Skip to content

chore(deps): bump smol-toml from 1.6.1 to 1.8.0 - #4311

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/smol-toml-1.8.0
Open

chore(deps): bump smol-toml from 1.6.1 to 1.8.0#4311
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/smol-toml-1.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps smol-toml from 1.6.1 to 1.8.0.

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

⚠️ Includes a fix for GHSA-7w5x-hrqm-74c2

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

v1.7.0

This version slightly changes the behaviour of stringify: integers beyond the safe range are always emitted as float numbers.

String decode logic has been rewritten, it is a bit faster now and uses a single-pass approach instead of a dual-pass approach as it did previously. The code should be a bit smaller too, though I didn't actually measure that.

The package is now published with source-maps, declaration-maps, and a copy of the original TypeScript source files. This will improve your DX if you're like me and like Ctrl+Click'ing things a lot. ;)

What's Changed

New Contributors

Full Changelog: squirrelchat/smol-toml@v1.6.1...v1.7.0

Commits
  • 6d0f477 chore: bump version
  • 97e9713 docs: mention temporal api
  • 7a3068d perf: ubench opt for instanceof Date
  • 7e8c09a feat: stringify temporal
  • 19239d0 chore: bump version
  • 5f55c3a chore: revert sourcemap publishing
  • 5c26f1b chore: update benchmarks
  • 92832d2 refactor: better logic orchestration in structs
  • 2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
  • e6017c4 ci: use staged publish
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump smol-toml from 1.6.1 to 1.8.0
5bf542c 
Bumps [smol-toml](https://github.com/squirrelchat/smol-toml) from 1.6.1 to 1.8.0.
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.6.1...v1.8.0)

---
updated-dependencies:
- dependency-name: smol-toml
  dependency-version: 1.8.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Type: Dependencies Pull requests that update a dependency file label Sep 11, 2026
@microsoft-github-policy-service microsoft-github-policy-service Bot added the AutoMerge 🔁 Automatically merge when PR requirements met label Sep 11, 2026
@github-actions

github-actions Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bundle size report

Tree-shaken production Metro bundles. Component costs are relative to their platform shell; shell costs are absolute.

Platform Scenario Baseline cost Current cost Cost delta Change Gzip delta Module delta
macos shell 801.3 KiB 801.3 KiB 0.0 KiB 0.00% 0.0 KiB +0
macos components-button 50.1 KiB 51.4 KiB +1.4 KiB +2.75% +0.5 KiB +7
macos components-catalog 267.3 KiB 274.6 KiB +7.3 KiB +2.72% +2.3 KiB +14
macos design-theme-state 33.3 KiB 33.4 KiB +0.1 KiB +0.40% +0.1 KiB +2
macos design-color-lib 7.1 KiB 7.1 KiB 0.0 KiB 0.00% 0.0 KiB +0
macos design-theme-state-legacy-source 35.3 KiB 35.5 KiB +0.1 KiB +0.38% +0.0 KiB +2
macos design-legacy-theme-from-flex 100.2 KiB 100.4 KiB +0.1 KiB +0.13% +0.1 KiB +2
windows shell 810.2 KiB 810.2 KiB 0.0 KiB 0.00% 0.0 KiB +0
windows components-button 50.0 KiB 51.4 KiB +1.4 KiB +2.75% +0.4 KiB +7
windows components-catalog 267.0 KiB 274.3 KiB +7.3 KiB +2.72% +2.2 KiB +14
windows design-theme-state 33.2 KiB 33.3 KiB +0.1 KiB +0.41% +0.1 KiB +2
windows design-color-lib 7.1 KiB 7.1 KiB 0.0 KiB 0.00% 0.0 KiB +0
windows design-theme-state-legacy-source 35.3 KiB 35.4 KiB +0.1 KiB +0.38% +0.0 KiB +2
windows design-legacy-theme-from-flex 100.0 KiB 100.1 KiB +0.1 KiB +0.13% +0.1 KiB +2

The job is advisory: size changes are reported but do not fail the pull request. Bundle or analysis errors still fail.

View bundle-size workflow run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

AutoMerge 🔁 Automatically merge when PR requirements met Type: Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants