Bump the minor-and-patch group with 7 updates by dependabot[bot] · Pull Request #82 · BurntToasters/ROSI

dependabot · 2026-06-03T20:43:17Z

Bumps the minor-and-patch group with 7 updates:

Package	From	To
@vitest/coverage-v8	`4.1.7`	`4.1.8`
electron	`42.2.0`	`42.3.2`
eslint	`10.4.0`	`10.4.1`
js-yaml	`4.1.1`	`4.2.0`
lint-staged	`17.0.5`	`17.0.7`
typescript-eslint	`8.59.4`	`8.60.1`
vitest	`4.1.7`	`4.1.8`

Updates @vitest/coverage-v8 from 4.1.7 to 4.1.8

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.8

🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

View changes on GitHub

Commits

e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
See full diff in compare view

Updates electron from 42.2.0 to 42.3.2

Release notes

Sourced from electron's releases.

electron v42.3.2

Release Notes for v42.3.2

electron v42.3.1

Release Notes for v42.3.1

Fixes

Fixed a desktopCapturer crash when sharing a window on Windows. #51787

Other Changes

Enabled ThinLTO on macOS builds. #51823 (Also in 43)

Improved performance of Linux and Windows release builds by enabling ThinLTO link-time optimization for the main Electron binary. #51821 (Also in 43)

Improved performance of app.isDefaultProtocolClient() and app.setAsDefaultProtocolClient() on Linux. #51627

Improved runtime performance. #51828

Updated Chromium to 148.0.7778.218. #51790

electron v42.3.0

Release Notes for v42.3.0

Features

Added Linux support for app.getApplicationInfoForProtocol(). #51680

Added Notification.remove(), removeAll(), and removeGroup() static methods for macOS. #51691 (Also in 43)

Added session support to net module requests from utility process. #51698

Fixes

Fixed an issue where process and other Node globals were undefined in ESM preload scripts when contextIsolation was disabled. #51726 (Also in 43)

Fixed native addon compilation failure with undefined msvc intrinsic from v8 headers. #51706 (Also in 43)

Other Changes

Updated Chromium to 148.0.7778.180. #51600

Commits

03ce64c build: revert "build: re-enable ThinLTO on macOS" (42-x-y) (#51844)
ea88382 ci: delete simulator runtime MobileAssets in macOS free-space action (#51839)
297c6e3 ci: free up more disk space on macOS (#51836)
1b24db6 build: strip the Electron builtins profile path from mksnapshot_args (42-x-y)...
d693280 build: download PGO profiles in release build jobs (42-x-y) (#51832)
6b2354f build: consume Electron-generated PGO profiles in release builds (42-x-y) (#5...
a9f36de build: re-enable ThinLTO on macOS (#51823)
02044ed build: generate Electron-specific PGO profiles in CI (#51826)
655c0ed build: enable ThinLTO link-time optimization for the main binary (#51821)
fb4a997 chore: bump chromium to 148.0.7778.218 (42-x-y) (#51790)
Additional commits viewable in compare view

Updates eslint from 10.4.0 to 10.4.1

Release notes

Sourced from eslint's releases.

v10.4.1

Bug Fixes

e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)

d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)

f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)

c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)

27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)

305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)

49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)

9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)

c91b041 docs: Update README (GitHub Actions Bot)

e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)

f78838b test: add CodePath type coverage (#20904) (Pixel998)

1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)

002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)

64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)

6d7c832 chore: ignore fflate updates in renovate (#20908) (Pixel998)

b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#20889) (dependabot[bot])

a9b8d7f chore: increase maxBuffer for ecosystem tests (#20881) (sethamus)

b702ead chore: update ecosystem update PR settings (#20884) (Pixel998)

507f60e chore: update ecosystem plugins (#20882) (ESLint Bot)

92f5c5b test: add unit test for message-count (#20878) (kuldeep kumar)

df32108 chore: add @eslint/markdown and typescript-eslint ecosystem tests (#20837) (sethamus)

327f91d chore: use includeIgnoreFile internally (#20876) (Kirk Waiblinger)

f0dc4bd chore: pin fflate@0.8.2 (#20877) (Milos Djermanovic)

0f4bd25 ci: run Discord alert for ecosystem test failures (#20873) (Copilot)

Commits

4a3d15a 10.4.1
43e7e2b Build: changelog update for 10.4.1
e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930)
b0e466b test: add data property to invalid tests cases for rules (#20924)
d4ce898 fix: propagate failures from delegated commands (#20917)
f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916)
f78838b test: add CodePath type coverage (#20904)
61b0add docs: remove deprecated rule from related rules of max-params (#20921)
1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20...
002942c ci: declare contents:read on update-readme workflow (#20919)
Additional commits viewable in compare view

Updates js-yaml from 4.1.1 to 4.2.0

Changelog

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

Added docs/safety.md with notes about processing untrusted YAML.

Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.

Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.

Added sourcemaps to dist/ builds.

Changed

Stop resolving numbers with underscores as numeric scalars, #627.

Switched dev toolchains to Vite / neostandard.

Updated demo.

Reorganized tests.

dist/ files are no longer kept in the repository.

Fixed

Fix parsing of properties on the first implicit block mapping key, #62.

Fix trailing whitespace handling when folding flow scalar lines, #307.

Reject top-level block scalars without content indentation, #280.

Ensure numbers survive round-trip, #737.

Fix test coverage for issue #221.

Fix flow scalar trailing whitespace folding, #307.

Fix digits in YAML named tag handles.

Security

Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

Backported v4.1.1 fix to v3

Commits

See full diff in compare view

Updates lint-staged from 17.0.5 to 17.0.7

Release notes

Sourced from lint-staged's releases.

v17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Changelog

Sourced from lint-staged's changelog.

17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Commits

cd11fec Merge pull request #1807 from lint-staged/changeset-release/main
15a8ee0 chore(changeset): release
797bbd9 Merge pull request #1808 from lint-staged/add-stashing-faq
504e307 docs: add FAQ entry on how stashing works
eff5cd1 Merge pull request #1806 from lint-staged/update-tinyexec
e692e58 build(deps): update tinyexec@^1.2.4
a2dd4ea Merge pull request #1805 from lint-staged/update-github-templates
c928519 docs: update GitHub templates
094ba56 Merge pull request #1798 from lint-staged/changeset-release/main
88e19fe chore(changeset): release
Additional commits viewable in compare view

Updates typescript-eslint from 8.59.4 to 8.60.1

Release notes

Sourced from typescript-eslint's releases.

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)

eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

❤️ Thank You

lumir

Nevette Bailey @nevette-bailey

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

playground TS version selector is not working (#12326, #12325)

❤️ Thank You

Evyatar Daud @StyleShit

Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.60.1 (2026-06-01)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.0 (2026-05-25)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

4f84a69 chore(release): publish 8.60.1
1849b53 chore: typecheck using tsgo (#12139)
f891c29 chore(release): publish 8.60.0
See full diff in compare view

Updates vitest from 4.1.7 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

View changes on GitHub

Commits

e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.7` | `4.1.8` | | [electron](https://github.com/electron/electron) | `42.2.0` | `42.3.2` | | [eslint](https://github.com/eslint/eslint) | `10.4.0` | `10.4.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.5` | `17.0.7` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.4` | `8.60.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.7` | `4.1.8` | Updates `@vitest/coverage-v8` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8) Updates `electron` from 42.2.0 to 42.3.2 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v42.2.0...v42.3.2) Updates `eslint` from 10.4.0 to 10.4.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.4.0...v10.4.1) Updates `js-yaml` from 4.1.1 to 4.2.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) Updates `lint-staged` from 17.0.5 to 17.0.7 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.5...v17.0.7) Updates `typescript-eslint` from 8.59.4 to 8.60.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/typescript-eslint) Updates `vitest` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: electron dependency-version: 42.3.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lint-staged dependency-version: 17.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.60.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 3, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-and-patch group with 7 updates#82

Bump the minor-and-patch group with 7 updates#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-41fbf02128

dependabot Bot commented on behalf of github Jun 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 3, 2026

v4.1.8

🐞 Bug Fixes

View changes on GitHub

electron v42.3.2

Release Notes for v42.3.2

electron v42.3.1

Release Notes for v42.3.1

Fixes

Other Changes

electron v42.3.0

Release Notes for v42.3.0

Features

Fixes

Other Changes

v10.4.1

Bug Fixes

Documentation

Chores

[4.2.0] - 2026-06-01

Added

Changed

Fixed

Security

[3.14.2] - 2025-11-15

Security

v17.0.7

Patch Changes

v17.0.6

Patch Changes

17.0.7

Patch Changes

17.0.6

Patch Changes

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

❤️ Thank You

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

🩹 Fixes

❤️ Thank You

8.60.1 (2026-06-01)

8.60.0 (2026-05-25)

v4.1.8

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants