Skip to content

chore(deps): bump the dependencies group across 1 directory with 9 updates - #2411

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-dd73df349d
Open

chore(deps): bump the dependencies group across 1 directory with 9 updates#2411
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-dd73df349d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 9 updates in the / directory:

Package From To
memfs 4.68.2 4.76.0
schema-utils 4.3.3 4.4.0
@changesets/cli 3.0.1 3.0.2
@changesets/get-github-info 1.0.0 1.0.1
cspell 10.2.0 10.3.0
eslint-config-webpack 4.9.6 4.12.0
fastify 5.12.1 5.12.4
hono 4.13.5 4.13.7
lint-staged 17.4.1 17.5.1

Updates memfs from 4.68.2 to 4.76.0

Release notes

Sourced from memfs's releases.

Release v4.76.0

What's Changed

Full Changelog: streamich/memfs@v4.75.0...v4.76.0

Release v4.75.0

What's Changed

Full Changelog: streamich/memfs@v4.74.0...v4.75.0

Release v4.74.0

What's Changed

Full Changelog: streamich/memfs@v4.73.0...v4.74.0

Release v4.73.0

What's Changed

Full Changelog: streamich/memfs@v4.72.2...v4.73.0

Release v4.72.2

What's Changed

Full Changelog: streamich/memfs@v4.72.1...v4.72.2

Release v4.72.1

What's Changed

Full Changelog: streamich/memfs@v4.72.0...v4.72.1

Release v4.72.0

What's Changed

Full Changelog: streamich/memfs@v4.71.1...v4.72.0

Release v4.71.1

... (truncated)

Commits
  • c58675a chore: release v4.76.0
  • 2d1cf5c Merge pull request #1292 from streamich/opendir-dir
  • f91916c feat: 🎸 improve parentPath handling
  • 9a275e0 feat: 🎸 cleanup Dir implementation
  • 60b873c style: 💄 run formatter
  • 6bd861a feat: 🎸 improve Dir implementation
  • ae4aeb8 feat: 🎸 improve .opendir() semantics
  • 98d8165 feat: 🎸 set enumerable stream own properties on fs object
  • ee154d9 chore: release v4.75.0
  • 348a32e Merge pull request #1291 from streamich/dedupe-errors
  • Additional commits viewable in compare view

Updates schema-utils from 4.3.3 to 4.4.0

Release notes

Sourced from schema-utils's releases.

v4.4.0

Minor Changes

  • The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @​laymonage, @​alexander-akait in #222)

  • process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @​alexander-akait in #217)

  • At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @​alexander-akait in #217)

Patch Changes

  • read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @​alexander-akait in #225)

  • output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @​alexander-akait in #224)

  • Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @​alexander-akait in #221)

  • A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @​alexander-akait in #223)

  • Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @​alexander-akait in #217)

All notable changes to this project will be documented in this file.

4.3.3 (2025-10-02)

Bug Fixes

  • reexport ValidationErrorConfiguration type (#204) (49af922)

4.3.2 (2025-04-22)

Bug Fixes

4.3.1 (2025-04-22)

Bug Fixes

  • export Schema and additional schemas (#197) (f72cd60)
Changelog

Sourced from schema-utils's changelog.

4.4.0

Minor Changes

  • The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @​laymonage, @​alexander-akait in #222)

  • process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @​alexander-akait in #217)

  • At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @​alexander-akait in #217)

Patch Changes

  • read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @​alexander-akait in #225)

  • output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @​alexander-akait in #224)

  • Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @​alexander-akait in #221)

  • A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @​alexander-akait in #223)

  • Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @​alexander-akait in #217)

All notable changes to this project will be documented in this file.

Commits
  • b4fd660 chore(release): new release (#220)
  • 0f99aa9 feat: read the format keyword as part of the type (#225)
  • 4baf113 feat: output the type of object properties in error messages (#224)
  • 49bb7ce fix: say which strings an absolutePath keyword accepts (#223)
  • 5c21244 feat: allow file:// protocol prefix in absolute paths (#222)
  • fc918a9 chore: update dependencies (#221)
  • d72a15b chore: release with changesets (#219)
  • 1d0404e test: cover collecting a subtree of errors and grouping a nested anyOf (#218)
  • 17c4e3a fix: quadratic error filtering, dropped errors and validation performance (#217)
  • 2c0aedf ci: add nodejs v26 to ci (#216)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for schema-utils since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @changesets/cli from 3.0.1 to 3.0.2

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.2

Patch Changes

Changelog

Sourced from @​changesets/cli's changelog.

3.0.2

Patch Changes

Commits

Updates @changesets/get-github-info from 1.0.0 to 1.0.1

Release notes

Sourced from @​changesets/get-github-info's releases.

@​changesets/get-github-info@​1.0.1

Patch Changes

Changelog

Sourced from @​changesets/get-github-info's changelog.

1.0.1

Patch Changes

Commits

Updates cspell from 10.2.0 to 10.3.0

Release notes

Sourced from cspell's releases.

v10.3.0

Features

feat: Add an option to set the kind of dictionary file (#9178)

This pull request introduces support for the new kind property in dictionary definitions, enabling explicit specification of dictionary types such as words, flag-words, and ignore-words.

{
  "version": "0.2",
  "language": "en-US",
  "caseSensitive": false,
  "dictionaryDefinitions": [
    {
      "name": "forbidden-spelling",
      "path": "./forbidden-spelling.txt",
      "kind": "flag-words"
    }
  ],
  "dictionaries": ["forbidden-spelling"]
}

forbidden-spelling.txt

# Add forbidden words below.
# Words starting with `!` are exceptions.
# cspell:disable
english:English # Do not allow `english` and suggest `English`
!English # needed to allow `English`
!ENGLISH # needed to allow `ENGLISH`

forbidden_word # All variants of forbidden_word are not allowed.


Mixed case words:


cSpell # only cSpell is flagged. cspell will not be.

It updates the JSON schema, dictionary loading logic, and adds new APIs and tests to handle these kinds, including support for loading forbidden (flag) words from trie files.

Schema and API Enhancements:

  • Added a kind property to dictionary definitions in the cspell.schema.json schema, allowing configuration of dictionary type as words, flag-words, or ignore-words [1] [2] [3] [4] [5].
  • Updated the internal dictionary settings and loader logic to recognize and handle the new kind property, ensuring correct dictionary instantiation based on its value [1] [2] [3] [4].

Flag Words Dictionary Support:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.3.0 (2026-09-08)

Features

feat: Add an option to set the kind of dictionary file (#9178)

This pull request introduces support for the new kind property in dictionary definitions, enabling explicit specification of dictionary types such as words, flag-words, and ignore-words.

{
  "version": "0.2",
  "language": "en-US",
  "caseSensitive": false,
  "dictionaryDefinitions": [
    {
      "name": "forbidden-spelling",
      "path": "./forbidden-spelling.txt",
      "kind": "flag-words"
    }
  ],
  "dictionaries": ["forbidden-spelling"]
}

forbidden-spelling.txt

# Add forbidden words below.
# Words starting with `!` are exceptions.
# cspell:disable
english:English # Do not allow `english` and suggest `English`
!English # needed to allow `English`
!ENGLISH # needed to allow `ENGLISH`

forbidden_word # All variants of forbidden_word are not allowed.


Mixed case words:


cSpell # only cSpell is flagged. cspell will not be.

It updates the JSON schema, dictionary loading logic, and adds new APIs and tests to handle these kinds, including support for loading forbidden (flag) words from trie files.

Schema and API Enhancements:

  • Added a kind property to dictionary definitions in the cspell.schema.json schema, allowing configuration of dictionary type as words, flag-words, or ignore-words [1] [2] [3] [4] [5].
  • Updated the internal dictionary settings and loader logic to recognize and handle the new kind property, ensuring correct dictionary instantiation based on its value [1] [2] [3] [4].

... (truncated)

Commits

Updates eslint-config-webpack from 4.9.6 to 4.12.0

Release notes

Sourced from eslint-config-webpack's releases.

v4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

v4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

v4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Changelog

Sourced from eslint-config-webpack's changelog.

4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Commits
  • ca0f2f0 chore(release): new release (#199)
  • 39ed6b3 feat(webpack): add inherit-jsdoc rule with auto-fix (#198)
  • a213c2c chore: support JSDoc imports (#187)
  • bf26286 chore(release): new release (#197)
  • 00bec6e fix(ci): upgrade changesets to v3 for the v2 action (#196)
  • 67a4786 feat(webpack): add format-schema rule with auto-fix (#195)
  • 8d8ba61 chore(deps-dev): bump js-yaml from 3.15.1 to 3.15.2 (#194)
  • ca44e9c chore(deps): bump browserslist from 4.28.1 to 4.28.9 (#190)
  • cd9b1c3 chore(deps): bump @​humanfs/node from 0.16.7 to 0.16.8 (#188)
  • c2c2582 chore(deps): bump the dependencies group across 1 directory with 2 updates (#...
  • Additional commits viewable in compare view

Updates fastify from 5.12.1 to 5.12.4

Release notes

Sourced from fastify's releases.

v5.12.4

Fixed the fastify.js version mismatch.

Full Changelog: fastify/fastify@v5.12.2...v5.12.4

v5.12.2

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

Commits
  • 1690e35 Bumped v5.12.4
  • 1c991c4 Bumped v5.12.3
  • 942a2be Bumped v5.12.2
  • 853f6e2 test(validation): cover normalization and async branches
  • f02d8d4 fix(validation): do not unwrap async validator results
  • 93c239a fix: reject malformed URLs before custom 404 handlers
  • 7de6e81 fix(validation): compile boolean false request schemas
  • 179619c fix(validation): normalize header names in every schema subschema
  • dd2ba36 [Backport 5.x] chore: npm ignore remaining agent files (#7003)
  • e305d84 [Backport 5.x] fix: callNotFound should run not-found preHandler regardless o...
  • See full diff in compare view

Updates hono from 4.13.5 to 4.13.7

Release notes

Sourced from hono's releases.

v4.13.7

Security fixes

This release includes a fix for the following security issue:

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv

Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.

v4.13.6

What's Changed

Full Changelog: honojs/hono@v4.13.5...v4.13.6

Commits

Updates lint-staged from 17.4.1 to 17.5.1

Release notes

Sourced from lint-staged's releases.

v17.5.1

Patch Changes

  • #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

    A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

v17.5.0

Minor Changes

  • #1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

  • #1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

  • #1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

  • #1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Changelog

Sourced from lint-staged's changelog.

17.5.1

Patch Changes

  • #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

    A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

17.5.0

Minor Changes

  • #1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

  • #1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

  • #1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

  • #1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Commits
  • f8b1ab1 Merge pull request #1853 from lint-staged/changeset-release/main
  • 3b54961 chore(changeset): release
  • 09317ff Merge pull request #1852 from lint-staged/fix-ambient-declaration
  • bfcca94 fix: change defineConfig signature from const to a function
  • dcb59f6 Merge pull request #1846 from lint-staged/changeset-release/main
  • 9c8c6dc chore(changeset): release
  • 586466f Merge pull request #1849 from lint-staged/improve-intent-to-add
  • 45eda5f refactor: improve --intent-to-add detection
  • 26372e3 Merge pull request #1848 from lint-staged/fix-color-detection
  • d718ccc fix: honor FORCE_COLOR/NO_COLOR env variables in non-TTY streams
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the dependencies group across 1 directory with 9 up…
b55a118 
…dates

Bumps the dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [memfs](https://github.com/streamich/memfs) | `4.68.2` | `4.76.0` |
| [schema-utils](https://github.com/webpack/schema-utils) | `4.3.3` | `4.4.0` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.2` |
| [@changesets/get-github-info](https://github.com/changesets/changesets/tree/HEAD/packages/get-github-info) | `1.0.0` | `1.0.1` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.2.0` | `10.3.0` |
| [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack) | `4.9.6` | `4.12.0` |
| [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.4` |
| [hono](https://github.com/honojs/hono) | `4.13.5` | `4.13.7` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.5.1` |



Updates `memfs` from 4.68.2 to 4.76.0
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.68.2...v4.76.0)

Updates `schema-utils` from 4.3.3 to 4.4.0
- [Release notes](https://github.com/webpack/schema-utils/releases)
- [Changelog](https://github.com/webpack/schema-utils/blob/main/CHANGELOG.md)
- [Commits](webpack/schema-utils@v4.3.3...v4.4.0)

Updates `@changesets/cli` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.2/packages/cli)

Updates `@changesets/get-github-info` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/get-github-info/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/get-github-info@1.0.1/packages/get-github-info)

Updates `cspell` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.0/packages/cspell)

Updates `eslint-config-webpack` from 4.9.6 to 4.12.0
- [Release notes](https://github.com/webpack/eslint-config-webpack/releases)
- [Changelog](https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/eslint-config-webpack@v4.9.6...v4.12.0)

Updates `fastify` from 5.12.1 to 5.12.4
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.1...v5.12.4)

Updates `hono` from 4.13.5 to 4.13.7
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.5...v4.13.7)

Updates `lint-staged` from 17.4.1 to 17.5.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.4.1...v17.5.1)

---
updated-dependencies:
- dependency-name: memfs
  dependency-version: 4.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: schema-utils
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@changesets/get-github-info"
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cspell
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-config-webpack
  dependency-version: 4.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: fastify
  dependency-version: 5.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: hono
  dependency-version: 4.13.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: lint-staged
  dependency-version: 17.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 16, 2026
@changeset-bot

changeset-bot Bot commented Sep 16, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: b55a118

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) September 16, 2026 10:34
@socket-security

socket-security Bot commented Sep 16, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​changesets/​cli@​3.0.1 ⏵ 3.0.2991007495 -1100
Updated@​changesets/​get-github-info@​1.0.0 ⏵ 1.0.1100 +110090 +193 +3100
Updatedschema-utils@​4.3.3 ⏵ 4.4.099 +110010091 -2100
Updatedeslint-config-webpack@​4.9.6 ⏵ 4.12.091 +3100100 +1598 +3100
Updatedmemfs@​4.68.2 ⏵ 4.76.098 +110093 +196 +2100
Updatedcspell@​10.2.0 ⏵ 10.3.098 +110010096 +1100
Updatedhono@​4.13.5 ⏵ 4.13.7100 +110097 +196100
Updatedlint-staged@​17.4.1 ⏵ 17.5.110010010097 +1100
Updatedfastify@​5.12.1 ⏵ 5.12.49810010098100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webpack webpack[bot] webpack[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants