Skip to content

Bump the npm-minor group across 1 directory with 11 updates - #14

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-7255c352b9
Open

Bump the npm-minor group across 1 directory with 11 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-7255c352b9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor group with 11 updates in the / directory:

Package From To
@actions/glob 0.5.1 0.7.0
@octokit/plugin-retry 8.1.0 8.1.1
js-yaml 5.2.0 5.2.3
@types/semver 7.7.1 7.8.0
eslint-plugin-github 6.0.0 6.1.2
globals 17.7.0 17.9.0
nock 14.0.16 14.0.17
sinon 22.0.0 22.1.0
typescript-eslint 8.62.1 8.66.0
@octokit/core 7.0.6 7.0.7
tsx 4.22.4 4.23.5

Updates @actions/glob from 0.5.1 to 0.7.0

Changelog

Sourced from @​actions/glob's changelog.

0.7.0

  • Bump minimatch from ^3.0.4 to ^10.2.5 #2355
  • Bump undici from 6.23.0 to 6.24.0 #2345
  • Bump brace-expansion in /packages/glob #2369

0.6.1

  • Fix a bad import for minimatch

0.6.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()
Commits

Updates @octokit/plugin-retry from 8.1.0 to 8.1.1

Release notes

Sourced from @​octokit/plugin-retry's releases.

v8.1.1

8.1.1 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#685) (a323a9a)
Commits
  • ed95dae ci(action): update actions/checkout action to v7 (#680)
  • a323a9a fix(deps): update dependency @​octokit/types to v17 (#685)
  • 944c701 ci(action): update actions/setup-node action to v7 (#682)
  • 3a4e3d0 build(deps): lock file maintenance (#684)
  • bae11ba build(deps): lock file maintenance (#679)
  • 433e259 chore(deps): update dependency esbuild to ^0.28.0 [security] (#678)
  • 03ed096 build(deps): lock file maintenance (#669)
  • 5a0d924 build(deps): lock file maintenance (#664)
  • f8773e4 tests: correct the errorRequest tests due not testing the right thing (#662)
  • 4447fd3 chore(deps): update dependency esbuild to ^0.27.0 (#652)
  • Additional commits viewable in compare view

Updates js-yaml from 5.2.0 to 5.2.3

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

  • Prevent prototype fallback when resolving tags and mapping entries, #782.
  • Resolve !!timestamp years 0000-0099 correctly, #775.
  • Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
  • Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.
Commits
  • 6740445 5.2.3 released
  • 94e766d Update changelog
  • c3bd7ca Polish previous commit, #780
  • 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
  • 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
  • 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
  • 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
  • d524f83 docs: add contributing guidelines
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • Additional commits viewable in compare view

Updates @types/semver from 7.7.1 to 7.8.0

Commits

Updates eslint-plugin-github from 6.0.0 to 6.1.2

Release notes

Sourced from eslint-plugin-github's releases.

v6.1.2

What's Changed

Full Changelog: github/eslint-plugin-github@v6.1.1...v6.1.2

v6.1.1

Fixed

  • jsx-a11y recommended rules are now correctly applied in the flat React config. Previously, lib/configs/flat/react.js spread jsx-a11y's recommended config but then redefined its own rules object, which shallow-overwrote and silently dropped most of the recommended rule set — leaving only a handful of rules active. The recommended rules are now explicitly merged, so the full jsx-a11y/recommended baseline is enforced while GitHub-specific overrides are preserved.

v6.1.0

  • Expanded supported ESLint peer range Changed peerDependencies from ^8 || ^9 to ^8 || ^9 || ^10
  • Fixed flat recommended plugin wiring for compatibility Wrapped eslint-plugin-eslint-comments with @​eslint/compat

v6.1.0-alpha

  • Expanded supported ESLint peer range Changed peerDependencies from ^8 || ^9 to ^8 || ^9 || ^10
  • Fixed flat recommended plugin wiring for compatibility Wrapped eslint-plugin-eslint-comments with @​eslint/compat
Commits
  • 03bfb7d Merge pull request #726 from github/gp/upgrade-dep
  • d66f3e8 upgrade deps
  • 259c9e1 chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 update...
  • a95d9e7 chore(deps): resolve npm audit vulnerabilities (#720)
  • add7174 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#718)
  • 7a5567b Merge pull request #715 from github/alaingoga/714-adding-jsxA11y-plugin-suppo...
  • fa8eeb1 714 - Adding jsxA11y plugin support back
  • 3611a16 Merge pull request #713 from github/alaingoga/eslint10-compact
  • fe11575 Support ESLint 10: widen peer range and fix eslint-comments in flat recommend...
  • 2dcfb60 Merge pull request #706 from github/dependabot/npm_and_yarn/all-dependencies-...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-github since your current version.


Updates globals from 17.7.0 to 17.9.0

Release notes

Sourced from globals's releases.

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

Commits

Updates nock from 14.0.16 to 14.0.17

Release notes

Sourced from nock's releases.

v14.0.17

14.0.17 (2026-07-30)

Bug Fixes

  • remove interceptor from scope.interceptors on nock.removeInterceptor (#2997) (1ee467c)
Commits
  • 1ee467c fix: remove interceptor from scope.interceptors on nock.removeInterceptor (#2...
  • da20f4b chore(deps): bump actions/checkout from 6 to 7 (#2987)
  • See full diff in compare view

Updates sinon from 22.0.0 to 22.1.0

Changelog

Sourced from sinon's changelog.

22.1.0

  • d36e921b fix: let returns override returnsArg (王胜)

    Signed-off-by: 王胜 2318857637@qq.com

  • 40c4caa0 fix: align restoreObject docs test with idempotent behavior (#2745) (Julia Miller)

    restoreObject was made idempotent in #2737 — it no longer throws for objects with no restorable methods. Updates the docs page and its corresponding test to reflect this.

  • a68dac19 fix: throw a clear error when throwArg index equals the argument count (#2743) (spokodev)
    • fix: throw a clear error when throwArg index equals the argument count

    spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it with pos equal to the number of recorded arguments slipped past the guard and reached throw this.args[pos], throwing undefined instead of the intended TypeError. A thrown undefined cannot be inspected as an Error and is reported by test frameworks as no exception thrown.

    Use >= to match ensureArgs in behavior.js and the sibling callArg helpers, which already reject an out-of-range index with a clear error.

  • 9ea504e3 feat: make sinon.restoreObject idempotent (#2737) (Ilia Choly)

    Passing an object with no live fakes to restoreObject now restores nothing instead of throwing, giving it symmetry with sinon.restore() and sandbox.restore(). The strict "found no methods" check is retained for spy(object) and stub(object), which now use a dedicated walkObjectStrict export, while restoreObject uses the loose walkObject. Passing a falsy value still throws.

    Fixes #2736

  • 4db4feff fix: preserve fake undefined argument validation (Vishal Kumar Singh)
  • 755a40d7 fix: isolate callId counter per sandbox for parallel test support (Vishal Kumar Singh)

    The global callId counter in proxy-invoke.js caused calledImmediatelyBefore and calledImmediatelyAfter to fail when tests run in parallel with separate sandboxes. Each sandbox now maintains its own callId counter, passed through the spy/stub/fake creation chain via a context object.

    Fixes #2472

Released by Morgan Roderick on 2026-07-20.

Commits
  • ab289e9 22.1.0
  • bb3b75a chore: remove Jekyll steps from version hook
  • bb38f25 chore: run docs tests in preversion hook
  • d36e921 fix: let returns override returnsArg
  • 11db213 ci: run docs tests on every PR (#2746)
  • 40c4caa fix: align restoreObject docs test with idempotent behavior (#2745)
  • 5ccb7fd build(deps): bump the action-deps group with 4 updates (#2744)
  • a68dac1 fix: throw a clear error when throwArg index equals the argument count (#2743)
  • 9ea504e feat: make sinon.restoreObject idempotent (#2737)
  • cf5d9e8 fix: remove dead link and exclude code example URLs from link check
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.62.1 to 8.66.0

Release notes

Sourced from typescript-eslint's releases.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

  • typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)
  • eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)
  • eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
  • eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
  • eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
  • website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
  • typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @octokit/core from 7.0.6 to 7.0.7

Release notes

Sourced from @​octokit/core's releases.

v7.0.7

7.0.7 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#797) (087a093)
Commits
  • 087a093 fix(deps): update dependency @​octokit/types to v17 (#797)
  • e8c8789 ci(action): update actions/create-github-app-token action to v3 (#770)
  • a648383 chore(deps): bump postcss from 8.5.15 to 8.5.23 (#790)
  • 57516b7 chore(deps-dev): bump undici from 7.24.0 to 7.28.0 (#785)
  • c1d1bef chore(deps): bump picomatch from 4.0.3 to 4.0.4 (#772)
  • c60ac22 chore(deps): bump postcss from 8.5.3 to 8.5.15 (#778)
  • 8a9fb20 chore(deps): update dependency esbuild to ^0.28.0 [security] (#782)
  • 83550e2 chore(deps-dev): bump minimatch from 9.0.5 to 9.0.9 (#766)
  • dd8908c chore(deps): bump rollup from 4.41.0 to 4.59.0 (#765)
  • e265d99 chore(deps-dev): bump undici from 7.10.0 to 7.24.0 (#768)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/core since your current version.


Updates tsx from 4.22.4 to 4.23.5

Release notes

Sourced from tsx's releases.

v4.23.5

4.23.5 (2026-08-02)

Bug Fixes

  • detect the Node inspector enabled via NODE_OPTIONS (3c1d051)

This release is also available on:

v4.23.4

4.23.4 (2026-08-02)

Bug Fixes

  • cli: allow async process.once() signal handlers to finish (#827) (2afc7bb)

This release is also available on:

v4.23.3

4.23.3 (2026-08-02)

Bug Fixes

  • preserve listenerCount overload semantics (#823) (b6574d4)

This release is also available on:

v4.23.2

4.23.2 (2026-08-02)

Bug Fixes

  • watch: exit with 128 + signal number when interrupted (#820) (0b00bc8)

This release is also available on:

v4.23.1

4.23.1 (2026-07-13)

... (truncated)

Commits
  • c55004d test: remove legacy PTY retry
  • e368161 chore(deps): update pty-spawn to 1.1.1
  • 8d39496 ci: validate GitHub Actions workflows
  • 6fe724e test: clean up timed-out PTY attempts
  • e0a0536 ci: skip unused Windows Node cache
  • 6d6dd84 ci: remove broken lock automation
  • 3c1d051 fix: detect the Node inspector enabled via NODE_OPTIONS
  • 40380a4 ci: lock down the release toolchain
  • f217b6b ci: restrict releases to public repository
  • 2afc7bb fix(cli): allow async process.once() signal handlers to finish (#827)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-minor group across 1 directory with 11 updates
6b1e0d1 
Bumps the npm-minor group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob) | `0.5.1` | `0.7.0` |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.1.0` | `8.1.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.0` | `5.2.3` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` |
| [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `6.0.0` | `6.1.2` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.9.0` |
| [nock](https://github.com/nock/nock) | `14.0.16` | `14.0.17` |
| [sinon](https://github.com/sinonjs/sinon) | `22.0.0` | `22.1.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.1` | `8.66.0` |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.6` | `7.0.7` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.5` |



Updates `@actions/glob` from 0.5.1 to 0.7.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob)

Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](octokit/plugin-retry.js@v8.1.0...v8.1.1)

Updates `js-yaml` from 5.2.0 to 5.2.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.0...5.2.3)

Updates `@types/semver` from 7.7.1 to 7.8.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `eslint-plugin-github` from 6.0.0 to 6.1.2
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](github/eslint-plugin-github@v6.0.0...v6.1.2)

Updates `globals` from 17.7.0 to 17.9.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.9.0)

Updates `nock` from 14.0.16 to 14.0.17
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.16...v14.0.17)

Updates `sinon` from 22.0.0 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v22.0.0...v22.1.0)

Updates `typescript-eslint` from 8.62.1 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint)

Updates `@octokit/core` from 7.0.6 to 7.0.7
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v7.0.6...v7.0.7)

Updates `tsx` from 4.22.4 to 4.23.5
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.5)

---
updated-dependencies:
- dependency-name: "@actions/glob"
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@octokit/plugin-retry"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: js-yaml
  dependency-version: 5.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@types/semver"
  dependency-version: 7.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: eslint-plugin-github
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: globals
  dependency-version: 17.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: nock
  dependency-version: 14.0.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@octokit/core"
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: tsx
  dependency-version: 4.23.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: Rebuild. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions github-actions Bot added the size/XS Should be very easy to review label Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

size/XS Should be very easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants