Skip to content

chore(deps-dev): bump the dev-dependencies group with 5 updates - #216

Merged
baxyz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-02bc7d2f5b
Nov 9, 2026
Merged

chore(deps-dev): bump the dev-dependencies group with 5 updates#216
baxyz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-02bc7d2f5b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 5 updates:

Package From To
@vitest/coverage-v8 5.0.5 5.1.0
oxlint 1.90.0 1.91.0
rollup 4.66.0 4.67.5
vite 8.3.5 8.3.6
vitest 5.0.5 5.1.0

Updates @vitest/coverage-v8 from 5.0.5 to 5.1.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates oxlint from 1.90.0 to 1.91.0

Release notes

Sourced from oxlint's releases.

oxlint v1.91.0

🚀 Features

  • 004647a track_memory_allocs: Add allocation tracking for linter rules (#28470) (Cam McHenry)
  • 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)

🐛 Bug Fixes

  • a205cd3 linter/eslint/no-control-regex: Detect raw control characters (#28548) (camc314)
  • 7c65777 linter/unicorn/prefer-global-this: Align typeof and worker API handling (#28549) (camc314)
  • 987d5f1 linter/unicorn/no-invalid-fetch-options: Avoid treating unknown methods as GET (#28547) (camc314)
  • e234dc8 linter/unicorn/no-useless-error-capture-stack-trace: Move to suspicious category (#28545) (camc314)
  • b3dc411 linter/typescript/no-non-null-asserted-nullish-coalescing: Move to suspicious category (#28546) (camc314)
  • cb64638 regular_expression: Reject incomplete Unicode atom escapes (#28448) (Boshen)
  • c67167e linter: Only run React Compiler rules on files with top-level components or hooks (Boshen)
  • 4c9d5aa linter: Treat Reanimated shared values as ref-like in React Compiler rules (Boshen)
  • 61fe2af linter/react: Ignore impure calls in async components in react/purity (Rahul Kashyap)
  • ed7df7d ast/estree: Include comments in TS Program span (#28326) (camc314)
  • 31cbe37 linter: Make gitlab fingerprints unique per diagnostic (#28307) (camc314)

⚡ Performance

  • 564559d linter/prefer-const: Avoid collecting resolved references (#28732) (Dunqing)
  • bb947dc linter: Skip numeric separator formatting for short integers (#28485) (Cam McHenry)
  • 1043dfa linter: Avoid collecting prefer-const binding identifiers (#28484) (Cam McHenry)
  • 7c93eef linter: Reduce branches-sharing-code scratch allocations (#28483) (Cam McHenry)
  • c0065fd linter: Allocate escape-case replacements only when needed (#28482) (Cam McHenry)
  • d837414 linter: Lazily normalize capitalized-comments text (#28481) (Cam McHenry)
  • 6baaad6 linter: Avoid no-var binding identifier allocations (#28480) (Cam McHenry)
  • 882053b linter: Skip read-only parameters in no-param-reassign (#28479) (Cam McHenry)
  • 92deebf linter: Reduce no-unmodified-loop-condition allocations (#28478) (Cam McHenry)
  • f01d52d linter: Reduce no-duplicate-case allocations (#28477) (Cam McHenry)
  • 6a72d84 linter: Reduce no-dupe-class-members allocations (#28476) (Cam McHenry)
  • 77599ef linter: Reduce no-this-before-super allocations (#28475) (Cam McHenry)
  • 2ea9f58 linter/no-dupe-else-if: Use smallvec to reduce allocs (#28474) (Cam McHenry)
  • 69f0204 linter/react/rules-of-hooks: Reduce allocs (#28473) (Cam McHenry)
  • b138c20 linter: Reduce allocs in no-dupe-keys (#28472) (Cam McHenry)
  • 6f3e982 linter: Avoid operator allocations in no-useless-length-check (#28471) (Cam McHenry)
  • fd68928 react-compiler: Skip passes lint does not need (Yagiz Nizipli)
  • 224f4dd linter/eslint/sort-keys: Reserve initial capacity for string (#27624) (Cam McHenry)
  • e4e01a3 linter/import/no-cycle: Compare visited modules by absolute resolved path (#27517) (Cam McHenry)
  • 741b29b linter/import/no-cycle: Cache sorted module record snapshots (#27516) (Cam McHenry)
  • 20022bb linter/import/no-cycle: Reuse traversal buffers between imports (#27481) (Cam McHenry)
  • fd5edb7 linter/import/no-cycle: Reuse module records in diagnostic stack (#27480) (Cam McHenry)
  • 73e877c linter/import/no-cycle: Don't allocate paths already seen (#27478) (Cam McHenry)
  • 1515d53 linter/react/forward-ref-uses-ref: Narrow forward-ref-uses-ref dispatch (#28367) (Cam McHenry)
  • ee51c01 linter/react/no-string-refs: Narrow AST dispatch (#28366) (Cam McHenry)
  • bbfd692 linter/react/no-children-pop: Narrow AST dispatch (#28365) (Cam McHenry)
  • a86158b linter/unicorn/prefer-set-size: Narrow AST dispatch (#28364) (Cam McHenry)
  • a777fa6 linter/eslint/no-iterator: Narrow member dispatch (#28363) (Cam McHenry)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.91.0] - 2026-11-02

🚀 Features

  • 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)
Commits
  • f3fcdcc release(apps): oxlint v1.91.0 && oxfmt v0.76.0 (#28718)
  • 419c1b0 feat(linter): add allow and allowPattern options to react/capitalized-calls
  • See full diff in compare view

Updates rollup from 4.66.0 to 4.67.5

Release notes

Sourced from rollup's releases.

v4.67.5

4.67.5

2026-11-04

Bug Fixes

  • Do not ignore output.sourcemapFile when the output.file option is not used (#6623)
  • Change chunk hash when debug IDs are enabled/disabled (#6625)
  • Avoid an unnecessary optional dependency on Linux system (#6627)

Pull Requests

v4.67.4

4.67.4

2026-11-01

Bug Fixes

  • Make rollup work again on older Xeon processors (#6622)

Pull Requests

v4.67.3

4.67.3

2026-10-31

Bug Fixes

  • Ensure line breaks in module ids are handled correctly in imports (#6620)

Pull Requests

v4.67.2

4.67.2

2026-10-30

Features

... (truncated)

Changelog

Sourced from rollup's changelog.

4.67.5

2026-11-04

Bug Fixes

  • Do not ignore output.sourcemapFile when the output.file option is not used (#6623)
  • Change chunk hash when debug IDs are enabled/disabled (#6625)
  • Avoid an unnecessary optional dependency on Linux system (#6627)

Pull Requests

4.67.4

2026-11-01

Bug Fixes

  • Make rollup work again on older Xeon processors (#6622)

Pull Requests

4.67.3

2026-10-31

Bug Fixes

  • Ensure line breaks in module ids are handled correctly in imports (#6620)

Pull Requests

4.67.2

2026-10-30

Features

  • Support X64 Android (#6603)

Pull Requests

... (truncated)

Commits

Updates vite from 8.3.5 to 8.3.6

Release notes

Sourced from vite's releases.

v8.3.6

Bug Fixes

  • await overlapping plugin container close calls (#23935) (175bbeb)
  • build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
  • build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
  • bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
  • bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
  • deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
  • deps: update all non-major dependencies (#23896) (46b91c5)
  • deps: update all non-major dependencies (#23966) (b3cb057)
  • deps: update rolldown-related dependencies (#23868) (a63eb87)
  • deps: update rolldown-related dependencies (#23967) (0105733)
  • dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
  • html: remove adjacent module tags on the first line (#23823) (eab1dc2)
  • ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
  • optimizer: detect cache dir precisely (#23912) (cc9bc21)
  • optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
  • respect build.sourcemap from environment (#23879) (82e7aa0)
  • server: escape HTML attributes (#23995) (a270391)
  • server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
  • ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
  • use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
  • wasm: reject .wasm outside server.fs (#23914) (64e2467)
  • watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
  • worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

Miscellaneous Chores

Build System

  • generate sourcemaps in import-meta-current-dirname plugin (#23904) (20d355a)
Changelog

Sourced from vite's changelog.

8.3.6 (2026-11-05)

Bug Fixes

  • await overlapping plugin container close calls (#23935) (175bbeb)
  • build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
  • build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
  • bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
  • bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
  • deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
  • deps: update all non-major dependencies (#23896) (46b91c5)
  • deps: update all non-major dependencies (#23966) (b3cb057)
  • deps: update rolldown-related dependencies (#23868) (a63eb87)
  • deps: update rolldown-related dependencies (#23967) (0105733)
  • dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
  • html: remove adjacent module tags on the first line (#23823) (eab1dc2)
  • ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
  • optimizer: detect cache dir precisely (#23912) (cc9bc21)
  • optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
  • respect build.sourcemap from environment (#23879) (82e7aa0)
  • server: escape HTML attributes (#23995) (a270391)
  • server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
  • ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
  • use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
  • wasm: reject .wasm outside server.fs (#23914) (64e2467)
  • watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
  • worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

Miscellaneous Chores

Build System

  • generate sourcemaps in import-meta-current-dirname plugin (#23904) (20d355a)
Commits
  • 0fd9a29 release: v8.3.6 (#23996)
  • eab1dc2 fix(html): remove adjacent module tags on the first line (#23823)
  • a270391 fix(server): escape HTML attributes (#23995)
  • 7139ef3 fix(worker): keep chunks conflicted with unused workers that are still used b...
  • 0fdd81e fix(optimizer): resolve subpath imports (#) with Vite's resolver (#23959)
  • 8069835 fix(build): use stable module ids in chunk import map hash signatures (fix #2...
  • 95c2daf fix: ignore pnpm's .modules.yaml as a Vite Task input (#23634)
  • b3cb057 fix(deps): update all non-major dependencies (#23966)
  • 0105733 fix(deps): update rolldown-related dependencies (#23967)
  • 90bc034 fix: use top-level input for SSR build when build.ssr: true (#23898)
  • Additional commits viewable in compare view

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

@dependabot
chore(deps-dev): bump the dev-dependencies group with 5 updates
9caefaa 
Bumps the dev-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.5` | `5.1.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.90.0` | `1.91.0` |
| [rollup](https://github.com/rollup/rollup) | `4.66.0` | `4.67.5` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.5` | `8.3.6` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.5` | `5.1.0` |


Updates `@vitest/coverage-v8` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/coverage-v8)

Updates `oxlint` from 1.90.0 to 1.91.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.91.0/npm/oxlint)

Updates `rollup` from 4.66.0 to 4.67.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.66.0...v4.67.5)

Updates `vite` from 8.3.5 to 8.3.6
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.6/packages/vite)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: oxlint
  dependency-version: 1.91.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: rollup
  dependency-version: 4.67.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vite
  dependency-version: 8.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from baxyz as a code owner November 9, 2026 00:28
@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

✅ PR Validation Passed

All checks passed!

📋 Pipeline Status

Job Status
✅ 🔢 Version passing
✅ 🏗️ Build passing
✅ 🧪 Tests passing
✅ 📝 Lint passing
✅ 📘 TypeCheck passing
✅ 🔐 Security Audit passing
✅ 🧾 Conventional Commits passing
✅ 🔗 Coherency passing

📊 Code Coverage

✅ Overall Coverage: 100.0% — Target reached! 🎯

Metric Progress Coverage
✅ Lines ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 100%
✅ Branches ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 100%
✅ Functions ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 100%
✅ Statements ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 100%

🧬 Mutation Testing

⏭️ Mutation Testing: skipped

🌐 Runtime Compatibility

✅ Runtime Compatibility: 3/3 — All runtimes passed!

Runtime Status
🟩 Node.js 26 (LTS) v26.13.0 ✅
🦕 Deno 2.8.3 ✅
🍞 Bun 1.4.4 ✅

🔄 Runtime compatibility is informational only and does not block the PR

⏱️ Benchmarks

⏭️ Benchmarks: skipped

ℹ️ About this report
  • 🎯 Coverage Target: 100% for all metrics
  • 🧬 Mutation Testing: powered by Stryker (non-blocking)
  • ⏱️ Benchmarks: powered by Vitest Bench (non-blocking)
  • 🔄 This comment updates automatically with each push
  • 📈 Coverage is measured using Vitest + v8

🤖 Generated by @helpers4 CI • 2026-11-09

@baxyz
baxyz merged commit c202791 into main Nov 9, 2026
15 checks passed
@baxyz
baxyz deleted the dependabot/npm_and_yarn/dev-dependencies-02bc7d2f5b branch November 9, 2026 14:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@baxyz baxyz Awaiting requested review from baxyz baxyz is a code owner

Assignees

@baxyz baxyz

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@baxyz