Bump the development-dependencies group with 9 updates by dependabot[bot] · Pull Request #98 · changesets/ghcommit

dependabot · 2026-06-11T06:49:52Z

Bumps the development-dependencies group with 9 updates:

Package	From	To
@changesets/changelog-github	`0.5.1`	`0.7.0`
@changesets/cli	`2.27.7`	`2.31.0`
@graphql-codegen/cli	`7.0.0`	`7.1.2`
oxfmt	`0.51.0`	`0.53.0`
oxlint	`1.64.0`	`1.68.0`
oxlint-tsgolint	`0.22.1`	`0.23.0`
publint	`0.3.20`	`0.3.21`
tsdown	`0.22.0`	`0.22.1`
vitest	`4.1.5`	`4.1.8`

Updates @changesets/changelog-github from 0.5.1 to 0.7.0

Release notes

Sourced from @changesets/changelog-github's releases.

@changesets/changelog-github@0.7.0

Minor Changes

#1255 94578cf Thanks @Kauhsa! - Added disableThanks option

@changesets/changelog-github@0.6.0

Minor Changes

#1850 fd0bc2e Thanks @mixelburg! - Linkify issue references in changelog entries.

Patch Changes

#1810 27fd8f4 Thanks @hirasso! - Replace deprecated String.prototype.trimRight with String.prototype.trimEnd

Updated dependencies [d4b8ad8, e462d89]:

@changesets/get-github-info@0.8.0

Commits

d1ef2d8 Version Packages (#1950)
7af5876 Restrict publish job to the npm env (#1972)
ff767d2 Sync config-file-options documentation with schema.json and source code (#1683)
951094b fix: pin 2 unpinned action(s) (#1915)
94578cf Added disableThanks option (#1255)
d87334d Support dark mode banner in readme (#1943)
87472a7 Update .vscode/settings.json (#1944)
317a373 Disable publish_pr job
9cce6db Version Packages (#1897)
d2121dc Fix npm auth for path-based registries during publish by preserving configure...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @changesets/changelog-github since your current version.

Updates @changesets/cli from 2.27.7 to 2.31.0

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@2.31.0

Minor Changes

#1889 96ca062 Thanks @mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

#1873 42943b7 Thanks @mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

d2121dc Thanks @Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

#1888 036fdd4 Thanks @mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

#1903 5c4731f Thanks @Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

#1867 f61e716 Thanks @Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

@changesets/assemble-release-plan@6.0.10

@changesets/get-dependents-graph@2.1.4

@changesets/apply-release-plan@7.1.1

@changesets/get-release-plan@4.0.16

@changesets/config@3.1.4

@changesets/cli@2.30.0

Minor Changes

#1840 057cca2 Thanks @wotan-allfather! - Add --since flag to add command

The add command now supports a --since flag that allows you to specify which branch, tag, or git ref to use when detecting changed packages. This is useful for gitflow workflows where you have multiple target branches and the baseBranch config option doesn't cover all use cases.

Example: changeset add --since=develop

If not provided, the command falls back to the baseBranch value in your .changeset/config.json.

#1845 2b4a66a Thanks @Andarist! - Delegate OTP prompting to the package manager instead of handling it in-process. This allows Changesets to use the package manager's native web auth support.

#1774 667fe5a Thanks @bluwy! - Support importing custom commit option ES module. Previously, it used require() which only worked for CJS modules, however now it uses import() which supports both CJS and ES modules.

#1839 73b1809 Thanks @leochiu-a! - Add a --message (-m) flag to changeset add (and default changeset) so the changeset summary can be provided from the command line. When --message is present, the summary prompt is skipped while the final confirmation step is kept.

#1806 0e8e01e Thanks @luisadame! - Changeset CLI can now be run from the nested directories in the project, where the .changeset directory has to be found in one of the parent directories

Patch Changes

#1849 9dc3230 Thanks @Andarist! - Compute the terminal's size lazily to avoid spurious stderr output in non-interactive mode

#1857 2a73025 Thanks @mixelburg! - Fix confusing prompt labels when entering changeset summary after external editor fallback

#1842 6df3a5e Thanks @RodrigoHamuy! - Allow private packages to depend on skipped packages without requiring them to also be skipped. Private packages are not published to npm, so it is safe for them to have dependencies on ignored or unversioned packages.

... (truncated)

Commits

9cce6db Version Packages (#1897)
d2121dc Fix npm auth for path-based registries during publish by preserving configure...
036fdd4 Fix several changeset version issues with workspace protocol dependencies (...
5c4731f Gracefully handle stale npm info data leading to duplicate publish attempts...
96ca062 Error on unsupported flags for individual CLI commands (#1889)
42943b7 fix(cli): respond to --help on all subcommands (#1873)
f61e716 Improved detection for published state of prerelease-only packages without ...
3ab4d89 Version Packages (#1817)
1772598 Fix changelog entry insertion when no package title is present in the `CHANGE...
6df3a5e Allow versioned private packages to depend on skipped packages without requir...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @changesets/cli since your current version.

Updates @graphql-codegen/cli from 7.0.0 to 7.1.2

Changelog

Sourced from @graphql-codegen/cli's changelog.

7.1.2

Patch Changes

#10861 a2e1093 Thanks @eddeee888! - Fix CLI's require flag when resolving module issue in ESM in native Windows

7.1.1

Patch Changes

#10858 3fa901b Thanks @eddeee888! - Fix --version flag

7.1.0

Minor Changes

#10855 cfc4fc3 Thanks @eddeee888! - Add disableFederationDirectiveAndScalarInjection config to better support Federation v2

Patch Changes

Updated dependencies [cbf9544]:

@graphql-codegen/core@6.1.0

7.0.1

Patch Changes

#10848 f3ce427 Thanks @eddeee888! - dependencies updates:

Updated dependency @graphql-codegen/client-preset@workspace:^ ↗︎ (from ^6.0.0, in dependencies)

#10849 55a4742 Thanks @eddeee888! - dependencies updates:

Updated dependency @graphql-codegen/core@workspace:^ ↗︎ (from ^6.0.0, in dependencies)

Updated dependency

... (truncated)

Commits

d65bbb9 chore(release): update monorepo packages versions (#10862)
a2e1093 Fix ESM issue for CLI require flag on Windows (#10861)
a989a96 chore(release): update monorepo packages versions (#10860)
3fa901b CODEGEN-848 - Fix CLI --version flag (#10858)
41bc398 chore(release): update monorepo packages versions (#10854)
cbf9544 feat(cli): allow disabling legacy federation injection for FederationV2 schem...
29c84f7 chore(release): update monorepo packages versions (#10852)
99163d4 Make dev-test project (2) (#10837)
55a4742 Link all deps with workspace: for pnpm & changeset, fix release CI (#10849)
f3ce427 Correctly set dep of client-preset, fix publishing (#10848)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @graphql-codegen/cli since your current version.

Updates oxfmt from 0.51.0 to 0.53.0

Commits

964a758 release(apps): oxlint v1.68.0 && oxfmt v0.53.0 (#22883)
68b455d release(apps): oxlint v1.67.0 && oxfmt v0.52.0 (#22735)
16b8058 feat(oxfmt): Support vite-plus/resolveConfig for vite.config.ts (#22454)
See full diff in compare view

Updates oxlint from 1.64.0 to 1.68.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)

2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)

bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)

5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)

7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)

2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)

ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)

6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)

7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)

732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)

a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)

ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)

3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)

ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)

e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)

6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)

85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)

fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)

ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)

dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)

989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)

cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

25d577e language_server: Start tools in parallel (#15500) (Sysix)

3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)

3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)

9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)

3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)

444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)

2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)

a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)

3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)

2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)

57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.68.0] - 2026-06-01

🚀 Features

e4b1f46 linter/typescript: Implement method-signature-style rule (#22679) (Mikhail Baev)

bc462ca linter/vue: Implement no-reserved-component-names rule (#22741) (bab)

ef9e751 linter/vue: Implement component-definition-name-casing rule (#22818) (bab)

d67f51a linter/vue: Implement require-prop-type-constructor rule (#22708) (bab)

8422e8b linter/jsdoc: Implement require-yields-description rule (#22805) (Mikhail Baev)

fe93f97 linter/eslint: Implement prefer-named-capture-group rule (#22759) (Sebastian Poxhofer)

[1.67.0] - 2026-05-26

🚀 Features

b84941e linter/vue: Implement no-expose-after-await rule (#22675) (bab)

98b98c1 linter/vue: Implement no-computed-properties-in-data rule (#22674) (bab)

2d4c919 oxlint: Support vite-plus/resolveConfig for vite.config.ts (#22456) (leaysgur)

2a60012 linter/vue: Implement require-render-return rule (#22613) (bab)

9f227fd linter/vue: Implement no-deprecated-props-default-this rule (#21892) (bab)

87f065e linter/vue: Implement return-in-emits-validator rule (#21935) (bab)

ea0380c linter/unicorn: Implement import-style rule (#22173) (Hao Chen)

dde40fe linter/vue: Implement no-watch-after-await rule (#22006) (bab)

a735eb0 linter/vue: Implement valid-next-tick rule (#22531) (bab)

6dc615d linter/vue: Implement no-shared-component-data rule (#21842) (bab)

a656418 linter/vue: Implement valid-define-options rule (#22107) (bab)

bb6f1b2 linter/vue: Implement require-slots-as-functions rule (#22244) (bab)

5fa4774 linter/n: Implement callback-return rule (#22470) (Mikhail Baev)

[1.66.0] - 2026-05-18

🚀 Features

0440b0f linter/eslint: Implement id-match rule (#22379) (Vladislav Sayapin)

65bf119 linter: Implement react no-object-type-as-default-prop (#22481) (uhyo)

2a6ddce linter/eslint: Implement no-implied-eval rule (#22391) (Vladislav Sayapin)

625758a linter/vitest: Implement padding-around-after-all-blocks rule (#21788) (kapobajza)

37680b0 linter: Implement react no-unstable-nested-components (#22248) (Jovi De Croock)

d8d9c74 linter: Implement import/newline-after-import rule (#19142) (Ryuya Yanagi)

[1.65.0] - 2026-05-15

🚀 Features

5478fb5 linter/jsdoc: Implement require-throws-description rule (#22386) (Mikhail Baev)

c73225e linter/eslint: Implement prefer-arrow-callback rule (#22312) (박천(Cheon Park))

de82b59 linter: Add support for eslint-plugin-jsx-a11y-x (#22356) (mehm8128)

f44b6c8 linter: Fill schemas DummyRuleMap with built-in rules (#22288) (Sysix)

Commits

964a758 release(apps): oxlint v1.68.0 && oxfmt v0.53.0 (#22883)
3f05c5e feat(linter): expose override::exclude_files option (#22884)
e4b1f46 feat(linter/typescript): implement method-signature-style rule (#22679)
bc462ca feat(linter/vue): implement no-reserved-component-names rule (#22741)
ef9e751 feat(linter/vue): implement component-definition-name-casing rule (#22818)
d67f51a feat(linter/vue): implement require-prop-type-constructor rule (#22708)
8422e8b feat(linter/jsdoc): implement require-yields-description rule (#22805)
fe93f97 feat(linter/eslint): implement prefer-named-capture-group rule (#22759)
68b455d release(apps): oxlint v1.67.0 && oxfmt v0.52.0 (#22735)
b84941e feat(linter/vue): implement no-expose-after-await rule (#22675)
Additional commits viewable in compare view

Updates oxlint-tsgolint from 0.22.1 to 0.23.0

Release notes

Sourced from oxlint-tsgolint's releases.

v0.23.0

What's Changed

chore(deps): update crate-ci/typos action to v1.45.2 by @renovate[bot] in oxc-project/tsgolint#915

feat: add skill for upgrading typescript-go by @camc314 in oxc-project/tsgolint#918

chore(deps): update pnpm to v10.33.2 by @renovate[bot] in oxc-project/tsgolint#921

chore: update typescript-go submodule by @camc314 in oxc-project/tsgolint#922

fix: attach tsconfig path to diagnostics by @camc314 in oxc-project/tsgolint#923

fix(prefer-nullish-coalescing): parenthesize mixed logical fixes by @camc314 in oxc-project/tsgolint#924

