Skip to content

Bump the minor_versions group across 1 directory with 16 updates - #8806

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor_versions-2d7ea03ff1
Open

Bump the minor_versions group across 1 directory with 16 updates#8806
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor_versions-2d7ea03ff1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor_versions group with 16 updates in the / directory:

Package From To
@typescript-eslint/parser 8.56.1 8.71.0
esbuild 0.28.1 0.28.2
liquidjs 10.27.0 10.30.0
@oclif/core 4.8.3 4.14.0
csv-parse 7.0.2 7.0.3
prettier 3.8.4 3.9.9
ws 8.21.0 8.22.0
@ast-grep/napi 0.43.0 0.45.3
@bugsnag/js 8.9.0 8.10.0
@opentelemetry/core 2.8.0 2.11.0
@opentelemetry/exporter-metrics-otlp-http 0.57.0 0.222.0
semver 7.8.4 7.8.5
@typescript-eslint/eslint-plugin 8.56.1 8.71.0
eslint-plugin-tsdoc 0.5.2 0.5.4
@vitest/eslint-plugin 1.1.44 1.6.27
yaml 2.9.0 2.9.1

Updates @typescript-eslint/parser from 8.56.1 to 8.71.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.71.0

8.71.0 (2026-09-28)

🚀 Features

  • eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

  • eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)
  • eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
  • eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
  • eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

  • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • rule-tester: test the final autofix output instead of the first pass (#12867)
  • scope-manager: merge implicit global definitions (#12809)
  • type-utils: match package specifiers on whole path components (#12838)
  • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
  • typescript-estree: add missing < token opening type arguments (#12821)

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.71.0 (2026-09-28)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

... (truncated)

Commits

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x

... (truncated)

Commits
  • 609683d publish 0.28.2 to npm
  • 11b1fe4 add to release notes
  • ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
  • 04627b6 fix #4498: async TLA checks need a worklist
  • 5c15177 disable gopls in the go folder
  • fc2ee9b css: adjust parser to allow --foo: {...}
  • 209db54 release notes for css nesting bugfix
  • c625d31 fix #4497: preserve nested ampersands during minification (#4500)
  • 34474e2 better isolation of current part in js parser
  • 07f6e8c fix #4507: import assignment tree-shaking bug
  • Additional commits viewable in compare view

Updates liquidjs from 10.27.0 to 10.30.0

Release notes

Sourced from liquidjs's releases.

v10.30.0

10.30.0 (2026-10-01)

Bug Fixes

  • base64_encode: encode large input in browser builds (#969) (8aace78), closes #967
  • date: compute %C and %y from the numeric year (#961) (e68514f)
  • date: compute %U and %W week numbers like strftime (#958) (0587ca8)
  • trim custom characters by Unicode code point (#955) (3fe244f)
  • truncatewords: ignore leading whitespace when counting words (#954) (65e200e)
  • url_decode: keep %2B as a literal plus when decoding (#939) (9af92f5)

Features

v10.29.0

10.29.0 (2026-08-11)

Features

v10.28.0

10.28.0 (2026-08-01)

Bug Fixes

  • date: %s returns Unix epoch unaffected by display timezone (#932) (39c8743), closes #931

Features

  • Add support of inner expressions enclosed by parentheses (#863) (afa5f54)

v10.27.2

10.27.2 (2026-07-09)

Bug Fixes

  • charge join/json/inspect filters by produced output size (#925) (7ab49f9)
  • date: zero-pad milliseconds when formatting %N fractional seconds (#929) (2634f9d)
  • enforce ownPropertyOnly for inherited array indices (#924) (552819a)
  • filters: modulo should follow divisor sign for negative operands (#922) (568bd5f)

... (truncated)

Changelog

Sourced from liquidjs's changelog.

10.30.0 (2026-10-01)

Bug Fixes

  • base64_encode: encode large input in browser builds (#969) (8aace78), closes #967
  • date: compute %C and %y from the numeric year (#961) (e68514f)
  • date: compute %U and %W week numbers like strftime (#958) (0587ca8)
  • trim custom characters by Unicode code point (#955) (3fe244f)
  • truncatewords: ignore leading whitespace when counting words (#954) (65e200e)
  • url_decode: keep %2B as a literal plus when decoding (#939) (9af92f5)

Features

10.29.0 (2026-08-11)

Features

10.28.0 (2026-08-01)

Bug Fixes

  • date: %s returns Unix epoch unaffected by display timezone (#932) (39c8743), closes #931

Features

  • Add support of inner expressions enclosed by parentheses (#863) (afa5f54)

10.27.2 (2026-07-09)

Bug Fixes

  • charge join/json/inspect filters by produced output size (#925) (7ab49f9)
  • date: zero-pad milliseconds when formatting %N fractional seconds (#929) (2634f9d)
  • enforce ownPropertyOnly for inherited array indices (#924) (552819a)
  • filters: modulo should follow divisor sign for negative operands (#922) (568bd5f)
  • filters: return empty for out-of-range slice begin or negative length (#928) (f9a1316)

10.27.1 (2026-06-23)

... (truncated)

Commits
  • 920166e chore(release): 10.30.0 [skip ci]
  • 259dcd4 docs: add josefguenther as a contributor for code (#972)
  • 8aace78 fix(base64_encode): encode large input in browser builds (#969)
  • 7dfa76b feat: await promises returned by Drop.valueOf() (#948) (#953) (#959)
  • e68514f fix(date): compute %C and %y from the numeric year (#961)
  • 28ae3fb docs: add web-orbit12 as a contributor for code (#960)
  • 0587ca8 fix(date): compute %U and %W week numbers like strftime (#958)
  • a2cdfb8 docs: add jakezwang as a contributor for code (#957)
  • 3fe244f fix: trim custom characters by Unicode code point (#955)
  • 0340ed5 docs: add youdie006 as a contributor for code (#956)
  • Additional commits viewable in compare view

Updates @oclif/core from 4.8.3 to 4.14.0

Release notes

Sourced from @​oclif/core's releases.

4.14.0

Features

  • bumping to eslint v10 (W-23473845) (248de04)

4.13.5

Bug Fixes

  • replaced require with dynamic import (W-23807278) (d35e325)

4.13.4

Bug Fixes

  • resolved security vulnerability in powershell path (W-23807278) (911e9d2)

4.13.3

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

4.13.2

Bug Fixes

  • deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1

Bug Fixes

  • deps: bump tar from 7.5.16 to 7.5.22 (bc0d2d2)

4.13.0

Features

  • expose root help formatter (644c4aa)

4.12.0

Features

  • add Args.option() for typed arg options (93139f7)

4.11.14

Bug Fixes

  • deps: bump @​sigstore/core from 3.2.0 to 3.2.1 (b45271f)

4.11.13

Bug Fixes

  • deps: bump sigstore from 4.1.0 to 4.1.1 (5d7fe54)

... (truncated)

Changelog

Sourced from @​oclif/core's changelog.

4.14.0 (2026-08-19)

Features

  • bumping to eslint v10 (W-23473845) (248de04)

4.13.5 (2026-08-14)

Bug Fixes

  • replaced require with dynamic import (W-23807278) (d35e325)

4.13.4 (2026-08-14)

Bug Fixes

  • resolved security vulnerability in powershell path (W-23807278) (911e9d2)

4.13.3 (2026-08-04)

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

4.13.2 (2026-07-27)

Bug Fixes

  • deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1 (2026-07-27)

Bug Fixes

... (truncated)

Commits
  • 1d2903e chore(release): 4.14.0 [skip ci]
  • 45c7f0a Merge pull request #1635 from oclif/d/W-23473845
  • 395c8bc chore: prune stale eslint suppressions after merge
  • 35ddd2e chore: merge main into d/W-23473845
  • 0d01467 chore(release): 4.13.5 [skip ci]
  • 06949eb Merge pull request #1638 from oclif/d/W-23807278-2
  • d35e325 fix: replaced require with dynamic import (W-23807278)
  • 85370b7 chore(release): 4.13.4 [skip ci]
  • 3318c6e Merge pull request #1636 from oclif/d/W-23807278
  • 911e9d2 fix: resolved security vulnerability in powershell path (W-23807278)
  • Additional commits viewable in compare view

Updates csv-parse from 7.0.2 to 7.0.3

Changelog

Sourced from csv-parse's changelog.

7.0.3 (2026-09-25)

Bug Fixes

  • csv-parse: preserve typed column keys (#500) (745f045)
  • csv-parse: type the delimiter_auto score callback arguments (#499) (4aa04da)
Commits
  • 594c646 chore(release): publish
  • 16d9900 refactor(csv-parse): isolate error and normalize_options in types
  • 4aa04da fix(csv-parse): type the delimiter_auto score callback arguments (#499)
  • 8d4173d build: latest dev dependencies
  • c8caa1c build: generate latest dist
  • 6c45c9b build: remove npx usage in package scripts
  • 6f39f27 test: remove lint errors
  • 94ae7b9 test: rename mocha setup rule
  • 42a6b09 test: remove ts-node usage
  • 745f045 fix(csv-parse): preserve typed column keys (#500)
  • Additional commits viewable in compare view

Updates prettier from 3.8.4 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
</tr></table>

... (truncated)

Commits

Updates ws from 8.21.0 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

  • Introduced the protocols option (8b918b01).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).

8.21.3

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • 297202c [dist] 8.22.0
  • 8b918b0 [feature] Introduce the protocols option
  • 73e03eb [ci] Update actions/setup-node action to v7
  • d9b8954 [fix] Change the ready state after validating the arguments (#2337)
  • c791e70 [dist] 8.21.3
  • e97a20e [fix] Reject offers with client_max_window_bits below config
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • Additional commits viewable in compare view

Updates @ast-grep/napi from 0.43.0 to 0.45.3

Release notes

Sourced from @​ast-grep/napi's releases.

0.45.3

0.45.2

0.45.1

@dependabot
dependabot Bot requested a review from a team as a code owner October 6, 2026 17:57
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 6, 2026 17:57
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 6, 2026
@github-actions github-actions Bot added devtools-gardener Post the issue or PR to Slack for the gardener no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users. labels Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-2d7ea03ff1 branch from 4e9a59b to 9a22aaa Compare October 8, 2026 15:02
@dependabot
Bump the minor_versions group across 1 directory with 16 updates
dbced19 
Bumps the minor_versions group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.71.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [liquidjs](https://github.com/harttle/liquidjs) | `10.27.0` | `10.30.0` |
| [@oclif/core](https://github.com/oclif/core) | `4.8.3` | `4.14.0` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `7.0.2` | `7.0.3` |
| [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.9` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.22.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.43.0` | `0.45.3` |
| [@bugsnag/js](https://github.com/bugsnag/bugsnag-js) | `8.9.0` | `8.10.0` |
| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.8.0` | `2.11.0` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.57.0` | `0.222.0` |
| [semver](https://github.com/npm/node-semver) | `7.8.4` | `7.8.5` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.1` | `8.71.0` |
| [eslint-plugin-tsdoc](https://github.com/microsoft/tsdoc/tree/HEAD/eslint-plugin) | `0.5.2` | `0.5.4` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.1.44` | `1.6.27` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@typescript-eslint/parser` from 8.56.1 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/parser)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `liquidjs` from 10.27.0 to 10.30.0
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.27.0...v10.30.0)

Updates `@oclif/core` from 4.8.3 to 4.14.0
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.8.3...4.14.0)

Updates `csv-parse` from 7.0.2 to 7.0.3
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.3/packages/csv-parse)

Updates `prettier` from 3.8.4 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.4...3.9.9)

Updates `ws` from 8.21.0 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.22.0)

Updates `@ast-grep/napi` from 0.43.0 to 0.45.3
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.43.0...0.45.3)

Updates `@bugsnag/js` from 8.9.0 to 8.10.0
- [Release notes](https://github.com/bugsnag/bugsnag-js/releases)
- [Changelog](https://github.com/bugsnag/bugsnag-js/blob/next/CHANGELOG.md)
- [Commits](bugsnag/bugsnag-js@v8.9.0...v8.10.0)

Updates `@opentelemetry/core` from 2.8.0 to 2.11.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.8.0...v2.11.0)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.57.0 to 0.222.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.0...experimental/v0.222.0)

Updates `semver` from 7.8.4 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.4...v7.8.5)

Updates `@typescript-eslint/eslint-plugin` from 8.56.1 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/eslint-plugin)

Updates `eslint-plugin-tsdoc` from 0.5.2 to 0.5.4
- [Changelog](https://github.com/microsoft/tsdoc/blob/main/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/microsoft/tsdoc/commits/HEAD/eslint-plugin)

Updates `@vitest/eslint-plugin` from 1.1.44 to 1.6.27
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.1.44...v1.6.27)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.45.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@bugsnag/js"
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@oclif/core"
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/core"
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.222.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.27
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: csv-parse
  dependency-version: 7.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: eslint-plugin-tsdoc
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: liquidjs
  dependency-version: 10.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-2d7ea03ff1 branch from 9a22aaa to dbced19 Compare October 9, 2026 10:15

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file devtools-gardener Post the issue or PR to Slack for the gardener no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants