Bump the npm-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #138 · tarosky/rich-taxonomy

dependabot · 2026-07-27T08:19:26Z

Bumps the npm-dependencies group with 5 updates in the / directory:

Package	From	To
@wordpress/env	`10.39.0`	`11.11.0`
@wordpress/scripts	`31.8.0`	`33.0.0`
autoprefixer	`10.5.2`	`10.5.4`
postcss	`8.5.15`	`8.5.20`
lint-staged	`16.4.0`	`17.1.0`

Updates @wordpress/env from 10.39.0 to 11.11.0

Changelog

Sourced from @wordpress/env's changelog.

11.11.0 (2026-07-14)

11.10.0 (2026-07-01)

11.9.0 (2026-06-24)

11.8.1 (2026-06-16)

11.8.0 (2026-06-10)

Enhancements

Use partial clones (--filter=blob:none) when downloading git sources and the PHPUnit test suite to reduce download size. (#78918)

Bug Fixes

Replace extract-zip with adm-zip to fix silent hang on Node 24.16.0 (libuv 1.52.1) when downloading URL-based zip sources. (#78762)

11.7.0 (2026-05-27)

11.6.0 (2026-05-14)

11.5.0 (2026-04-29)

11.4.0 (2026-04-15)

Bug Fixes

Fix WP-Cron, REST API loopback, and Site Health loopback failures when wp-env runs on a non-default port. Apache inside the WordPress container now also listens on the host-mapped port, so PHP loopback requests to WP_HOME succeed instead of being refused. (#20569)

11.3.0 (2026-04-01)

11.2.0 (2026-03-18)

11.1.0 (2026-03-04)

Bug Fixes

Suppress spinner and success message output when using --json flag to ensure clean, parseable JSON output.

11.0.0 (2026-02-18)

Bug Fixes

Playground runtime now supports zip archive themes, matching Docker runtime behavior. (#75140).

Add MySQL healthcheck to prevent race condition where WordPress containers start before MySQL is fully initialized. Uses MariaDB's official healthcheck.sh script with MARIADB_AUTO_UPGRADE to support both new and existing installations.

Remove non-functional WP_ENV_MULTISITE config.

New Features

... (truncated)

Commits

e9a74f9 chore(release): publish
2a0c375 Update changelog files
e61c854 Merge changes published in the Gutenberg plugin "release/23.6" branch
1055a35 Update changelog files
8ca3e8e Merge changes published in the Gutenberg plugin "release/23.6" branch
66c8050 Fix wp/latest release metadata (#79821)
d0d1bfc Update changelog files
66315f3 Merge changes published in the Gutenberg plugin "release/23.5" branch
74218a2 Update changelog files
504adfc Revert "Update changelog files"
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by desrosj, a new releaser for @wordpress/env since your current version.

Updates @wordpress/scripts from 31.8.0 to 33.0.0

Changelog

Sourced from @wordpress/scripts's changelog.

33.0.0 (2026-07-14)

Breaking Changes

The test-e2e command now runs the Playwright-based end-to-end test runner instead of Puppeteer (test-playwright remains available as an alias). Removed the Puppeteer test environment and configuration (jest-environment-puppeteer, jest-e2e.config.js, puppeteer.config.js) along with the puppeteer-core and expect-puppeteer dependencies. Puppeteer-specific options (e.g. --puppeteer-interactive, --puppeteer-devtools) are no longer supported (#60357).

Enhancements

Widen React peer dependency ranges to ^18 || ^19 to support both React 18 and React 19 environments (#80024).

Update stylelint to ^16.26.1 (#79648).

Widen the @playwright/test peer dependency to >=1 and mark it optional, so consumers aren't forced to bump Playwright or satisfy it under strict peer deps (#78632).

Update webpack-dev-server to ^5.2.1, resolving several Dependabot security alerts and migrating the internal dev-server proxy config to the v5 array format (#80347).

32.6.0 (2026-07-01)

32.5.0 (2026-06-24)

Enhancements

lint-style: Detect .cjs and .mjs config files so the bundled default config is not used when one of these is present (#79226).

32.4.1 (2026-06-16)

32.4.0 (2026-06-10)

32.3.0 (2026-05-27)

32.2.0 (2026-05-14)

32.1.0 (2026-04-29)

32.0.0 (2026-04-15)

Breaking Changes

The bundled eslint dependency has been upgraded from v8 to v10 (#76654).

The lint-js script now uses flat config (eslint.config.*) by default. Legacy .eslintrc.* files are still detected as a fallback, but this support is deprecated and will be removed in a future version (#76654).

The default config shipped with wp-scripts has changed from config/.eslintrc.js to config/eslint.config.cjs (#76654).

Commits

e9a74f9 chore(release): publish
2a0c375 Update changelog files
e61c854 Merge changes published in the Gutenberg plugin "release/23.6" branch
1055a35 Update changelog files
8ca3e8e Merge changes published in the Gutenberg plugin "release/23.6" branch
66c8050 Fix wp/latest release metadata (#79821)
d0d1bfc Update changelog files
66315f3 Merge changes published in the Gutenberg plugin "release/23.5" branch
74218a2 Update changelog files
504adfc Revert "Update changelog files"
Additional commits viewable in compare view

Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

Changelog

Sourced from autoprefixer's changelog.

10.5.4

Fixed prefixed rule duplication (by @xianjianlf2).

10.5.3

Fixed brackets and gradient parser (@alanturing881).

Commits

4cad00f Release 10.5.4 version
e62a4b1 Update CI config
c8f0d0a Update dependencies
cae3577 Move back to latest pnpm 11
fd31eb3 Fix duplicated prefixed selectors on reformatted CSS (#1552)
958d390 Release 10.5.3 version
21d2adb Fix gradient parser
f7ddae9 Fix bracket parser
10ea5e7 Update dependencies and remove patch
b6e8a2a Update Dev Container
Additional commits viewable in compare view

Updates postcss from 8.5.15 to 8.5.20

Release notes

Sourced from postcss's releases.

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

Changelog

Sourced from postcss's changelog.

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

Commits

c4ac725 Release 8.5.20 version
c30586d Fix missing space when AtRule#params is set after parsing (#2113)
5bfc3b9 Update dependencies
24733fd Move back to latest 11 pnpm
728127c Update pnpm to check that CI is fixed
806fe21 Rebuild nodes from another PostCSS copy in Warning (#2112)
337cb7e Improve CI security
7a8ca2d Remove patch after updating dependency
9543b22 Release 8.5.19 version
3d13bf9 Fix CI on Windows too
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates lint-staged from 16.4.0 to 17.1.0

Release notes

Sourced from lint-staged's releases.

v17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

#1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

... (truncated)

Commits

dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
aad7f3b chore(changeset): release
11b1d5c Merge pull request #1818 from lint-staged/fixes
efb23a2 fix: enable colors globally based on option
26112a1 fix: function task failure kills other tasks, unless --continue-on-error wa...
9b98b7f fix: handle error when calculating hash of unstaged changes
d43432b fix: do not allow NaN concurrency
bd4dcbf fix: do not drop backup stash when restoring unstaged changes fails and using...
9153a77 Merge pull request #1816 from lint-staged/replace-listr2
290e618 refactor: use common identity function
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@wordpress/env](https://github.com/WordPress/gutenberg/tree/HEAD/packages/env) | `10.39.0` | `11.11.0` | | [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts) | `31.8.0` | `33.0.0` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.5.4` | | [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.20` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.4.0` | `17.1.0` | Updates `@wordpress/env` from 10.39.0 to 11.11.0 - [Release notes](https://github.com/WordPress/gutenberg/releases) - [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/env/CHANGELOG.md) - [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/env@11.11.0/packages/env) Updates `@wordpress/scripts` from 31.8.0 to 33.0.0 - [Release notes](https://github.com/WordPress/gutenberg/releases) - [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md) - [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@33.0.0/packages/scripts) Updates `autoprefixer` from 10.5.2 to 10.5.4 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.2...10.5.4) Updates `postcss` from 8.5.15 to 8.5.20 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.15...8.5.20) Updates `lint-staged` from 16.4.0 to 17.1.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.4.0...v17.1.0) --- updated-dependencies: - dependency-name: "@wordpress/env" dependency-version: 11.11.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@wordpress/scripts" dependency-version: 33.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: autoprefixer dependency-version: 10.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: postcss dependency-version: 8.5.20 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: lint-staged dependency-version: 17.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-03T08:15:18Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 27, 2026

dependabot Bot closed this Aug 3, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-2c971dedcf branch August 3, 2026 08:15

Navigation Menu

Uh oh!

Bump the npm-dependencies group across 1 directory with 5 updates - #138

Bump the npm-dependencies group across 1 directory with 5 updates#138
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-2c971dedcf

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

11.11.0 (2026-07-14)

11.10.0 (2026-07-01)

11.9.0 (2026-06-24)

11.8.1 (2026-06-16)

11.8.0 (2026-06-10)

Enhancements

Bug Fixes

11.7.0 (2026-05-27)

11.6.0 (2026-05-14)

11.5.0 (2026-04-29)

11.4.0 (2026-04-15)

Bug Fixes

11.3.0 (2026-04-01)

11.2.0 (2026-03-18)

11.1.0 (2026-03-04)

Bug Fixes

11.0.0 (2026-02-18)

Bug Fixes

New Features

33.0.0 (2026-07-14)

Breaking Changes

Enhancements

32.6.0 (2026-07-01)

32.5.0 (2026-06-24)

Enhancements

32.4.1 (2026-06-16)

32.4.0 (2026-06-10)

32.3.0 (2026-05-27)

32.2.0 (2026-05-14)

32.1.0 (2026-04-29)

32.0.0 (2026-04-15)

Breaking Changes

10.5.4

10.5.3

10.5.4

10.5.3

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

v17.1.0

Minor Changes

Patch Changes

17.1.0

Minor Changes

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Aug 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading