Skip to content

chore(deps-dev): bump the npm group across 1 directory with 5 updates - #18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-7be059f35f
Open

chore(deps-dev): bump the npm group across 1 directory with 5 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-7be059f35f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the npm group with 5 updates in the / directory:

Package From To
@fast-check/vitest 0.2.4 0.4.1
fast-check 4.7.0 4.9.0
vitest 4.1.5 4.1.10
publint 0.3.18 0.3.21
@tummycrypt/tinyland-auth 0.3.0 0.3.3

Updates @fast-check/vitest from 0.2.4 to 0.4.1

Release notes

Sourced from @​fast-check/vitest's releases.

Rework our testing stack

[Code][Diff]

Fixes

Rework our testing stack

[Code][Diff]

Fixes

  • (PR#5347) CI: Move to Vitest
  • (PR#5351) CI: Drop unneeded devDependencies

Support test.each

[Code][Diff]

Fixes

  • (PR#6804) Bug: Fix runtime exception with test.each
  • (PR#6865) Test: Strip AI env vars in child processes

Better error handling in script

[Code][Diff]

Features

  • (PR#4934) Better handle errors in script

Respawn only on crash not on failure and support pre

[Code][Diff]

Breaking changes

  • (PR#4993) Only respawn workers on crash (not failure)

Features

  • (PR#4988) Add support for pre in properties

Fixes

  • (PR#4987) Test: Confirm we intercept synchronous throws

Move to modern APIs introduced by vitest 4.1

[Code][Diff]

Features

... (truncated)

Changelog

Sourced from @​fast-check/vitest's changelog.

0.4.1

Support test.each [Code][Diff]

Fixes

  • (PR#6804) Bug: Fix runtime exception with test.each
  • (PR#6865) Test: Strip AI env vars in child processes

0.4.0

Move to modern APIs introduced by vitest 4.1 [Code][Diff]

Features

  • (PR#6766) Get rid of deprecated vitest/suite imports

Fixes

  • (PR#6812) Doc: Document requirements for 0.4.0

0.3.0

Support beforeEach/afterEach hooks and ESM-only bundle [Code][Diff]

Breaking changes

  • (PR#6499) Drop CommonJS support
  • (PR#6504) Drop useless "typesVersions"
  • (PR#6695) Support for beforeEach/afterEach in @fast-check/vitest

Fixes

  • (PR#6508) CI: Speed-up build with rolldown
  • (PR#6657) Doc: Update Readme to point to npmx
  • (PR#6697) Doc: Document beforeEach/afterEach hook support and limitations
  • (PR#6382) Test: Reactivate skipped .only.prop tests
Commits

Updates fast-check from 4.7.0 to 4.9.0

Release notes

Sourced from fast-check's releases.

Shrinkable entityGraph and few performance chips

[Code][Diff]

Features

  • (PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

  • (PR#7010) Bug: Fix latent state-sharing bug in entityGraph
  • (PR#7063) Bug: Equiprobable alternatives in stringMatching
  • (PR#6973) CI: Drop caches on push for build package flow
  • (PR#6971) CI: Only mark fast-check's releases as latest
  • (PR#6974) CI: Drop pull_request_target flows
  • (PR#6975) CI: Drop discussion creation on release publish
  • (PR#6976) CI: Drop caches from publication steps
  • (PR#6977) CI: Revert "Drop caches from publication steps"
  • (PR#6978) CI: Make zizmor audit a required status check
  • (PR#6991) CI: Remove Claude Code workflow
  • (PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new
  • (PR#6995) CI: Inline zizmor ignores in workflow
  • (PR#6996) CI: Move to devEngines.packageManager
  • (PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md
  • (PR#7011) CI: Drop OTP prompt from npm publish
  • (PR#7013) CI: Switch release jobs to npm stage publish
  • (PR#7027) CI: Run benchmarks against main
  • (PR#7037) CI: Use comparison mode for bench
  • (PR#7069) CI: Run pnpm dedupe to deduplicate lockfile
  • (PR#6959) CI: Announce releases on Bluesky
  • (PR#7105) CI: Switch to actions/attest for attestations
  • (PR#7117) CI: Use pnpm version in changelog script
  • (PR#7120) CI: Allow unclean tree in changelog generation
  • (PR#7125) CI: Stage publish using pnpm in publish jobs
  • (PR#7065) Clean: Delete skills directory
  • (PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves
  • (PR#7092) Doc: Add back skills directory
  • (PR#7095) Doc: Add release notes for fast-check 4.8.0
  • (PR#7104) Doc: Add makeeno as doc contributor
  • (PR#7103) Doc: Fix info box in docs
  • (PR#7108) Doc: Add jneidel as doc contributor
  • (PR#7035) Performance: Faster fc.integer on generate
  • (PR#7046) Performance: Faster fc.record on generate
  • (PR#7047) Performance: Faster fc.dictionary on generate
  • (PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate
  • (PR#7050) Performance: Faster fc.stringMatching for \W \D \S .
  • (PR#7054) Performance: Faster fc.stringMatching on generate
  • (PR#7049) Performance: Drop nested tuple on generate for fc.record
  • (PR#7045) Performance: Faster fc.entityGraph on generate
  • (PR#7071) Performance: Early exit on empty tuple in fc.entityGraph

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.9.0

Shrinkable entityGraph and few performance chips [Code][Diff]

Features

  • (PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

  • (PR#7010) Bug: Fix latent state-sharing bug in entityGraph
  • (PR#7063) Bug: Equiprobable alternatives in stringMatching
  • (PR#6973) CI: Drop caches on push for build package flow
  • (PR#6971) CI: Only mark fast-check's releases as latest
  • (PR#6974) CI: Drop pull_request_target flows
  • (PR#6975) CI: Drop discussion creation on release publish
  • (PR#6976) CI: Drop caches from publication steps
  • (PR#6977) CI: Revert "Drop caches from publication steps"
  • (PR#6978) CI: Make zizmor audit a required status check
  • (PR#6991) CI: Remove Claude Code workflow
  • (PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new
  • (PR#6995) CI: Inline zizmor ignores in workflow
  • (PR#6996) CI: Move to devEngines.packageManager
  • (PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md
  • (PR#7011) CI: Drop OTP prompt from npm publish
  • (PR#7013) CI: Switch release jobs to npm stage publish
  • (PR#7027) CI: Run benchmarks against main
  • (PR#7037) CI: Use comparison mode for bench
  • (PR#7069) CI: Run pnpm dedupe to deduplicate lockfile
  • (PR#6959) CI: Announce releases on Bluesky
  • (PR#7105) CI: Switch to actions/attest for attestations
  • (PR#7117) CI: Use pnpm version in changelog script
  • (PR#7120) CI: Allow unclean tree in changelog generation
  • (PR#7125) CI: Stage publish using pnpm in publish jobs
  • (PR#7065) Clean: Delete skills directory
  • (PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves
  • (PR#7092) Doc: Add back skills directory
  • (PR#7095) Doc: Add release notes for fast-check 4.8.0
  • (PR#7104) Doc: Add makeeno as doc contributor
  • (PR#7103) Doc: Fix info box in docs
  • (PR#7108) Doc: Add jneidel as doc contributor
  • (PR#7035) Performance: Faster fc.integer on generate
  • (PR#7046) Performance: Faster fc.record on generate
  • (PR#7047) Performance: Faster fc.dictionary on generate
  • (PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate
  • (PR#7050) Performance: Faster fc.stringMatching for \W \D \S .
  • (PR#7054) Performance: Faster fc.stringMatching on generate
  • (PR#7049) Performance: Drop nested tuple on generate for fc.record
  • (PR#7045) Performance: Faster fc.entityGraph on generate

... (truncated)

Commits
  • 0d3c254 🔖 Update CHANGELOG.md for fast-check@4.9.0, @​fast-check/packaged@​0.7.1 (#7124)
  • bd85efe ⬆️ Update dependency @​types/node to ^24.13.3 (#7118)
  • a0596ab ⬆️ Update dependency vitest to ^4.1.10 (#7119)
  • 3c085da ⬆️ Update dependency prettier to v3.9.4 (#7114)
  • 6538ff0 👥 Add jneidel as doc contributor (#7108)
  • 8096ab0 👥 Add makeeno as doc contributor (#7104)
  • 13fd4a6 ✏️ Typo in type EntityGraphContraints (#7088)
  • 36e70d2 ⬆️ Update dependency @​microsoft/api-extractor to ^7.58.9 (#7080)
  • 451ede0 ⬆️ Update dependency vitest to ^4.1.8 (#7074)
  • 949564d ⚡️ Early exit on empty tuple in fc.entityGraph (#7071)
  • Additional commits viewable in compare view

Updates vitest from 4.1.5 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • a7a61e7 chore: release v4.1.9 (#10598)
  • 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
  • 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
  • a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • a09d472 chore: release v4.1.7
  • a8fd24c chore: release v4.1.6
  • Additional commits viewable in compare view

Updates publint from 0.3.18 to 0.3.21

Release notes

Sourced from publint's releases.

publint@0.3.21

Patch Changes

  • Suggest adding "sideEffects": false when bundler-oriented package fields or conditions are detected and the field is missing. (#228)

publint@0.3.20

Patch Changes

  • Suggest adding engines.node when it is missing from detected Node.js packages (#226)

  • Loosen "breaking change" wording in lint messages (7bb3f4f)

publint@0.3.19

Patch Changes

  • Add NESTED_PACKAGE_JSON_FIELD_IGNORED to warn when published nested package.json files define "exports" or "imports", which Node.js ignores outside the package root. (#224)

  • Fix internal browser directory traversal logic (#224)

Changelog

Sourced from publint's changelog.

0.3.21

Patch Changes

  • Suggest adding "sideEffects": false when bundler-oriented package fields or conditions are detected and the field is missing. (#228)

0.3.20

Patch Changes

  • Suggest adding engines.node when it is missing from detected Node.js packages (#226)

  • Loosen "breaking change" wording in lint messages (7bb3f4f)

0.3.19

Patch Changes

  • Add NESTED_PACKAGE_JSON_FIELD_IGNORED to warn when published nested package.json files define "exports" or "imports", which Node.js ignores outside the package root. (#224)

  • Fix internal browser directory traversal logic (#224)

Commits

Updates @tummycrypt/tinyland-auth from 0.3.0 to 0.3.3

Release notes

Sourced from @​tummycrypt/tinyland-auth's releases.

@​tummycrypt/tinyland-auth v0.3.3

Patch release for SvelteKit SSR consumers using modern otplib exports.\n\n- Adds an otplib compatibility layer for legacy v12 authenticator exports and modern v13 functional exports.\n- Routes TOTP and invitation code through the compatibility helpers.\n- Validated with pnpm typecheck, tests, build, publint, Bazel build/test, and a v13-consumer smoke.

v0.3.2

Patch release for Node ESM consumers and the self-hosted Bazel publish lane. Includes the otplib CommonJS default namespace import fix from 0.3.1 and removes package-level npm provenance so npm does not reject self-hosted runner publication.

v0.3.1

Patch release for Node ESM consumers: import CommonJS otplib through its default namespace in TOTP and invitation code. Validated through pnpm typecheck/test/build/publint and Bazel package/test/typecheck lanes.

Changelog

Sourced from @​tummycrypt/tinyland-auth's changelog.

0.3.3

Patch Changes

  • Make TOTP and invitation exports compatible with both legacy otplib v12 authenticator exports and modern otplib v13 functional exports used by SvelteKit SSR consumers.

0.3.2

Patch Changes

  • Disable package-level npm provenance so the self-hosted Bazel package publish lane can publish without npm rejecting the runner environment.

0.3.1

Patch Changes

  • Fix Node ESM consumption of the TOTP and invitation exports by importing the CommonJS otplib package through its default namespace.

0.2.2

Patch Changes

  • Roll forward published package versions so the next release re-establishes npm artifact truth for the current repo contents. This excludes @tummycrypt/tinyland-schemas because 0.2.1 is not published on npm yet.

0.2.1

Patch Changes

  • 429a49c: Strip .js.map sourcemaps from published packages and resolve workspace:* dependencies to real version ranges.
Commits
  • 21e7d00 Merge pull request #11 from tinyland-inc/codex/otplib-v13-compatible
  • 1272319 fix: support modern otplib consumers
  • 4f77957 fix: publish npm package without self-hosted provenance
  • 02774a1 fix: make otplib imports ESM-safe
  • b2489bd ci: pin idempotent package publish template (#8)
  • cd1d299 fix(ci): use nonreserved github packages token (#7)
  • af2f1e3 fix(ci): align publish workflow package scope (#6)
  • 81df7f0 fix(ci): use package-token capable publish workflow (#5)
  • 2bd4a06 Merge pull request #4 from tinyland-inc/jess/fix-github-package-scope
  • c0ae7f5 fix(ci): use tinyland-inc scope for GitHub Packages
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 10, 2026
@dependabot
chore(deps-dev): bump the npm group across 1 directory with 5 updates
1fb3b3f 
Bumps the npm group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fast-check/vitest](https://github.com/dubzzz/fast-check/tree/HEAD/packages/vitest) | `0.2.4` | `0.4.1` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.7.0` | `4.9.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.10` |
| [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.18` | `0.3.21` |
| [@tummycrypt/tinyland-auth](https://github.com/tinyland-inc/tinyland-auth) | `0.3.0` | `0.3.3` |



Updates `@fast-check/vitest` from 0.2.4 to 0.4.1
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/vitest/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/vitest/v0.4.1/packages/vitest)

Updates `fast-check` from 4.7.0 to 4.9.0
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.9.0/packages/fast-check)

Updates `vitest` from 4.1.5 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

Updates `publint` from 0.3.18 to 0.3.21
- [Release notes](https://github.com/publint/publint/releases)
- [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md)
- [Commits](https://github.com/publint/publint/commits/publint@0.3.21/packages/publint)

Updates `@tummycrypt/tinyland-auth` from 0.3.0 to 0.3.3
- [Release notes](https://github.com/tinyland-inc/tinyland-auth/releases)
- [Changelog](https://github.com/tinyland-inc/tinyland-auth/blob/main/CHANGELOG.md)
- [Commits](tinyland-inc/tinyland-auth@v0.3.0...v0.3.3)

---
updated-dependencies:
- dependency-name: "@fast-check/vitest"
  dependency-version: 0.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@tummycrypt/tinyland-auth"
  dependency-version: 0.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: fast-check
  dependency-version: 4.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: publint
  dependency-version: 0.3.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the npm group with 5 updates chore(deps-dev): bump the npm group across 1 directory with 5 updates Jul 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-7be059f35f branch from 82d3709 to 1fb3b3f Compare July 16, 2026 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants