Skip to content

Bump the npm-minor group across 1 directory with 6 updates - #1503

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-4dbc0e63fe
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-4dbc0e63fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor group with 6 updates in the / directory:

Package From To
semver 7.8.5 7.8.6
uuid 14.0.2 14.0.3
@types/node 26.6.2 26.6.6
eslint-plugin-prettier 5.5.6 5.5.7
prettier 3.9.8 3.9.10
vitest 5.0.1 5.1.0

Updates semver from 7.8.5 to 7.8.6

Release notes

Sourced from semver's releases.

v7.8.6

7.8.6 (2026-11-02)

Bug Fixes

Chores

Changelog

Sourced from semver's changelog.

7.8.6 (2026-11-02)

Bug Fixes

Chores

Commits

Updates uuid from 14.0.2 to 14.0.3

Release notes

Sourced from uuid's releases.

v14.0.3

14.0.3 (2026-10-09)

Bug Fixes

Changelog

Sourced from uuid's changelog.

14.0.3 (2026-10-09)

Bug Fixes

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @types/node from 26.6.2 to 26.6.6

Commits

Updates eslint-plugin-prettier from 5.5.6 to 5.5.7

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.7

Patch Changes

  • #796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

  • #805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

New Contributors

Full Changelog: prettier/eslint-plugin-prettier@v5.5.6...v5.5.7

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.7

Patch Changes

  • #796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

  • #805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

Commits
  • e6dd27a chore: keep packageManager when cleaning package.json for release (#808)
  • 7544956 chore: release eslint-plugin-prettier (#799)
  • e3e5238 ci: enable npm publish provenance for changesets v3 (#807)
  • 7c923c4 build(deps): Bump http-cache-semantics from 4.2.0 to 4.3.0 (#806)
  • 1b7c433 fix: bump synckit to surface worker failures instead of hanging (#805)
  • a6b3feb docs: explain line endings and endOfLine behavior (#804)
  • 2f6ba1d ci: exercise the getLocFromIndex ponyfill on ESLint 9 (#803)
  • cf1d2c5 chore(deps): update (#802)
  • 9f14a55 chore(deps): update all dependencies (#788)
  • 7e53ecd fix: map fallback source locations to actual line starts (#796)
  • Additional commits viewable in compare view

Updates prettier from 3.9.8 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • cdd17f2 Release 3.9.9
  • dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
  • f9be58f Git blame ignore 3.9.8
  • 88470cb Bump Prettier dependency to 3.9.8
  • 9559cab Clean changelog_unreleased
  • 4fc8ee8 Update dependents count
  • See full diff in compare view

Updates vitest from 5.0.1 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@types/node [< 23, > 22.7.7]
@types/node [>= 22.a, < 23]
@types/node [< 26, > 25.2.3]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [semver](https://github.com/npm/node-semver) | `7.8.5` | `7.8.6` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.2` | `14.0.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.6` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.6` | `5.5.7` |
| [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.10` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.1.0` |



Updates `semver` from 7.8.5 to 7.8.6
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.5...v7.8.6)

Updates `uuid` from 14.0.2 to 14.0.3
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.2...v14.0.3)

Updates `@types/node` from 26.6.2 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-plugin-prettier` from 5.5.6 to 5.5.7
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.6...v5.5.7)

Updates `prettier` from 3.9.8 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.8...3.9.10)

Updates `vitest` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: uuid
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 10, 2026 10:53
@dependabot dependabot Bot added the Rebuild label Nov 10, 2026
Copilot AI dynamic review requested due to automatic review settings November 10, 2026 10:53
@github-actions github-actions Bot removed the Rebuild label Nov 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Pushed a commit to rebuild the Action. Please approve running the PR checks.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The dependency updates lack the required regenerated and committed dist bundles, leaving the checked-in runtime stale and causing the repository’s build verification to fail.

1 open issue
What changed in this PR

Updates the project’s npm dependencies to newer compatible releases while synchronizing the manifest and lockfile.

Changes:

  • Bumps semver, uuid, and @types/node.
  • Updates Prettier tooling and Vitest.
  • Refreshes corresponding transitive dependencies and lockfile metadata.
File Description
package.json Updates six direct npm dependency version ranges.
package-lock.json Locks the updated direct dependencies and their corresponding transitive dependency graph.

Review effort: Lite (auto)

Comment thread package.json
Comment on lines +32 to +33
"semver": "^7.8.6",
"uuid": "^14.0.3",
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant