build(deps-dev): Bump concurrently from 9.2.1 to 10.0.3 in the all-dependencies group across 1 directory#8
Merged
GravityDarkLab merged 1 commit intoJun 17, 2026
Conversation
67d051b to
326de61
Compare
Bumps the all-dependencies group with 1 update in the / directory: [concurrently](https://github.com/open-cli-tools/concurrently). Updates `concurrently` from 9.2.1 to 10.0.3 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.3) --- updated-dependencies: - dependency-name: concurrently dependency-version: 10.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
326de61 to
06af375
Compare
GravityDarkLab
approved these changes
Jun 17, 2026
Owner
There was a problem hiding this comment.
Concurrently is a devDependency used only as a CLI tool in the root dev and dev:test scripts (concurrently -n api,frontend -c cyan,magenta ...). Nothing ships it to production.
Breaking changes in v10 assessed:
- Node.js <22 dropped — runtime is Bun, not Node.js; CLI invocation from Bun scripts is unaffected.
- ESM-only — only called as a CLI binary, never imported; no impact.
--name-separatorflag removed — not used in our scripts.killOthersAPI option removed — we use the CLI, not the programmatic API.
Why upgrade: v10.0.0 patches SNYK-JS-SHELLQUOTE-16799355, a vulnerability in the bundled shellquote dependency. Even for a dev tool this is worth closing.
Safe to merge.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-dependencies group with 1 update in the / directory: concurrently.
Updates
concurrentlyfrom 9.2.1 to 10.0.3Release notes
Sourced from concurrently's releases.
... (truncated)
Commits
435f61b10.0.35ea69c6ci: use node 24 in the release workflow18e128110.0.2e70686f10.0.1a95bcebRename flow-controller{.d -> }.tsced4245ci: configure trusted publisher flowcf2eaa210.0.01b9bae4deps: upgrade yargs to v18 (#593)b05ee75Bump min Node.js version to v22ae60bc4Scope quote normalization to CLI input (#585)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for concurrently since your current version.