Skip to content

Bump the dev-dependencies group across 1 directory with 8 updates - #2563

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-dc8f57bb06
Open

Bump the dev-dependencies group across 1 directory with 8 updates#2563
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-dc8f57bb06

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 8 updates in the / directory:

Package From To
@types/node 25.9.1 26.6.3
@typescript/native-preview 7.0.0-dev.20260602.1 7.0.0-dev.20260707.2
cpx2 9.0.0 9.0.3
danger 13.0.8 14.0.7
globals 17.6.0 17.12.0
p-retry 8.0.0 8.0.1
prettier 3.8.3 3.9.9
typescript 6.0.3 7.0.2

Updates @types/node from 25.9.1 to 26.6.3

Commits

Updates @typescript/native-preview from 7.0.0-dev.20260602.1 to 7.0.0-dev.20260707.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​typescript/native-preview since your current version.


Updates cpx2 from 9.0.0 to 9.0.3

Release notes

Sourced from cpx2's releases.

v9.0.3

Commits

  • Honor includeEmptyDirs consistently in watch mode abd204b

v9.0.2

Merged

Commits

  • Fix watch session invalidation during asynchronous traversal 70ae648

v9.0.1

Merged

Commits

  • Harden GitHub Actions workflows 280659c
Changelog

Sourced from cpx2's changelog.

v9.0.3

Commits

  • Honor includeEmptyDirs consistently in watch mode abd204b

v9.0.2 - 2026-09-08

Merged

Commits

  • Fix watch session invalidation during asynchronous traversal 70ae648

v9.0.1 - 2026-09-07

Merged

Commits

  • Harden GitHub Actions workflows 280659c
Commits
  • 7e7947b 9.0.3
  • abd204b Honor includeEmptyDirs consistently in watch mode
  • 5712b1a 9.0.2
  • f4bee17 Merge pull request #187 from bcomnes/fix/186-watch-session-lifecycle
  • 70ae648 Fix watch session invalidation during asynchronous traversal
  • 5ec2e16 9.0.1
  • 93d6706 Merge pull request #184 from bcomnes/fix/183-declaration-type-exports
  • 90602f8 Fix public declaration type export collisions
  • e4f084b Merge pull request #182 from bcomnes/dependabot/github_actions/zizmorcore/ziz...
  • e3e121b Upgrade: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3
  • Additional commits viewable in compare view
Attestation changes

This version has no provenance attestation, while the previous version (9.0.0) was attested. Review the package versions before updating.


Updates danger from 13.0.8 to 14.0.7

Changelog

Sourced from danger's changelog.

14.0.7

The Docker image behind the Danger GitHub Action now runs on node 22 instead of node 20. The image had stopped building entirely after the recent binary changes, so this gets the action publishing again. - [@​orta]

14.0.6

The prebuilt macOS binaries (what brew install danger/tap/danger-js gives you) now embed node 24 instead of node 18. Those binaries ship their own copy of node, and the old one was too old for the networking library Danger uses, so every call to GitHub failed with TypeError: terminated. They work again. - [@​orta]

14.0.0-5

Release faff as I migrate to OIDC deploys for danger - orta

14.0.0

Danger now installs undici 7 by default. undici is what Danger uses to talk to GitHub, GitLab and Bitbucket, and version 7 requires node 20.18.1 or newer — so for most people that is Danger's new effective minimum. Node 18 has not been dropped: you can pin undici back to the 6.x line yourself and everything keeps working. - [@​orta]

The reason for the switch is that it puts you in control of your own undici version. Previously Danger pinned undici to the 6.x line, so if a security advisory landed you had to wait for a Danger release to pick up the fix. undici is now an optional peer dependency accepting ^6.28.0 || ^7, which means moving it in either direction is a supported thing to do rather than a workaround.

  • github.reviews now reports the review states GitHub actually sends, so checking for a review that requested changes works - fixes #1443 [@​Socialpranker]
  • GitHub: Fetch all pages of pull request reviews #1383 [@​LeonMAG]
  • Upgrade to undici 6.27.0 to resolve transitive CVEs - fixes #1517 [@​rjatkins]
  • Breaking Default to undici 7, which raises the effective node requirement to 20.18.1. If you are on node 18, add "resolutions": { "undici": "^6.28.0" } (yarn), "overrides": { "undici": "^6.28.0" } (npm), or the same overrides block nested under "pnpm" (pnpm) to your package.json. [@​orta]
  • undici is now an optional peer dependency (^6.28.0 || ^7), so you can move it forward yourself to pick up security fixes without waiting for a Danger release [@​orta]
  • Removed the undici entry from Danger's own resolutions, which had no effect on people installing Danger [@​orta]
  • Danger now runs on node 24 and newer. Signing in as a GitHub App relied on a dependency that used a part of node removed in 24, which crashed Danger on startup before it could do any work. That signing is now done with node's own crypto, so the dependency (and the eleven packages it brought with it) is gone [@​orta]

13.0.9

  • Switch to use the native node-js fetch unidici

13.0.6

  • Fixes a danger local shell execution possibility [@​Junming]

13.0.5

  • Dropped p-limit as a dep

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for danger since your current version.


Updates globals from 17.6.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

  • Update globals (2026-09-01) (#353) 50a2119
  • Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

v17.11.0

  • Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

  • Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

v17.7.0

  • Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

Commits

Updates p-retry from 8.0.0 to 8.0.1

Release notes

Sourced from p-retry's releases.

v8.0.1

  • Fix error for invalid fractional retry counts 3c22035

sindresorhus/p-retry@v8.0.0...v8.0.1

Commits

Updates prettier from 3.8.3 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
</tr></table>

... (truncated)

Commits

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group across 1 directory with 8 updates
2ae9f49 
Bumps the dev-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.6.3` |
| [@typescript/native-preview](https://github.com/microsoft/typescript-go) | `7.0.0-dev.20260602.1` | `7.0.0-dev.20260707.2` |
| [cpx2](https://github.com/bcomnes/cpx2) | `9.0.0` | `9.0.3` |
| [danger](https://github.com/danger/danger-js) | `13.0.8` | `14.0.7` |
| [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.12.0` |
| [p-retry](https://github.com/sindresorhus/p-retry) | `8.0.0` | `8.0.1` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.9` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@types/node` from 25.9.1 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript/native-preview` from 7.0.0-dev.20260602.1 to 7.0.0-dev.20260707.2
- [Release notes](https://github.com/microsoft/typescript-go/releases)
- [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md)
- [Commits](https://github.com/microsoft/typescript-go/commits)

Updates `cpx2` from 9.0.0 to 9.0.3
- [Release notes](https://github.com/bcomnes/cpx2/releases)
- [Changelog](https://github.com/bcomnes/cpx2/blob/master/CHANGELOG.md)
- [Commits](bcomnes/cpx2@v9.0.0...v9.0.3)

Updates `danger` from 13.0.8 to 14.0.7
- [Release notes](https://github.com/danger/danger-js/releases)
- [Changelog](https://github.com/danger/danger-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/danger/danger-js/commits)

Updates `globals` from 17.6.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.6.0...v17.12.0)

Updates `p-retry` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/sindresorhus/p-retry/releases)
- [Commits](sindresorhus/p-retry@v8.0.0...v8.0.1)

Updates `prettier` from 3.8.3 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.9)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@typescript/native-preview"
  dependency-version: 7.0.0-dev.20260707.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: cpx2
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: danger
  dependency-version: 14.0.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: p-retry
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@sandersn Nathan Shively-Sanders (sandersn)

@jakebailey Jake Bailey (jakebailey)

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code maintainers

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sandersn @jakebailey