Skip to content

build(deps-dev): bump the development-dependencies group across 1 directory with 10 updates - #452

Merged
dytsou merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-3ce973284f
Oct 24, 2026
Merged

build(deps-dev): bump the development-dependencies group across 1 directory with 10 updates#452
dytsou merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-3ce973284f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 10 updates in the / directory:

Package From To
@redocly/cli 2.63.0 2.66.0
@vitest/coverage-v8 5.0.4 5.0.5
@vitest/ui 5.0.4 5.0.5
eslint 10.12.0 10.13.0
eslint-plugin-jsdoc 65.3.2 65.4.0
happy-dom 21.0.1 21.0.3
js-yaml 5.4.3 5.5.0
jsdom 30.1.2 30.1.3
vitest 5.0.4 5.0.5
wrangler 4.150.0 4.151.3

Updates @redocly/cli from 2.63.0 to 2.66.0

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.66.0

Minor Changes

  • Added the skills command that installs the Redocly CLI agent skills for AI coding agents.

Patch Changes

  • Updated @​redocly/openapi-core to v2.66.0.
  • Updated @​redocly/reunite-integration to v2.66.0.

@​redocly/cli@​2.65.1

Patch Changes

  • Fixed the no-schema-type-mismatch rule to report properties on any non-object type and items on any non-array type, such as type: string with properties. Previously, the rule only reported properties on array and items on object.

    Note: Because the rule is an error in the recommended ruleset, descriptions that passed before may now fail.

  • Fixed an issue where the struct rule incorrectly reported an error for type: file in response schemas of OpenAPI 2.0 API descriptions.

  • Updated @​redocly/openapi-core to v2.65.1.

@​redocly/cli@​2.65.0

Minor Changes

  • Added the --openapi-version option to the generate-spec command to choose between OpenAPI 3.1 and 3.2 (the default) for the generated description.

Patch Changes

  • Fixed the message of the capitalization assertion in recheck rules so that it names the style, such as "sentence case", instead of printing $sentence.
  • Fixed redocly recheck --fix so that the report lists only the findings that remain after the fixes, not the findings it just fixed.
  • Fixed the redocly recheck --fix summary so that inserted text with a line break prints as \n instead of breaking the output line.
  • Updated @​redocly/recheck to v2.65.0.

@​redocly/cli@​2.64.1

Patch Changes

  • Fixed an issue where the respect command altered string values in runtime expressions that contained a dot followed by a digit. For example, a token read through $response.body#/token or a quoted value in success criteria.
  • Fixed an issue where lint and bundle crashed with Unknown type name found: string on OpenAPI 3.2 descriptions that had a deviceAuthorization OAuth flow with non-empty scopes.
  • Updated @​redocly/openapi-core to v2.64.1.
  • Updated @​redocly/respect-core to v2.64.1.

@​redocly/cli@​2.64.0

Minor Changes

  • Added the onSettled middleware hook to the generated TypeScript client. Added the client.telemetry option to the generate-client command.

Patch Changes

... (truncated)

Commits
  • 841b555 chore: 🔖 release new versions (#3274)
  • c64ad74 chore: update Redocly config to v0.67.0 (#3275)
  • 8b5d85c chore: lazy load undici (#3273)
  • 388c434 feat: add the skills command to install the Redocly CLI agent skills (#3224)
  • 62ed213 chore: refactor test setup (#3212)
  • 76a7d56 chore: 🔖 release new versions (#3269)
  • 0d73cdc fix: report properties and items on any mismatched type in no-schema-type-mis...
  • 0ad7b0b fix: allow the file type in OpenAPI 2.0 response schemas (#3255)
  • e1683d0 fix: use sources endpoint for the push command (#3268)
  • 767b237 chore: 🔖 release new versions (#3265)
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 5.0.4 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vitest/ui from 5.0.4 to 5.0.5

Release notes

Sourced from @​vitest/ui's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates eslint-plugin-jsdoc from 65.3.2 to 65.4.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v65.4.0

65.4.0 (2026-10-20)

Features

v65.3.16

65.3.16 (2026-10-20)

Bug Fixes

v65.3.15

65.3.15 (2026-10-19)

Bug Fixes

  • prefer-import-tag: only exempt @typedef itself, not every name-defining tag (4901870)
  • prefer-import-tag: only use @typedef names as aliases for import() types (df6e281)

v65.3.14

65.3.14 (2026-10-19)

Bug Fixes

  • check-param-names, require-jsdoc, convert-to-jsdoc-comments: do not throw on settings.jsdoc.contexts entries the rule cannot handle (f5ba20b)
  • require-jsdoc, convert-to-jsdoc-comments: throw a clear error for a comment in the contexts setting (ebe5186)

v65.3.13

65.3.13 (2026-10-19)

Bug Fixes

  • no-unnecessary-type-assertion: widen literal types on let and var declarations; fixes #1820 (6f90f25)

v65.3.12

65.3.12 (2026-10-18)

Bug Fixes

  • no-undefined-types: treat type parameters of function types as defined anywhere within the function type (dce0d89)

... (truncated)

Commits
  • 84eee2c feat(check-tag-names): move matching @​prop descriptions onto properties
  • 516263d fix: handle typed computed properties; fixes #1822
  • 4901870 fix(prefer-import-tag): only exempt @typedef itself, not every name-defin...
  • df6e281 fix(prefer-import-tag): only use @typedef names as aliases for import()...
  • ebe5186 fix(require-jsdoc, convert-to-jsdoc-comments): throw a clear error for a ...
  • f5ba20b fix(check-param-names, require-jsdoc, convert-to-jsdoc-comments): do no...
  • 6f90f25 fix(no-unnecessary-type-assertion): widen literal types on let and var decl...
  • dce0d89 fix(no-undefined-types): treat type parameters of function types as defined...
  • 6a4c8fe fix(no-unnecessary-type-assertion): no exit early when typescript is found;...
  • 2ba7ffd fix(no-missing-syntax, no-restricted-syntax): support string any contex...
  • Additional commits viewable in compare view

Updates happy-dom from 21.0.1 to 21.0.3

Release notes

Sourced from happy-dom's releases.

v21.0.3

👷‍♂️ Patch fixes

  • Fixes security vulnerability where authorization header was forwarded when redirecting - By @​capricorn86

v21.0.2

👷‍♂️ Patch fixes

Commits
  • 875ef5c fix: Fixes security vulnerability where authorization header was forwarded wh...
  • 1f3ffdf fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...
  • f55c7e0 chore: Update security documentation (#2509)
  • See full diff in compare view

Updates js-yaml from 5.4.3 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

  • Updated argparse to v3.
  • Updated development dependencies.

Fixed

  • Correct percent-encoding of shorthand and verbatim tags.
  • Reject ,, ], and } at the start of block plain scalars, #801.
  • Report the exact position of non-printable characters in errors, #801.
Commits
  • cb62b2d 5.5.0 released
  • 87aed90 Deps bump
  • 3aec511 Fix error positions for non-printable characters, #801
  • 11aa483 Reject flow indicators at the start of block plain scalars, #801
  • 339d8e0 Refactor tag encoder and decoder to match the YAML specification
  • See full diff in compare view

Updates jsdom from 30.1.2 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

  • Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@​scttcper, @​asamuzaK)
  • Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@​scttcper)
  • Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
  • Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
  • Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@​rnavarro)
  • Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
  • Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
  • Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
  • Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
  • Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
  • Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
  • Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
  • Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
  • Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@​asamuzaK)
Commits
  • 058c0f5 30.1.3
  • fcd1fd1 Cascade parsed longhands independently
  • a3ee786 Cascade computed style properties on demand
  • f42dc15 Resolve colors before caching or using currentcolor
  • 074b1fb Compute background-position lengths against the final font size
  • d19598c Apply style rules nested in multiple @​media rules
  • 45d626c Rule out attribute selector subjects before matching
  • 3ff0a5b Upgrade Undici and remove abort workarounds
  • 8813bb1 Ignore CSS declarations with unparseable math functions
  • 63712d8 Fix XHR credentials across redirects
  • Additional commits viewable in compare view

Updates vitest from 5.0.4 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates wrangler from 4.150.0 to 4.151.3

Release notes

Sourced from wrangler's releases.

wrangler@4.151.3

Patch Changes

  • #15611 4508172 Thanks @​taylorlee! - Allow wrangler dev to start module Workers without a default export

    Previously, wrangler dev failed to start module Workers that exported only named entrypoints, such as RPC services, unless an unused default export was added. These Workers now start normally in local development without that workaround.

  • #16370 61fc739 Thanks @​WalshyDev! - Fetch the remote config diff from the configured compliance region

    When a Worker was last deployed from the dashboard, wrangler deploy and wrangler versions upload download its remote configuration to compare with the local one. These requests ignored the compliance_region field in the Wrangler configuration file and only honoured the CLOUDFLARE_COMPLIANCE_REGION environment variable. A FedRAMP High Worker configured through the config file would send them to api.cloudflare.com instead of api.fed.cloudflare.com, and the deploy would fail with authentication errors. They now use the same compliance region as the rest of the deploy.

  • #15846 a88cac4 Thanks @​oddharsh! - Fail with an error instead of hanging when local dev requests can't work under Bun

    Bun's fetch() ignores the undici dispatcheroven-sh/bun#39247createTestHarness()'s server.fetch() and server.getWorker()'s fetch(), email() and scheduled() now throw a UserError, requests to the dev server URL get a 503 naming the cause, and starting remote bindings throws a UserError. Each of these used to hang with no error. server.getWorker().getEnv() and getExport() keep working under Bun.

  • #16359 262021d Thanks @​tw4! - Stop --strict deploys and version uploads from aborting when the API omits optional binding fields

    Previously, wrangler deploy --strict and wrangler versions upload --strict could report a destructive change for an unchanged configuration, for example an R2 bucket in the default jurisdiction, because a field the API left out was compared as removed. Missing and unset optional fields are now treated as equal, so these commands proceed when the local configuration matches the deployed Worker.

  • Updated dependencies [3464abc]:

wrangler@4.151.2

Patch Changes

  • #16307 37ab91c Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20261006.1 ^5.20261016.1
    workerd 1.20261012.1 1.20261016.1

  • #16352 0ae7926 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20261016.1 ^5.20261019.1
    workerd 1.20261016.1 1.20261019.1

  • Updated dependencies [37ab91c, 0ae7926]:

wrangler@4.151.1

Patch Changes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Oct 23, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 github-readme-stats 4f8a450 Commit Preview URL

Branch Preview URL		 Oct 23 2026, 06:01 PM

@dytsou

dytsou commented Oct 23, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
build(deps-dev): bump the development-dependencies group across 1 dir…
4f8a450 
…ectory with 10 updates

Bumps the development-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.63.0` | `2.66.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.4` | `5.0.5` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `5.0.4` | `5.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `65.3.2` | `65.4.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `21.0.1` | `21.0.3` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.3` | `5.5.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.4` | `5.0.5` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.150.0` | `4.151.3` |



Updates `@redocly/cli` from 2.63.0 to 2.66.0
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.63.0...@redocly/cli@2.66.0)

Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `@vitest/ui` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/ui)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-jsdoc` from 65.3.2 to 65.4.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v65.3.2...v65.4.0)

Updates `happy-dom` from 21.0.1 to 21.0.3
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v21.0.1...v21.0.3)

Updates `js-yaml` from 5.4.3 to 5.5.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.3...5.5.0)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `vitest` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `wrangler` from 4.150.0 to 4.151.3
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.151.3/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@redocly/cli"
  dependency-version: 2.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@vitest/ui"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: happy-dom
  dependency-version: 21.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: js-yaml
  dependency-version: 5.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: wrangler
  dependency-version: 4.151.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump the development-dependencies group with 10 updates build(deps-dev): bump the development-dependencies group across 1 directory with 10 updates Oct 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-3ce973284f branch from 26dee20 to 4f8a450 Compare October 23, 2026 18:00
@sonarqubecloud

sonarqubecloud Bot commented Oct 23, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@dytsou
dytsou merged commit 9a2def2 into main Oct 24, 2026
14 checks passed
@dytsou
dytsou deleted the dependabot/npm_and_yarn/development-dependencies-3ce973284f branch October 24, 2026 07:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dytsou dytsou dytsou approved these changes

Assignees

No one assigned

Labels

javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dytsou