chore(deps): bump the version-update-semver-major group with 11 updates by dependabot[bot] · Pull Request #126 · EmiyaKiritsugu3/PWeb_Project

dependabot · 2026-06-06T00:13:42Z

Bumps the version-update-semver-major group with 11 updates:

Package	From	To
date-fns	`3.6.0`	`4.4.0`
dotenv	`16.6.1`	`17.4.2`
inquirer	`13.4.3`	`14.0.2`
next	`15.5.18`	`16.2.7`
zod	`3.25.76`	`4.4.3`
@commitlint/cli	`20.5.3`	`21.0.2`
@commitlint/config-conventional	`20.5.3`	`21.0.2`
@eslint/js	`9.39.4`	`10.0.1`
eslint	`9.39.4`	`10.4.1`
genkit-cli	`0.0.2`	`1.36.0`
lint-staged	`16.4.0`	`17.0.7`

Updates date-fns from 3.6.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @ImRodry and @puneetdixit200 for their contributions.

Fixed

Fixed missing modularized optimization fallback (for Next.js and others). See #4193.

Fixed pt locale first day of week to be Sunday. See #4195 by @ImRodry.

Fixed zh-CN, zh-HK, and zh-TW locale month parsing for October, November, and December. See #4194 by @puneetdixit200.

v4.2.1

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

v4.1.0

This release adds time zone support to format functions (that I somehow missed when working on the feature) and fixes a few bugs.

Make sure also upgrade TZDate to v1.0.2 as it includes a bunch of critical bug fixes.

Fixed

Fixed internal constructFrom throwing an exception on null arguments. While null isn't allowed, the functions should rather return Invalid Date or NaN in such cases. See #3885.

Added

... (truncated)

Commits

cd53d25 Promote to v4.4.0
d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
ee65753 Add root mise :format task
9f5bdf5 Add positional argument to test/smoke.sh script
651ead6 Split CDN bundles into separate @date-fns/cdn package
224c1a2 Deprecate type tests as attw hangs on date-fns package
7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
b6ad5ac Add flags to control package build script
424a783 Fix docs release after moving to monorepo setup
f95bcf1 (docs): Add missing tsx dependency
Additional commits viewable in compare view

Updates dotenv from 16.6.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

Add a new README section on dotenv’s approach to the agentic future.

Changed

Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)

Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

17.2.3 (2025-09-29)

Changed

Fixed typescript error definition (#912)

... (truncated)

Commits

f116f70 17.4.2
3a81612 fix visual order of faq
13f55a8 Merge branch 'skill'
4bbbf73 reorganize faq
c3da64b Merge pull request #1009 from motdotla/skill
6f743b1 update source
fc2c624 update skill
972315b Tighten up skill
2795fce reorganize faq
d5495d4 adjust skill
Additional commits viewable in compare view

Updates inquirer from 13.4.3 to 14.0.2

Release notes

Sourced from inquirer's releases.

inquirer@14.0.2

Fix security warnings in external-editor

inquirer@14.0.1

Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.

Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.

inquirer@14.0.0

Fix (breaking): Inquirer will now throw when encountering non-registered prompt. Prior to this fix, Inquirer would default to type: 'input' in such cases - this behaviour was misleading and made it harder to detect broken code when not using Typescript.

Feat: Read env variable INQUIRER_KEYBINDINGS to enable vim or emacs keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: INQUIRER_KEYBINDINGS=vim,emacs.

Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.

Chore: Dropped the rxjs dependency in favor of a lightweight internal Observable implementation. The package is much smaller for most users now.

Chore: Bump dependencies.

Commits

bfd8710 chore: Publish new release
55cc5f3 feat: add reusable package lint CLI
3af9ed0 test(inquirer): capture prompt runner output
4381857 fix(@inquirer/input): remove stale lint suppression
45df331 fix(@inquirer/external-editor): harden editor temp files
adef323 chore: limit CI token permissions
b43359d chore: Publish new release
24ecae2 chore: fix yarn.lock
b078d97 fix: validate package engine compatibility
3a49f9f chore(deps-dev): Bump oxfmt in the formatting group (#2143)
Additional commits viewable in compare view

Updates next from 15.5.18 to 16.2.7

Release notes

Sourced from next's releases.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces

GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input

GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API

GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting

GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

... (truncated)

Commits

9bd3c26 v16.2.7
c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
63115c7 [16.2.x] Don't drop FormData entries (#94240)
aef22fd [backport] Propagate adapter preferred regions (#94200)
f126e72 [backport] Fix "type: module" in project dir when using standalone or adapter...
bda3e2a [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
7e16e07 [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
6139f4b [backport] Fix server action forwarding loop with middleware rewrites (#93919)
c021d10 [backport] Encode non-ASCII characters in cache tags at construction (#93918)
9184ddb [backport] Fix catch-all router.query corruption with basePath + `rewrite...
Additional commits viewable in compare view

Updates zod from 3.25.76 to 4.4.3

Release notes

Sourced from zod's releases.

v4.4.3

Commits:

4c2fa95ce3f3390fbc522324e406b4e9e89b88f9 docs: use Zernio primary wordmark for gold sponsor logo

2aeec83eb135e3a83756e973ef44845fc5a455d2 docs: prune lapsed gold sponsors and rebalance logo sizing

7391be88ac1ee5cd02057f5ccc012a1f5df4efd0 docs: prune lapsed silver/bronze sponsors and add active ones

2c703322a21b4e2b12f33f49ea8430c451a68b4f docs: normalize bronze sponsor logos to github avatar pattern

9195250cab0e7950efe39c3926d6c203b4b0a170 docs: remove Mintlify from bronze sponsors (churned)

b8dffe9e62f17e6571e6249d05cc5102b54d94e4 docs: remove Numeric and Speakeasy (2+ missed monthly cycles)

1cab69383fcdeae2a366d5e2a2fc4d8fc765d168 fix(v4): restore catch handling for absent object keys (#5937) (#5939)

c2be4f819064eed62c7c350a2d399b5faecd15f8 fix(v4): generalize optin/fallback to transform; restore preprocess on absent keys (#5941)

f3c9ec03ba7a28ae72d25cc295f38674bee0f559 4.4.3

1fb56a5c18c27102dbc92260a4007c7732a0ccca docs: document release procedure in AGENTS.md

v4.4.2

Commits:

0c62df0ea19fd05abdf90473e9eef7eea530fab2 Clean up docs navigation and stale labels (#5901)

20cc794895cc8604fe0c87d83a5d1c3f89fad0ac chore: add security policy and refresh tooling deps

6fbe07b0177efdd1bf1c0b05160e70d7a0702337 fix(docs): heading anchor links now include the hash so it doesnt scoll all the way up, follows navbar logic (#5791)

4bbed1b1c73eca4ce9e59b1189ed236aa6c8b5bd Tighten discriminated union option typing

bbac3e567e7fccfaaf7cdc97f1ce30c295e2c908 Update PR guidance for agents

cf0dc942a32805c292fff59ade20a7ace980735a Merge remote-tracking branch 'origin/main' into fix-discriminated-union-key-constraint

292c894a5fd2aa42e527900b83d8d7a3009a709c docs: add Zernio gold sponsor

1fc9f311c28dcf80d0bb5a36b177086cbc3d8eca docs: document codec inversion

1373c85da9aeff704a9762d27bc58699618aefb7 docs: remove AI disclosure guidance

e20d02b473c08e3a4e557bc610b1b5fac079b649 chore: ignore triage notes

e58ea4d91b1dfe8194b73508203213cbc7e9c936 docs: test Zod Mini tab code heights

905761a5d127e8d5dd2ebb3bc88c75cb0b8149ff docs: document preprocess input type narrowing

bf64bac850d4dee2b7dde7e64909d5d796d32043 chore: tighten test guidance in AGENTS.md

8ec4e73f4c4693b6361ad591be40fb41eb8a9f95 chore: update play.ts scratch

02c2baf7d0d615872fa4528a8020603b71211702 Make z.preprocess defer optionality to inner schema (#5929)

88015df8e25c44fb5385eb3ef28935119cd5edea fix(docs): drop deprecated baseUrl from tsconfig

c59d4474e3b4cad1b323462186cf607178ce8267 4.4.2

v4.4.1

Commits:

481f7be4238c83ed58183f921b2646f340a91c6a ci: gate release publishing on full test workflow

95ccab423aec720b2523c3a64cdc7e3204537cc7 test(v3): restore optional undefined expectations

cede2c63739a5823d6aa5093d291e9a111da943d fix(v4): reject tuple holes before required defaults (#5900)

edd0bf0f5ada4a8dc581c259407d7bbad0a71ea7 release: 4.4.1

180d83d1dbe6a59260710cc8637a3dea2281ee56 docs: remove Jazz featured sponsor

v4.4.0

4.4.0

This is a minor release with a wide set of correctness and soundness fixes. Some fixes intentionally make Zod stricter, so code that depended on previously accepted invalid or ambiguous inputs may need small updates.

Potentially breaking bug fixes

... (truncated)

Commits

1fb56a5 docs: document release procedure in AGENTS.md
f3c9ec0 4.4.3
c2be4f8 fix(v4): generalize optin/fallback to transform; restore preprocess on absent...
1cab693 fix(v4): restore catch handling for absent object keys (#5937) (#5939)
b8dffe9 docs: remove Numeric and Speakeasy (2+ missed monthly cycles)
9195250 docs: remove Mintlify from bronze sponsors (churned)
2c70332 docs: normalize bronze sponsor logos to github avatar pattern
7391be8 docs: prune lapsed silver/bronze sponsors and add active ones
2aeec83 docs: prune lapsed gold sponsors and rebalance logo sizing
4c2fa95 docs: use Zernio primary wordmark for gold sponsor logo
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.

Updates @commitlint/cli from 20.5.3 to 21.0.2

Release notes

Sourced from @commitlint/cli's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @escapedcat in conventional-changelog/commitlint#4755

fix: apply oxfmt formatting to get-edit-commit.ts by @escapedcat in conventional-changelog/commitlint#4768

fix(read): fail when --from and --to share no merge-base #4555 by @CervEdin in conventional-changelog/commitlint#4754

fix: disallow same commit hash for --from and --to by @knocte in conventional-changelog/commitlint#4773

Chore/CI

ci: have renovate rebase stale PRs before merging by @escapedcat in conventional-changelog/commitlint#4782

chore: have renovate hold PRs for 3 days after release by @escapedcat in conventional-changelog/commitlint#4788

chore: anchor vite 8 by @escapedcat in conventional-changelog/commitlint#4790

ci: run commitlint once per same-repo PR by @escapedcat in conventional-changelog/commitlint#4795

New Contributors

@CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

fix(load): only resolve relative formatter paths by @escapedcat in conventional-changelog/commitlint#4761

fix(types): add presetConfig to ParserPreset interface by @SAY-5 in conventional-changelog/commitlint#4749

CI

ci: stop spawning schedule jobs on contributors' forks by @knocte in conventional-changelog/commitlint#4753

ci: add weekly non-blocking pnpm audit by @escapedcat in conventional-changelog/commitlint#4766

New Contributors

@SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @commitlint/cli's changelog.

21.0.2 (2026-05-29)

Bug Fixes

disallow same commit hash for --from and --to (#4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @commitlint/cli

21.0.0 (2026-05-08)

chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

drop node v18 and v20 support

Bump engines to >=v22 in all 39 package.json files

Update @types/node to ^22.0.0

Update CI matrix to [22, 24]

Update Ubuntu baseline job to ubuntu:26.04

Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json

Update pre-commit hook to use --ignore-engines

Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

Commits

8069048 v21.0.2
121005e fix: disallow same commit hash for --from and --to (#4773)
db8d7d6 v21.0.1
1329a25 chore: migrate to pnpm (#4762)
db39968 chore: pre pnpm cleanup (#4759)
6099ae5 chore: replace eslint with oxlint (#4756)
f081a8e v21.0.0
40d7e36 feat!: show input from a new line (#4727)
44c3174 chore: update dependency yargs to v18 #4432 (#4686)
ac01464 chore: replace dependencies with Node 22 built-ins (#4681)
Additional commits viewable in compare view

Updates @commitlint/config-conventional from 20.5.3 to 21.0.2

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @escapedcat in conventional-changelog/commitlint#4755

fix: apply oxfmt formatting to get-edit-commit.ts by @escapedcat in conventional-changelog/commitlint#4768

fix(read): fail when --from and --to share no merge-base #4555 by @CervEdin in conventional-changelog/commitlint#4754

fix: disallow same commit hash for --from and --to by @knocte in conventional-changelog/commitlint#4773

Chore/CI

ci: have renovate rebase stale PRs before merging by @escapedcat in conventional-changelog/commitlint#4782

chore: have renovate hold PRs for 3 days after release by @escapedcat in conventional-changelog/commitlint#4788

chore: anchor vite 8 by @escapedcat in conventional-changelog/commitlint#4790

ci: run commitlint once per same-repo PR by @escapedcat in conventional-changelog/commitlint#4795

New Contributors

@CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

fix(load): only resolve relative formatter paths by @escapedcat in conventional-changelog/commitlint#4761

fix(types): add presetConfig to ParserPreset interface by @SAY-5 in conventional-changelog/commitlint#4749

CI

ci: stop spawning schedule jobs on contributors' forks by @knocte in conventional-changelog/commitlint#4753

ci: add weekly non-blocking pnpm audit by @escapedcat in conventional-changelog/commitlint#4766

New Contributors

@SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.0.2 (2026-05-29)

Note: Version bump only for package @commitlint/config-conventional

21.0.1 (2026-05-12)

Note: Version bump only for package @commitlint/config-conventional

21.0.0 (2026-05-08)

chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

drop node v18 and v20 support

Bump engines to >=v22 in all 39 package.json files

Update @types/node to ^22.0.0

Update CI matrix to [22, 24]

Update Ubuntu baseline job to ubuntu:26.04

Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json

Update pre-commit hook to use --ignore-engines

Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

Commits

8069048 v21.0.2
db8d7d6 v21.0.1
1329a25 chore: migrate to pnpm (#4762)
6099ae5 chore: replace eslint with oxlint (#4756)
f081a8e v21.0.0
44c3174 chore: update dependency yargs to v18 #4432 (#4686)
ac2b3f4 chore!: minimum node version v22 (#4679)
See full diff in compare view

Updates @eslint/js from 9.39.4 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
b4b3127 chore: package.json update for @eslint/js release
0b14059 chore: package.json update for @eslint/js release
fa31a60 feat!: add name to configs (#20015)
1e2cad5 chore: package.json update for @eslint/js release
454a292 feat!: update eslint:recommended configuration (#20210)
c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
See full diff in compare view

Updates eslint from 9.39.4 to 10.4.1

Release notes

Sourced from eslint's releases.

v10.4.1

Bug Fixes

e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)

d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)

f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)

c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)

27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)

305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)

49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)

Description has been truncated

Summary by cubic

Upgrade 11 major dependencies to keep the app and toolchain current, including next 16, zod 4, eslint 10, and @commitlint/* 21. This pulls in security fixes and stricter validation; some config updates may be needed.

Dependencies

next → 16.2.7 (security fixes; React 19 compatible)

zod → 4.4.x (stricter parsing/transform behavior)

eslint/@eslint/js → 10.x (flat config only; newer Node)

@commitlint/cli + @commitlint/config-conventional → 21.x (requires Node 22+)

Also: date-fns 4.4.x, dotenv 17.4.x, inquirer 14.x, lint-staged 17.x, genkit-cli 1.x

Migration

Use Node 22+ for dev and CI (commitlint 21, ESLint 10).

Ensure ESLint uses flat config (eslint.config.js); drop .eslintrc* if present.

Review zod schemas using preprocess, transform, and optional defaults; adjust if stricter behavior surfaces.

Verify date-fns usage doesn’t rely on deprecated CDN scripts.

^{Written for commit afbbc83. Summary will update on new commits.}

Bumps the version-update-semver-major group with 11 updates: | Package | From | To | | --- | --- | --- | | [date-fns](https://github.com/date-fns/date-fns) | `3.6.0` | `4.4.0` | | [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.4.2` | | [inquirer](https://github.com/SBoudrias/Inquirer.js) | `13.4.3` | `14.0.2` | | [next](https://github.com/vercel/next.js) | `15.5.18` | `16.2.7` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.5.3` | `21.0.2` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `20.5.3` | `21.0.2` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.4.1` | | [genkit-cli](https://github.com/genkit-ai/genkit/tree/HEAD/genkit-tools/cli) | `0.0.2` | `1.36.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.4.0` | `17.0.7` | Updates `date-fns` from 3.6.0 to 4.4.0 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Commits](date-fns/date-fns@v3.6.0...v4.4.0) Updates `dotenv` from 16.6.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.6.1...v17.4.2) Updates `inquirer` from 13.4.3 to 14.0.2 - [Release notes](https://github.com/SBoudrias/Inquirer.js/releases) - [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@13.4.3...inquirer@14.0.2) Updates `next` from 15.5.18 to 16.2.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.5.18...v16.2.7) Updates `zod` from 3.25.76 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) Updates `@commitlint/cli` from 20.5.3 to 21.0.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 20.5.3 to 21.0.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/config-conventional) Updates `@eslint/js` from 9.39.4 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `eslint` from 9.39.4 to 10.4.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.4.1) Updates `genkit-cli` from 0.0.2 to 1.36.0 - [Release notes](https://github.com/genkit-ai/genkit/releases) - [Commits](https://github.com/genkit-ai/genkit/commits/genkit-cli@1.36.0/genkit-tools/cli) Updates `lint-staged` from 16.4.0 to 17.0.7 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.4.0...v17.0.7) --- updated-dependencies: - dependency-name: date-fns dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: inquirer dependency-version: 14.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: next dependency-version: 16.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: "@commitlint/cli" dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: "@commitlint/config-conventional" dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: eslint dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: genkit-cli dependency-version: 1.36.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: version-update-semver-major - dependency-name: lint-staged dependency-version: 17.0.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: version-update-semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-06-06T00:13:46Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
smartmanagementsystem	Error		Jun 6, 2026 12:13am

EmiyaKiritsugu3 · 2026-06-06T01:44:47Z

Closing per correction-optimization plan + tracking issue #122.

11 major bumps; Vercel deployment FAILED. Contains the same broken bumps we already closed individually:

eslint 9.39.4 → 10.4.1 (= closed PR chore(deps-dev): bump eslint from 9.39.4 to 10.4.1 #112, blocked by eslint-plugin-react@7.37.5 peer cap)
@eslint/js 9.39.4 → 10.0.1 (same chain)
zod 3.25.76 → 4.4.3 (= closed PR chore(deps): bump zod from 3.25.76 to 4.4.3 #113, blocked by @genkit-ai/next@1.32 peer cap zod: ^3.24.1)
next 15.5.18 → 16.2.7 (Next 16 breaking changes)
genkit-cli 0.0.2 → 1.36.0 (requires genkit 1.36 + zod 4)
date-fns 3→4, dotenv 16→17, inquirer 13→14, @commitlint/* 20→21, lint-staged 16→17 (API breaks)

Per the new dependabot config (PR #121), this PR was correctly labeled manual-approval-required. Manual review decision: REJECT.

Re-opening only if/when ALL blockers clear (upstream jsx-eslint/eslint-plugin-react #3979 ships; genkit 1.36+ supports zod v4). Tracking: issue #122.

Branch dependabot/npm_and_yarn/version-update-semver-major deleted.

dependabot · 2026-06-06T01:44:50Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added the dependencies Dependency upgrades, bump tracking, supply-chain label Jun 6, 2026

vercel Bot had a problem deploying to Preview June 6, 2026 00:13 Failure

EmiyaKiritsugu3 closed this Jun 6, 2026

EmiyaKiritsugu3 deleted the dependabot/npm_and_yarn/version-update-semver-major-160b460cec branch June 6, 2026 01:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the version-update-semver-major group with 11 updates#126

chore(deps): bump the version-update-semver-major group with 11 updates#126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/version-update-semver-major-160b460cec

dependabot Bot commented on behalf of github Jun 6, 2026 •

edited

Loading

Summary by cubic

Uh oh!

vercel Bot commented Jun 6, 2026 •

edited

Loading

Uh oh!

EmiyaKiritsugu3 commented Jun 6, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.4.0

Changed

v4.3.0

Fixed

v4.2.1

Fixed

v4.2.0

Changed

v4.1.0

Fixed

Added

17.4.2 (2026-04-12)

Changed

17.4.1 (2026-04-05)

Changed

17.4.0 (2026-04-01)

Added

Changed

17.3.1 (2026-02-12)

Changed

17.3.0 (2026-02-12)

Added

Changed

17.2.4 (2026-02-05)

Changed

17.2.3 (2025-09-29)

Changed

inquirer@14.0.2

inquirer@14.0.1

inquirer@14.0.0

v16.2.7

Core Changes

Credits

v16.2.6

Security Fixes

v4.4.3

Commits:

v4.4.2

Commits:

v4.4.1

Commits:

v4.4.0

4.4.0

Potentially breaking bug fixes

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

Chore/CI

New Contributors

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

CI

New Contributors

v21.0.0

21.0.2 (2026-05-29)

Bug Fixes

21.0.1 (2026-05-12)

21.0.0 (2026-05-08)

BREAKING CHANGES

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

Chore/CI

New Contributors

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

CI

New Contributors

v21.0.0

21.0.2 (2026-05-29)

21.0.1 (2026-05-12)

21.0.0 (2026-05-08)

BREAKING CHANGES

v10.0.1

Bug Fixes

dependabot Bot commented on behalf of github Jun 6, 2026 •

edited

Loading

vercel Bot commented Jun 6, 2026 •

edited

Loading