Skip to content

Bump the all-dependencies group across 2 directories with 7 updates#332

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-dependencies-1647aaf100
Open

Bump the all-dependencies group across 2 directories with 7 updates#332
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-dependencies-1647aaf100

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 1, 2026 •
edited
Loading

Bumps the all-dependencies group with 7 updates in the / directory:

Package From To
@rollup/plugin-commonjs 28.0.6 29.0.0
@typescript-eslint/eslint-plugin 8.47.0 8.51.0
@typescript-eslint/parser 8.47.0 8.51.0
esbuild 0.25.10 0.27.2
prettier 3.6.2 3.7.4
rollup 4.53.2 4.54.0
sass 1.94.1 1.97.1

Bumps the all-dependencies group with 2 updates in the /@stellar/design-system directory: @rollup/plugin-commonjs and esbuild.

Updates @rollup/plugin-commonjs from 28.0.6 to 29.0.0

Changelog

Sourced from @​rollup/plugin-commonjs's changelog.

v29.0.0

2025-10-30

Breaking Changes

  • feat!: revert #1909 and add requireNodeBuiltins option (#1937)

v28.0.9

2025-10-24

Bugfixes

  • fix: handle node: builtins with strictRequires: auto (#1930)

v28.0.8

2025-10-16

Bugfixes

  • fix: guard moduleSideEffects for wrapped externals (#1914)

v28.0.7

2025-10-14

Bugfixes

  • fix: avoid hoisting dynamically required node: builtins under strictRequires (#1909)
Commits
  • c8e78c8 chore(release): commonjs v29.0.0
  • d2b14ed feat(commonjs)!: revert #1909 and add requireNodeBuiltins option (#1937)
  • b079b59 chore(release): commonjs v28.0.9
  • 0881496 fix(commonjs): handle node: builtins with strictRequires: auto (#1930)
  • 232dcf8 chore(release): commonjs v28.0.8
  • 5a6175b fix(commonjs): guard moduleSideEffects for wrapped externals (#1914)
  • 1935e9e chore(release): commonjs v28.0.7
  • e80d4b2 fix(commonjs): avoid hoisting dynamically required node: builtins under stric...
  • 0862902 chore(repo): update commonjs comment to clarify top-level this rewrite (#1888)
  • See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.47.0 to 8.51.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: expose rule name via RuleModule interface (#11719)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)
  • eslint-plugin: add namespace to plugin meta (#11885)
  • tsconfig-utils: more informative error on parsing failures (#11888)

🩹 Fixes

  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

  • eslint-plugin: [method-signature-style] ignore methods that return this (#11813)
  • eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.50.0

8.50.0 (2025-12-15)

🚀 Features

  • eslint-plugin: [no-useless-default-assignment] add rule (#11720)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: add namespace to plugin meta (#11885)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)
  • eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.50.0 (2025-12-15)

🚀 Features

  • eslint-plugin: [no-useless-default-assignment] add rule (#11720)

❤️ Thank You

  • Josh Goldberg ✨
  • Ulrich Stark

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits
  • e4c57f5 chore(release): publish 8.51.0
  • c7b698b feat(eslint-plugin): add namespace to plugin meta (#11885)
  • 2b0d14b docs(eslint-plugin): [no-unsafe-return] added Limitations note (#11884)
  • 5612098 chore(eslint-plugin): default testing types to projectService, only (#11882)
  • 6e441a7 feat(eslint-plugin): [no-useless-default-assignment] fix some cases to option...
  • 7379004 fix(eslint-plugin): [prefer-optional-chain] handle MemberExpression in final ...
  • d9ba20d chore(website): replace cross-fetch and make-dir with Node.js built-ins (...
  • f7085c3 docs(eslint-plugin): [no-useless-default-assignment] mention .length in "when...
  • 7ee3522 fix(eslint-plugin): bump ts-api-utils to 2.2.0 (#11881)
  • e033d27 docs(eslint-plugin): [strict-boolean-expressions] mention @​eslint-react/no-le...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.47.0 to 8.51.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: expose rule name via RuleModule interface (#11719)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)
  • eslint-plugin: add namespace to plugin meta (#11885)
  • tsconfig-utils: more informative error on parsing failures (#11888)

🩹 Fixes

  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

  • eslint-plugin: [method-signature-style] ignore methods that return this (#11813)
  • eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.50.0

8.50.0 (2025-12-15)

🚀 Features

  • eslint-plugin: [no-useless-default-assignment] add rule (#11720)

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.51.0 (2025-12-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.0 (2025-12-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.49.0 (2025-12-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates esbuild from 0.25.10 to 0.27.2

Release notes

Sourced from esbuild's releases.

v0.27.2

  • Allow import path specifiers starting with #/ (#4361)

    Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

    This change was contributed by @​hybrist.

  • Automatically add the -webkit-mask prefix (#4357, #4358)

    This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

    /* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}

    This change was contributed by @​BPJEnnova.

  • Additional minification of switch statements (#4176, #4359)

    This release contains additional minification patterns for reducing switch statements. Here is an example:

    // Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}
// New output (with --minify)

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.2

  • Allow import path specifiers starting with #/ (#4361)

    Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

    This change was contributed by @​hybrist.

  • Automatically add the -webkit-mask prefix (#4357, #4358)

    This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

    /* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}

    This change was contributed by @​BPJEnnova.

  • Additional minification of switch statements (#4176, #4359)

    This release contains additional minification patterns for reducing switch statements. Here is an example:

    // Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}

... (truncated)

Commits
  • cd83297 publish 0.27.2 to npm
  • 2759721 additional tests for switch with break
  • fd2b4b3 update release notes
  • c8d93a7 fix #4357: -webkit- prefix for mask shorthand (#4358)
  • 92ff12c compat table: update @types/node
  • a35eceb compat table: fix a type error with the new types
  • f598984 fix make compat-table to install dependencies
  • f7f6df0 release notes for #4361
  • 6f8ec15 fix: allow subpath imports that start with #/ (#4361)
  • f7ae61f minify some switch statements to if-else statement
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.


Updates prettier from 3.6.2 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

🔗 Changelog

3.7.3

What's Changed

🔗 Changelog

3.7.2

What's Changed

🔗 Changelog

3.7.1

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.


Updates rollup from 4.53.2 to 4.54.0

Release notes

Sourced from rollup's releases.

v4.54.0

4.54.0

2025-12-20

Features

  • Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

  • Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)
  • Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

v4.53.5

4.53.5

2025-12-16

Bug Fixes

  • Fix wrong semicolon insertion position when using JSX (#6206)
  • Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

v4.53.4

4.53.4

2025-12-15

Bug Fixes

  • Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.54.0

2025-12-20

Features

  • Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

  • Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)
  • Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

4.53.5

2025-12-16

Bug Fixes

  • Fix wrong semicolon insertion position when using JSX (#6206)
  • Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

4.53.4

2025-12-15

Bug Fixes

  • Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

... (truncated)

Commits

Updates sass from 1.94.1 to 1.97.1

Release notes

Sourced from sass's releases.

Dart Sass 1.97.1

To install Sass 1.97.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug with the new CSS-style if() syntax where values would be evaluated even if their conditions didn't match.

See the full changelog for changes in earlier releases.

Dart Sass 1.97.0

To install Sass 1.97.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Add support for the display-p3-linear color space.

See the full changelog for changes in earlier releases.

Dart Sass 1.96.0

To install Sass 1.96.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Allow numbers with complex units (more than one numerator unit or more than zero denominator units) to be emitted to CSS. These are now emitted as calc() expressions, which now support complex units in plain CSS.

See the full changelog for changes in earlier releases.

Dart Sass 1.95.1

To install Sass 1.95.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.95.0

To install Sass 1.95.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.97.1

  • Fix a bug with the new CSS-style if() syntax where values would be evaluated even if their conditions didn't match.

1.97.0

  • Add support for the display-p3-linear color space.

1.96.0

  • Allow numbers with complex units (more than one numerator unit or more than zero denominator units) to be emitted to CSS. These are now emitted as calc() expressions, which now support complex units in plain CSS.

1.95.1

  • No user-visible changes.

1.95.0

  • Add support for the CSS-style if() function. In addition to supporting the plain CSS syntax, this also supports a sass() query that takes a Sass expression that evaluates to true or false at preprocessing time depending on whether the Sass value is truthy. If there are no plain-CSS queries, the function will return the first value whose query returns true during preprocessing. For example, if(sass(false): 1; sass(true): 2; else: 3) returns 2.

  • The old Sass if() syntax is now deprecated. Users are encouraged to migrate to the new CSS syntax. if($condition, $if-true, $if-false) can be changed to if(sass($condition): $if-true; else: $if-false).

    See the Sass website for details.

  • Plain-CSS if() functions are now considered "special numbers", meaning that they can be used in place of arguments to CSS color functions.

  • Plain-CSS if() functions and attr() functions are now considered "special variable strings" (like var()), meaning they can now be used in place of multiple arguments or syntax fragments in various CSS functions.

1.94.3

  • Fix the span reported for standalone % expressions followed by whitespace.

1.94.2

... (truncated)

Commits

Updates @rollup/plugin-commonjs from 28.0.6 to 29.0.0

Changelog

Sourced from @​rollup/plugin-commonjs's changelog.

v29.0.0

2025-10-30

Breaking Changes

  • feat!: revert #1909 and add requireNodeBuiltins option (#1937)

v28.0.9

2025-10-24

Bugfixes

  • fix: handle node: builtins with strictRequires: auto (#1930)

v28.0.8

2025-10-16

Bugfixes

  • fix: guard moduleSideEffects for wrapped externals (#1914)

v28.0.7

2025-10-14

Bugfixes

  • fix: avoid hoisting dynamically required node: builtins under strictRequires (#1909)
Commits
  • c8e78c8 chore(release): commonjs v29.0.0
  • d2b14ed feat(commonjs)!: revert #1909 and add requireNodeBuiltins option (#1937)
  • b079b59 chore(release): commonjs v28.0.9
  • 0881496 fix(commonjs): handle node: builtins with strictRequires: auto (#1930)
  • 232dcf8 chore(release): commonjs v28.0.8
  • 5a6175b fix(commonjs): guard moduleSideEffects for wrapped externals (#1914)
  • 1935e9e chore(release): commonjs v28.0.7
  • e80d4b2 fix(commonjs): avoid hoisting dynamically required node: builtins under stric...
  • 0862902 chore(repo): update commonjs comment to clarify top-level this rewrite (#1888)
  • See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.47.0 to 8.51.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: expose rule name via RuleModule interface (#11719)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)
  • eslint-plugin: add namespace to plugin meta (#11885)
  • tsconfig-utils: more informative error on parsing failures (#11888)

🩹 Fixes

  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

  • eslint-plugin: [method-signature-style] ignore methods that return this (#11813)
  • eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.50.0

8.50.0 (2025-12-15)

🚀 Features

  • eslint-plugin: [no-useless-default-assignment] add rule (#11720)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: add namespace to plugin meta (#11885)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)

❤️ Thank You

  • Josh Goldberg ✨
  • Kirk Waiblinger @​kirkwaiblinger
  • mdm317
  • Ulrich Stark
  • Yannick De...

    Description has been truncated

    Note
    Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies javascript Pull requests that update javascript code labels Jan 1, 2026
@socket-security
Copy link

socket-security bot commented Jan 1, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedesbuild@​0.25.10 ⏵ 0.27.2911007389100
Updated@​rollup/​plugin-commonjs@​28.0.6 ⏵ 29.0.099 +310010088100
Updatedrollup@​4.53.2 ⏵ 4.57.188 -310010099 +1100
Updatedprettier@​3.6.2 ⏵ 3.8.190 -310097 +197100
Updatedsass@​1.93.1 ⏵ 1.97.310010010095 -1100

View full report

@dependabot
Bump the all-dependencies group across 2 directories with 7 updates
64d4b4a 
Bumps the all-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `28.0.6` | `29.0.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.47.0` | `8.51.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.47.0` | `8.51.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.10` | `0.27.2` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` |
| [rollup](https://github.com/rollup/rollup) | `4.53.2` | `4.54.0` |
| [sass](https://github.com/sass/dart-sass) | `1.94.1` | `1.97.1` |

Bumps the all-dependencies group with 2 updates in the /@stellar/design-system directory: [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) and [esbuild](https://github.com/evanw/esbuild).


Updates `@rollup/plugin-commonjs` from 28.0.6 to 29.0.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.0/packages/commonjs)

Updates `@typescript-eslint/eslint-plugin` from 8.47.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.47.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/parser)

Updates `esbuild` from 0.25.10 to 0.27.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.10...v0.27.2)

Updates `prettier` from 3.6.2 to 3.7.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.4)

Updates `rollup` from 4.53.2 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.53.2...v4.54.0)

Updates `sass` from 1.94.1 to 1.97.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.94.1...1.97.1)

Updates `@rollup/plugin-commonjs` from 28.0.6 to 29.0.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.0/packages/commonjs)

Updates `@typescript-eslint/eslint-plugin` from 8.47.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.47.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/parser)

Updates `esbuild` from 0.25.10 to 0.27.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.10...v0.27.2)

Updates `prettier` from 3.6.2 to 3.7.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.4)

Updates `rollup` from 4.53.2 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.53.2...v4.54.0)

Updates `sass` from 1.94.1 to 1.97.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.94.1...1.97.1)

Updates `@rollup/plugin-commonjs` from 28.0.9 to 29.0.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.0/packages/commonjs)

Updates `esbuild` from 0.25.12 to 0.27.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.10...v0.27.2)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 29.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: esbuild
  dependency-version: 0.27.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: prettier
  dependency-version: 3.7.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: rollup
  dependency-version: 4.54.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sass
  dependency-version: 1.97.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 29.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: esbuild
  dependency-version: 0.27.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: prettier
  dependency-version: 3.7.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: rollup
  dependency-version: 4.54.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sass
  dependency-version: 1.97.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 29.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: esbuild
  dependency-version: 0.27.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/all-dependencies-1647aaf100 branch from a54f263 to 64d4b4a Compare February 1, 2026 19:38
Copilot AI review requested due to automatic review settings February 1, 2026 19:38
Copilot AI reviewed Feb 1, 2026
View reviewed changes
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@socket-security
Copy link

socket-security bot commented Feb 1, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
License policy violation: npm @esbuild/android-arm under BSD-3-Clause AND MIT

Location: Package overview

From: ? → npm/esbuild@0.27.2 → npm/@esbuild/android-arm@0.27.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@esbuild/android-arm@0.27.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm @esbuild/android-x64 under BSD-3-Clause AND MIT

Location: Package overview

From: ? → npm/esbuild@0.27.2 → npm/@esbuild/android-x64@0.27.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@esbuild/android-x64@0.27.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm @esbuild/openharmony-arm64 under BSD-3-Clause AND MIT

Location: Package overview

From: ? → npm/esbuild@0.27.2 → npm/@esbuild/openharmony-arm64@0.27.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@esbuild/openharmony-arm64@0.27.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm sass

Location: Package overview

From: @stellar/design-system/package.json → npm/sass@1.97.3

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/sass@1.97.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants