chore: bump the misc group across 1 directory with 8 updates by dependabot[bot] · Pull Request #214 · stella/stdnum

dependabot · 2026-09-12T07:03:56Z

Bumps the misc group with 8 updates in the / directory:

Package	From	To
@changesets/changelog-github	`1.0.0`	`1.0.1`
@changesets/cli	`3.0.0`	`3.0.2`
@stll/oxlint-config	`0.6.0`	`0.7.0`
@types/node	`26.2.0`	`26.4.1`
bun-types	`1.4.1`	`1.4.2`
lefthook	`2.1.10`	`2.1.12`
tsdown	`0.22.14`	`0.23.0`
vite	`8.2.1`	`8.2.2`

Updates @changesets/changelog-github from 1.0.0 to 1.0.1

Release notes

Sourced from @changesets/changelog-github's releases.

@changesets/changelog-github@1.0.1

Patch Changes

Updated dependencies [4d7b4fb]:

@changesets/get-github-info@1.0.1

Changelog

Sourced from @changesets/changelog-github's changelog.

1.0.1

Patch Changes

Updated dependencies [4d7b4fb]:

@changesets/get-github-info@1.0.1

Commits

d7e4a2d Version Packages (#2266)
See full diff in compare view

Updates @changesets/cli from 3.0.0 to 3.0.2

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@3.0.2

Patch Changes

#2270 a0a4dc6 Thanks @bluwy! - Add review message on pre exit

Updated dependencies [1f4eb61, 059f70a]:

@changesets/apply-release-plan@8.1.0

@changesets/git@4.0.1

@changesets/read@1.0.1

@changesets/cli@3.0.1

Patch Changes

#2239 fdfdc93 Thanks @bluwy! - Update links in default generated .changeset/README.md file

Updated dependencies [d0386b6]:

@changesets/write@1.0.1

Changelog

Sourced from @changesets/cli's changelog.

3.0.2

Patch Changes

#2270 a0a4dc6 Thanks @bluwy! - Add review message on pre exit

Updated dependencies [1f4eb61, 059f70a]:

@changesets/apply-release-plan@8.1.0

@changesets/git@4.0.1

@changesets/read@1.0.1

3.0.1

Patch Changes

#2239 fdfdc93 Thanks @bluwy! - Update links in default generated .changeset/README.md file

Updated dependencies [d0386b6]:

@changesets/write@1.0.1

Commits

d7e4a2d Version Packages (#2266)
68affee Upgrade to Vitest 5 (#2281)
5eeb012 Build(deps): Bump human-id in the production-dependencies group (#2279)
a0a4dc6 Add review message on pre exit (#2270)
1f4eb61 Add default changelog message for empty release (#2265)
2eb65ba Add script to run unit and e2e tests separately (#2267)
ff2b075 Build(deps-dev): Bump @lydell/node-pty (#2254)
8eff462 Build(deps-dev): Bump the development-dependencies group across 1 directory w...
bed4581 Version Packages (#2242)
fdfdc93 Update default generated readme (#2239)
Additional commits viewable in compare view

Updates @stll/oxlint-config from 0.6.0 to 0.7.0

Release notes

Sourced from @stll/oxlint-config's releases.

@stll/oxlint-config@0.7.0

Minor Changes

#39 24ef000 Thanks @jan-kubica! - Require Oxlint 1.80 or newer and replace the removed monolithic React Compiler rule with actionable category rules. Consumers that disabled react/react-compiler must replace it with precise category overrides.

Publish Oxlint 1.81 as the current shared toolchain policy.

@stll/oxlint-config@0.7.0 is published through npm trusted publishing with provenance. The attached tarball is the artifact submitted by this release workflow.

Changelog

Sourced from @stll/oxlint-config's changelog.

0.7.0

Minor Changes

#39 24ef000 Thanks @jan-kubica! - Require Oxlint 1.80 or newer and replace the removed monolithic React Compiler rule with actionable category rules. Consumers that disabled react/react-compiler must replace it with precise category overrides.

Publish Oxlint 1.81 as the current shared toolchain policy.

Commits

1e2272a chore: version packages (#40)
See full diff in compare view

Updates @types/node from 26.2.0 to 26.4.1

Commits

See full diff in compare view

Updates bun-types from 1.4.1 to 1.4.2

Release notes

Sourced from bun-types's releases.

Bun v1.4.2

To install Bun v1.4.2
curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun
Windows:
powershell -c "irm bun.sh/install.ps1|iex"
To upgrade to Bun v1.4.2:
bun upgrade
Read Bun v1.4.2's release notes on Bun's blog

Thanks to 3 contributors!

@dylan-conway

@jarred-sumner

@robobun

Commits

See full diff in compare view

Updates lefthook from 2.1.10 to 2.1.12

Release notes

Sourced from lefthook's releases.

v2.1.12

Changelog

b8350fde604197b2422adfc4ae0af080725822b9 ci: fix npm publishing by bumping Node to 24 (#1508)

9fb290d786a0e122fe113b1b49a45bbd0ffa7d28 fix: LEFTHOOK_OUTPUT precedence (#1506)

2f0a9f37cef73e10d95043ba3754329a21850d57 fix: fail the hook when staging fixed files errors (#1484)

v2.1.11

Changelog

e5b10ac3a2645784ee2e4260620c49c31b44992a deps: bump Go to 1.26.6 (#1495)

d4a259f460b7c1d8c512dd75eedc7068310ee961 fix: inherit terminal size for PTY commands (#1498)

Changelog

Sourced from lefthook's changelog.

2.1.12 (2026-08-28)

fix: fail the hook when staging fixed files errors (#1484) by @teddytennant

fix: LEFTHOOK_OUTPUT precedence (#1506) by @Yuki9814

ci: fix npm publishing by bumping Node to 24 (#1508) by @mariokresic

2.1.11 (2026-08-21)

fix: inherit terminal size for PTY commands (#1498) by @mariokresic

docs: correct Lefthook commit message configuration (#1499) by @codersjj

docs: hide contributors regenerate tip from the site (#1500) by @MikevPeeren

docs: clarify signed-off commit example (#1492) by @nightcityblade

deps: bump Go to 1.26.6 (#1495) by @quaacxlok

docs: fix em notice by @mrexox

docs: update docmd (#1481) by @mrexox

docs: fix EM mention HTML by @mrexox

docs: clarify remote script folders (#1477) by @scop

docs: document script args (#1479) by @lntutor

docs: update em logo by @mrexox

Commits

4ad40c3 2.1.12: fix LEFTHOOK_OUTPUT env precedence
2f0a9f3 fix: fail the hook when staging fixed files errors (#1484)
9fb290d fix: LEFTHOOK_OUTPUT precedence (#1506)
b8350fd ci: fix npm publishing by bumping Node to 24 (#1508)
c145646 2.1.11: pty terminal size fix
d4a259f fix: inherit terminal size for PTY commands (#1498)
db7ca05 docs: correct Lefthook commit message configuration (#1499)
fd88b10 docs: hide contributors regenerate tip from the site (#1500)
7ccb1d8 docs: clarify signed-off commit example (#1492)
e5b10ac deps: bump Go to 1.26.6 (#1495)
Additional commits viewable in compare view

Updates tsdown from 0.22.14 to 0.23.0

Release notes

Sourced from tsdown's releases.

v0.23.0

   🧭 Migration Guide

Most users can upgrade directly. Before upgrading, run one final build with tsdown@0.22.14 and resolve all deprecation warnings.

config:

bundle: false → unbundle: true; bundle: true can be removed

outExtension → outExtensions

publicDir / --public-dir → copy / --copy

removeNodeProtocol: true → nodeProtocol: 'strip'

injectStyle → css.inject

deps:

inlineOnly / deps.onlyAllowBundle → deps.onlyBundle

skipNodeModulesBundle: true → deps.neverBundle: true

resolveDepSubpath now defaults to false; set it to true to preserve the previous behavior

dts:

rolldown-plugin-dts was upgraded from 0.27.13 to 0.28.5

dts.oxc: true → dts.generator: 'oxc'

dts.tsgo: true → dts.generator: 'tsgo'; oxc and tsgo objects now only configure their respective generators

dts.volarPlugins → dts.customLanguages; rename each language's create hook to createVolarPlugins

Custom languages, including vue, now throw when combined with an incompatible generator

dts.cjsReexport was removed; dual-format builds now generate CJS declarations in a separate pass

attw:

The default profile changed from strict to esm-only; set profile: 'strict' to preserve the previous checks

programmatic API:

build() now returns { bundles, watch }; replace const bundles = await build() with const { bundles } = await build()

requirements:

Node.js 25 is no longer supported; use ^22.18.0, ^24.11.0, or >=26.0.0

rolldown-plugin-dts now requires Rolldown 1.2.x

Legacy types and typesVersions fallbacks were removed; use TypeScript's bundler, node16, or nodenext module resolution

   🚨 Breaking Changes

Drop support for Node.js 25 - by @sxzz (26950)

Remove deprecated tsup compatibility options - by @sxzz (50766)

Drop types and typesVersionsfields - by @sxzz (be3ea)

attw:

Change default profile to esm-only - by @sxzz (9b3cf)

deps:

Remove deprecated deps.onlyAllowBundle - by @sxzz (30c55)

Disable resolveDepSubpath by default - by @sxzz (d300f)

Remove deprecated skipNodeModulesBundle - by @sxzz (f2a3d)

dts:

Remove dts.cjsReexport option - by @sxzz (9c70f)

Make dts.generator the only way to select generator - by @sxzz (eb75f)

   🚀 Features

Expose programmatic watch controls - by @sxzz in rolldown/tsdown#1062 (96a40)

css: Support function form for css.modules.localsConvention - by @sxzz and @lazerg (b566f)

... (truncated)

Commits

ced9a2c chore: release v0.23.0
f5f9ea9 docs: add Ember support guide (#1043)
8ac89dc chore: upgrade Vitest to v5
96a4098 feat: expose programmatic watch controls (#1062)
61718d7 chore: upgrade deps
d04119c chore: upgrade deps
55f89c5 chore(deps): update pnpm to v12.1.0 (#1060)
946224d fix: ignore optional dependencies in type definitions
62f01cd chore: release v0.23.0-rc.1
bf53f43 fix(cli): camel-case nested flag keys
Additional commits viewable in compare view

Updates vite from 8.2.1 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

bundled-dev: handle lazy request error (#23291) (3ba026d)

bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)

config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)

css: don't pass empty targets to lightningcss (#23295) (2804636)

define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)

deps: update all non-major dependencies (#23217) (ba958bd)

deps: update rolldown-related dependencies (#23218) (83ecb2c)

module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)

optimizer: close custom extension analysis bundles (#23207) (8fb7675)

reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)

respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)

ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)

vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)

use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

define: close rolldown bundler after generate (#23231) (b4d66fe)

module-runner: add TLA circular import case (#23299) (4a261f2)

module-runner: simplify server-hmr tests (#23300) (599b44b)

ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

Commits

de1111a release: v8.2.2
cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
2804636 fix(css): don't pass empty targets to lightningcss (#23295)
599b44b test(module-runner): simplify server-hmr tests (#23300)
4a261f2 test(module-runner): add TLA circular import case (#23299)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the misc group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@changesets/changelog-github](https://github.com/changesets/changesets/tree/HEAD/packages/changelog-github) | `1.0.0` | `1.0.1` | | [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.0` | `3.0.2` | | [@stll/oxlint-config](https://github.com/stella/tooling/tree/HEAD/packages/oxlint-config) | `0.6.0` | `0.7.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.1` | | [bun-types](https://github.com/oven-sh/bun/tree/HEAD/packages/bun-types) | `1.4.1` | `1.4.2` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.1.10` | `2.1.12` | | [tsdown](https://github.com/rolldown/tsdown) | `0.22.14` | `0.23.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` | Updates `@changesets/changelog-github` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/changelog-github/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/changelog-github@1.0.1/packages/changelog-github) Updates `@changesets/cli` from 3.0.0 to 3.0.2 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.2/packages/cli) Updates `@stll/oxlint-config` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/stella/tooling/releases) - [Changelog](https://github.com/stella/tooling/blob/main/packages/oxlint-config/CHANGELOG.md) - [Commits](https://github.com/stella/tooling/commits/@stll/oxlint-config@0.7.0/packages/oxlint-config) Updates `@types/node` from 26.2.0 to 26.4.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `bun-types` from 1.4.1 to 1.4.2 - [Release notes](https://github.com/oven-sh/bun/releases) - [Commits](https://github.com/oven-sh/bun/commits/bun-v1.4.2/packages/bun-types) Updates `lefthook` from 2.1.10 to 2.1.12 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.1.10...v2.1.12) Updates `tsdown` from 0.22.14 to 0.23.0 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.22.14...v0.23.0) Updates `vite` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: "@changesets/changelog-github" dependency-version: 1.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc - dependency-name: "@changesets/cli" dependency-version: 3.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc - dependency-name: "@stll/oxlint-config" dependency-version: 0.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: misc - dependency-name: "@types/node" dependency-version: 26.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: misc - dependency-name: bun-types dependency-version: 1.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc - dependency-name: lefthook dependency-version: 2.1.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc - dependency-name: tsdown dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: misc - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-12T07:04:23Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/@changesets/changelog-github

^1.0.1

Unknown

npm/@changesets/cli

^3.0.2

Unknown

npm/@stll/oxlint-config

0.7.0

Unknown

npm/@types/node

^26.4.1

Unknown

npm/bun-types

1.4.2

Unknown

npm/lefthook

^2.1.12

Unknown

npm/tsdown

0.23.0

Unknown

npm/vite

8.2.2

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Code-Review	🟢 9	Found 22/24 approved changesets -- score normalized to 9
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	🟢 7	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	⚠️ 1	binaries present in source code
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 10	SAST tool is run on all commits

npm/tsdown

0.23.0

Unknown

npm/tsdown

0.23.0

Unknown

Scanned Files

package.json
packages/stdnum-wasm/package.json
packages/stdnum/package.json

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 12, 2026

chore: dedupe Bun lockfile

bba5db9

Navigation Menu

Uh oh!

chore: bump the misc group across 1 directory with 8 updates - #214

chore: bump the misc group across 1 directory with 8 updates#214
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/bun/misc-f35a5d0282

dependabot Bot commented on behalf of github Sep 12, 2026

Uh oh!

github-actions Bot commented Sep 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 12, 2026

@​changesets/changelog-github@​1.0.1

Patch Changes

1.0.1

Patch Changes

@​changesets/cli@​3.0.2

Patch Changes

@​changesets/cli@​3.0.1

Patch Changes

3.0.2

Patch Changes

3.0.1

Patch Changes

@​stll/oxlint-config@​0.7.0

Minor Changes

0.7.0

Minor Changes

Bun v1.4.2

Read Bun v1.4.2's release notes on Bun's blog

Thanks to 3 contributors!

v2.1.12

Changelog

v2.1.11

Changelog

2.1.12 (2026-08-28)

2.1.11 (2026-08-21)

v0.23.0

🧭 Migration Guide

🚨 Breaking Changes

🚀 Features

plugin-legacy@8.2.2

v8.2.2

8.2.2 (2026-08-20)

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Build System

Uh oh!

github-actions Bot commented Sep 12, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@changesets/changelog-github@1`.0.1

`@changesets/cli@3`.0.2

`@changesets/cli@3`.0.1

`@stll/oxlint-config@0`.7.0