Skip to content

Bump the development group across 1 directory with 14 updates#1423

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-552e7de22c
Closed

Bump the development group across 1 directory with 14 updates#1423
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-552e7de22c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development group with 14 updates in the / directory:

Package From To
@changesets/changelog-github 0.5.2 0.7.0
@changesets/cli 2.29.8 2.31.0
markdownlint-cli 0.46.0 0.48.0
vitest-browser-react 2.0.2 2.2.0
node-html-parser 6.1.13 7.1.0
@faker-js/faker 7.6.0 10.4.0
@playwright/test 1.58.2 1.60.0
lodash 4.17.21 4.18.1
@types/lodash 4.17.21 4.17.24
uuid 11.1.0 14.0.0
@tailwindcss/browser 4.2.1 4.3.0
@types/estree 1.0.8 1.0.9
prettier 3.7.1 3.8.3
unist-util-visit 5.0.0 5.1.0

Updates @changesets/changelog-github from 0.5.2 to 0.7.0

Release notes

Sourced from @​changesets/changelog-github's releases.

@​changesets/changelog-github@​0.7.0

Minor Changes

@​changesets/changelog-github@​0.6.0

Minor Changes

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​changesets/changelog-github since your current version.


Updates @changesets/cli from 2.29.8 to 2.31.0

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.0

Minor Changes

  • #1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

  • #1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

  • d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

  • #1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

  • #1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

  • #1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

  • Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

    • @​changesets/assemble-release-plan@​6.0.10
    • @​changesets/get-dependents-graph@​2.1.4
    • @​changesets/apply-release-plan@​7.1.1
    • @​changesets/get-release-plan@​4.0.16
    • @​changesets/config@​3.1.4

@​changesets/cli@​2.30.0

Minor Changes

  • #1840 057cca2 Thanks @​wotan-allfather! - Add --since flag to add command

    The add command now supports a --since flag that allows you to specify which branch, tag, or git ref to use when detecting changed packages. This is useful for gitflow workflows where you have multiple target branches and the baseBranch config option doesn't cover all use cases.

    Example: changeset add --since=develop

    If not provided, the command falls back to the baseBranch value in your .changeset/config.json.

  • #1845 2b4a66a Thanks @​Andarist! - Delegate OTP prompting to the package manager instead of handling it in-process. This allows Changesets to use the package manager's native web auth support.

  • #1774 667fe5a Thanks @​bluwy! - Support importing custom commit option ES module. Previously, it used require() which only worked for CJS modules, however now it uses import() which supports both CJS and ES modules.

  • #1839 73b1809 Thanks @​leochiu-a! - Add a --message (-m) flag to changeset add (and default changeset) so the changeset summary can be provided from the command line. When --message is present, the summary prompt is skipped while the final confirmation step is kept.

  • #1806 0e8e01e Thanks @​luisadame! - Changeset CLI can now be run from the nested directories in the project, where the .changeset directory has to be found in one of the parent directories

Patch Changes

  • #1849 9dc3230 Thanks @​Andarist! - Compute the terminal's size lazily to avoid spurious stderr output in non-interactive mode

  • #1857 2a73025 Thanks @​mixelburg! - Fix confusing prompt labels when entering changeset summary after external editor fallback

  • #1842 6df3a5e Thanks @​RodrigoHamuy! - Allow private packages to depend on skipped packages without requiring them to also be skipped. Private packages are not published to npm, so it is safe for them to have dependencies on ignored or unversioned packages.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​changesets/cli since your current version.


Updates markdownlint-cli from 0.46.0 to 0.48.0

Release notes

Sourced from markdownlint-cli's releases.

v0.48.0

  • Update all dependencies via Dependabot

v0.47.0

  • Add output and exit code support for warnings
  • Update markdownlint dependency to 0.40.0
    • Improve MD011/MD013/MD051/MD060
  • Update all dependencies via Dependabot
Commits
  • e72a3ca Bump version 0.48.0
  • 02c6132 Delete and recreate package-lock.json via "npm install".
  • 800b47c Bump ava from 6.4.1 to 7.0.0
  • e6eb97c Bump minimatch
  • 61da922 Bump tar from 7.5.7 to 7.5.9
  • 3731696 Bump minimatch from 10.2.0 to 10.2.2
  • d60f5af Bump minimatch from 10.1.2 to 10.2.0
  • 587b174 Bump markdown-it from 14.1.0 to 14.1.1
  • c3bfec9 Bump minimatch from 10.1.1 to 10.1.2
  • 1fba958 Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1
  • Additional commits viewable in compare view

Updates vitest-browser-react from 2.0.2 to 2.2.0

Release notes

Sourced from vitest-browser-react's releases.

v2.2.0

   🚀 Features

    View changes on GitHub

v2.1.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v2.0.5

   🐞 Bug Fixes

    View changes on GitHub

v2.0.4

   🐞 Bug Fixes

    View changes on GitHub

v2.0.3

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates node-html-parser from 6.1.13 to 7.1.0

Release notes

Sourced from node-html-parser's releases.

v7.1.0

7.1.0 (2026-03-03)

Features

  • add option closeAllOnClosing (44c900a), closes #294
  • add preserveTagNesting option to maintain invalid HTML nesting #295 (d604652)

Bug Fixes

  • add missing dev dependency: yarn (8679d32)

v7.0.2

7.0.2 (2026-01-07)

Bug Fixes

v7.0.1

7.0.1 (2024-12-26)

Bug Fixes

Changelog

Sourced from node-html-parser's changelog.

7.1.0 (2026-03-03)

Features

  • add option closeAllOnClosing (44c900a), closes #294
  • add preserveTagNesting option to maintain invalid HTML nesting #295 (d604652)

Bug Fixes

  • add missing dev dependency: yarn (8679d32)

7.0.2 (2026-01-07)

Bug Fixes

7.0.1 (2024-12-26)

Bug Fixes

7.0.0 (2024-12-26)

⚠ BREAKING CHANGES

  • fix #277, for that change estarget to es6

Features

Bug Fixes

6.1.14 (2024-05-14)

Bug Fixes

... (truncated)

Commits
  • ea54b3a chore(release): 7.1.0
  • 3e17619 Merge pull request #303 from thomome/htmlElement-matches
  • 405ccb2 Merge pull request #299 from ig3/close-tags
  • 8c26d86 fixed readme return type
  • c1098fc added tests
  • 13c0b1b added matches method to HTMLElement
  • d604652 feat: add preserveTagNesting option to maintain invalid HTML nesting #295
  • c4cc706 Merge branch 'main' into close-tags
  • eac4de9 Revert addition of yarn as a dependency
  • f7a190c chore(release): 7.0.2
  • Additional commits viewable in compare view

Updates @faker-js/faker from 7.6.0 to 10.4.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.4.0

What's Changed

New Contributors

Full Changelog: faker-js/faker@v10.3.0...v10.4.0

v10.3.0

What's Changed

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.4.0 (2026-03-23)

New Locales

  • locale: add Japanese bear definitions (#3720) (2a4b15c)
  • locale: add Japanese bird definitions (#3719) (dc31ff8)
  • locale: add Japanese cat breed definitions (#3716) (54af8a8)
  • locale: add Japanese cattle breed definitions (#3717) (c2c7342)
  • locale: add Japanese fish definitions (#3721) (15fc361)
  • locale: add Japanese horse breed definitions (#3718) (e02536e)
  • locale: add Norwegian (nb_NO) country definition (#3714) (614b4e9)

Features

Changed Locales

  • locale: filter and cleanup PersonEntryDefintions data (#3266) (67defc8)

Bug Fixes

  • locales: correct typos and capitalization in es_MX street names (#3737) (2b32c28)

10.3.0 (2026-02-06)

New Locales

  • locale: add Japanese dog definition (#3715) (76c9df1)
  • locale: add Japanese color definitions (#3707) (bbbb215)
  • locale: add Japanese food module (#3706) (71d55c0)
  • locale: add Japanese internet definitions (#3708) (184a709)
  • locale: add Japanese job definitions for person module (#3705) (e7f3ccd)
  • locale: add Japanese suffix definitions for person module (#3704) (45ad7d8)
  • locale: add Norwegian (nb_NO) continent definitions (#3712) (c0f0f23)
  • locale: add Norwegian (nb_NO) direction definition (#3713) (43b18fa)
  • locale: add Norwegian (nb_NO) sex definitions (#3710) (76063f2)
  • locale: add Norwegian (nb_NO) vehicle definition (#3732) (d1c32b0)

Features

  • locales: add Norwegian (nb_NO) zodiac sign definitions (#3711) (e306542)
  • person: sexType can return 'generic' (#3259) (0e099a1)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​faker-js/faker since your current version.


Updates @playwright/test from 1.58.2 to 1.60.0

Release notes

Sourced from @​playwright/test's releases.

v1.60.0

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});
await page.locator('#dropzone').drop({
data: {
'text/plain': 'hello world',
'text/uri-list': 'https://example.com',
},
});

🎯 Aria snapshots

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

... (truncated)

Commits

Updates lodash from 4.17.21 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits

@dependabot
Bump the development group across 1 directory with 14 updates
21316cf 
Bumps the development group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/changelog-github](https://github.com/changesets/changesets) | `0.5.2` | `0.7.0` |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.29.8` | `2.31.0` |
| [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) | `0.46.0` | `0.48.0` |
| [vitest-browser-react](https://github.com/vitest-community/vitest-browser-react) | `2.0.2` | `2.2.0` |
| [node-html-parser](https://github.com/taoqf/node-fast-html-parser) | `6.1.13` | `7.1.0` |
| [@faker-js/faker](https://github.com/faker-js/faker) | `7.6.0` | `10.4.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.60.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.21` | `4.17.24` |
| [uuid](https://github.com/uuidjs/uuid) | `11.1.0` | `14.0.0` |
| [@tailwindcss/browser](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-browser) | `4.2.1` | `4.3.0` |
| [@types/estree](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/estree) | `1.0.8` | `1.0.9` |
| [prettier](https://github.com/prettier/prettier) | `3.7.1` | `3.8.3` |
| [unist-util-visit](https://github.com/syntax-tree/unist-util-visit) | `5.0.0` | `5.1.0` |



Updates `@changesets/changelog-github` from 0.5.2 to 0.7.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/read@0.5.2...@changesets/changelog-github@0.7.0)

Updates `@changesets/cli` from 2.29.8 to 2.31.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.31.0)

Updates `markdownlint-cli` from 0.46.0 to 0.48.0
- [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases)
- [Commits](igorshubovych/markdownlint-cli@v0.46.0...v0.48.0)

Updates `vitest-browser-react` from 2.0.2 to 2.2.0
- [Release notes](https://github.com/vitest-community/vitest-browser-react/releases)
- [Commits](vitest-community/vitest-browser-react@v2.0.2...v2.2.0)

Updates `node-html-parser` from 6.1.13 to 7.1.0
- [Release notes](https://github.com/taoqf/node-fast-html-parser/releases)
- [Changelog](https://github.com/taoqf/node-html-parser/blob/main/CHANGELOG.md)
- [Commits](taoqf/node-html-parser@v6.1.13...v7.1.0)

Updates `@faker-js/faker` from 7.6.0 to 10.4.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v7.6.0...v10.4.0)

Updates `@playwright/test` from 1.58.2 to 1.60.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.58.2...v1.60.0)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `@types/lodash` from 4.17.21 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `uuid` from 11.1.0 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v11.1.0...v14.0.0)

Updates `@tailwindcss/browser` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/@tailwindcss-browser)

Updates `@types/estree` from 1.0.8 to 1.0.9
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/estree)

Updates `prettier` from 3.7.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.1...3.8.3)

Updates `unist-util-visit` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/syntax-tree/unist-util-visit/releases)
- [Commits](syntax-tree/unist-util-visit@5.0.0...5.1.0)

---
updated-dependencies:
- dependency-name: "@changesets/changelog-github"
  dependency-version: 0.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: markdownlint-cli
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: vitest-browser-react
  dependency-version: 2.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: node-html-parser
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: "@faker-js/faker"
  dependency-version: 10.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: "@playwright/test"
  dependency-version: 1.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@types/lodash"
  dependency-version: 4.17.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: "@tailwindcss/browser"
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: "@types/estree"
  dependency-version: 1.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: unist-util-visit
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 2, 2026
@changeset-bot

changeset-bot Bot commented Jun 2, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 21316cf

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 8, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/development-552e7de22c branch June 8, 2026 14:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants