chore(deps):(deps): bump the production-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #153 · gregpriday/copytree

dependabot · 2026-09-28T09:09:22Z

Bumps the production-dependencies group with 9 updates in the / directory:

Package	From	To
ignore	`7.0.6`	`7.0.10`
js-yaml	`5.3.0`	`5.4.2`
p-limit	`7.3.1`	`7.3.3`
@jest/globals	`30.4.1`	`30.5.2`
@types/node	`26.2.0`	`26.6.2`
babel-jest	`30.4.1`	`30.5.2`
fast-xml-parser	`5.11.0`	`5.11.1`
fs-extra	`11.4.0`	`11.4.1`
knip	`6.32.2`	`6.38.0`

Updates ignore from 7.0.6 to 7.0.10

Release notes

Sourced from ignore's releases.

7.0.8

PATCH Brings pattern matching closer to git:

PATCH A backslash now makes the next character a literal, exactly as git does: \* matches a literal * rather than acting as a wildcard, \? matches a literal ?, and \d, \b, \/ and the like are the plain characters instead of regular-expression escapes.

PATCH Only a trailing run of spaces is stripped from a pattern — never tabs or other whitespace — and a line of only tabs is treated as a pattern rather than a blank line, matching git.

An upgrade is recommended for all dependents.

Commits

3a12e09 bump version 9.0.10
58ae427 Merge pull request #168 from MFA-G/fix/wildcard-partial-separator
e341595 fix: let a wildcard reach past a partial match of what follows it
821765e #166: bump version 7.0.9
e00d35e Merge pull request #167 from bentbrain/fix-bom-blank-line
9b6481f fix(ignore): reject BOM-only blank lines before compilation
20b802a bump version 7.0.8
0414358 build: require 100% coverage of index.js as an explicit gate
968aee6 compat: check compatibility by running old versions' test suites
8e46220 build: run the compatibility gate as part of npm test
Additional commits viewable in compare view

Updates js-yaml from 5.3.0 to 5.4.2

Changelog

Sourced from js-yaml's changelog.

[5.4.2] - 2026-09-13

Fixed

forceQuotes no longer quotes non-string scalars, #798.

[5.4.1] - 2026-08-26

Changed

Hard-limit merge sequence size to 100.

Security

Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

[breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.

[breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.

Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

Accept a byte order mark at the start of each document in a stream, #791.

Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.

Preserve empty scalar items when converting block sequences to flow style.

Do not apply the 1024-character simple-key limit to flow mapping keys.

Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.

Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

Commits

494400b 5.4.2 released
6d8adb4 Fix forceQuotes quoting non-string scalars, #798
e5a3ba0 5.4.1 released
e54dea3 Hard-limit merge sequence size to 100
dfd3a29 Cleanup 6a8e05f, #797
6a8e05f fix: count empty merge sources against maxTotalMergeKeys (#797)
6b4ff5e 5.4.0 released
3b3625e Update changelog
4f25a74 Fix file name
3bd003b Expose new scalar styling API
Additional commits viewable in compare view

Updates p-limit from 7.3.1 to 7.3.3

Release notes

Sourced from p-limit's releases.

v7.3.3

Fix unhandled rejections in limit.map() when the iterable throws 9df0d27

sindresorhus/p-limit@v7.3.2...v7.3.3

v7.3.2

Fix limitFunction queue clearing (#109) f3e7f9b

sindresorhus/p-limit@v7.3.1...v7.3.2

Commits

4d4ec71 7.3.3
9df0d27 Fix unhandled rejections in limit.map() when the iterable throws
783068b 7.3.2
f3e7f9b Fix limitFunction queue clearing (#109)
See full diff in compare view

Updates @jest/globals from 30.4.1 to 30.5.2

Release notes

Sourced from @jest/globals's releases.

v30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

New Contributors

@winklemad made their first contribution in jestjs/jest#16345

Full Changelog: jestjs/jest@v30.5.1...v30.5.2

v30.5.1

Fixes

[jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)

[jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)

[jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)

[jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)

[jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

[jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

New Contributors

@HuzaifaChaudary made their first contribution in jestjs/jest#16413

Full Changelog: jestjs/jest@v30.5.0...v30.5.1

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @timkindberg (#16053):
const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
</tr></table> 

... (truncated)

Changelog

Sourced from @jest/globals's changelog.

30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

30.5.1

Fixes

[jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)

[jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)

[jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)

[jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)

[jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

[jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

30.5.0

Features

[@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)

[@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)

[jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)

[jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (#16322)

[jest-circus, jest-message-util, jest-reporters, jest-types] Add retryMessages to AssertionResult and export formatErrorStack, so the retry log renders nested cause and AggregateError sections with code frames instead of serialized [cause]:/[errors]: markers (#16316)

[jest-circus, jest-types] Add unhandledErrorsDetailed to Circus.RunResult, so an unhandled rejection reports its cause chain and AggregateError entries with code frames instead of a pre-serialized stack (#16316)

[jest-haste-map] Replace NodeWatcher and FSEventsWatcher with @parcel/watcher for the non-watchman watch path (#16188)

[jest-resolve] Bump unrs-resolver to 1.12.1, remove jest-pnp-resolver and unnecessary checks (#15721)

[jest-resolve] Honor Node's --preserve-symlinks / NODE_PRESERVE_SYMLINKS in the default resolver by passing symlinks: false to unrs-resolver (#16260)

[jest-runtime] Apply automocking and manual __mocks__ files to synchronously evaluable ESM graphs on Node 24.9+ - static imports, dynamic import() and require() of an ESM file now generate an automock from the real module's namespace instead of failing with "Attempting to import a mock without a factory". Graphs that need async evaluation (top-level await) or an async-only resolver or transformer still throw (#16391)

[jest-runtime] Route process.getBuiltinModule through the sandbox, so it returns the sandbox process and the hooked node:module instead of the host's (#16391)

[jest-runtime] Throw an actionable error from module.register() and module.registerHooks() inside a test - the hooks attached to the loader running Jest itself, never saw the sandboxed requires they were meant for, and stayed registered for every later test file in the worker (#16391)

[jest-runtime] Surface resolution and import-attribute errors in an ESM graph before executing any of its CJS dependencies on Node 24.9+, matching Node's run-nothing-on-a-broken-graph behavior; the legacy loader on older versions keeps its linking-time execution order (#16391)

[jest-runtime] Throw ERR_SOURCE_PHASE_NOT_DEFINED with an actionable message for import source and import.source(), instead of failing at instantiation with V8's bare "Source phase import object is not defined" (#16391)

[jest-runtime] Emit the JSON-without-import-attribute deprecation warning once per test file instead of once per worker, so it is no longer silently swallowed for every file after the first (#16391)

[jest-runtime] Set import.meta.main to true in the test file and false in every module it loads, matching Node 24+ (#16367)

[jest-runtime] Resolve the module-sync export condition, so a package that exposes its ESM entry point for require() loads the same file Node would (#16336)

[jest-snapshot] Add external snapshot paths to custom reporter failure details (#16374)

Fixes

... (truncated)

Commits

202dd8a v30.5.2
9ab14fe v30.5.1
912baa3 v30.5.0
b91717a chore: refresh coding agent instructions (#16182)
See full diff in compare view

Updates @types/node from 26.2.0 to 26.6.2

Commits

See full diff in compare view

Updates babel-jest from 30.4.1 to 30.5.2

Release notes

Sourced from babel-jest's releases.

v30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

New Contributors

@winklemad made their first contribution in jestjs/jest#16345

Full Changelog: jestjs/jest@v30.5.1...v30.5.2

v30.5.1

Fixes

[jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)

[jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)

[jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)

[jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)

[jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

[jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

New Contributors

@HuzaifaChaudary made their first contribution in jestjs/jest#16413

Full Changelog: jestjs/jest@v30.5.0...v30.5.1

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @timkindberg (#16053):
const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
</tr></table> 

... (truncated)

Changelog

Sourced from babel-jest's changelog.

30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

30.5.1

Fixes

[jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)

[jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)

[jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)

[jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)

[jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

[jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

30.5.0

Features

[@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)

[@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)

[jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)

[jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (#16322)

[jest-circus, jest-message-util, jest-reporters, jest-types] Add retryMessages to AssertionResult and export formatErrorStack, so the retry log renders nested cause and AggregateError sections with code frames instead of serialized [cause]:/[errors]: markers (#16316)

[jest-circus, jest-types] Add unhandledErrorsDetailed to Circus.RunResult, so an unhandled rejection reports its cause chain and AggregateError entries with code frames instead of a pre-serialized stack (#16316)

[jest-haste-map] Replace NodeWatcher and FSEventsWatcher with @parcel/watcher for the non-watchman watch path (#16188)

[jest-resolve] Bump unrs-resolver to 1.12.1, remove jest-pnp-resolver and unnecessary checks (#15721)

[jest-resolve] Honor Node's --preserve-symlinks / NODE_PRESERVE_SYMLINKS in the default resolver by passing symlinks: false to unrs-resolver (#16260)

[jest-runtime] Apply automocking and manual __mocks__ files to synchronously evaluable ESM graphs on Node 24.9+ - static imports, dynamic import() and require() of an ESM file now generate an automock from the real module's namespace instead of failing with "Attempting to import a mock without a factory". Graphs that need async evaluation (top-level await) or an async-only resolver or transformer still throw (#16391)

[jest-runtime] Route process.getBuiltinModule through the sandbox, so it returns the sandbox process and the hooked node:module instead of the host's (#16391)

[jest-runtime] Throw an actionable error from module.register() and module.registerHooks() inside a test - the hooks attached to the loader running Jest itself, never saw the sandboxed requires they were meant for, and stayed registered for every later test file in the worker (#16391)

[jest-runtime] Surface resolution and import-attribute errors in an ESM graph before executing any of its CJS dependencies on Node 24.9+, matching Node's run-nothing-on-a-broken-graph behavior; the legacy loader on older versions keeps its linking-time execution order (#16391)

[jest-runtime] Throw ERR_SOURCE_PHASE_NOT_DEFINED with an actionable message for import source and import.source(), instead of failing at instantiation with V8's bare "Source phase import object is not defined" (#16391)

[jest-runtime] Emit the JSON-without-import-attribute deprecation warning once per test file instead of once per worker, so it is no longer silently swallowed for every file after the first (#16391)

[jest-runtime] Set import.meta.main to true in the test file and false in every module it loads, matching Node 24+ (#16367)

[jest-runtime] Resolve the module-sync export condition, so a package that exposes its ESM entry point for require() loads the same file Node would (#16336)

[jest-snapshot] Add external snapshot paths to custom reporter failure details (#16374)

Fixes

... (truncated)

Commits

202dd8a v30.5.2
9ab14fe v30.5.1
912baa3 v30.5.0
8e6d128 Update istanbul dependencies (#16049)
1865dd8 chore: update yarn & refresh lockfiles (#16251)
ff542da chore(deps): update babel monorepo to v8.0.0-rc.5 (#16172)
b91717a chore: refresh coding agent instructions (#16182)
See full diff in compare view

Updates fast-xml-parser from 5.11.0 to 5.11.1

Release notes

Sourced from fast-xml-parser's releases.

v5.11.1

What's Changed

Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#858

Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#856

Bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#854

docs: fix two 404 documentation links by @rajanpanth in NaturalIntelligence/fast-xml-parser#862

New Contributors

@rajanpanth made their first contribution in NaturalIntelligence/fast-xml-parser#862

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.11.0...v5.11.1

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.11.1 / 2026-08-27

fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]

fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]

fix: DOCTYPE to read SYSTEM/PUBLIC

deps: strnum v2.4.2

5.10.1 / 2026-07-17

fix: multiple DOCTYPE declarations.

deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

upgrade:

xml-naming v0.3.0: cache support

PEM v1.6.2: sibling bug fix

is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

update strnum

*5.9.2 / 2026-06-17

dummy release to test changes in github action

*5.9.1 / 2026-06-17

dummy release to test release from github action

*5.9.0 / 2026-06-15

update strnum to 2.3.0

you can set hex, binary, enotation, infinity, unicode

validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)

This will consider xml-version as well. '1.0' is default

update strnum to 2.3.0

You can set octal and binary parsing which is bydeault off

update fast-xml-builder to 1.2.0

can sanitize tag names if found invalid

fix format output

5.7.3 / 2006-05-05

fix: alwaysCreateTextNode should create text node when attributes are present for self closing node

... (truncated)

Commits

3617550 5.11.1
6021128 update for release
6ddcb65 remove regex from validator
7d60815 docs: fix two 404 documentation links (#862)
4e3857b Bump actions/setup-node from 6.4.0 to 7.0.0 (#854)
fcc62fb Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 (#856)
23a9019 Bump actions/checkout from 7.0.0 to 7.0.1 (#858)
See full diff in compare view

Updates fs-extra from 11.4.0 to 11.4.1

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)

Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)

Commits

1e223d3 11.4.1
8cfd0a0 Remove obsolete docs note
de72292 Treat Unicode-normalization-only renames like case-only renames (#1079)
7e0ce7f Remove broken link (#1083)
00e858c Update GH Actions versions (#1082)
f829cc9 fix: propagate emptyDir directory read errors (#1080)
See full diff in compare view

Updates knip from 6.32.2 to 6.38.0

Release notes

Sourced from knip's releases.

Release 6.38.0

Include co-authors in docs contributor list (0c334100df59d89a512ad598ec50e7f62f6da0c3)

Filter bots and agents from docs contributors (617f70d8179c6b8668ca41fe5df77ced5e2b37c0)

Update Eve plugin conventions (#2049) (260dbb91a85f3a3bc2727e8f255d73df3737552c) - thanks @matchai!

Add args example to that doc page (50b271b98fc930a05a3b045a2f691486f9f06528)

Add Turborepo plugin (#2055) (e49d3db05f1d69ce7db3efcb8467a4af63c27379) - thanks @changbaebang!

Support import-x/* settings in ESLint plugin (#2050) (1a34cf82a3d6a1202717ef910bedba55838e9dd9) - thanks @bytedoe!

Resolve file option in Mocha configuration files (#2051) (9b5c5f60468c8a92a3e74adca5c0931f008677af) - thanks @giaBaoJS!

Support oxlint extends (#2054) (a149a98219bb14b15f446fc5f8c4f815e28b2183) - thanks @matthewnitschke-wk!

Fix import.meta handling in built-in compilers (#2059) (8b0c85076bf3dce15ef5f3c0c4e58bfefdf59ded) - thanks @vdavid!

Fix tag hints for enum and namespace members (#2061) (8a8805e48945863248429d18b7f6c4e4b7dc9ebd) - thanks @devYRPauli!

Flag unused member tags in tagged enums and namespaces (584e53ff3e0846fbfe04fa5b5bfefe2420576a34)

feat: resolve MDX content mapper remarkPlugins (#2060) (34dbccf25359f9e9fefe9d0be6ef2ec0252223cc) - thanks @gioboa!

Refactor and separate concerns w/ new typescript-content-mapper plugin (11e94509bd0f350d747facf4003fc5b248d1b02d)

Resolve mdx content mapper providerImportSource (7b5825117f97f2f87b7141509a254f88d0957cf7)

Fix config → entry in plop plugin (25a380c9e1165b76583d69b48b5fa7cdf5db0ae2)

Release 6.37.0

fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @RobHannay!

fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @addielaruee!

Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)

Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)

Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)

Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)

Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)

Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)

Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)

Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @bytedoe!

Release 6.36.0

Add @tailwindcss/webpack as Tailwind plugin enabler (#2027) (b5ac0cf734dda3c6c6c51c817981dfc558b7c582) - thanks @igas!

Fix Next.js Turbopack loader dependencies (23419b4edfd48796dd484fa880e1bad49a043d2e)

Explain ambiguous star exports in traces (#2025) (3c2c1a53f9c2b7ff3057a4e46761791979e0b09c) - thanks @gioboa!

Fix eslintrc parserOptions.parser handling in ESLint plugin (#2028) (c79463cec81d09518eda325ec00e6f12327dea8d) - thanks @bytedoe!

fix(compilers): require word boundary around import keyword (#2029) (68bbe51c39b564022b63942bc83cb570778cca00) - thanks @thanadolps!

fix: recover from corrupt cache file (#2034) (30ff7568c84e0a6731ca634a52314228d23d1a2b) - thanks @gioboa!

fix: fix trailing comma on dependency removal (#2033) (adfaf4f78878b6d55b0939a92d70a1fbb0ae1240) - thanks @gioboa!

Document built-in compiler scope (a05e155276dad4ead16992580d17572cebf045e7)

Add babel, khan and oxc to projects and optimize svgs (1c26560b98bc3109e93d15761d02f089213bfb6c)

Add section to test preview packages & extension (d911c18385f0aa41f53653a2a15cc90a1e0251b8)

Fix shared info/exclude handling in linked Git worktrees (#2037) (c1f18d5a7d25fc5a614747bbcbd62d043457eb48) - thanks @kenfdev!

Shard Node specs on Windows and enable Bun test parallelism (66e966b6edec4460b40b05847fefa9f90ee69068)

Add Varlock plugin support (#2000) (e4fbf46acff08e78370e72b142e795bd81f28561) - thanks @Joehoel!

Apply NODE_OPTIONS inputs to package manager binaries (#2038) (c8df8a28e9a19484efe7097f984abc0c6556aff5) - thanks @giaBaoJS!

Handle array form of import/resolver setting in ESLint plugin (#2041) (a80d386a80fdafc89c610d4887ec82184ac178db) - thanks @bytedoe!

fix(node): add valueless Node CLI flags to boolean options (#2042) (4c6768501f7115a894d7ece9e5c32090b684cc6f) - thanks @shoutoutuoadi325!

fix(typedoc): accept string form of plugin and theme options (#2043) (ce387b05c8f136546e860ec73e29557563c63afa) - thanks @giaBaoJS!

Add textlint plugin (#2039) (532dab595fc9a910e320418dc0390222fb2d7478) - thanks @anandghegde!

fix: Correctly resolve Vitest setupFiles from nested configs (#2040) (84a494334e125d229dc865893b21d69d0d201e85) - thanks @CruseCtrl!

Add n8n to projects (3f756a7e70c4164d57a7dbbd58f3604afe4043e2)

... (truncated)

Commits

c0e42f8 Release knip@6.38.0
25a380c Fix config → entry in plop plugin
7b58251 Resolve mdx content mapper providerImportSource
11e9450 Refactor and separate concerns w/ new typescript-content-mapper plugin
34dbccf feat: resolve MDX content mapper remarkPlugins (#2060)
584e53f Flag unused member tags in tagged enums and namespaces
8a8805e Fix tag hints for enum and namespace members (#2061)
8b0c850 Fix import.meta handling in built-in compilers (#2059)
a149a98 Support oxlint extends (#2054)
9b5c5f6 Resolve file option in Mocha configuration files (#2051)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…irectory with 9 updates Bumps the production-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.6` | `7.0.10` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.3.0` | `5.4.2` | | [p-limit](https://github.com/sindresorhus/p-limit) | `7.3.1` | `7.3.3` | | [@jest/globals](https://github.com/jestjs/jest/tree/HEAD/packages/jest-globals) | `30.4.1` | `30.5.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.2` | | [babel-jest](https://github.com/jestjs/jest/tree/HEAD/packages/babel-jest) | `30.4.1` | `30.5.2` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.11.0` | `5.11.1` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.4.0` | `11.4.1` | | [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.38.0` | Updates `ignore` from 7.0.6 to 7.0.10 - [Release notes](https://github.com/kaelzhang/node-ignore/releases) - [Commits](kaelzhang/node-ignore@7.0.6...7.0.10) Updates `js-yaml` from 5.3.0 to 5.4.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.3.0...5.4.2) Updates `p-limit` from 7.3.1 to 7.3.3 - [Release notes](https://github.com/sindresorhus/p-limit/releases) - [Commits](sindresorhus/p-limit@v7.3.1...v7.3.3) Updates `@jest/globals` from 30.4.1 to 30.5.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest-globals) Updates `@types/node` from 26.2.0 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `babel-jest` from 30.4.1 to 30.5.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/babel-jest) Updates `fast-xml-parser` from 5.11.0 to 5.11.1 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.11.0...v5.11.1) Updates `fs-extra` from 11.4.0 to 11.4.1 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.4.0...11.4.1) Updates `knip` from 6.32.2 to 6.38.0 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/knip@6.38.0/packages/knip) --- updated-dependencies: - dependency-name: ignore dependency-version: 7.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: js-yaml dependency-version: 5.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: p-limit dependency-version: 7.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@jest/globals" dependency-version: 30.5.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/node" dependency-version: 26.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: babel-jest dependency-version: 30.5.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: fast-xml-parser dependency-version: 5.11.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: fs-extra dependency-version: 11.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: knip dependency-version: 6.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-28T09:09:23Z

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Repository navigation

chore(deps):(deps): bump the production-dependencies group across 1 directory with 9 updates - #153

chore(deps):(deps): bump the production-dependencies group across 1 directory with 9 updates#153
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/production-dependencies-6f1a9215a2

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

7.0.8

[5.4.2] - 2026-09-13

Fixed

[5.4.1] - 2026-08-26

Changed

Security

[5.4.0] - 2026-08-25

Added

Changed

Fixed

v7.3.3

v7.3.2

v30.5.2

Features

Fixes

New Contributors

v30.5.1

Fixes

Chore & Maintenance

New Contributors

v30.5.0

Highlights

whenCalledWith

30.5.2

Features

Fixes

30.5.1

Fixes

Chore & Maintenance

30.5.0

Features

Fixes

v30.5.2

Features

Fixes

New Contributors

v30.5.1

Fixes

Chore & Maintenance

New Contributors

v30.5.0

Highlights

whenCalledWith

30.5.2

Features

Fixes

30.5.1

Fixes

Chore & Maintenance

30.5.0

Features

Fixes

v5.11.1

What's Changed

New Contributors

11.4.1 / 2026-09-22

Release 6.38.0

Release 6.37.0

Release 6.36.0

Uh oh!

dependabot Bot commented on behalf of github Sep 28, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

`whenCalledWith`

`whenCalledWith`