Skip to content

Bump the dev group with 6 updates - #45

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-4eaeb227d9
Closed

Bump the dev group with 6 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-4eaeb227d9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev group with 6 updates:

Package From To
@capacitor/android 8.5.3 8.6.0
@capacitor/cli 8.5.3 8.6.0
@capacitor/core 8.5.3 8.6.0
@tauri-apps/plugin-notification 2.7.0 2.8.0
@types/node 26.6.5 26.6.6
marked 18.1.1 18.1.2

Updates @capacitor/android from 8.5.3 to 8.6.0

Release notes

Sourced from @​capacitor/android's releases.

8.6.0

8.6.0 (2026-10-28)

Bug Fixes

  • android: keep callbacks on non-public base classes from R8 (02e43f8)
  • android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
  • cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
  • cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
  • cli: report npm 12 blocked install scripts in doctor and migrate (#8655) (841017a)

Features

  • android: recognize @​capacitor-community/ssl-pinning for cert pinning (#8669) (19d2a40)
  • cli: recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666) (50a3c51)

Reverts

  • Revert "chore(ios): add App/CapApp-SPM/Package.resolved to .gitignore (#8649)" (175c933), closes #8649
Changelog

Sourced from @​capacitor/android's changelog.

8.6.0 (2026-10-28)

Bug Fixes

  • android: keep callbacks on non-public base classes from R8 (02e43f8)
  • android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
  • cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
  • cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
  • cli: report npm 12 blocked install scripts in doctor and migrate (#8655) (841017a)

Features

  • android: recognize @​capacitor-community/ssl-pinning for cert pinning (#8669) (19d2a40)
  • cli: recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666) (50a3c51)

Reverts

  • Revert "chore(ios): add App/CapApp-SPM/Package.resolved to .gitignore (#8649)" (175c933), closes #8649
Commits
  • ef3ce6e Release 8.6.0
  • 4b40f4b chore: add Backstage catalog-info.yaml
  • 463225f fix(cli): bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674)
  • d19f1ea fix(cli): redact sensitive values from telemetry payloads (#8665)
  • 02e43f8 fix(android): keep callbacks on non-public base classes from R8
  • 19d2a40 feat(android): recognize @​capacitor-community/ssl-pinning for cert pinning (#...
  • 50a3c51 feat(cli): recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666)
  • 841017a fix(cli): report npm 12 blocked install scripts in doctor and migrate (#8655)
  • acaa9e6 docs: minor correction (#8660)
  • 9dc5aeb fix(android): keep plugin annotation types from R8 full mode (#8646)
  • Additional commits viewable in compare view

Updates @capacitor/cli from 8.5.3 to 8.6.0

Release notes

Sourced from @​capacitor/cli's releases.

8.6.0

8.6.0 (2026-10-28)

Bug Fixes

  • android: keep callbacks on non-public base classes from R8 (02e43f8)
  • android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
  • cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
  • cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
  • cli: report npm 12 blocked install scripts in doctor and migrate (#8655) (841017a)

Features

  • android: recognize @​capacitor-community/ssl-pinning for cert pinning (#8669) (19d2a40)
  • cli: recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666) (50a3c51)

Reverts

  • Revert "chore(ios): add App/CapApp-SPM/Package.resolved to .gitignore (#8649)" (175c933), closes #8649
Changelog

Sourced from @​capacitor/cli's changelog.

8.6.0 (2026-10-28)

Bug Fixes

  • android: keep callbacks on non-public base classes from R8 (02e43f8)
  • android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
  • cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
  • cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
  • cli: report npm 12 blocked install scripts in doctor and migrate (#8655) (841017a)

Features

  • android: recognize @​capacitor-community/ssl-pinning for cert pinning (#8669) (19d2a40)
  • cli: recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666) (50a3c51)

Reverts

  • Revert "chore(ios): add App/CapApp-SPM/Package.resolved to .gitignore (#8649)" (175c933), closes #8649
Commits
  • ef3ce6e Release 8.6.0
  • 4b40f4b chore: add Backstage catalog-info.yaml
  • 463225f fix(cli): bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674)
  • d19f1ea fix(cli): redact sensitive values from telemetry payloads (#8665)
  • 02e43f8 fix(android): keep callbacks on non-public base classes from R8
  • 19d2a40 feat(android): recognize @​capacitor-community/ssl-pinning for cert pinning (#...
  • 50a3c51 feat(cli): recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666)
  • 841017a fix(cli): report npm 12 blocked install scripts in doctor and migrate (#8655)
  • acaa9e6 docs: minor correction (#8660)
  • 9dc5aeb fix(android): keep plugin annotation types from R8 full mode (#8646)
  • Additional commits viewable in compare view

Updates @capacitor/core from 8.5.3 to 8.6.0

Release notes

Sourced from @​capacitor/core's releases.

8.6.0

8.6.0 (2026-10-28)

Bug Fixes

  • android: keep callbacks on non-public base classes from R8 (02e43f8)
  • android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
  • cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
  • cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
  • cli: report npm 12 blocked install scripts in doctor and migrate (#8655) (841017a)

Features

  • android: recognize @​capacitor-community/ssl-pinning for cert pinning (#8669) (19d2a40)
  • cli: recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666) (50a3c51)

Reverts

  • Revert "chore(ios): add App/CapApp-SPM/Package.resolved to .gitignore (#8649)" (175c933), closes #8649
Changelog

Sourced from @​capacitor/core's changelog.

8.6.0 (2026-10-28)

Bug Fixes

  • android: keep callbacks on non-public base classes from R8 (02e43f8)
  • android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
  • cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
  • cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
  • cli: report npm 12 blocked install scripts in doctor and migrate (#8655) (841017a)

Features

  • android: recognize @​capacitor-community/ssl-pinning for cert pinning (#8669) (19d2a40)
  • cli: recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666) (50a3c51)

Reverts

  • Revert "chore(ios): add App/CapApp-SPM/Package.resolved to .gitignore (#8649)" (175c933), closes #8649
Commits
  • ef3ce6e Release 8.6.0
  • 4b40f4b chore: add Backstage catalog-info.yaml
  • 463225f fix(cli): bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674)
  • d19f1ea fix(cli): redact sensitive values from telemetry payloads (#8665)
  • 02e43f8 fix(android): keep callbacks on non-public base classes from R8
  • 19d2a40 feat(android): recognize @​capacitor-community/ssl-pinning for cert pinning (#...
  • 50a3c51 feat(cli): recognize @​capacitor-community/ssl-pinning for auto cert copy (#8666)
  • 841017a fix(cli): report npm 12 blocked install scripts in doctor and migrate (#8655)
  • acaa9e6 docs: minor correction (#8660)
  • 9dc5aeb fix(android): keep plugin annotation types from R8 full mode (#8646)
  • Additional commits viewable in compare view

Updates @tauri-apps/plugin-notification from 2.7.0 to 2.8.0

Release notes

Sourced from @​tauri-apps/plugin-notification's releases.

notification-js v2.8.0

[2.8.0]

feat

  • f36ba7ba (#3282 by @​Et3rnel) Added chronometer support for Android notifications with when, usesChronometer, and chronometerCountDown options. This allows displaying an automatically updating elapsed time counter directly in the notification, useful for time-tracking apps, ongoing calls, or timers.
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.8.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 27.0kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.8.0
npm notice filename: tauri-apps-plugin-notification-2.8.0.tgz
npm notice package size: 11.4 kB
npm notice unpacked size: 65.7 kB
npm notice shasum: b37835641011d62d25bd923310d9e6217a1e5685
npm notice integrity: sha512-BB9Kk2emiNHyM[...]f0O8rtdW2F2dw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529333733
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.8.0

notification v2.8.0

[2.8.0]

... (truncated)

