Skip to content

Bump the npm group across 1 directory with 10 updates #822

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the npm group across 1 directory with 10 updates #822

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the npm group with 9 updates in the / directory:

Package From To
js-base64 3.7.7 3.7.8
@biomejs/biome 2.0.6 2.3.10
@rollup/plugin-node-resolve 16.0.1 16.0.3
@rollup/plugin-typescript 12.1.4 12.3.0
jasmine 5.8.0 5.13.0
publint 0.3.12 0.3.16
puppeteer 24.11.2 24.34.0
rollup 4.44.1 4.54.0
typescript 5.8.3 5.9.3

Updates js-base64 from 3.7.7 to 3.7.8

Commits
  • 5fd183d version 3.7.8
  • fa94481 add permissions section to make CodeQL happy
  • fb0b409 add node 24
  • f2587cc use unknown instead of any accordingly to Aaron
  • 237bffc use unknown instead of any accordingly to Aaron
  • 73236ad Merge pull request #187 from Chanran/feat/optimize-atobPolyfill-performance
  • 9df6b69 Merge pull request #179 from lifeiscontent/patch-1
  • 1b1c84f feat: optimize atobPolyfill performance to avoid minor gc
  • 09fde58 Update base64.ts
  • df91b05 add node 22
  • See full diff in compare view

Updates @biomejs/biome from 2.0.6 to 2.3.10

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.10

2.3.10

Patch Changes

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.3.10

Patch Changes

2.3.9

Patch Changes

  • #8232 84c9e08 Thanks @​ruidosujeira! - Added the nursery rule noScriptUrl.

    This rule disallows the use of javascript: URLs, which are considered a form of eval and can pose security risks such as XSS vulnerabilities.

    <a href="javascript:alert('XSS')">Click me</a>

  • #8341 343dc4d Thanks @​arendjr! - Added the nursery rule useAwaitThenable, which enforces that await is only used on Promise values.

    Invalid

    await "value";
const createValue = () => "value";
await createValue();

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​biomejs/biome since your current version.


Updates @rollup/plugin-node-resolve from 16.0.1 to 16.0.3

Changelog

Sourced from @​rollup/plugin-node-resolve's changelog.

v16.0.3

2025-10-13

Bugfixes

  • fix: resolve bare targets of package "imports" using export maps; avoid fileURLToPath(null) (#1908)

v16.0.2

2025-10-04

Bugfixes

  • fix: error thrown with empty entry (#1893)
Commits
  • 764910a chore(release): node-resolve v16.0.3
  • 3569720 fix(node-resolve): resolve bare targets of package "imports" using export map...
  • 516ed1d chore(release): node-resolve v16.0.2
  • 7ad5057 fix(node-resolve): error thrown with empty entry (#1893)
  • See full diff in compare view

Updates @rollup/plugin-typescript from 12.1.4 to 12.3.0

Changelog

Sourced from @​rollup/plugin-typescript's changelog.

v12.3.0

2025-10-23

Features

  • feat: expose latest Program to transformers in watch mode (#1923)

v12.2.0

2025-10-22

Features

  • feat: process .js when allowJs is enabled (#1920)
Commits
  • 973054d chore(release): typescript v12.3.0
  • b6f027b feat(typescript): expose latest Program to transformers in watch mode (#1923)
  • a9cdbb5 chore(release): typescript v12.2.0
  • 89fa680 feat(typescript): process .js when allowJs is enabled (#1920)
  • See full diff in compare view

Updates jasmine from 5.8.0 to 5.13.0

Release notes

Sourced from jasmine's releases.

v5.13.0

Please see the release notes.

v5.12.0

Please see the release notes.

v5.11.0

Please see the release notes.

v5.10.0

Please see the release notes.

v5.9.0

Please see the release notes.

Commits

Updates jasmine-core from 5.8.0 to 5.13.0

Release notes

Sourced from jasmine-core's releases.

v5.13.0

Please see the release notes.

v5.12.1

Please see the release notes.

v5.12.0

Please see the release notes.

v5.11.0

Please see the release notes.

v5.10.0

Please see the release notes.

v5.9.0

Please see the release notes.

Commits
  • 9cf9b85 Bump version to 5.13.0
  • db6c142 Copy 6.0.0-beta.0 release notes from branch
  • 1e691b2 Prettier
  • c5555dd Better debug logging for spec that occasionally fails in FF
  • 78c14f8 Copy 6.0.0-alpha.2 release notes from branch
  • 56e2832 Add manual and cron triggers to Safari build
  • 9a9d399 Add Safari 26 to supported browsers
  • ff9feb2 Configurable spec/suite filename detection
  • fee7e6e Merge branch 'jonahd-g-main'
  • 18d4d38 Fix version number in 5.12.1 release notes
  • Additional commits viewable in compare view

Updates publint from 0.3.12 to 0.3.16

Release notes

Sourced from publint's releases.

publint@0.3.16

Patch Changes

  • Re-enable file existence checks for TS and TSX files if they do not use custom conditions. In v0.3.10, this was done unconditionally instead which missed catching possible file typos if only common conditions are used. (7b1408e)

publint@0.3.15

Patch Changes

  • Skip file existence checks when crawling subpath imports as they may be dev-only and not used after bundling or publish. This check may be improved in the future when publint can scan for files to see if the subpath imports are used. (0d72997)

  • Handle exports["default"] and exports['default'] for CJS_WITH_ESMODULE_DEFAULT_EXPORT rule (8285f77)

publint@0.3.14

Patch Changes

  • Add a new warning when an entrypoint is exported as CJS-only, has a default export, and has the __esModule marker. This setup has different interpretations by bundlers and runtimes, and implicit handling detection that may not be obvious for both package authors and users, hence it is discouraged. (#201)

publint@0.3.13

Patch Changes

  • Improve message for "main" field with empty value and has missing files (0499518)

  • Update fallback arrays message for CLI output (37b9dd5)

Changelog

Sourced from publint's changelog.

0.3.16

Patch Changes

  • Re-enable file existence checks for TS and TSX files if they do not use custom conditions. In v0.3.10, this was done unconditionally instead which missed catching possible file typos if only common conditions are used. (7b1408e)

0.3.15

Patch Changes

  • Skip file existence checks when crawling subpath imports as they may be dev-only and not used after bundling or publish. This check may be improved in the future when publint can scan for files to see if the subpath imports are used. (0d72997)

  • Handle exports["default"] and exports['default'] for CJS_WITH_ESMODULE_DEFAULT_EXPORT rule (8285f77)

0.3.14

Patch Changes

  • Add a new warning when an entrypoint is exported as CJS-only, has a default export, and has the __esModule marker. This setup has different interpretations by bundlers and runtimes, and implicit handling detection that may not be obvious for both package authors and users, hence it is discouraged. (#201)

0.3.13

Patch Changes

  • Improve message for "main" field with empty value and has missing files (0499518)

  • Update fallback arrays message for CLI output (37b9dd5)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for publint since your current version.


Updates puppeteer from 24.11.2 to 24.34.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.34.0

24.34.0 (2025-12-19)

🎉 Features

🛠️ Fixes

puppeteer: v24.34.0

24.34.0 (2025-12-19)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.33.1 to 24.34.0

puppeteer-core: v24.33.1

24.33.1 (2025-12-18)

🛠️ Fixes

  • DevTools worker targets should not end up as DevToolsTarget (#14505) (e37f1a4)
  • roll to Chrome 143.0.7499.146 (#14519) (0fe8e2c)
  • webdriver: emit response event on network.responseStarted (#14513) (cdd358f)

puppeteer: v24.33.1

24.33.1 (2025-12-18)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

... (truncated)

Changelog

Sourced from puppeteer's changelog.

24.34.0 (2025-12-19)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.33.1 to 24.34.0

🎉 Features

🛠️ Fixes

24.33.1 (2025-12-18)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.33.0 to 24.33.1

🛠️ Fixes

  • DevTools worker targets should not end up as DevToolsTarget (#14505) (e37f1a4)
  • roll to Chrome 143.0.7499.146 (#14519) (0fe8e2c)
  • webdriver: emit response event on network.responseStarted (#14513) (cdd358f)

24.33.0 (2025-12-11)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for puppeteer since your current version.


Updates rollup from 4.44.1 to 4.54.0

Release notes

Sourced from rollup's releases.

v4.54.0

4.54.0

2025-12-20

Features

  • Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

  • Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)
  • Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

v4.53.5

4.53.5

2025-12-16

Bug Fixes

  • Fix wrong semicolon insertion position when using JSX (#6206)
  • Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

v4.53.4

4.53.4

2025-12-15

Bug Fixes

  • Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.54.0

2025-12-20

Features

  • Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

  • Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)
  • Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

4.53.5

2025-12-16

Bug Fixes

  • Fix wrong semicolon insertion position when using JSX (#6206)
  • Generate spec-compliant sourcemaps when sources content is excluded (#6196)

Pull Requests

4.53.4

2025-12-15

Bug Fixes

  • Ensure Symbol.dispose and Symbol.asyncDispose properties are never removed with (await) using declarations. (#6209)

Pull Requests

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for rollup since your current version.


Updates typescript from 5.8.3 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 RC

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 Beta

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • c63de15 Bump version to 5.9.3 and LKG
  • 8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
  • a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
  • 0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
  • bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
  • 0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
  • 2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
  • 5be3346 Bump version to 5.9.2 and LKG
  • ad825f2 Bump version to 5.9.1-rc and LKG
  • 463a5bf Update LKG
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm group across 1 directory with 10 updates
3800380 
Bumps the npm group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [js-base64](https://github.com/dankogai/js-base64) | `3.7.7` | `3.7.8` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.0.6` | `2.3.10` |
| [@rollup/plugin-node-resolve](https://github.com/rollup/plugins/tree/HEAD/packages/node-resolve) | `16.0.1` | `16.0.3` |
| [@rollup/plugin-typescript](https://github.com/rollup/plugins/tree/HEAD/packages/typescript) | `12.1.4` | `12.3.0` |
| [jasmine](https://github.com/jasmine/jasmine-npm) | `5.8.0` | `5.13.0` |
| [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.12` | `0.3.16` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.11.2` | `24.34.0` |
| [rollup](https://github.com/rollup/rollup) | `4.44.1` | `4.54.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.3` |



Updates `js-base64` from 3.7.7 to 3.7.8
- [Commits](dankogai/js-base64@3.7.7...3.7.8)

Updates `@biomejs/biome` from 2.0.6 to 2.3.10
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.10/packages/@biomejs/biome)

Updates `@rollup/plugin-node-resolve` from 16.0.1 to 16.0.3
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/node-resolve/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/node-resolve-v16.0.3/packages/node-resolve)

Updates `@rollup/plugin-typescript` from 12.1.4 to 12.3.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/typescript/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/typescript-v12.3.0/packages/typescript)

Updates `jasmine` from 5.8.0 to 5.13.0
- [Release notes](https://github.com/jasmine/jasmine-npm/releases)
- [Changelog](https://github.com/jasmine/jasmine-npm/blob/main/RELEASE.md)
- [Commits](jasmine/jasmine-npm@v5.8.0...v5.13.0)

Updates `jasmine-core` from 5.8.0 to 5.13.0
- [Release notes](https://github.com/jasmine/jasmine/releases)
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md)
- [Commits](jasmine/jasmine@v5.8.0...v5.13.0)

Updates `publint` from 0.3.12 to 0.3.16
- [Release notes](https://github.com/publint/publint/releases)
- [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md)
- [Commits](https://github.com/publint/publint/commits/publint@0.3.16/packages/publint)

Updates `puppeteer` from 24.11.2 to 24.34.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.11.2...puppeteer-v24.34.0)

Updates `rollup` from 4.44.1 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.44.1...v4.54.0)

Updates `typescript` from 5.8.3 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v5.9.3)

---
updated-dependencies:
- dependency-name: js-base64
  dependency-version: 3.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/plugin-node-resolve"
  dependency-version: 16.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@rollup/plugin-typescript"
  dependency-version: 12.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: jasmine
  dependency-version: 5.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: jasmine-core
  dependency-version: 5.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: publint
  dependency-version: 0.3.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: puppeteer
  dependency-version: 24.34.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: rollup
  dependency-version: 4.54.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant