FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump the npm-minor group with 6 updates by dependabot[bot] · Pull Request #3489 · github/codeql-action · GitHub

/ codeql-action Public

Bump the npm-minor group with 6 updates - #3489

Merged
henrymercer merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-37a5b5ae66
Feb 20, 2026
ConversationCommits (2)ChecksFiles changed
Merged

Bump the npm-minor group with 6 updates#3489
henrymercer merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-37a5b5ae66

Conversation

dependabot Bot commented on behalf of github Feb 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor group with 6 updates:

Package From To
semver 7.7.3 7.7.4
@typescript-eslint/eslint-plugin 8.54.0 8.55.0
@typescript-eslint/parser 8.54.0 8.56.0
esbuild 0.27.2 0.27.3
eslint-plugin-jsdoc 62.5.0 62.5.4
nock 14.0.10 14.0.11

Updates semver from 7.7.3 to 7.7.4

Release notes

Sourced from semver's releases.

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Changelog

Sourced from semver's changelog.

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Commits
  • 5993c2e chore: release 7.7.4 (#839)
  • 120968b deps: @​npmcli/template-oss@​4.29.0 (#840)
  • a29faa5 fix(cli): pass options to semver.valid() for loose version validation (#835)
  • 1d28d5e docs: fix typos and update -n CLI option documentation (#836)
  • 5816d4c chore: bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829)
  • ab9e28a chore: bump @​npmcli/template-oss from 4.27.1 to 4.28.0 (#827)
  • 44d7130 chore: bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824)
  • 7073576 chore: reorder parameters in invalid-versions.js test (#820)
  • 16a35f5 chore: bump @​npmcli/template-oss from 4.26.0 to 4.27.1 (#823)
  • 3a3459d chore: bump @​npmcli/template-oss from 4.25.1 to 4.26.0 (#818)
  • See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.54.0 to 8.55.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.55.0

8.55.0 (2026-02-09)

🚀 Features

  • utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)
  • eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)
  • eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)
  • eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)
  • typescript-estree: forbid invalid modifier in object expression (#11931)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.55.0 (2026-02-09)

🚀 Features

  • utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

  • eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)
  • eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)
  • eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)
  • eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • fedfe86 chore(release): publish 8.55.0
  • 8a95834 fix(eslint-plugin): [no-useless-default-assignment] reduce param index to ts ...
  • 4ba1e72 fix(eslint-plugin): [no-useless-default-assignment] report unnecessary defaul...
  • a1f8617 feat(utils): deprecate defaultOptions in favor of meta.defaultOptions (#11992)
  • 3f0ce54 fix(eslint-plugin): [no-useless-default-assignment] require strictNullChecks ...
  • 3df0002 fix(eslint-plugin): [no-unused-vars] remove trailing newline when removing en...
  • b931f8c chore: use workspace refs for workspace deps (#12018)
  • 1f17a79 chore: migrate to pnpm (#11248)
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.54.0 to 8.56.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

🩹 Fixes

  • use parser options from context.languageOptions (#12043)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

8.55.0 (2026-02-09)

🚀 Features

  • utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)
  • eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)
  • eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)
  • eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)
  • typescript-estree: forbid invalid modifier in object expression (#11931)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.56.0 (2026-02-16)

🚀 Features

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.55.0 (2026-02-09)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates esbuild from 0.27.2 to 0.27.3

Release notes

Sourced from esbuild's releases.

v0.27.3

  • Preserve URL fragments in data URLs (#4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.3

  • Preserve URL fragments in data URLs (#4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

... (truncated)

Commits
  • 9129e00 publish 0.27.3 to npm
  • e20e411 small fix to release notes
  • 0dc0f2d fix #4322: parse and print CSS @scope rules
  • 55fe391 update firefox css gradient support
  • 2c35297 update gradient lowering transform
  • 9209e44 Update Go to 1.25.7 (#4388)
  • e8d861b close #4374: compat table for the using feature
  • 19b8887 no longer need williamkapke/node-compat-table
  • 7e44218 the kangax/compat-table repo moved to a new url
  • 23b9338 run make update-compat-table
  • Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 62.5.0 to 62.5.4

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v62.5.4

62.5.4 (2026-02-07)

Bug Fixes

  • no-undefined-types: avoid treating infer type identifier as undefined; fixes #1654 (da44046)
  • no-undefined-types: ensure template tags are defined; fixes #1655 (bfef848)

v62.5.3

62.5.3 (2026-02-06)

Bug Fixes

  • default-expressions and examples configs: avoid applying deprecated rules now that ESLint warns against them; fixes #1651 (a252868)

v62.5.2

62.5.2 (2026-02-05)

Bug Fixes

  • valid-types: allow numeric properties for jsdoc mode; fixes #1646 (122d283)

v62.5.1

62.5.1 (2026-02-04)

Bug Fixes

  • require-template: stop treating type parameters names as unknown template names; fixes #1648 (dfc662e)
  • type-formatting: update jsdoccomment and devDeps.; fixes #1647 (19f36b6)
Commits
  • bfef848 fix(no-undefined-types): ensure template tags are defined; fixes #1655
  • da44046 fix(no-undefined-types): avoid treating infer type identifier as undefined;...
  • a252868 fix(default-expressions and examples configs): avoid applying deprecated ...
  • 122d283 fix(valid-types): allow numeric properties for jsdoc mode; fixes #1646
  • dfc662e fix(require-template): stop treating type parameters names as unknown templ...
  • 19f36b6 fix(type-formatting): update jsdoccomment and devDeps.; fixes #1647
  • See full diff in compare view

Updates nock from 14.0.10 to 14.0.11

Release notes

Sourced from nock's releases.

v14.0.11

14.0.11 (2026-02-09)

Bug Fixes

Commits
  • db0b280 fix: upgrade semantic-release (#2943)
  • bc78af4 Add write permission for contents in CI workflow (#2942)
  • a4cb6b8 fix: restore github actions write permissions (#2941)
  • 113dcac fix: migrate to npm OIDC (#2940)
  • 025db76 fix: update @mswjs/interceptors to fix a memory leak (#2938)
  • e7418da chore(deps): bump actions/setup-node from 4 to 6 (#2924)
  • 2d4a5cc chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2
  • 4f7e385 chore: upgrade interceptors
  • 5177a33 chore(deps): bump serialize-javascript and mocha (#2848)
  • 93611a2 chore(deps-dev): bump prettier from 3.2.5 to 3.6.2 (#2883)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nock since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bump the npm-minor group with 6 updates
167b47e 
Bumps the npm-minor group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.7.4` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.54.0` | `8.55.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.54.0` | `8.56.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.27.3` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.5.0` | `62.5.4` |
| [nock](https://github.com/nock/nock) | `14.0.10` | `14.0.11` |


Updates `semver` from 7.7.3 to 7.7.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.3...v7.7.4)

Updates `@typescript-eslint/eslint-plugin` from 8.54.0 to 8.55.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.55.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.54.0 to 8.56.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/parser)

Updates `esbuild` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.2...v0.27.3)

Updates `eslint-plugin-jsdoc` from 62.5.0 to 62.5.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.5.0...v62.5.4)

Updates `nock` from 14.0.10 to 14.0.11
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.10...v14.0.11)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: esbuild
  dependency-version: 0.27.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: nock
  dependency-version: 14.0.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Feb 18, 2026
dependabot Bot requested a review from a team as a code owner February 18, 2026 17:53
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Feb 18, 2026
github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels Feb 18, 2026

github-actions Bot commented Feb 18, 2026

Copy link
Copy Markdown
Contributor

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

github-actions Bot marked this pull request as draft February 18, 2026 17:55
mbg marked this pull request as ready for review February 18, 2026 19:06
Copilot AI review requested due to automatic review settings February 18, 2026 19:06
Copilot AI reviewed Feb 18, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

This is an automated Dependabot PR that updates 6 npm packages in the npm-minor group. The updates include bug fixes for semver and nock (including a memory leak fix), features and fixes for TypeScript ESLint packages, a bug fix for esbuild's handling of URL fragments in data URLs, and bug fixes for eslint-plugin-jsdoc.

Changes:

  • Updates 6 npm dev/runtime dependencies with minor and patch version bumps
  • Regenerates package-lock.json with new dependency versions
  • Propagates version changes to compiled JavaScript files in lib/

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated 1 comment.

File Description
package.json Updates dependency versions for 6 packages
package-lock.json Updates resolved versions and integrity hashes for dependencies and their transitive dependencies
lib/*.js Generated JavaScript files containing bundled package.json content (not reviewed per repository guidelines)

Comment thread package.json
"@types/sinon": "^21.0.0",
"@typescript-eslint/eslint-plugin": "^8.54.0",
"@typescript-eslint/eslint-plugin": "^8.55.0",
"@typescript-eslint/parser": "^8.48.0",

Copilot AI Feb 18, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

The PR description indicates that @typescript-eslint/parser should be updated from 8.54.0 to 8.56.0, but the package.json file shows no changes to this dependency (it remains at ^8.48.0). However, package-lock.json does update the resolved version to 8.56.0.

This creates a version mismatch issue: @typescript-eslint/eslint-plugin is being updated to 8.55.0, while the parser version constraint in package.json remains at ^8.48.0. Although ^8.48.0 allows 8.56.0 to be installed, it's best practice to keep these TypeScript ESLint packages aligned with the same major.minor version to avoid compatibility issues.

The package.json line for @typescript-eslint/parser should be updated to ^8.56.0 to match the actual installed version and maintain compatibility with the eslint-plugin.

Suggested change
"@typescript-eslint/parser": "^8.48.0",
"@typescript-eslint/parser": "^8.56.0",

Copilot uses AI. Check for mistakes.
henrymercer merged commit 710e294 into main Feb 20, 2026
252 checks passed
henrymercer deleted the dependabot/npm_and_yarn/npm-minor-37a5b5ae66 branch February 20, 2026 17:12
This was referenced Feb 27, 2026
Merged
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
mbg mbg approved these changes

Assignees

No one assigned

Labels

size/XS Should be very easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

Back | FazBrowse Home | New Git URL