Commits
  • 6e2e7e4 publish new versions (#3070)
  • 9a2c98f temp: remove updater changefiles
  • 4a2ecb6 chore(deps): update rkyv, closes #3196
  • 31415ef docs(shell): update example to include Encoding usage in Command::spawn (#3...
  • 04b33ea chore(deps): update dependency typescript-eslint to v8.50.1 (#3181)
  • 54e21f1 chore(deps): update dependency rollup to v4.54.0 (#3179)
  • d528c88 chore(deps): update dependency rollup to v4.53.5 (#3172)
  • 69146fa chore(deps): update dependency rollup to v4.53.4 (#3167)
  • 9f68f2d chore(deps): update dependency typescript-eslint to v8.50.0 (#3170)
  • 3d0d2e0 fix(opener): ignore inAppBrowser on desktop (#3163)
  • Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates marked from 18.1.1 to 18.1.2

Release notes

Sourced from marked's releases.

v18.1.2

18.1.2 (2026-10-26)

Bug Fixes

  • allow a tab or end of input after a type 6 html block tag name (#4128) (e09c40d)
  • apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145) (5d8e234)
  • cli: await config functions before parsing (#4138) (3a11ad1)
  • cli: create no-clobber output files atomically (#4135) (e7c4f64)
  • do not continue a block quote paragraph from a whitespace-only line (#4134) (42f34a8)
  • expand a tab after the block quote marker to the next tab stop (#4110) (2d3899b)
  • honor per-call async options when composing hooks (#4139) (379be9d)
  • keep a line starting with # but no space in the list item (#4127) (6b63189)
  • keep duplicate link definitions in the tokens (#4132) (2784acc)
  • keep lazy lines after a list in a nested blockquote (#4137) (38c7e55)
  • keep lazy setext underlines in list items as text (#4126) (398234c)
  • render nested image alt formatting as plain text (#4131) (15f59bb)
  • stop an unclosed inline raw tag from unescaping later blocks (#4130) (4562b6f)

Performance Improvements

  • ~16% faster parsing by skipping em/strong masking for runs without *, _ or ~ (#4142) (f0fd3e0)
Commits
  • 5beecae chore(release): 18.1.2 [skip ci]
  • c1e6ca1 chore(deps): update deps (#4168)
  • 3a01ac4 chore: test:redos -> test:recheck (#4167)
  • 15f59bb fix: render nested image alt formatting as plain text (#4131)
  • 2d3899b fix: expand a tab after the block quote marker to the next tab stop (#4110)
  • e09c40d fix: allow a tab or end of input after a type 6 html block tag name (#4128)
  • 398234c fix: keep lazy setext underlines in list items as text (#4126)
  • 6b63189 fix: keep a line starting with # but no space in the list item (#4127)
  • 5d8e234 fix: apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145)
  • 3a11ad1 fix(cli): await config functions before parsing (#4138)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev group with 6 updates
0c8beae 
Bumps the dev group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/android](https://github.com/ionic-team/capacitor) | `8.5.3` | `8.6.0` |
| [@capacitor/cli](https://github.com/ionic-team/capacitor) | `8.5.3` | `8.6.0` |
| [@capacitor/core](https://github.com/ionic-team/capacitor) | `8.5.3` | `8.6.0` |
| [@tauri-apps/plugin-notification](https://github.com/tauri-apps/plugins-workspace) | `2.7.0` | `2.8.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |
| [marked](https://github.com/markedjs/marked) | `18.1.1` | `18.1.2` |


Updates `@capacitor/android` from 8.5.3 to 8.6.0
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.3...8.6.0)

Updates `@capacitor/cli` from 8.5.3 to 8.6.0
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.3...8.6.0)

Updates `@capacitor/core` from 8.5.3 to 8.6.0
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@8.5.3...8.6.0)

Updates `@tauri-apps/plugin-notification` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.7.0...log-v2.8.0)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `marked` from 18.1.1 to 18.1.2
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.1.1...v18.1.2)

---
updated-dependencies:
- dependency-name: "@capacitor/android"
  dependency-version: 8.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: "@capacitor/cli"
  dependency-version: 8.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: "@capacitor/core"
  dependency-version: 8.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: "@tauri-apps/plugin-notification"
  dependency-version: 2.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: marked
  dependency-version: 18.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-4eaeb227d9 branch November 10, 2026 10:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants