Skip to content

Bump braces and xo#156

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-325a9ef79c
Closed

Bump braces and xo#156
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-325a9ef79c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 4, 2026

Copy link
Copy Markdown
Contributor

Bumps braces to 3.0.3 and updates ancestor dependency xo. These dependencies need to be updated together.

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

  • The undocumented .makeRe method was removed
  • Require Node.js >= 8.3

Non-breaking changes

  • Caching was removed
Commits

Updates xo from 0.37.1 to 2.0.2

Release notes

Sourced from xo's releases.

v2.0.2

  • Fix react and prettier: 'compat' configs failing when files is not specified bde9854

xojs/xo@v2.0.1...v2.0.2

v2.0.1

  • Fix missing files in package (#865) 0f1e196
  • Add --fix-dry-run flag d871185
  • Update dependencies 23b5972

xojs/xo@v2.0.0...v2.0.1

v2.0.0

Breaking

  • Requires Node.js 20.19
  • Requires ESLint 10
  • Removed CommonJS config file support (use .js/.mjs/.ts/.mts instead)
  • Temporarily removed eslint-plugin-promise rules (pending ESLint 10 compatibility)

Improvements

  • Default to content-based cache strategy for faster re-linting
  • Show warning when explicitly specified files are ignored
  • Accept ESLint-native files format in config
  • Simplified TypeScript handling by using in-memory programs
  • Fix linting of files starting with a dot
  • Fix cwd for case-sensitive filesystems

New rules

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 4, 2026
Bumps [braces](https://github.com/micromatch/braces) to 3.0.3 and updates ancestor dependency [xo](https://github.com/xojs/xo). These dependencies need to be updated together.


Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `xo` from 0.37.1 to 2.0.2
- [Release notes](https://github.com/xojs/xo/releases)
- [Commits](xojs/xo@v0.37.1...v2.0.2)

---
updated-dependencies:
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
- dependency-name: xo
  dependency-version: 2.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-325a9ef79c branch from 825351a to 72e17a8 Compare April 4, 2026 10:04
@dependabot @github

dependabot Bot commented on behalf of github Apr 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 4, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-325a9ef79c branch April 4, 2026 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants