chore(deps)(deps-dev): bump the dev-dependencies group with 5 updates by dependabot[bot] · Pull Request #2 · compactbench/hardened

dependabot · 2026-04-21T02:18:12Z

Bumps the dev-dependencies group with 5 updates:

Package	From	To
@commitlint/cli	`19.8.1`	`20.5.0`
@commitlint/config-conventional	`19.8.1`	`20.5.0`
@vitest/coverage-v8	`2.1.9`	`4.1.4`
vitest	`2.1.9`	`4.1.4`
@types/node	`20.19.39`	`25.6.0`

Updates @commitlint/cli from 19.8.1 to 20.5.0

Release notes

Sourced from @commitlint/cli's releases.

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

fix(resolve-extends): always resolve extended parser presets for proper merging by @omar-y-abdi in conventional-changelog/commitlint#4647

fix(load): resolve async config exports in CJS projects by @omar-y-abdi in conventional-changelog/commitlint#4659

fix(cli): validate that --cwd directory exists before execution by @omar-y-abdi in conventional-changelog/commitlint#4658

Features

feat(cz-commitlint): add exclamation mark support for breaking changes by @mrt181 in conventional-changelog/commitlint#4655

New Contributors

@mrt181 made their first contribution in conventional-changelog/commitlint#4655

@omar-y-abdi made their first contribution in conventional-changelog/commitlint#4647

Full Changelog: conventional-changelog/commitlint@v20.4.4...v20.5.0

v20.4.4

20.4.4 (2026-03-12)

Bug Fixes

fix(types): allow context parameter in QualifiedRuleConfig functions by @Br1an67 in conventional-changelog/commitlint#4636

fix(read): update git-raw-commits to v5 API by @Tamas-hi in conventional-changelog/commitlint#4638

fix(is-ignored): strip CI skip markers from release commits by @Br1an67 in conventional-changelog/commitlint#4637

New Contributors

@Br1an67 made their first contribution in conventional-changelog/commitlint#4636

@Tamas-hi made their first contribution in conventional-changelog/commitlint#4638

Full Changelog: conventional-changelog/commitlint@v20.4.3...v20.4.4

v20.4.3

20.4.3 (2026-03-03)

Bug Fixes

fix: npx usage #613 by @escapedcat in conventional-changelog/commitlint#4630

fix(types): incorrect types for rule options by @Zamiell in conventional-changelog/commitlint#4633

... (truncated)

Changelog

Sourced from @commitlint/cli's changelog.

20.5.0 (2026-03-15)

Bug Fixes

cli: validate that --cwd directory exists before execution (#4658) (cf80f75), closes #4595

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/cli

20.4.0 (2026-01-30)

Features

... (truncated)

Commits

a7918e9 v20.5.0
cf80f75 fix(cli): validate that --cwd directory exists before execution (#4658)
02d7245 v20.4.4
a746981 v20.4.3
18bd371 chore: deps (#4635)
8ff7c7f fix: footer parser does not escape special chars for regex #4560 (#4634)
81cfc9e v20.4.2
e7ae28d v20.4.1
c68de5e v20.4.0
3aaf0a6 feat: upgrade conventional commit packages #4082 (#4597)
Additional commits viewable in compare view

Updates @commitlint/config-conventional from 19.8.1 to 20.5.0

Release notes

Sourced from @commitlint/config-conventional's releases.

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

fix(resolve-extends): always resolve extended parser presets for proper merging by @omar-y-abdi in conventional-changelog/commitlint#4647

fix(load): resolve async config exports in CJS projects by @omar-y-abdi in conventional-changelog/commitlint#4659

fix(cli): validate that --cwd directory exists before execution by @omar-y-abdi in conventional-changelog/commitlint#4658

Features

feat(cz-commitlint): add exclamation mark support for breaking changes by @mrt181 in conventional-changelog/commitlint#4655

New Contributors

@mrt181 made their first contribution in conventional-changelog/commitlint#4655

@omar-y-abdi made their first contribution in conventional-changelog/commitlint#4647

Full Changelog: conventional-changelog/commitlint@v20.4.4...v20.5.0

v20.4.4

20.4.4 (2026-03-12)

Bug Fixes

fix(types): allow context parameter in QualifiedRuleConfig functions by @Br1an67 in conventional-changelog/commitlint#4636

fix(read): update git-raw-commits to v5 API by @Tamas-hi in conventional-changelog/commitlint#4638

fix(is-ignored): strip CI skip markers from release commits by @Br1an67 in conventional-changelog/commitlint#4637

New Contributors

@Br1an67 made their first contribution in conventional-changelog/commitlint#4636

@Tamas-hi made their first contribution in conventional-changelog/commitlint#4638

Full Changelog: conventional-changelog/commitlint@v20.4.3...v20.4.4

v20.4.3

20.4.3 (2026-03-03)

Bug Fixes

fix: npx usage #613 by @escapedcat in conventional-changelog/commitlint#4630

fix(types): incorrect types for rule options by @Zamiell in conventional-changelog/commitlint#4633

... (truncated)

Changelog

Sourced from @commitlint/config-conventional's changelog.

20.5.0 (2026-03-15)

Note: Version bump only for package @commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/config-conventional

20.4.0 (2026-01-30)

Features

upgrade conventional commit packages #4082 (#4597) (3aaf0a6)

... (truncated)

Commits

a7918e9 v20.5.0
02d7245 v20.4.4
a746981 v20.4.3
8ff7c7f fix: footer parser does not escape special chars for regex #4560 (#4634)
81cfc9e v20.4.2
e7ae28d v20.4.1
c68de5e v20.4.0
3aaf0a6 feat: upgrade conventional commit packages #4082 (#4597)
be3a280 v20.3.1
1c5734d v20.3.0
Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 2.1.9 to 4.1.4

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.4

   🚀 Experimental Features

coverage:

Default to text reporter skipFull if agent detected - by @hi-ogawa in vitest-dev/vitest#10018 (53757)

experimental:

Expose assertion as a public field - by @sheremet-va in vitest-dev/vitest#10095 (a120e)

Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in vitest-dev/vitest#9668 (d4fbb)

reporter:

Add filterMeta option to json reporter - by @nami8824 and @sheremet-va in vitest-dev/vitest#10078 (b77de)

   🐞 Bug Fixes

Use "black" foreground for labeled terminal message to ensure contrast - by @hi-ogawa in vitest-dev/vitest#10076 (203f0)

Make expect(..., message) consistent as error message prefix - by @hi-ogawa and Codex in vitest-dev/vitest#10068 (a1b5f)

Do not hoist imports whose names match class properties . - by @SunsetFi in vitest-dev/vitest#10093 and vitest-dev/vitest#10094 (0fc4b)

browser: Spread user server options into browser Vite server in project - by @GoldStrikeArch in vitest-dev/vitest#10049 (65c9d)

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in vitest-dev/vitest#10070 (78273)

Support browser.locators.exact option - by @sheremet-va in vitest-dev/vitest#10013 (48799)

Add TestAttachment.bodyEncoding - by @hi-ogawa in vitest-dev/vitest#9969 (89ca0)

Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in vitest-dev/vitest#9973 (59b0e)

   🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10022 (3f5bf)

Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in vitest-dev/vitest#10025 (146d4)

Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in vitest-dev/vitest#10036 (5a5fa)

Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10035 (39865)

expect:

Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in vitest-dev/vitest#9983 (66751)

Don't leak "runner" types - by @sheremet-va in vitest-dev/vitest#10004 (ec204)

snapshot:

Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#9986 (6b869)

Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in vitest-dev/vitest#10042 (691d3)

ui:

Don't leak vite types - by @sheremet-va in vitest-dev/vitest#10005 (fdff1)

vm:

Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10024 (9dbf4)

    View changes on GitHub

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

... (truncated)

Commits

ac04bac chore: release v4.1.4
2dc0d62 chore: release v4.1.3
fc6f482 chore: release v4.1.2
1f2d318 chore: release v4.1.1
aaf9f18 fix(coverage): simplify provider types (#9931)
4150b91 chore: release v4.1.0
0c2c013 chore: release v4.1.0-beta.6
689a22a fix(browser): types of getCDPSession and cdp() (#9716)
94eb73b chore(deps): update eslint packages (#9615)
8c96bb0 refator: update links to npmx (#9783)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @vitest/coverage-v8 since your current version.

Updates vitest from 2.1.9 to 4.1.4

Release notes

Sourced from vitest's releases.

v4.1.4

   🚀 Experimental Features

coverage:

Default to text reporter skipFull if agent detected - by @hi-ogawa in vitest-dev/vitest#10018 (53757)

experimental:

Expose assertion as a public field - by @sheremet-va in vitest-dev/vitest#10095 (a120e)

Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in vitest-dev/vitest#9668 (d4fbb)

reporter:

Add filterMeta option to json reporter - by @nami8824 and @sheremet-va in vitest-dev/vitest#10078 (b77de)

   🐞 Bug Fixes

Use "black" foreground for labeled terminal message to ensure contrast - by @hi-ogawa in vitest-dev/vitest#10076 (203f0)

Make expect(..., message) consistent as error message prefix - by @hi-ogawa and Codex in vitest-dev/vitest#10068 (a1b5f)

Do not hoist imports whose names match class properties . - by @SunsetFi in vitest-dev/vitest#10093 and vitest-dev/vitest#10094 (0fc4b)

browser: Spread user server options into browser Vite server in project - by @GoldStrikeArch in vitest-dev/vitest#10049 (65c9d)

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in vitest-dev/vitest#10070 (78273)

Support browser.locators.exact option - by @sheremet-va in vitest-dev/vitest#10013 (48799)

Add TestAttachment.bodyEncoding - by @hi-ogawa in vitest-dev/vitest#9969 (89ca0)

Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in vitest-dev/vitest#9973 (59b0e)

   🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10022 (3f5bf)

Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in vitest-dev/vitest#10025 (146d4)

Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in vitest-dev/vitest#10036 (5a5fa)

Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10035 (39865)

expect:

Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in vitest-dev/vitest#9983 (66751)

Don't leak "runner" types - by @sheremet-va in vitest-dev/vitest#10004 (ec204)

snapshot:

Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#9986 (6b869)

Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in vitest-dev/vitest#10042 (691d3)

ui:

Don't leak vite types - by @sheremet-va in vitest-dev/vitest#10005 (fdff1)

vm:

Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10024 (9dbf4)

    View changes on GitHub

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

... (truncated)

Commits

ac04bac chore: release v4.1.4
82c858d chore: Remove no-op function in plugin config logic (#8501)
d4fbb5c feat(experimental): support aria snapshot (#9668)
b77de96 feat(reporter): add filterMeta option to json reporter (#10078)
a120e3a feat(experimental): expose assertion as a public field (#10095)
5375780 feat(coverage): default to text reporter skipFull if agent detected (#10018)
a1b5f0f fix: make expect(..., message) consistent as error message prefix (#10068)
203f07a fix: use "black" foreground for labeled terminal message to ensure contrast (...
2dc0d62 chore: release v4.1.3
7827363 feat: add experimental.preParse flag (#10070)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.

Updates @types/node from 20.19.39 to 25.6.0

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `19.8.1` | `20.5.0` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `19.8.1` | `20.5.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `2.1.9` | `4.1.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.9` | `4.1.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.39` | `25.6.0` | Updates `@commitlint/cli` from 19.8.1 to 20.5.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.5.0/@commitlint/cli) Updates `@commitlint/config-conventional` from 19.8.1 to 20.5.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.5.0/@commitlint/config-conventional) Updates `@vitest/coverage-v8` from 2.1.9 to 4.1.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/coverage-v8) Updates `vitest` from 2.1.9 to 4.1.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/vitest) Updates `@types/node` from 20.19.39 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@commitlint/cli" dependency-version: 20.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 20.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-21T02:29:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabot Bot requested a review from UsernameLoad as a code owner April 21, 2026 02:18

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabot Bot closed this Apr 21, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-84dcaa4458 branch April 21, 2026 02:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps-dev): bump the dev-dependencies group with 5 updates#2

chore(deps)(deps-dev): bump the dev-dependencies group with 5 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-84dcaa4458

dependabot Bot commented on behalf of github Apr 21, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

Features

New Contributors

v20.4.4

20.4.4 (2026-03-12)

Bug Fixes

New Contributors

v20.4.3

20.4.3 (2026-03-03)

Bug Fixes

20.5.0 (2026-03-15)

Bug Fixes

20.4.4 (2026-03-12)

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

20.4.1 (2026-02-02)

20.4.0 (2026-01-30)

Features

v20.5.0

20.5.0 (2026-03-15)

Bug Fixes

Features

New Contributors

v20.4.4

20.4.4 (2026-03-12)

Bug Fixes

New Contributors

v20.4.3

20.4.3 (2026-03-03)

Bug Fixes

20.5.0 (2026-03-15)

20.4.4 (2026-03-12)

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

20.4.1 (2026-02-02)

20.4.0 (2026-01-30)

Features

v4.1.4

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.3

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.2

v4.1.4

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.3

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.2

Uh oh!

dependabot Bot commented on behalf of github Apr 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 21, 2026 •

edited

Loading