Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates - #328

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/minor-and-patch-c59cb785d0
Closed

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates#328
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/minor-and-patch-c59cb785d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 18 updates in the / directory:

Package From To
@chainsafe/ssz 1.7.0 1.8.0
@lodestar/types 1.47.0 1.48.0
@walletconnect/sign-client 2.24.0 2.25.0
fs-extra 11.4.0 11.4.1
ox 1.7.4 1.8.1
viem 2.56.3 2.56.9
@commitlint/cli 21.2.2 21.2.3
@commitlint/config-conventional 21.2.2 21.2.3
@commitlint/prompt 21.2.2 21.2.3
@vitest/coverage-v8 5.0.0 5.0.2
eslint 10.10.0 10.11.0
eslint-plugin-sonarjs 4.2.0 4.2.1
prettier 3.9.6 3.9.9
tsc-alias 1.8.17 1.9.5
tsx 4.23.13 4.23.15
typescript-eslint 8.70.0 8.70.1
vite 8.3.0 8.3.1
vitest 5.0.0 5.0.2

Updates @chainsafe/ssz from 1.7.0 to 1.8.0

Changelog

Sourced from @​chainsafe/ssz's changelog.

1.8.0 (2026-09-14)

Features

  • allow zero limit on progressive lists (#549) (7892e40)

Bug Fixes

  • validate list limits at construction (#551) (f8c8162)
Commits

Updates @lodestar/types from 1.47.0 to 1.48.0

Release notes

Sourced from @​lodestar/types's releases.

Release v1.48.0

Good day Lodestar operators! We’ve just released v1.48.0, a strongly recommended upgrade for mainnet and testnet users.

This release introduces flat-file storage for PeerDAS data columns, reducing LevelDB pressure and making data-column serving more efficient for finalized and retained column data.

Highlights

  • Flat-file storage for data columns: Newly persisted PeerDAS data columns are now stored as flat files under $dataDir/data_columns by default, with --dataColumnDir available if operators want to place them on a separate volume. (#8899)

  • More efficient data-column reads: The new format stores columns with per-column indexing and compression, so Lodestar can read requested columns directly instead of loading every column for a block. (#8899)

  • No manual migration required: Existing LevelDB column data remains available as an upgrade fallback, while newly persisted data columns use the flat-file path. Blob sidecar storage is unchanged. (#8899)

Click here for the full changelog

Features

Bug Fixes

... (truncated)

Commits

Updates @walletconnect/sign-client from 2.24.0 to 2.25.0

Release notes

Sourced from @​walletconnect/sign-client's releases.

@​walletconnect/sign-client@​2.25.0

Patch Changes

  • #7341 44395d0 Thanks @​ganchoradkov! - Fail closed when CACAO signature verification throws, and stop those throws escaping the authenticate response handler.

    verifySignature throws rather than returning false on several attacker-controlled inputs: an unknown s.t hits its default: branch, a malformed eip191 signature throws out of Signature.fromHex/recoverAddress, and a non-CAIP-2 chain in iss throws before the eip1271 request is made. validateSignedCacao guarded only formatMessage, so those propagated to callers.

    On the dapp side that escaped onAuthenticate, an async event listener whose rejection nothing observed, so authenticate() stayed pending until the one hour request expiry instead of rejecting — and under node's default unhandled-rejection handling the process exited. validateSignedCacao now fails closed, keeping its documented boolean contract, and the authenticate response handler routes any remaining failure to the same rejection path.

    Also models uri on AuthTypes.CacaoPayload, since formatMessage signs aud || uri and a wallet may send either.

  • #7341 f5ac876 Thanks @​ganchoradkov! - Abort authenticated session settlement when a CACAO fails signature verification.

    On the dapp side, a wc_sessionAuthenticate response whose CACAO failed verification rejected the caller's promise but did not stop the handler, so a session was still derived, subscribed and persisted from the unverified payload — leaving a session in client.session for an account nobody proved control of, even though the application had been told that verification failed.

    Applications that relied on a session appearing despite a rejected authenticate() promise will no longer receive one.

  • #7341 896c6b0 Thanks @​ganchoradkov! - Bind wc_sessionAuthenticate responses to the request that was sent.

    A verified signature only proves that the address in iss signed the CACAO's own payload. validateSignedCacao reconstructs the signed message from that same payload and does not take the request as an argument, so it cannot tell an answer to this request apart from a genuine CACAO the same wallet issued for a different site — and no caller compared domain, aud or nonce either. A CACAO a user signed for one site was therefore accepted by an unrelated dapp.

    Authenticate responses are now checked against the originating request with the new isCacaoBoundToRequest export from @walletconnect/utils, which compares domain, aud and nonce, requires the chain in iss to have been requested, and enforces exp/nbf. Fields that wallets legitimately rewrite are deliberately not compared: populateAuthPayload appends the recap statement, rewrites resources and narrows chains, so comparing those would reject every conformant wallet.

  • Updated dependencies [44395d0, 896c6b0]:

... (truncated)

Changelog

Sourced from @​walletconnect/sign-client's changelog.

2.25.0

Patch Changes

  • #7341 44395d0 Thanks @​ganchoradkov! - Fail closed when CACAO signature verification throws, and stop those throws escaping the authenticate response handler.

    verifySignature throws rather than returning false on several attacker-controlled inputs: an unknown s.t hits its default: branch, a malformed eip191 signature throws out of Signature.fromHex/recoverAddress, and a non-CAIP-2 chain in iss throws before the eip1271 request is made. validateSignedCacao guarded only formatMessage, so those propagated to callers.

    On the dapp side that escaped onAuthenticate, an async event listener whose rejection nothing observed, so authenticate() stayed pending until the one hour request expiry instead of rejecting — and under node's default unhandled-rejection handling the process exited. validateSignedCacao now fails closed, keeping its documented boolean contract, and the authenticate response handler routes any remaining failure to the same rejection path.

    Also models uri on AuthTypes.CacaoPayload, since formatMessage signs aud || uri and a wallet may send either.

  • #7341 f5ac876 Thanks @​ganchoradkov! - Abort authenticated session settlement when a CACAO fails signature verification.

    On the dapp side, a wc_sessionAuthenticate response whose CACAO failed verification rejected the caller's promise but did not stop the handler, so a session was still derived, subscribed and persisted from the unverified payload — leaving a session in client.session for an account nobody proved control of, even though the application had been told that verification failed.

    Applications that relied on a session appearing despite a rejected authenticate() promise will no longer receive one.

  • #7341 896c6b0 Thanks @​ganchoradkov! - Bind wc_sessionAuthenticate responses to the request that was sent.

    A verified signature only proves that the address in iss signed the CACAO's own payload. validateSignedCacao reconstructs the signed message from that same payload and does not take the request as an argument, so it cannot tell an answer to this request apart from a genuine CACAO the same wallet issued for a different site — and no caller compared domain, aud or nonce either. A CACAO a user signed for one site was therefore accepted by an unrelated dapp.

    Authenticate responses are now checked against the originating request with the new isCacaoBoundToRequest export from @walletconnect/utils, which compares domain, aud and nonce, requires the chain in iss to have been requested, and enforces exp/nbf. Fields that wallets legitimately rewrite are deliberately not compared: populateAuthPayload appends the recap statement, rewrites resources and narrows chains, so comparing those would reject every conformant wallet.

... (truncated)

Commits
  • c8a72d4 chore: update versions and lerna.json
  • 44395d0 fix(sign-client): reject instead of hanging when cacao verification throws
  • 896c6b0 fix(sign-client): bind authenticate responses to the originating request
  • f5ac876 fix(sign-client): abort session settlement when a cacao fails verification
  • See full diff in compare view

Updates fs-extra from 11.4.0 to 11.4.1

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

  • Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)
  • Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)
Commits

Updates ox from 1.7.4 to 1.8.1

Release notes

Sourced from ox's releases.

ox@1.8.1

Patch Changes

  • #462 16c3378 Thanks @​jxom! - Renamed the decoded frame destination from target to to.

    Frame.from({ to: recipient });

ox@1.8.0

Minor Changes

ox@1.7.5

Patch Changes

  • #434 633388e Thanks @​gomesalexandre! - Accepted SIWE URIs with an authority and empty path.

  • #436 3f894f8 Thanks @​gomesalexandre! - Fixed AbiEvent.decode argument ordering for interleaved indexed event inputs.

  • #435 d953424 Thanks @​gomesalexandre! - Fixed signature byte codecs to left-pad short scalars and reject invalid lengths and recovery values.

  • #449 60ad526 Thanks @​jxom! - Updated Tempo multisig accounts to versioned configurations, factory-derived addresses, primitive approvals, and configurable-account delegation.

  • #438 ef20386 Thanks @​gomesalexandre! - Fixed Blobs.to truncating multi-blob payloads when a non-final blob contained a 0x80 byte.

  • #431 bb35f6e Thanks @​jxom! - Updated Tempo multisig account derivation to use the canonical CREATE2 recovery address.

Changelog

Sourced from ox's changelog.

1.8.1

Patch Changes

  • #462 16c3378 Thanks @​jxom! - Renamed the decoded frame destination from target to to.

    Frame.from({ to: recipient });

1.8.0

Minor Changes

1.7.5

Patch Changes

  • #434 633388e Thanks @​gomesalexandre! - Accepted SIWE URIs with an authority and empty path.

  • #436 3f894f8 Thanks @​gomesalexandre! - Fixed AbiEvent.decode argument ordering for interleaved indexed event inputs.

  • #435 d953424 Thanks @​gomesalexandre! - Fixed signature byte codecs to left-pad short scalars and reject invalid lengths and recovery values.

  • #449 60ad526 Thanks @​jxom! - Updated Tempo multisig accounts to versioned configurations, factory-derived addresses, primitive approvals, and configurable-account delegation.

  • #438 ef20386 Thanks @​gomesalexandre! - Fixed Blobs.to truncating multi-blob payloads when a non-final blob contained a 0x80 byte.

  • #431 bb35f6e Thanks @​jxom! - Updated Tempo multisig account derivation to use the canonical CREATE2 recovery address.

Commits

Updates viem from 2.56.3 to 2.56.9

Release notes

Sourced from viem's releases.

viem@2.56.9

Patch Changes

  • #5123 2068265d2fefb41da2ca672f7b8ef0d221efdbde Thanks @​rabbitmainnet! - Added Rabbit Chain Testnet (chain ID 9280) to viem/chains.

  • #5124 4767ff7be7aed3845b617f8b16806d72469ea657 Thanks @​kyscott18! - Added the getStorageValues action for batch retrieval of contract storage slots.

  • #5108 5a201d9a5996a836023bdb676c8d7c0f43f9c8fa Thanks @​Lukecele! - Added Plasma mainnet addresses for USDC and EURC.

  • #5114 de663c98de19da2ffccdd1681fd616e6ed653b98 Thanks @​jxom! - Resynced Tempo contract ABIs and added the current committee address.

     // Abis.earnMerkleRewardDistributor contract calls
-functionName: 'fundWithAssets',
-args: [funder, assets, minEarnShares],
+functionName: 'fundAndPublishRoot',
+args: [settlementId, expectedRootVersion, funder, assets, minEarnShares, root, totalEntitlement, statementHash],
functionName: 'publishRoot',
-args: [root, totalEntitlement, statementHash],
+args: [expectedRootVersion, root, totalEntitlement, statementHash],
-const verifierAbi = Abis.zone
+const verifierAbi = Abis.core
-const selector = Selectors.zoneVerifier.verify
+const selector = Selectors.zoneVerifier.verify[

'verify(uint32,uint64,uint64,bytes32,uint64,(bytes32,bytes32),(bytes32,bytes32,uint64,uint64),bytes32,bytes,bytes)'
+]

  • #5112 c704647d93ed5eaabe3ca9e22fdd4f7e9132b641 Thanks @​spalladino! - Added optional maxUsedGas to simulateBlocks call results, preserving the per-call maxUsedGas reported by eth_simulateV1.

    maxUsedGas is the node's measurement of the gas used by a call before gas refunds are applied – it is not a guaranteed minimum sufficient gas limit for the call. It is undefined against nodes that do not report it, and is available on both successful and failed call results.

  • #5126 6feacb3a9066b47d3f083a0da0da2d8172577870 Thanks @​jxom! - viem/tempo: Added PropAMM actions.

    • viem@2.56.8

    Patch Changes

    viem@2.56.7

    Patch Changes

    ... (truncated)

    Commits

    Updates @commitlint/cli from 21.2.2 to 21.2.3

    Release notes

    Sourced from @​commitlint/cli's releases.

    v21.2.3

    21.2.3 (2026-09-19)

    Bug Fixes

    Refactor

    Chore, ci, build, etc.

    New Contributors

    Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

    Changelog

    Sourced from @​commitlint/cli's changelog.

    21.2.3 (2026-09-19)

    Bug Fixes

    • lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)
    Commits
    • 95d4056 v21.2.3
    • a6f279b fix(lint): trim trailing whitespace off the message handed to ignore matchers...
    • See full diff in compare view

    Updates @commitlint/config-conventional from 21.2.2 to 21.2.3

    Release notes

    Sourced from @​commitlint/config-conventional's releases.

    v21.2.3

    21.2.3 (2026-09-19)

    Bug Fixes

    Refactor

    Chore, ci, build, etc.

    New Contributors

    Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

    Changelog

    Sourced from @​commitlint/config-conventional's changelog.

    21.2.3 (2026-09-19)

    Bug Fixes

    • rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)
    Commits

    Updates @commitlint/prompt from 21.2.2 to 21.2.3

    Release notes

    Sourced from @​commitlint/prompt's releases.

    v21.2.3

    21.2.3 (2026-09-19)

    Bug Fixes

    Refactor

    Chore, ci, build, etc.

    New Contributors

    Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

    Changelog

    Sourced from @​commitlint/prompt's changelog.

    21.2.3 (2026-09-19)

    Note: Version bump only for package @​commitlint/prompt

    Commits

    Updates @vitest/coverage-v8 from 5.0.0 to 5.0.2

    Release notes

    Sourced from @​vitest/coverage-v8's releases.

    v5.0.2

       🐞 Bug Fixes

    @dependabot
    chore(deps): bump the minor-and-patch group across 1 directory with 1…
    46ea275 
    …8 updates

Bumps the minor-and-patch group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@chainsafe/ssz](https://github.com/ChainSafe/ssz/tree/HEAD/packages/ssz) | `1.7.0` | `1.8.0` |
| [@lodestar/types](https://github.com/ChainSafe/lodestar) | `1.47.0` | `1.48.0` |
| [@walletconnect/sign-client](https://github.com/WalletConnect/walletconnect-monorepo/tree/HEAD/packages/sign-client) | `2.24.0` | `2.25.0` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.4.0` | `11.4.1` |
| [ox](https://github.com/wevm/ox) | `1.7.4` | `1.8.1` |
| [viem](https://github.com/wevm/viem) | `2.56.3` | `2.56.9` |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.2` | `21.2.3` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.2` | `21.2.3` |
| [@commitlint/prompt](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/prompt) | `21.2.2` | `21.2.3` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.0` | `5.0.2` |
| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.0` | `4.2.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [tsc-alias](https://github.com/justkey007/tsc-alias) | `1.8.17` | `1.9.5` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.70.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.2` |



Updates `@chainsafe/ssz` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/ChainSafe/ssz/releases)
- [Changelog](https://github.com/ChainSafe/ssz/blob/master/packages/ssz/CHANGELOG.md)
- [Commits](https://github.com/ChainSafe/ssz/commits/ssz-v1.8.0/packages/ssz)

Updates `@lodestar/types` from 1.47.0 to 1.48.0
- [Release notes](https://github.com/ChainSafe/lodestar/releases)
- [Changelog](https://github.com/ChainSafe/lodestar/blob/unstable/RELEASE.md)
- [Commits](ChainSafe/lodestar@v1.47.0...v1.48.0)

Updates `@walletconnect/sign-client` from 2.24.0 to 2.25.0
- [Release notes](https://github.com/WalletConnect/walletconnect-monorepo/releases)
- [Changelog](https://github.com/WalletConnect/walletconnect-monorepo/blob/v2.0/packages/sign-client/CHANGELOG.md)
- [Commits](https://github.com/WalletConnect/walletconnect-monorepo/commits/@walletconnect/sign-client@2.25.0/packages/sign-client)

Updates `fs-extra` from 11.4.0 to 11.4.1
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.4.0...11.4.1)

Updates `ox` from 1.7.4 to 1.8.1
- [Release notes](https://github.com/wevm/ox/releases)
- [Changelog](https://github.com/wevm/ox/blob/main/CHANGELOG.md)
- [Commits](https://github.com/wevm/ox/compare/ox@1.7.4...ox@1.8.1)

Updates `viem` from 2.56.3 to 2.56.9
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.56.3...viem@2.56.9)

Updates `@commitlint/cli` from 21.2.2 to 21.2.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.3/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.2.2 to 21.2.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.3/@commitlint/config-conventional)

Updates `@commitlint/prompt` from 21.2.2 to 21.2.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/prompt/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.3/@commitlint/prompt)

Updates `@vitest/coverage-v8` from 5.0.0 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8)

Updates `eslint` from 10.10.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.10.0...v10.11.0)

Updates `eslint-plugin-sonarjs` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `tsc-alias` from 1.8.17 to 1.9.5
- [Release notes](https://github.com/justkey007/tsc-alias/releases)
- [Commits](justkey007/tsc-alias@v1.8.17...v1.9.5)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.13...v4.23.15)

Updates `typescript-eslint` from 8.70.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

Updates `vite` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite)

Updates `vitest` from 5.0.0 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@chainsafe/ssz"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@lodestar/types"
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@walletconnect/sign-client"
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fs-extra
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ox
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: viem
  dependency-version: 2.56.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@commitlint/prompt"
  dependency-version: 21.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tsc-alias
  dependency-version: 1.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 28, 2026
    @dependabot
    dependabot Bot requested a review from a team as a code owner September 28, 2026 23:16
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 28, 2026
    @dependabot @github

    dependabot Bot commented on behalf of github Oct 5, 2026

    Copy link
    Copy Markdown
    Contributor Author

    Looks like these dependencies are updatable in another way, so this is no longer needed.

    @dependabot dependabot Bot closed this Oct 5, 2026
    @dependabot
    dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-c59cb785d0 branch October 5, 2026 23:14

    This branch had an error being deployed

    1 failed deployment
    tests — 46ea2752 Deployed Sep 28, 2026 by dependabot[bot] via check-all #728
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants