Skip to content

build(deps-dev): bump the npm-dependencies group across 1 directory with 12 updates - #137

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-052471c282
Closed

build(deps-dev): bump the npm-dependencies group across 1 directory with 12 updates#137
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-052471c282

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 12 updates in the / directory:

Package From To
@commitlint/cli 21.2.2 21.2.3
@commitlint/config-conventional 21.2.2 21.2.3
@eslint/json 2.1.0 2.1.1
@exadev/eslint-config 2.12.3 3.1.0
@types/node 26.4.1 26.6.5
eslint 10.9.1 10.12.0
eslint-plugin-yml 3.8.1 3.9.0
lint-staged 17.4.1 17.6.0
prettier 3.9.6 3.9.10
turbo 2.10.12 2.11.7
typescript 6.0.3 7.0.2
typescript-eslint 8.69.0 8.71.1

Updates @commitlint/cli from 21.2.2 to 21.2.3

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

Refactor

Chore, ci, build, etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.3 (2026-09-19)

Bug Fixes

  • lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)
Commits
  • 95d4056 v21.2.3
  • a6f279b fix(lint): trim trailing whitespace off the message handed to ignore matchers...
  • See full diff in compare view

Updates @commitlint/config-conventional from 21.2.2 to 21.2.3

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

Refactor

Chore, ci, build, etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.3 (2026-09-19)

Bug Fixes

  • rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)
Commits

Updates @eslint/json from 2.1.0 to 2.1.1

Release notes

Sourced from @​eslint/json's releases.

json: v2.1.1

2.1.1 (2026-10-06)

Bug Fixes

  • escape normalized keys in no-unnormalized-keys autofix (#283) (35790d4)
  • handle empty and whitespace-only JSON inputs (#259) (85ca99b)
  • preserve parsing error locations in Bun (#281) (bbaa18f)
  • update dependency @​eslint/plugin-kit to ^0.7.3 (#276) (780bfcd)
Changelog

Sourced from @​eslint/json's changelog.

2.1.1 (2026-10-06)

Bug Fixes

  • escape normalized keys in no-unnormalized-keys autofix (#283) (35790d4)
  • handle empty and whitespace-only JSON inputs (#259) (85ca99b)
  • preserve parsing error locations in Bun (#281) (bbaa18f)
  • update dependency @​eslint/plugin-kit to ^0.7.3 (#276) (780bfcd)
Commits
  • 412ad09 chore: release 2.1.1 🚀 (#278)
  • e7f8cbe chore: update dependency prettier to v3.9.9 (#289)
  • 812d486 docs: add missing Options section (#290)
  • a2b9af9 docs: Update README sponsors
  • c6af8f6 chore: update dependency prettier to v3.9.8 (#288)
  • 35790d4 fix: escape normalized keys in no-unnormalized-keys autofix (#283)
  • 7eb9cf3 docs: clarify JSON5 Infinity and NaN handling in no-unsafe-values (#279)
  • 85ca99b fix: handle empty and whitespace-only JSON inputs (#259)
  • 2cf7eb9 chore: update dependency prettier to v3.9.7 (#287)
  • 3285615 docs: Update README sponsors
  • Additional commits viewable in compare view

Updates @exadev/eslint-config from 2.12.3 to 3.1.0

Release notes

Sourced from @​exadev/eslint-config's releases.

v3.1.0

3.1.0 (2026-10-11)

Features

  • barrel-policy: accept a package's declared entry files as barrels (a68da9c), closes #135

Bug Fixes

  • types: type plugin.configs.react and nextjs as the arrays they are (9301eb6), closes #134

v3.0.2

3.0.2 (2026-10-10)

Build System

  • deps: bump pnpm/action-setup (a22ddaa)

v3.0.1

3.0.1 (2026-10-10)

Bug Fixes

  • resolve exadev rules set by a block with no files after the shared config (16b579c)

Documentation

  • state that rules of other plugins need files in a block of your own (de15519)

Tests

  • pin that another plugin's rule in a block of your own needs files (a00a922)

v3.0.0

3.0.0 (2026-10-10)

Features

  • make exadevConfig take the options object alone (a08def3)
  • report an optional parameter directly before a rest parameter (198b011)

BREAKING CHANGES

... (truncated)

Changelog

Sourced from @​exadev/eslint-config's changelog.

3.1.0 (2026-10-11)

Features

  • barrel-policy: accept a package's declared entry files as barrels (a68da9c), closes #135

Bug Fixes

  • types: type plugin.configs.react and nextjs as the arrays they are (9301eb6), closes #134

3.0.2 (2026-10-10)

Build System

  • deps: bump pnpm/action-setup (a22ddaa)

3.0.1 (2026-10-10)

Bug Fixes

  • resolve exadev rules set by a block with no files after the shared config (16b579c)

Documentation

  • state that rules of other plugins need files in a block of your own (de15519)

Tests

  • pin that another plugin's rule in a block of your own needs files (a00a922)

3.0.0 (2026-10-10)

Features

  • make exadevConfig take the options object alone (a08def3)
  • report an optional parameter directly before a rest parameter (198b011)

BREAKING CHANGES

  • exadevConfig no longer accepts config blocks after the options argument. Spread its result inside defineConfig and put your own blocks after it.

... (truncated)

Commits
  • 485a8c7 chore(release): 3.1.0 [skip ci]
  • 9301eb6 fix(types): type plugin.configs.react and nextjs as the arrays they are
  • a68da9c feat(barrel-policy): accept a package's declared entry files as barrels
  • bbc4317 chore(release): 3.0.2 [skip ci]
  • a22ddaa build(deps): bump pnpm/action-setup
  • fec3b54 chore(release): 3.0.1 [skip ci]
  • de15519 docs: state that rules of other plugins need files in a block of your own
  • a00a922 test: pin that another plugin's rule in a block of your own needs files
  • 16b579c fix: resolve exadev rules set by a block with no files after the shared config
  • fcb60b6 chore(release): 3.0.0 [skip ci]
  • Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.6.5

Commits

Updates eslint from 10.9.1 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
  • 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
  • f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
  • b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
  • 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits
  • a438ec3 10.12.0
  • 32a73f1 Build: changelog update for 10.12.0
  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
  • 152067f chore: update ecosystem plugins (#21362)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
  • 67eb586 docs: Update README
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371)
  • Additional commits viewable in compare view

Updates eslint-plugin-yml from 3.8.1 to 3.9.0

Release notes

Sourced from eslint-plugin-yml's releases.

v3.9.0

Minor Changes

Changelog

Sourced from eslint-plugin-yml's changelog.

3.9.0

Minor Changes

Commits
  • abfa046 Version Packages (#679)
  • dc9e467 fix(types): support exactOptionalPropertyTypes for flat configs (#675)
  • 737e4de chore(deps): update dependency eslint-plugin-jsdoc to v65 (#674)
  • 32d6a58 chore(deps): update typescript-eslint monorepo to ~8.71.0 (#673)
  • 21ef6f2 chore(deps): update dependency monaco-editor to ^0.57.0 (#672)
  • 5eb6045 chore(deps): update typescript-eslint monorepo to ~8.70.0 (#669)
  • daa2f5f chore(deps): update changesets/action action to v2.1.2 (#668)
  • bbca18b chore(deps): update dependency tsdown to ^0.23.0 (#666)
  • 264b4d5 chore(deps): update dependency mocha to v12 (#662)
  • b42d506 chore(deps): update typescript-eslint monorepo to ~8.69.0 (#661)
  • Additional commits viewable in compare view

Updates lint-staged from 17.4.1 to 17.6.0

Release notes

Sourced from lint-staged's releases.

v17.6.0

Minor Changes

  • #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

    import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*': {
title: 'Fail if PDF files are committed',
task: async (filepaths, { log }) => {
const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
if (pdfFiles.length > 0) {
log('PDF files should not be committed: %s', pdfFiles)
throw new Error('Failed')
}
},
},
})

  • #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

    If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

  • #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

  • #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

    import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
})

  • #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

  • #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

v17.5.1

Patch Changes

  • #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

    A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.6.0

Minor Changes

  • #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

    import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*': {
title: 'Fail if PDF files are committed',
task: async (filepaths, { log }) => {
const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
if (pdfFiles.length > 0) {
log('PDF files should not be committed: %s', pdfFiles)
throw new Error('Failed')
}
},
},
})

  • #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

    If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

  • #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

  • #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

    import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
})

  • #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

  • #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

17.5.1

Patch Changes

  • #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

... (truncated)

Commits
  • 48f9f4e Merge pull request #1857 from lint-staged/changeset-release/main
  • 16b2e21 chore(changeset): release
  • 195f156 docs: improve changeset
  • 0ba6261 fix: create hidden directory only when required
  • 66ac2de docs: fixes to changesets
  • 80af8d7 Merge pull request #1863 from lint-staged/fix-issues
  • e433488 fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...
  • e5019b3 fix: handle trailing newlines when detecting changed files
  • 74efec8 ci: run Cygwin and MSYS2 tests on Node.js 26
  • 655b7dc fix: use TypeScript types instead of JSDoc
  • Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • cdd17f2 Release 3.9.9
  • dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
  • f9be58f Git blame ignore 3.9.8
  • 88470cb Bump Prettier dependency to 3.9.8
  • 9559cab Clean changelog_unreleased
  • 4fc8ee8 Update dependents count
  • Additional commits viewable in compare view

Updates turbo from 2.10.12 to 2.11.7

Release notes

Sourced from turbo's releases.

Turborepo v2.11.7

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.6...v2.11.7

Turborepo v2.11.6

What's Changed

Changelog

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-052471c282 branch from 224bd6b to 4136fbe Compare October 17, 2026 12:08
@dependabot
build(deps-dev): bump the npm-dependencies group across 1 directory w…
ed9be23 
…ith 12 updates

Bumps the npm-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.2` | `21.2.3` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.2` | `21.2.3` |
| [@eslint/json](https://github.com/eslint/json) | `2.1.0` | `2.1.1` |
| [@exadev/eslint-config](https://github.com/ExaDev/eslint-config) | `2.12.3` | `3.1.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.5` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.12.0` |
| [eslint-plugin-yml](https://github.com/ota-meshi/eslint-plugin-yml) | `3.8.1` | `3.9.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.6.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.12` | `2.11.7` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.69.0` | `8.71.1` |



Updates `@commitlint/cli` from 21.2.2 to 21.2.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.3/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.2.2 to 21.2.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.3/@commitlint/config-conventional)

Updates `@eslint/json` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/eslint/json/releases)
- [Changelog](https://github.com/eslint/json/blob/main/CHANGELOG.md)
- [Commits](eslint/json@json-v2.1.0...json-v2.1.1)

Updates `@exadev/eslint-config` from 2.12.3 to 3.1.0
- [Release notes](https://github.com/ExaDev/eslint-config/releases)
- [Changelog](https://github.com/ExaDev/eslint-config/blob/main/CHANGELOG.md)
- [Commits](ExaDev/eslint-config@v2.12.3...v3.1.0)

Updates `@types/node` from 26.4.1 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.9.1 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.12.0)

Updates `eslint-plugin-yml` from 3.8.1 to 3.9.0
- [Release notes](https://github.com/ota-meshi/eslint-plugin-yml/releases)
- [Changelog](https://github.com/ota-meshi/eslint-plugin-yml/blob/master/CHANGELOG.md)
- [Commits](ota-meshi/eslint-plugin-yml@v3.8.1...v3.9.0)

Updates `lint-staged` from 17.4.1 to 17.6.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.4.1...v17.6.0)

Updates `prettier` from 3.9.6 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.10)

Updates `turbo` from 2.10.12 to 2.11.7
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.12...v2.11.7)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `typescript-eslint` from 8.69.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@eslint/json"
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@exadev/eslint-config"
  dependency-version: 2.35.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-yml
  dependency-version: 3.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lint-staged
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: turbo
  dependency-version: 2.11.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-052471c282 branch from 4136fbe to ed9be23 Compare October 19, 2026 14:56
github-actions[bot]
github-actions Bot requested changes Oct 19, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a routine Dependabot grouped devDependency bump, but as submitted it is not installable: npm ci fails on this revision, and every downstream CI job (Typecheck, Lint, Format, Commitlint, Required Checks) fails as a direct consequence.

Blocker

  • package.json/package-lock.json: bumping typescript to 7.0.2 alongside the existing typescript-eslint@8.71.1 violates typescript-eslint's own declared peer range (>=4.8.4 <6.1.0), so npm ci rejects the install with ERESOLVE. See the inline comment for the evidence and the two ways out of it.

No other findings — the rest of the version bumps (eslint, prettier, commitlint, turbo, etc.) are unremarkable patch/minor updates with no indication of a problem beyond the one above. The PR title and description are Dependabot's own and already specific (every package and version pair listed), so I left them as-is. This is a first review of this PR; there were no prior reviews or threads to reconcile.

Comment thread package.json
"typescript": "6.0.3",
"typescript-eslint": "8.69.0"
"turbo": "2.11.7",
"typescript": "7.0.2",

@github-actions github-actions Bot Oct 19, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 Blocker [stack-default]: this bump breaks npm ci outright, and every CI job that depends on it is failing as a result (Typecheck, Lint, Format, Commitlint, and the aggregate Required Checks — all failing at the Run npm ci step: see e.g. https://github.com/ExaDev/claude-code-action/actions/runs/39273482337/job/118131601592).

The root cause is a peer-dependency conflict introduced by pairing this typescript bump with the existing typescript-eslint@8.71.1. Per package-lock.json's own node_modules/typescript-eslint entry, typescript-eslint@8.71.1 declares:

"peerDependencies": { "typescript": ">=4.8.4 <6.1.0" }

but this PR pins "typescript": "7.0.2" here, which falls outside that range. There's no legacy-peer-deps in this repo's .npmrc, so a plain npm ci enforces the peer range strictly and rejects the install with ERESOLVE — the lockfile itself is inconsistent with the peer contract it ships.

This needs resolving before merge: either drop typescript (and typescript-eslint, which is pinned together with it in this same grouped update) back to a compatible pairing, or move to a typescript-eslint release that supports TypeScript 7, if one exists. As submitted, this PR cannot be installed with npm ci.

@github-actions

github-actions Bot commented Oct 19, 2026

Copy link
Copy Markdown

🗜️ Headroom context compression

Metric Value
Requests proxied 26
Tokens saved 58071
Aggregate savings 2.2% of all tokens sent
Average per-request compression 2.7%

@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 20, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-052471c282 branch October 20, 2026 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] requested changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants