Skip to content

chore(deps-dev): bump the dev-deps group across 1 directory with 14 updates - #712

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-deps-bfc54faa37
Closed

chore(deps-dev): bump the dev-deps group across 1 directory with 14 updates#712
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-deps-bfc54faa37

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-deps group with 14 updates in the / directory:

Package From To
@iconify-json/logos 1.2.14 1.2.15
@iconify-json/lucide 1.2.137 1.2.138
@tanstack/router-vite-plugin 1.167.41 1.167.42
@vitest/coverage-v8 5.0.2 5.0.3
@vitest/ui 5.0.2 5.0.3
cspell 10.3.5 10.3.6
daisyui 5.7.46 5.7.47
knip 6.38.0 6.39.0
lefthook 2.1.14 2.1.16
msw 2.15.0 3.0.1
oxfmt 0.70.0 0.71.0
turbo 2.11.5 2.11.6
vite 8.3.1 8.3.2
vitest 5.0.2 5.0.3

Updates @iconify-json/logos from 1.2.14 to 1.2.15

Commits

Updates @iconify-json/lucide from 1.2.137 to 1.2.138

Commits

Updates @tanstack/router-vite-plugin from 1.167.41 to 1.167.42

Release notes

Sourced from @​tanstack/router-vite-plugin's releases.

@​tanstack/router-vite-plugin@​1.167.42

Patch Changes

  • Updated dependencies []:
    • @​tanstack/router-plugin@​1.168.42
Changelog

Sourced from @​tanstack/router-vite-plugin's changelog.

1.167.42

Patch Changes

  • Updated dependencies []:
    • @​tanstack/router-plugin@​1.168.42
Commits

Updates @vitest/coverage-v8 from 5.0.2 to 5.0.3

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vitest/ui from 5.0.2 to 5.0.3

Release notes

Sourced from @​vitest/ui's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates cspell from 10.3.5 to 10.3.6

Release notes

Sourced from cspell's releases.

v10.3.6

Fixes

fix: Report unknown CSpell directives again (#9319)

Summary

cspell lint reports unknown in-document directives again, such as cspell:bad-dir, when --validate-directives or validateDirectives: true in the config asks for them. Since 9.1.0 they were found but never shown or counted.

  • --validate-directives and --no-validate-directives override the config setting.
  • An unknown directive counts as an issue, so cspell lint exits with an error, as it did before 9.1.0.
  • The JSON reporter, @cspell/cspell-json-reporter, includes them in its output again.
  • The default reporter and the JSON reporter now ask to receive directive issues. Other reporters still only get them if they ask for them.
  • The command-line flag is now applied as a setting, like --report, so it controls what is shown as well as what is checked.

fix(cspell-io): Keep redirected requests under the private root (#9329)

Summary

createRedirectProvider in cspell-io now only serves requests that map to a location under its private root. A request that would resolve outside the private root is refused with VFSErrorUnsupportedRequest, the same error as a request outside the public root.

  • Refused: a path that starts with a separator (/, \, %2F, %5C) right after the public root.
  • Now served from inside the private root: file names that look like a URL scheme or a drive, such as a:b.txt or C|. They used to resolve to a different URL.

cspell itself does not use createRedirectProvider. This affects projects that use cspell-io directly.

  • The part of the URL after the public root is resolved as a relative path under the private root, and the result is checked to be under the private root: same protocol, same host, and the same path prefix.
  • Results coming back from the private file system are checked the same way before they are shown under the public root.
  • The change is in commit 25359026e1.

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.3.6 (2026-09-29)

Fixes

fix: Report unknown CSpell directives again (#9319)

Summary

cspell lint reports unknown in-document directives again, such as cspell:bad-dir, when --validate-directives or validateDirectives: true in the config asks for them. Since 9.1.0 they were found but never shown or counted.

  • --validate-directives and --no-validate-directives override the config setting.
  • An unknown directive counts as an issue, so cspell lint exits with an error, as it did before 9.1.0.
  • The JSON reporter, @cspell/cspell-json-reporter, includes them in its output again.
  • The default reporter and the JSON reporter now ask to receive directive issues. Other reporters still only get them if they ask for them.
  • The command-line flag is now applied as a setting, like --report, so it controls what is shown as well as what is checked.

fix(cspell-io): Keep redirected requests under the private root (#9329)

Summary

createRedirectProvider in cspell-io now only serves requests that map to a location under its private root. A request that would resolve outside the private root is refused with VFSErrorUnsupportedRequest, the same error as a request outside the public root.

  • Refused: a path that starts with a separator (/, \, %2F, %5C) right after the public root.
  • Now served from inside the private root: file names that look like a URL scheme or a drive, such as a:b.txt or C|. They used to resolve to a different URL.

cspell itself does not use createRedirectProvider. This affects projects that use cspell-io directly.

  • The part of the URL after the public root is resolved as a relative path under the private root, and the result is checked to be under the private root: same protocol, same host, and the same path prefix.
  • Results coming back from the private file system are checked the same way before they are shown under the public root.
  • The change is in commit 25359026e1.

... (truncated)

Commits
  • 8559198 v10.3.6
  • 72e1be3 chore: Prepare Release v10.3.6 (auto-deploy) (#9305)
  • e230ca0 test: Give time-limited RPC and worker tests room on slow runners (#9330)
  • 8eae6b6 fix: Report unknown CSpell directives again (#9319)
  • a5f5111 fix: Don't reuse cached results made with different command-line options (#9318)
  • 2f897be fix: --show-perf-summary shows where all of the run's time goes (#9307)
  • fe37b7b chore: Label per package, and bugs links to its open issues (#9309)
  • See full diff in compare view

Updates daisyui from 5.7.46 to 5.7.47

Release notes

Sourced from daisyui's releases.

v5.7.47

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.47

💚 Thank you for using daisyUI!

Changelog

Sourced from daisyui's changelog.

5.7.47 (2026-09-30)

Bug Fixes

Commits

Updates knip from 6.38.0 to 6.39.0

Release notes

Sourced from knip's releases.

Release 6.39.0

  • Add Railway plugin (#2026) (6da55767eb419701dd32f93789a00e8bdc915276) - thanks @​jonahsnider!
  • Update query snapshot (8877d3cf35943e17a617e1197fa46c5a43342479)
  • Fix excluded tags on entry re-exports (#2062) (b22e27543cb8dd4ba7ec97c70ccfd06bc8f16614) - thanks @​devYRPauli!
  • Update rolldown snapshot (3a45c806e1c1b7ceb078903652c8631566400096)
  • Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067) (d912d807e41f140bbc79bafce6882b3c05dec6ff) - thanks @​bytedoe!
  • fix(angular): keep other projects' inputs when one has no architect (#2064) (af3f42e9772e9937fd71b7557d3b54aee1db339a) - thanks @​Cayan!
  • fix(vite): resolve nested HTML entry points in multi-page apps (#1988) (4648aefe56e7bac521bb6f17189473b46f8ff00f) - thanks @​DreamLongYT!
  • Improve Rstest plugin support (#2068) (add87992e9dfe2f3c22e4c6ba7fa257d7f0151cf) - thanks @​fi3ework!
  • Handle profiles, formatters and require paths in Cucumber plugin (#2065) (2ad39fcf02e067b4bdfc06a658bf4bf5abeea764) - thanks @​giaBaoJS!
  • fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076) (7060bb968339680d694275413aba2833e4521ed9) - thanks @​alokn!
  • fix: read entry export tags under the re-exported names (#2069) (1698683df95a96b3515795eb664aacf030042d7b) - thanks @​devYRPauli!
Commits
  • ed30e5b Release knip@6.39.0
  • 1698683 fix: read entry export tags under the re-exported names (#2069)
  • 7060bb9 fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076)
  • 2ad39fc Handle profiles, formatters and require paths in Cucumber plugin (#2065)
  • add8799 Improve Rstest plugin support (#2068)
  • 4648aef fix(vite): resolve nested HTML entry points in multi-page apps (#1988)
  • af3f42e fix(angular): keep other projects' inputs when one has no architect (#2064)
  • d912d80 Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067)
  • b22e275 Fix excluded tags on entry re-exports (#2062)
  • 6da5576 Add Railway plugin (#2026)
  • See full diff in compare view

Updates lefthook from 2.1.14 to 2.1.16

Release notes

Sourced from lefthook's releases.

v2.1.16

Changelog

  • 3ee04318fd06d56a70cc9c90dc8385b19918f520 ci: refactor publishing scripts (#1559)
  • 91407e537b2fa36539506963a33e582dca394798 deps: bump mod and text deps to resolve CVEs (#1560)
  • be6f0ae8793533449cb9a07a253fa9a381e82206 fix: preserve unrelated unstaged changes on conflict (#1483)
  • cf4ef1e19baf0581871f69b40914d64c94ff19d7 fix: test staging fixed files with partially staged

v2.1.15

Changelog

  • 2388dde2b31dc9a782e967764046b41b404cece9 feat: propagate forced colors to hook commands via CLICOLOR_FORCE (#1547)
  • 49260b57c2a56bc4d65d09395458bb3ce3c63311 fix(lfs): do not pipe stdin into post-checkout git-lfs hook (#1523)
  • 38bc1c6cef3192a36002d0dcc37973416249c07e fix: quote paths in the generated hook shim (#1509)
  • 0892f5f256ebe162485492af5ca14c2ced45586f fix: remove color blending (#1558)
  • f1de41cd5cd6a6c5e0179c65e00d5ed6d90078c2 fix: resolve push-files fallback against the remote-tracking ref (#1485)
  • 07ce565bcc73465bc18fb36561b935ee2a53eab6 fix: sanitize slashes in remote ref when building the checkout dir name (#1486)
  • c465ca8ef4fc9ee0695aa4a9530fc404ed838b7a test(cmd): regression for valid fish shell completion output (#1527)
Changelog

Sourced from lefthook's changelog.

2.1.16

2.1.15

Commits
  • 433e6b9 2.1.16: preserve unrelated unstaged changes on conflicts after autofixes
  • cf4ef1e fix: test staging fixed files with partially staged
  • be6f0ae fix: preserve unrelated unstaged changes on conflict (#1483)
  • 91407e5 deps: bump mod and text deps to resolve CVEs (#1560)
  • 3ee0431 ci: refactor publishing scripts (#1559)
  • d050364 2.1.15: small fixes to output and LFS
  • 49260b5 fix(lfs): do not pipe stdin into post-checkout git-lfs hook (#1523)
  • 0892f5f fix: remove color blending (#1558)
  • f1de41c fix: resolve push-files fallback against the remote-tracking ref (#1485)
  • c465ca8 test(cmd): regression for valid fish shell completion output (#1527)
  • Additional commits viewable in compare view

Updates msw from 2.15.0 to 3.0.1

Release notes

Sourced from msw's releases.

v3.0.1 (2026-09-30)

Bug Fixes

  • treat CONNECT requests as the transport mechanism (#2796) (7cad86a03b0ddb2efdec96ce8a49b0ed07d9f4dc) @​kettanaito

v3.0.0 (2026-09-28)

⚠️ BREAKING CHANGES

  • MSW is now ESM-only (#2765).
  • Deprecate support for Node.js v18 and v20 (#2729). The minimal supported Node.js version is v22.
  • msw/native is removed in favor of @msw/react-native.
  • Require TypeScript 5.9 as the minimal version.
  • Deprecate support for TypeScript 5.1 and 5.2 (#2730)
  • worker.stop() returns a Promise (#2724). Awaiting it is relevant only for in-flight critical scenarios.
  • graphql is now exported as msw/graphql (#2691). GraphQL is now handled as a proper optional peer dependency.
  • Removes the handleRequest() utility. Please use the defineNetwork() API instead.
  • GraphQLLinkHandlers type has been renamed to GraphQLLink.
  • The file:// requests now throw in Node.js as they normally do (not supported by fetch).
  • The Content-Length request header is now removed by bypass().
  • HTTP-to-WebSocket upgrade requests performed via fetch() now throw in Node.js as they normally do (not supported by fetch).
  • Cookies are no longer managed in Node.js for better compatibilty. Instead, whatever is the default behavior of your environment that's the cookie behavior you get. This has no effect on the browser.
  • WebSocket connection life cycle event has been renamed to websocket:connection (#2783).
  • onUnhandledRequest option has been renamed to onUnhandledFrame.
  • The library no longer patches setTimeout to circumvent fake timers in test runners. You should advance the fake timers normally for delayed mocked responses to resolve.
  • The library no longer returns a mocked cookie string on request.headers.get('cookie') in the handlers. It returns null in all environments. Please use the cookies resolver argument to have cookie-based logic.

Features

  • Supports Node.js v24 and v26.
  • Supports TypeScript v6.0 and v7.0.
  • You can import individual utilities, like delay or passthrough, from the new msw/utils entrypoint for smaller footprint on your bundle.
  • Support GraphQL v17.0.
  • Support intercepting page navigations and form submissions (#2721).
  • Support GraphQL subscriptions (#285, #2763).
  • Migrate from path-to-regexp to @msw/url (#2678).
  • Remove the following dependencies:
    • graphql
    • path-to-regexp
    • picocolors
    • statuses
    • strict-event-emitter
  • Adds a Vite plugin for MSW (#2781).
  • Adds a websocket:error life cycle event to listen to WebSocket connection errors (#2784).
  • Support modifying the intercepted request headers in passthrough scenarios (#2786).
  • Support a new WebSocket Extension API that allows for better custom experiences (#2791).

... (truncated)

Commits

Updates oxfmt from 0.70.0 to 0.71.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.71.0

🚀 Features

  • e0b1f9f oxfmt: Bump bundled Prettier version to 3.9.9 (#27002) (leaysgur)
  • 342527d oxfmt: Bump bundled Prettier version to 3.9.8 (#26999) (leaysgur)

🐛 Bug Fixes

  • eeba1db formatter: Skip test-call layout when arguments have comments (#27119) (leaysgur)
  • 1f7b8ad oxfmt: Allow repeated CLI calls in the same process (#27051) (Liang)
  • 7bcb807 formatter_markdown: Keep blank line between HTML and nested list (#27112) (leaysgur)
  • 10b10c5 formatter: Keep comments around = on their side and line (#27041) (leaysgur)
  • 9aad365 formatter: Keep comments deferred before an assignment operator (#26997) (waltu)
  • 8fbddb1 formatter/jsdoc: More alignment with original plugin (#27039) (leaysgur)
  • 50be18e formatter: Keep trailing spaces on normal block comments (#27037) (leaysgur)
  • 56d1880 formatter: Nestle adjacent block comments (#27036) (leaysgur)
  • 3be5d94 formatter: Treat /*** comments as JSDoc (#27035) (leaysgur)
  • cd45f71 formatter: Keep trailing double spaces on JSDoc lines (#26861) (John Costa)
  • fd695f4 formatter_markdown: Fix more mismatches found in ecosystem-ci repos (#27003) (leaysgur)
  • 4e77d59 formatter_markdown: Keep a math span after a kept line break from opening a block (#27001) (leaysgur)
  • 584b8b0 formatter_markdown: Keep a shape line after a multi-line inline node or link title (#27000) (leaysgur)
  • b939645 formatter_markdown: Keep a line break before an inline liquid tag under preserve (#26998) (leaysgur)
Commits

Updates turbo from 2.11.5 to 2.11.6

Release notes

Sourced from turbo's releases.

Turborepo v2.11.6

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.11.5...v2.11.6

Commits
  • fcd1213 publish 2.11.6 to registry
  • 90718d1 fix: Infer single-package mode for query commands (#14351)
  • a409ce5 fix: Complete task query metadata for non-script entrypoints (#14350)
  • bc7c148 feat: Filter tasks by tags in the CLI (#14345)
  • 49d1607 feat: Filter query tasks and packages by tags (#14344)
  • fba5351 feat: Expose task and package tags in query (#14343)
  • b4570e0 test: Deflake untracked scan-scope assertions (#14348)
  • fa107aa docs: Point security.txt to Vercel HackerOne program (#14346)
  • 0deb0e7 fix: Upgrade brace-expansion to latest compatible releases (#14347)
  • d44edbe feat: Add task tags with configuration inheritance (#14342)
  • Additional commits viewable in compare view

Updates vite from 8.3.1 to 8.3.2

Release notes

Sourced from vite's releases.

v8.3.2

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (

@dependabot
chore(deps-dev): bump the dev-deps group across 1 directory with 14 u…
eebc7ec 
…pdates

Bumps the dev-deps group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@iconify-json/logos](https://github.com/iconify/icon-sets) | `1.2.14` | `1.2.15` |
| [@iconify-json/lucide](https://github.com/iconify/icon-sets) | `1.2.137` | `1.2.138` |
| [@tanstack/router-vite-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-vite-plugin) | `1.167.41` | `1.167.42` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.2` | `5.0.3` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `5.0.2` | `5.0.3` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.3.5` | `10.3.6` |
| [daisyui](https://github.com/saadeghi/daisyui/tree/HEAD/packages/daisyui) | `5.7.46` | `5.7.47` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.38.0` | `6.39.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.14` | `2.1.16` |
| [msw](https://github.com/mswjs/msw) | `2.15.0` | `3.0.1` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.70.0` | `0.71.0` |
| [turbo](https://github.com/vercel/turborepo) | `2.11.5` | `2.11.6` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.2` | `5.0.3` |



Updates `@iconify-json/logos` from 1.2.14 to 1.2.15
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@iconify-json/lucide` from 1.2.137 to 1.2.138
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@tanstack/router-vite-plugin` from 1.167.41 to 1.167.42
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-vite-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/router-vite-plugin@1.167.42/packages/router-vite-plugin)

Updates `@vitest/coverage-v8` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8)

Updates `@vitest/ui` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/ui)

Updates `cspell` from 10.3.5 to 10.3.6
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.6/packages/cspell)

Updates `daisyui` from 5.7.46 to 5.7.47
- [Release notes](https://github.com/saadeghi/daisyui/releases)
- [Changelog](https://github.com/saadeghi/daisyui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/saadeghi/daisyui/commits/v5.7.47/packages/daisyui)

Updates `knip` from 6.38.0 to 6.39.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.39.0/packages/knip)

Updates `lefthook` from 2.1.14 to 2.1.16
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.14...v2.1.16)

Updates `msw` from 2.15.0 to 3.0.1
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.15.0...v3.0.1)

Updates `oxfmt` from 0.70.0 to 0.71.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.71.0/npm/oxfmt)

Updates `turbo` from 2.11.5 to 2.11.6
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.11.5...v2.11.6)

Updates `vite` from 8.3.1 to 8.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite)

Updates `vitest` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest)

---
updated-dependencies:
- dependency-name: "@iconify-json/logos"
  dependency-version: 1.2.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@iconify-json/lucide"
  dependency-version: 1.2.138
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@tanstack/router-vite-plugin"
  dependency-version: 1.167.42
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@vitest/ui"
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: cspell
  dependency-version: 10.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: daisyui
  dependency-version: 5.7.47
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: knip
  dependency-version: 6.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-deps
- dependency-name: lefthook
  dependency-version: 2.1.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: msw
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-deps
- dependency-name: oxfmt
  dependency-version: 0.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-deps
- dependency-name: turbo
  dependency-version: 2.11.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: vite
  dependency-version: 8.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: vitest
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 5, 2026
@vercel

vercel Bot commented Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
react-starter Blocked Blocked Oct 5, 2026 3:45am UTC

Request Review

@github-actions
github-actions Bot enabled auto-merge (squash) October 5, 2026 03:46
@dependabot @github

dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 6, 2026
auto-merge was automatically disabled October 6, 2026 03:45

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-deps-bfc54faa37 branch October 6, 2026 03:45

This branch had an error being deployed

1 failed deployment
Preview — eebc7ec1 Deployed Oct 5, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants