build(deps-dev): bump the development-dependencies group with 25 updates by dependabot[bot] · Pull Request #444 · proompteng/bilig

dependabot · 2026-06-08T12:25:48Z

Bumps the development-dependencies group with 25 updates:

Package	From	To
@playwright/test	`1.58.2`	`1.60.0`
@types/node	`25.5.0`	`25.9.2`
@vitest/coverage-v8	`4.1.2`	`4.1.8`
ajv	`8.17.1`	`8.20.0`
dependency-cruiser	`17.3.10`	`17.4.3`
hyperformula	`3.2.0`	`3.3.0`
jsdom	`29.0.1`	`29.1.1`
knip	`6.3.1`	`6.16.1`
lint-staged	`16.4.0`	`17.0.7`
oxfmt	`0.42.0`	`0.53.0`
oxlint	`1.57.0`	`1.68.0`
oxlint-tsgolint	`0.18.1`	`0.23.0`
tsx	`4.21.0`	`4.22.4`
typescript	`6.0.2`	`6.0.3`
vite	`8.0.9`	`8.0.16`
vitest	`4.1.2`	`4.1.8`
yaml	`2.8.3`	`2.9.0`
@tailwindcss/vite	`4.2.2`	`4.3.0`
@vitejs/plugin-react	`6.0.1`	`6.0.2`
tailwindcss	`4.2.2`	`4.3.0`
@truecalc/core	`0.6.4`	`0.6.5`
@univerjs/preset-sheets-node-core	`0.23.0`	`0.25.0`
@univerjs/presets	`0.23.0`	`0.25.0`
assemblyscript	`0.28.12`	`0.28.18`
ai	`6.0.195`	`6.0.197`

Updates @playwright/test from 1.58.2 to 1.60.0

Release notes

Sourced from @playwright/test's releases.

v1.60.0

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:
await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.
🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:
await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});
await page.locator('#dropzone').drop({
data: {
'text/plain': 'hello world',
'text/uri-list': 'https://example.com',
},
});
🎯 Aria snapshots

expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').

New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:
test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});
New APIs

Browser, Context and Page

... (truncated)

Commits

87bb9dd cherry-pick(#40747): fix(yauzl): vendor yauzl with destroy-lifecycle fix
9a9c51c cherry-pick(#40733): chore(electron): revert #40184 (move Electron API to a s...
4b3b628 cherry-pick(#40736): Revert "feat(electron): add timeout option to electronAp...
f869f96 chore: bump version to v1.60.0 (#40714)
7eb6918 cherry-pick(#40710): docs: release notes v1.60
118d2aa cherry-pick(#40693): chore(python): formdata path type
54012f5 chore(deps): bump ip-address and express-rate-limit (#40680)
9fa531d fix(screencast): unblock frame ack when an async client disconnects (#40674)
3649db5 chore(mcp): bump default extension protocol to v2 (#40678)
bb6c009 chore(extension): mark 0.2.1 (#40679)
Additional commits viewable in compare view

Updates @types/node from 25.5.0 to 25.9.2

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.2 to 4.1.8

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.8

   🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in vitest-dev/vitest#10138 (31882)

Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in vitest-dev/vitest#10196 (2847d)

browser: Simplify orchestrator otel carrier - by @hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

Stringify diff objects only once - by @sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

v4.1.5

   🚀 Experimental Features

coverage: Istanbul to support instrumenter option - by @BartWaardenburg and @AriPerkkio in vitest-dev/vitest#10119 (0e0ff)

   🐞 Bug Fixes

--project negation excludes browser instances - by @felamaslen in vitest-dev/vitest#10131 (9423d)

Project color label on html reporter - by @hi-ogawa in vitest-dev/vitest#10142 (596f7)

Fix vi.defineHelper called as object method - by @hi-ogawa in vitest-dev/vitest#10163 (122c2)

Alias agent reporter to minimal - by @sheremet-va in vitest-dev/vitest#10157 (663b9)

Respect diff config options in soft assertions - by @Copilot, sheremet-va and @sheremet-va in vitest-dev/vitest#8696 (9787d)

Respect diff config options in soft assertions " - by @sheremet-va in vitest-dev/vitest#8696 (7dc6d)

ast-collect: Recognize _vi_import prefix in static test discovery - by @Yejneshwar in vitest-dev/vitest#10129 (32546)

coverage: Descriptive error message when reports directory is removed during test run - by @DaveT1991 and @AriPerkkio in vitest-dev/vitest#10117 (14133)

snapshot: Increase default snapshot max output length - by @hi-ogawa and Codex in vitest-dev/vitest#10150 (21e66)

ui: Fix jsx/tsx syntax highlight - by @hi-ogawa in vitest-dev/vitest#10152 (f1b1f)

web-worker: Support MessagePort objects referenced inside postMessage data - by @whitphx and Claude Opus 4.6 (1M context) in vitest-dev/vitest#9927 and vitest-dev/vitest#10124 (7ad7d)

api: Make test-specification options writable - by @sheremet-va in vitest-dev/vitest#10154 (6abd5)

    View changes on GitHub

... (truncated)

Commits

e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
a09d472 chore: release v4.1.7
a8fd24c chore: release v4.1.6
e399846 chore: release v4.1.5
ac04bac chore: release v4.1.4
2dc0d62 chore: release v4.1.3
See full diff in compare view

Updates ajv from 8.17.1 to 8.20.0

Release notes

Sourced from ajv's releases.

v8.20.0

What's Changed

fix: add support for node 22/24, drop node 16/21 by @jasoniangreen in ajv-validator/ajv#2580

fix: add ES2022.RegExp for RegExpIndicesArray by @SignpostMarv in ajv-validator/ajv#2604

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

v8.19.0

What's Changed

fix prototype pollution via format keyword using $data ref by @epoberezkin in ajv-validator/ajv#2607

Full Changelog: ajv-validator/ajv@v8.18.0...v8.19.0

v8.18.0

What's Changed

feat: allow tree-shaking by adding "sideEffects": false to package.json by @josdejong in ajv-validator/ajv#2480

fix: #2482 Infinity and NaN serialise to null by @jasoniangreen in ajv-validator/ajv#2487

fix: small grammatical error in managing-schemas.md by @monteiro-renato in ajv-validator/ajv#2508

fix: typos in schema-language.md by @monteiro-renato in ajv-validator/ajv#2507

fix(pattern): use configured RegExp engine with $data keyword to mitigate ReDoS attacks (CVE-2025-69873) by @epoberezkin in ajv-validator/ajv#2586

New Contributors

@josdejong made their first contribution in ajv-validator/ajv#2480

@monteiro-renato made their first contribution in ajv-validator/ajv#2508

Full Changelog: ajv-validator/ajv@v8.17.1...v8.18.0

Commits

0fba0b8 8.20.0
9caf8d6 fix: add ES2022.RegExp for RegExpIndicesArray; fixes ajv-validator/ajv#2603 (...
2065350 fix: add support for node 22/24, drop node 16/21 (#2580)
154b58d 8.19.0
e8d2bdc test/fix prototype pollution via $data ref with format keyword (#2607)
142ce84 8.18.0
720a23f fix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...
82735a1 fix: typos in schema-language.md (#2507)
b17ec32 fix: small grammatical error in managing-schemas.md (#2508)
69568d0 fix: #2482 Infinity and NaN serialise to null (#2487)
Additional commits viewable in compare view

Updates dependency-cruiser from 17.3.10 to 17.4.3

Release notes

Sourced from dependency-cruiser's releases.

v17.4.3

👷 maintenance

fbea056c build(npm): updates external dependencies

v17.4.2

📖 documentation

ae0fcd40 doc: corrects typos

👷 maintenance

ccef0faf chore(npm): sets ignore-scripts on ci

ca1fe64a chore(npm): makes publishing staged only

d4dad0e9/ 1d1bc84a/ ca1fe64a build(npm): updates external dependencies

v17.4.1

This release was created on github, but not published to npmjs

v17.4.0

✨ features

af08fc4e feat(init): adds basic consistency check for typescript & babel features against transpiler availability (#1057)

74ce6904 feat(report): adds configuration option for err-* and markdown reporters to show unresolved module names in the to-part of violations (#1056)

3b620f28 feat(analyze): enriches violations with the unresolved module name and the dependency types (#1055)

👷 maintenance

b333e0d3/ 1abe8808 build(npm): updates external dependencies

Commits

2584d9e 17.4.3
fbea056 build(npm): updates external dependencies
6434625 17.4.2
1759529 chore(ci): simplifies release flow again
56e501f 17.4.1
ccef0fa chore(npm): sets ignore-scripts on ci
ca1fe64 chore(npm): makes publishing staged only
b5b2c36 build(npm): updates external dependencies
1d1bc84 build(npm): updates external dependencies
ae0fcd4 doc: corrects typos
Additional commits viewable in compare view

Updates hyperformula from 3.2.0 to 3.3.0

Release notes

Sourced from hyperformula's releases.

3.3.0

Added

Added 12 database functions: DCOUNT, DSUM, DAVERAGE, DMAX, DMIN, DGET, DPRODUCT, DCOUNTA, DSTDEV, DSTDEVP, DVAR, DVARP. #1652

Added new functions: PERCENTILE, PERCENTILE.INC, PERCENTILE.EXC, QUARTILE, QUARTILE.INC, QUARTILE.EXC. #1650

Added maxPendingLazyTransformations configuration option to control memory usage by limiting accumulated transformations before cleanup. #1629

Added a new function: TEXTJOIN. #1640

Added a new function: SEQUENCE. #1645

Fixed

Fixed a memory leak in LazilyTransformingAstService where the transformations array grew unboundedly, causing increasing memory usage over time. #1629

Fixed a memory leak in UndoRedo where oldData entries for evicted undo stack entries were never cleaned up, causing increasing memory usage over time. #1629

Fixed the IRR function returning #NUM! error when the initial investment significantly exceeds the sum of returns. #1628

Fixed the ADDRESS function ignoring defaultValue when arguments are syntactically empty (e.g., =ADDRESS(2,3,,FALSE())). #1632

Changelog

Sourced from hyperformula's changelog.

[3.3.0] - 2026-05-20

Added

Added 12 database functions: DCOUNT, DSUM, DAVERAGE, DMAX, DMIN, DGET, DPRODUCT, DCOUNTA, DSTDEV, DSTDEVP, DVAR, DVARP. #1652

Added new functions: PERCENTILE, PERCENTILE.INC, PERCENTILE.EXC, QUARTILE, QUARTILE.INC, QUARTILE.EXC. #1650

Added maxPendingLazyTransformations configuration option to control memory usage by limiting accumulated transformations before cleanup. #1629

Added a new function: TEXTJOIN. #1640

Added a new function: SEQUENCE. #1645

Fixed

Fixed a memory leak in LazilyTransformingAstService where the transformations array grew unboundedly, causing increasing memory usage over time. #1629

Fixed a memory leak in UndoRedo where oldData entries for evicted undo stack entries were never cleaned up, causing increasing memory usage over time. #1629

Fixed the IRR function returning #NUM! error when the initial investment significantly exceeds the sum of returns. #1628

Fixed the ADDRESS function ignoring defaultValue when arguments are syntactically empty (e.g., =ADDRESS(2,3,,FALSE())). #1632

Commits

68ae691 Merge branch 'release/3.3.0'
55d5380 Bring back old links
5f7ea1d Improve docs links
4049fa5 Change release date
3a286f6 Improve wording in the AI toolchains landing pages
bbacfc9 3.3.0
1b6767f Refine the AI toolkits landing pages (#1670)
24121f8 docs: reframe AI SDK page as Vercel integration with prototype status (#1669)
456addd HF-122: Framework integration guides for React, Angular, Vue, Svelte (#1653)
362df83 HF-85: Implement all database functions (#1652)
Additional commits viewable in compare view

Updates jsdom from 29.0.1 to 29.1.1

Release notes

Sourced from jsdom's releases.

v29.1.1

Fixed 'border-radius' computed style serialization. (@asamuzaK)

Fixed computed style computation when using 'background-origin' and 'background-clip' CSS properties. (@asamuzaK)

Significantly optimized initial calls to getComputedStyle(), before the cache warms up. (@asamuzaK)

v29.1.0

Added basic support for the ratio CSS type. (@asamuzaK)

Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@asamuzaK)

v29.0.2

Significantly improved and sped up getComputedStyle(). Computed value rules are now applied across a broader set of properties, and include fixes related to inheritance, defaulting keywords, custom properties, and color-related values such as currentcolor and system colors. (@asamuzaK)

Fixed CSS 'background' and 'border' shorthand parsing. (@asamuzaK)

Commits

9b9ea7e 29.1.1
07efb78 Optimize computed style comparison
5f66329 Fix background-origin/background-clip in background shorthand
ad8af77 Fix border shorthand handling
5a3e88e 29.1.0
73db204 Update dependencies and dev dependencies
a7168a5 Support ratio CSS unit type
15346e0 Fix style cache invalidation
2a1e2cd 29.0.2
4097d66 Resolve computed CSS values lazily in CSSStyleDeclaration
Additional commits viewable in compare view

Updates knip from 6.3.1 to 6.16.1

Release notes

Sourced from knip's releases.

Release 6.16.1

Resolve SvelteKit ./$types in monorepos (resolve #1778) (370ef4cefec6540ee7d58249cc402f479ec76405)

Release 6.16.0

Update sponsors data + fix sponsors layout on narrow screen (fadf13aad5ebc36f7bc2fbc7615bfa77681d3660)

Detect binaries and entry files in node:child_process calls (fc3598cfac640a2ae53b0113883574bf15bc5d47)

It works™ (2d9ce845121484ef3ff84e4a761cfd98891d6c09)

Extend known issues doc w/ workaround (close #1763) (fcd444bf4c6b2ddc5d7bb0ebfd6f3991cf5d0be2)

Support ignoreExportsUsedInFile per workspace (close #1495) (4b898a971105d865d86d4dc81bc694721bff8793)

feat(vscode): add workspaceRoot config option to enable use in a VSCode workspace that does not have package.json at the workspace root (#1667) (7c1ebef6ab6d1c5a7f2f920d4243241246b53f4b) - thanks @anmilleriii!

Replace minimist with node:util.parseArgs (resolve #1492) (b360c5ce1acfbb2cbd5f4e92ecca6c9b461ae094)

Preserve minimist numeric coercion and --no-x negation (c12153ce0601378354421e454a6b6bbab74ae9fb)

Simplify parseArgs adapter (ba15e413be7515620e4224b21483a1a87659dc34)

Detect and credit registered custom elements (resolve #1394) (62dcda5fa46ccf6bdd94175b725fd38678049319)

Add Lit and FAST plugins to detect @customElement classes (348d2c9decf09bb61ab47477bc6cc57e4b089ec3)

Add new testimonials (77fd7ed7dffaccfa8bc024105fe81dbe09b70671)

Scope custom path aliases per workspace (resolve #1775) (d908099b52e4fd93b7947bafecbabeddfc7847f3)

Restructure tests (ec4c77941d42aef54bed9e4dd1cae8e8784aa147)

Simplify boolean check in parseArgs adapter (ba6865de03785eb49b2adf833f7f769eece78d49)

Scope static custom-element define detection to the FAST plugin (94632cddd15f75eadd204cb480b3df6c1f2a842d)

Add Custom Elements feature docs page (230bd734652f3a269b70da09cd26ac7e80a210cd)

Update known-issues.md (f1f4c1bceef9a6575d7b31cc1340538ea894f824)

Fix crash on backtick string literals in plugin config (resolve #1776) (f1adc7fbd68fc52a89a4d2a4d6b17d905d051de7)

Format (e4720cab435be48e1a40afa8c548e21bdb74b14e)

Fix backtick string literals in require() and plugin-name config arrays (#1776) (d14eb053331daaaeaec89c3c8e04cfeeba7580af)

Credit custom elements via aliases, scoped registries, and static blocks (d7cbe12bd904f65b20016bdd2dfd4a5d7c5c1524)

Improve Stencil plugin: credit @Component and recognize test files (152d73052f87f29b348abbab90e117cfb97dd69b)

Add Catalyst plugin to credit bare @controller custom elements (8a37f8c25b03cd4e55bd18ba822906be35fcd97b)

Document Stencil, Catalyst, static-block custom el reg. (105fba3a829f1cf4cf871035dbc9c170b0de7bc1)

Auto-format md (f4fcf4e1c6a399d761151fc367125416e7741675)

Release 6.15.0

Report exported type used only in inferred-return function body (resolve #1765) (2413408753f7abc7a9dfdba520990afd18c53ee0)

Work that EXPORTS.md again (7e13451fab7ad85362fb63a4715ea450690aedef)

Update npmx ecosystem snapshot (dfc401145a880f156c66eb83ea1622a99540304a)

Link dependencies key with notes (closes #1764) (e3e66cea9e946558940bf8705129efea3f23b3ba)

Resolve tsconfig paths when loading plugin configs (#1762) (0177c7466559e2ae99b5e1cd1e3a8043ca494edc) - thanks @jakeleventhal!

Avoid caching failed plugin config loads (#1768) (5e201cde9b1ba2568ead2ae790ab888c966828ae) - thanks @jakeleventhal!

Resolve extensionless .sass imports in SCSS compiler (#1770) (30c22835383b2355787cc2a871b22de80ff75544) - thanks @sebacardello!

fix(vite): detect inline module script entry points in index.html (#1772) (51f4eddc9e1b2fed1ba25e81fc596e9fb514ce01) - thanks @lucas-spin!

Harden vite inline module script import detection (b8abcfd2f4f5486aea08a934514bc55de86be030)

Use RecordableHistogram for timerified function stats (d575c6905704af1b0b4620edd874fc09bc86ed28)

Add orval plugin (resolves #1751) (4c82aa82c2a02fbda27a316389f210d11621f8cb)

Add treatTagHintsAsErrors and --no-tag-hints (resolves #1767) (4b6a573e0c1e0daf65c76c32f7336ea71db6bb64)

Add nano-spawn plugin (resolves #1769) (b2cad06dfd9958485537c5545c6c497fc8823ac3)

Simplify glob cache validation and ignore-list assembly (df1a9603a5ea8ed7bad9588bf13672cedf37c90e)

Dedupe ignore-pattern collection and dependency fixing (d49b626ad6736d7123d44568ef8c42a3e1d28aa3)

Simplify installed-binaries collection in manifest metadata (55143941eebbc8dac12c79b77c1f65a8b61dfbef)

Flatten control flow in ConfigurationChief (010d5709b0f9a3adc5ebe6e7169b9f5c4f29abc5)

Inline trivial installed-binaries and types-included accessors (b5afb9f29e3474eee4bf276c1de83cb0682a5663)

... (truncated)

Commits

a3169ec Release knip@6.16.1
370ef4c Resolve SvelteKit ./$types in monorepos (resolve #1778)
e9a5a64 Release knip@6.16.0
8a37f8c Add Catalyst plugin to credit bare @controller custom elements
152d730 Improve Stencil plugin: credit @Component and recognize test files
d7cbe12 Credit custom elements via aliases, scoped registries, and static blocks
d14eb05 Fix backtick string literals in require() and plugin-name config arrays (#1776)
f1adc7f Fix crash on backtick string literals in plugin config (resolve #1776)
94632cd Scope static custom-element define detection to the FAST plugin
ba6865d Simplify boolean check in parseArgs adapter
Additional commits viewable in compare view

Updates lint-staged from 16.4.0 to 17.0.7

Release notes

Sourced from lint-staged's releases.

v17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

v17.0.5

Patch Changes

#1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

v17.0.4

Patch Changes

#1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

after editing <file> it is staged with git add <file>, and then committed with git commit

after editing <file> it is committed with git commit --all without explicit git add

after editing <file> it is committed with git commit <pathspec> without explicit git add

There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

v17.0.3

Patch Changes

#1782 06813f9 Thanks @iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:

git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files

git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

v17.0.2

Patch Changes

#1779 88670ca Thanks @iiroj! - Enable immutable GitHub releases

v17.0.1

Patch Changes

#1776 4a5664b Thanks @iiroj! - Adjust GitHub Actions workflow so that automatic publishing works with signed commits.

v17.0.0

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

17.0.5

Patch Changes

#1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

17.0.4

Patch Changes

#1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

after editing <file> it is staged with git add <file>, and then committed with git commit

after editing <file> it is committed with git commit --all without explicit git add

after editing <file> it is committed with git commit <pathspec> without explicit git add

There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

17.0.3

Patch Changes

#1782 06813f9 Thanks @iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:

git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files

git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

17.0.2

Patch Changes

#1779 88670ca Thanks @iiroj! - Enable immutable GitHub releases

17.0.1

... (truncated)

Commits

cd11fec Merge pull request #1807 from lint-staged/changeset-release/main
15a8ee0 chore(changeset): release
797bbd9 Merge pull request #1808 from lint-staged/add-stashing-faq
504e307 docs: add FAQ entry on how stashing works
eff5cd1 Merge pull request #1806 from lint-staged/update-tinyexec
e692e58 build(deps): update tinyexec@^1.2.4
a2dd4ea Merge pull request #1805 from lint-staged/update-github-templates
c928519 docs: update GitHub templates
094ba56 Merge pull request #1798 from lint-staged/changeset-release/main
88e19fe chore(changeset): release
Additional commits viewable in compare view

Updates oxfmt from 0.42.0 to 0.53.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.52.0] - 2026-05-26

🚀 Features

16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#22454) (leaysgur)

[0.50.0] - 2026-05-15

🐛 Bug Fixes

43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

[0.49.0] - 2026-05-11

🚀 Features

6e8e818 oxfmt: Experimental .svelte support (#21700) (leaysgur)

[0.45.0] - 2026-04-13

🐛 Bug Fixes

50c389b oxfmt: Support .editorconfig quote_type (#20989) (leaysgur)

[0.44.0] - 2026-04-06

🐛 Bug Fixes

dd2df87 npm: Export package.json for oxlint and oxfmt (#20784) (kazuya kawaguchi)

4216380 oxfmt: Support .editorconfig tab_width fallback (#20988) (leaysgur)

[0.43.0] - 2026-03-30

🚀 Features

6ef440a oxfmt: Support bool for object style options (#20853) (leaysgur)

Commits

964a758 release(apps): oxlint v1.68.0 && oxfmt v0.53.0 (#22883)
68b455d release(apps): oxlint v1.67.0 && oxfmt v0.52.0 (#22735)
16b8058 feat(oxfmt): Support vite-plus/resolveConfig for vite.config.ts (#22454)
5570206 release(apps): oxlint v1.66.0 && oxfmt v0.51.0 (#22528)
25e5cbc release(apps): oxlint v1.65.0 && oxfmt v0.50.0 (#22458)

Bumps the development-dependencies group with 25 updates: | Package | From | To | | --- | --- | --- | | [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.60.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.0` | `25.9.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.2` | `4.1.8` | | [ajv](https://github.com/ajv-validator/ajv) | `8.17.1` | `8.20.0` | | [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `17.3.10` | `17.4.3` | | [hyperformula](https://github.com/handsontable/hyperformula) | `3.2.0` | `3.3.0` | | [jsdom](https://github.com/jsdom/jsdom) | `29.0.1` | `29.1.1` | | [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.3.1` | `6.16.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.4.0` | `17.0.7` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.42.0` | `0.53.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.57.0` | `1.68.0` | | [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `0.18.1` | `0.23.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.4` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.9` | `8.0.16` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.2` | `4.1.8` | | [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.2.2` | `4.3.0` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.1` | `6.0.2` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.2` | `4.3.0` | | [@truecalc/core](https://github.com/truecalc/core) | `0.6.4` | `0.6.5` | | [@univerjs/preset-sheets-node-core](https://github.com/dream-num/univer-presets) | `0.23.0` | `0.25.0` | | [@univerjs/presets](https://github.com/dream-num/univer-presets) | `0.23.0` | `0.25.0` | | [assemblyscript](https://github.com/AssemblyScript/assemblyscript) | `0.28.12` | `0.28.18` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.195` | `6.0.197` | Updates `@playwright/test` from 1.58.2 to 1.60.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.2...v1.60.0) Updates `@types/node` from 25.5.0 to 25.9.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/coverage-v8` from 4.1.2 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8) Updates `ajv` from 8.17.1 to 8.20.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v8.17.1...v8.20.0) Updates `dependency-cruiser` from 17.3.10 to 17.4.3 - [Release notes](https://github.com/sverweij/dependency-cruiser/releases) - [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md) - [Commits](sverweij/dependency-cruiser@v17.3.10...v17.4.3) Updates `hyperformula` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/handsontable/hyperformula/releases) - [Changelog](https://github.com/handsontable/hyperformula/blob/master/CHANGELOG.md) - [Commits](handsontable/hyperformula@3.2.0...3.3.0) Updates `jsdom` from 29.0.1 to 29.1.1 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v29.0.1...v29.1.1) Updates `knip` from 6.3.1 to 6.16.1 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/knip@6.16.1/packages/knip) Updates `lint-staged` from 16.4.0 to 17.0.7 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.4.0...v17.0.7) Updates `oxfmt` from 0.42.0 to 0.53.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.53.0/npm/oxfmt) Updates `oxlint` from 1.57.0 to 1.68.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.68.0/npm/oxlint) Updates `oxlint-tsgolint` from 0.18.1 to 0.23.0 - [Release notes](https://github.com/oxc-project/tsgolint/releases) - [Commits](oxc-project/tsgolint@v0.18.1...v0.23.0) Updates `tsx` from 4.21.0 to 4.22.4 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.22.4) Updates `typescript` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.2...v6.0.3) Updates `vite` from 8.0.9 to 8.0.16 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite) Updates `vitest` from 4.1.2 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `yaml` from 2.8.3 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.3...v2.9.0) Updates `@tailwindcss/vite` from 4.2.2 to 4.3.0 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/@tailwindcss-vite) Updates `@vitejs/plugin-react` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react) Updates `tailwindcss` from 4.2.2 to 4.3.0 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/tailwindcss) Updates `@truecalc/core` from 0.6.4 to 0.6.5 - [Release notes](https://github.com/truecalc/core/releases) - [Commits](truecalc/core@truecalc-mcp-v0.6.4...truecalc-mcp-v0.6.5) Updates `@univerjs/preset-sheets-node-core` from 0.23.0 to 0.25.0 - [Release notes](https://github.com/dream-num/univer-presets/releases) - [Changelog](https://github.com/dream-num/univer-presets/blob/dev/CHANGELOG.md) - [Commits](dream-num/univer-presets@v0.23.0...v0.25.0) Updates `@univerjs/presets` from 0.23.0 to 0.25.0 - [Release notes](https://github.com/dream-num/univer-presets/releases) - [Changelog](https://github.com/dream-num/univer-presets/blob/dev/CHANGELOG.md) - [Commits](dream-num/univer-presets@v0.23.0...v0.25.0) Updates `assemblyscript` from 0.28.12 to 0.28.18 - [Release notes](https://github.com/AssemblyScript/assemblyscript/releases) - [Commits](AssemblyScript/assemblyscript@v0.28.12...v0.28.18) Updates `ai` from 6.0.195 to 6.0.197 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/ai@6.0.197/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@6.0.197/packages/ai) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 25.9.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: ajv dependency-version: 8.20.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: dependency-cruiser dependency-version: 17.4.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: hyperformula dependency-version: 3.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: jsdom dependency-version: 29.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: knip dependency-version: 6.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: lint-staged dependency-version: 17.0.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: oxfmt dependency-version: 0.53.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint dependency-version: 1.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint-tsgolint dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: tsx dependency-version: 4.22.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vite dependency-version: 8.0.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: yaml dependency-version: 2.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: tailwindcss dependency-version: 4.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@truecalc/core" dependency-version: 0.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@univerjs/preset-sheets-node-core" dependency-version: 0.25.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@univerjs/presets" dependency-version: 0.25.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: assemblyscript dependency-version: 0.28.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: ai dependency-version: 6.0.197 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-08T12:44:12Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 8, 2026

gregkonush closed this Jun 8, 2026

gregkonush deleted the dependabot/npm_and_yarn/development-dependencies-0415dfe9ef branch June 8, 2026 12:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps-dev): bump the development-dependencies group with 25 updates#444

build(deps-dev): bump the development-dependencies group with 25 updates#444
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-0415dfe9ef

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

v1.60.0

🌐 HAR recording on Tracing

🪝 Drop API

🎯 Aria snapshots

🛑 test.abort()

New APIs

Browser, Context and Page

v4.1.8

🐞 Bug Fixes

View changes on GitHub

v4.1.7

🐞 Bug Fixes

View changes on GitHub

v4.1.6

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.1.5

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v8.20.0

What's Changed

v8.19.0

What's Changed

v8.18.0

What's Changed

New Contributors

v17.4.3

👷 maintenance

v17.4.2

📖 documentation

👷 maintenance

v17.4.1

v17.4.0

✨ features

👷 maintenance

3.3.0

Added

Fixed

[3.3.0] - 2026-05-20

Added

Fixed

v29.1.1

v29.1.0

v29.0.2

Release 6.16.1

Release 6.16.0

Release 6.15.0

v17.0.7

Patch Changes

v17.0.6

Patch Changes

v17.0.5

Patch Changes

v17.0.4

Patch Changes

v17.0.3

Patch Changes

v17.0.2

Patch Changes

v17.0.1

Patch Changes

v17.0.0

17.0.7

Patch Changes

17.0.6

Patch Changes

17.0.5

Patch Changes

17.0.4

Patch Changes

17.0.3

Patch Changes

17.0.2

Patch Changes

17.0.1

Changelog