3...v1.4.4

... (truncated)

Commits
  • cc85c0a chore: release v1.5.1
  • 4ea5673 fix(no-alias-methods): Align no-alias-methods rule with Vitest by aliasing to...
  • fb2b134 chore: release v1.5.0
  • bc95b10 feat: Add rule to recommended Vitest ESLint config (#827)
  • 54be66e fix(consistent-test-it): Handle aliased Vitest imports when enforcing consist...
  • cc5fcdb fix minor docs update
  • 13efaaf chore: release v1.4.4
  • db570c8 feat: add rule consistent-each-for (#826)
  • 962defb fix(no-identical-title): FP when using test.for (#825)
  • 5e5a64b docs(prefer-equality-matcher): correct (e)quality typo in description (#824)
  • Additional commits viewable in compare view

Updates jsdom from 27.1.0 to 27.2.0

Release notes

Sourced from jsdom's releases.

Version 27.2.0

  • Added CSSGroupingRule, CSSNestedDeclarations, CSSConditionRule, CSSContainerRule, CSSScopeRule, CSSSupportsRule, CSSLayerBlockRule, and CSSLayerStatementRule to jsdom Windows. (acemir)
  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)
  • Fixed @import-ed stylesheets to be properly exposed to CSSOM, and not to overwrite the sheet created from the <link> or <style> element. (acemir)
Changelog

Sourced from jsdom's changelog.

27.2.0

  • Added CSSGroupingRule, CSSNestedDeclarations, CSSConditionRule, CSSContainerRule, CSSScopeRule, CSSSupportsRule, CSSLayerBlockRule, and CSSLayerStatementRule to jsdom Windows. (acemir)
  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)
  • Fixed @import-ed stylesheets to be properly exposed to CSSOM, and not to overwrite the sheet created from the <link> or <style> element. (acemir)
Commits
  • b0805a9 Version 27.2.0
  • 3e07e1e Update dependencies and dev dependencies
  • 931aabe Various CSSOM improvements
  • 70741da Add failing tests for border shorthand property parsing
  • b282400 Update @​acemir/cssom dependency
  • See full diff in compare view

Updates prettier from 3.6.2 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

🔗 Changelog

3.7.3

What's Changed

🔗 Changelog

3.7.2

What's Changed

🔗 Changelog

3.7.1

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.


Updates typescript-eslint from 8.46.3 to 8.48.1

Release notes

Sourced from typescript-eslint's releases.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

  • eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

  • eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)
  • eslint-plugin: honor ignored base types on generic classes (#11767)
  • eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

  • eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)
  • rule-tester: remove workaround for jest circular structure error (#11772)
  • typescript-estree: gate all errors behind allowInvalidAST (#11693)
  • typescript-estree: replace fast-glob with tinyglobby (#11740)

🩹 Fixes

  • eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#10477)
  • scope-manager: change unhelpful aaa error message and change analyze to expects Program (#11747)
  • typescript-estree: infers singleRun as true for project service (#11327)
  • typescript-estree: disallow binding patterns in parameter properties (#11760)

❤️ Thank You

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.48.1 (2025-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.47.0 (2025-11-17)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.46.4 (2025-11-10)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates vitest from 4.0.8 to 4.0.15

Release notes

Sourced from vitest's releases.

v4.0.15

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.0.14

   🚀 Experimental Features

   🐞 Bug Fixes

... (truncated)

Commits
  • eb1abf0 chore: release v4.0.15
  • a68f74e feat(cache): add opt-out on a plugin level, fix internal root cache (#9154)
  • 122ff32 feat(reporters): print import duration breakdown (#9105)
  • 0d2e7e3 fix(browser): run toMatchScreenshot only once when used with `expect.elemen...
  • d57d8bf fix(pool): terminate workers on CTRL+c forceful exits (#9140)
  • bb65e15 fix(reporters): show project in github reporter (#9138)
  • 52b242b chore(deps): update all non-major dependencies (#9133)
  • 4c75492 fix: fix external behavior with deps.optimizer (#9125)
  • a5d98fd refactor(vitest): get current test name from task property (#9120)
  • fd8bd6d fix: use optimizeDeps.rolldownOptions to fix depreated warning + fix `ssr.e...
  • Additional commits viewable in compare view

Updates web-ext from 9.1.0 to 9.2.0

Release notes

Sourced from web-ext's releases.

9.2.0

main changes

  • Fixed: Ensured navigator.webdriver != true in launched Chromium (#3553)
  • Added: web-ext lint now supports Firefox 145 and 146 schemas

dependencies

  • Updated: dependency addons-linter to 9.2.0 (#3559)
  • Updated: dependency open to 11.0.0 (#3554)
  • Updated: dependency pino to 10.1.0 (#3538)

dev dependencies

  • Updated: dependency mocha to 11.7.5 (#3546)
  • Updated: dependency chai to 6.2.1 (#3550)

others

  • Migrate project to ESLint v9 (#3552)

See all changes: mozilla/web-ext@9.1.0...9.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 6, 2025
@socket-security
Copy link

socket-security bot commented Dec 6, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​commitlint/​cli@​20.1.0 ⏵ 20.2.0100 +11007392 +6100
Updatedtypescript-eslint@​8.46.3 ⏵ 8.48.11001007498 +1100
Updatedvitest@​4.0.8 ⏵ 4.0.1597 -110079 +199100
Updatedweb-ext@​9.1.0 ⏵ 9.2.096 +110010091 -170
Updatedprettier@​3.6.2 ⏵ 3.7.490 -810097 -398 +1100
Updated@​commitlint/​config-conventional@​20.0.0 ⏵ 20.2.010010010092 +6100
Updatedjsdom@​27.1.0 ⏵ 27.2.098100100 +194 +1100
Updated@​vitest/​eslint-plugin@​1.4.1 ⏵ 1.5.196 -3100100 +1100 +1100

View full report

@coderabbitai
Copy link

coderabbitai bot commented Dec 6, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-5ac7c7fa92 branch from a9cdb10 to c01a518 Compare December 6, 2025 23:10
…ith 8 updates

Bumps the dev-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.1.0` | `20.2.0` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `20.0.0` | `20.2.0` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.4.1` | `1.5.1` |
| [jsdom](https://github.com/jsdom/jsdom) | `27.1.0` | `27.2.0` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.46.3` | `8.48.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.8` | `4.0.15` |
| [web-ext](https://github.com/mozilla/web-ext) | `9.1.0` | `9.2.0` |



Updates `@commitlint/cli` from 20.1.0 to 20.2.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.2.0/@commitlint/cli)

Updates `@commitlint/config-conventional` from 20.0.0 to 20.2.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.2.0/@commitlint/config-conventional)

Updates `@vitest/eslint-plugin` from 1.4.1 to 1.5.1
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.4.1...v1.5.1)

Updates `jsdom` from 27.1.0 to 27.2.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](jsdom/jsdom@27.1.0...27.2.0)

Updates `prettier` from 3.6.2 to 3.7.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.4)

Updates `typescript-eslint` from 8.46.3 to 8.48.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.1/packages/typescript-eslint)

Updates `vitest` from 4.0.8 to 4.0.15
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/vitest)

Updates `web-ext` from 9.1.0 to 9.2.0
- [Release notes](https://github.com/mozilla/web-ext/releases)
- [Commits](mozilla/web-ext@9.1.0...9.2.0)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 20.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 20.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: jsdom
  dependency-version: 27.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.7.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.48.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: web-ext
  dependency-version: 9.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-5ac7c7fa92 branch from c01a518 to 5d5c2ec Compare December 7, 2025 00:10
@github-actions
Copy link
Contributor

github-actions bot commented Dec 7, 2025

🤖 Build Bot

✅ Successful build

⬇️ Download: notero-1.2.2-934

@dvanoni dvanoni merged commit c0e6e80 into main Dec 7, 2025
6 checks passed
@dvanoni dvanoni deleted the dependabot/npm_and_yarn/dev-dependencies-5ac7c7fa92 branch December 7, 2025 00:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants