chore: bump the dev-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #126 · jegj/protondb-cli

dependabot · 2026-06-01T21:48:16Z

Bumps the dev-dependencies group with 10 updates in the / directory:

Package	From	To
@biomejs/biome	`2.4.15`	`2.4.16`
@commitlint/cli	`19.8.1`	`21.0.2`
@commitlint/config-conventional	`19.8.1`	`21.0.2`
@types/node	`22.19.19`	`25.9.1`
c8	`9.1.0`	`11.0.0`
esmock	`2.7.5`	`2.7.6`
husky	`8.0.3`	`9.1.7`
sinon	`17.0.1`	`22.0.0`
tsx	`4.21.0`	`4.22.4`
typescript	`5.9.3`	`6.0.3`

Updates @biomejs/biome from 2.4.15 to 2.4.16

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.16

2.4.16

Patch Changes
#10329 ef764d5 Thanks @Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.
#10363 50aa415 Thanks @dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

Input:
ab
Output:
  a</span >bab
#10465 0c718da Thanks @dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

#10358 05c2617 Thanks @dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

#10300 950247c Thanks @dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

#9786 e71f584 Thanks @MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

#10425 1948b72 Thanks @sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

#10442 001f94f Thanks @ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

#10318 9b1577f Thanks @dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.

#10319 2e37709 Thanks @dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.16

Patch Changes
#10329 ef764d5 Thanks @Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.
#10363 50aa415 Thanks @dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

Input:
ab
Output:
  a</span >bab
#10465 0c718da Thanks @dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

#10358 05c2617 Thanks @dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

#10300 950247c Thanks @dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

#9786 e71f584 Thanks @MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

#10425 1948b72 Thanks @sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

#10442 001f94f Thanks @ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

#10318 9b1577f Thanks @dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.
#10319 2e37709 Thanks @dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

... (truncated)

Commits

5f4ea56 ci: release (#10326)
de2a33c fix(core): regression in emitted types (#10478)
d835303 docs: remove redundant default phrase in useConsistentObjectDefinitions rul...
4f1aaf2 fix: incorrect build when using build or test (#10426)
dc73b6b refactor: make plugins opt-in via feature gate (#10418)
e71f584 feat(useDestructuring): add options for assignment/declaration and improve di...
9b1577f fix(config): support trailingCommas in overrides (#10318)
See full diff in compare view

Updates @commitlint/cli from 19.8.1 to 21.0.2

Release notes

Sourced from @commitlint/cli's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @escapedcat in conventional-changelog/commitlint#4755

fix: apply oxfmt formatting to get-edit-commit.ts by @escapedcat in conventional-changelog/commitlint#4768

fix(read): fail when --from and --to share no merge-base #4555 by @CervEdin in conventional-changelog/commitlint#4754

fix: disallow same commit hash for --from and --to by @knocte in conventional-changelog/commitlint#4773

Chore/CI

ci: have renovate rebase stale PRs before merging by @escapedcat in conventional-changelog/commitlint#4782

chore: have renovate hold PRs for 3 days after release by @escapedcat in conventional-changelog/commitlint#4788

chore: anchor vite 8 by @escapedcat in conventional-changelog/commitlint#4790

ci: run commitlint once per same-repo PR by @escapedcat in conventional-changelog/commitlint#4795

New Contributors

@CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

fix(load): only resolve relative formatter paths by @escapedcat in conventional-changelog/commitlint#4761

fix(types): add presetConfig to ParserPreset interface by @SAY-5 in conventional-changelog/commitlint#4749

CI

ci: stop spawning schedule jobs on contributors' forks by @knocte in conventional-changelog/commitlint#4753

ci: add weekly non-blocking pnpm audit by @escapedcat in conventional-changelog/commitlint#4766

New Contributors

@SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @commitlint/cli's changelog.

21.0.2 (2026-05-29)

Bug Fixes

disallow same commit hash for --from and --to (#4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @commitlint/cli

21.0.0 (2026-05-08)

chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

drop node v18 and v20 support

Bump engines to >=v22 in all 39 package.json files

Update @types/node to ^22.0.0

Update CI matrix to [22, 24]

Update Ubuntu baseline job to ubuntu:26.04

Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json

Update pre-commit hook to use --ignore-engines

Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @commitlint/cli

... (truncated)

Commits

8069048 v21.0.2
121005e fix: disallow same commit hash for --from and --to (#4773)
db8d7d6 v21.0.1
1329a25 chore: migrate to pnpm (#4762)
db39968 chore: pre pnpm cleanup (#4759)
6099ae5 chore: replace eslint with oxlint (#4756)
f081a8e v21.0.0
40d7e36 feat!: show input from a new line (#4727)
44c3174 chore: update dependency yargs to v18 #4432 (#4686)
ac01464 chore: replace dependencies with Node 22 built-ins (#4681)
Additional commits viewable in compare view

Updates @commitlint/config-conventional from 19.8.1 to 21.0.2

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @escapedcat in conventional-changelog/commitlint#4755

fix: apply oxfmt formatting to get-edit-commit.ts by @escapedcat in conventional-changelog/commitlint#4768

fix(read): fail when --from and --to share no merge-base #4555 by @CervEdin in conventional-changelog/commitlint#4754

fix: disallow same commit hash for --from and --to by @knocte in conventional-changelog/commitlint#4773

Chore/CI

ci: have renovate rebase stale PRs before merging by @escapedcat in conventional-changelog/commitlint#4782

chore: have renovate hold PRs for 3 days after release by @escapedcat in conventional-changelog/commitlint#4788

chore: anchor vite 8 by @escapedcat in conventional-changelog/commitlint#4790

ci: run commitlint once per same-repo PR by @escapedcat in conventional-changelog/commitlint#4795

New Contributors

@CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

fix(load): only resolve relative formatter paths by @escapedcat in conventional-changelog/commitlint#4761

fix(types): add presetConfig to ParserPreset interface by @SAY-5 in conventional-changelog/commitlint#4749

CI

ci: stop spawning schedule jobs on contributors' forks by @knocte in conventional-changelog/commitlint#4753

ci: add weekly non-blocking pnpm audit by @escapedcat in conventional-changelog/commitlint#4766

New Contributors

@SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.0.2 (2026-05-29)

Note: Version bump only for package @commitlint/config-conventional

21.0.1 (2026-05-12)

Note: Version bump only for package @commitlint/config-conventional

21.0.0 (2026-05-08)

chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

drop node v18 and v20 support

Bump engines to >=v22 in all 39 package.json files

Update @types/node to ^22.0.0

Update CI matrix to [22, 24]

Update Ubuntu baseline job to ubuntu:26.04

Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json

Update pre-commit hook to use --ignore-engines

Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @commitlint/config-conventional

20.5.0 (2026-03-15)

... (truncated)

Commits

8069048 v21.0.2
db8d7d6 v21.0.1
1329a25 chore: migrate to pnpm (#4762)
6099ae5 chore: replace eslint with oxlint (#4756)
f081a8e v21.0.0
44c3174 chore: update dependency yargs to v18 #4432 (#4686)
ac2b3f4 chore!: minimum node version v22 (#4679)
31e959a v20.5.3
a7918e9 v20.5.0
02d7245 v20.4.4
Additional commits viewable in compare view

Updates @types/node from 22.19.19 to 25.9.1

Commits

See full diff in compare view

Updates c8 from 9.1.0 to 11.0.0

Release notes

Sourced from c8's releases.

v11.0.0

11.0.0 (2026-02-22)

⚠ BREAKING CHANGES

deps: transitive deps require 20 || >=22

Bug Fixes

deps: pull newer minimatch addressing CVE-2026-26996 (#576) (678eeca)

v10.1.3

10.1.3 (2024-12-10)

Bug Fixes

deps: update bcoe/v8-coverage addressing v8 issue (#552) (b32a563)

v10.1.2

10.1.2 (2024-06-13)

Bug Fixes

deps: make monocart-coverage-reports an optional with meta defined (3b91fda)

v10.1.1

10.1.1 (2024-06-11)

Bug Fixes

stop installing monocart-coverage-reports (#535) (13979a7)

v10.1.0

10.1.0 (2024-06-11)

Features

add experimental monocart reports (#521) (2e5e297)

v10.0.0

10.0.0 (2024-06-10)

⚠ BREAKING CHANGES

... (truncated)

Changelog

Sourced from c8's changelog.

11.0.0 (2026-02-22)

⚠ BREAKING CHANGES

deps: transitive deps require 20 || >=22

Bug Fixes

deps: pull newer minimatch addressing CVE-2026-26996 (#576) (678eeca)

10.1.3 (2024-12-10)

Bug Fixes

deps: update bcoe/v8-coverage addressing v8 issue (#552) (b32a563)

10.1.2 (2024-06-13)

Bug Fixes

deps: make monocart-coverage-reports an optional with meta defined (3b91fda)

10.1.1 (2024-06-11)

Bug Fixes

stop installing monocart-coverage-reports (#535) (13979a7)

10.1.0 (2024-06-11)

Features

add experimental monocart reports (#521) (2e5e297)

10.0.0 (2024-06-10)

⚠ BREAKING CHANGES

deps: Node 18 is now the minimum supported Node.js version

Bug Fixes

deps: update test-exclude with new glob / minimatch (#531) (e33cf30)

Commits

ce78df4 chore(main): release 11.0.0 (#577)
678eeca fix(deps)!: pull newer minimatch addressing CVE-2026-26996 (#576)
ec4c5e4 chore: .editorconfig to avoid unintended mods to .snap files (#556)
1ec3cc4 chore(main): release 10.1.3 (#553)
b32a563 fix(deps): update bcoe/v8-coverage addressing v8 issue (#552)
75fa99f chore(deps): update dependency @types/node to v22 (#548)
ff146b4 chore(main): release 10.1.2 (#538)
3b91fda fix(deps): make monocart-coverage-reports an optional with meta defined
e3560e1 chore(main): release 10.1.1 (#536)
13979a7 fix: stop installing monocart-coverage-reports (#535)
Additional commits viewable in compare view

Updates esmock from 2.7.5 to 2.7.6

Release notes

Sourced from esmock's releases.

wildcard-issue resolved

mostly resolves a recently-discovered issue resolving certain wildcard-pattern export keys

update test-coverage badge to reference "main" branch,

specify node v24 at build+publish ci-job

increment eslint and lint-related

increment resolvewithplus, resolves wildcard-export-related issue. see iambumblehead/resolvewithplus#76 thanks @AdaptivChris

Changelog

Sourced from esmock's changelog.

changelog

2.7.7 ???

update github ci actions

2.7.6 May.27.2026

update test-coverage badge to reference "main" branch,

specify node v24 at build+publish ci-job

increment eslint and lint-related

increment resolvewithplus, resolves wildcard-export-related issue. see iambumblehead/resolvewithplus#76

2.7.5 May.09.2026

migrate to eslint 10

migrate to @eslint/markdown

remove c8 test-coverage package, use node's --test-cover

2.7.4 May.04.2026

update tests to resolve tests that began to fail,

add suuport for typescript modules, no tests, thanks @mbrevda,

add node 25.x to test matrix,

disable tests using node-ts (seems un-maintained),

windows tests are disabled for "tests-node", lacking windows env to resolve

2.7.3 Sep.12.2025

drop node version 18 and 20 from tests.

increment some dependencies and reduce audit warnings.

restore ava and all other disabled test-runner tests

2.7.2 Sep.01.2025

increment resolvewithplus, match exact export paths, thanks @matz3

2.7.1 Jul.01.2025

added node v24 to test matrix

2.7.0 Jan.24.2025

update resolver to correctly resolve openai package

update typescript-eslint

2.6.9 Oct.18.2024

added --glob option for rimraf usage removing un-used sources

added node v23 to test matrix

resolve v23-related error when module.exports is exported

2.6.8 Oct.17.2024

added pnpm unit-test, thanks @darcyrush

resolve issue for pnpm by escaping '+' char in regexp

add log utility function for debugging loader

dropped ava and jest from test sequence, node v22 --loader issues

2.6.7 Jul.16.2024

add swc tests and remove swc caution from README thanks @Brooooooklyn

unpin node 22.1 at test CI and use latest 22.x

2.6.6 Jun.15.2024

add tsx tests and remove tsx caution from README thanks @galexite

pin node 22.1 at test CI and ignore regressions in new node 22

migrate to eslint 9

2.6.5 Apr.25.2024

add node 22 to ci test pipeline thanks @aladdin-add

use json import syntax with { type: 'json' } for node 22

skip node 22 tests on windows-latest ci, where node 22 is in a broken state, see nodejs/node#52682

... (truncated)

Commits

ba5d2d2 Merge pull request #340 from iambumblehead/fix-changelog-link
21dd0b4 fix CHANGELOG.md link
d0fea76 Merge pull request #339 from iambumblehead/increment-resolvewith-plus
08be213 increment resolvewithplus
99d4d86 Merge pull request #338 from iambumblehead/increment-eslint-and-related
9ce6992 increment eslint and related
405b513 Merge pull request #337 from iambumblehead/update-build-ci-job-spec-node-v24
3642278 update build+publish ci job spec
1b4b287 Merge pull request #336 from iambumblehead/reference-main-branch-test-coverag...
c17920a reference main branch test-coverage-badge
See full diff in compare view

Updates husky from 8.0.3 to 9.1.7

Release notes

Sourced from husky's releases.

v9.1.7

What's Changed

fix: add husky label to deprecated warning by @smackfu in typicode/husky#1538

New Contributors

@smackfu made their first contribution in typicode/husky#1538

Full Changelog: typicode/husky@v9.1.6...v9.1.7

v9.1.6

What's Changed

Fix issue where example pre-commit file is generated incorrectly by @dexmlee in typicode/husky#1519

New Contributors

@OlegKipchatov made their first contribution in typicode/husky#1495

@Byron2016 made their first contribution in typicode/husky#1499

@dexmlee made their first contribution in typicode/husky#1519

Full Changelog: typicode/husky@v9.1.5...v9.1.6

v9.1.5

What's Changed

fixes #1494, support pre-merge-commit hook by @RainMeoCat in typicode/husky#1497

New Contributors

@RainMeoCat made their first contribution in typicode/husky#1497

Full Changelog: typicode/husky@v9.1.4...v9.1.5

v9.1.4

Improve deprecation notice

v9.1.3

fix: better handle space in PATH

v9.1.2

Show a message instead of automatically removing deprecated code.

This only concerns projects that still have the following code in their hooks:
- #!/usr/bin/env sh # <- This is deprecated, remove it
- . "$(dirname -- "$0")/_/husky.sh" # <- This is deprecated, remove it
Rest of your hook code
Hooks with these lines will fail in v10.0.0

v9.1.1

... (truncated)

Commits

799e84b 9.1.7
30f2049 fix: add husky label to deprecated warning (#1538)
a2d942a 9.1.6
b4465ed fix: add parens around the null coalescing operator to fix issues when npm_co...
3b3e7f1 docs(spanish): improve spanish translation (#1504)
dcf3aed dosc: repair support Spanish sponsors links (#1500)
c3afd5f docs: support Spanish documentation (#1499)
c5f4f48 docs: support Russian documentation (#1495)
2fee8d2 9.1.5
397e7f0 fixes #1494 support pre-merge-commit hook
Additional commits viewable in compare view

Updates sinon from 17.0.1 to 22.0.0

Changelog

Sourced from sinon's changelog.

22.0.0

ed911df5 Update Ruby gems (Carl-Erik Kopseng)

75a1e5b8 Update to Node 26 (Carl-Erik Kopseng)

197d6608 Update documentation on faking timers to reflect the current state of fake-timers (Carl-Erik Kopseng)

c5ddf80b Update fake-timers@15.4: includes new Temporal API (Carl-Erik Kopseng)

f4ab02f6 Update updatable packages (Carl-Erik Kopseng)

0536afc8 Quality: Global mutable call id can grow unbounded across long-lived processes (#2691) (tuanaiseo)

refactor: global mutable call id can grow unbounded across l

callId is module-scoped and incremented on every invocation. In long-running test runners or embedded usage, this can grow indefinitely and eventually lose integer precision semantics for strict ordering comparisons.

Affected files: proxy-invoke.js

Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com

Wrap around for all values that are too high

Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

f4f7d93b Perform additional cleanup when calling callThrough() (#2670) (Cyrille)

6199e9e4 improve GitHubworkflows by introducing zizmor for monitoring (#2686) (Till!)

fix(workflows): fetch-depth is for actions/checkout

chore(workflows): update

pin all actions to precise commits

avoid credential leakage from actions/checkout

group action updates going forward

add zimor config to ignore "secrets outside env"

add job to keep validating workflows

f7476b59 Use path.normalize() for path normalization (Carl-Erik Kopseng)

2c975393 fix: make build and node test scripts cross-platform (laplace young)

a7692917 fix: isolate walk state from Object prototype (laplace young)

66df977a Fix sinon.restore() cascade-restoring sub-sandboxes (#2704) (Charlie Leitheiser)

The ESM port of createApi (#2683, shipped in 21.1.0) replaced createSandbox: createSandbox with a wrapper that pushes every newly-created sandbox into the root sandbox's fake collection:

... (truncated)

Commits

52555af 22.0.0
ed911df Update Ruby gems
75a1e5b Update to Node 26
197d660 Update documentation on faking timers to reflect the current state of fake-ti...
c5ddf80 Update fake-timers@15.4: includes new Temporal API
f4ab02f Update updatable packages
0536afc Quality: Global mutable call id can grow unbounded across long-lived processe...
f4f7d93 Perform additional cleanup when calling callThrough() (#2670)
6199e9e improve GitHubworkflows by introducing zizmor for monitoring (#2686)
1519009 Merge #2703: isolate walk state from Object prototype
Additional commits viewable in compare view

Updates tsx from 4.21.0 to 4.22.4

Release notes

Sourced from tsx's releases.

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

This release is also available on:

npm package (@latest dist-tag)

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

d...
Description has been truncated

…ates Bumps the dev-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.4.16` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `19.8.1` | `21.0.2` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `19.8.1` | `21.0.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.19` | `25.9.1` | | [c8](https://github.com/bcoe/c8) | `9.1.0` | `11.0.0` | | [esmock](https://github.com/iambumblehead/esmock) | `2.7.5` | `2.7.6` | | [husky](https://github.com/typicode/husky) | `8.0.3` | `9.1.7` | | [sinon](https://github.com/sinonjs/sinon) | `17.0.1` | `22.0.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.4` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | Updates `@biomejs/biome` from 2.4.15 to 2.4.16 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.16/packages/@biomejs/biome) Updates `@commitlint/cli` from 19.8.1 to 21.0.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 19.8.1 to 21.0.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/config-conventional) Updates `@types/node` from 22.19.19 to 25.9.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `c8` from 9.1.0 to 11.0.0 - [Release notes](https://github.com/bcoe/c8/releases) - [Changelog](https://github.com/bcoe/c8/blob/main/CHANGELOG.md) - [Commits](bcoe/c8@v9.1.0...v11.0.0) Updates `esmock` from 2.7.5 to 2.7.6 - [Release notes](https://github.com/iambumblehead/esmock/releases) - [Changelog](https://github.com/iambumblehead/esmock/blob/main/CHANGELOG.md) - [Commits](iambumblehead/esmock@v2.7.5...v2.7.6) Updates `husky` from 8.0.3 to 9.1.7 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v8.0.3...v9.1.7) Updates `sinon` from 17.0.1 to 22.0.0 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v17.0.1...v22.0.0) Updates `tsx` from 4.21.0 to 4.22.4 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.22.4) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@commitlint/cli" dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 25.9.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: c8 dependency-version: 11.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: esmock dependency-version: 2.7.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: husky dependency-version: 9.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: sinon dependency-version: 22.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: tsx dependency-version: 4.22.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-06-01T21:48:33Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
husky@8.0.3 ⏵ 9.1.7	⁺¹	^-17
@commitlint/cli@19.8.1 ⏵ 21.0.2		⁺¹	^-1
@types/node@22.19.19 ⏵ 25.9.1
tsx@4.21.0 ⏵ 4.22.4	⁺¹	⁺¹
c8@9.1.0 ⏵ 11.0.0		⁺¹
typescript@5.9.3 ⏵ 6.0.3	⁺¹	⁺¹
esmock@2.7.5 ⏵ 2.7.6			⁺²
sinon@17.0.1 ⏵ 22.0.0	^-4
@commitlint/config-conventional@19.8.1 ⏵ 21.0.2			^-1
@biomejs/biome@2.4.15 ⏵ 2.4.16	⁺¹

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump the dev-dependencies group across 1 directory with 10 updates#126

chore: bump the dev-dependencies group across 1 directory with 10 updates#126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-8d05f20f02

dependabot Bot commented on behalf of github Jun 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.4.16

2.4.16

Patch Changes

2.4.16

Patch Changes

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

Chore/CI

New Contributors

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

CI

New Contributors

v21.0.0

21.0.2 (2026-05-29)

Bug Fixes

21.0.1 (2026-05-12)

21.0.0 (2026-05-08)

BREAKING CHANGES

20.5.3 (2026-04-30)

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

Chore/CI

New Contributors

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

CI

New Contributors

v21.0.0

21.0.2 (2026-05-29)

21.0.1 (2026-05-12)

21.0.0 (2026-05-08)

BREAKING CHANGES

20.5.3 (2026-04-30)

20.5.0 (2026-03-15)

v11.0.0

11.0.0 (2026-02-22)

⚠ BREAKING CHANGES

Bug Fixes

v10.1.3

10.1.3 (2024-12-10)

Bug Fixes

v10.1.2

10.1.2 (2024-06-13)

Bug Fixes

v10.1.1

10.1.1 (2024-06-11)

Bug Fixes

v10.1.0

10.1.0 (2024-06-11)

Features

v10.0.0

10.0.0 (2024-06-10)

⚠ BREAKING CHANGES

11.0.0 (2026-02-22)

⚠ BREAKING CHANGES

Bug Fixes

10.1.3 (2024-12-10)

Bug Fixes

10.1.2 (2024-06-13)

Bug Fixes

10.1.1 (2024-06-11)

Bug Fixes

10.1.0 (2024-06-11)

Features

10.0.0 (2024-06-10)

⚠ BREAKING CHANGES

Bug Fixes

wildcard-issue resolved

changelog

v9.1.7

What's Changed

New Contributors

dependabot Bot commented on behalf of github Jun 1, 2026 •

edited

Loading