Skip to content

chore(deps): bump the cli-dependencies group across 1 directory with 9 updates - #162

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-fe2a5c452f
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-fe2a5c452f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the cli-dependencies group with 9 updates in the /cli directory:

Package From To
@clack/prompts 1.7.0 1.8.1
oauth4webapi 3.8.7 3.8.8
yaml 2.9.0 2.9.1
eslint-plugin-no-relative-import-paths 1.6.1 1.7.3
knip 6.32.2 6.42.1
oxfmt 0.71.0 0.74.0
oxlint 1.86.0 1.89.0
oxlint-tsgolint 7.0.2003 7.0.2004
typescript 6.0.3 7.0.2

Updates @clack/prompts from 1.7.0 to 1.8.1

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

@​clack/prompts@​1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Changelog

Sourced from @​clack/prompts's changelog.

1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Commits

Updates oauth4webapi from 3.8.7 to 3.8.8

Release notes

Sourced from oauth4webapi's releases.

v3.8.8

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Changelog

Sourced from oauth4webapi's changelog.

3.8.8 (2026-09-05)

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Commits
  • 916b979 chore(release): 3.8.8
  • eb564a4 test: accept WebCrypto DOMException rejections on Node 20
  • fbe6c02 perf: cache imported issuer verification keys by algorithm
  • e64849e perf: coalesce compatible in-flight JWKS requests
  • 53900cc refactor: consolidate ID Token validation policy
  • edbebeb fix: validate ID Token subjects and DPoP identifiers as strings
  • bd7fcb0 fix: decode HTTP authentication quoted pairs correctly
  • 3414db5 fix: accept space runs in Bearer and DPoP credentials
  • 656d762 fix: honor explicit auth-time skips in authorization responses
  • b898ba5 fix: forward arguments to AVA test runners
  • Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

  • Limit recursive merge aliases (#685, #713)
  • Simplify line unfolding during quoted string parsing (#714)
Commits

Updates eslint-plugin-no-relative-import-paths from 1.6.1 to 1.7.3

Release notes

Sourced from eslint-plugin-no-relative-import-paths's releases.

1.7.3

No release notes provided.

1.7.2

Re-release

1.7.1

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@1.7.0...1.7.1

1.7.0

What's Changed

New Contributors

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-no-relative-import-paths since your current version.


Updates knip from 6.32.2 to 6.42.1

Release notes

Sourced from knip's releases.

Release 6.42.1

  • fix(semantic-release): resolve shareable configs from extends (#2159) (4c4a5ece9148cf621f3a6e091fd3550b18f6e19a) - thanks @​giaBaoJS!
  • fix(jest): load projects entries as Jest configs (#2167) (4c22593724460890e4492ba86119d0188127f2ba) - thanks @​Cayan!
  • Update npmx.dev snapshot (4b19797b77a559f7190e9119b3a156e1ac6aef9f)
  • fix(tailwind): track packages referenced from CSS url() (#2166) (949da00abf419c1eeabdab1541ce7e5c312371b9) - thanks @​agustincastaing!
  • Add .otf to foreign file extensions (fcff4db0b88d6282569743cd779aec5a5df99862)
  • Match quoted SCSS url() values within a single line (2c5c2a2efab8f08be538bfe1f40982cb6f0fca3c)
  • fix(bun): treat bun test arguments as path filters (#2165) (5f3a7fb526d3eca7561aacfc9d0ac60056525206) - thanks @​jakeleventhal!
  • fix(vitest): use default test entries when config has no test key (#2170) (7ee576ccd461f719b533e3783a5b58391ce89e91) - thanks @​fixfon!

Release 6.42.0

  • fix: add bun 1.4.3 check subcommand (#2131) (09129b8aaa554ffae2ff8f42a5ff4d6994eb7759) - thanks @​NimmLor!
  • Detect pnpm workspaces correctly around packages: (resolve #2133, close #2134) (d1cc0928be54e6cac9668460d9f6a21e3a94f818)
  • fix(github-actions): resolve working-directory nested under checkout path (#2136) (87e051e45f12c107cc25ed08bba962b95bb23b51) - thanks @​kenny-ish!
  • fix(nx): track local generator and executor entry points (#2117) (#2121) (558407f51b5fdf4460275b69950676e7bace35d5) - thanks @​DreamLongYT!
  • Update dependency bun to v1.4.3 (#2137) (71f90bf6d5fb2675430f60416e403851f9cb2cfe) - thanks @​renovate[bot]!
  • docs(react-router): note to run react-router typegen before Knip (#2140) (f21ce9a9f1e3264cad1b763cf31ec2c177fb8656) - thanks @​MannXo!
  • fix: normalize scoped binary names (close #2143) (c8509c4e45e1c343da707c26877a0a6584f6bc11)
  • Clarify plugin implementation boundaries (c5a67f59d351e8d26dc6ecbbd3c3193e313772a4)
  • fix(jest): treat mocked and required dependencies as used (#2141) (3eaf1ba16045a3ac22f0717c4f1252312298bb76) - thanks @​TkDodo!
  • fix: preserve root-only plugins for trailing-slash cwd (#2139) (7f0db0e7670bfd18fab081b522a104f787829f7d) - thanks @​sean0407!
  • fix(nx): resolve run-commands script paths from the target cwd (#2151) (516bd9a324303653978528f582287c857846fcc8) - thanks @​JeanBeaurepaire!
  • Resolve Nx run-commands loader paths from the target cwd (fa8ca13e1345115d30122900ab68db7339487502)
  • Add @​solidjs/vite-plugin plugin (#2144) (579a88d306429694be43590efb50cb72067551ba) - thanks @​everton-dgn!
  • feat: add filesystem-routing plugin (#2145) (1abd9e1875bae36b0baf77f5864aab849d1528a8) - thanks @​everton-dgn!
  • Support tags in line comments (resolve #1924) (5abef4846e20f09fd4d0ee8dc2513ce50b616cdb)
  • Keep resolveFromAST to static values in plugin guide (4cd353fd9ecb780228a63069080586a46ba6a8f2)
  • fix(solidjs-vite-plugin): keep entry overrides in production (#2155) (e4b5f890787da07824cc174cb624396f2133ff06) - thanks @​everton-dgn!
  • feat(angular): resolve styleUrl and styleUrls of @​Component (#2157) (c20d4d720c586c9c5dc6e3d1a6ea60c557688bfa) - thanks @​Cayan!
  • Update npmx.dev snapshot (59eb873f3beecf40b7aed9579bd29e1ab8b631f0)
  • fix(next): recognize Turbopack alias targets (#2156) (1d44f6a1a39c5557c1e215c7cf9db17937967344) - thanks @​jakeleventhal!
  • fix: preserve re-exports from framework entries (#2154) (263ce20408a77b2473c555f304ad3b55c696b6a6) - thanks @​jakeleventhal!
  • feat(solidjs-vite-plugin): follow Solid's SSR and client mode entry rules (#2148) (d711231eae14d8ecac562d73078125f3b30dc8fd) - thanks @​everton-dgn!
  • feat(filesystem-routing): read route options from Vite configs (#2149) (585f206ca52d54e30f2068c818e1b33b50085459) - thanks @​everton-dgn!
  • feat(filesystem-routing): resolve routes from the Vite root (#2150) (8cc0cb0c9ff09463cad30817c8cf78cbc48b7ed6) - thanks @​everton-dgn!
  • fix: track namespace members in Promise.all imports (#2162) (3f17cdfce7a0f90e2599a7074291c4c875fe8244) - thanks @​everton-dgn!
  • Update a few dependencies (161dbed3ccffa574e3a9493ddb20842eefa26af8)
  • Fix Solid setup fixture coverage (ebe4180785667f6ff85c1e6ce2a11226713b2d5a)
  • Migrate shell script parsing to unbash v6 (f86044c6760ac4f27e564f15feeae907cba3d297)
  • Add sponsors: @​pennylane-hq, @​agentscore, @​oblique-security (thank you!) (57ff23eb430aaece73e02574923cabc6016a920b)
  • Stop pairing Promise.all imports and bindings after a spread (5bd2c64eaf92f82a316d8fa6551acdb1d6c48c32)
  • Update some stats (dd02ddeb235dd516cf93db99dda2180b0eb09a97)
  • fix(nx): read karmaConfig from target options (#2164) (4e1e4bc18f6d2f2705d729c375a20bd1679b8c0f) - thanks @​Cayan!
  • Add tsrs plugin (#2163) (ba09126c023a2c408de8d7dae3bf6ab97e420966) - thanks @​jakeleventhal!
  • Drop redundant containingFilePath from plugin config inputs (ffb6caf02891d29eee41c7a0ecf147312dbe7205)
  • Resolve Nx target option configs from the workspace root (52c5233aa905124c5b30c0bb7f9b0b25cd4260c6)

Release 6.41.0

  • Add Flue plugin (#2124) (c52737d45ff008d6d96d4c2d4182048a2aa64602) - thanks @​LuisFigueroaG!
  • Match all React Native config file extensions (#2125) (898fdffb37ae0bdb3d2653038eb10c2e01edf983) - thanks @​LuisFigueroaG!

... (truncated)

Commits
  • ee32ee6 Release knip@6.42.1
  • 7ee576c fix(vitest): use default test entries when config has no test key (#2170)
  • 5f3a7fb fix(bun): treat bun test arguments as path filters (#2165)
  • 2c5c2a2 Match quoted SCSS url() values within a single line
  • fcff4db Add .otf to foreign file extensions
  • 949da00 fix(tailwind): track packages referenced from CSS url() (#2166)
  • 4c22593 fix(jest): load projects entries as Jest configs (#2167)
  • 4c4a5ec fix(semantic-release): resolve shareable configs from extends (#2159)
  • 8aa7d0e Release knip@6.42.0
  • 52c5233 Resolve Nx target option configs from the workspace root
  • Additional commits viewable in compare view

Updates oxfmt from 0.71.0 to 0.74.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.74.0

🐛 Bug Fixes

  • e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#27957) (leaysgur)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#27955) (leaysgur)
  • 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#27948) (leaysgur)
  • 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#27947) (leaysgur)
  • 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#27946) (leaysgur)
  • c22a9b2 formatter: Treat static block with only empty statements as empty (#27945) (leaysgur)
  • d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#27823) (leaysgur)
  • c4c1727 formatter/sort_imports: Keep comments after the last import (#27822) (leaysgur)
  • a64677e formatter: Print JSDoc embedded snippets with LF (#27821) (leaysgur)
  • 2c1cc20 formatter: Keep comment only Vue bindings as-is (#27820) (leaysgur)
  • 1bf236d formatter/sort_imports: Do not use comments as import source (#27819) (leaysgur)
  • 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#27818) (leaysgur)
  • 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#27814) (leaysgur)
  • a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#27812) (leaysgur)
  • de110ce formatter: Keep more parens around TSInstantiationExpression (#27811) (leaysgur)
  • 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#27785) (leaysgur)
  • 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#27780) (leaysgur)
  • 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#27778) (leaysgur)
  • 5b2acb0 formatter_core: Report error position releative to CRLF source (#27777) (leaysgur)
  • c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#27776) (leaysgur)
  • 3a980c9 formatter_toml: Handle BOM like other languages (#27775) (leaysgur)
  • 97c9fc4 oxfmt: Handle BOM in config JSON (#27774) (leaysgur)
  • 28eb4a7 oxfmt: Print trailing newline for --list-different (#27773) (leaysgur)
  • d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#27737) (leaysgur)
  • 6a95ec1 formatter: Keep comment position on holey array (#27730) (leaysgur)
  • 54769da formatter: Break after dangling line comment in holey array (#27729) (leaysgur)
  • 99077ef formatter_json: Reject unary expressions other than signed numbers (#27728) (leaysgur)
  • 22cd4cd formatter_json: Handle holey array and comments (#27727) (leaysgur)
  • 644ca1c formatter: Do not indent logical chains whose right sides all inline (#27667) (leaysgur)
  • a07a0fb formatter: Wrap comment-only JSX expression container in a group (#27666) (leaysgur)

