build(deps): bump the dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #204 · ant-design/ant-design-cli

dependabot · 2026-07-19T17:03:43Z

Bumps the dependencies group with 6 updates in the / directory:

Package	From	To
oxc-parser	`0.138.0`	`0.140.0`
string-width	`8.2.1`	`8.2.2`
@types/node	`26.1.0`	`26.1.1`
@vitest/coverage-v8	`4.1.9`	`4.1.10`
tsx	`4.23.0`	`4.23.1`
typescript	`6.0.3`	`7.0.2`

Updates oxc-parser from 0.138.0 to 0.140.0

Release notes

Sourced from oxc-parser's releases.

oxc crates_v0.140.0

🚀 Features

5b20828 minifier: Extract sequence expression from expressions (#22003) (Armano)

616bfa2 minifier: Remove unreachable code after terminating statements (#24441) (Dunqing)

ddab89a data_structures: Add likely and unlikely functions (#24368) (overlookmotel)

a3a39f9 react_compiler: Implement enableEmitHookGuards codegen (#24329) (Boshen)

b79eef7 minifier: Apply De Morgan's law to negated comparison chains in jump guards and loop tests (#24279) (Dunqing)

34ff7b4 minifier: Drop write-only property assignments to unused local bindings by default (#24112) (Dunqing)

1b829d8 semantic: Record const enums in EnumData (#24268) (Dunqing)

ba0944c semantic: Add Scoping::set_symbol_span (#24221) (camc314)

🐛 Bug Fixes

edf781d minifier: Keep reads of never-assigned uninitialized bindings (#24452) (Dunqing)

7d33363 minifier: Preserve guaranteed throws from class heritage evaluation (#24349) (Dunqing)

058a62f semantic: Track ambient contexts in SemanticBuilder (#24327) (camc314)

721eb0b transformer/decorator: Scope accessor class binding (#24330) (camc314)

1ebdce3 semantic: Allow reserved keywords in ambient declaration types (#24325) (camc314)

460176a track-memory-allocations: Exclude arena chunks from Sys allocs (#24292) (Dunqing)

af4922b transformer: Clear lowered namespace redeclarations (#24300) (camc314)

ffd2765 semantic: Mark declared computed MethodDefinitions as type references (#24296) (camc314)

f17514b isolated-declarations: Emit const readonly fields as types (#24288) (camc314)

40f769d minifier: Make __proto__ write tracking execution-order independent (#24280) (Dunqing)

6371fed transformer: Remove stale enum member bindings (#24272) (camc314)

f05dfab transformer: Correct symbol flags for lowered namespaces (#24271) (Dunqing)

84eeb55 transformer: Correct symbol flags for lowered enums (#24269) (Dunqing)

c3057da transformer: Preserve generated class binding spans (#24220) (camc314)

8260096 transformer: Correct span for lowered namespace symbol (#24222) (camc314)

42d00d3 semantic: Mark declared class heritage as type references (#24237) (camc314)

588d997 semantic: Mark TS PropertyDefinitions computed fields as type references (#24233) (camc314)

9b95632 semantic: Mark computed method keys in TSMethodSignatures as type references (#24232) (camc314)

⚡ Performance

48911ec react_compiler: Use FxHashSet for membership-only block sets (#24486) (Boshen)

1e3e626 react_compiler: Reduce allocations in reactive-places and mutation-aliasing passes (#24476) (Boshen)

e86e0d8 react_compiler: Avoid copying the aliasing fixpoint's abstract state (#24117) (Marius Schulz)

5b26643 transformer_plugins: Dispatch global defines by trailing name (#23666) (Boshen)

dce0f29 react_compiler: Replace all compiled functions in a single AST walk (#24403) (Boshen)

f85f0d8 ast: Delegate inherited enum variants in clone_in and estree derives (#23555) (Boshen)

3ff0234 allocator: Remove unwrap from ReplaceWith (#24365) (overlookmotel)

ab22e80 transformer: Fix Rust 1.97 performance regression (#24354) (camc314)

b47585c parser: Use ReplaceWith instead of TakeIn (#24018) (overlookmotel)

b227a06 minifier: Use ReplaceWith instead of TakeIn (#24017) (overlookmotel)

oxc crates_v0.139.0

🚀 Features

260425f semantic/examples: Include unresolved references (#24214) (camc314)

... (truncated)

Changelog

Sourced from oxc-parser's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

8e0ed2e release(crates): oxc v0.140.0 (#24453)
bb629d8 chore(deps): update npm packages (#24418)
0e00b91 chore(deps): update dependency rust to v1.97.0 (#24328)
81511b4 chore(deps): update dependency oxfmt to ^0.58.0 (#24240)
69b2dfc release(crates): oxc v0.139.0 (#24218)
See full diff in compare view

Updates string-width from 8.2.1 to 8.2.2

Release notes

Sourced from string-width's releases.

v8.2.2

Fix spacing mark width handling (#80) b62c9ea

sindresorhus/string-width@v8.2.1...v8.2.2

Commits

64dc20c 8.2.2
13d4efd Add one more test
b62c9ea Fix spacing mark width handling (#80)
See full diff in compare view

Updates @types/node from 26.1.0 to 26.1.1

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
See full diff in compare view

Updates tsx from 4.23.0 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

support tsImport after global preload (8d4ffc2)

watch: avoid clearing piped output (95d0672)

watch: treat script and dependency paths literally (79fddde)

Performance Improvements

index transform cache lazily (e818ad6)

load esbuild lazily in CLI (d067938)

map Node TypeScript formats directly (cdcc623)

use sync module hooks on Node v22.22.3+ (f8992f1)

This release is also available on:

npm package (@latest dist-tag)

Commits

79fddde fix(watch): treat script and dependency paths literally
e818ad6 perf: index transform cache lazily
cdcc623 perf: map Node TypeScript formats directly
d067938 perf: load esbuild lazily in CLI
95d0672 fix(watch): avoid clearing piped output
6fd4607 docs: add per-page metadata
f4176d8 docs: generate sitemap
8d4ffc2 fix: support tsImport after global preload
f0e89b2 docs: document Node's public type-stripping API vs internal loader path
f8992f1 perf: use sync module hooks on Node v22.22.3+
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.138.0` | `0.140.0` | | [string-width](https://github.com/sindresorhus/string-width) | `8.2.1` | `8.2.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.1` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | Updates `oxc-parser` from 0.138.0 to 0.140.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.140.0/napi/parser) Updates `string-width` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/sindresorhus/string-width/releases) - [Commits](sindresorhus/string-width@v8.2.1...v8.2.2) Updates `@types/node` from 26.1.0 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `tsx` from 4.23.0 to 4.23.1 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.0...v4.23.1) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: oxc-parser dependency-version: 0.140.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: string-width dependency-version: 8.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tsx dependency-version: 4.23.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-19T17:04:07Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	License
vitest@4.1.9 ⏵ 4.1.10	⁺¹	⁺¹
@vitest/coverage-v8@4.1.9 ⏵ 4.1.10
@types/node@26.1.0 ⏵ 26.1.1		⁺¹
tsx@4.23.0 ⏵ 4.23.1	⁺¹	⁺¹
string-width@8.2.1 ⏵ 8.2.2	⁺¹	⁺¹
typescript@6.0.3 ⏵ 7.0.2	^-6	^-1	⁺¹⁰
oxc-parser@0.138.0 ⏵ 0.140.0

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the dependencies group across 1 directory with 7 updates#204

build(deps): bump the dependencies group across 1 directory with 7 updates#204
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b4ea5661ca

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

socket-security Bot commented Jul 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026

oxc crates_v0.140.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

oxc crates_v0.139.0

🚀 Features

Changelog

v8.2.2

v4.1.10

🐞 Bug Fixes

View changes on GitHub

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

Performance Improvements

v4.1.10

🐞 Bug Fixes

View changes on GitHub

Uh oh!

socket-security Bot commented Jul 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants