Skip to content

Bump the minor_versions group across 1 directory with 18 updates - #8959

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor_versions-26cd6c0c0c
Open

Bump the minor_versions group across 1 directory with 18 updates#8959
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor_versions-26cd6c0c0c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor_versions group with 18 updates in the / directory:

Package From To
@typescript-eslint/parser 8.56.1 8.71.2
esbuild 0.28.1 0.28.2
liquidjs 10.27.0 10.30.0
@oclif/core 4.8.3 4.14.0
csv-parse 7.0.2 7.0.3
prettier 3.8.4 3.9.10
ws 8.21.0 8.22.0
@ast-grep/napi 0.43.0 0.50.0
@bugsnag/js 8.9.0 8.10.0
@opentelemetry/core 2.8.0 2.12.0
@opentelemetry/exporter-metrics-otlp-http 0.57.0 0.223.0
@vercel/detect-agent 1.2.5 1.2.7
semver 7.8.4 7.8.5
@typescript-eslint/eslint-plugin 8.56.1 8.71.2
eslint-plugin-prettier 5.5.6 5.5.7
eslint-plugin-tsdoc 0.5.2 0.5.4
@vitest/eslint-plugin 1.1.44 1.6.27
yaml 2.9.0 2.9.1

Updates @typescript-eslint/parser from 8.56.1 to 8.71.2

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
  • type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

  • eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
  • eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
  • eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
  • eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
  • eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
  • eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
  • project-service: throttle cleanup when opening files (#12934)
  • type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.71.2 (2026-10-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

... (truncated)

Commits

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x

... (truncated)

Commits
  • 609683d publish 0.28.2 to npm
  • 11b1fe4 add to release notes
  • ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
  • 04627b6 fix #4498: async TLA checks need a worklist
  • 5c15177 disable gopls in the go folder
  • fc2ee9b css: adjust parser to allow --foo: {...}
  • 209db54 release notes for css nesting bugfix
  • c625d31 fix #4497: preserve nested ampersands during minification (#4500)
  • 34474e2 better isolation of current part in js parser
  • 07f6e8c fix #4507: import assignment tree-shaking bug
  • Additional commits viewable in compare view

Updates liquidjs from 10.27.0 to 10.30.0

Release notes

Sourced from liquidjs's releases.

v10.30.0

10.30.0 (2026-10-01)

Bug Fixes

  • base64_encode: encode large input in browser builds (#969) (8aace78), closes #967
  • date: compute %C and %y from the numeric year (#961) (e68514f)
  • date: compute %U and %W week numbers like strftime (#958) (0587ca8)
  • trim custom characters by Unicode code point (#955) (3fe244f)
  • truncatewords: ignore leading whitespace when counting words (#954) (65e200e)
  • url_decode: keep %2B as a literal plus when decoding (#939) (9af92f5)

Features

v10.29.0

10.29.0 (2026-08-11)

Features

v10.28.0

10.28.0 (2026-08-01)

Bug Fixes

  • date: %s returns Unix epoch unaffected by display timezone (#932) (39c8743), closes #931

Features

  • Add support of inner expressions enclosed by parentheses (#863) (afa5f54)

v10.27.2

10.27.2 (2026-07-09)

Bug Fixes

  • charge join/json/inspect filters by produced output size (#925) (7ab49f9)
  • date: zero-pad milliseconds when formatting %N fractional seconds (#929) (2634f9d)
  • enforce ownPropertyOnly for inherited array indices (#924) (552819a)
  • filters: modulo should follow divisor sign for negative operands (#922) (568bd5f)

... (truncated)

Changelog

Sourced from liquidjs's changelog.

10.30.0 (2026-10-01)

Bug Fixes

  • base64_encode: encode large input in browser builds (#969) (8aace78), closes #967
  • date: compute %C and %y from the numeric year (#961) (e68514f)
  • date: compute %U and %W week numbers like strftime (#958) (0587ca8)
  • trim custom characters by Unicode code point (#955) (3fe244f)
  • truncatewords: ignore leading whitespace when counting words (#954) (65e200e)
  • url_decode: keep %2B as a literal plus when decoding (#939) (9af92f5)

Features

10.29.0 (2026-08-11)

Features

10.28.0 (2026-08-01)

Bug Fixes

  • date: %s returns Unix epoch unaffected by display timezone (#932) (39c8743), closes #931

Features

  • Add support of inner expressions enclosed by parentheses (#863) (afa5f54)

10.27.2 (2026-07-09)

Bug Fixes

  • charge join/json/inspect filters by produced output size (#925) (7ab49f9)
  • date: zero-pad milliseconds when formatting %N fractional seconds (#929) (2634f9d)
  • enforce ownPropertyOnly for inherited array indices (#924) (552819a)
  • filters: modulo should follow divisor sign for negative operands (#922) (568bd5f)
  • filters: return empty for out-of-range slice begin or negative length (#928) (f9a1316)

10.27.1 (2026-06-23)

... (truncated)

Commits
  • 920166e chore(release): 10.30.0 [skip ci]
  • 259dcd4 docs: add josefguenther as a contributor for code (#972)
  • 8aace78 fix(base64_encode): encode large input in browser builds (#969)
  • 7dfa76b feat: await promises returned by Drop.valueOf() (#948) (#953) (#959)
  • e68514f fix(date): compute %C and %y from the numeric year (#961)
  • 28ae3fb docs: add web-orbit12 as a contributor for code (#960)
  • 0587ca8 fix(date): compute %U and %W week numbers like strftime (#958)
  • a2cdfb8 docs: add jakezwang as a contributor for code (#957)
  • 3fe244f fix: trim custom characters by Unicode code point (#955)
  • 0340ed5 docs: add youdie006 as a contributor for code (#956)
  • Additional commits viewable in compare view

Updates @oclif/core from 4.8.3 to 4.14.0

Release notes

Sourced from @​oclif/core's releases.

4.14.0

Features

  • bumping to eslint v10 (W-23473845) (248de04)

4.13.5

Bug Fixes

  • replaced require with dynamic import (W-23807278) (d35e325)

4.13.4

Bug Fixes

  • resolved security vulnerability in powershell path (W-23807278) (911e9d2)

4.13.3

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

4.13.2

Bug Fixes

  • deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1

Bug Fixes

  • deps: bump tar from 7.5.16 to 7.5.22 (bc0d2d2)

4.13.0

Features

  • expose root help formatter (644c4aa)

4.12.0

Features

  • add Args.option() for typed arg options (93139f7)

4.11.14

Bug Fixes

  • deps: bump @​sigstore/core from 3.2.0 to 3.2.1 (b45271f)

4.11.13

Bug Fixes

  • deps: bump sigstore from 4.1.0 to 4.1.1 (5d7fe54)

... (truncated)

Changelog

Sourced from @​oclif/core's changelog.

4.14.0 (2026-08-19)

Features

  • bumping to eslint v10 (W-23473845) (248de04)

4.13.5 (2026-08-14)

Bug Fixes

  • replaced require with dynamic import (W-23807278) (d35e325)

4.13.4 (2026-08-14)

Bug Fixes

  • resolved security vulnerability in powershell path (W-23807278) (911e9d2)

4.13.3 (2026-08-04)

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

4.13.2 (2026-07-27)

Bug Fixes

  • deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1 (2026-07-27)

Bug Fixes

... (truncated)

Commits
  • 1d2903e chore(release): 4.14.0 [skip ci]
  • 45c7f0a Merge pull request #1635 from oclif/d/W-23473845
  • 395c8bc chore: prune stale eslint suppressions after merge
  • 35ddd2e chore: merge main into d/W-23473845
  • 0d01467 chore(release): 4.13.5 [skip ci]
  • 06949eb Merge pull request #1638 from oclif/d/W-23807278-2
  • d35e325 fix: replaced require with dynamic import (W-23807278)
  • 85370b7 chore(release): 4.13.4 [skip ci]
  • 3318c6e Merge pull request #1636 from oclif/d/W-23807278
  • 911e9d2 fix: resolved security vulnerability in powershell path (W-23807278)
  • Additional commits viewable in compare view

Updates csv-parse from 7.0.2 to 7.0.3

Changelog

Sourced from csv-parse's changelog.

7.0.3 (2026-09-25)

Bug Fixes

  • csv-parse: preserve typed column keys (#500) (745f045)
  • csv-parse: type the delimiter_auto score callback arguments (#499) (4aa04da)
Commits
  • 594c646 chore(release): publish
  • 16d9900 refactor(csv-parse): isolate error and normalize_options in types
  • 4aa04da fix(csv-parse): type the delimiter_auto score callback arguments (#499)
  • 8d4173d build: latest dev dependencies
  • c8caa1c build: generate latest dist
  • 6c45c9b build: remove npx usage in package scripts
  • 6f39f27 test: remove lint errors
  • 94ae7b9 test: rename mocha setup rule
  • 42a6b09 test: remove ts-node usage
  • 745f045 fix(csv-parse): preserve typed column keys (#500)
  • Additional commits viewable in compare view

Updates prettier from 3.8.4 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • cdd17f2 Release 3.9.9
  • dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
  • f9be58f Git blame ignore 3.9.8
  • 88470cb Bump Prettier dependency to 3.9.8
  • 9559cab Clean changelog_unreleased
  • 4fc8ee8 Update dependents count
  • Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

  • Introduced the protocols option (8b918b01).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).

8.21.3

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • 297202c [dist] 8.22.0
  • 8b918b0 [feature] Introduce the protocols option
  • 73e03eb [ci] Update actions/setup-node action to v7
  • d9b8954 [fix] Change the ready state after validating the arguments (#2337)
  • c791e70 [dist] 8.21.3
  • e97a20e [fix] Reject offers with client_max_window_bits below config
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • Additional commits viewable in compare view

Updates @ast-grep/napi from 0.43.0 to 0.50.0

Release notes

Sourced from @​ast-grep/napi's releases.

0.50.0

0.45.3

@dependabot
dependabot Bot requested review from a team as code owners October 20, 2026 17:55
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 20, 2026
@github-actions github-actions Bot added devtools-gardener Post the issue or PR to Slack for the gardener no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users. labels Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-26cd6c0c0c branch from 19052b9 to 4a5506d Compare October 21, 2026 13:57
@dependabot
Bump the minor_versions group across 1 directory with 18 updates
3e94a6d 
Bumps the minor_versions group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.71.2` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [liquidjs](https://github.com/harttle/liquidjs) | `10.27.0` | `10.30.0` |
| [@oclif/core](https://github.com/oclif/core) | `4.8.3` | `4.14.0` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `7.0.2` | `7.0.3` |
| [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.10` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.22.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.43.0` | `0.50.0` |
| [@bugsnag/js](https://github.com/bugsnag/bugsnag-js) | `8.9.0` | `8.10.0` |
| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.8.0` | `2.12.0` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.57.0` | `0.223.0` |
| [@vercel/detect-agent](https://github.com/vercel/vercel/tree/HEAD/packages/detect-agent) | `1.2.5` | `1.2.7` |
| [semver](https://github.com/npm/node-semver) | `7.8.4` | `7.8.5` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.1` | `8.71.2` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.6` | `5.5.7` |
| [eslint-plugin-tsdoc](https://github.com/microsoft/tsdoc/tree/HEAD/eslint-plugin) | `0.5.2` | `0.5.4` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.1.44` | `1.6.27` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@typescript-eslint/parser` from 8.56.1 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/parser)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `liquidjs` from 10.27.0 to 10.30.0
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.27.0...v10.30.0)

Updates `@oclif/core` from 4.8.3 to 4.14.0
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.8.3...4.14.0)

Updates `csv-parse` from 7.0.2 to 7.0.3
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.3/packages/csv-parse)

Updates `prettier` from 3.8.4 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.4...3.9.10)

Updates `ws` from 8.21.0 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.22.0)

Updates `@ast-grep/napi` from 0.43.0 to 0.50.0
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.43.0...0.50.0)

Updates `@bugsnag/js` from 8.9.0 to 8.10.0
- [Release notes](https://github.com/bugsnag/bugsnag-js/releases)
- [Changelog](https://github.com/bugsnag/bugsnag-js/blob/next/CHANGELOG.md)
- [Commits](bugsnag/bugsnag-js@v8.9.0...v8.10.0)

Updates `@opentelemetry/core` from 2.8.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.8.0...v2.12.0)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.57.0 to 0.223.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.0...experimental/v0.223.0)

Updates `@vercel/detect-agent` from 1.2.5 to 1.2.7
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/detect-agent/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/ruby@1.2.7/packages/detect-agent)

Updates `semver` from 7.8.4 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.4...v7.8.5)

Updates `@typescript-eslint/eslint-plugin` from 8.56.1 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/eslint-plugin)

Updates `eslint-plugin-prettier` from 5.5.6 to 5.5.7
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.6...v5.5.7)

Updates `eslint-plugin-tsdoc` from 0.5.2 to 0.5.4
- [Changelog](https://github.com/microsoft/tsdoc/blob/main/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/microsoft/tsdoc/commits/HEAD/eslint-plugin)

Updates `@vitest/eslint-plugin` from 1.1.44 to 1.6.27
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.1.44...v1.6.27)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@bugsnag/js"
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@oclif/core"
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.223.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.71.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.71.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@vercel/detect-agent"
  dependency-version: 1.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.27
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: csv-parse
  dependency-version: 7.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: eslint-plugin-tsdoc
  dependency-version: 0.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: liquidjs
  dependency-version: 10.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-26cd6c0c0c branch from 4a5506d to 3e94a6d Compare October 22, 2026 11:00

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file devtools-gardener Post the issue or PR to Slack for the gardener no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants