Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 22 updates#452

Merged
kevinchappell merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-68f40346bb
May 16, 2026
Merged

chore(deps): bump the all-dependencies group across 1 directory with 22 updates#452
kevinchappell merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-68f40346bb

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 16, 2026 •
edited
Loading

Bumps the all-dependencies group with 22 updates in the / directory:

Package From To
@draggable/formeo-languages 3.4.1 3.5.0
@draggable/i18n 1.0.7 1.1.1
@draggable/tooltip 1.2.2 1.2.3
lodash 4.17.23 4.18.1
sortablejs 1.15.3 1.15.7
@biomejs/biome 2.3.3 2.4.15
@commitlint/cli 19.5.0 21.0.1
@commitlint/config-conventional 19.5.0 21.0.1
@playwright/test 1.56.1 1.60.0
@semantic-release/github 11.0.1 12.0.8
@semantic-release/npm 13.1.3 13.1.5
@types/node 22.19.0 25.8.0
ace-builds 1.36.5 1.44.0
jsdom 25.0.1 29.1.1
lefthook 1.8.2 2.1.6
npm-run-all 2.1.0 4.1.5
sass-embedded 1.81.0 1.99.0
semantic-release 25.0.2 25.0.3
vite 7.3.3 8.0.13
vite-plugin-banner 0.8.0 0.8.1
zod 3.23.8 4.4.3
zod-to-json-schema 3.23.5 3.25.2

Updates @draggable/formeo-languages from 3.4.1 to 3.5.0

Release notes

Sourced from @​draggable/formeo-languages's releases.

v3.5.0

3.5.0 (2026-01-13)

Features

  • add cancel and configuration labels (1b4ba56)
Changelog

Sourced from @​draggable/formeo-languages's changelog.

3.5.0 (2026-01-13)

Features

  • add cancel and configuration labels (1b4ba56)
Commits

Updates @draggable/i18n from 1.0.7 to 1.1.1

Release notes

Sourced from @​draggable/i18n's releases.

v1.1.1

1.1.1 (2026-05-08)

Bug Fixes

  • manual install terser (da669c5)
  • outdated dependencies (97120c2)
  • publish requires node > v24.10.0 (77ae55b)

v1.1.0

1.1.0 (2026-01-13)

Features

v1.0.8

1.0.8 (2025-11-13)

Bug Fixes

Changelog

Sourced from @​draggable/i18n's changelog.

1.1.1 (2026-05-08)

Bug Fixes

  • manual install terser (da669c5)
  • outdated dependencies (97120c2)
  • publish requires node > v24.10.0 (77ae55b)

1.1.0 (2026-01-13)

Features

1.0.8 (2025-11-13)

Bug Fixes

Commits

Updates @draggable/tooltip from 1.2.2 to 1.2.3

Release notes

Sourced from @​draggable/tooltip's releases.

v1.2.3

1.2.3 (2026-01-19)

Bug Fixes

  • accidental multiple tooltip instances (ec1d70e)
  • accidental multiple tooltip instances (1932064)
  • accidental multiple tooltip instances (0b1b9ee)
Changelog

Sourced from @​draggable/tooltip's changelog.

1.2.3 (2026-01-19)

Bug Fixes

  • accidental multiple tooltip instances (ec1d70e)
  • accidental multiple tooltip instances (1932064)
  • accidental multiple tooltip instances (0b1b9ee)
Commits
  • aadec10 chore(release): 1.2.3 [skip ci]
  • ec1d70e fix: accidental multiple tooltip instances
  • 1932064 fix: accidental multiple tooltip instances
  • 0b1b9ee fix: accidental multiple tooltip instances
  • See full diff in compare view

Updates lodash from 4.17.23 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates sortablejs from 1.15.3 to 1.15.7

Release notes

Sourced from sortablejs's releases.

v1.15.7

#2431: Fix potential browser freezing bug #2369: Fix edge-case where inputs being erroneously re-checked when another sortable is destroyed

v1.15.6

  • Restore pervious text clearing selection behaviour on fallback-enabled sortable lists. Text should be cleared whenever mouse is down on a sortable item, but text inputs within items should still be interactable
  • #2244: Fix issue where multi-drag selection doesn't work on IOS devices

v1.15.5

  • #2410: Further improvements to handling of text selection during drag, to allow text inputs to continue to function within sortable items. Removed the previous nextTick solution which caused text inputs to be noninteractive, and instead have moved the text selection clearing to the actual drag start.

v1.15.4

  • Fix issue where text selection occurs during dragging when fallback is enabled
  • Improved support for pointer events
  • #1897: [MultiDrag] Prevent multi-select of non-draggable and filtered items
Commits
  • 031649b 1.15.7
  • 3696da4 Merge pull request #2369 from daftspunk/patch-1
  • ddd0597 Merge pull request #2431 from marvinscharle/fix/sortable-crashes-shadow-dom
  • bd74abb fix: Sortable crashes browser when event is triggered from within ShadowDom e...
  • 63ecb31 1.15.6
  • 2217239 #2244: Allow supportPointer to be enabled by default for IOS
  • 7d7d5d6 restore old fallback selection clearing behaviour
  • 104d731 1.15.5
  • a81251f #2410: Further improve selection handling on drag start
  • ca13d2c #2410: clear selection after drag start only with fallback
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.3.3 to 2.4.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.15

2.4.15

Patch Changes

  • #9394 ba3480e Thanks @​dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.

  • #10254 e0a54cc Thanks @​dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

    For example, the following snippet triggers the rule:

    import { nextTick } from "vue";
nextTick(() => {
updateDom();
});

  • #10219 64aee45 Thanks @​dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

    For example, the following snippet triggers the rule:

    <input @keyup.13="submit" />

  • #10195 7b8d4e1 Thanks @​dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

  • #10238 1110256 Thanks @​dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

  • #10201 1a08f89 Thanks @​realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

  • #9574 3bd2b6a Thanks @​Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.

  • #10205 a704a6c Thanks @​Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

    The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.

    {
  "assist": {
    "actions": {
      "source": {
        "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
      }
    }
  }
}

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.15

Patch Changes

  • #9394 ba3480e Thanks @​dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.

  • #10254 e0a54cc Thanks @​dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

    For example, the following snippet triggers the rule:

    import { nextTick } from "vue";
nextTick(() => {
updateDom();
});

  • #10219 64aee45 Thanks @​dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

    For example, the following snippet triggers the rule:

    <input @keyup.13="submit" />

  • #10195 7b8d4e1 Thanks @​dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

  • #10238 1110256 Thanks @​dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

  • #10201 1a08f89 Thanks @​realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

  • #9574 3bd2b6a Thanks @​Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.

  • #10205 a704a6c Thanks @​Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

    The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.

    {
  "assist": {
    "actions": {
      "source": {
        "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
      }
    }
  }
}

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​biomejs/biome since your current version.


Updates @commitlint/cli from 19.5.0 to 21.0.1

Release notes

Sourced from @​commitlint/cli's releases.

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

CI

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

21.0.0 (2026-05-08)

Breaking

Fixes

Internals (Node 22 cleanup)

  • chore: replace dependencies with Node 22 built-ins by @​escapedcat in #4681 — drops glob, fast-glob, import-meta-resolve, minimist, fs-extra
  • refactor: replace read-pkg with native fs.readFile + JSON.parse by @​escapedcat in #4742
  • chore: update dependency yargs to v18 by @​escapedcat in #4686
  • chore: remove cross-env, move env vars to vitest config by @​escapedcat in #4684

Dependency updates

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/cli

21.0.0 (2026-05-08)

BREAKING CHANGES

  • drop node v18 and v20 support
  • Bump engines to >=v22 in all 39 package.json files
  • Update @​types/node to ^22.0.0
  • Update CI matrix to [22, 24]
  • Update Ubuntu baseline job to ubuntu:26.04
  • Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
  • Update pre-commit hook to use --ignore-engines
  • Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/cli

20.5.2 (2026-04-25)

Note: Version bump only for package @​commitlint/cli

20.5.0 (2026-03-15)

... (truncated)

Commits

Updates @commitlint/config-conventional from 19.5.0 to 21.0.1

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

CI

New Contributors

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

21.0.0 (2026-05-08)

Breaking

Fixes

Internals (Node 22 cleanup)

  • chore: replace dependencies with Node 22 built-ins by @​escapedcat in #4681 — drops glob, fast-glob, import-meta-resolve, minimist, fs-extra
  • refactor: replace read-pkg with native fs.readFile + JSON.parse by @​escapedcat in #4742
  • chore: update dependency yargs to v18 by @​escapedcat in #4686
  • chore: remove cross-env, move env vars to vitest config by @​escapedcat in #4684

Dependency updates

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/config-conventional

21.0.0 (2026-05-08)

BREAKING CHANGES

  • drop node v18 and v20 support
  • Bump engines to >=v22 in all 39 package.json files
  • Update @​types/node to ^22.0.0
  • Update CI matrix to [22, 24]
  • Update Ubuntu baseline job to ubuntu:26.04
  • Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
  • Update pre-commit hook to use --ignore-engines
  • Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/config-conventional

20.5.0 (2026-03-15)

Note: Version bump only for package @​commitlint/config-conventional

20.4.4 (2026-03-12)

... (truncated)

Commits

Updates @playwright/test from 1.56.1 to 1.60.0

Release notes

Sourced from @​playwright/test's releases.

v1.60.0

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});
await page.locator('#dropzone').drop({
data: {
'text/plain': 'hello world',
'text/uri-list': 'https://example.com',
},
});

🎯 Aria snapshots

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

... (truncated)

Commits

Updates @semantic-release/github from 11.0.1 to 12.0.8

Release notes

Sourced from @​semantic-release/github's releases.

v12.0.8

12.0.8 (2026-05-08)

Bug Fixes

  • deps: update dependency http-proxy-agent to v9 (#1203) (edd1652)

v12.0.7

12.0.7 (2026-05-08)

Bug Fixes

  • deps: update dependency https-proxy-agent to v9 (#1204) (1f17362)

v12.0.6

12.0.6 (2026-02-12)

Bug Fixes

  • latest: add make_latest property to the GH release PATCH request during publish (#1169) (f516337)

v12.0.5

12.0.5 (2026-02-07)

Bug Fixes

  • latest: add make_latest property to the GH release POST request during publish (#1157) (38051ba)

v12.0.4

12.0.4 (2026-02-06)

Bug Fixes

  • remove failTitle arg in findSRIssues call (#1164) (f7bdd88)

v12.0.3

12.0.3 (2026-01-30)

Bug Fixes

  • extend GraphQL alias prefix to prevent hash collisions (#1134) (ea6386d)

v12.0.2

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels May 16, 2026
@dependabot
chore(deps): bump the all-dependencies group across 1 directory with …
9328a5f 
…22 updates

Bumps the all-dependencies group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@draggable/formeo-languages](https://github.com/Draggable/formeo-languages) | `3.4.1` | `3.5.0` |
| [@draggable/i18n](https://github.com/Draggable/i18n) | `1.0.7` | `1.1.1` |
| [@draggable/tooltip](https://github.com/Draggable/tooltip) | `1.2.2` | `1.2.3` |
| [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` |
| [sortablejs](https://github.com/SortableJS/Sortable) | `1.15.3` | `1.15.7` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.3` | `2.4.15` |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `19.5.0` | `21.0.1` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `19.5.0` | `21.0.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.56.1` | `1.60.0` |
| [@semantic-release/github](https://github.com/semantic-release/github) | `11.0.1` | `12.0.8` |
| [@semantic-release/npm](https://github.com/semantic-release/npm) | `13.1.3` | `13.1.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.0` | `25.8.0` |
| [ace-builds](https://github.com/ajaxorg/ace-builds) | `1.36.5` | `1.44.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `25.0.1` | `29.1.1` |
| [lefthook](https://github.com/evilmartians/lefthook) | `1.8.2` | `2.1.6` |
| [npm-run-all](https://github.com/mysticatea/npm-run-all) | `2.1.0` | `4.1.5` |
| [sass-embedded](https://github.com/sass/embedded-host-node) | `1.81.0` | `1.99.0` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.2` | `25.0.3` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.3` | `8.0.13` |
| [vite-plugin-banner](https://github.com/chengpeiquan/vite-plugin-banner) | `0.8.0` | `0.8.1` |
| [zod](https://github.com/colinhacks/zod) | `3.23.8` | `4.4.3` |
| [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.23.5` | `3.25.2` |



Updates `@draggable/formeo-languages` from 3.4.1 to 3.5.0
- [Release notes](https://github.com/Draggable/formeo-languages/releases)
- [Changelog](https://github.com/Draggable/formeo-languages/blob/master/CHANGELOG.md)
- [Commits](Draggable/formeo-languages@v3.4.1...v3.5.0)

Updates `@draggable/i18n` from 1.0.7 to 1.1.1
- [Release notes](https://github.com/Draggable/i18n/releases)
- [Changelog](https://github.com/Draggable/i18n/blob/master/CHANGELOG.md)
- [Commits](Draggable/i18n@v1.0.7...v1.1.1)

Updates `@draggable/tooltip` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/Draggable/tooltip/releases)
- [Changelog](https://github.com/Draggable/tooltip/blob/main/CHANGELOG.md)
- [Commits](Draggable/tooltip@v1.2.2...v1.2.3)

Updates `lodash` from 4.17.23 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

Updates `sortablejs` from 1.15.3 to 1.15.7
- [Release notes](https://github.com/SortableJS/Sortable/releases)
- [Commits](SortableJS/Sortable@1.15.3...1.15.7)

Updates `@biomejs/biome` from 2.3.3 to 2.4.15
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome)

Updates `@commitlint/cli` from 19.5.0 to 21.0.1
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.1/@commitlint/cli)

Updates `@commitlint/config-conventional` from 19.5.0 to 21.0.1
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.1/@commitlint/config-conventional)

Updates `@playwright/test` from 1.56.1 to 1.60.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.56.1...v1.60.0)

Updates `@semantic-release/github` from 11.0.1 to 12.0.8
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v11.0.1...v12.0.8)

Updates `@semantic-release/npm` from 13.1.3 to 13.1.5
- [Release notes](https://github.com/semantic-release/npm/releases)
- [Commits](semantic-release/npm@v13.1.3...v13.1.5)

Updates `@types/node` from 22.19.0 to 25.8.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `ace-builds` from 1.36.5 to 1.44.0
- [Release notes](https://github.com/ajaxorg/ace-builds/releases)
- [Changelog](https://github.com/ajaxorg/ace-builds/blob/master/CHANGELOG.md)
- [Commits](ajaxorg/ace-builds@v1.36.5...v1.44.0)

Updates `jsdom` from 25.0.1 to 29.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v25.0.1...v29.1.1)

Updates `lefthook` from 1.8.2 to 2.1.6
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v1.8.2...v2.1.6)

Updates `npm-run-all` from 2.1.0 to 4.1.5
- [Release notes](https://github.com/mysticatea/npm-run-all/releases)
- [Commits](mysticatea/npm-run-all@v2.1.0...v4.1.5)

Updates `sass-embedded` from 1.81.0 to 1.99.0
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](sass/embedded-host-node@1.81.0...1.99.0)

Updates `semantic-release` from 25.0.2 to 25.0.3
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.2...v25.0.3)

Updates `vite` from 7.3.3 to 8.0.13
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.13/packages/vite)

Updates `vite-plugin-banner` from 0.8.0 to 0.8.1
- [Release notes](https://github.com/chengpeiquan/vite-plugin-banner/releases)
- [Commits](chengpeiquan/vite-plugin-banner@v0.8.0...v0.8.1)

Updates `zod` from 3.23.8 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.23.8...v4.4.3)

Updates `zod-to-json-schema` from 3.23.5 to 3.25.2
- [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases)
- [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md)
- [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@commitlint/cli"
  dependency-version: 21.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@draggable/formeo-languages"
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@draggable/i18n"
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@draggable/tooltip"
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@semantic-release/github"
  dependency-version: 12.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@semantic-release/npm"
  dependency-version: 13.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.8.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: ace-builds
  dependency-version: 1.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: jsdom
  dependency-version: 29.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: lefthook
  dependency-version: 2.1.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: npm-run-all
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: sass-embedded
  dependency-version: 1.99.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: semantic-release
  dependency-version: 25.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: sortablejs
  dependency-version: 1.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: vite
  dependency-version: 8.0.13
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: vite-plugin-banner
  dependency-version: 0.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: zod-to-json-schema
  dependency-version: 3.25.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the all-dependencies group with 22 updates chore(deps): bump the all-dependencies group across 1 directory with 22 updates May 16, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/all-dependencies-68f40346bb branch from e244cbf to 9328a5f Compare May 16, 2026 06:01
@kevinchappell kevinchappell merged commit 415f880 into main May 16, 2026
1 of 2 checks passed
@kevinchappell kevinchappell deleted the dependabot/npm_and_yarn/all-dependencies-68f40346bb branch May 16, 2026 06:05
@kevinchappell
Copy link
Copy Markdown
Collaborator

kevinchappell commented May 16, 2026

🎉 This PR is included in version 5.0.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

@kevinchappell kevinchappell mentioned this pull request May 16, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies javascript Pull requests that update javascript code released

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kevinchappell