chore(deps-dev): bump the dev-npm-major-dependencies group with 12 updates by dependabot[bot] · Pull Request #690 · zenn-dev/zenn-editor

dependabot · 2026-07-01T10:57:09Z

Bumps the dev-npm-major-dependencies group with 12 updates:

Package	From	To
@lerna-lite/cli	`4.11.4`	`5.3.0`
@lerna-lite/publish	`4.11.4`	`5.3.0`
@lerna-lite/version	`4.11.4`	`5.3.0`
@secretlint/secretlint-rule-preset-recommend	`11.3.1`	`13.0.2`
npm-run-all2	`8.0.4`	`9.0.1`
secretlint	`11.3.1`	`13.0.2`
@rspack/cli	`1.7.11`	`2.0.6`
@rspack/core	`1.7.11`	`2.0.6`
@vitejs/plugin-react	`5.1.4`	`6.0.2`
typescript	`5.9.3`	`6.0.3`
vite	`7.3.1`	`8.0.16`
vite-plugin-svgr	`4.5.0`	`5.2.0`

Updates @lerna-lite/cli from 4.11.4 to 5.3.0

Release notes

Sourced from @lerna-lite/cli's releases.

v5.3.0

5.3.0 (2026-06-04)

This release drops a few more dependencies and uses more NodeJS native code, the biggest of these changes is the drop of tinyglobby which is replaced by NodeJS fs.glob, all unit tests and E2E tests are all passing so it should all be fine but still noteworthy. That is most probably the last batch of packages removal, since at this point there is nothing left to replace. If you're wondering, why is dropping external packages any good? The e18e website explains it well, it helps in decreasing the project size, but also more importantly it decreases the chances of supply chain attack by external packages (lower deps count = lower vector of attacks).

Features

deps: drop new-github-release-url replace with internal code (#1342) (5fa8779) - by @ghiscoding

deps: drop dedent replace with native code (#1345) (9e8e9e7) - by @ghiscoding

deps: drop load-json-file replace with native code (#1341) (272050d) - by @ghiscoding

deps: drop tinyglobby replace with native code (#1340) (56ac4d4) - by @ghiscoding

deps: replace p-map, p-list and p-queue with native code (#1337) (d661044) - by @ghiscoding

Bug Fixes

core: add missing fs-utils optional arguments (#1335) (4dab97d) - by @ghiscoding

deps: update all non-major dependencies (#1338) (adc39c5) - by @renovate[bot]

deps: update inquirer packages (#1339) (bee077e) - by @renovate[bot]

Released by Lerna-Lite 🤖 Is the project useful? Give it a star ⭐

v5.2.2

5.2.2 (2026-05-25)

Bug Fixes

deps: replace columnify with native implementation (#1330) (1887f43) - by @ghiscoding

deps: update all non-major dependencies (#1325) (0955717) - by @renovate[bot]

deps: update all non-major dependencies (#1332) (9b980fe) - by @renovate[bot]

deps: update inquirer packages (#1329) (f5e9829) - by @renovate[bot]

Released by Lerna-Lite 🤖 Is the project useful? Give our repo a star ⭐

v5.2.1

5.2.1 (2026-05-01)

Bug Fixes

deps: drop normalize-path and normalize-newline dependencies (#1319) (4d39d12) - by @ghiscoding

deps: replace fs-extra with native Node.js APIs (#1318) (b1cd7f1) - by @ghiscoding

deps: update all non-major dependencies (#1322) (d1e80e5) - by @renovate[bot]

deps: update inquirer packages (#1321) (940af9a) - by @renovate[bot]

publish: align OIDC logic/tests with npm/cli & add CircleCI support (#1320) (da2a4cc) - by @ghiscoding

Released by Lerna-Lite 🤖 Love the project? Give our repo a star ⭐

v5.2.0

... (truncated)

Changelog

Sourced from @lerna-lite/cli's changelog.

5.3.0 (2026-06-04)

Features

deps: drop dedent replace with native code (#1345) (9e8e9e7) - by @ghiscoding

deps: drop load-json-file replace with native code (#1341) (272050d) - by @ghiscoding

5.2.2 (2026-05-25)

Note: Version bump only for package @lerna-lite/cli

5.2.1 (2026-05-01)

Note: Version bump only for package @lerna-lite/cli

5.2.0 (2026-04-24)

Features

run: add --aggregate-output for child processes in large monorepo (#1317) (bd1f908) - by @ghiscoding

5.1.0 (2026-04-20)

Features

add --no-shell for lerna exec/watch to avoid DEP0190 warning (#1309) (7b7e61c) - by @ghiscoding

5.0.0 (2026-04-02)

[!NOTE] Please visit the v5.0.0 release for more details about the migration.

⚠ BREAKING CHANGES

use native import.meta.dirname/filename (#1302)

build: use module --nodenext instead of bundler/esnext (#1301)

bump NodeJS requirement to Node v22.17 (#1299)

remove deprecated code --remove-package-fields (#1295)

Code Refactoring

build: use module --nodenext instead of bundler/esnext (#1301) (14990ba) - by @ghiscoding

bump NodeJS requirement to Node v22.17 (#1299) (91ca715) - by @ghiscoding

remove deprecated code --remove-package-fields (#1295) (072c863) - by @ghiscoding

use native import.meta.dirname/filename (#1302) (9a4f686) - by @ghiscoding

4.11.5 (2026-03-14)

Note: Version bump only for package @lerna-lite/cli

Commits

2045da0 chore(release): publish new version v5.3.0
9e8e9e7 feat(deps): drop dedent replace with native code (#1345)
272050d feat(deps): drop load-json-file replace with native code (#1341)
aedb912 chore(release): publish new version v5.2.2
01041ca chore: add local npm script to check for missing ".js" on local imports (#1323)
ff1c4b7 chore(release): publish new version v5.2.1
49dfa6d chore(release): publish new version v5.2.0
bd1f908 feat(run): add --aggregate-output for child processes in large monorepo (#1317)
c55bd11 chore(release): publish new version v5.1.0
7b7e61c feat: add --no-shell for lerna exec/watch to avoid DEP0190 warning (#1309)
Additional commits viewable in compare view

Updates @lerna-lite/publish from 4.11.4 to 5.3.0

Release notes

Sourced from @lerna-lite/publish's releases.

v5.3.0

5.3.0 (2026-06-04)

This release drops a few more dependencies and uses more NodeJS native code, the biggest of these changes is the drop of tinyglobby which is replaced by NodeJS fs.glob, all unit tests and E2E tests are all passing so it should all be fine but still noteworthy. That is most probably the last batch of packages removal, since at this point there is nothing left to replace. If you're wondering, why is dropping external packages any good? The e18e website explains it well, it helps in decreasing the project size, but also more importantly it decreases the chances of supply chain attack by external packages (lower deps count = lower vector of attacks).

Features

deps: drop new-github-release-url replace with internal code (#1342) (5fa8779) - by @ghiscoding

deps: drop dedent replace with native code (#1345) (9e8e9e7) - by @ghiscoding

deps: drop load-json-file replace with native code (#1341) (272050d) - by @ghiscoding

deps: drop tinyglobby replace with native code (#1340) (56ac4d4) - by @ghiscoding

deps: replace p-map, p-list and p-queue with native code (#1337) (d661044) - by @ghiscoding

Bug Fixes

core: add missing fs-utils optional arguments (#1335) (4dab97d) - by @ghiscoding

deps: update all non-major dependencies (#1338) (adc39c5) - by @renovate[bot]

deps: update inquirer packages (#1339) (bee077e) - by @renovate[bot]

Released by Lerna-Lite 🤖 Is the project useful? Give it a star ⭐

v5.2.2

5.2.2 (2026-05-25)

