Skip to content

chore(deps-dev): bump the dev group with 5 updates#1144

Merged
dependabot[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/dev-db5dceb090
Dec 9, 2025
Merged

chore(deps-dev): bump the dev group with 5 updates#1144
dependabot[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/dev-db5dceb090

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 9, 2025 •
edited
Loading

Bumps the dev group with 5 updates:

Package From To
@codemirror/view 6.38.8 6.39.0
@types/node 22.19.1 22.19.2
downshift 9.0.12 9.0.13
lefthook 2.0.8 2.0.9
typescript-eslint 8.48.1 8.49.0

Updates @codemirror/view from 6.38.8 to 6.39.0

Changelog

Sourced from @​codemirror/view's changelog.

6.39.0 (2025-12-08)

Bug fixes

Properly handle bidirectional text in posAtCoords.

Avoid computing a zero character width (leading to divisions by zero) when the editor is hidden and the browser doesn't have a layout for it.

New features

The posAndSideAtCoords method is an extended version of posAtCoords that also tells you which side of the position the coordinates are associated with.

Add support for block wrappers, decoration-like things that allow extension code to create DOM nodes around groups of lines.

Commits
  • 7cfb75e Mark version 6.39.0
  • c8ea62b Adjust some tests to work on Chrome
  • 7e5fdfd Ignore zero rectangles in measureTextSize
  • b08ca13 Fix a bug that could cause partially reused decorations to become split
  • 48842d3 Fix bug in measuring of gap sizes for nested block wrappers
  • b93ffdc Add a random decoration test, fix a bug in view updates
  • 5eaccf8 Add release note for block wrappers
  • 12ff19d Rewrite posAtCoords
  • cebe447 Fix a regression in DOMReader
  • fdb5042 Count block wrapper margin height as if it is a widget
  • Additional commits viewable in compare view

Updates @types/node from 22.19.1 to 22.19.2

Commits

Updates downshift from 9.0.12 to 9.0.13

Release notes

Sourced from downshift's releases.

v9.0.13

9.0.13 (2025-12-08)

Bug Fixes

Commits

Updates lefthook from 2.0.8 to 2.0.9

Release notes

Sourced from lefthook's releases.

v2.0.9

Changelog

  • d2fa5d9f31c57a79d2354654de1939272006fc88 chore: remove unnecessary .svg executable permissions (#1219)
  • 0792c2c03a98c306fd9fd762040e9f1d237fb1b1 chore: upgrade golangci-lint to 2.7.1, add godoclint (#1223)
  • 0b9f1936ddf18488cb95078e7a3a6f85724a3878 fix: check and report Scanner errors (#1222)
  • 97a7399c008be5e646538317f1701a1613be587a fix: do not try to hash-object directories (#1220)
  • 16fe016a8e25f9b4d15aa2848fb516d4842618be fix: improve separation of options and filenames for more git commands (#1225)
  • 07c5ccbd254cdad1135c260ac797191709382560 fix: skip pre commit hook if no staged files (#1229)
  • 98699c83d34fc36fa4f29d669a0ab4f3ec48d991 refactor: command executor tweaks (#1224)
  • 76cc6de4fd048d1de4ec4bc45930e780fd7e549a refactor: remove some redundant code (#1221)
Changelog

Sourced from lefthook's changelog.

2.0.9 (2025-12-08)

  • fix: skip pre commit hook if no staged files (#1229) by @​mrexox
  • fix: do not try to hash-object directories (#1220) by @​scop
  • fix: check and report Scanner errors (#1222) by @​scop
  • refactor: command executor tweaks (#1224) by @​scop
  • refactor: remove some redundant code (#1221) by @​scop
  • fix: improve separation of options and filenames for more git commands (#1225) by @​scop
  • chore: upgrade golangci-lint to 2.7.1, add godoclint (#1223) by @​scop
  • chore: remove unnecessary .svg executable permissions (#1219) by @​scop
Commits
  • c951a26 2.0.9: skip pre-commit hook if staged only deleted files
  • 07c5ccb fix: skip pre commit hook if no staged files (#1229)
  • 97a7399 fix: do not try to hash-object directories (#1220)
  • 0b9f193 fix: check and report Scanner errors (#1222)
  • 98699c8 refactor: command executor tweaks (#1224)
  • 76cc6de refactor: remove some redundant code (#1221)
  • 16fe016 fix: improve separation of options and filenames for more git commands (#1225)
  • 0792c2c chore: upgrade golangci-lint to 2.7.1, add godoclint (#1223)
  • d2fa5d9 chore: remove unnecessary .svg executable permissions (#1219)
  • See full diff in compare view

Updates typescript-eslint from 8.48.1 to 8.49.0

Release notes

Sourced from typescript-eslint's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

  • eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

  • deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@types/node [>= 24.a, < 25]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @mdn-bot.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev group with 5 updates
ea22fee 
Bumps the dev group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/view](https://github.com/codemirror/view) | `6.38.8` | `6.39.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.1` | `22.19.2` |
| [downshift](https://github.com/downshift-js/downshift) | `9.0.12` | `9.0.13` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.0.8` | `2.0.9` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.48.1` | `8.49.0` |


Updates `@codemirror/view` from 6.38.8 to 6.39.0
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](codemirror/view@6.38.8...6.39.0)

Updates `@types/node` from 22.19.1 to 22.19.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `downshift` from 9.0.12 to 9.0.13
- [Release notes](https://github.com/downshift-js/downshift/releases)
- [Changelog](https://github.com/downshift-js/downshift/blob/master/CHANGELOG.md)
- [Commits](downshift-js/downshift@v9.0.12...v9.0.13)

Updates `lefthook` from 2.0.8 to 2.0.9
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.0.8...v2.0.9)

Updates `typescript-eslint` from 8.48.1 to 8.49.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@codemirror/view"
  dependency-version: 6.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: "@types/node"
  dependency-version: 22.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: downshift
  dependency-version: 9.0.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: lefthook
  dependency-version: 2.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: typescript-eslint
  dependency-version: 8.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 9, 2025
@dependabot dependabot bot requested review from a team and mdn-bot as code owners December 9, 2025 01:19
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 9, 2025
@dependabot dependabot bot requested a review from argl December 9, 2025 01:19
@dependabot dependabot bot added the javascript Pull requests that update javascript code label Dec 9, 2025
@mdn-bot
Copy link
Collaborator

mdn-bot commented Dec 9, 2025

@dependabot squash and merge

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 9, 2025

Beginning January 27, 2026, Dependabot will no longer support the @dependabot squash and merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

@dependabot dependabot bot merged commit 27e2ada into main Dec 9, 2025
12 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev-db5dceb090 branch December 9, 2025 01:24
@mdn-bot mdn-bot mentioned this pull request Dec 8, 2025
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mdn-bot mdn-bot mdn-bot approved these changes

@argl argl Awaiting requested review from argl argl is a code owner automatically assigned from mdn/engineering

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mdn-bot