Skip to content

chore(deps-dev): bump the root-dependencies group with 9 updates#5706

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-dependencies-ac08f8ca4d
Open

chore(deps-dev): bump the root-dependencies group with 9 updates#5706
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/root-dependencies-ac08f8ca4d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the root-dependencies group with 9 updates:

Package From To
@types/node 22.10.5 26.1.1
inquirer 8.2.6 14.0.2
only-allow 1.2.1 1.2.2
pre-commit 1.2.2 2.0.0
prettier 3.5.3 3.9.4
prettier-plugin-css-order 2.0.1 2.2.0
prettier-plugin-organize-imports 3.2.4 4.3.0
rimraf 6.0.1 6.1.3
tsx 4.20.3 4.23.0

Updates @types/node from 22.10.5 to 26.1.1

Commits

Updates inquirer from 8.2.6 to 14.0.2

Release notes

Sourced from inquirer's releases.

inquirer@14.0.2

  • Fix security warnings in external-editor

inquirer@14.0.1

  • Rolled back mute-stream dependency from v4 to v3 to undo breaking compatible engines.
  • Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.

inquirer@14.0.0

  • Fix (breaking): Inquirer will now throw when encountering non-registered prompt. Prior to this fix, Inquirer would default to type: 'input' in such cases - this behaviour was misleading and made it harder to detect broken code when not using Typescript.
  • Feat: Read env variable INQUIRER_KEYBINDINGS to enable vim or emacs keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: INQUIRER_KEYBINDINGS=vim,emacs.
  • Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.
  • Chore: Dropped the rxjs dependency in favor of a lightweight internal Observable implementation. The package is much smaller for most users now.
  • Chore: Bump dependencies.

inquirer@13.4.3

  • Fix: Windows rendering bug
  • Fix: Preserve exact literal types in choices array (Typescript only)
  • Fix: Allow input default value to be of type undefined (Typescript only)
  • Bump dependencies

inquirer@13.4.2

  • Fix: some Windows terminals would freeze and not react to keypresses.

inquirer@13.4.1

  • Improve expand prompt type inferrence.

inquirer@13.4.0

  • Feat: Added a loading message while validating editor prompt input.
  • Type improvement: Better type inference with checkbox, search and expand prompts.
  • Fix: editor prompt not always properly handling editor path on windows.

inquirer@13.3.2

  • Fix broken 1.3.1 release process.

inquirer@13.2.5

What's Changed

... (truncated)

Commits
  • bfd8710 chore: Publish new release
  • 55cc5f3 feat: add reusable package lint CLI
  • 3af9ed0 test(inquirer): capture prompt runner output
  • 4381857 fix(@​inquirer/input): remove stale lint suppression
  • 45df331 fix(@​inquirer/external-editor): harden editor temp files
  • adef323 chore: limit CI token permissions
  • b43359d chore: Publish new release
  • 24ecae2 chore: fix yarn.lock
  • b078d97 fix: validate package engine compatibility
  • 3a49f9f chore(deps-dev): Bump oxfmt in the formatting group (#2143)
  • Additional commits viewable in compare view

Updates only-allow from 1.2.1 to 1.2.2

Commits

Updates pre-commit from 1.2.2 to 2.0.0

Changelog

Sourced from pre-commit's changelog.

2.0.0

  • Breaking: requires Node.js 16.13 or newer. engines.node is now declared as ">=16.13.0" to match the minimum required by which@4.
  • Breaking: cross-spawn upgraded ^5 → ^7.0.5, fixing the ReDoS vulnerability (GHSA-3xgq-45jj-v275). cross-spawn's spawnSync now returns status/signal/error instead of code; index.js was updated to match.
  • Breaking: which upgraded 1.2.x → ^4. The spawn-sync runtime dependency is dropped in favor of cross-spawn's built-in spawnSync.
  • Breaking: the generated .git/hooks/pre-commit wrapper is rewritten. It is now a small bash script that execs the package's hook file via an absolute path (single-line invocation instead of multi-line inline bash). Anyone parsing the wrapper file will need to adjust.
  • Breaking: hook file mode tightened from 0777 to 0755 (CIS 6.1.10).
  • Breaking: submodule installs now write to <super>/.git/modules/<sub>/hooks/pre-commit. The previous behavior silently walked up to the super-project's .git directory and installed there because the gitdir-parsing branch was unreachable. Linked worktrees (whose .git is also a file) are handled correctly too.
  • The hook now unsets GIT_LITERAL_PATHSPECS, so commits triggered from emacs/magit behave the same as on the command line (magit FAQ).
  • The hook now cds to the git root before resolving pre-commit via require.resolve, so Yarn Plug'n'Play and GUI git clients that invoke hooks with an unexpected cwd resolve dependencies correctly.
  • The hook is resilient to a missing pre-commit package: switching to a branch without node_modules (or removing the package) no longer blocks commits — it exits 0 with a warning instead of throwing a Node module-not-found stack trace.
  • Fixed handling of null close codes and signal-terminated scripts; the hook no longer treats a signal kill as success.
  • Hardened install.js gitdir parsing against missing matches and bad input; gitdir: paths are resolved relative to the directory containing the .git file (was incorrectly resolved against the package root).
  • install.js: typo fix ("backuped" → "backed up").
  • Dev tooling refresh: mocha 3 → 10, assume 1 → 2, dropped istanbul for nyc.

1.0.2

  • Check /usr/local/bin/node if we cannot find the binaries in the PATH.

1.0.1

  • Corrected the hook file so it doesn't attempt to run your index.js but ours instead.

1.0

  • Create symlinks instead of a copying the hook file so we can depend on modules.
  • More readable output messages.

... (truncated)

Commits

Updates prettier from 3.5.3 to 3.9.4

Release notes

Sourced from prettier's releases.

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

3.8.3

🔗 Changelog

3.8.2

  • Support Angular v21.2

🔗 Changelog

3.8.1

🔗 Changelog

3.8.0

  • Support Angular v21.1

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.4

diff

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

<!-- Input -->
<FancyButton [label]="title">
  @content (icon) {
    <span>Icon!</span>
  }
  @content (description) {
    <span>Description text</span>
  }
  <span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.3 -->
<FancyButton [label]="title">
@​content(icon) {
<span>Icon!</span>
}
@​content(description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.4 -->
<FancyButton [label]="title">
@​content (icon) {
<span>Icon!</span>
}
@​content (description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

</tr></table>

... (truncated)

Commits
  • b693cb2 Release 3.9.4
  • 2e92ac0 Angular: Format @content(name) -> @content (name) to align with other blo...
  • abed2c2 Bump Prettier dependency to 3.9.3
  • 6cfbc00 Clean changelog_unreleased
  • 3732e1d Release 3.9.3
  • a74a7b0 Allow decorators to be used with declare on class fields (#19492)
  • bd9e11a Correct text identification in liquid syntax (#19489)
  • 269eee3 Bump Prettier dependency to 3.9.1
  • ec7ccd1 Clean changelog_unreleased
  • c47654c Release 3.9.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier since your current version.


Updates prettier-plugin-css-order from 2.0.1 to 2.2.0

Changelog

Sourced from prettier-plugin-css-order's changelog.

[2.2.0] - 2026-01-02

Added

[2.1.2] - 2024-04-01

Fixed

  • Bring back custom order feature introduced in 2.1.0.

[2.1.1] - 2024-03-26

Fixed

  • Revert addition of new option because it breaks usage without.

[2.1.0] - 2024-03-25

Added

  • New cssDeclarationSorterCustomOrder option to sort properties using an array in a custom order, thanks to @​SavaCool122! ✨
Commits
  • 6dce54f 2.2.0
  • 592303f Update dependencies to include Frakto sort order
  • c8a9991 Run npm pkg fix to fix repository url format
  • 360b0c7 Update actions and act on zizmor audit
  • 3ef6fbe Update css-declaration-sorter to version 7.3.0
  • 16fda3d Remove postcss dependency from usage install command
  • 0948dc8 2.1.2
  • cf4f56e Add back custom sort order option
  • b9f2b06 2.1.1
  • a18a121 Revert commit "Add custom order"
  • Additional commits viewable in compare view

Updates prettier-plugin-organize-imports from 3.2.4 to 4.3.0

Release notes

Sourced from prettier-plugin-organize-imports's releases.

4.3.0

What's Changed

Full Changelog: simonhaenisch/prettier-plugin-organize-imports@v4.2.0...v4.3.0

4.2.0

  • fix: use getDefaultCompilerOptions from vue-tsc instead of the deprecated resolveVueCompilerOptions (858cbbe)
  • feat: allow vue-tsc version 3 as peer dependency (c777cd8)
  • chore: update all dev dependencies (253d1bf)

4.1.0

Bumped the peer dependency range for vue-tsc to ^2.1.0 because there was a breaking change in its API. If you're using Vue support, upgrade both packages simultaneously, e.g. npm i -D prettier-plugin-organize-imports vue-tsc.

4.0.0

Version 4.0.0 upgrades/replaces the Volar packages used for Vue support, to use the latest vue-tsc package that's part of Volar 2. To migrate, you just have to remove @volar/vue-typescript and if you're using it, also @volar/vue-language-plugin-pug, and replace it with vue-tsc and @vue/language-plugin-pug respectively. There are no breaking changes other than this.

Thanks @​johnsoncodehk for contributing this 🎉

Commits
  • f354c0e 4.3.0
  • 98d053a chore: update dev dependencies
  • bc4d8fa feat: allow configuration of organizeImportsTypeOrder (#152)
  • ed9c19a docs: update changelog
  • 93df501 4.2.0
  • 253d1bf chore: update all dev dependencies
  • 858cbbe fix: use getDefaultCompilerOptions from vue-tsc instead of the deprecated `...
  • c777cd8 feat: allow vue-tsc 3 as peer dependency
  • e79ed64 chore(ci): remove check-types step (part of test now)
  • b7c15ad 4.1.0
  • Additional commits viewable in compare view

Updates rimraf from 6.0.1 to 6.1.3

Changelog

Sourced from rimraf's changelog.

6.1

  • Move to native fs/promises usage instead of promisifying manually.

6.0

  • Drop support for nodes before v20
  • Add --version to CLI

5.0

  • No default export, only named exports

4.4

  • Provide Dirent or Stats object as second argument to filter

4.3

  • Return boolean indicating whether the path was fully removed
  • Add filter option
  • bin: add --verbose, -v to print files as they are deleted
  • bin: add --no-verbose, -V to not print files as they are deleted
  • bin: add -i --interactive to be prompted on each deletion
  • bin: add -I --no-interactive to not be prompted on each deletion
  • 4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

  • Brought back glob support, using the new and improved glob v9

v4.1

  • Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.
  • Accept and ignore -rf and -fr arguments to the bin.

v4.0

  • Remove glob dependency entirely. This library now only accepts actual file and folder names to delete.
  • Accept array of paths or single path.
  • Windows performance and reliability improved.
  • All strategies separated into explicitly exported methods.
  • Drop support for Node.js below version 14
  • rewrite in TypeScript

... (truncated)

Commits

Updates tsx from 4.20.3 to 4.23.0

Release notes

Sourced from tsx's releases.

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

Features

This release is also available on:

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

  • isolate hook state per async module.register() registration (a305f36)

This release is also available on:

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

  • resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

This release is also available on:

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

  • decode typed loader source (dce02fc)
  • preserve entrypoint with TypeScript preload hooks (68f72f3)

... (truncated)

Commits
  • 1dfad37 docs: cite esbuild's extension-resolution model in node notes
  • 257bbbb fix: avoid redundant filesystem probes during module resolution
  • c178197 feat: add multi-scenario startup benchmark suite
  • 51800ac docs: add Node internals knowledge base (notes/node)
  • a305f36 fix: isolate hook state per async module.register() registration
  • ca501a9 chore: upgrade skills-npm to v1.2.0
  • 596cd1f test: cover __dirname, __filename, & require.cache in CJS TS file
  • 75d9bf0 test: lock in lenient ESM for ambiguous and CJS-typed packages
  • 1472f3e test: cover ESM-syntax dependency with omitted "type" field
  • 1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the root-dependencies group with 9 updates
25cad68 
Bumps the root-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.10.5` | `26.1.1` |
| [inquirer](https://github.com/SBoudrias/Inquirer.js) | `8.2.6` | `14.0.2` |
| [only-allow](https://github.com/pnpm/only-allow) | `1.2.1` | `1.2.2` |
| [pre-commit](https://github.com/observing/pre-commit) | `1.2.2` | `2.0.0` |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.9.4` |
| [prettier-plugin-css-order](https://github.com/Siilwyn/prettier-plugin-css-order) | `2.0.1` | `2.2.0` |
| [prettier-plugin-organize-imports](https://github.com/simonhaenisch/prettier-plugin-organize-imports) | `3.2.4` | `4.3.0` |
| [rimraf](https://github.com/isaacs/rimraf) | `6.0.1` | `6.1.3` |
| [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.23.0` |


Updates `@types/node` from 22.10.5 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `inquirer` from 8.2.6 to 14.0.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@8.2.6...inquirer@14.0.2)

Updates `only-allow` from 1.2.1 to 1.2.2
- [Commits](https://github.com/pnpm/only-allow/commits)

Updates `pre-commit` from 1.2.2 to 2.0.0
- [Release notes](https://github.com/observing/pre-commit/releases)
- [Changelog](https://github.com/observing/pre-commit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/observing/pre-commit/commits)

Updates `prettier` from 3.5.3 to 3.9.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.5.3...3.9.4)

Updates `prettier-plugin-css-order` from 2.0.1 to 2.2.0
- [Changelog](https://github.com/Siilwyn/prettier-plugin-css-order/blob/main/changelog.md)
- [Commits](Siilwyn/prettier-plugin-css-order@v2.0.1...v2.2.0)

Updates `prettier-plugin-organize-imports` from 3.2.4 to 4.3.0
- [Release notes](https://github.com/simonhaenisch/prettier-plugin-organize-imports/releases)
- [Changelog](https://github.com/simonhaenisch/prettier-plugin-organize-imports/blob/master/changelog.md)
- [Commits](simonhaenisch/prettier-plugin-organize-imports@v3.2.4...v4.3.0)

Updates `rimraf` from 6.0.1 to 6.1.3
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.0.1...v6.1.3)

Updates `tsx` from 4.20.3 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.20.3...v4.23.0)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: root-dependencies
- dependency-name: inquirer
  dependency-version: 14.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: root-dependencies
- dependency-name: only-allow
  dependency-version: 1.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: root-dependencies
- dependency-name: pre-commit
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: root-dependencies
- dependency-name: prettier
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-dependencies
- dependency-name: prettier-plugin-css-order
  dependency-version: 2.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-dependencies
- dependency-name: prettier-plugin-organize-imports
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: root-dependencies
- dependency-name: rimraf
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-dependencies
- dependency-name: tsx
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: root-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 8, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

ci config dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code js root

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants