Skip to content

build(deps): bump the dependencies group across 1 directory with 8 updates - #216

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-0bd2247724
Open

build(deps): bump the dependencies group across 1 directory with 8 updates#216
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-0bd2247724

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 7 updates in the / directory:

Package From To
oxc-parser 0.138.0 0.143.0
string-width 8.2.1 8.2.2
@types/node 26.1.0 26.1.2
@types/semver 7.7.1 7.8.0
@vitest/coverage-v8 4.1.9 4.1.10
tsx 4.23.0 4.23.5
typescript 6.0.3 7.0.2

Updates oxc-parser from 0.138.0 to 0.143.0

Release notes

Sourced from oxc-parser's releases.

oxc crates_v0.143.0

💥 BREAKING CHANGES

  • 4120da0 semantic: [BREAKING] Return borrowed JSDoc so the parse cache works (#25186) (Connor Shea)
  • f0a41c8 allocator: [BREAKING] Remove ArenaBox::dangling method (#25236) (overlookmotel)
  • 067da8c ast: [BREAKING] Store single parameter in TSIndexSignature::parameter (#25154) (camc314)
  • a0c7788 ast: [BREAKING] Change TSIndexSignatureName::name to Ident (#25150) (camc314)
  • 1bdedd1 ast: [BREAKING] Introduce ExportDeclaration, ExportFromDeclaration (#25095) (camc314)
  • c917f20 ast: [BREAKING] Introduce ArrowFunctionBody enum (#24987) (camc314)
  • 7e1199c ast: [BREAKING] Remove conversion to Box from AST builder methods (#25038) (overlookmotel)

🚀 Features

  • 3c8312e allocator: Make Box Send + Sync when the type it contains is (#25242) (overlookmotel)
  • cb5bc08 ast: Derive GetSpan for Comment (#25147) (leaysgur)
  • 8541e18 ast_tools: Generate minifier scope collector (#25088) (camc314)
  • 5acdae2 ecmascript: Skip transparent TS expressions (#25072) (camc314)
  • 85d0f4d napi: Add React Compiler transform binding (#24934) (Boshen)
  • 70d6ece minifier: Fold safe integer exponentiation (#25009) (Dunqing)
  • 73fc747 minifier: Enable termination statement optimization for do while (#24921) (Armano)
  • 5eadfdb minifier: Fold safe integer division and remainder (#24981) (Dunqing)

🐛 Bug Fixes

  • 6c9ee14 minifier: Preserve if-chain idempotency and correct side effects when alternate should not be moved (#25041) (Armano)
  • 8a47ff3 ecmascript: Do not treat lone-surrogate strings as constants (#25084) (Dunqing)
  • 468b970 isolated-declarations: Strip re-export attributes (#25090) (camc314)
  • a70035d parser: Report export imports in namespaces (#25086) (camc314)
  • 5d8ccf5 react_compiler: Preserve nonfatal diagnostics (#25066) (Boshen)
  • d349e4a react_compiler: Match eslint suppression gating (#25068) (Boshen)
  • 0dc16ba react_compiler: Track catch block declarations (#25067) (Boshen)
  • e6734a5 minifier: Fold typeof comparisons with known object strings (#25017) (Dunqing)
  • 3a9d5a5 minifier: Keep typeof foo == ['object'] as-is (#24941) (sapphi-red)
  • 10ec276 ast: Custom AST builder methods take IntoIn<ArenaBox> where child method does (#25033) (overlookmotel)
  • fbe8d31 minifier: Respect targets when folding RegExp source (#24790) (Dunqing)

⚡ Performance

  • fb402b0 minifier: Stop re-deriving printed numeric spellings (#25103) (Dunqing)
  • 7251e52 react_compiler: Avoid large types on stack (#25037) (overlookmotel)
  • e07718f isolated_declarations: Avoid large types on stack (#25036) (overlookmotel)
  • 9fb1e3e transformer: Avoid large types on stack (#25035) (overlookmotel)
  • 8b80f8b parser: Avoid large types on stack (#25034) (overlookmotel)

📚 Documentation

  • 2ea0aa9 ast: Correct grammar in AST builder methods doc comments (#25173) (overlookmotel)

oxc crates_v0.142.0

💥 BREAKING CHANGES

... (truncated)

Changelog

Sourced from oxc-parser's changelog.

[0.143.0] - 2026-08-03

💥 BREAKING CHANGES

  • 067da8c ast: [BREAKING] Store single parameter in TSIndexSignature::parameter (#25154) (camc314)
  • 1bdedd1 ast: [BREAKING] Introduce ExportDeclaration, ExportFromDeclaration (#25095) (camc314)
  • c917f20 ast: [BREAKING] Introduce ArrowFunctionBody enum (#24987) (camc314)

[0.142.0] - 2026-07-27

🚀 Features

  • 11f5d1f ast_visit: Add Utf8ToUtf16::convert_program_and_comments (#24859) (overlookmotel)

🐛 Bug Fixes

  • e80574f estree: Handle empty spans serializing ImportMeta and NewTarget (#24775) (overlookmotel)

[0.141.0] - 2026-07-20

💥 BREAKING CHANGES

  • 54cc121 ast: [BREAKING] Split MetaProperty into ImportMeta and NewTarget (#24557) (camc314)

🚀 Features

  • 7b045cd minfier: Drop last break from last switch case (#24673) (Armano)
  • 3d22307 parser: Add ParseOptions::enable_ident_hashes (#24491) (Boshen)
Commits

Updates string-width from 8.2.1 to 8.2.2

Release notes

Sourced from string-width's releases.

v8.2.2

  • Fix spacing mark width handling (#80) b62c9ea

sindresorhus/string-width@v8.2.1...v8.2.2

Commits

Updates @types/node from 26.1.0 to 26.1.2

Commits

Updates @types/semver from 7.7.1 to 7.8.0

Commits

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates tsx from 4.23.0 to 4.23.5

Release notes

Sourced from tsx's releases.

v4.23.5

4.23.5 (2026-08-02)

Bug Fixes

  • detect the Node inspector enabled via NODE_OPTIONS (3c1d051)

This release is also available on:

v4.23.4

4.23.4 (2026-08-02)

Bug Fixes

  • cli: allow async process.once() signal handlers to finish (#827) (2afc7bb)

This release is also available on:

v4.23.3

4.23.3 (2026-08-02)

Bug Fixes

  • preserve listenerCount overload semantics (#823) (b6574d4)

This release is also available on:

v4.23.2

4.23.2 (2026-08-02)

Bug Fixes

  • watch: exit with 128 + signal number when interrupted (#820) (0b00bc8)

This release is also available on:

v4.23.1

4.23.1 (2026-07-13)

... (truncated)

Commits
  • c55004d test: remove legacy PTY retry
  • e368161 chore(deps): update pty-spawn to 1.1.1
  • 8d39496 ci: validate GitHub Actions workflows
  • 6fe724e test: clean up timed-out PTY attempts
  • e0a0536 ci: skip unused Windows Node cache
  • 6d6dd84 ci: remove broken lock automation
  • 3c1d051 fix: detect the Node inspector enabled via NODE_OPTIONS
  • 40380a4 ci: lock down the release toolchain
  • f217b6b ci: restrict releases to public repository
  • 2afc7bb fix(cli): allow async process.once() signal handlers to finish (#827)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.138.0` | `0.143.0` |
| [string-width](https://github.com/sindresorhus/string-width) | `8.2.1` | `8.2.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.2` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `oxc-parser` from 0.138.0 to 0.143.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.143.0/napi/parser)

Updates `string-width` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/sindresorhus/string-width/releases)
- [Commits](sindresorhus/string-width@v8.2.1...v8.2.2)

Updates `@types/node` from 26.1.0 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/semver` from 7.7.1 to 7.8.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `tsx` from 4.23.0 to 4.23.5
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.5)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: oxc-parser
  dependency-version: 0.143.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: string-width
  dependency-version: 8.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/semver"
  dependency-version: 7.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tsx
  dependency-version: 4.23.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​semver@​7.7.1 ⏵ 7.8.010010074 +187100
Updated@​vitest/​coverage-v8@​4.1.9 ⏵ 4.1.10991007998 +1100
Updatedvitest@​4.1.9 ⏵ 4.1.1098 +110079 +197100
Updated@​types/​node@​26.1.0 ⏵ 26.1.210010081 +195100
Updatedtsx@​4.23.0 ⏵ 4.23.510010081 +194 +3100
Updatedstring-width@​8.2.1 ⏵ 8.2.2100 +110089 +187100
Updatedtypescript@​6.0.3 ⏵ 7.0.29910089 -1100100 +10
Updatedoxc-parser@​0.138.0 ⏵ 0.143.089100100 +196 +2100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants