Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 6 updates#414

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-c2967d322d
Closed

chore(deps-dev): bump the development-dependencies group across 1 directory with 6 updates#414
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-c2967d322d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps the development-dependencies group with 6 updates in the / directory:

Package From To
@changesets/cli 2.30.0 2.31.0
@lavamoat/allow-scripts 3.4.3 5.0.1
@lavamoat/preinstall-always-fail 2.1.1 3.0.0
@openally/config.typescript 1.2.1 1.3.0
testcontainers 11.12.0 11.14.0
typescript 5.9.3 6.0.3

Updates @changesets/cli from 2.30.0 to 2.31.0

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.0

Minor Changes

  • #1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

  • #1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

  • d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

  • #1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

  • #1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

  • #1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

  • Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

    • @​changesets/assemble-release-plan@​6.0.10
    • @​changesets/get-dependents-graph@​2.1.4
    • @​changesets/apply-release-plan@​7.1.1
    • @​changesets/get-release-plan@​4.0.16
    • @​changesets/config@​3.1.4
Commits
  • 9cce6db Version Packages (#1897)
  • d2121dc Fix npm auth for path-based registries during publish by preserving configure...
  • 036fdd4 Fix several changeset version issues with workspace protocol dependencies (...
  • 5c4731f Gracefully handle stale npm info data leading to duplicate publish attempts...
  • 96ca062 Error on unsupported flags for individual CLI commands (#1889)
  • 42943b7 fix(cli): respond to --help on all subcommands (#1873)
  • f61e716 Improved detection for published state of prerelease-only packages without ...
  • See full diff in compare view

Updates @lavamoat/allow-scripts from 3.4.3 to 5.0.1

Release notes

Sourced from @​lavamoat/allow-scripts's releases.

aa: v5.0.1

5.0.1 (2026-04-16)

Bug Fixes

  • deps: update dependency resolve to v1.22.12 (#1951) (4a06108)

allow-scripts: v5.0.1

5.0.1 (2026-04-16)

Bug Fixes

  • allow-scripts: fix migration logic for v5 (62f17b4)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^5.0.0 to ^5.0.1

aa: v5.0.0

5.0.0 (2026-03-20)

⚠ BREAKING CHANGES

  • Node.js v18 is no longer supported.

Bug Fixes

allow-scripts: v5.0.0

5.0.0 (2026-04-15)

⚠ BREAKING CHANGES

  • allow-scripts: no longer matches lower version with the allowed
  • allow-scripts: defaults to pinning versions, requires an action to migrate

Features

  • allow-scripts: install scripts pinned to versions (fcf80c5)

... (truncated)

Changelog

Sourced from @​lavamoat/allow-scripts's changelog.

5.0.1 (2026-04-16)

Bug Fixes

  • allow-scripts: fix migration logic for v5 (62f17b4)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^5.0.0 to ^5.0.1

5.0.0 (2026-04-15)

⚠ BREAKING CHANGES

  • allow-scripts: no longer matches lower version with the allowed
  • allow-scripts: defaults to pinning versions, requires an action to migrate

Features

  • allow-scripts: install scripts pinned to versions (fcf80c5)

Bug Fixes

  • allow-scripts: usability improvements/fixes (#1941) (0bd9805)
  • deps: update dependency @​npmcli/run-script to v10.0.4 (#1917) (8c834d7)

4.0.0 (2026-03-20)

⚠ BREAKING CHANGES

  • Node.js v18 is no longer supported.

Bug Fixes

  • drop Node.js v18 support across the board (#1886) (1190c9b)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^4.3.6 to ^5.0.0
Commits
  • d4da884 chore: release main (#1957)
  • 62f17b4 fix(allow-scripts): fix migration logic for v5
  • 1f023d3 chore: release main (#1939)
  • 1cb703a chore(allow-scripts): documentation improvements (#1940)
  • 0bd9805 fix(allow-scripts): usability improvements/fixes (#1941)
  • 8c834d7 fix(deps): update dependency @​npmcli/run-script to v10.0.4 (#1917)
  • fcf80c5 feat(allow-scripts)!: install scripts pinned to versions
  • fdffea0 chore: release main (#1887)
  • 71a869c chore: lint the repo
  • 03f188d chore: upgrade ESLint v8 to v10 with flat config
  • Additional commits viewable in compare view

Updates @lavamoat/preinstall-always-fail from 2.1.1 to 3.0.0

Release notes

Sourced from @​lavamoat/preinstall-always-fail's releases.

preinstall-always-fail: v3.0.0

3.0.0 (2026-03-20)

⚠ BREAKING CHANGES

  • Node.js v18 is no longer supported.

Bug Fixes

  • drop Node.js v18 support across the board (#1886) (1190c9b)

webpack: v2.1.3

2.1.3 (2026-04-16)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^5.0.0 to ^5.0.1

webpack: v2.1.2

2.1.2 (2026-04-15)

Bug Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/types bumped from ^1.0.0 to ^1.0.1
      • lavamoat-core bumped from ^18.0.1 to ^18.0.2
Changelog

Sourced from @​lavamoat/preinstall-always-fail's changelog.

3.0.0 (2026-03-20)

⚠ BREAKING CHANGES

  • Node.js v18 is no longer supported.

Bug Fixes

  • drop Node.js v18 support across the board (#1886) (1190c9b)
Commits

Updates @openally/config.typescript from 1.2.1 to 1.3.0

Release notes

Sourced from @​openally/config.typescript's releases.

@​openally/config.typescript@1.3.0

Minor Changes

Changelog

Sourced from @​openally/config.typescript's changelog.

1.3.0

Minor Changes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​openally/config.typescript since your current version.


Updates testcontainers from 11.12.0 to 11.14.0

Release notes

Sourced from testcontainers's releases.

v11.14.0

Changes

🚀 Features

📖 Documentation

🧹 Maintenance

📦 Dependency Updates

v11.13.0

Changes

🚀 Features

📖 Documentation

🧹 Maintenance

📦 Dependency Updates

... (truncated)

Commits
  • afe8b72 Document LocalStack authentication requirements (#1295)
  • 841179f Only include TS files in test coverage paths (#1294)
  • 4b470b5 Add auto cleanup control for containers and compose (#1293)
  • 74b2453 Add support for running in parallel for distinct UIDs (#1276)
  • a6c5358 Bump the dependencies group across 14 directories with 13 updates (#1289)
  • d0a1df4 Bump the dependencies group across 1 directory with 21 updates (#1287)
  • e881d49 Bump mkdocs-material from 9.7.5 to 9.7.6 in the dependencies group (#1278)
  • 9c94bde Bump the dependencies group across 11 directories with 10 updates (#1279)
  • 6b78e96 Bump the dependencies group with 19 updates (#1280)
  • a20ac80 Fix etcd/vault repository.url in package.json (#1273)
  • Additional commits viewable in compare view

Updates typescript from 5.9.3 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 6 updates

Bumps the development-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.30.0` | `2.31.0` |
| [@lavamoat/allow-scripts](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/allow-scripts) | `3.4.3` | `5.0.1` |
| [@lavamoat/preinstall-always-fail](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/preinstall-always-fail) | `2.1.1` | `3.0.0` |
| [@openally/config.typescript](https://github.com/OpenAlly/configs/tree/HEAD/src/typescript) | `1.2.1` | `1.3.0` |
| [testcontainers](https://github.com/testcontainers/testcontainers-node) | `11.12.0` | `11.14.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` |



Updates `@changesets/cli` from 2.30.0 to 2.31.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.30.0...@changesets/cli@2.31.0)

Updates `@lavamoat/allow-scripts` from 3.4.3 to 5.0.1
- [Release notes](https://github.com/LavaMoat/LavaMoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/allow-scripts/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/LavaMoat/commits/aa-v5.0.1/packages/allow-scripts)

Updates `@lavamoat/preinstall-always-fail` from 2.1.1 to 3.0.0
- [Release notes](https://github.com/LavaMoat/LavaMoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/preinstall-always-fail/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/LavaMoat/commits/allow-scripts-v3.0.0/packages/preinstall-always-fail)

Updates `@openally/config.typescript` from 1.2.1 to 1.3.0
- [Release notes](https://github.com/OpenAlly/configs/releases)
- [Changelog](https://github.com/OpenAlly/configs/blob/main/src/typescript/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/configs/commits/@openally/config.typescript@1.3.0/src/typescript)

Updates `testcontainers` from 11.12.0 to 11.14.0
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases)
- [Commits](testcontainers/testcontainers-node@v11.12.0...v11.14.0)

Updates `typescript` from 5.9.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@lavamoat/allow-scripts"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@lavamoat/preinstall-always-fail"
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@openally/config.typescript"
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: testcontainers
  dependency-version: 11.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 11, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 11, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-c2967d322d branch May 11, 2026 09:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants