Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 5, 2025

Bumps the npm-development group with 7 updates in the / directory:

Package From To
esbuild 0.25.3 0.25.8
eslint-plugin-jsonc 2.20.0 2.20.1
eslint-plugin-prettier 5.2.6 5.5.3
prettier 3.5.3 3.6.2
prettier-eslint 16.4.1 16.4.2
ts-jest 29.3.2 29.4.1
typescript 5.8.3 5.9.2

Updates esbuild from 0.25.3 to 0.25.8

Release notes

Sourced from esbuild's releases.

v0.25.8

  • Fix another TypeScript parsing edge case (#4248)

    This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the ?: operator. The regression specifically involves parsing an arrow function containing a #private identifier inside the middle of a ?: ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:

    class CachedDict {
      #has = (a: string) => dict.has(a);
      has = window
        ? (word: string): boolean => this.#has(word)
        : this.#has;
    }
  • Fix a regression with the parsing of source phase imports

    The change in the previous release to parse source phase imports failed to properly handle the following cases:

    import source from 'bar'
    import source from from 'bar'
    import source type foo from 'bar'

    Parsing for these cases should now be fixed. The first case was incorrectly treated as a syntax error because esbuild was expecting the second case. And the last case was previously allowed but is now forbidden. TypeScript hasn't added this feature yet so it remains to be seen whether the last case will be allowed, but it's safer to disallow it for now. At least Babel doesn't allow the last case when parsing TypeScript, and Babel was involved with the source phase import specification.

v0.25.7

  • Parse and print JavaScript imports with an explicit phase (#4238)

    This release adds basic syntax support for the defer and source import phases in JavaScript:

    • defer

      This is a stage 3 proposal for an upcoming JavaScript feature that will provide one way to eagerly load but lazily initialize imported modules. The imported module is automatically initialized on first use. Support for this syntax will also be part of the upcoming release of TypeScript 5.9. The syntax looks like this:

      import defer * as foo from "<specifier>";
      const bar = await import.defer("<specifier>");

      Note that this feature deliberately cannot be used with the syntax import defer foo from "<specifier>" or import defer { foo } from "<specifier>".

    • source

      This is a stage 3 proposal for an upcoming JavaScript feature that will provide another way to eagerly load but lazily initialize imported modules. The imported module is returned in an uninitialized state. Support for this syntax may or may not be a part of TypeScript 5.9 (see this issue for details). The syntax looks like this:

      import source foo from "<specifier>";
      const bar = await import.source("<specifier>");

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.25.8

  • Fix another TypeScript parsing edge case (#4248)

    This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the ?: operator. The regression specifically involves parsing an arrow function containing a #private identifier inside the middle of a ?: ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:

    class CachedDict {
      #has = (a: string) => dict.has(a);
      has = window
        ? (word: string): boolean => this.#has(word)
        : this.#has;
    }
  • Fix a regression with the parsing of source phase imports

    The change in the previous release to parse source phase imports failed to properly handle the following cases:

    import source from 'bar'
    import source from from 'bar'
    import source type foo from 'bar'

    Parsing for these cases should now be fixed. The first case was incorrectly treated as a syntax error because esbuild was expecting the second case. And the last case was previously allowed but is now forbidden. TypeScript hasn't added this feature yet so it remains to be seen whether the last case will be allowed, but it's safer to disallow it for now. At least Babel doesn't allow the last case when parsing TypeScript, and Babel was involved with the source phase import specification.

0.25.7

  • Parse and print JavaScript imports with an explicit phase (#4238)

    This release adds basic syntax support for the defer and source import phases in JavaScript:

    • defer

      This is a stage 3 proposal for an upcoming JavaScript feature that will provide one way to eagerly load but lazily initialize imported modules. The imported module is automatically initialized on first use. Support for this syntax will also be part of the upcoming release of TypeScript 5.9. The syntax looks like this:

      import defer * as foo from "<specifier>";
      const bar = await import.defer("<specifier>");

      Note that this feature deliberately cannot be used with the syntax import defer foo from "<specifier>" or import defer { foo } from "<specifier>".

    • source

      This is a stage 3 proposal for an upcoming JavaScript feature that will provide another way to eagerly load but lazily initialize imported modules. The imported module is returned in an uninitialized state. Support for this syntax may or may not be a part of TypeScript 5.9 (see this issue for details). The syntax looks like this:

      import source foo from "<specifier>";

... (truncated)

Commits
  • 8c71947 publish 0.25.8 to npm
  • 0508f24 some parsing fixes for source phase imports
  • 6e4be2f js parser: recover from bad #private identifiers
  • c9c6357 fix #4248: #private ids in arrow fn body in ?:
  • 9b42f68 publish 0.25.7 to npm
  • 9ba01d1 abs-paths: js api and tests
  • ca196c9 fix for parser backtracking crash
  • 2979b84 fix #4241: ts arrow function type backtrack (hack)
  • 1180410 fix an unused variable warning
  • fc3da57 fix #4238: add defer and source import phases
  • Additional commits viewable in compare view

Updates eslint-plugin-jsonc from 2.20.0 to 2.20.1

Release notes

Sourced from eslint-plugin-jsonc's releases.

v2.20.1

Patch Changes

Full Changelog: ota-meshi/eslint-plugin-jsonc@v2.20.0...v2.20.1

Changelog

Sourced from eslint-plugin-jsonc's changelog.

2.20.1

Patch Changes

Commits
  • a078d32 chore: release eslint-plugin-jsonc (#410)
  • 04a648d ci: add missing SYNCKIT_TS_RUNNER env for version-ci
  • 22b1700 fix(deps): update dependency synckit to ^0.6.2 || ^0.7.3 || ^0.11.5 (#404)
  • See full diff in compare view

Updates eslint-plugin-prettier from 5.2.6 to 5.5.3

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.3

republish the latest version

Full Changelog: prettier/eslint-plugin-prettier@v5.5.2...v5.5.3

v5.5.2

republish the latest version

Full Changelog: prettier/eslint-plugin-prettier@v5.5.1...v5.5.2

v5.5.1

Patch Changes

Full Changelog: prettier/eslint-plugin-prettier@v5.5.0...v5.5.1

v5.5.0

Minor Changes

  • #743 92f2c9c Thanks @​dotcarmen! - feat: support non-js languages like css for @eslint/css and json for @eslint/json

New Contributors

Full Changelog: prettier/eslint-plugin-prettier@v5.4.1...v5.5.0

v5.4.1

Patch Changes

  • #740 c21521f Thanks @​JounQin! - fix(deps): bump synckit to v0.11.7 to fix potential TypeError: Cannot read properties of undefined (reading 'message') error

Full Changelog: prettier/eslint-plugin-prettier@v5.4.0...v5.4.1

v5.4.0

Minor Changes

v5.3.1

Patch Changes

Full Changelog: prettier/eslint-plugin-prettier@v5.3.0...v5.3.1

v5.3.0

Minor Changes

... (truncated)

Changelog

Sourced from eslint-plugin-prettier's changelog.

Changelog

5.5.1

Patch Changes

5.5.0

Minor Changes

  • #743 92f2c9c Thanks @​dotcarmen! - feat: support non-js languages like css for @eslint/css and json for @eslint/json

5.4.1

Patch Changes

  • #740 c21521f Thanks @​JounQin! - fix(deps): bump synckit to v0.11.7 to fix potential TypeError: Cannot read properties of undefined (reading 'message') error

5.4.0

Minor Changes

5.3.1

Patch Changes

5.3.0

Minor Changes

Commits

Updates prettier from 3.5.3 to 3.6.2

Release notes

Sourced from prettier's releases.

3.6.2

What's Changed

🔗 Changelog

3.6.1

  • Fix "Warning: File descriptor 39 closed but not opened in unmanaged mode" error when running --experimental-cli

🔗 Changelog

3.6.0

diff

🔗 Release note "Prettier 3.6: Experimental fast CLI and new OXC and Hermes plugins!"

Changelog

Sourced from prettier's changelog.

3.6.2

diff

Markdown: Add missing blank line around code block (#17675 by @​fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block
---
foo: bar


Another
List

<!-- Prettier 3.6.1 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List



<!-- Prettier 3.6.2 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List

3.6.1

diff

TypeScript: Allow const without initializer (#17650, #17654 by @​fisker)

// Input
</tr></table> 

... (truncated)

Commits
  • 7a8b05f Release 3.6.2
  • 46526b4 Add missing blank line around code block (#17675)
  • a04ec11 chore(deps): update babel to v7.27.7 (#17684)
  • 32be5b6 chore(deps): update dependency flow-parser to v0.274.1 (#17676)
  • b55e777 Update docs about "TypeScript Configuration Files" (#17677)
  • b197c99 chore(deps): update dependency @​vitejs/plugin-react to v4.6.0 (#17674)
  • 1185f83 chore(deps): update dependency @​angular/compiler to v20.0.5 (#17680)
  • aa1316f chore(deps): update dependency browserslist to v4.25.1 (#17671)
  • c468d33 chore(deps): update dependency oxc-parser to v0.75.0 (#17672)
  • 3f46d91 chore(deps): update dependency vite to v7 (#17673)
  • Additional commits viewable in compare view

Updates prettier-eslint from 16.4.1 to 16.4.2

Release notes

Sourced from prettier-eslint's releases.

v16.4.2

Patch Changes

New Contributors

Full Changelog: prettier/prettier-eslint@v16.4.1...v16.4.2

Changelog

Sourced from prettier-eslint's changelog.

16.4.2

Patch Changes

Commits

Updates ts-jest from 29.3.2 to 29.4.1

Release notes

Sourced from ts-jest's releases.

v29.4.1

Please refer to CHANGELOG.md for details.

v29.4.0

Please refer to CHANGELOG.md for details.

v29.3.4

Please refer to CHANGELOG.md for details.

v29.3.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.1 (2025-08-03)

Bug Fixes

  • fix: replace ejs with handlebars due to security issues (899c9b7), closes #4969

29.4.0 (2025-06-11)

Features

29.3.4 (2025-05-16)

Bug Fixes

  • fix: fix TsJestTransformerOptions type (3b11e29), closes #4247
  • fix(cli): fix wrong path for preset creator fns (249eb2c)
  • fix(config): disable rewriteRelativeImportExtensions always (9b1f472), closes #4855

29.3.3 (2025-05-14)

Bug Fixes

  • fix(cli): init config with preset creator functions (cdd3039), closes #4840
  • fix(config): disable isolatedDeclarations (5d6b35f), closes #4847
Commits
  • 9099745 chore(release): 29.4.1
  • 9f0b9f2 build(deps): Update dependency @​types/handlebars to ^4.1.0
  • 322a3c7 ci: add code scanning workflow
  • 899c9b7 fix: replace ejs with handlebars due to security issues
  • 953f239 build(deps): Update dependency memfs to ^4.36.0
  • 8459897 build(deps): Update dependency memfs to ^4.35.0
  • 3c41410 build(deps): Update dependency memfs to ^4.34.0
  • d50ff1e build(deps): Update dependency memfs to ^4.32.0
  • 5984f70 build(deps): Update dependency memfs to ^4.30.1
  • 18b9665 build(deps): Update Jest packages to ^30.0.5
  • Additional commits viewable in compare view

Updates typescript from 5.8.3 to 5.9.2

Release notes

Sourced from typescript's releases.

TypeScript 5.9

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 RC

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • be86783 Give more specific errors for verbatimModuleSyntax (#62113)
  • 22ef577 LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250714...
  • d5a414c Don't use noErrorTruncation when printing types with maximumLength set (#...
  • f14b5c8 Remove unused and confusing dom.iterable.d.ts file (#62037)
  • 2778e84 Restore AbortSignal.abort (#62086)
  • 65cb4bd LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250710...
  • 9e20e03 Clear out checker-level stacks on pop (#62016)
  • 87740bc Fix for Issue 61081 (#61221)
  • 833a8d4 Fix Symbol completion priority and cursor positioning (#61945)
  • 0018c9f LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250702...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 5, 2025
@github-actions
Copy link

github-actions bot commented Aug 5, 2025

Braintrust eval report

Say Hi Bot Python (dependabot/npm_and_yarn/npm-development-82234bc0ee-1758561948)

Score Average Improvements Regressions
Levenshtein 77.8% (+0pp) - -
Llm_calls 0 (+0) - -
Tool_calls 0 (+0) - -
Errors 0 (+0) - -
Llm_errors 0 (+0) - -
Tool_errors 0 (+0) - -
Prompt_tokens 0tok (+0tok) - -
Prompt_cached_tokens 0tok (+0tok) - -
Prompt_cache_creation_tokens 0tok (+0tok) - -
Completion_tokens 0tok (+0tok) - -
Total_tokens 0tok (+0tok) - -
Duration 0s (0s) 1 🟢 1 🔴

@github-actions
Copy link

github-actions bot commented Aug 5, 2025

Braintrust eval report

Say Hi Bot Python (dependabot/npm_and_yarn/npm-development-82234bc0ee-1758561954)

Score Average Improvements Regressions
Levenshtein 77.8% (+0pp) - -
Llm_calls 0 (+0) - -
Tool_calls 0 (+0) - -
Errors 0 (+0) - -
Llm_errors 0 (+0) - -
Tool_errors 0 (+0) - -
Prompt_tokens 0tok (+0tok) - -
Prompt_cached_tokens 0tok (+0tok) - -
Prompt_cache_creation_tokens 0tok (+0tok) - -
Completion_tokens 0tok (+0tok) - -
Total_tokens 0tok (+0tok) - -
Duration 0s (+0s) 1 🟢 1 🔴

@github-actions
Copy link

github-actions bot commented Aug 5, 2025

Braintrust eval report

No experiments to report

@github-actions
Copy link

github-actions bot commented Aug 5, 2025

Braintrust eval report

My Evaluation (dependabot/npm_and_yarn/npm-development-82234bc0ee-1758561952)

Score Average Improvements Regressions
Exact match 100% (+0pp) - -
Llm_calls 0 (+0) - -
Tool_calls 0 (+0) - -
Errors 0 (+0) - -
Llm_errors 0 (+0) - -
Tool_errors 0 (+0) - -
Prompt_tokens 10tok (+0tok) - -
Prompt_cached_tokens 0tok (+0tok) - -
Prompt_cache_creation_tokens 0tok (+0tok) - -
Completion_tokens 2tok (+0tok) - -
Total_tokens 12tok (+0tok) - -
Duration 0.25s (-0.67s) 1 🟢 -

@github-actions
Copy link

github-actions bot commented Aug 5, 2025

Braintrust eval report

No experiments to report

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-development-82234bc0ee branch from bb85425 to 5cd5bc0 Compare August 12, 2025 02:44
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-development-82234bc0ee branch from 5cd5bc0 to d6e0d36 Compare August 26, 2025 09:01
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Bumps the npm-development group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.3` | `0.25.8` |
| [eslint-plugin-jsonc](https://github.com/ota-meshi/eslint-plugin-jsonc) | `2.20.0` | `2.20.1` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.2.6` | `5.5.3` |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.6.2` |
| [prettier-eslint](https://github.com/prettier/prettier-eslint) | `16.4.1` | `16.4.2` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.3.2` | `29.4.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.2` |



Updates `esbuild` from 0.25.3 to 0.25.8
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.3...v0.25.8)

Updates `eslint-plugin-jsonc` from 2.20.0 to 2.20.1
- [Release notes](https://github.com/ota-meshi/eslint-plugin-jsonc/releases)
- [Changelog](https://github.com/ota-meshi/eslint-plugin-jsonc/blob/master/CHANGELOG.md)
- [Commits](ota-meshi/eslint-plugin-jsonc@v2.20.0...v2.20.1)

Updates `eslint-plugin-prettier` from 5.2.6 to 5.5.3
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.2.6...v5.5.3)

Updates `prettier` from 3.5.3 to 3.6.2
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.5.3...3.6.2)

Updates `prettier-eslint` from 16.4.1 to 16.4.2
- [Release notes](https://github.com/prettier/prettier-eslint/releases)
- [Changelog](https://github.com/prettier/prettier-eslint/blob/master/CHANGELOG.md)
- [Commits](prettier/prettier-eslint@v16.4.1...v16.4.2)

Updates `ts-jest` from 29.3.2 to 29.4.1
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.3.2...v29.4.1)

Updates `typescript` from 5.8.3 to 5.9.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.8.3...v5.9.2)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.25.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: eslint-plugin-jsonc
  dependency-version: 2.20.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: prettier
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: prettier-eslint
  dependency-version: 16.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: ts-jest
  dependency-version: 29.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: typescript
  dependency-version: 5.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-development-82234bc0ee branch from d6e0d36 to 1d40e90 Compare September 22, 2025 17:25
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 17, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant