Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 8 updates#771

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-b87e824296
Open

chore(deps-dev): bump the development-dependencies group across 1 directory with 8 updates#771
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-b87e824296

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 8 updates in the / directory:

Package From To
@changesets/changelog-github 0.6.0 0.7.0
@changesets/cli 2.30.0 2.31.0
@stylistic/stylelint-plugin 5.1.0 5.2.0
@types/node 25.5.2 25.9.3
eslint-plugin-jsdoc 62.9.0 63.0.2
pkg-ok 3.0.0 4.0.0
stylelint 17.6.0 17.13.0
undici 8.0.2 8.4.1

Updates @changesets/changelog-github from 0.6.0 to 0.7.0

Release notes

Sourced from @​changesets/changelog-github's releases.

@​changesets/changelog-github@​0.7.0

Minor Changes

Commits

Updates @changesets/cli from 2.30.0 to 2.31.0

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.0

Minor Changes

  • #1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

  • #1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

  • d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

  • #1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

  • #1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

  • #1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

  • Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

    • @​changesets/assemble-release-plan@​6.0.10
    • @​changesets/get-dependents-graph@​2.1.4
    • @​changesets/apply-release-plan@​7.1.1
    • @​changesets/get-release-plan@​4.0.16
    • @​changesets/config@​3.1.4
Commits
  • 9cce6db Version Packages (#1897)
  • d2121dc Fix npm auth for path-based registries during publish by preserving configure...
  • 036fdd4 Fix several changeset version issues with workspace protocol dependencies (...
  • 5c4731f Gracefully handle stale npm info data leading to duplicate publish attempts...
  • 96ca062 Error on unsupported flags for individual CLI commands (#1889)
  • 42943b7 fix(cli): respond to --help on all subcommands (#1873)
  • f61e716 Improved detection for published state of prerelease-only packages without ...
  • See full diff in compare view

Updates @stylistic/stylelint-plugin from 5.1.0 to 5.2.0

Release notes

Sourced from @​stylistic/stylelint-plugin's releases.

Release v5.2.0

Added

  • The declaration-block-semicolon-newline-before rule is now autofixable.

Fixed

  • An exception for an empty custom property value has been added to the declaration-block-semicolon-newline-before and declaration-colon-space-after rules: the --custom-prop: ; and --custom-prop:; variants are now considered valid (see #50).
Changelog

Sourced from @​stylistic/stylelint-plugin's changelog.

[5.2.0] — 2026–05–20

Added

  • The declaration-block-semicolon-newline-before rule is now autofixable.

Fixed

  • An exception for an empty custom property value has been added to the declaration-block-semicolon-newline-before and declaration-colon-space-after rules: the --custom-prop: ; and --custom-prop:; variants are now considered valid (see #50).
Commits
  • 19b1128 5.2.0
  • 555c336 Add Makefile
  • 6734a82 Add more colors to GitHub CI
  • 21caa34 Upgrade pnpm to 11 version
  • b57ac70 Add integration test for empty custom property
  • c9de629 Add an exception to declaration-colon-space-after related to an empty custo...
  • b77b3ca Make declaration-block-semicolon-newline-before rule autofixable
  • 71b2694 Add an exception to declaration-block-semicolon-newline-before related to a...
  • ab47833 Remove pretest hook
  • a4146bd Fix pre-commit hook
  • Additional commits viewable in compare view

Updates @types/node from 25.5.2 to 25.9.3

Commits

Updates eslint-plugin-jsdoc from 62.9.0 to 63.0.2

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v63.0.2

63.0.2 (2026-06-06)

Bug Fixes

v63.0.1

63.0.1 (2026-06-01)

Bug Fixes

  • empty-tags: preserve start and ending delimiters to avoid erros with single-line tags; fixes #1697 (938a1f0)

v63.0.0

63.0.0 (2026-05-20)

Bug Fixes

  • require-throws: avoid skipping constructors; fixes #1692 (cacb73e)

chore

BREAKING CHANGES

  • Drop Node 20
Commits
  • 50a7fbc chore: update semver and devDeps.
  • 6041995 docs: fix in output
  • 319e84b fix: allow typedef returns that may be void; fixes #1390 (#1699)
  • 938a1f0 fix(empty-tags): preserve start and ending delimiters to avoid erros with s...
  • 1f857a9 chore: update jsdoccomment, comment-parser, object-deep-merge, semver, devDeps.
  • 3d53b88 docs: fix AST and Selectors links; closes #1691
  • a0b05f5 chore(deps): bump minimatch from 3.0.5 to 10.2.5
  • 5980856 chore: drop Node 26 for now (until Node/yargs/c8 issue fixed)
  • 4a3d194 chore: linting
  • dca8a75 chore: update for pnpm 11
  • Additional commits viewable in compare view

Updates pkg-ok from 3.0.0 to 4.0.0

Changelog

Sourced from pkg-ok's changelog.

4.0.0

  • Require Node 20, 22, or 24
Commits
  • c4bf4e9 Merge pull request #173 from abraham/copilot/remove-husky-package
  • b5b9ad6 chore: remove husky and pre-commit hook
  • 8ed0ae6 Merge pull request #171 from abraham/abraham-patch-1
  • 65a7813 Initial plan
  • 4ad7c3e npm run format
  • 0ecc782 Add GitHub Actions workflow to publish package
  • 41718cd Merge pull request #170 from abraham/abraham-patch-1
  • cae00cb Bump version from 3.0.0 to 4.0.0
  • b24240c Revise Node.js support in CHANGELOG
  • e420bf1 Merge pull request #168 from abraham/copilot/update-meow-to-v14
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pkg-ok since your current version.


Updates stylelint from 17.6.0 to 17.13.0

Release notes

Sourced from stylelint's releases.

17.13.0

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

17.10.0

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

  • Added: selector-no-invalid rule (#9232) (@​jeddy3).
  • Added: unit-layout-mappings rule (#9229) (@​jeddy3).
  • Added: value-keyword-layout-mappings rule (#9233) (@​jeddy3).
  • Fixed: inconsistent error messages when module is not found (#9260) (@​ybiquitous).
  • Fixed: property-layout-mappings false negatives for property names in declaration values (#9222) (@​jeddy3).
  • Fixed: property-layout-mappings false positives for @page properties (#9223) (@​jeddy3).
  • Fixed: selector-pseudo-class-no-unknown false positives for nested webkit-scrollbar part (#9259) (@​rkdfx).

17.9.1

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

17.9.0

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.13.0 - 2026-06-06

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1 - 2026-05-14

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0 - 2026-05-05

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

17.10.0 - 2026-05-03

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

  • Added: selector-no-invalid rule (#9232) (@​jeddy3).
  • Added: unit-layout-mappings rule (#9229) (@​jeddy3).
  • Added: value-keyword-layout-mappings rule (#9233) (@​jeddy3).
  • Fixed: inconsistent error messages when module is not found (#9260) (@​ybiquitous).
  • Fixed: property-layout-mappings false negatives for property names in declaration values (#9222) (@​jeddy3).
  • Fixed: property-layout-mappings false positives for @page properties (#9223) (@​jeddy3).
  • Fixed: selector-pseudo-class-no-unknown false positives for nested webkit-scrollbar part (#9259) (@​rkdfx).

17.9.1 - 2026-04-27

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates undici from 8.0.2 to 8.4.1

Release notes

Sourced from undici's releases.

v8.4.1

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.4.0...v8.4.1

v8.4.0

What's Changed

... (truncated)

Commits
  • 04ebc71 Bumped v8.4.1 (#5392)
  • 89017ab docs: fix remaining broken links in API documentation (#5342)
  • cae3940 docs: fix multiple inaccuracies in API documentation (#5384)
  • 01e89e9 fix(client): reject pipelined TLS altname errors (#5373)
  • d03fb24 fix: handle paused parser on socket end (issue #5360) (#5389)
  • ee59da3 docs: fix code examples that crash at runtime and other inaccuracies (#5386)
  • 8464ab7 docs: add Getting Started guide (#5371)
  • ba12bb1 fix(dns): skip requests without origin (#5376)
  • c07a438 fix: prevent race condition between onEnd and onTrailers in HTTP/2 client (#5...
  • a8ea6f2 test: avoid localhost lookup in fetch cookies tests (#5363)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 8 updates

Bumps the development-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/changelog-github](https://github.com/changesets/changesets) | `0.6.0` | `0.7.0` |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.30.0` | `2.31.0` |
| [@stylistic/stylelint-plugin](https://github.com/stylelint-stylistic/stylelint-stylistic) | `5.1.0` | `5.2.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.9.3` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.9.0` | `63.0.2` |
| [pkg-ok](https://github.com/abraham/pkg-ok) | `3.0.0` | `4.0.0` |
| [stylelint](https://github.com/stylelint/stylelint) | `17.6.0` | `17.13.0` |
| [undici](https://github.com/nodejs/undici) | `8.0.2` | `8.4.1` |



Updates `@changesets/changelog-github` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/changelog-github@0.6.0...@changesets/changelog-github@0.7.0)

Updates `@changesets/cli` from 2.30.0 to 2.31.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.30.0...@changesets/cli@2.31.0)

Updates `@stylistic/stylelint-plugin` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/stylelint-stylistic/stylelint-stylistic/releases)
- [Changelog](https://github.com/stylelint-stylistic/stylelint-stylistic/blob/main/CHANGELOG.md)
- [Commits](stylelint-stylistic/stylelint-stylistic@v5.1.0...v5.2.0)

Updates `@types/node` from 25.5.2 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-plugin-jsdoc` from 62.9.0 to 63.0.2
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.9.0...v63.0.2)

Updates `pkg-ok` from 3.0.0 to 4.0.0
- [Release notes](https://github.com/abraham/pkg-ok/releases)
- [Changelog](https://github.com/abraham/pkg-ok/blob/main/CHANGELOG.md)
- [Commits](abraham/pkg-ok@v3.0.0...v4.0.0)

Updates `stylelint` from 17.6.0 to 17.13.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.6.0...17.13.0)

Updates `undici` from 8.0.2 to 8.4.1
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.0.2...v8.4.1)

---
updated-dependencies:
- dependency-name: "@changesets/changelog-github"
  dependency-version: 0.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@stylistic/stylelint-plugin"
  dependency-version: 5.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 63.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: pkg-ok
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: stylelint
  dependency-version: 17.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: undici
  dependency-version: 8.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 16, 2026
@changeset-bot

changeset-bot Bot commented Jun 16, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 7f84291

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

Copy link
Copy Markdown

@socket-security

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm css-tree is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ?npm/stylelint@17.13.0npm/css-tree@3.2.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/css-tree@3.2.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.jsonnpm/eslint-plugin-jsdoc@63.0.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@63.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm kind-of is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ?npm/stylelint@17.13.0npm/kind-of@6.0.3

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/kind-of@6.0.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants