build(deps-dev): bump the development-deps group across 1 directory with 5 updates

[dependabot]

Bumps the development-deps group with 5 updates in the / directory:

Package	From	To
lint-staged	17.0.8	17.1.0
circom_tester	0.0.5	0.0.24
tsx	4.23.0	4.23.1
autoprefixer	10.5.2	10.5.4
postcss	8.5.16	8.5.20

Updates lint-staged from 17.0.8 to 17.1.0

Release notes

Sourced from lint-staged's releases.

v17.1.0

Minor Changes

• #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

  Before:

  Size of node_modules/ after installing: 1561.7 kB with 29 packages.

  Fancy interactive spinners, but output dynamically changes:

  ✔ Backed up original state in git stash (0b191303)
  ✔ Running tasks for staged files...
  ✔ Staging changes from tasks...
  ✔ Cleaning up temporary files...

  After:

  Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

  Simpler but more explicit output:

  ⋯ Backing up original state…
  ✔ Done backing up original state (35b38ed1)!
  ⋯ Running tasks for staged files…
      *.js — 1 file
        ⋯ oxlint --fix
      *.{json,md} — 1 file
        ⋯ oxfmt --write
  ✔ oxfmt --write
  ✔ oxlint --fix
  ✔ Done running tasks for staged files!
  ⋯ Staging changes from tasks…
  ✔ Done staging changes from tasks!
  ⋯ Cleaning up temporary files…
  ✔ Done cleaning up temporary files!

Patch Changes

• #1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

• #1818 efb23a2 - Console output colors are enabled/disabled more consistently.

• #1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

Changelog

Sourced from lint-staged's changelog.

17.1.0

Minor Changes

• #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

  Before:

  Size of node_modules/ after installing: 1561.7 kB with 29 packages.

  Fancy interactive spinners, but output dynamically changes:

  ✔ Backed up original state in git stash (0b191303)
  ✔ Running tasks for staged files...
  ✔ Staging changes from tasks...
  ✔ Cleaning up temporary files...

  After:

  Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

  Simpler but more explicit output:

  ⋯ Backing up original state…
  ✔ Done backing up original state (35b38ed1)!
  ⋯ Running tasks for staged files…
      *.js — 1 file
        ⋯ oxlint --fix
      *.{json,md} — 1 file
        ⋯ oxfmt --write
  ✔ oxfmt --write
  ✔ oxlint --fix
  ✔ Done running tasks for staged files!
  ⋯ Staging changes from tasks…
  ✔ Done staging changes from tasks!
  ⋯ Cleaning up temporary files…
  ✔ Done cleaning up temporary files!

Patch Changes

• #1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

• #1818 efb23a2 - Console output colors are enabled/disabled more consistently.

... (truncated)

Commits

• dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
• aad7f3b chore(changeset): release
• 11b1d5c Merge pull request #1818 from lint-staged/fixes
• efb23a2 fix: enable colors globally based on option
• 26112a1 fix: function task failure kills other tasks, unless --continue-on-error wa...
• 9b98b7f fix: handle error when calculating hash of unstaged changes
• d43432b fix: do not allow NaN concurrency
• bd4dcbf fix: do not drop backup stash when restoring unstaged changes fails and using...
• 9153a77 Merge pull request #1816 from lint-staged/replace-listr2
• 290e618 refactor: use common identity function
• Additional commits viewable in compare view

Updates circom_tester from 0.0.5 to 0.0.24

Release notes

Sourced from circom_tester's releases.

v0.0.24

What's Changed

• Fix detection of main component with public signals by @​OBrezhniev in iden3/circom_tester#34

Full Changelog: iden3/circom_tester@v0.0.23...v0.0.24

v0.0.23

What's Changed

• Add missing --O2 and --O2round <simplification_rounds> options by @​OBrezhniev in iden3/circom_tester#33

Full Changelog: iden3/circom_tester@v0.0.22...v0.0.23

v0.0.22

What's Changed

• Refactor by @​OBrezhniev in iden3/circom_tester#30
• Add support for autogenerating main component for tests by @​OBrezhniev in iden3/circom_tester#32

Full Changelog: iden3/circom_tester@v0.0.21...v0.0.22

v0.0.21

What's Changed

• Adding the get output function by @​hecmas in iden3/circom_tester#29
• Add workflow of publishing package to NPM & update deps by @​Kolezhniuk in iden3/circom_tester#25

New Contributors

• @​hecmas made their first contribution in iden3/circom_tester#29
• @​Kolezhniuk made their first contribution in iden3/circom_tester#25

Full Changelog: iden3/circom_tester@v0.0.20...v0.0.21

Commits

• de72423 Bump version
• 01bef04 Fix detection of main component with public signals (#34)
• 96d79ff Bump version
• 6e1d4f3 Add missing --O2 and --O2round <simplification_rounds> options (#33)
• a719ac8 Bump version
• 2dd621f Add support for autogenerating main component for tests. Configurable with te...
• d2c89cf Refactor and add support for new circom flags (#30)
• 67082a8 Bump version
• b751872 Add workflow of publishing package to NPM & update deps (#25)
• 888f7dd Merge pull request #29 from iden3/feature/get-output
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by obrezhniev, a new releaser for circom_tester since your current version.

Updates tsx from 4.23.0 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 79fddde fix(watch): treat script and dependency paths literally
• e818ad6 perf: index transform cache lazily
• cdcc623 perf: map Node TypeScript formats directly
• d067938 perf: load esbuild lazily in CLI
• 95d0672 fix(watch): avoid clearing piped output
• 6fd4607 docs: add per-page metadata
• f4176d8 docs: generate sitemap
• 8d4ffc2 fix: support tsImport after global preload
• f0e89b2 docs: document Node's public type-stripping API vs internal loader path
• f8992f1 perf: use sync module hooks on Node v22.22.3+
• See full diff in compare view

Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

• Fixed prefixed rule duplication (by @​xianjianlf2).

10.5.3

• Fixed brackets and gradient parser (@​alanturing881).

Changelog

Sourced from autoprefixer's changelog.

10.5.4

• Fixed prefixed rule duplication (by @​xianjianlf2).

10.5.3

• Fixed brackets and gradient parser (@​alanturing881).

Commits

• 4cad00f Release 10.5.4 version
• e62a4b1 Update CI config
• c8f0d0a Update dependencies
• cae3577 Move back to latest pnpm 11
• fd31eb3 Fix duplicated prefixed selectors on reformatted CSS (#1552)
• 958d390 Release 10.5.3 version
• 21d2adb Fix gradient parser
• f7ddae9 Fix bracket parser
• 10ea5e7 Update dependencies and remove patch
• b6e8a2a Update Dev Container
• Additional commits viewable in compare view

Updates postcss from 8.5.16 to 8.5.20

Release notes

Sourced from postcss's releases.

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

Changelog

Sourced from postcss's changelog.

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

Commits

• c4ac725 Release 8.5.20 version
• c30586d Fix missing space when AtRule#params is set after parsing (#2113)
• 5bfc3b9 Update dependencies
• 24733fd Move back to latest 11 pnpm
• 728127c Update pnpm to check that CI is fixed
• 806fe21 Rebuild nodes from another PostCSS copy in Warning (#2112)
• 337cb7e Improve CI security
• 7a8ca2d Remove patch after updating dependency
• 9543b22 Release 8.5.19 version
• 3d13bf9 Fix CI on Windows too
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.