Bug Fixes

deps: replace columnify with native implementation (#1330) (1887f43) - by @ghiscoding

deps: update all non-major dependencies (#1325) (0955717) - by @renovate[bot]

deps: update all non-major dependencies (#1332) (9b980fe) - by @renovate[bot]

deps: update inquirer packages (#1329) (f5e9829) - by @renovate[bot]

Released by Lerna-Lite 🤖 Is the project useful? Give our repo a star ⭐

v5.2.1

5.2.1 (2026-05-01)

Bug Fixes

deps: drop normalize-path and normalize-newline dependencies (#1319) (4d39d12) - by @ghiscoding

deps: replace fs-extra with native Node.js APIs (#1318) (b1cd7f1) - by @ghiscoding

deps: update all non-major dependencies (#1322) (d1e80e5) - by @renovate[bot]

deps: update inquirer packages (#1321) (940af9a) - by @renovate[bot]

publish: align OIDC logic/tests with npm/cli & add CircleCI support (#1320) (da2a4cc) - by @ghiscoding

Released by Lerna-Lite 🤖 Love the project? Give our repo a star ⭐

v5.2.0

... (truncated)

Changelog

Sourced from @lerna-lite/publish's changelog.

5.3.0 (2026-06-04)

Features

deps: drop load-json-file replace with native code (#1341) (272050d) - by @ghiscoding

deps: drop tinyglobby replace with native code (#1340) (56ac4d4) - by @ghiscoding

deps: replace p-map, p-list and p-queue with native code (#1337) (d661044) - by @ghiscoding

Bug Fixes

deps: update all non-major dependencies (#1338) (adc39c5) - by @renovate[bot]

5.2.2 (2026-05-25)

Bug Fixes

deps: replace columnify with native implementation (#1330) (1887f43) - by @ghiscoding

deps: update all non-major dependencies (#1325) (0955717) - by @renovate[bot]

deps: update all non-major dependencies (#1332) (9b980fe) - by @renovate[bot]

5.2.1 (2026-05-01)

Bug Fixes

deps: drop normalize-path and normalize-newline dependencies (#1319) (4d39d12) - by @ghiscoding

deps: replace fs-extra with native Node.js APIs (#1318) (b1cd7f1) - by @ghiscoding

deps: update all non-major dependencies (#1322) (d1e80e5) - by @renovate[bot]

publish: align OIDC logic/tests with npm/cli & add CircleCI support (#1320) (da2a4cc) - by @ghiscoding

5.2.0 (2026-04-24)

Features

deps: migrate from execa to tinyexec (#1316) (b3de36d) - by @ghiscoding

5.1.0 (2026-04-20)

Note: Version bump only for package @lerna-lite/publish

5.0.0 (2026-04-02)

[!NOTE] Please visit the v5.0.0 release for more details about the migration.

⚠ BREAKING CHANGES

use native import.meta.dirname/filename (#1302)

bump NodeJS requirement to Node v22.17 (#1299)

remove deprecated code --remove-package-fields (#1295)

core: replace tinyrainbow with native util.styleText() (#1293)

... (truncated)

Commits

2045da0 chore(release): publish new version v5.3.0
adc39c5 fix(deps): update all non-major dependencies (#1338)
272050d feat(deps): drop load-json-file replace with native code (#1341)
56ac4d4 feat(deps): drop tinyglobby replace with native code (#1340)
803cbc2 chore: add stripPackageKeys logging info
d661044 feat(deps): replace p-map, p-list and p-queue with native code (#1337)
a6557fc chore(tests): increase test coverage for OTP retry (#1336)
aedb912 chore(release): publish new version v5.2.2
9b980fe fix(deps): update all non-major dependencies (#1332)
c268ded chore: sort imports
Additional commits viewable in compare view

Updates @lerna-lite/version from 4.11.4 to 5.3.0

Release notes

Sourced from @lerna-lite/version's releases.

v5.3.0

5.3.0 (2026-06-04)

This release drops a few more dependencies and uses more NodeJS native code, the biggest of these changes is the drop of tinyglobby which is replaced by NodeJS fs.glob, all unit tests and E2E tests are all passing so it should all be fine but still noteworthy. That is most probably the last batch of packages removal, since at this point there is nothing left to replace. If you're wondering, why is dropping external packages any good? The e18e website explains it well, it helps in decreasing the project size, but also more importantly it decreases the chances of supply chain attack by external packages (lower deps count = lower vector of attacks).

Features

deps: drop new-github-release-url replace with internal code (#1342) (5fa8779) - by @ghiscoding

deps: drop dedent replace with native code (#1345) (9e8e9e7) - by @ghiscoding

deps: drop load-json-file replace with native code (#1341) (272050d) - by @ghiscoding

deps: drop tinyglobby replace with native code (#1340) (56ac4d4) - by @ghiscoding

deps: replace p-map, p-list and p-queue with native code (#1337) (d661044) - by @ghiscoding

Bug Fixes

core: add missing fs-utils optional arguments (#1335) (4dab97d) - by @ghiscoding

deps: update all non-major dependencies (#1338) (adc39c5) - by @renovate[bot]

deps: update inquirer packages (#1339) (bee077e) - by @renovate[bot]

Released by Lerna-Lite 🤖 Is the project useful? Give it a star ⭐

v5.2.2

5.2.2 (2026-05-25)

Bug Fixes

deps: replace columnify with native implementation (#1330) (1887f43) - by @ghiscoding

deps: update all non-major dependencies (#1325) (0955717) - by @renovate[bot]

deps: update all non-major dependencies (#1332) (9b980fe) - by @renovate[bot]

deps: update inquirer packages (#1329) (f5e9829) - by @renovate[bot]

Released by Lerna-Lite 🤖 Is the project useful? Give our repo a star ⭐

v5.2.1

5.2.1 (2026-05-01)

Bug Fixes

deps: drop normalize-path and normalize-newline dependencies (#1319) (4d39d12) - by @ghiscoding

deps: replace fs-extra with native Node.js APIs (#1318) (b1cd7f1) - by @ghiscoding

deps: update all non-major dependencies (#1322) (d1e80e5) - by @renovate[bot]

deps: update inquirer packages (#1321) (940af9a) - by @renovate[bot]

publish: align OIDC logic/tests with npm/cli & add CircleCI support (#1320) (da2a4cc) - by @ghiscoding

Released by Lerna-Lite 🤖 Love the project? Give our repo a star ⭐

v5.2.0

... (truncated)

Changelog

Sourced from @lerna-lite/version's changelog.

5.3.0 (2026-06-04)

Features

deps: drop new-github-release-url replace with internal code (#1342) (5fa8779) - by @ghiscoding

deps: drop dedent replace with native code (#1345) (9e8e9e7) - by @ghiscoding

deps: drop load-json-file replace with native code (#1341) (272050d) - by @ghiscoding

deps: replace p-map, p-list and p-queue with native code (#1337) (d661044) - by @ghiscoding

5.2.2 (2026-05-25)

Note: Version bump only for package @lerna-lite/version

5.2.1 (2026-05-01)

Bug Fixes

deps: drop normalize-path and normalize-newline dependencies (#1319) (4d39d12) - by @ghiscoding

deps: replace fs-extra with native Node.js APIs (#1318) (b1cd7f1) - by @ghiscoding

5.2.0 (2026-04-24)

Features

deps: migrate from execa to tinyexec (#1316) (b3de36d) - by @ghiscoding

5.1.0 (2026-04-20)

Bug Fixes

deps: update dependency @conventional-changelog/git-client to ^2.7.0 (#1312) (d6689fb) - by @renovate[bot]

5.0.0 (2026-04-02)

[!NOTE] Please visit the v5.0.0 release for more details about the migration.

⚠ BREAKING CHANGES

use native import.meta.dirname/filename (#1302)

bump NodeJS requirement to Node v22.17 (#1299)

drop conventional-changelog legacy API for local preset file (#1296)

core: replace tinyrainbow with native util.styleText() (#1293)

Bug Fixes

deps: update conventional-changelog packages (#1304) (ee684a7) - by @renovate[bot]

Code Refactoring

... (truncated)

Commits

2045da0 chore(release): publish new version v5.3.0
9e8e9e7 feat(deps): drop dedent replace with native code (#1345)
53a1768 chore: enable "curly" rule to error out if+return as single liner (#1343)
5fa8779 feat(deps): drop new-github-release-url replace with internal code (#1342)
272050d feat(deps): drop load-json-file replace with native code (#1341)
d661044 feat(deps): replace p-map, p-list and p-queue with native code (#1337)
aedb912 chore(release): publish new version v5.2.2
01041ca chore: add local npm script to check for missing ".js" on local imports (#1323)
ff1c4b7 chore(release): publish new version v5.2.1
4d39d12 fix(deps): drop normalize-path and normalize-newline dependencies (#1319)
Additional commits viewable in compare view

Updates @secretlint/secretlint-rule-preset-recommend from 11.3.1 to 13.0.2

Release notes

Sourced from @secretlint/secretlint-rule-preset-recommend's releases.

v13.0.2

What's Changed

📝 v13.0.1 published as v13.0.2

Bug Fixes

Fix secp256k1 private key detection to avoid false positives by @azu in secretlint/secretlint#1564

CI

ci: replace merge-gatekeeper with automerge-gate by @azu in secretlint/secretlint#1543

Update github/codeql-action action to v3.35.3 by @renovate[bot] in secretlint/secretlint#1546

ci(release): prevent cache poisoning by @azu in secretlint/secretlint#1555

chore(CI): update to pkgdeps/automerge-gate@4.1 by @azu in secretlint/secretlint#1557

Update rhysd/github-action-benchmark action to v1.22.1 by @renovate[bot] in secretlint/secretlint#1558

Update github/codeql-action action to v3.35.4 by @renovate[bot] in secretlint/secretlint#1563

Dependency Updates

Update dependency turbo to ^2.9.8 by @renovate[bot] in secretlint/secretlint#1542

Update dependency turbo to ^2.9.9 by @renovate[bot] in secretlint/secretlint#1544

Update Patch updates (patch) by @renovate[bot] in secretlint/secretlint#1545

Update pnpm to v10.33.4 by @renovate[bot] in secretlint/secretlint#1551

Update dependency @types/node to ^25.6.1 by @renovate[bot] in secretlint/secretlint#1552

Update dependency turbo to ^2.9.10 by @renovate[bot] in secretlint/secretlint#1553

Update dependency @types/node to ^25.6.2 by @renovate[bot] in secretlint/secretlint#1554

Update dependency turbo to ^2.9.12 by @renovate[bot] in secretlint/secretlint#1556

Update textlint to ^15.6.1 by @renovate[bot] in secretlint/secretlint#1559

Update dependency vitest to ^4.1.6 by @renovate[bot] in secretlint/secretlint#1561

Update dependency @types/node to ^25.7.0 by @renovate[bot] in secretlint/secretlint#1562

Other Changes

Reorganize CLI options and update glob syntax documentation by @azu in secretlint/secretlint#1540

Full Changelog: secretlint/secretlint@v13.0.0...v13.0.2

v13.0.0

Highlights

v13 changes how files are discovered on disk and adds three credential detection rules.

.gitignore is respected by default

Nested .gitignore files now apply to file discovery with ripgrep semantics: rules from each directory cascade into its subtree, and a negation rule in a deeper file can flip an earlier verdict.

Files excluded by any .gitignore on the path are no longer scanned. Repositories that previously relied on Secretlint scanning ignored files (such as dist/ or generated artefacts) will see fewer files in the output. .secretlintignore is unchanged and continues to apply alongside .gitignore.

To restore the v12 behaviour:
secretlint --no-gitignore "**/*"

... (truncated)

Commits

56012e5 v13.0.2 (#1566)
63a6fd4 v13.0.1 (#1565)
f0ec5c0 Fix secp256k1 private key detection to avoid false positives (#1564)
5c2df17 Update github/codeql-action action to v3.35.4 (#1563)
3cbe8d9 Update dependency @types/node to ^25.7.0 (#1562)
b5bd0a9 Update dependency vitest to ^4.1.6 (#1561)
4356d15 Update textlint to ^15.6.1 (#1559)
4d13ae9 Update rhysd/github-action-benchmark action to v1.22.1 (#1558)
8a1b8ab chore(CI): update to pkgdeps/automerge-gate@4.1 (#1557)
5351a4d Update dependency turbo to ^2.9.12 (#1556)
Additional commits viewable in compare view

Updates npm-run-all2 from 8.0.4 to 9.0.1

Release notes

Sourced from npm-run-all2's releases.

v9.0.1

Merged

fix: update help.js to include --node-run option details [#230](https://github.com/bcomnes/npm-run-all2/issues/230)

v9.0.0

Breaking changes

ESM only

engines.node: "^22.22.2 || ^24.15.0 || >=26.0.0",

Empty glob patters no longer throw an error bcomnes/npm-run-all2#226

Fully type checked with published types

New features

node --run mode: bcomnes/npm-run-all2#225

More colors: bcomnes/npm-run-all2#222

Merged

Add more colors based on terminal capabilities [#222](https://github.com/bcomnes/npm-run-all2/issues/222)

Upgrade: Bump releasearoni from 0.1.14 to 0.2.0 [#227](https://github.com/bcomnes/npm-run-all2/issues/227)

Breaking change: Glob patterns that match no tasks now succeed silently [#226](https://github.com/bcomnes/npm-run-all2/issues/226)

Add -x / --node-run flag to bypass the package manager [#225](https://github.com/bcomnes/npm-run-all2/issues/225)

Remove redundant build call from prepublishOnly [#224](https://github.com/bcomnes/npm-run-all2/issues/224)

Whitelist files to include in npm package [#199](https://github.com/bcomnes/npm-run-all2/issues/199)

Fix jsdoc types and use tsc for type safety checks [#220](https://github.com/bcomnes/npm-run-all2/issues/220)

Upgrade: Bump codecov/codecov-action from 5 to 6 [#215](https://github.com/bcomnes/npm-run-all2/issues/215)

Update SECURITY.md with new reporting process [#201](https://github.com/bcomnes/npm-run-all2/issues/201)

Upgrade: Bump actions/checkout from 5 to 6 [#200](https://github.com/bcomnes/npm-run-all2/issues/200)

Upgrade: Bump actions/setup-node from 5 to 6 [#196](https://github.com/bcomnes/npm-run-all2/issues/196)

Upgrade: Bump github/codeql-action from 3 to 4 [#195](https://github.com/bcomnes/npm-run-all2/issues/195)

Upgrade: Bump actions/setup-node from 4 to 5 [#192](https://github.com/bcomnes/npm-run-all2/issues/192)

Upgrade: Bump actions/checkout from 4 to 5 [#191](https://github.com/bcomnes/npm-run-all2/issues/191)

chore: fix typo in test [#185](https://github.com/bcomnes/npm-run-all2/issues/185)

refactor: use optional chain for better readability [#184](https://github.com/bcomnes/npm-run-all2/issues/184)

Fixed

Breaking change: Glob patterns that match no tasks now succeed silently (#226) [#149](https://github.com/bcomnes/npm-run-all2/issues/149)

Add -x / --node-run flag to use node --run instead of the package manager [#155](https://github.com/bcomnes/npm-run-all2/issues/155)

docs: clarify glob pattern execution order guarantee [#167](https://github.com/bcomnes/npm-run-all2/issues/167)

Commits

Add node-run smoke tests f4ac667

Implement releasaroni for the release process 6a2baff

Use shared publishing action b6a39a6

... (truncated)

Changelog

Sourced from npm-run-all2's changelog.

v9.0.1 - 2026-05-23

Merged

fix: update help.js to include --node-run option details [#230](https://github.com/bcomnes/npm-run-all2/issues/230)

v9.0.0 - 2026-05-19

Merged

Add more colors based on terminal capabilities [#222](https://github.com/bcomnes/npm-run-all2/issues/222)

Upgrade: Bump releasearoni from 0.1.14 to 0.2.0 [#227](https://github.com/bcomnes/npm-run-all2/issues/227)

Breaking change: Glob patterns that match no tasks now succeed silently

…dates Bumps the dev-npm-major-dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [@lerna-lite/cli](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/cli) | `4.11.4` | `5.3.0` | | [@lerna-lite/publish](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/publish) | `4.11.4` | `5.3.0` | | [@lerna-lite/version](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/version) | `4.11.4` | `5.3.0` | | [@secretlint/secretlint-rule-preset-recommend](https://github.com/secretlint/secretlint) | `11.3.1` | `13.0.2` | | [npm-run-all2](https://github.com/bcomnes/npm-run-all2) | `8.0.4` | `9.0.1` | | [secretlint](https://github.com/secretlint/secretlint) | `11.3.1` | `13.0.2` | | [@rspack/cli](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack-cli) | `1.7.11` | `2.0.6` | | [@rspack/core](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack) | `1.7.11` | `2.0.6` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.4` | `6.0.2` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.1` | `8.0.16` | | [vite-plugin-svgr](https://github.com/pd4d10/vite-plugin-svgr) | `4.5.0` | `5.2.0` | Updates `@lerna-lite/cli` from 4.11.4 to 5.3.0 - [Release notes](https://github.com/lerna-lite/lerna-lite/releases) - [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/lerna-lite/lerna-lite/commits/v5.3.0/packages/cli) Updates `@lerna-lite/publish` from 4.11.4 to 5.3.0 - [Release notes](https://github.com/lerna-lite/lerna-lite/releases) - [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/publish/CHANGELOG.md) - [Commits](https://github.com/lerna-lite/lerna-lite/commits/v5.3.0/packages/publish) Updates `@lerna-lite/version` from 4.11.4 to 5.3.0 - [Release notes](https://github.com/lerna-lite/lerna-lite/releases) - [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/version/CHANGELOG.md) - [Commits](https://github.com/lerna-lite/lerna-lite/commits/v5.3.0/packages/version) Updates `@secretlint/secretlint-rule-preset-recommend` from 11.3.1 to 13.0.2 - [Release notes](https://github.com/secretlint/secretlint/releases) - [Commits](secretlint/secretlint@v11.3.1...v13.0.2) Updates `npm-run-all2` from 8.0.4 to 9.0.1 - [Release notes](https://github.com/bcomnes/npm-run-all2/releases) - [Changelog](https://github.com/bcomnes/npm-run-all2/blob/master/CHANGELOG.md) - [Commits](bcomnes/npm-run-all2@v8.0.4...v9.0.1) Updates `secretlint` from 11.3.1 to 13.0.2 - [Release notes](https://github.com/secretlint/secretlint/releases) - [Commits](secretlint/secretlint@v11.3.1...v13.0.2) Updates `@rspack/cli` from 1.7.11 to 2.0.6 - [Release notes](https://github.com/web-infra-dev/rspack/releases) - [Commits](https://github.com/web-infra-dev/rspack/commits/v2.0.6/packages/rspack-cli) Updates `@rspack/core` from 1.7.11 to 2.0.6 - [Release notes](https://github.com/web-infra-dev/rspack/releases) - [Commits](https://github.com/web-infra-dev/rspack/commits/v2.0.6/packages/rspack) Updates `@vitejs/plugin-react` from 5.1.4 to 6.0.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) Updates `vite` from 7.3.1 to 8.0.16 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite) Updates `vite-plugin-svgr` from 4.5.0 to 5.2.0 - [Release notes](https://github.com/pd4d10/vite-plugin-svgr/releases) - [Commits](pd4d10/vite-plugin-svgr@v4.5.0...v5.2.0) --- updated-dependencies: - dependency-name: "@lerna-lite/cli" dependency-version: 5.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: "@lerna-lite/publish" dependency-version: 5.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: "@lerna-lite/version" dependency-version: 5.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: "@secretlint/secretlint-rule-preset-recommend" dependency-version: 13.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: npm-run-all2 dependency-version: 9.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: secretlint dependency-version: 13.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: "@rspack/cli" dependency-version: 2.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: "@rspack/core" dependency-version: 2.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: vite dependency-version: 8.0.16 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies - dependency-name: vite-plugin-svgr dependency-version: 5.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-npm-major-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-01T10:27:56Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot assigned cm-dyoshikawa, cm-igarashi-ryosuke and cm-wada-yusuke Jul 1, 2026

dependabot Bot added automated dependencies 依存関係のアップデート labels Jul 1, 2026

dependabot Bot closed this Aug 1, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev-npm-major-dependencies-153451dd2c branch August 1, 2026 10:28

Navigation Menu

Uh oh!

chore(deps-dev): bump the dev-npm-major-dependencies group with 12 updates - #690

chore(deps-dev): bump the dev-npm-major-dependencies group with 12 updates#690
dependabot[bot] wants to merge 1 commit into
canaryfrom
dependabot/npm_and_yarn/dev-npm-major-dependencies-153451dd2c

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.3.0

5.3.0 (2026-06-04)

Features

Bug Fixes

v5.2.2

5.2.2 (2026-05-25)

Bug Fixes

v5.2.1

5.2.1 (2026-05-01)

Bug Fixes

v5.2.0

5.3.0 (2026-06-04)

Features

5.2.2 (2026-05-25)

5.2.1 (2026-05-01)

5.2.0 (2026-04-24)

Features

5.1.0 (2026-04-20)

Features

5.0.0 (2026-04-02)

⚠ BREAKING CHANGES

Code Refactoring

4.11.5 (2026-03-14)

v5.3.0

5.3.0 (2026-06-04)

Features

Bug Fixes

v5.2.2

5.2.2 (2026-05-25)

Bug Fixes

v5.2.1

5.2.1 (2026-05-01)

Bug Fixes

v5.2.0

5.3.0 (2026-06-04)

Features

Bug Fixes

5.2.2 (2026-05-25)

Bug Fixes

5.2.1 (2026-05-01)

Bug Fixes

5.2.0 (2026-04-24)

Features

5.1.0 (2026-04-20)

5.0.0 (2026-04-02)

⚠ BREAKING CHANGES

v5.3.0

5.3.0 (2026-06-04)

Features

Bug Fixes

v5.2.2

5.2.2 (2026-05-25)

Bug Fixes

v5.2.1

5.2.1 (2026-05-01)

Bug Fixes

v5.2.0

5.3.0 (2026-06-04)

Features

5.2.2 (2026-05-25)

5.2.1 (2026-05-01)

Bug Fixes

5.2.0 (2026-04-24)

Features

5.1.0 (2026-04-20)

Bug Fixes

5.0.0 (2026-04-02)

⚠ BREAKING CHANGES

Bug Fixes

Code Refactoring

v13.0.2

What's Changed

Bug Fixes

CI

Dependency Updates

Other Changes

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

`.gitignore` is respected by default