Skip to content

build(deps-dev): Bump concurrently from 9.2.1 to 10.0.3 in the all-dependencies group across 1 directory#8

Merged
GravityDarkLab merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-e843c70ec4
Jun 17, 2026
Merged

build(deps-dev): Bump concurrently from 9.2.1 to 10.0.3 in the all-dependencies group across 1 directory#8
GravityDarkLab merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-e843c70ec4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 1 update in the / directory: concurrently.

Updates concurrently from 9.2.1 to 10.0.3

Release notes

Sourced from concurrently's releases.

v10.0.3

Republish of https://github.com/open-cli-tools/concurrently/releases/tag/v10.0.1 with Trusted Publishing enabled (see #595)

Full Changelog: open-cli-tools/concurrently@v10.0.2...v10.0.3

v10.0.2

Test version to restore Trusted Publishing. Not published to npm.

v10.0.1

  • Ensure FlowController type is exported - #594

Full Changelog: open-cli-tools/concurrently@v10.0.0...v10.0.1

v10.0.0

💥 Breaking Changes

  • Dropped support for Node.js <22.0.0. Older Node.js version have reached end-of-life, and certain features require new-ish JS APIs.
  • concurrently is now ESM-only. It's now possible to require(esm). See here for interoperability.
  • Prefix colors now default to automatic - #581 The colors used to default to reset (which does nothing). Concurrently now automatically selects a color, out of the box. The list of colors used is not jarring nor carries semantic meaning, and reads well in both dark and light terminal backgrounds.
  • Removed deprecated flags and options
    • CLI flag --name-separator: use commas instead.
    • API option killOthers: use killOthersOn instead.

✨ New Features

  • Support applying modifiers to hex prefix colors (e.g. #ff0000.bold) - #450
  • Support chalk's color functions in prefixes (e.g. rgb(), hex(), bgRgb(), etc) - #578
  • Set prefix background color via bg#RRGGBB - #578
  • Allow shell override via --shell CLI flag/shell API option - #288, #589, #556 concurrently distinguishes between cmd.exe, powershell, and POSIX-based shells.
  • Manual prefix coloring in templates e.g. [{color}{name}{/color}] - #583, #587

🐛 Bug fixes

  • Scope quote normalization to CLI input - #582, #585 It should now also be possible to run commands like "/some/command" foo bar"
  • Don't throw when color doesn't exist - #580

🔐 Security

Other changes

  • Warn about running on Snap - #584

New Contributors

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for concurrently since your current version.


@GravityDarkLab GravityDarkLab self-requested a review June 17, 2026 21:08
@dependabot dependabot Bot changed the title build(deps-dev): Bump concurrently from 9.2.1 to 10.0.0 in the all-dependencies group build(deps-dev): Bump concurrently from 9.2.1 to 10.0.3 in the all-dependencies group across 1 directory Jun 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/all-dependencies-e843c70ec4 branch from 67d051b to 326de61 Compare June 17, 2026 21:09
Bumps the all-dependencies group with 1 update in the / directory: [concurrently](https://github.com/open-cli-tools/concurrently).


Updates `concurrently` from 9.2.1 to 10.0.3
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.3)

---
updated-dependencies:
- dependency-name: concurrently
  dependency-version: 10.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/all-dependencies-e843c70ec4 branch from 326de61 to 06af375 Compare June 17, 2026 21:13

@GravityDarkLab GravityDarkLab left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Concurrently is a devDependency used only as a CLI tool in the root dev and dev:test scripts (concurrently -n api,frontend -c cyan,magenta ...). Nothing ships it to production.

Breaking changes in v10 assessed:

  • Node.js <22 dropped — runtime is Bun, not Node.js; CLI invocation from Bun scripts is unaffected.
  • ESM-only — only called as a CLI binary, never imported; no impact.
  • --name-separator flag removed — not used in our scripts.
  • killOthers API option removed — we use the CLI, not the programmatic API.

Why upgrade: v10.0.0 patches SNYK-JS-SHELLQUOTE-16799355, a vulnerability in the bundled shellquote dependency. Even for a dev tool this is worth closing.

Safe to merge.

@GravityDarkLab GravityDarkLab merged commit 26f9093 into main Jun 17, 2026
12 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/all-dependencies-e843c70ec4 branch June 17, 2026 21:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant