Skip to content

build(deps-dev): bump the npm-development-minor-patch group with 5 updates - #330

Merged
cursor[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-development-minor-patch-14349c774f
Sep 3, 2026
Merged

build(deps-dev): bump the npm-development-minor-patch group with 5 updates#330
cursor[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-development-minor-patch-14349c774f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-development-minor-patch group with 5 updates:

Package From To
eslint-plugin-obsidianmd 0.4.1 0.4.2
oxfmt 0.64.0 0.65.0
oxlint 1.79.0 1.80.0
svelte 5.56.9 5.56.10
wrangler 4.124.0 4.127.0

Updates eslint-plugin-obsidianmd from 0.4.1 to 0.4.2

Release notes

Sourced from eslint-plugin-obsidianmd's releases.

0.4.2

New features

  • ruleConfigs export: The plugin now exports ruleConfigs.recommended and ruleConfigs.recommendedTypeChecked, which are the obsidianmd rule severity presets as plain rule objects. These can be spread into a rules block for users who want to use obsidianmd rules with their own ESLint and typescript-eslint setup, without using the full recommended config.

Documentation

  • New configuration guide covering:
    • Why parserOptions is required and how to set it up
    • What the recommended config includes
    • Using the plugin alongside stricter typescript-eslint configs
    • Using only obsidianmd rules without the recommended config
    • Disabling rules for specific files (including bulk-disable via ruleConfigs)
    • Common errors and how to fix them
    • Community plugin scanner configuration, ignore patterns, and a full scanner-equivalent config example
  • Updated README examples to use projectService with allowDefaultProject (the modern typescript-eslint approach), replacing the older parser + project pattern. This fixes the common "requires type information" error when linting eslint.config.mts.
  • Removed legacy .eslintrc documentation — the plugin requires ESLint ≥9.19.0, so legacy config examples were misleading.

Full Changelog: obsidianmd/eslint-plugin@0.4.1...0.4.2

Commits

Updates oxfmt from 0.64.0 to 0.65.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

Updates oxlint from 1.79.0 to 1.80.0

Release notes

Sourced from oxlint's releases.

oxlint v1.80.0 & oxfmt v0.65.0

Table of Contents

Oxlint v1.80.0

🚀 Features

  • 70c3e35 linter/typescript/no-confusing-non-null-assertion: Implement suggestion (#26012) (Mikhail Baev)

🐛 Bug Fixes

  • 17ae11c linter/oxc/double-comparisons: Handle grouped logical expressions (#26044) (camc314)
  • 8a353a7 linter/eslint/no-control-regex: Refine help message text (#25996) (Rahul Mishra)
  • 8a9bdbd estree: Include decorators in FormalParameterRest spans (#26021) (camc314)
  • 8d94cd1 linter/eslint/no-useless-rename: Preserve type modifiers (#26020) (Cameron)
  • 2cde1f6 rust: Address nightly deprecations (#25998) (Boshen)
  • 51d36d7 linter/vue: Resolve vue imports via shared import helpers (#25903) (Connor Shea)
  • 83a68d2 linter/react/no-react-children: Resolve react imports by symbol (#25901) (Connor Shea)
  • 124e196 linter: Resolve globals by reference, not by name (#25905) (Connor Shea)
  • a701bcc linter: Remove invalid React compiler doc links (#25900) (Boshen)

📚 Documentation

  • 9b7e153 linter: Set version to 1.79.0 for rules shipped in 1.79.0 (#25902) (connorshea)

Oxfmt v0.65.0

🐛 Bug Fixes

  • bf37dd5 formatter: Preserve class decorators before export when the statement is suppressed (#26034) (leaysgur)
Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[1.81.0] - 2026-08-31

📚 Documentation

  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)
Commits

Updates svelte from 5.56.9 to 5.56.10

Release notes

Sourced from svelte's releases.

svelte@5.56.10

Patch Changes

  • fix: preserve CSS escape sequences when printing selectors (#18667)

  • fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

  • fix: transform expressions inside labeled statements during server compilation (#18617)

  • docs: clarify that context lookup includes the current component and all ancestors (#18581)

  • fix: apply CSS custom properties with falsy values on components (#18634)

  • fix: correctly print {#await ... catch x} et al (#18645)

  • fix: ignore comments of Program node during migration script (#18656)

  • fix: reliably resolve append_style to its correct root (#18614)

  • fix: clean up removed capture event handlers from spread attributes (#18618)

  • fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

  • fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

  • fix: give effect teardowns the value from before the first write in a flush (#18620)

  • fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

  • fix: preserve namespaces in CSS type selectors (#18678)

  • fix: increment private state fields through a non-this receiver (#18622)

  • chore: deduplicate client and server context helpers (#18580)

  • fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

  • fix: allow custom elements to receive async values as props (#18661)

  • fix: strip comments from inline style values in linear time (#18553)

  • fix: prevent declaration comments from breaking server derived references (#18641)

  • perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

  • fix: preserve short-circuiting for logical assignments to private state fields (#18594)

Changelog

Sourced from svelte's changelog.

5.56.10

Patch Changes

  • fix: preserve CSS escape sequences when printing selectors (#18667)

  • fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

  • fix: transform expressions inside labeled statements during server compilation (#18617)

  • docs: clarify that context lookup includes the current component and all ancestors (#18581)

  • fix: apply CSS custom properties with falsy values on components (#18634)

  • fix: correctly print {#await ... catch x} et al (#18645)

  • fix: ignore comments of Program node during migration script (#18656)

  • fix: reliably resolve append_style to its correct root (#18614)

  • fix: clean up removed capture event handlers from spread attributes (#18618)

  • fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

  • fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

  • fix: give effect teardowns the value from before the first write in a flush (#18620)

  • fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

  • fix: preserve namespaces in CSS type selectors (#18678)

  • fix: increment private state fields through a non-this receiver (#18622)

  • chore: deduplicate client and server context helpers (#18580)

  • fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

  • fix: allow custom elements to receive async values as props (#18661)

  • fix: strip comments from inline style values in linear time (#18553)

  • fix: prevent declaration comments from breaking server derived references (#18641)

  • perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

  • fix: preserve short-circuiting for logical assignments to private state fields (#18594)

Commits
  • 56a036f Version Packages (#18640)
  • 545205b perf: make async blocker analysis linear (#18549)
  • 950e2a8 fix: strip comments from inline style values in linear time (#18553)
  • ffc0e6e fix: release last_propagated_event after event propagation settles (#18569)
  • 2f684fe docs: clarify that context lookup includes the current component and all ance...
  • 3feb34a chore: deduplicate client/server context helpers (#18580)
  • 24130c1 fix: parse nth-child of syntax without whitespace after of (#18611)
  • a166761 fix: treat concise arrow function bodies as implicit returns when calculating...
  • a4c60cc fix: append_styles resolving to document.head in WC (#18614)
  • ee1249b fix: preserve renderer type in copy() during SSR (#18616)
  • Additional commits viewable in compare view

Updates wrangler from 4.124.0 to 4.127.0

Release notes

Sourced from wrangler's releases.

wrangler@4.127.0

Minor Changes

  • #15356 fe265f8 Thanks @​rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

    The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.

    {
      "workflows": [
        {
          "binding": "MY_WORKFLOW",
          "name": "my-workflow",
          "class_name": "MyWorkflow",
          "concurrency": { "limit": 10 }
        }
      ]
    }

Patch Changes

  • #15367 412c79e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20260825.1 ^5.20260826.1
    workerd 1.20260825.1 1.20260826.1
  • #15375 92874f6 Thanks @​WillTaylorDev! - Upload wrangler preview modules as multipart form data

    wrangler preview used to base64 the bundle, its modules, and any sourcemaps into a single JSON request body. Base64 inflates content by a third, so a Worker with a large sourcemap could exceed the API request size limit and fail to deploy.

    The preview deployment request is now multipart/form-data. The deployment settings travel in a metadata part and each module follows as its own part carrying raw bytes, matching how wrangler deploy already uploads a Worker.

  • Updated dependencies [412c79e]:

wrangler@4.126.0

Minor Changes

  • #15332 d1cc3af Thanks @​pombosilva! - Add default_retention to Workflow bindings for configuring how long instances are retained

    Workflow instances are retained for an account-wide default period after they finish. You can now set a per-Workflow default in your Wrangler configuration, applied to instances that do not specify their own retention:

    {
      "workflows": [

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the npm-development-minor-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [eslint-plugin-obsidianmd](https://github.com/obsidianmd/eslint-plugin) | `0.4.1` | `0.4.2` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.64.0` | `0.65.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.79.0` | `1.80.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.9` | `5.56.10` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.124.0` | `4.127.0` |


Updates `eslint-plugin-obsidianmd` from 0.4.1 to 0.4.2
- [Release notes](https://github.com/obsidianmd/eslint-plugin/releases)
- [Commits](obsidianmd/eslint-plugin@0.4.1...0.4.2)

Updates `oxfmt` from 0.64.0 to 0.65.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt)

Updates `oxlint` from 1.79.0 to 1.80.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint)

Updates `svelte` from 5.56.9 to 5.56.10
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.10/packages/svelte)

Updates `wrangler` from 4.124.0 to 4.127.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.127.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: eslint-plugin-obsidianmd
  dependency-version: 0.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development-minor-patch
- dependency-name: oxfmt
  dependency-version: 0.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development-minor-patch
- dependency-name: oxlint
  dependency-version: 1.80.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development-minor-patch
- dependency-name: svelte
  dependency-version: 5.56.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development-minor-patch
- dependency-name: wrangler
  dependency-version: 4.127.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 3, 2026

Copy link
Copy Markdown

Deploying podnotes with  Cloudflare Pages  Cloudflare Pages

Latest commit: 59c0300
Status: ✅  Deploy successful!
Preview URL: https://116709e9.podnotes.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-npm-e6q9.podnotes.pages.dev

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot development-deps group bump looks good. Diff is limited to package.json + package-lock.json, changelogs have no breaking lint/runtime surface for this repo, and all required gates are green.

Updates

  • eslint-plugin-obsidianmd 0.4.1 → 0.4.2 — additive ruleConfigs export and docs. .oxlintrc.json still uses a hand-picked jsPlugins subset, so no new rules activate.
  • oxfmt 0.64.0 → 0.65.0 — formatter bugfix (class decorators before export). format:check still clean on 232 files.
  • oxlint 1.79.0 → 1.80.0 — suggestion + lint bugfixes. oxlint --deny-warnings still clean.
  • svelte 5.56.9 → 5.56.10 — patch-only compile/CSS/runtime bugfixes. This can affect compiled UI and svelte/store helpers already in build/main.js; svelte-check (0 errors/warnings) and the component test suite passed.
  • wrangler 4.124.0 → 4.127.0 — docs pages deploy CLI only. No advertised break for that path; the 4.128 binding-utils break is not in this PR.

Release impact
Title is build(deps-dev):, so this will not cut a plugin release.

Verification

  • npm ci with Node 22.22.2 (satisfies engines) did not rewrite the lockfile.
  • npm audit and npm audit --omit=dev: 0 vulnerabilities.
  • Local: lint, format:check, typecheck, build, svelte-check, test — 78 files / 1152 tests passed.
  • GitHub Test workflow: success. Cloudflare Pages: success. CodeQL: neutral/skipped.

No regressions found. Approving and squash-merging.

Open in Web View Automation 

Sent by Cursor Automation: Dependabot PRs

@cursor
cursor Bot merged commit df77ebb into master Sep 3, 2026
4 checks passed
@cursor
cursor Bot deleted the dependabot/npm_and_yarn/npm-development-minor-patch-14349c774f branch September 3, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants