Skip to content

chore(deps): bump the npm-minor-patch group with 9 updates - #2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-3a85c89dfa
Closed

chore(deps): bump the npm-minor-patch group with 9 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-3a85c89dfa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 9 updates:

Package From To
@inquirer/prompts 8.5.0 8.5.2
@oclif/plugin-help 6.2.49 6.2.50
@oclif/plugin-plugins 5.4.69 5.4.72
js-yaml 4.1.1 4.2.0
tar 7.5.15 7.5.16
@vitest/coverage-v8 4.1.7 4.1.8
eslint 10.4.0 10.4.1
oclif 4.23.8 4.23.10
vitest 4.1.7 4.1.8

Updates @inquirer/prompts from 8.5.0 to 8.5.2

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.5.2

  • Fix security warnings in external-editor

@​inquirer/prompts@​8.5.1

  • Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.
  • Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.
Commits
  • bfd8710 chore: Publish new release
  • 55cc5f3 feat: add reusable package lint CLI
  • 3af9ed0 test(inquirer): capture prompt runner output
  • 4381857 fix(@​inquirer/input): remove stale lint suppression
  • 45df331 fix(@​inquirer/external-editor): harden editor temp files
  • adef323 chore: limit CI token permissions
  • b43359d chore: Publish new release
  • 24ecae2 chore: fix yarn.lock
  • b078d97 fix: validate package engine compatibility
  • 3a49f9f chore(deps-dev): Bump oxfmt in the formatting group (#2143)
  • Additional commits viewable in compare view

Updates @oclif/plugin-help from 6.2.49 to 6.2.50

Release notes

Sourced from @​oclif/plugin-help's releases.

6.2.50

Bug Fixes

  • deps: bump @​oclif/core from 4.11.3 to 4.11.4 (#1135) (197aa95)
Changelog

Sourced from @​oclif/plugin-help's changelog.

6.2.50 (2026-05-30)

Bug Fixes

  • deps: bump @​oclif/core from 4.11.3 to 4.11.4 (#1135) (197aa95)
Commits
  • d6fb5b1 chore(release): 6.2.50 [skip ci]
  • 197aa95 fix(deps): bump @​oclif/core from 4.11.3 to 4.11.4 (#1135)
  • 3631148 chore(dev-deps): bump oclif from 4.23.5 to 4.23.8 (#1133)
  • 0b2d865 chore(dev-deps): bump mocha from 11.7.5 to 11.7.6 (#1132)
  • 4660ad3 chore(dev-deps): bump eslint-config-oclif from 6.0.162 to 6.0.165 (#1129)
  • 8549a59 chore(dev-deps): bump oclif from 4.23.0 to 4.23.5 (#1130)
  • See full diff in compare view

Updates @oclif/plugin-plugins from 5.4.69 to 5.4.72

Release notes

Sourced from @​oclif/plugin-plugins's releases.

5.4.72

Bug Fixes

  • deps: bump @​oclif/core from 4.11.3 to 4.11.4 (#1330) (095dccf)

5.4.71

Bug Fixes

5.4.70

Bug Fixes

Changelog

Sourced from @​oclif/plugin-plugins's changelog.

5.4.72 (2026-05-31)

Bug Fixes

  • deps: bump @​oclif/core from 4.11.3 to 4.11.4 (#1330) (095dccf)

5.4.71 (2026-05-30)

Bug Fixes

5.4.70 (2026-05-30)

Bug Fixes

Commits
  • f49425a chore(release): 5.4.72 [skip ci]
  • 095dccf fix(deps): bump @​oclif/core from 4.11.3 to 4.11.4 (#1330)
  • 8b89483 chore(dev-deps): bump eslint-config-oclif from 6.0.165 to 6.0.166 (#1331)
  • ae22e01 chore(dev-deps): bump oclif from 4.23.7 to 4.23.8 (#1332)
  • 83cbc58 chore(release): 5.4.71 [skip ci]
  • a542f0c fix(deps): bump npm from 11.15.0 to 11.16.0 (#1333)
  • 014179d chore(release): 5.4.70 [skip ci]
  • aade472 fix(deps): bump semver from 7.8.0 to 7.8.1 (#1334)
  • 3b4a3f3 chore(dev-deps): bump oclif from 4.23.5 to 4.23.7 (#1326)
  • cdd11f9 chore(dev-deps): bump @​oclif/plugin-help from 6.2.48 to 6.2.49 (#1325)
  • Additional commits viewable in compare view

Updates js-yaml from 4.1.1 to 4.2.0

Changelog

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

  • Added docs/safety.md with notes about processing untrusted YAML.
  • Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.
  • Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.
  • Added sourcemaps to dist/ builds.

Changed

  • Stop resolving numbers with underscores as numeric scalars, #627.
  • Switched dev toolchains to Vite / neostandard.
  • Updated demo.
  • Reorganized tests.
  • dist/ files are no longer kept in the repository.

Fixed

  • Fix parsing of properties on the first implicit block mapping key, #62.
  • Fix trailing whitespace handling when folding flow scalar lines, #307.
  • Reject top-level block scalars without content indentation, #280.
  • Ensure numbers survive round-trip, #737.
  • Fix test coverage for issue #221.
  • Fix flow scalar trailing whitespace folding, #307.
  • Fix digits in YAML named tag handles.

Security

  • Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

  • Backported v4.1.1 fix to v3
Commits

Updates tar from 7.5.15 to 7.5.16

Commits

Updates @vitest/coverage-v8 from 4.1.7 to 4.1.8

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • See full diff in compare view

Updates eslint from 10.4.0 to 10.4.1

Release notes

Sourced from eslint's releases.

v10.4.1

Bug Fixes

  • e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)
  • d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)
  • f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)
  • c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)
  • 27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

  • 61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)
  • 305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)
  • 49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)
  • 9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)
  • c91b041 docs: Update README (GitHub Actions Bot)
  • e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

  • b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)
  • f78838b test: add CodePath type coverage (#20904) (Pixel998)
  • 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)
  • 002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)
  • 64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)
  • 6d7c832 chore: ignore fflate updates in renovate (#20908) (Pixel998)
  • b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#20889) (dependabot[bot])
  • a9b8d7f chore: increase maxBuffer for ecosystem tests (#20881) (sethamus)
  • b702ead chore: update ecosystem update PR settings (#20884) (Pixel998)
  • 507f60e chore: update ecosystem plugins (#20882) (ESLint Bot)
  • 92f5c5b test: add unit test for message-count (#20878) (kuldeep kumar)
  • df32108 chore: add @​eslint/markdown and typescript-eslint ecosystem tests (#20837) (sethamus)
  • 327f91d chore: use includeIgnoreFile internally (#20876) (Kirk Waiblinger)
  • f0dc4bd chore: pin fflate@0.8.2 (#20877) (Milos Djermanovic)
  • 0f4bd25 ci: run Discord alert for ecosystem test failures (#20873) (Copilot)
Commits
  • 4a3d15a 10.4.1
  • 43e7e2b Build: changelog update for 10.4.1
  • e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930)
  • b0e466b test: add data property to invalid tests cases for rules (#20924)
  • d4ce898 fix: propagate failures from delegated commands (#20917)
  • f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916)
  • f78838b test: add CodePath type coverage (#20904)
  • 61b0add docs: remove deprecated rule from related rules of max-params (#20921)
  • 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20...
  • 002942c ci: declare contents:read on update-readme workflow (#20919)
  • Additional commits viewable in compare view

Updates oclif from 4.23.8 to 4.23.10

Release notes

Sourced from oclif's releases.

4.23.10

Bug Fixes

  • deps: bump @​oclif/plugin-warn-if-update-available (363338e)

4.23.9

Bug Fixes

  • deps: bump @​oclif/core from 4.11.2 to 4.11.4 (5bd409b)
Changelog

Sourced from oclif's changelog.

4.23.10 (2026-05-31)

Bug Fixes

  • deps: bump @​oclif/plugin-warn-if-update-available (363338e)

4.23.9 (2026-05-31)

Bug Fixes

  • deps: bump @​oclif/core from 4.11.2 to 4.11.4 (5bd409b)
Commits
  • b4663ed chore(release): 4.23.10 [skip ci]
  • fe6301b Merge pull request #2032 from oclif/dependabot-npm_and_yarn-oclif-plugin-warn...
  • 363338e fix(deps): bump @​oclif/plugin-warn-if-update-available
  • d07f367 chore(release): 4.23.9 [skip ci]
  • e333142 Merge pull request #2036 from oclif/dependabot-npm_and_yarn-oclif-core-4.11.4
  • f7247bc Merge pull request #2037 from oclif/dependabot-npm_and_yarn-types-debug-4.1.13
  • 5bd409b fix(deps): bump @​oclif/core from 4.11.2 to 4.11.4
  • 5aa59cf Merge pull request #2038 from oclif/dependabot-npm_and_yarn-oclif-plugin-lega...
  • 1739562 chore(dev-deps): bump @​oclif/plugin-legacy from 2.0.32 to 2.0.33
  • 5f71a41 chore(dev-deps): bump @​types/debug from 4.1.12 to 4.1.13
  • See full diff in compare view

Updates vitest from 4.1.7 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.5.0` | `8.5.2` |
| [@oclif/plugin-help](https://github.com/oclif/plugin-help) | `6.2.49` | `6.2.50` |
| [@oclif/plugin-plugins](https://github.com/oclif/plugin-plugins) | `5.4.69` | `5.4.72` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.15` | `7.5.16` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.7` | `4.1.8` |
| [eslint](https://github.com/eslint/eslint) | `10.4.0` | `10.4.1` |
| [oclif](https://github.com/oclif/oclif) | `4.23.8` | `4.23.10` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.7` | `4.1.8` |


Updates `@inquirer/prompts` from 8.5.0 to 8.5.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.5.0...@inquirer/prompts@8.5.2)

Updates `@oclif/plugin-help` from 6.2.49 to 6.2.50
- [Release notes](https://github.com/oclif/plugin-help/releases)
- [Changelog](https://github.com/oclif/plugin-help/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-help@6.2.49...6.2.50)

Updates `@oclif/plugin-plugins` from 5.4.69 to 5.4.72
- [Release notes](https://github.com/oclif/plugin-plugins/releases)
- [Changelog](https://github.com/oclif/plugin-plugins/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-plugins@5.4.69...5.4.72)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `tar` from 7.5.15 to 7.5.16
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.15...v7.5.16)

Updates `@vitest/coverage-v8` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8)

Updates `eslint` from 10.4.0 to 10.4.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.0...v10.4.1)

Updates `oclif` from 4.23.8 to 4.23.10
- [Release notes](https://github.com/oclif/oclif/releases)
- [Changelog](https://github.com/oclif/oclif/blob/main/CHANGELOG.md)
- [Commits](oclif/oclif@4.23.8...4.23.10)

Updates `vitest` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

---
updated-dependencies:
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@oclif/plugin-help"
  dependency-version: 6.2.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@oclif/plugin-plugins"
  dependency-version: 5.4.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: tar
  dependency-version: 7.5.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: eslint
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: oclif
  dependency-version: 4.23.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 2, 2026
@wavyx

wavyx commented Jun 2, 2026

Copy link
Copy Markdown
Owner

Closing for now — branch predates the v0.8.0 / @wavyx scope rewrite (stale base). Dependabot will regenerate against current main on its next run.

@wavyx wavyx closed this Jun 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@wavyx
wavyx deleted the dependabot/npm_and_yarn/npm-minor-patch-3a85c89dfa branch June 2, 2026 07:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant