deps: bump the minor-and-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #13 · Dayclone/opencode-on-autopilot

dependabot · 2026-04-20T09:40:12Z

Bumps the minor-and-patch group with 9 updates in the / directory:

Package	From	To
ws	`8.19.0`	`8.20.0`
@types/node	`25.1.0`	`25.6.0`
@types/vscode	`1.108.1`	`1.116.0`
@vscode/vsce	`3.7.1`	`3.9.1`
esbuild	`0.27.2`	`0.28.0`
globals	`17.2.0`	`17.5.0`
sinon	`21.0.1`	`21.1.2`
@types/sinon	`21.0.0`	`21.0.1`
typescript-eslint	`8.54.0`	`8.58.2`

Updates ws from 8.19.0 to 8.20.0

Release notes

Sourced from ws's releases.

8.20.0

Features

Added exports for the PerMessageDeflate class and utilities for the Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1f).

Commits

8439255 [dist] 8.20.0
d3503c1 [minor] Export the PerMessageDeflate class and header utils
3ee5349 [api] Convert the isServer and maxPayload parameters to options
91707b4 [doc] Add missing space
8b55319 [pkg] Update eslint to version 10.0.1
ca533a5 [pkg] Update globals to version 17.0.0
See full diff in compare view

Updates @types/node from 25.1.0 to 25.6.0

Commits

See full diff in compare view

Updates @types/vscode from 1.108.1 to 1.116.0

Commits

See full diff in compare view

Updates @vscode/vsce from 3.7.1 to 3.9.1

Release notes

Sourced from @vscode/vsce's releases.

v3.9.1

Changes:

#1266: fix: module type mismatch

This list of changes was auto generated.

v3.9.1-0

Changes:

#1266: fix: module type mismatch

This list of changes was auto generated.

v3.9.0

Changes:

#1263: fix: build regressions in 3.8.1

#1261: Add override for serialize-javascript

This list of changes was auto generated.

v3.8.2-1

Changes:

#1263: fix: build regressions in 3.8.1

This list of changes was auto generated.

v3.8.2-0

Changes:

#1261: Add override for serialize-javascript

This list of changes was auto generated.

v3.8.1

Changes:

... (truncated)

Commits

98cca9e fix: module type mismatch (#1266)
9329b35 fix: build regressions in 3.8.1 (#1263)
165b0f2 Add override for serialize-javascript (#1261)
7d124ab chore: update @azure/identity to 4.13.1 and modernize TypeScript/Node.js conf...
cbdd401 fix: run npm audit fix to update package-lock.json (#1258)
13c5fa8 Merge pull request #1255 from microsoft/dependabot/npm_and_yarn/multi-580a7c2f10
c6f98dc Bump brace-expansion
01da009 Bump picomatch from 2.3.1 to 2.3.2 (#1253)
bb899fa Merge pull request #1252 from microsoft/dependabot/npm_and_yarn/yauzl-3.2.1
3f4fa96 Bump yauzl from 2.10.0 to 3.2.1
Additional commits viewable in compare view

Updates esbuild from 0.27.2 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0
Add support for with { type: 'text' } imports (#4435)

The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:
import string from './example.txt' with { type: 'text' }
console.log(string)
Add integrity checks to fallback download path (#4343)

Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

Update the Go compiler from 1.25.7 to 1.26.1

This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

It now uses the new garbage collector that comes with Go 1.26.

The Go compiler is now more aggressive with allocating memory on the stack.

The executable format that the Go linker uses has undergone several changes.

The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

You can read the Go 1.26 release notes for more information.
v0.27.7
Fix lowering of define semantics for TypeScript parameter properties (#4421)

The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:
// Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}
// New output (with --loader=ts --target=es2021)
class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

Commits

6a794df publish 0.28.0 to npm
64ee0ea fix #4435: support with { type: text } imports
ef65aee fix sort order in snapshots_packagejson.txt
1a26a8e try to fix test-old-ts, also shuffle CI tasks
556ce6c use '' instead of null to omit build hashes
8e675a8 ci: allow missing binary hashes for tests
7067763 Reapply "update go 1.25.7 => 1.26.1"
39473a9 fix #4343: integrity check for binary download
2025c9f publish 0.27.7 to npm
c6b586e fix typo in Makefile for @esbuild/win32-x64
Additional commits viewable in compare view

Updates globals from 17.2.0 to 17.5.0

Release notes

Sourced from globals's releases.

v17.5.0

Update globals (2026-04-12) (#342) 5d84602

sindresorhus/globals@v17.4.0...v17.5.0

v17.4.0

Update globals (2026-03-01) (#338) d43a051

sindresorhus/globals@v17.3.0...v17.4.0

v17.3.0

Update globals (2026-02-01) (#336) 295fba9

sindresorhus/globals@v17.2.0...v17.3.0

Commits

b8170c8 17.5.0
5d84602 Update globals (2026-04-12) (#342)
1b727e5 Fix build script for ES globals (#341)
a9cfd74 17.4.0
d43a051 Update globals (2026-03-01) (#338)
5edc602 17.3.0
295fba9 Update globals (2026-02-01) (#336)
See full diff in compare view

Updates sinon from 21.0.1 to 21.1.2

Changelog

Sourced from sinon's changelog.

21.1.2

53817f7d Upgrade to ESLint 10 and new shared config (#2696) (Carl-Erik Kopseng)

Upgrade to ESLint 10 and new shared config

Update deps

d7a682e0 fix: move npm-run-all to devDeps (#2694) (Avi Vahl)

used only during dev, and caused a considerable dep count jump downstream

5b8720ec use latest shared eslint-config (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-11.

21.1.1

3c8b023b Update deps (Carl-Erik Kopseng)

2eabf5da fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693) (Carl-Erik Kopseng)

fix(#2692): Remove ESM-only supports-color as it breaks CJS exports

Released by Carl-Erik Kopseng on 2026-04-10.

21.1.0

0a5526c5 updated deps (Carl-Erik Kopseng)

5262204f fix: build artifacts before running bundled tests (Carl-Erik Kopseng)

819bb64b Migration to ECMAScript modules (ESM) (#2683) (Carl-Erik Kopseng)

This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating ./lib

Modern ignores 😁

test: add distribution harness

test: verify packed cjs and esm entrypoints

test: lock distribution api manifest

test: smoke test built pkg artifacts

docs: require contract tests for package migration

test: guard esm migration regressions

docs: require contract gate for esm migration

build: generate cjs lib from esm source entries

refactor: port root api surface to esm

build: clean port of root api to esm

docs: include implementation plans

fix: align lint and smoke tests with esm migration

refactor: complete esm port of all core components

refactor: finalize esm migration with sandbox and naming fixes

fix: finish esm migration stabilization

... (truncated)

Commits

c9ee063 21.1.2
53817f7 Upgrade to ESLint 10 and new shared config (#2696)
d7a682e fix: move npm-run-all to devDeps (#2694)
5b8720e use latest shared eslint-config
40f9d6b 21.1.1
3c8b023 Update deps
2eabf5d fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693)
30cf67e 21.1.0
0a5526c updated deps
5262204 fix: build artifacts before running bundled tests
Additional commits viewable in compare view

Updates @types/sinon from 21.0.0 to 21.0.1

Commits

See full diff in compare view

Updates typescript-eslint from 8.54.0 to 8.58.2

Release notes

Sourced from typescript-eslint's releases.

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

❤️ Thank You

Abhijeet Singh @cseas

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

8.58.0 (2026-03-30)

🚀 Features

support TypeScript 6 (#12124)

🩹 Fixes

eslint-plugin: crash in no-unnecessary-type-arguments (#12163)

eslint-plugin: [no-extraneous-class] handle index signatures (#12142)

eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#12161)

❤️ Thank You

ej shafran @ej-shafran

Evyatar Daud @StyleShit

GG ZIBLAKING

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

❤️ Thank You

Abhijeet Singh @cseas

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.1 (2026-04-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.0 (2026-03-30)

🚀 Features

support TypeScript 6 (#12124)

❤️ Thank You

Evyatar Daud @StyleShit

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.2 (2026-03-23)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.1 (2026-03-16)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

... (truncated)

Commits

90c2803 chore(release): publish 8.58.2
b3315fd chore: convert import eslint to import js - followup (#12100)
be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
5311ed3 chore(release): publish 8.58.1
4933417 chore(release): publish 8.58.0
8cde2d0 feat: support TypeScript 6 (#12124)
be4d54d chore(release): publish 8.57.2
c7c38aa chore(release): publish 8.57.1
2c6aeee chore(release): publish 8.57.0
f696dad chore: use pnpm catalog (#12047)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ws](https://github.com/websockets/ws) | `8.19.0` | `8.20.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.1.0` | `25.6.0` | | [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.108.1` | `1.116.0` | | [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.7.1` | `3.9.1` | | [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.28.0` | | [globals](https://github.com/sindresorhus/globals) | `17.2.0` | `17.5.0` | | [sinon](https://github.com/sinonjs/sinon) | `21.0.1` | `21.1.2` | | [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `21.0.0` | `21.0.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.54.0` | `8.58.2` | Updates `ws` from 8.19.0 to 8.20.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.19.0...8.20.0) Updates `@types/node` from 25.1.0 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/vscode` from 1.108.1 to 1.116.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode) Updates `@vscode/vsce` from 3.7.1 to 3.9.1 - [Release notes](https://github.com/Microsoft/vsce/releases) - [Commits](microsoft/vscode-vsce@v3.7.1...v3.9.1) Updates `esbuild` from 0.27.2 to 0.28.0 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md) - [Commits](evanw/esbuild@v0.27.2...v0.28.0) Updates `globals` from 17.2.0 to 17.5.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.2.0...v17.5.0) Updates `sinon` from 21.0.1 to 21.1.2 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v21.0.1...v21.1.2) Updates `@types/sinon` from 21.0.0 to 21.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `typescript-eslint` from 8.54.0 to 8.58.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.2/packages/typescript-eslint) --- updated-dependencies: - dependency-name: ws dependency-version: 8.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/vscode" dependency-version: 1.116.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@vscode/vsce" dependency-version: 3.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: esbuild dependency-version: 0.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: globals dependency-version: 17.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sinon dependency-version: 21.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/sinon" dependency-version: 21.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.58.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-20T09:40:12Z

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

codecov · 2026-04-20T09:41:02Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the minor-and-patch group across 1 directory with 9 updates#13

deps: bump the minor-and-patch group across 1 directory with 9 updates#13
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/minor-and-patch-2df9068da9

dependabot Bot commented on behalf of github Apr 20, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 20, 2026

Uh oh!

codecov Bot commented Apr 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.20.0

Features

v3.9.1

Changes:

v3.9.1-0

Changes:

v3.9.0

Changes:

v3.8.2-1

Changes:

v3.8.2-0

Changes:

v3.8.1

Changes:

v0.28.0

v0.27.7

Changelog: 2025

v17.5.0

v17.4.0

v17.3.0

21.1.2

21.1.1

21.1.0

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

❤️ Thank You

v8.58.0

8.58.0 (2026-03-30)

🚀 Features

🩹 Fixes

❤️ Thank You

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

8.58.1 (2026-04-08)

8.58.0 (2026-03-30)

🚀 Features

❤️ Thank You

8.57.2 (2026-03-23)

8.57.1 (2026-03-16)

Uh oh!

dependabot Bot commented on behalf of github Apr 20, 2026

Labels

Uh oh!

codecov Bot commented Apr 20, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 20, 2026 •

edited

Loading