Skip to content

chore(deps): bump the dependencies group with 7 updates - #2408

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-49ec874fc4
Open

chore(deps): bump the dependencies group with 7 updates#2408
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-49ec874fc4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 7 updates:

Package From To
memfs 4.68.2 4.71.0
@changesets/cli 3.0.1 3.0.2
@changesets/get-github-info 1.0.0 1.0.1
cspell 10.2.0 10.2.2
fastify 5.12.1 5.12.3
hono 4.13.5 4.13.7
lint-staged 17.4.1 17.5.0

Updates memfs from 4.68.2 to 4.71.0

Release notes

Sourced from memfs's releases.

Release v4.71.0

What's Changed

Full Changelog: streamich/memfs@v4.70.0...v4.71.0

Release v4.70.0

What's Changed

Full Changelog: streamich/memfs@v4.69.1...v4.70.0

Release v4.69.1

What's Changed

Full Changelog: streamich/memfs@v4.69.0...v4.69.1

Release v4.69.0

What's Changed

Full Changelog: streamich/memfs@v4.68.2...v4.69.0

Commits
  • e23cf85 chore: release v4.71.0
  • f353cb3 Merge pull request #1283 from streamich/error-normalizatoin
  • 2d54461 feat: 🎸 add read range validation
  • 88d138e feat: 🎸 improve error normalization, make them more Node.js-like
  • 383bf68 chore: release v4.70.0
  • 9fb19c8 Merge pull request #1282 from streamich/improve-symlinks
  • ae06d96 fix: 🐛 improve symlink budget accounting and better read-file open semantics
  • 5230d3c feat: 🎸 improve separator treatment in open for Windows, and throw early on d...
  • b84834c feat: 🎸 add 40 bound on symlink resolution and improve the algorithm, apply i...
  • e285831 chore: release v4.69.1
  • Additional commits viewable in compare view

Updates @changesets/cli from 3.0.1 to 3.0.2

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.2

Patch Changes

Changelog

Sourced from @​changesets/cli's changelog.

3.0.2

Patch Changes

Commits

Updates @changesets/get-github-info from 1.0.0 to 1.0.1

Release notes

Sourced from @​changesets/get-github-info's releases.

@​changesets/get-github-info@​1.0.1

Patch Changes

Changelog

Sourced from @​changesets/get-github-info's changelog.

1.0.1

Patch Changes

Commits

Updates cspell from 10.2.0 to 10.2.2

Release notes

Sourced from cspell's releases.

v10.2.2

Fixes

fix: Workaround for #9164 (#9168)

This pull request updates the word splitter to improve its handling of long or complex words and adds new test cases to ensure correct behavior. The main changes include increasing the allowed number of skipped breaks and attempts for word splitting, updating test cases to cover additional scenarios, and adjusting ignored words in the dictionary tests.

Word splitting improvements:

  • Increased the maximum number of skipped breaks (maxSkippedBreaks) from 8 to 16 and set a new maximum number of attempts (maxAttempts) to 64,000 in wordSplitter.ts to better handle complex word splitting cases.
  • Removed the local maxAttempts limit in the splitIntoWords function, relying instead on the new global constant.

Test enhancements:

  • Updated the ignored words in the dictionary test to include a new Base64 string (QmFzZTY0IHN0cmluZyBvZiB0ZXh0IGhlcmU) and used cspell:disable/cspell:enable comments for clarity.
  • Added a new test case to validate splitting of the string 'QmFzZTY0IHN0cmluZyBvZiB0ZXh0IGhlcmU.access' in the word splitter tests.

v10.2.1

Fixes

fix: support soft hyphens in the word splitter (#9144)

This pull request introduces several improvements and fixes to the word segmentation and word splitting logic, especially for Thai language support and symbol handling. The main changes include updating the Thai segmentation to use soft hyphens, enhancing the word splitting logic to handle more cases (including camelCase, symbols, and soft hyphens), and refactoring the code for better modularity and test coverage.

Word segmentation and Thai language improvements:

  • Updated Thai (th-TH) segmentation to use soft hyphens (\u00AD) instead of spaces, improving the accuracy of word breaks and ensuring better compatibility with spell checking and downstream processing. [1] [2] [3]
  • Added the @cspell/dict-th-th package to dependencies, enabling Thai dictionary support.
  • Adjusted tests and expectations for Thai segmentation to reflect the use of soft hyphens and to ensure no false positives in validation.

Word splitting and symbol handling enhancements:

  • Introduced a new generateWordBreaks utility that generates all possible word breaks in a string, including camelCase, symbols, numbers, and soft hyphens. Includes comprehensive tests and snapshot coverage for various edge cases. [1] [2] [3] [4]
  • Improved regular expressions for word splitting to support soft hyphens and better handle punctuation and symbols.

Refactoring and code organization:

  • Refactored imports to use the new wordSplitter/index.js entry point, improving modularity and future maintainability. [1] [2]
  • Added explicit exports for split, SplitOptions, and SplitResult in wordSplitter/index.ts to clarify and centralize the public API.

Other enhancements:

  • Exposed the softHyphen constant for consistent use throughout the codebase. [1] [2]

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.2.2 (2026-09-04)

Fixes

fix: Workaround for #9164 (#9168)

This pull request updates the word splitter to improve its handling of long or complex words and adds new test cases to ensure correct behavior. The main changes include increasing the allowed number of skipped breaks and attempts for word splitting, updating test cases to cover additional scenarios, and adjusting ignored words in the dictionary tests.

Word splitting improvements:

  • Increased the maximum number of skipped breaks (maxSkippedBreaks) from 8 to 16 and set a new maximum number of attempts (maxAttempts) to 64,000 in wordSplitter.ts to better handle complex word splitting cases.
  • Removed the local maxAttempts limit in the splitIntoWords function, relying instead on the new global constant.

Test enhancements:

  • Updated the ignored words in the dictionary test to include a new Base64 string (QmFzZTY0IHN0cmluZyBvZiB0ZXh0IGhlcmU) and used cspell:disable/cspell:enable comments for clarity.
  • Added a new test case to validate splitting of the string 'QmFzZTY0IHN0cmluZyBvZiB0ZXh0IGhlcmU.access' in the word splitter tests.

v10.2.1 (2026-09-03)

Fixes

fix: support soft hyphens in the word splitter (#9144)

This pull request introduces several improvements and fixes to the word segmentation and word splitting logic, especially for Thai language support and symbol handling. The main changes include updating the Thai segmentation to use soft hyphens, enhancing the word splitting logic to handle more cases (including camelCase, symbols, and soft hyphens), and refactoring the code for better modularity and test coverage.

Word segmentation and Thai language improvements:

  • Updated Thai (th-TH) segmentation to use soft hyphens (\u00AD) instead of spaces, improving the accuracy of word breaks and ensuring better compatibility with spell checking and downstream processing. [1] [2] [3]
  • Added the @cspell/dict-th-th package to dependencies, enabling Thai dictionary support.
  • Adjusted tests and expectations for Thai segmentation to reflect the use of soft hyphens and to ensure no false positives in validation.

Word splitting and symbol handling enhancements:

  • Introduced a new generateWordBreaks utility that generates all possible word breaks in a string, including camelCase, symbols, numbers, and soft hyphens. Includes comprehensive tests and snapshot coverage for various edge cases. [1] [2] [3] [4]
  • Improved regular expressions for word splitting to support soft hyphens and better handle punctuation and symbols.

Refactoring and code organization:

  • Refactored imports to use the new wordSplitter/index.js entry point, improving modularity and future maintainability. [1] [2]

... (truncated)

Commits

Updates fastify from 5.12.1 to 5.12.3

Release notes

Sourced from fastify's releases.

v5.12.2

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

Commits

Updates hono from 4.13.5 to 4.13.7

Release notes

Sourced from hono's releases.

v4.13.7

Security fixes

This release includes a fix for the following security issue:

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv

Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.

v4.13.6

What's Changed

Full Changelog: honojs/hono@v4.13.5...v4.13.6

Commits

Updates lint-staged from 17.4.1 to 17.5.0

Release notes

Sourced from lint-staged's releases.

v17.5.0

Minor Changes

  • #1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

  • #1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

  • #1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

  • #1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Changelog

Sourced from lint-staged's changelog.

17.5.0

Minor Changes

  • #1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

  • #1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

  • #1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

  • #1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Commits
  • dcb59f6 Merge pull request #1846 from lint-staged/changeset-release/main
  • 9c8c6dc chore(changeset): release
  • 586466f Merge pull request #1849 from lint-staged/improve-intent-to-add
  • 45eda5f refactor: improve --intent-to-add detection
  • 26372e3 Merge pull request #1848 from lint-staged/fix-color-detection
  • d718ccc fix: honor FORCE_COLOR/NO_COLOR env variables in non-TTY streams
  • be78a51 Merge pull request #1847 from lint-staged/intent-to-add
  • f9063b7 feat: refuse to run when files were staged with --intent-to-add
  • a767299 Merge pull request #1845 from lint-staged/updates
  • 61ffd25 style: add VS Code extension config
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the dependencies group with 7 updates
5107222 
Bumps the dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [memfs](https://github.com/streamich/memfs) | `4.68.2` | `4.71.0` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.2` |
| [@changesets/get-github-info](https://github.com/changesets/changesets/tree/HEAD/packages/get-github-info) | `1.0.0` | `1.0.1` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.2.0` | `10.2.2` |
| [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.3` |
| [hono](https://github.com/honojs/hono) | `4.13.5` | `4.13.7` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.5.0` |


Updates `memfs` from 4.68.2 to 4.71.0
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.68.2...v4.71.0)

Updates `@changesets/cli` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.2/packages/cli)

Updates `@changesets/get-github-info` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/get-github-info/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/get-github-info@1.0.1/packages/get-github-info)

Updates `cspell` from 10.2.0 to 10.2.2
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.2.2/packages/cspell)

Updates `fastify` from 5.12.1 to 5.12.3
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](https://github.com/fastify/fastify/commits)

Updates `hono` from 4.13.5 to 4.13.7
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.5...v4.13.7)

Updates `lint-staged` from 17.4.1 to 17.5.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.4.1...v17.5.0)

---
updated-dependencies:
- dependency-name: memfs
  dependency-version: 4.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@changesets/get-github-info"
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cspell
  dependency-version: 10.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fastify
  dependency-version: 5.12.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: hono
  dependency-version: 4.13.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: lint-staged
  dependency-version: 17.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026
@changeset-bot

changeset-bot Bot commented Sep 9, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 5107222

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) September 9, 2026 10:34
@socket-security

socket-security Bot commented Sep 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​changesets/​cli@​3.0.1 ⏵ 3.0.2991007497 +1100
Updated@​changesets/​get-github-info@​1.0.0 ⏵ 1.0.1100 +110090 +193 +3100
Updatedmemfs@​4.68.2 ⏵ 4.71.098 +11009396 +2100
Updatedlint-staged@​17.4.1 ⏵ 17.5.010010010095 -1100
Updatedcspell@​10.2.0 ⏵ 10.2.29810010096 +1100
Updatedhono@​4.13.5 ⏵ 4.13.7100 +110097 +196100
Updatedfastify@​5.12.1 ⏵ 5.12.39810010099 +1100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webpack webpack[bot] webpack[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants