Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps the patch-deps-updates-main group with 13 updates in the / directory:

Package From To
@types/node 20.19.9 20.19.21
@vitest/eslint-plugin 1.3.4 1.3.17
@vscode/test-cli 0.0.11 0.0.12
tsx 4.20.3 4.20.6
turbo 2.5.5 2.5.8
@babel/parser 7.28.0 7.28.4
dotenv 17.2.0 17.2.3
@vscode/vsce 3.6.0 3.6.2
esbuild 0.25.8 0.25.10
semver 7.7.2 7.7.3
@types/semver 7.7.0 7.7.1
wdio-vscode-service 6.1.3 6.1.4
mocha 11.7.1 11.7.4

Updates @types/node from 20.19.9 to 20.19.21

Commits

Updates @vitest/eslint-plugin from 1.3.4 to 1.3.17

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.3.5

Bug Fixes

  • docs: fix incorrect rule name in vitest/require-mock-type-parameters example (#740) (d48741a)

Features

  • prefer-describe-function-title: Check for unnecessary .name (#744) (5f1fe04)

What's Changed

New Contributors

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.3.4...v1.3.5

Commits
  • 526e378 chore: release v1.3.17
  • 6229b2b fix(prefer-called-exactly-once-with): incorrect auto-fix behavior (#778)
  • c617878 Update prefer-called-exactly-once-with.md (#776)
  • 4f1b62b chore: release v1.3.16
  • 64ef899 fix: correct fixer for prefer-called-exactly-once-with (#774)
  • 83a5f7e chore: release v1.3.15
  • 1a04f35 Prefer import in mock (#770)
  • 281e1e5 chore: release v1.3.14
  • f57ce1a max-expects: fix when test context is used (#768)
  • 4e7df3d feat: Reintroduce rule for prefer-called-exactly-once-with in alignment with ...
  • Additional commits viewable in compare view

Updates @vscode/test-cli from 0.0.11 to 0.0.12

Changelog

Sourced from @​vscode/test-cli's changelog.

0.0.12 - 2025-10-09

  • Package version bumps
Commits

Updates tsx from 4.20.3 to 4.20.6

Release notes

Sourced from tsx's releases.

v4.20.6

4.20.6 (2025-09-26)

Bug Fixes

  • properly hide relaySignal from process.listeners() (#741) (710a424)

This release is also available on:

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

  • handle ambiguous packages (796053a)

This release is also available on:

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes


This release is also available on:

Commits
  • 710a424 fix: properly hide relaySignal from process.listeners() (#741)
  • 20b91c4 docs: make sponsors dynamic
  • 08dcd59 chore: move vercel settings to root
  • e6d1a47 docs: obfuscate aside classname
  • de2719d style: remove unused variable
  • 13f2954 chore: upgrade docs deps
  • 0504525 chore: upgrade manten
  • 132fdd8 test: assert require.cache
  • f057e7d test: require loop
  • a6f8f9f refactor: getFormat to handle all formats
  • Additional commits viewable in compare view

Updates turbo from 2.5.5 to 2.5.8

Release notes

Sourced from turbo's releases.

Turborepo v2.5.8

What's Changed

create-turbo

Changelog

Full Changelog: vercel/turborepo@v2.5.7...v2.5.8

Turborepo v2.5.8-canary.0

What's Changed

create-turbo

Changelog

Full Changelog: vercel/turborepo@v2.5.7...v2.5.8-canary.0

Turborepo v2.5.7

What's Changed

Docs

create-turbo

eslint

@​turbo/repository

Examples

... (truncated)

Commits

Updates @babel/parser from 7.28.0 to 7.28.4

Release notes

Sourced from @​babel/parser's releases.

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

📝 Documentation

🏠 Internal

🔬 Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

Committers: 5

... (truncated)

Changelog

Sourced from @​babel/parser's changelog.

v7.28.4 (2025-09-05)

🏠 Internal

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

📝 Documentation

🏠 Internal

🔬 Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

v7.28.2 (2025-07-24)

🐛 Bug Fix

  • babel-types
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

v7.28.1 (2025-07-12)

🐛 Bug Fix

  • babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

📝 Documentation

... (truncated)

Commits

Updates dotenv from 17.2.0 to 17.2.3

Changelog

Sourced from dotenv's changelog.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

17.2.2 (2025-09-02)

Added

  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)
Commits

Updates @vscode/vsce from 3.6.0 to 3.6.2

Release notes

Sourced from @​vscode/vsce's releases.

v3.6.2

Changes:

  • #1199: fix: generate language model tag for languageModelChatProvider contributions

This list of changes was auto generated.

v3.6.2-0

Changes:

  • #1199: fix: generate language model tag for languageModelChatProvider contributions

This list of changes was auto generated.

v3.6.1

Changes:

  • #1198: chore: bump vsce-sign to 2.0.7
  • #1194: Engineering - do not run Azure Pipeline for pull requests
  • #1193: fix: check exec params
  • #1191: Bump tmp from 0.2.3 to 0.2.4
  • #1188: Avoid Node.js DEP0190 warning by using string form for prepublish command
  • #1190: chore: migrate PR check to GitHub Actions
  • #1189: update secretlint
  • #1187: Bump form-data from 4.0.0 to 4.0.4
  • #1185: chore: onboard OSS pipeline to 1ES template
  • #1179: add commonjs annotation to package.json

This list of changes was auto generated.

v3.6.1-9

Changes:

  • #1198: chore: bump vsce-sign to 2.0.7

This list of changes was auto generated.

v3.6.1-8

Changes:

... (truncated)

Commits
  • 6a944cc Merge pull request #1199 from joyceerhl/patch-1
  • 623d46c fix test
  • 70f3535 fix: generate language model tag for languageModelChatProvider contributions
  • d9422df chore: bump vsce-sign to 2.0.7 (#1198)
  • 91b5381 Engineering - do not run Azure Pipeline for pull requests (#1194)
  • 6d9f87e fix: check exec params (#1193)
  • 8fa2eb5 Bump tmp from 0.2.3 to 0.2.4 (#1191)
  • 6b0b21d Avoid Node.js DEP0190 warning by using string form for prepublish command (#1...
  • 29a2b75 chore: migrate PR check to GitHub Actions (#1190)
  • 472e6ec Merge pull request #1189 from microsoft/benibenj/other-tarantula
  • Additional commits viewable in compare view

Updates esbuild from 0.25.8 to 0.25.10

Release notes

Sourced from esbuild's releases.

v0.25.10

  • Fix a panic in a minification edge case (#4287)

    This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

    function identity(x) { return x }
    identity({ y: identity(123) })
  • Fix @supports nested inside pseudo-element (#4265)

    When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

    The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

    However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

    /* Original code */
    ::placeholder {
      color: red;
      body & { color: green }
      @supports (color: blue) { color: blue }
    }
    /* Old output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    {
    color: blue;
    }
    }
    /* New output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    ::placeholder {
    color: blue;
    }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.25.10

  • Fix a panic in a minification edge case (#4287)

    This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

    function identity(x) { return x }
    identity({ y: identity(123) })
  • Fix @supports nested inside pseudo-element (#4265)

    When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

    The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

    However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

    /* Original code */
    ::placeholder {
      color: red;
      body & { color: green }
      @supports (color: blue) { color: blue }
    }
    /* Old output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    {
    color: blue;
    }
    }
    /* New output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    ::placeholder {
    color: blue;

... (truncated)

Commits

Updates semver from 7.7.2 to 7.7.3

Release notes

Sourced from semver's releases.

v7.7.3

7.7.3 (2025-10-06)

Bug Fixes

Chores

Changelog

Sourced from semver's changelog.

7.7.3 (2025-10-06)

Bug Fixes

Chores

Commits
  • a25789b chore: release 7.7.3 (#812)
  • e37e0ca fix: faster paths for compare (#813)
  • 2471d75 fix: x-range build metadata support
  • 8f05c87 chore: bump @​npmcli/template-oss from 4.25.0 to 4.25.1 (#807)
  • d17aebf chore: bump @​npmcli/template-oss from 4.24.4 to 4.25.0 (#797)
  • 3b03e3b chore: bump @​npmcli/template-oss from 4.24.3 to 4.24.4 (#790)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for semver since your current version.


Updates @types/semver from 7.7.0 to 7.7.1

Commits

Updates wdio-vscode-service from 6.1.3 to 6.1.4

Release notes

Sourced from wdio-vscode-service's releases.

Release 6.1.4

  • Use semver instead of unreliable string comparison (#150) (70b2030)
  • fix(docs): add note to use enforceWebDriverClassic (de249aa)
  • Fix reference link to tests (#146) (e4ef4d5)
Commits

Updates mocha from 11.7.1 to 11.7.4

Release notes

Sourced from mocha's releases.

v11.7.4

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

v11.7.3

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)

v11.7.2

11.7.2 (2025-09-01)

🩹 Fixes

  • fail with an informative error message on a file with a broken default import (#5413) (b0e6135)
  • load mjs files correctly (#5429) (a947b9b)

📚 Documentation

... (truncated)

Changelog

Sourced from mocha's changelog.

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)

11.7.2 (2025-09-01)

🩹 Fixes

  • fail with an informative error message on a file with a broken default import (#5413) (b0e6135)
  • load mjs files correctly (#5429) (a947b9b)

📚 Documentation

  • add banner from old site to new site, link from new to old (#5414) (dedef11)
  • add info on spies to legacy docs (#5421) (21f5544)

... (truncated)

Commits
  • 8649f39 chore(main): release 11.7.4 (#5473)
  • c2667c3 fix: watch mode using chokidar v4 (#5379)
  • 7f68e5c chore: remove trailing spaces (#5475)
  • bff9166 Docs: migrate remaining legacy wiki pages to main documentation (#5465)
  • c805327 chore(main): release 11.7.3 (#5455)
  • ebdbc48 fix: use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION ...
  • 4122c7d docs: add security escalation policy (#5466)
  • 1164b9d docs: fix duplicate global leak documentation (#5461)
  • 48c6f40 build(deps): bump actions/setup-node in the github-actions group (#5459)
  • 6654704 docs: migrate third party UIs wiki page to docs (#5434)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • `@dependa...

Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 13, 2025
…y with 13 updates

Bumps the patch-deps-updates-main group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.9` | `20.19.21` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.3.4` | `1.3.17` |
| [@vscode/test-cli](https://github.com/Microsoft/vscode-test-cli) | `0.0.11` | `0.0.12` |
| [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.20.6` |
| [turbo](https://github.com/vercel/turborepo) | `2.5.5` | `2.5.8` |
| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.28.0` | `7.28.4` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.0` | `17.2.3` |
| [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.6.0` | `3.6.2` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.8` | `0.25.10` |
| [semver](https://github.com/npm/node-semver) | `7.7.2` | `7.7.3` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.0` | `7.7.1` |
| [wdio-vscode-service](https://github.com/webdriverio-community/wdio-vscode-service) | `6.1.3` | `6.1.4` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.1` | `11.7.4` |



Updates `@types/node` from 20.19.9 to 20.19.21
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/eslint-plugin` from 1.3.4 to 1.3.17
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.3.4...v1.3.17)

Updates `@vscode/test-cli` from 0.0.11 to 0.0.12
- [Changelog](https://github.com/microsoft/vscode-test-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/vscode-test-cli/commits)

Updates `tsx` from 4.20.3 to 4.20.6
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.20.3...v4.20.6)

Updates `turbo` from 2.5.5 to 2.5.8
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/release.md)
- [Commits](vercel/turborepo@v2.5.5...v2.5.8)

Updates `@babel/parser` from 7.28.0 to 7.28.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.4/packages/babel-parser)

Updates `dotenv` from 17.2.0 to 17.2.3
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.0...v17.2.3)

Updates `@vscode/vsce` from 3.6.0 to 3.6.2
- [Release notes](https://github.com/Microsoft/vsce/releases)
- [Commits](microsoft/vscode-vsce@v3.6.0...v3.6.2)

Updates `esbuild` from 0.25.8 to 0.25.10
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.8...v0.25.10)

Updates `semver` from 7.7.2 to 7.7.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.2...v7.7.3)

Updates `@types/semver` from 7.7.0 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `wdio-vscode-service` from 6.1.3 to 6.1.4
- [Release notes](https://github.com/webdriverio-community/wdio-vscode-service/releases)
- [Commits](webdriverio-community/wdio-vscode-service@6.1.3...6.1.4)

Updates `mocha` from 11.7.1 to 11.7.4
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.1...v11.7.4)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 20.19.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.3.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: "@vscode/test-cli"
  dependency-version: 0.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: tsx
  dependency-version: 4.20.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: turbo
  dependency-version: 2.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: "@babel/parser"
  dependency-version: 7.28.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: dotenv
  dependency-version: 17.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: "@vscode/vsce"
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: esbuild
  dependency-version: 0.25.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: semver
  dependency-version: 7.7.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: "@types/semver"
  dependency-version: 7.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: wdio-vscode-service
  dependency-version: 6.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
- dependency-name: mocha
  dependency-version: 11.7.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-deps-updates-main
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/patch-deps-updates-main-6dc98f66b5 branch from ad669c4 to a4da6c6 Compare October 14, 2025 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants