Bump the all group across 1 directory with 9 updates #1014

dependabot · 2025-06-02T08:06:49Z

Bumps the all group with 9 updates in the / directory:

Package	From	To
shell-quote	`1.8.2`	`1.8.3`
yargs	`17.7.2`	`18.0.0`
@types/node	`18.19.101`	`18.19.110`
@typescript-eslint/eslint-plugin	`8.32.1`	`8.33.0`
@typescript-eslint/parser	`8.32.1`	`8.33.0`
esbuild	`0.25.4`	`0.25.5`
mocha	`11.3.0`	`11.5.0`
vinyl	`3.0.0`	`3.0.1`
vinyl-fs	`4.0.0`	`4.0.2`

Updates shell-quote from 1.8.2 to 1.8.3

Changelog

Sourced from shell-quote's changelog.

v1.8.3 - 2025-06-01

Fixed

[Fix] remove unnecessary backslash escaping in single quotes [#15](https://github.com/ljharb/shell-quote/issues/15)

Commits

487a9b4 v1.8.3
01faaff [Fix] remove unnecessary backslash escaping in single quotes
See full diff in compare view

Updates yargs from 17.7.2 to 18.0.0

Changelog

Sourced from yargs's changelog.

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

command names are not derived from modules passed to command.

singleton usage of yargs yargs.foo, yargs().argv, has been removed.

minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.

yargs is now ESM first

Features

commandDir now works with ESM files (#2461) (27eec18)

locale: adds hebrew translation (#2357) (4266485)

yargs is now ESM first (d90af45)

zsh: Add default completion as fallback (#2331) (e02c91b)

Bug Fixes

addDirectory do not support absolute command dir (#2465) (3a40a78)

allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)

browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)

build: address problems with typescript compilation (#2445) (8d72fb3)

coerce should play well with parser configuration (#2308) (8343c66)

deps: update dependency yargs-parser to v22 (#2470) (639130d)

exit after async handler done (#2313) (e326cde)

handle spaces in bash completion (#2452) (83b7788)

parser-configuration should work well with generated completion script (#2332) (888db19)

propagate Dictionary including undefined in value type (#2393) (2b2f7f5)

zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

Code Refactoring

command names are not derived from modules passed to command. (d90af45)

singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

Build System

minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23. (d90af45)

Commits

0bc7255 chore(main): release 18.0.0 (#2325)
639130d fix(deps): update dependency yargs-parser to v22 (#2470)
200e1aa fix: allows ESM modules commands to be extensible using visit option (#2468)
888db19 fix: parser-configuration should work well with generated completion script (...
3a40a78 fix: addDirectory do not support absolute command dir (#2465)
90e9eca docs: remove to old slack channel (#2466)
0dd8fe4 fix(zsh): completion no longer requires double tab when using autoloaded
27eec18 feat: commandDir now works with ESM files (#2461)
f9c72a7 docs: update examples to run from examples folder (#2463)
e02c91b feat(zsh): Add default completion as fallback (#2331)
Additional commits viewable in compare view

Updates @types/node from 18.19.101 to 18.19.110

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.32.1 to 8.33.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.33.0

8.33.0 (2025-05-26)

🚀 Features

create standalone project-service, tsconfig-utils packages (#11182)

❤️ Thank You

Josh Goldberg ✨

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.33.0 (2025-05-26)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

dca57b3 chore(release): publish 8.33.0
387eeb5 docs(eslint-plugin): [typedef] deprecate the rule (#11202)
f9e0eb9 chore: clean up nx and other config (#11226)
1c0e1ae chore: update some package scripts and dependency config (#10765)
05014ff chore: use TLA in ESM scripts rather than async main().catch() (#11218)
220c38c chore: update eslint-plugin-perfectionist to v4 (#11185)
See full diff in compare view

Updates @typescript-eslint/parser from 8.32.1 to 8.33.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.33.0

8.33.0 (2025-05-26)

🚀 Features

create standalone project-service, tsconfig-utils packages (#11182)

❤️ Thank You

Josh Goldberg ✨

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.33.0 (2025-05-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

dca57b3 chore(release): publish 8.33.0
f9e0eb9 chore: clean up nx and other config (#11226)
1c0e1ae chore: update some package scripts and dependency config (#10765)
48a9835 chore(parser): finish migrating to vitest (#11191)
See full diff in compare view

Updates esbuild from 0.25.4 to 0.25.5

Release notes

Sourced from esbuild's releases.

v0.25.5
Fix a regression with browser in package.json (#4187)

The fix to #4144 in version 0.25.3 introduced a regression that caused browser overrides specified in package.json to fail to override relative path names that end in a trailing slash. That behavior change affected the axios@0.30.0 package. This regression has been fixed, and now has test coverage.
Add support for certain keywords as TypeScript tuple labels (#4192)

Previously esbuild could incorrectly fail to parse certain keywords as TypeScript tuple labels that are parsed by the official TypeScript compiler if they were followed by a ? modifier. These labels included function, import, infer, new, readonly, and typeof. With this release, these keywords will now be parsed correctly. Here's an example of some affected code:
type Foo = [
  value: any,
  readonly?: boolean, // This is now parsed correctly
]
Add CSS prefixes for the stretch sizing value (#4184)

This release adds support for prefixing CSS declarations such as div { width: stretch }. That CSS is now transformed into this depending on what the --target= setting includes:
div {
  width: -webkit-fill-available;
  width: -moz-available;
  width: stretch;
}

Changelog

Sourced from esbuild's changelog.

0.25.5
Fix a regression with browser in package.json (#4187)

The fix to #4144 in version 0.25.3 introduced a regression that caused browser overrides specified in package.json to fail to override relative path names that end in a trailing slash. That behavior change affected the axios@0.30.0 package. This regression has been fixed, and now has test coverage.
Add support for certain keywords as TypeScript tuple labels (#4192)

Previously esbuild could incorrectly fail to parse certain keywords as TypeScript tuple labels that are parsed by the official TypeScript compiler if they were followed by a ? modifier. These labels included function, import, infer, new, readonly, and typeof. With this release, these keywords will now be parsed correctly. Here's an example of some affected code:
type Foo = [
  value: any,
  readonly?: boolean, // This is now parsed correctly
]
Add CSS prefixes for the stretch sizing value (#4184)

This release adds support for prefixing CSS declarations such as div { width: stretch }. That CSS is now transformed into this depending on what the --target= setting includes:
div {
  width: -webkit-fill-available;
  width: -moz-available;
  width: stretch;
}

Commits

ea453bf publish 0.25.5 to npm
223ddc6 fix #4187: browser package.json regression
b2c8251 fix #4192: typescript tuple label parser edge case
28cf2f3 fix #4184: css prefixes for stretch
bee1b09 fix comment indents
9ddfe5f run make update-compat-table
c339f34 fix a misplaced comment
See full diff in compare view

Updates mocha from 11.3.0 to 11.5.0

Release notes

Sourced from mocha's releases.

v11.5.0

11.5.0 (2025-05-22)

🌟 Features

bump mimimatch from ^5.1.6 to ^9.0.5 (#5349) (a3dea85)

v11.4.0

11.4.0 (2025-05-19)

🌟 Features

bump diff from ^5.2.0 to ^7.0.0 (#5348) (554d6bb)

📚 Documentation

added CHANGELOG.md note around 11.1 yargs-parser update (#5362) (618415d)

Changelog

Sourced from mocha's changelog.

11.5.0 (2025-05-22)

🌟 Features

bump mimimatch from ^5.1.6 to ^9.0.5 (#5349) (a3dea85)

11.4.0 (2025-05-19)

🌟 Features

bump diff from ^5.2.0 to ^7.0.0 (#5348) (554d6bb)

📚 Documentation

added CHANGELOG.md note around 11.1 yargs-parser update (#5362) (618415d)

Commits

a7ed005 chore(main): release 11.5.0 (#5370)
a3dea85 feat: bump mimimatch from ^5.1.6 to ^9.0.5 (#5349)
5730dfc chore(main): release 11.4.0 (#5368)
618415d docs: added CHANGELOG.md note around 11.1 yargs-parser update (#5362)
554d6bb fix: bump diff from ^5.2.0 to ^7.0.0 (#5348)
See full diff in compare view

Updates vinyl from 3.0.0 to 3.0.1

Release notes

Sourced from vinyl's releases.

vinyl v3.0.1

Bug Fixes

Drop clone-stats dependency by cloning with Object.create (#162) (f56ac3d)

Changelog

Sourced from vinyl's changelog.

3.0.1 (2025-05-31)

Bug Fixes

Drop clone-stats dependency by cloning with Object.create (#162) (f56ac3d)

Commits

51682d4 chore: release 3.0.1 (#163)
2a12841 chore(ci): Skip clone tests on Node v10 (#164)
f56ac3d fix: Drop clone-stats dependency by cloning with Object.create (#162)
1f2566f chore: Normalize repository (#157)
See full diff in compare view

Updates vinyl-fs from 4.0.0 to 4.0.2

Release notes

Sourced from vinyl-fs's releases.

vinyl-fs v4.0.2

Bug Fixes

Avoid globbing before read stream is opened (#362) (a13a79a)

vinyl-fs v4.0.1

Bug Fixes

Avoid Node.js deprecation warning for fs.Stats (#358) (3ed0c3f)

Avoid transcoding streaming output with default options (#360) (7b6dcd3)

Changelog

Sourced from vinyl-fs's changelog.

4.0.2 (2025-06-01)

Bug Fixes

Avoid globbing before read stream is opened (#362) (a13a79a)

4.0.1 (2025-06-01)

Bug Fixes

Avoid Node.js deprecation warning for fs.Stats (#358) (3ed0c3f)

Avoid transcoding streaming output with default options (#360) (7b6dcd3)

Commits

02e9373 chore: release 4.0.2 (#363)
a13a79a fix: Avoid globbing before read stream is opened (#362)
d855294 chore: release 4.0.1 (#361)
3ed0c3f fix: Avoid Node.js deprecation warning for fs.Stats (#358)
7b6dcd3 fix: Avoid transcoding streaming output with default options (#360)
cdb38b7 chore: Fix CI (#359)
ad025af chore: Add breaking encoding option to changelog (#348)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.2` | `1.8.3` | | [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `18.19.101` | `18.19.110` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.32.1` | `8.33.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.32.1` | `8.33.0` | | [esbuild](https://github.com/evanw/esbuild) | `0.25.4` | `0.25.5` | | [mocha](https://github.com/mochajs/mocha) | `11.3.0` | `11.5.0` | | [vinyl](https://github.com/gulpjs/vinyl) | `3.0.0` | `3.0.1` | | [vinyl-fs](https://github.com/gulpjs/vinyl-fs) | `4.0.0` | `4.0.2` | Updates `shell-quote` from 1.8.2 to 1.8.3 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.2...v1.8.3) Updates `yargs` from 17.7.2 to 18.0.0 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md) - [Commits](yargs/yargs@v17.7.2...v18.0.0) Updates `@types/node` from 18.19.101 to 18.19.110 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.32.1 to 8.33.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.33.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.32.1 to 8.33.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.33.0/packages/parser) Updates `esbuild` from 0.25.4 to 0.25.5 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.25.4...v0.25.5) Updates `mocha` from 11.3.0 to 11.5.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v11.3.0...v11.5.0) Updates `vinyl` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/gulpjs/vinyl/releases) - [Changelog](https://github.com/gulpjs/vinyl/blob/master/CHANGELOG.md) - [Commits](gulpjs/vinyl@v3.0.0...v3.0.1) Updates `vinyl-fs` from 4.0.0 to 4.0.2 - [Release notes](https://github.com/gulpjs/vinyl-fs/releases) - [Changelog](https://github.com/gulpjs/vinyl-fs/blob/master/CHANGELOG.md) - [Commits](gulpjs/vinyl-fs@v4.0.0...v4.0.2) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: yargs dependency-version: 18.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: "@types/node" dependency-version: 18.19.110 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: "@typescript-eslint/parser" dependency-version: 8.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: esbuild dependency-version: 0.25.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mocha dependency-version: 11.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: vinyl dependency-version: 3.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: vinyl-fs dependency-version: 4.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

chrmarti · 2025-06-05T08:44:54Z

@dependabot ignore yargs major version

dependabot · 2025-06-05T08:44:56Z

OK, I won't notify you about version 18.x.x of yargs again, unless you unignore it.

dependabot · 2025-06-05T08:47:34Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 2, 2025

dependabot bot requested a review from a team as a code owner June 2, 2025 08:06

dependabot bot closed this Jun 5, 2025

dependabot bot deleted the dependabot/npm_and_yarn/all-2f17f82d5d branch June 5, 2025 08:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all group across 1 directory with 9 updates #1014

Bump the all group across 1 directory with 9 updates #1014

Uh oh!

dependabot bot commented on behalf of github Jun 2, 2025 •

edited

Loading

Uh oh!

chrmarti commented Jun 5, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 5, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 5, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the all group across 1 directory with 9 updates #1014

Bump the all group across 1 directory with 9 updates #1014

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.8.3 - 2025-06-01

Fixed

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

Features

Bug Fixes

Code Refactoring

Build System

v8.33.0

8.33.0 (2025-05-26)

🚀 Features

❤️ Thank You

8.33.0 (2025-05-26)

v8.33.0

8.33.0 (2025-05-26)

🚀 Features

❤️ Thank You

8.33.0 (2025-05-26)

v0.25.5

0.25.5

v11.5.0

11.5.0 (2025-05-22)

🌟 Features

v11.4.0

11.4.0 (2025-05-19)

🌟 Features

📚 Documentation

11.5.0 (2025-05-22)

🌟 Features

11.4.0 (2025-05-19)

🌟 Features

📚 Documentation

vinyl v3.0.1

Bug Fixes

3.0.1 (2025-05-31)

Bug Fixes

vinyl-fs v4.0.2

Bug Fixes

vinyl-fs v4.0.1

Bug Fixes

4.0.2 (2025-06-01)

Bug Fixes

4.0.1 (2025-06-01)

Bug Fixes

Uh oh!

chrmarti commented Jun 5, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 5, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 5, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jun 2, 2025 •

edited

Loading