⚡ Performance

  • e220293 formatter: Check only the operator suppression mark in is_quiet (#27952) (leaysgur)
  • e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#27559) (leaysgur)
  • a342f7e formatter: Skip comment handling for nodes with no comment near them (#27557) (leaysgur)
  • d8ce750 formatter: Write string literals with swapped quotes into the arena (#27558) (Yuji Sugiura)
  • 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#27561) (leaysgur)
  • 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#27673) (leaysgur)

📚 Documentation

  • 1325225 oxfmt: Update useless comment prefix (#27956) (leaysgur)
  • d0dd140 formatter: Note lossy cooked round-trip in template embeds (#27944) (leaysgur)
  • 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#27824) (leaysgur)

... (truncated)

Commits
  • 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
  • 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
  • a495e82 feat(oxfmt): support associations config to specify language over filepath ...
  • 408d87f docs(oxfmt): simplify oxfmtrc docs (#27432)
  • 5db28fa feat(oxfmt): support Astro via prettier-plugin-astro@1.x (#27386)
  • 902e188 docs(oxfmt): update how embeddedLanguageFormatting option works (#27362)
  • 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
  • See full diff in compare view

Updates oxlint from 1.86.0 to 1.89.0

Release notes

Sourced from oxlint's releases.

oxlint v1.89.0

💥 BREAKING CHANGES

  • e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
  • a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

  • 770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)
  • ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)
  • d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)
  • e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)
  • 7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)
  • d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)
  • 199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)
  • 780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)
  • 6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)
  • b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)
  • c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)
  • 6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

  • 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • 326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)
  • f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)
  • 00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)
  • 9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)
  • 01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)
  • 7f474d5 linter/eslint/no-loop-func: Detect writes after the loop (#27754) (camc314)
  • 4b7fea6 linter/eslint/block-scoped-var: Ignore declarations without writes (#27760) (camc314)
  • 2947917 linter/eslint/no-lonely-if: Check final else blocks in else-if chains (#27759) (camc314)
  • fc039b5 linter/eslint/sort-imports: Check imports after other statements (#27749) (camc314)
  • 1acba97 linter/unicorn/prefer-at: Report slice index reads once (#27762) (camc314)
  • 6190e26 linter/eslint/prefer-arrow-callback: Ignore functions used as conditional tests (#27533) (Anzal Husain Abidi)
  • b3cdaaf linter/eslint/sort-keys: Check computed identifier names (#27748) (camc314)
  • 170e608 linter/unicorn/prefer-native-coercion-functions: Check object methods and function properties (#27750) (camc314)
  • 9261df7 linter/unicorn/prefer-string-raw: Check object property values (#27758) (camc314)
  • ddea86b linter/eslint/prefer-template: Report separate nested concatenations (#27764) (camc314)
  • 2c67197 linter/eslint/no-unused-vars: Count conditional calls in sequences as uses (#27755) (camc314)
  • 7f22fa0 linter/unicorn/prefer-regexp-test: Check logical operands in boolean contexts (#27761) (camc314)
  • 3c44398 linter/eslint/class-methods-use-this: Count this in parameter defaults (#27756) (camc314)
  • d85923f linter/eslint/no-param-reassign: Report rest parameter writes (#27765) (camc314)
  • 8ea47bb linter/unicorn/prefer-type-error: Handle parenthesized type checks (#27766) (camc314)
  • e96856c linter/unicorn/catch-error-name: Check unused underscore-prefixed names (#27751) (camc314)
  • d8ca399 linter/unicorn/no-array-callback-reference: Ignore callback factory calls (#27763) (camc314)
  • 1267ab8 linter/eslint/max-params: Count rest parameters (#27757) (camc314)
  • 9ff25c3 linter/eslint/no-useless-assignment: Report dead stores to function parameters (#27735) (camc314)
  • ee5e730 linter/eslint/no-setter-return: Check setters in property descriptors (#27731) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.89.0] - 2026-10-19

🐛 Bug Fixes

  • 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)

[1.88.0] - 2026-10-13

🚀 Features

  • 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)
Commits
  • 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
  • 9a424c2 fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)
  • 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
  • 3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
  • 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
  • See full diff in compare view

Updates oxlint-tsgolint from 7.0.2003 to 7.0.2004

Release notes

Sourced from oxlint-tsgolint's releases.

v7.0.2004

What's Changed

New Contributors

Full Changelog: oxc-project/tsgolint@v7.0.2003...v7.0.2004

Commits
  • a612891 fix: restore line disable comments for type-aware diagnostics (#1271)
  • fc7068f chore(deps): update crate-ci/typos action to v1.51.1 (#1269)
  • 8d4c05c chore(deps): update crate-ci/typos action to v1.51.0 (#1268)
  • 6d20f35 fix(no-unnecessary-type-parameters): parenthesize constraint in optional tupl...
  • 322b385 fix(no-deprecated): include reasons for variable declarations (#1266)
  • db76296 fix(no-unsafe-return): avoid panic on JSDoc callbacks without returns (#1264)
  • 24b18b4 fix(no-floating-promises): respect safe-call declaration sources (#1261)
  • c8f5cbc chore(deps): update npm packages (#1259)
  • 93fe3a5 chore(deps): update taiki-e/install-action action to v2.87.22 (#1258)
  • dd0a306 chore(deps): update dprint plugins (#1256)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a n...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-fe2a5c452f branch 5 times, most recently from 8ca9fa6 to b547722 Compare October 22, 2026 14:32
@albert20260301

Copy link
Copy Markdown
Contributor

Required verification fails at src/ui/prompts.ts:70: Type 'string | symbol' is not assignable to type 'string' (job log). This replacement still hits the TypeScript 7 compatibility blocker tracked on #148; the dependency upgrade is not ready for approval.

…9 updates

Bumps the cli-dependencies group with 9 updates in the /cli directory:

| Package | From | To |
| --- | --- | --- |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.7.0` | `1.8.1` |
| [oauth4webapi](https://github.com/panva/oauth4webapi) | `3.8.7` | `3.8.8` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |
| [eslint-plugin-no-relative-import-paths](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths) | `1.6.1` | `1.7.3` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.42.1` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.71.0` | `0.74.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.86.0` | `1.89.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2003` | `7.0.2004` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@clack/prompts` from 1.7.0 to 1.8.1
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.8.1/packages/prompts)

Updates `oauth4webapi` from 3.8.7 to 3.8.8
- [Release notes](https://github.com/panva/oauth4webapi/releases)
- [Changelog](https://github.com/panva/oauth4webapi/blob/main/CHANGELOG.md)
- [Commits](panva/oauth4webapi@v3.8.7...v3.8.8)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `eslint-plugin-no-relative-import-paths` from 1.6.1 to 1.7.3
- [Release notes](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths/releases)
- [Commits](MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.3)

Updates `knip` from 6.32.2 to 6.42.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.42.1/packages/knip)

Updates `oxfmt` from 0.71.0 to 0.74.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.74.0/npm/oxfmt)

Updates `oxlint` from 1.86.0 to 1.89.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint)

Updates `oxlint-tsgolint` from 7.0.2003 to 7.0.2004
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v7.0.2003...v7.0.2004)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: eslint-plugin-no-relative-import-paths
  dependency-version: 1.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: knip
  dependency-version: 6.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oauth4webapi
  dependency-version: 3.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: oxfmt
  dependency-version: 0.73.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint
  dependency-version: 1.88.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2004
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: cli-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-fe2a5c452f branch from b547722 to e44a6d4 Compare October 24, 2026 20:22
@dependabot @github

dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 28, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/cli/cli-dependencies-fe2a5c452f branch October 28, 2026 19:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant