Skip to content

chore: bump the development-dependencies group across 1 directory with 5 updates#5206

Merged
Jason3S merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-def3a786b7
Mar 27, 2026
Merged

chore: bump the development-dependencies group across 1 directory with 5 updates#5206
Jason3S merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-def3a786b7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 27, 2026

Bumps the development-dependencies group with 4 updates in the / directory: @vitest/coverage-istanbul, ovsx, tsdown and vite.

Updates @vitest/coverage-istanbul from 4.1.1 to 4.1.2

Release notes

Sourced from @​vitest/coverage-istanbul's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates ovsx from 0.10.9 to 0.10.10

Release notes

Sourced from ovsx's releases.

CLI v0.10.10

Dependencies

  • Bump ajv from 6.12.6 to 6.14.0 (#1632)
  • Bump ajv from 8.17.1 to 8.18.0
  • Bump tar from 7.5.7 to 7.5.11 (#1681)
  • Bump minimatch to 3.1.5, 9.0.9 and 10.2.4
  • Bump underscore from 1.13.6 to 1.13.8 (#1656)
  • Bump flatted from 3.3.1 to 3.4.2 (#1703)
Changelog

Sourced from ovsx's changelog.

[v0.10.10] (Mar. 2026)

Dependencies

  • Bump ajv from 6.12.6 to 6.14.0 (#1632)
  • Bump ajv from 8.17.1 to 8.18.0
  • Bump tar from 7.5.7 to 7.5.11 (#1681)
  • Bump minimatch to 3.1.5, 9.0.9 and 10.2.4
  • Bump underscore from 1.13.6 to 1.13.8 (#1656)
  • Bump flatted from 3.3.1 to 3.4.2 (#1703)
Commits
  • a367a40 chore: fix repo links after transfer
  • b6e70ef chore: prepare release for cli 0.10.10
  • 01ad56b chore: prepare release for cli 0.10.10
  • f9cc4c1 build(deps): bump flatted from 3.3.1 to 3.4.2 in /cli (#1703)
  • 313cef0 build(deps): bump tar from 7.5.10 to 7.5.11 in /cli (#1681)
  • a971a9c chore: update changelog wrt tar update in cli
  • e605e7f build(deps): bump tar from 7.5.9 to 7.5.10 in /cli (#1666)
  • a600c08 build(deps): bump underscore from 1.13.6 to 1.13.8 in /cli (#1656)
  • 294f2dd chore(deps): bump minimatch in cli
  • 671ef30 chore(deps): bump used afv from 8.17.1 to 8.18.0
  • Additional commits viewable in compare view

Updates tsdown from 0.21.4 to 0.21.6

Release notes

Sourced from tsdown's releases.

v0.21.6

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v0.21.5

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 375a51c chore: release v0.21.6
  • e1403c0 chore: upgrade deps
  • 0005096 fix(entry): correctly output relative paths in logger output
  • c546e4e refactor(cli): add color to CLI banner
  • 875c1b3 feat(dts): add cjsReexport option to eliminate dual module type hazard (#856)
  • 512926d feat: upgrade rolldown to v1.0.0-rc.12
  • ff0c45a fix(css): split CSS plugin into pre/post phases for scoped CSS support (#870)
  • 7ebd62d feat(exports): add bin option to auto-generate package.json bin field (#869)
  • 148aaaa feat(config): use mergeConfig for workspace config merging and support variad...
  • 7616960 feat(config): pass root config to workspace config functions
  • Additional commits viewable in compare view

Updates vite from 8.0.2 to 8.0.3

Release notes

Sourced from vite's releases.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.3 (2026-03-26)

Features

Bug Fixes

  • html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
  • module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
  • module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
  • optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
  • ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

Tests

Commits
  • 6a34ac3 fix(deps): update all non-major dependencies (#21096)
  • 02ceaec chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#21099)
  • 572aaca release: v7.2.2
  • 728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
  • a532e68 release: v7.2.1
  • 82d2d6c fix(worker): some worker asset was missing (#21074)
  • f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
  • 8293de0 release: v7.2.0
  • 2833c55 fix(types): add undefined to optional properties for exactOptionalProperties ...
  • e3a6a83 chore(deps): update rolldown-related dependencies (#21047)
  • Additional commits viewable in compare view

Updates vitest from 4.1.1 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 5 updates

Bumps the development-dependencies group with 4 updates in the / directory: [@vitest/coverage-istanbul](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul), [ovsx](https://github.com/eclipse-openvsx/openvsx/tree/HEAD/cli), [tsdown](https://github.com/rolldown/tsdown) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@vitest/coverage-istanbul` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/coverage-istanbul)

Updates `ovsx` from 0.10.9 to 0.10.10
- [Release notes](https://github.com/eclipse-openvsx/openvsx/releases)
- [Changelog](https://github.com/eclipse-openvsx/openvsx/blob/master/cli/CHANGELOG.md)
- [Commits](https://github.com/eclipse-openvsx/openvsx/commits/cli-0.10.10/cli)

Updates `tsdown` from 0.21.4 to 0.21.6
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.21.4...v0.21.6)

Updates `vite` from 8.0.2 to 8.0.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.3/packages/vite)

Updates `vitest` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-istanbul"
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: ovsx
  dependency-version: 0.10.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: tsdown
  dependency-version: 0.21.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 27, 2026
@Jason3S Jason3S merged commit 364af1a into main Mar 27, 2026
16 checks passed
@Jason3S Jason3S deleted the dependabot/npm_and_yarn/development-dependencies-def3a786b7 branch March 27, 2026 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant