chore(deps): bump the npm-dependencies group across 3 directories with 10 updates#2452
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the npm-dependencies group across 3 directories with 10 updates#2452dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Contributor
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found. |
Contributor
Eval Execution |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #2452 +/- ##
==========================================
- Coverage 82.72% 82.66% -0.06%
==========================================
Files 154 142 -12
Lines 20782 20693 -89
Branches 13 0 -13
==========================================
- Hits 17191 17106 -85
+ Misses 3589 3587 -2
+ Partials 2 0 -2
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Dependency Review — Safety Check Results
All changes are existing dependencies bumped by Dependabot. No new dependencies introduced.
Changes Summary
| Package | From | To | Classification | Directory |
|---|---|---|---|---|
@microsoft/vally-cli |
0.6.0 | 0.8.0 | Minor | / |
markdownlint-cli2 |
0.22.1 | 0.23.0 | Minor | / |
@docusaurus/core |
3.10.1 | 3.10.2 | Patch | docs/docusaurus |
@docusaurus/faster |
3.10.1 | 3.10.2 | Patch | docs/docusaurus |
@docusaurus/preset-classic |
3.10.1 | 3.10.2 | Patch | docs/docusaurus |
@docusaurus/module-type-aliases |
3.10.1 | 3.10.2 | Patch | docs/docusaurus |
@docusaurus/types |
3.10.1 | 3.10.2 | Patch | docs/docusaurus |
@typescript-eslint/parser |
8.62.0 | 8.63.0 | Patch | docs/docusaurus |
eslint |
9.39.4 | 10.7.0 | docs/docusaurus |
|
@github/copilot |
1.0.63 | 1.0.70 | Minor | evals/beval |
Safety Checks
| Check | Result |
|---|---|
| License compatibility (MIT) | ✅ All licenses remain compatible |
| SHA pinning (GitHub Actions) | ✅ Not applicable — no workflow files changed |
| New dependencies introduced | ✅ None — all bumps to existing dependencies |
| Environment sync (devcontainer / setup-steps) | ✅ Not applicable — no devcontainer changes |
| Dependabot-reported vulnerabilities | ✅ No vulnerabilities reported |
⚠️ Items Requiring Human Attention
eslint 9.39.4 → 10.7.0 (Major version bump) — ESLint v10 may contain breaking changes affecting plugins and rule APIs. Please verify the Docusaurus ESLint config continues to work correctly. See inline comment for details.
markdownlint-cli2 0.22.1 → 0.23.0 — The changelog notes removal of support for end-of-life Node 20. Ensure CI and local environments use Node 22+.
All patch and minor bumps passed safety checks with no concerns.
Generated by Dependabot PR Review for #2452 · 35.2 AIC · ⌖ 6.24 AIC · ⊞ 8.4K
| "@testing-library/jest-dom": "6.9.1", | ||
| "@testing-library/react": "16.3.2", | ||
| "@types/jest": "30.0.0", | ||
| "@types/jest-axe": "3.5.9", |
Contributor
There was a problem hiding this comment.
eslint 9.x → 10.x
This is a major version upgrade and may include breaking changes. ESLint v10 may drop plugins or rule APIs present in v9. Please verify that the ESLint config in docs/docusaurus/ (and any shared config) remains compatible before merging.
Review the [ESLint v10 migration guide]((eslint.org/redacted) for breaking changes.
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm-dependencies-4ea2447518
branch
from
July 13, 2026 05:47
1f63339 to
c5baadc
Compare
Contributor
There was a problem hiding this comment.
Dependency Review — Safety Check Results
Changes Summary
| Directory | Package | From | To | Classification |
|---|---|---|---|---|
/ |
@microsoft/vally-cli |
0.6.0 |
0.8.0 |
minor |
/ |
markdownlint-cli2 |
0.22.1 |
0.23.0 |
minor |
docs/docusaurus/ |
@docusaurus/core |
3.10.1 |
3.10.2 |
patch |
docs/docusaurus/ |
@docusaurus/faster |
3.10.1 |
3.10.2 |
patch |
docs/docusaurus/ |
@docusaurus/preset-classic |
3.10.1 |
3.10.2 |
patch |
docs/docusaurus/ |
@docusaurus/module-type-aliases |
3.10.1 |
3.10.2 |
patch |
docs/docusaurus/ |
@docusaurus/types |
3.10.1 |
3.10.2 |
patch |
docs/docusaurus/ |
@typescript-eslint/parser |
8.62.0 |
8.63.0 |
patch |
docs/docusaurus/ |
eslint |
9.39.4 |
10.7.0 |
major |
evals/beval/ |
@github/copilot |
1.0.63 |
1.0.70 |
patch |
✅ Safety Checks
- Licenses: All packages carry MIT/Apache-2.0 licenses — compatible with the project's MIT license. ✅
- SHA pinning: No GitHub Actions references modified in this PR. ✅
- New dependencies: None introduced; all are existing dependencies being bumped. ✅
- Vulnerabilities: Dependabot reports no known vulnerabilities introduced by these bumps. ✅
- Environment sync: No
.devcontainer/orcopilot-setup-steps.ymlchanges; no sync check required. ✅
⚠️ Flags for Human Attention
eslint 9.39.4 → 10.7.0 (major bump) in docs/docusaurus/: This is a major version upgrade. ESLint v10 may contain breaking changes to rule configurations, plugin APIs, or flat config behavior. Please verify that the Docusaurus linting setup continues to work as expected before merging.