tests(return-await): cover non-async arrow functions by @camc314 in oxc-project/tsgolint#926

chore(deps): update github.com/go-json-experiment/json digest to b6187a3 by @renovate[bot] in oxc-project/tsgolint#927

chore(deps): update github actions by @renovate[bot] in oxc-project/tsgolint#928

chore(deps): update crate-ci/typos action to v1.46.0 by @renovate[bot] in oxc-project/tsgolint#929

chore(deps): update module github.com/dlclark/regexp2 to v2 by @renovate[bot] in oxc-project/tsgolint#930

chore: update typescript-go submodule by @camc314 in oxc-project/tsgolint#931

chore(deps): update typescript-go digest to 48e2953 by @renovate[bot] in oxc-project/tsgolint#933

chore(deps): update typescript-go digest to 5eb880f by @renovate[bot] in oxc-project/tsgolint#936

fix(no-misused-promises): handle empty JSX attributes by @camc314 in oxc-project/tsgolint#938

fix(no-unsafe-enum-comparison): flag string literal unions by @camc314 in oxc-project/tsgolint#937

chore(deps): update typescript-go digest to e1f8f97 by @renovate[bot] in oxc-project/tsgolint#939

chore(deps): update typescript-go digest to 092b34f by @renovate[bot] in oxc-project/tsgolint#940

chore: configure typescript-go renovate schedule by @camc314 in oxc-project/tsgolint#941

chore(deps): update github actions by @renovate[bot] in oxc-project/tsgolint#945

chore(deps): update dependency dprint-typescript to v0.96.0 by @renovate[bot] in oxc-project/tsgolint#947

chore(deps): update gomod by @renovate[bot] in oxc-project/tsgolint#946

chore(deps): update crate-ci/typos action to v1.46.1 by @renovate[bot] in oxc-project/tsgolint#948

fix(prefer-nullish-coalescing): emit suggestion over fix by @camc314 in oxc-project/tsgolint#951

chore: update packageManager to pnpm 11.0.4 by @Boshen in oxc-project/tsgolint#953

chore: update typescript-go submodule by @camc314 in oxc-project/tsgolint#955

fix(no-nullable-type-assertion-style): use suggestion instead of fix by @camc314 in oxc-project/tsgolint#956

docs: Update Go version requirement to 1.26 in CONTRIBUTING.md. by @connorshea in oxc-project/tsgolint#957

fix: allow safe promise intersection members by @camc314 in oxc-project/tsgolint#959

ci: switch security workflow to ubuntu-latest by @Boshen in oxc-project/tsgolint#962

chore(deps): update dependency vitest to v4.1.6 by @renovate[bot] in oxc-project/tsgolint#963

chore(deps): update module github.com/dlclark/regexp2/v2 to v2.0.3 by @renovate[bot] in oxc-project/tsgolint#964

chore(deps): update dependency dprint-markdown to v0.22.0 by @renovate[bot] in oxc-project/tsgolint#965

chore(deps): update github actions by @renovate[bot] in oxc-project/tsgolint#966

perf(no-unnecessary-type-parameters): stop counting settled candidates by @camc314 in oxc-project/tsgolint#967

chore: add dprint to pnpm allowBuilds by @camc314 in oxc-project/tsgolint#968

Full Changelog: oxc-project/tsgolint@v0.22.1...v0.23.0

Commits

0e575fa chore: add dprint to pnpm allowBuilds (#968)
bb8886b perf(no-unnecessary-type-parameters): stop counting settled candidates (#967)
90be7b2 chore(deps): update github actions (#966)
cdae358 chore(deps): update dependency dprint-markdown to v0.22.0 (#965)
d356c9e chore(deps): update module github.com/dlclark/regexp2/v2 to v2.0.3 (#964)
7cba6be chore(deps): update dependency vitest to v4.1.6 (#963)
1dcd2a6 ci: switch security workflow to ubuntu-latest (#962)
b4f6624 fix: allow safe promise intersection members (#959)
233eeb3 docs: Update Go version requirement to 1.26 in CONTRIBUTING.md. (#957)
8bd37ab fix(no-nullable-type-assertion-style): use suggestion instead of fix (#956)
Additional commits viewable in compare view

Updates publint from 0.3.20 to 0.3.21

Release notes

Sourced from publint's releases.

publint@0.3.21

Patch Changes

Suggest adding "sideEffects": false when bundler-oriented package fields or conditions are detected and the field is missing. (#228)

Changelog

Sourced from publint's changelog.

0.3.21

Patch Changes

Suggest adding "sideEffects": false when bundler-oriented package fields or conditions are detected and the field is missing. (#228)

Commits

3de8eb3 Release packages (#231)
5f9f3ac Suggest sideEffects when missing for bundler packages (#228)
See full diff in compare view

Updates tsdown from 0.22.0 to 0.22.1

Release notes

Sourced from tsdown's releases.

v0.22.1

   🚀 Features

dts: Add deps.dts option to override dependency bundling for declaration files - by @sxzz (881bf)

   🐞 Bug Fixes

Improve error handling for unsupported TypeScript syntax on Node.js - by @sxzz (b93db)

Add extra space for emoji rendering in Windows Terminal - by @sxzz (925cc)

unbundle: Add shims support for unbundled builds - by @sxzz (fc991)

    View changes on GitHub

Commits

0bddff1 chore: release v0.22.1
fc9913d fix(unbundle): add shims support for unbundled builds
3504171 chore: upgrade deps
881bf0d feat(dts): add deps.dts option to override dependency bundling for declarat...
937f253 ci: use actionspack to bundle workflows
6c92bcd chore: upgrade deps
6ac0214 chore: upgrade deps
5d6b054 refactor: tsup outExtension migration compatibility (#950)
d424e08 docs: remove dts.cjsReexport and clarify Node.js requirement
27dee93 docs: clarify dts.cjsReexport outDir limitation and CJS maintenance status
Additional commits viewable in compare view

Updates vitest from 4.1.5 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

   🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in vitest-dev/vitest#10138 (31882)

Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in vitest-dev/vitest#10196 (2847d)

browser: Simplify orchestrator otel carrier - by @hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

Stringify diff objects only once - by @sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

Commits

e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
a09d472 chore: release v4.1.7
a8fd24c chore: release v4.1.6
18af98c fix(browser): simplify orchestrator otel carrier (#10285)
3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 9 updates: | Package | From | To | | --- | --- | --- | | [@changesets/changelog-github](https://github.com/changesets/changesets) | `0.5.1` | `0.7.0` | | [@changesets/cli](https://github.com/changesets/changesets) | `2.27.7` | `2.31.0` | | [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli) | `7.0.0` | `7.1.2` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.51.0` | `0.53.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.64.0` | `1.68.0` | | [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `0.22.1` | `0.23.0` | | [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.20` | `0.3.21` | | [tsdown](https://github.com/rolldown/tsdown) | `0.22.0` | `0.22.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.8` | Updates `@changesets/changelog-github` from 0.5.1 to 0.7.0 - [Release notes](https://github.com/changesets/changesets/releases) - [Commits](https://github.com/changesets/changesets/compare/@changesets/changelog-github@0.5.1...@changesets/changelog-github@0.7.0) Updates `@changesets/cli` from 2.27.7 to 2.31.0 - [Release notes](https://github.com/changesets/changesets/releases) - [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.27.7...@changesets/cli@2.31.0) Updates `@graphql-codegen/cli` from 7.0.0 to 7.1.2 - [Release notes](https://github.com/dotansimha/graphql-code-generator/releases) - [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md) - [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@7.1.2/packages/graphql-codegen-cli) Updates `oxfmt` from 0.51.0 to 0.53.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.53.0/npm/oxfmt) Updates `oxlint` from 1.64.0 to 1.68.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.68.0/npm/oxlint) Updates `oxlint-tsgolint` from 0.22.1 to 0.23.0 - [Release notes](https://github.com/oxc-project/tsgolint/releases) - [Commits](oxc-project/tsgolint@v0.22.1...v0.23.0) Updates `publint` from 0.3.20 to 0.3.21 - [Release notes](https://github.com/publint/publint/releases) - [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md) - [Commits](https://github.com/publint/publint/commits/publint@0.3.21/packages/publint) Updates `tsdown` from 0.22.0 to 0.22.1 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.22.0...v0.22.1) Updates `vitest` from 4.1.5 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) --- updated-dependencies: - dependency-name: "@changesets/changelog-github" dependency-version: 0.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@changesets/cli" dependency-version: 2.31.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@graphql-codegen/cli" dependency-version: 7.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxfmt dependency-version: 0.53.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint dependency-version: 1.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint-tsgolint dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: publint dependency-version: 0.3.21 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: tsdown dependency-version: 0.22.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-06-11T06:50:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@changesets/changelog-github@0.7.0
	@graphql-codegen/cli@7.1.2
	vitest@4.1.8
	publint@0.3.21
	oxfmt@0.53.0
	tsdown@0.22.1
	oxlint@1.68.0
	oxlint-tsgolint@0.23.0
	@changesets/cli@2.31.0

View full report

socket-security · 2026-06-11T06:50:21Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `js-yaml` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/@changesets/cli@2.31.0` → `npm/@graphql-codegen/cli@7.1.2` → `npm/js-yaml@4.2.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/js-yaml@4.2.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

…cies-0798e9b1e8

bluwy · 2026-06-11T09:24:21Z

+overrides:
+  rolldown: 1.0.3


Same pin as changesets/changesets#2086

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 11, 2026

This was referenced Jun 11, 2026

Bump @changesets/cli from 2.27.7 to 2.31.0 #57

Closed

Bump oxlint-tsgolint from 0.22.1 to 0.23.0 #83

Closed

rolldown

df5f51c

bluwy previously approved these changes Jun 11, 2026

View reviewed changes

bluwy enabled auto-merge June 11, 2026 09:16

Merge branch 'main' into dependabot/npm_and_yarn/development-dependen…

ec84e3c

…cies-0798e9b1e8

bluwy dismissed their stale review via ec84e3c June 11, 2026 09:23

bluwy reviewed Jun 11, 2026

View reviewed changes

bluwy approved these changes Jun 11, 2026

View reviewed changes

bluwy requested a review from Andarist June 11, 2026 10:26

Andarist approved these changes Jun 11, 2026

View reviewed changes

bluwy added this pull request to the merge queue Jun 11, 2026

Merged via the queue into main with commit 997ec5e Jun 11, 2026
10 checks passed

bluwy deleted the dependabot/npm_and_yarn/development-dependencies-0798e9b1e8 branch June 11, 2026 16:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the development-dependencies group with 9 updates#98

Bump the development-dependencies group with 9 updates#98
bluwy merged 3 commits into
mainfrom
dependabot/npm_and_yarn/development-dependencies-0798e9b1e8

dependabot Bot commented on behalf of github Jun 11, 2026

Uh oh!

socket-security Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

bluwy Jun 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 11, 2026

@​changesets/changelog-github@​0.7.0

Minor Changes

@​changesets/changelog-github@​0.6.0

Minor Changes

Patch Changes

@​changesets/cli@​2.31.0

Minor Changes

Patch Changes

@​changesets/cli@​2.30.0

Minor Changes

Patch Changes

7.1.2

Patch Changes

7.1.1

Patch Changes

7.1.0

Minor Changes

Patch Changes

7.0.1

Patch Changes

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

Oxfmt v0.12.0

[1.68.0] - 2026-06-01

🚀 Features

[1.67.0] - 2026-05-26

🚀 Features

[1.66.0] - 2026-05-18

🚀 Features

[1.65.0] - 2026-05-15

🚀 Features

v0.23.0

What's Changed

publint@0.3.21

Patch Changes

0.3.21

Patch Changes

v0.22.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v4.1.8

🐞 Bug Fixes

View changes on GitHub

v4.1.7

🐞 Bug Fixes

View changes on GitHub

v4.1.6

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

Uh oh!

socket-security Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

bluwy Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`@changesets/changelog-github@0`.7.0

`@changesets/changelog-github@0`.6.0

`@changesets/cli@2`.31.0

`@changesets/cli@2`.30.0

socket-security Bot commented Jun 11, 2026 •

edited

Loading

socket-security Bot commented Jun 11, 2026 •

edited

Loading