chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #33 · Karelaking/fack-api

dependabot · 2026-09-07T00:57:55Z

Bumps the dev-dependencies group with 6 updates in the / directory:

Package	From	To
@commitlint/cli	`21.2.1`	`21.2.2`
@commitlint/config-conventional	`21.2.0`	`21.2.2`
@types/node	`26.1.1`	`26.4.1`
eslint-config-next	`16.2.12`	`16.3.4`
lint-staged	`17.2.0`	`17.4.1`
semantic-release	`25.0.8`	`25.0.9`

Updates @commitlint/cli from 21.2.1 to 21.2.2

Release notes

Sourced from @commitlint/cli's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517

fix(container): resolve packages from TypeScript configs by @Guflly in conventional-changelog/commitlint#4914

fix(resolve-extends): support Yarn Plug'n'Play by @Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

docs: fix typos in comments and JSDoc by @maxtaran2010 in conventional-changelog/commitlint#4880

docs: fix Deno setup without package.json by @awnoa in conventional-changelog/commitlint#4896

chore: repair broken lockfile from #4939 and add merge queue CI support by @escapedcat in conventional-changelog/commitlint#4941

docs(config-conventional): document rules that go beyond the spec by @escapedcat in conventional-changelog/commitlint#4910

New Contributors

@maxtaran2010 made their first contribution in conventional-changelog/commitlint#4880

@awnoa made their first contribution in conventional-changelog/commitlint#4896

@Guflly made their first contribution in conventional-changelog/commitlint#4914

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

Changelog

Sourced from @commitlint/cli's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @commitlint/cli

Commits

d00d190 v21.2.2
f2e8dae chore: update dependency typescript to v7 (#4886)
5769d9f docs: fix typos in comments and JSDoc (#4880)
See full diff in compare view

Updates @commitlint/config-conventional from 21.2.0 to 21.2.2

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517

fix(container): resolve packages from TypeScript configs by @Guflly in conventional-changelog/commitlint#4914

fix(resolve-extends): support Yarn Plug'n'Play by @Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

docs: fix typos in comments and JSDoc by @maxtaran2010 in conventional-changelog/commitlint#4880

docs: fix Deno setup without package.json by @awnoa in conventional-changelog/commitlint#4896

chore: repair broken lockfile from #4939 and add merge queue CI support by @escapedcat in conventional-changelog/commitlint#4941

docs(config-conventional): document rules that go beyond the spec by @escapedcat in conventional-changelog/commitlint#4910

New Contributors

@maxtaran2010 made their first contribution in conventional-changelog/commitlint#4880

@awnoa made their first contribution in conventional-changelog/commitlint#4896

@Guflly made their first contribution in conventional-changelog/commitlint#4914

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

v21.2.1

21.2.0 (2026-06-30)

Features

resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

Chore, doc, etc.

chore(read): replace deprecated git-raw-commits with git-client by @igordanchenko in conventional-changelog/commitlint#4860

docs(issue-template): ask for package manager and version by @escapedcat in conventional-changelog/commitlint#4867

New Contributors

@igordanchenko made their first contribution in conventional-changelog/commitlint#4860

Full Changelog: conventional-changelog/commitlint@v21.2.0...v21.2.1

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @commitlint/config-conventional

Commits

d00d190 v21.2.2
3146d04 docs(config-conventional): document rules that go beyond the spec (#4910)
f2e8dae chore: update dependency typescript to v7 (#4886)
See full diff in compare view

Updates @types/node from 26.1.1 to 26.4.1

Commits

See full diff in compare view

Updates eslint-config-next from 16.2.12 to 16.3.4

Release notes

Sourced from eslint-config-next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

... (truncated)

Commits

299180d v16.3.4
a9a1cb7 v16.3.3
d0ac882 v16.3.2
3d32eb8 v16.3.1
d73f562 v16.3.0
4fd843f v16.3.0-canary.107
9480f7f v16.3.0-canary.106
a8dcd25 v16.3.0-canary.105
38f0cde v16.3.0-canary.104
f3edea1 v16.3.0-canary.103
Additional commits viewable in compare view

Updates lint-staged from 17.2.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

#1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes
#1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:
// lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})
#1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.
Patch Changes

#1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

#1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

v17.3.0

Minor Changes
#1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:
{
  "*.ts": ["first", "second", ["third", "third"], "fourth"]
}
As a concrete example, lint-staged's own configuration is:
/** @type {import('./lib/index.js').Configuration} */
export default {
  "*": [

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

#1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes
#1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:
// lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})
#1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.
Patch Changes

#1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

#1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

17.3.0

Minor Changes
#1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:
{
  "*.ts": ["first", "second", ["third", "third"], "fourth"]
}
As a concrete example, lint-staged's own configuration is:
/** @type {import('./lib/index.js').Configuration} */
export default {
  '*': [

... (truncated)

Commits

d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
f061335 chore(changeset): release
d2721af Merge pull request #1840 from lint-staged/updates
efe5b63 ci: update Changesets action because it failed to publish
cd76ce3 build: update dependencies
ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
a6a0d61 chore(changeset): release
0a09098 Merge pull request #1832 from lint-staged/add-all-flag
7fd685b fix: further fix parsing options logic
510a27c feat: add --all flag for including all files tracked by Git instead of just...
Additional commits viewable in compare view

Updates semantic-release from 25.0.8 to 25.0.9

Release notes

Sourced from semantic-release's releases.

v25.0.9

25.0.9 (2026-08-05)

Bug Fixes

do not expose the authenticated repository URL in EGITNOPERMISSION errors (#4283) (8d905a5)

Commits

8d905a5 fix: do not expose the authenticated repository URL in EGITNOPERMISSION error...
e176eb7 ci(action): update github/codeql-action action to v4.37.6 (#4282)
d27db1b chore(deps): update dependency js-yaml to v4.3.1 (#4279)
55beeac ci(action): update github/codeql-action action to v4.37.5 (#4277)
7bf348d chore(deps): update dependency nock to v14.0.17 (#4275)
2ec3ba2 chore(deps): update dependency mockserver-client to v7.5.0 (#4274)
d3b7724 chore(deps): update npm to v12.0.2 (#4273)
514dc5f chore(deps): update dependency npm-run-all2 to v9.0.3 (#4271)
f25b716 ci(action): update github/codeql-action action to v4.37.4 (#4270)
1114416 chore: remove 'next version' badge from README (#4265)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 6 updates Bumps the dev-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.1` | `21.2.2` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.0` | `21.2.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.4.1` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.12` | `16.3.4` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.2.0` | `17.4.1` | | [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.8` | `25.0.9` | Updates `@commitlint/cli` from 21.2.1 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.0 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/config-conventional) Updates `@types/node` from 26.1.1 to 26.4.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-config-next` from 16.2.12 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.4/packages/eslint-config-next) Updates `lint-staged` from 17.2.0 to 17.4.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.2.0...v17.4.1) Updates `semantic-release` from 25.0.8 to 25.0.9 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v25.0.8...v25.0.9) --- updated-dependencies: - dependency-name: "@commitlint/cli" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 26.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: eslint-config-next dependency-version: 16.3.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: lint-staged dependency-version: 17.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: semantic-release dependency-version: 25.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-07T00:57:56Z

Labels

The following labels could not be found: pnpm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-09-07T00:57:57Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
fack-api	Ready	Preview	Sep 7, 2026 12:59am UTC

codecov-commenter · 2026-09-07T00:59:11Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

dependabot · 2026-09-07T10:38:07Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot Bot added the dependencies label Sep 7, 2026

vercel Bot deployed to Preview September 7, 2026 00:59 View deployment

Navigation Menu

Uh oh!

chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates - #33

chore(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates#33
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-ab6e0b2e76

dependabot Bot commented on behalf of github Sep 7, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

vercel Bot commented Sep 7, 2026 •

edited

Loading

Uh oh!

codecov-commenter commented Sep 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

21.2.2 (2026-08-13)

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

v21.2.1

21.2.0 (2026-06-30)

Features

Chore, doc, etc.

New Contributors

21.2.2 (2026-08-13)

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

v17.4.1

17.4.1

Patch Changes

17.4.0

Minor Changes

Patch Changes

v17.3.0

Minor Changes

17.4.1

Patch Changes

17.4.0

Minor Changes

Patch Changes

17.3.0

Minor Changes

v25.0.9

25.0.9 (2026-08-05)

Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Labels

Uh oh!

vercel Bot commented Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov-commenter commented Sep 7, 2026

Codecov Report

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 7, 2026 •

edited

Loading

vercel Bot commented Sep 7, 2026 •

edited

Loading