markdownlint-cli2 0.23.0: The changelog notes removal of Node 20 support (Remove support for end-of-life Node 20). If any CI runners or tooling targets Node 20 specifically, this warrants a quick check — though Node 20 reached end-of-life in April 2025 and the project should already be on Node 22+.
Conclusion
All automated safety checks passed. The eslint major version bump is the only item requiring human eyes before merge. No action is blocked by this review.
Generated by Dependabot PR Review for #2452 · 25.8 AIC · ⌖ 6.3 AIC · ⊞ 8.5K
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm-dependencies-4ea2447518
branch
from
July 16, 2026 21:46
c5baadc to
0d6c018
Compare
Contributor
There was a problem hiding this comment.
Dependency Review — Safety Check Results
Verdict: COMMENT — Most bumps are clean, but one major version bump needs human attention before merge.
Changes Summary
| Package | From | To | Classification | Directory |
|---|---|---|---|---|
@docusaurus/core |
3.10.1 | 3.10.2 | Patch | docs/docusaurus/ |
@docusaurus/faster |
3.10.1 | 3.10.2 | Patch | docs/docusaurus/ |
@docusaurus/preset-classic |
3.10.1 | 3.10.2 | Patch | docs/docusaurus/ |
@docusaurus/module-type-aliases |
3.10.1 | 3.10.2 | Patch | docs/docusaurus/ |
@docusaurus/types |
3.10.1 | 3.10.2 | Patch | docs/docusaurus/ |
@typescript-eslint/parser |
8.62.0 | 8.64.0 | Minor | docs/docusaurus/ |
eslint |
9.39.4 | 10.7.0 | Major |
docs/docusaurus/ |
@github/copilot |
1.0.63 | 1.0.71 | Minor | evals/beval/ |
@microsoft/vally-cli |
0.6.0 | 0.9.0 | Minor (pre-1.0) | / |
markdownlint-cli2 |
0.22.1 | 0.23.0 | Minor (pre-1.0) | / |
Safety Checks
- ✅ Licenses — All dependencies are MIT or Apache-2.0 compatible.
- ✅ SHA pinning — No GitHub Actions references modified; no pinning issues.
- ✅ No new dependencies introduced — Only version bumps of existing dependencies.
- ✅ No environment sync violations — Neither
.devcontainer/norcopilot-setup-steps.ymlwere modified. - ✅ Vulnerabilities — Dependabot reports no known vulnerabilities remaining after these bumps.
⚠️ Human Attention Required: eslint 9 → 10 (Major)
ESLint 10 is a major version bump. Key breaking changes to verify:
- ESLint 10 drops
eslint:recommendedflat config compatibility shims from v9 and makes the flat config the only configuration system (no more.eslintrcfiles). - Several rules were removed or renamed.
- The
docs/docusaurus/ESLint configuration should be validated against the new API surface.
Action: Verify the Docusaurus ESLint config (eslint.config.*) is compatible with ESLint 10 and run linting locally before merging.
Other Notes
markdownlint-cli20.23.0: Drops support for Node 20 (EOL). Ensure CI and devcontainer use Node 22+. The changelog also adds anoverridesconfiguration option — a non-breaking addition.@microsoft/vally-cli0.9.0: Pre-1.0 minor bump from 0.6.0. Three minor version steps may include internal breaking changes; verify eval pipeline behavior if vally-cli is exercised in CI.
Generated by Dependabot PR Review for #2452 · 33.4 AIC · ⌖ 6.32 AIC · ⊞ 8.5K
Member
|
@dependabot recreate |
…h 10 updates Bumps the npm-dependencies group with 2 updates in the / directory: @microsoft/vally-cli and [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2). Bumps the npm-dependencies group with 7 updates in the /docs/docusaurus directory: | Package | From | To | | --- | --- | --- | | [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.10.1` | `3.10.2` | | [@docusaurus/faster](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-faster) | `3.10.1` | `3.10.2` | | [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.10.1` | `3.10.2` | | [@docusaurus/module-type-aliases](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases) | `3.10.1` | `3.10.2` | | [@docusaurus/types](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-types) | `3.10.1` | `3.10.2` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.64.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.7.0` | Bumps the npm-dependencies group with 1 update in the /evals/beval directory: [@github/copilot](https://github.com/github/copilot-cli). Updates `@microsoft/vally-cli` from 0.6.0 to 0.9.0 Updates `markdownlint-cli2` from 0.22.1 to 0.23.0 - [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md) - [Commits](DavidAnson/markdownlint-cli2@v0.22.1...v0.23.0) Updates `@docusaurus/core` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus) Updates `@docusaurus/faster` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-faster) Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic) Updates `@docusaurus/module-type-aliases` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-module-type-aliases) Updates `@docusaurus/types` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-types) Updates `@typescript-eslint/parser` from 8.62.0 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/parser) Updates `eslint` from 9.39.4 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.7.0) Updates `@github/copilot` from 1.0.63 to 1.0.71 - [Release notes](https://github.com/github/copilot-cli/releases) - [Changelog](https://github.com/github/copilot-cli/blob/main/changelog.md) - [Commits](github/copilot-cli@v1.0.63...v1.0.71) --- updated-dependencies: - dependency-name: "@docusaurus/core" dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/faster" dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/module-type-aliases" dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/preset-classic" dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/types" dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@github/copilot" dependency-version: 1.0.70 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@microsoft/vally-cli" dependency-version: 0.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: markdownlint-cli2 dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm-dependencies-4ea2447518
branch
from
July 16, 2026 22:36
f1be03b to
10100e9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-dependencies group with 2 updates in the / directory: @microsoft/vally-cli and markdownlint-cli2.
Bumps the npm-dependencies group with 7 updates in the /docs/docusaurus directory:
3.10.13.10.23.10.13.10.23.10.13.10.23.10.13.10.23.10.13.10.28.62.08.64.09.39.410.7.0Bumps the npm-dependencies group with 1 update in the /evals/beval directory: @github/copilot.
Updates
@microsoft/vally-clifrom 0.6.0 to 0.9.0Updates
markdownlint-cli2from 0.22.1 to 0.23.0Changelog
Sourced from markdownlint-cli2's changelog.
Commits
5341662Update to version 0.23.0.5a7b0fdAdd test cases to ensure user-provided Options object properties that use imp...73c8de8Bump eslint from 10.5.0 to 10.6.0fb55bdbBump js-yaml from 5.1.0 to 5.2.0f4ee8c9Bump eslint-plugin-jsdoc from 63.0.9 to 63.0.10b4f4a52Add support for configuration object "extends" to new "overrides" behavior.dacefd5Refactor "extends" implementation to modify objects in place (simpler, more f...2be557fBump eslint-plugin-n from 18.2.0 to 18.2.1184d8d6Bump eslint-plugin-jsdoc from 63.0.8 to 63.0.960ac5bcBump eslint-plugin-n from 18.1.0 to 18.2.0Updates
@docusaurus/corefrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/core's releases.
Changelog
Sourced from @docusaurus/core's changelog.
Commits
f37f903v3.10.22f5389dchore: cherry-pick commits for v3.10.2 patch release (#12265)Updates
@docusaurus/fasterfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/faster's releases.
Changelog
Sourced from @docusaurus/faster's changelog.
Commits
f37f903v3.10.22f5389dchore: cherry-pick commits for v3.10.2 patch release (#12265)Updates
@docusaurus/preset-classicfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/preset-classic's releases.
Changelog
Sourced from @docusaurus/preset-classic's changelog.
Commits
f37f903v3.10.2Updates
@docusaurus/module-type-aliasesfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/module-type-aliases's releases.
Changelog
Sourced from @docusaurus/module-type-aliases's changelog.
Commits
f37f903v3.10.2Updates
@docusaurus/typesfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/types's releases.
Changelog
Sourced from @docusaurus/types's changelog.
Commits
f37f903v3.10.2Updates
@typescript-eslint/parserfrom 8.62.0 to 8.64.0Release notes
Sourced from @typescript-eslint/parser's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/parser's changelog.
Commits
414d9abchore(release): publish 8.64.0290cf6cchore(release): publish 8.63.03ea32f4chore(release): publish 8.62.1Updates
eslintfrom 9.39.4 to 10.7.0Release notes
Sourced from eslint's releases.