Skip to content

deps: bump the patch group across 1 directory with 6 updates - #70

Open
dependabot[bot] wants to merge 1 commit into
nextfrom
dependabot/npm_and_yarn/next/patch-54b310ff0e
Open

deps: bump the patch group across 1 directory with 6 updates#70
dependabot[bot] wants to merge 1 commit into
nextfrom
dependabot/npm_and_yarn/next/patch-54b310ff0e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patch group with 6 updates in the / directory:

Package From To
@cldmv/fix-headers 2.2.0 2.2.2
@cldmv/vitest-runner 1.5.3 1.5.4
@eslint/css 2.0.0 2.0.1
@eslint/json 2.1.0 2.1.1
@vitest/coverage-v8 5.0.3 5.0.5
vitest 5.0.3 5.0.5

Updates @cldmv/fix-headers from 2.2.0 to 2.2.2

Release notes

Sourced from @​cldmv/fix-headers's releases.

v2.2.2

@cldmv/fix-headers v2.2.2 Changelog

Release Date: October 2026 Release Type: Patch Branch: release/2.2.2

Overview

Version 2.2.2 is a dependency refresh. Everything that changed is in package-lock.json: the package.json ranges are untouched, and the only change to package.json is the version number. The source, dist/, bin/, the generated types and the declared dependency ranges are exactly as in v2.2.1.

One runtime dependency moved inside its existing range: ignore 7.0.10 → 7.0.12. It is the only dependency fix-headers declares (^7.0.5), and it is kept external by the build, so it is not bundled into dist/. A consumer's install already resolves ignore from that range, so a published 2.2.2 gets a current 7.0.x either way; the lockfile change affects this repository's own development and CI. The rest of the lockfile movement is development tooling, including a chalk major version and a Node.js 22 floor on the test runner's own tree (see Dependencies).

🔧 Dependencies

Every entry is a lockfile-only update within the existing package.json range. The ranges still read ignore ^7.0.5, @cldmv/vitest-runner ^1.4.2, vitest ^5.0.0 and eslint ^10.11.0, and so on.

Runtime

  • ignore 7.0.10 → 7.0.12 (#138). Upstream's two patch releases drop a pattern that normalizes to nothing, and make trimming and unescaping of pattern whitespace run in linear time. They also fix handling of trailing spaces in directory patterns. The range allowed these versions before, and engines.node for the package (>=22.12.0) is unchanged.

Development

  • @cldmv/vitest-runner 1.5.1 → 1.5.3 (#138). This is the change with the widest effect. Version 1.5.2 moved the runner's own dependency chalk from 5.6.2 to 6.0.1, and 1.5.3 raised its engines.node from >=20.19.0 to >=22.12.0. In this lockfile chalk therefore moves from 5.6.2 to 6.0.1, a major version that requires Node.js 22 or later. fix-headers already requires Node.js >=22.12.0, so nothing here is newly excluded. Version 1.5.3 also fixes the runner's CommonJS entry, which now throws a clear ERR_REQUIRE_ESM error on a Node.js without require(esm), and relicenses the runner under Apache-2.0.
  • vitest 5.0.2 → 5.0.3 (#134), with @vitest/coverage-v8, @vitest/mocker and @vitest/spy at 5.0.3. vite 8.3.1 → 8.3.2, rolldown 1.2.11 → 1.2.12 (and its platform bindings) and @oxc-project/types 0.151.0 → 0.152.0 moved with them in the lockfile.
  • eslint 10.11.0 → 10.12.0 (#135).
  • globals 17.12.0 → 17.13.0 (#137).
  • @cldmv/eslint-plugin-jsonv 1.0.13 → 1.0.15, @cldmv/jsonv 1.1.1 → 1.1.3 and @cldmv/prettier-plugin-jsonv 1.1.0 → 1.1.3 (#138). These are the lint and format plugins for .jsonv files. The releases between these versions update test expectations and CI; this repository has no .jsonv files.
  • @types/node 26.6.3 → 26.6.4 (#138).
  • why-is-node-running 3.2.2 → 3.2.1, a transitive dependency of vitest. vitest 5.0.3 depends on exactly 3.2.1 where 5.0.2 allowed ^3.2.1, so the lockfile steps back to that version; it is a development-only package.

📚 Documentation

Upgrade notes

  • No breaking changes and no change to the fixHeaders API, the CLI, the header format or the declared dependency ranges: drop-in for v2.2.1.
  • The published package differs from 2.2.1 only in its version field. Installs resolve ignore from ^7.0.5 as before.
  • Contributors need Node.js 22.12 or later, which was already the repository's floor. Node.js 20 cannot install the development toolchain: @cldmv/vitest-runner 1.5.3 and chalk 6 both require Node.js 22.

... (truncated)

Commits

Updates @cldmv/vitest-runner from 1.5.3 to 1.5.4

Release notes

Sourced from @​cldmv/vitest-runner's releases.

v1.5.4

vitest-runner v1.5.4 Changelog

Release Date: October 2026 Release Type: Patch Branch: next → master

Overview

A dev-tooling dependency release with no change to the published package. Two development dependencies move forward, @cldmv/fix-headers (the tool that maintains the comment headers at the top of source, test, config and workflow files) and @cldmv/configs (the shared lint, format and header configuration), and the dev-only transitive brace-expansion is patched to 5.0.12.

Nothing under src/, tests/, bin/ or the build configuration changed, so dist/ and the CLI, the run() API and the CommonJS entry are identical to v1.5.3. The runtime dependency and peer ranges are untouched, and the only lockfile entries that moved are the three below. No file headers were restamped: both fix-headers steps and the configs bump re-ran fix:headers and changed no file.

🔧 Dependencies

All dev-only; none of them is installed by consumers of the package.

  • @cldmv/fix-headers ^2.1.2 → ^2.2.0 (locked 2.1.2 to 2.2.0), in two steps: 2.1.4 (#74) and 2.2.0 (#78). Version 2.1.4 never adds a JS comment header to JSON, Markdown or extension-less files and never walks into dependency folders. From 2.2.0 the @Last modified by tag follows content edits only, so a header-only rewrite keeps the recorded editor.
  • @cldmv/configs ^1.2.1 → ^1.2.4 (locked 1.2.1 to 1.2.4) (#78). The older shared fix-headers.json forced forceAuthorUpdate and forceLastModifiedAuthorUpdate on; version 1.2.4 sets both to false, so @Author is never rewritten and @Last modified by changes only on real content edits.
  • brace-expansion 5.0.9 → 5.0.12, an indirect dev dependency (pulled in through minimatch), updated by Dependabot's npm_and_yarn group (#76). Lockfile only; package.json does not list it.

📚 Documentation

Upgrade notes

  • No breaking changes and no change to what the package ships: a drop-in replacement for v1.5.3. The Node.js 22.12 floor introduced in v1.5.3 is unchanged.

coverage

Metric Coverage
Statements 99.4%
Branches 99.6%
Functions 100.0%
Lines 99.3%

Avg: 99.5% · 37726c2 · Node lts/*

... (truncated)

Commits

Updates @eslint/css from 2.0.0 to 2.0.1

Release notes

Sourced from @​eslint/css's releases.

css: v2.0.1

2.0.1 (2026-10-11)

Bug Fixes

  • allow additional properties in CSSLanguageOptions (#538) (471e568)
  • crash in no-important on non-standard important values (#541) (2985ad5)
  • handle var() and env() in no-invalid-at-rules (#570) (75050c3)
  • preserve keyframe selector casing in error messages (#571) (6589273)
  • preserve property casing in use-baseline messages (#573) (0f65765)
  • prevent crashes on [@supports](https://github.com/supports) queries in use-baseline (#576) (6ecf264)
  • recognize at-rule() feature queries in use-baseline (#533) (ba65596)
  • recognize CSS whitespace in named grid areas (#556) (ea5407d)
  • report each disallowed attribute location in selector-complexity (#580) (2bf2350)
  • support at-rules nested in [@page](https://github.com/page) and [@font-feature-values](https://github.com/font-feature-values) (#543) (12ec029)
  • update baseline data (bcd705e)
  • update baseline data (#561) (94d79a4)
  • update baseline data (#566) (9856c3b)
  • update baseline data (#579) (c60193b)
  • update baseline data (#585) (7a2dc06)
  • update baseline data (#589) (38ac3ad)
  • update dependency @​eslint/css-tree to ^4.1.1 (#568) (ae69b1a)
  • update eslint (#554) (33e7314)
Changelog

Sourced from @​eslint/css's changelog.

2.0.1 (2026-10-11)

Bug Fixes

  • allow additional properties in CSSLanguageOptions (#538) (471e568)
  • crash in no-important on non-standard important values (#541) (2985ad5)
  • handle var() and env() in no-invalid-at-rules (#570) (75050c3)
  • preserve keyframe selector casing in error messages (#571) (6589273)
  • preserve property casing in use-baseline messages (#573) (0f65765)
  • prevent crashes on [@supports](https://github.com/supports) queries in use-baseline (#576) (6ecf264)
  • recognize at-rule() feature queries in use-baseline (#533) (ba65596)
  • recognize CSS whitespace in named grid areas (#556) (ea5407d)
  • report each disallowed attribute location in selector-complexity (#580) (2bf2350)
  • support at-rules nested in [@page](https://github.com/page) and [@font-feature-values](https://github.com/font-feature-values) (#543) (12ec029)
  • update baseline data (bcd705e)
  • update baseline data (#561) (94d79a4)
  • update baseline data (#566) (9856c3b)
  • update baseline data (#579) (c60193b)
  • update baseline data (#585) (7a2dc06)
  • update baseline data (#589) (38ac3ad)
  • update dependency @​eslint/css-tree to ^4.1.1 (#568) (ae69b1a)
  • update eslint (#554) (33e7314)
Commits
  • c29255e chore: release 2.0.1 🚀 (#558)
  • 38ac3ad fix: update baseline data (#589)
  • 6ecf264 fix: prevent crashes on @supports queries in use-baseline (#576)
  • b774dbd chore: update dependency @​eslint/json to ^2.1.1 (#588)
  • 7a2dc06 fix: update baseline data (#585)
  • 2e80de0 docs: Update README sponsors
  • f6a4917 chore: update dependency prettier to v3.9.9 (#583)
  • 2bf2350 fix: report each disallowed attribute location in selector-complexity (#580)
  • 0f65765 fix: preserve property casing in use-baseline messages (#573)
  • c60193b fix: update baseline data (#579)
  • Additional commits viewable in compare view

Updates @eslint/json from 2.1.0 to 2.1.1

Release notes

Sourced from @​eslint/json's releases.

json: v2.1.1

2.1.1 (2026-10-06)

Bug Fixes

  • escape normalized keys in no-unnormalized-keys autofix (#283) (35790d4)
  • handle empty and whitespace-only JSON inputs (#259) (85ca99b)
  • preserve parsing error locations in Bun (#281) (bbaa18f)
  • update dependency @​eslint/plugin-kit to ^0.7.3 (#276) (780bfcd)
Changelog

Sourced from @​eslint/json's changelog.

2.1.1 (2026-10-06)

Bug Fixes

  • escape normalized keys in no-unnormalized-keys autofix (#283) (35790d4)
  • handle empty and whitespace-only JSON inputs (#259) (85ca99b)
  • preserve parsing error locations in Bun (#281) (bbaa18f)
  • update dependency @​eslint/plugin-kit to ^0.7.3 (#276) (780bfcd)
Commits
  • 412ad09 chore: release 2.1.1 🚀 (#278)
  • e7f8cbe chore: update dependency prettier to v3.9.9 (#289)
  • 812d486 docs: add missing Options section (#290)
  • a2b9af9 docs: Update README sponsors
  • c6af8f6 chore: update dependency prettier to v3.9.8 (#288)
  • 35790d4 fix: escape normalized keys in no-unnormalized-keys autofix (#283)
  • 7eb9cf3 docs: clarify JSON5 Infinity and NaN handling in no-unsafe-values (#279)
  • 85ca99b fix: handle empty and whitespace-only JSON inputs (#259)
  • 2cf7eb9 chore: update dependency prettier to v3.9.7 (#287)
  • 3285615 docs: Update README sponsors
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the patch group across 1 directory with 6 updates
c471c7a 
Bumps the patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@cldmv/fix-headers](https://github.com/CLDMV/fix-headers) | `2.2.0` | `2.2.2` |
| [@cldmv/vitest-runner](https://github.com/CLDMV/vitest-runner) | `1.5.3` | `1.5.4` |
| [@eslint/css](https://github.com/eslint/css) | `2.0.0` | `2.0.1` |
| [@eslint/json](https://github.com/eslint/json) | `2.1.0` | `2.1.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |



Updates `@cldmv/fix-headers` from 2.2.0 to 2.2.2
- [Release notes](https://github.com/CLDMV/fix-headers/releases)
- [Commits](CLDMV/fix-headers@v2.2...v2.2.2)

Updates `@cldmv/vitest-runner` from 1.5.3 to 1.5.4
- [Release notes](https://github.com/CLDMV/vitest-runner/releases)
- [Commits](CLDMV/vitest-runner@v1.5.3...v1.5.4)

Updates `@eslint/css` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/css/releases)
- [Changelog](https://github.com/eslint/css/blob/main/CHANGELOG.md)
- [Commits](eslint/css@css-v2.0.0...css-v2.0.1)

Updates `@eslint/json` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/eslint/json/releases)
- [Changelog](https://github.com/eslint/json/blob/main/CHANGELOG.md)
- [Commits](eslint/json@json-v2.1.0...json-v2.1.1)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@cldmv/fix-headers"
  dependency-version: 2.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: "@cldmv/vitest-runner"
  dependency-version: 1.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: "@eslint/css"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: "@eslint/json"
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@cldmv-bot cldmv-bot Bot added type: dependencies Relates to dependency updates, version bumps, or package management and removed dependencies labels Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

type: dependencies Relates to dependency updates, version bumps, or package management

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants