Skip to content

Bump the all-dependencies group across 1 directory with 23 updates#299

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cli/all-dependencies-a3a7405809
Closed

Bump the all-dependencies group across 1 directory with 23 updates#299
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cli/all-dependencies-a3a7405809

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 2, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 22 updates in the /cli directory:

Package From To
commander 13.1.0 14.0.2
cross-env 7.0.3 10.1.0
express 5.1.0 5.2.1
@types/express 5.0.1 5.0.6
inquirer 9.3.7 9.3.8
@types/inquirer 9.0.7 9.0.9
marked 15.0.11 17.0.1
open 10.1.2 11.0.0
portfinder 1.0.37 1.0.38
@trivago/prettier-plugin-sort-imports 5.2.2 6.0.0
@types/cors 2.8.17 2.8.19
@types/node 22.15.3 24.10.1
@vercel/ncc 0.38.3 0.38.4
esbuild 0.25.3 0.27.0
eslint-config-prettier 9.1.2 10.1.8
eslint-plugin-github 4.10.2 6.0.0
eslint-plugin-jest 28.11.0 29.2.1
jest 29.7.0 30.2.0
lint-staged 15.5.1 16.2.7
nodemon 3.1.10 3.1.11
prettier 3.5.3 3.7.3
ts-jest 29.3.2 29.4.6

Updates commander from 13.1.0 to 14.0.2

Release notes

Sourced from commander's releases.

v14.0.2

Changed

  • improve negative number auto-detection test (#2428)
  • update (dev) dependencies

v14.0.1

Fixed

  • broken markdown link in README (#2369)

Changed

  • improve code readability by using optional chaining (#2394)
  • use more idiomatic code with object spread instead of Object.assign() (#2395)
  • improve code readability using string.endsWith() instead of string.slice() (#2396)
  • refactor .parseOptions() to process args array in-place (#2409)
  • change private variadic support routines from ._concatValue() to ._collectValue() (change code from array.concat() to array.push()) (#2410)
  • update (dev) dependencies

v14.0.0

Added

  • support for groups of options and commands in the help using low-level .helpGroup() on Option and Command, and higher -level .optionsGroup() and .commandsGroup() which can be used in chaining way to specify group title for following option s/commands (#2328)
  • support for unescaped negative numbers as option-arguments and command-arguments (#2339)
  • TypeScript: add parseArg property to Argument class (#2359)

Fixed

  • remove bogus leading space in help when option has default value but not a description (#2348)
  • .configureOutput() now makes copy of settings instead of modifying in-place, fixing side-effects (#2350)

Changed

  • Breaking: Commander 14 requires Node.js v20 or higher
  • internal refactor of Help class adding .formatItemList() and .groupItems() methods (#2328)
Changelog

Sourced from commander's changelog.

[14.0.2] (2025-10-25)

Changed

  • improve negative number auto-detection test (#2428)
  • update (dev) dependencies

[14.0.1] (2025-09-12)

Fixed

  • broken markdown link in README (#2369)

Changed

  • improve code readability by using optional chaining (#2394)
  • use more idiomatic code with object spread instead of Object.assign() (#2395)
  • improve code readability using string.endsWith() instead of string.slice() (#2396)
  • refactor .parseOptions() to process args array in-place (#2409)
  • change private variadic support routines from ._concatValue() to ._collectValue() (change code from array.concat() to array.push()) (#2410)
  • update (dev) dependencies

[14.0.0] (2025-05-18)

Added

  • support for groups of options and commands in the help using low-level .helpGroup() on Option and Command, and higher-level .optionsGroup() and .commandsGroup() which can be used in chaining way to specify group title for following options/commands (#2328)
  • support for unescaped negative numbers as option-arguments and command-arguments (#2339)
  • TypeScript: add parseArg property to Argument class (#2359)

Fixed

  • remove bogus leading space in help when option has default value but not a description (#2348)
  • .configureOutput() now makes copy of settings instead of modifying in-place, fixing side-effects (#2350)

Changed

  • Breaking: Commander 14 requires Node.js v20 or higher
  • internal refactor of Help class adding .formatItemList() and .groupItems() methods (#2328)
Commits

Updates cross-env from 7.0.3 to 10.1.0

Release notes

Sourced from cross-env's releases.

v10.1.0

10.1.0 (2025-09-29)

Features

  • add support for default value syntax (152ae6a)

For example:

"dev:server": "cross-env wrangler dev --port ${PORT:-8787}",

If PORT is already set, use that value, otherwise fallback to 8787.

Learn more about Shell Parameter Expansion

v10.0.0

10.0.0 (2025-07-25)

TL;DR: You should probably not have to change anything if:

  • You're using a modern maintained version of Node.js (v20+ is tested)
  • You're only using the CLI (most of you are as that's the intended purpose)

In this release (which should have been v8 except I had some issues with automated releases 🙈), I've updated all the things and modernized the package. This happened in #261

Was this needed? Not really, but I just thought it'd be fun to modernize this package.

Here's the highlights of what was done.

  • Replace Jest with Vitest for testing
  • Convert all source files from .js to .ts with proper TypeScript types
  • Use zshy for ESM-only builds (removes CJS support)
  • Adopt @​epic-web/config for TypeScript, ESLint, and Prettier
  • Update to Node.js >=20 requirement
  • Remove kcd-scripts dependency
  • Add comprehensive e2e tests with GitHub Actions matrix testing
  • Update GitHub workflow with caching and cross-platform testing
  • Modernize documentation and remove outdated sections
  • Update all dependencies to latest versions
  • Add proper TypeScript declarations and exports

The tool maintains its original functionality while being completely modernized with the latest tooling and best practices

BREAKING CHANGES

  • This is a major rewrite that changes the module format from CommonJS to ESM-only. The package now requires Node.js >=20 and only exports ESM modules (not relevant in most cases).
Commits
  • 152ae6a feat: add support ofr default value syntax
  • bd70d1a chore: upgrade zshy
  • 8e0b190 chore(ci): get coverage
  • 8635e80 fix(release): manually release a major version
  • 3a58f22 chore: fix npmrc registry
  • b70bfff chore(ci): add names to steps and workflows
  • cc5759d fix(release): manually release a major version
  • 080a859 chore: remove publish script
  • 31e5bc7 chore(ci): restore built files
  • 81e9c34 chore(ci): add back semantic-release
  • Additional commits viewable in compare view

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
Commits

Updates @types/express from 5.0.1 to 5.0.6

Commits

Updates inquirer from 9.3.7 to 9.3.8

Commits

Updates @types/inquirer from 9.0.7 to 9.0.9

Commits

Updates marked from 15.0.11 to 17.0.1

Release notes

Sourced from marked's releases.

v17.0.1

17.0.1 (2025-11-20)

Bug Fixes

v17.0.0

17.0.0 (2025-11-07)

Bug Fixes

BREAKING CHANGES

  • Change how consecutive text tokens work in lists
  • Simplify listItem renderer
  • Checkbox token is added in list tokenizer
  • Checkbox token add type and raw property
  • Change loose list text tokens to paragraph type in the list tokenizer

v16.4.2

16.4.2 (2025-11-06)

Bug Fixes

v16.4.1

16.4.1 (2025-10-17)

Bug Fixes

v16.4.0

16.4.0 (2025-10-07)

Bug Fixes

... (truncated)

Commits
  • 16209f5 chore(release): 17.0.1 [skip ci]
  • 921ee22 fix: fix block elements in task item (#3828)
  • 1e47df2 chore(deps-dev): Bump @​semantic-release/npm from 13.1.1 to 13.1.2 (#3841)
  • 8a355d1 chore(deps-dev): Bump @​markedjs/eslint-config from 1.0.13 to 1.0.14 (#3835)
  • c43a67e chore(deps-dev): Bump eslint from 9.39.0 to 9.39.1 (#3834)
  • de635d8 chore(deps-dev): Bump esbuild from 0.25.12 to 0.27.0 (#3833)
  • 554cd8d chore(deps-dev): Bump marked-highlight from 2.2.2 to 2.2.3 (#3832)
  • 1711dbb chore(deps-dev): Bump @​semantic-release/github from 12.0.1 to 12.0.2 (#3831)
  • 23b9d01 docs: Modernize Docs UI with Tailwind, Dark Mode, and Improved Layout (#3814)
  • 9657f0b chore(release): 17.0.0 [skip ci]
  • Additional commits viewable in compare view

Updates open from 10.1.2 to 11.0.0

Release notes

Sourced from open's releases.

v11.0.0

Breaking

  • Require Node.js 20 e789eec

Improvements

  • Automatically detect whether PowerShell is accessible in WSL 67109f8
  • Add chromium-browser fallback for Linux b40f4b8
  • Throw AggregateError instead of only latest error (#364) 2778ac6

Fixes

  • Fix app launch failure detection for fallback support ce31b94
  • Fix WSL access via remote SSH 8821bf7
  • Fix handling of import.meta.url not being available 8ce0f7d
  • Fix: Suppress PowerShell progress messages on Windows 2283000
  • Fix: Ignore stdio on Windows when not waiting for process e1af0ee
  • Fix WSL2 local file opening 269b5fd
  • Fix spawn handling 966239c
  • Fix PowerShell argument escaping 274d704

sindresorhus/open@v10.2.0...v11.0.0

v10.2.0

  • Add support for Brave browser (#362) b62b99e

sindresorhus/open@v10.1.2...v10.2.0

Commits
  • 8815330 11.0.0
  • b8d8107 Refactor
  • ce31b94 Fix app launch failure detection for fallback support
  • b40f4b8 Add chromium-browser fallback for Linux
  • e789eec Require Node.js 20
  • 67109f8 Automatically detect PowerShell accessibility in WSL
  • 8821bf7 Fix WSL access via remote SSH
  • 8ce0f7d Fix handling of import.meta.url not being available
  • 2283000 Suppress PowerShell progress messages on Windows
  • e1af0ee Ignore stdio on Windows when not waiting for process
  • Additional commits viewable in compare view

Updates portfinder from 1.0.37 to 1.0.38

Release notes

Sourced from portfinder's releases.

v1.0.38

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.37...v1.0.38

Commits

Updates @trivago/prettier-plugin-sort-imports from 5.2.2 to 6.0.0

Release notes

Sourced from @​trivago/prettier-plugin-sort-imports's releases.

v6.0.0

What's Changed

Full Changelog: trivago/prettier-plugin-sort-imports@v5.2.2...v6.0.0

Changelog

Sourced from @​trivago/prettier-plugin-sort-imports's changelog.

6.0.0

Breaking Changes

New features

  • Ember.js gjs/gts support #377 by @​NullVoxPopuli and @​RobbieTheWagner - Add support for Ember.js gjs/gts file formats with namespace and named type imports
  • <BUILTIN_MODULES> placeholder #381 by @​sdotson - Add support for sorting Node.js builtin modules to a specific position using <BUILTIN_MODULES> placeholder in importOrder
  • <SEPARATOR> placeholder #339 - Add <SEPARATOR> keyword for fine-grained control over import group separation when importOrderSeparation is enabled
  • Sort by length option #224 by @​KLewin23 - Add option to sort imports by import statement length
  • importOrderExclude option #384 by @​RyderKishan - Add support for excluding specific files from import sorting using glob patterns
  • Expand sort-imports-ignore detection #358 by @​ckwalsh - Improved detection of sort-imports-ignore comments throughout the file, not just at line 1

Performance improvements

  • Improve removeNodesFromOriginalCode() performance #356 by @​ckwalsh - Replace RegExp logic with string slices for better performance

Refactoring

  • Stop rerendering directives #357 by @​ckwalsh - Inject imports instead of re-rendering directives to better preserve whitespace and reduce formatting conflicts
  • Stop ignoring exceptions in snapshot tests #355 by @​ckwalsh - Improve test reliability by properly handling exceptions

Chores

  • Add pnpm install command to README #361 - Document pnpm installation option
Commits

Updates @types/cors from 2.8.17 to 2.8.19

Commits

Updates @types/express from 5.0.1 to 5.0.6

Commits

Updates @types/inquirer from 9.0.7 to 9.0.9

Commits

Updates @types/node from 22.15.3 to 24.10.1

Commits

Updates @vercel/ncc from 0.38.3 to 0.38.4

Release notes

Sourced from @​vercel/ncc's releases.

0.38.4

0.38.4 (2025-09-18)

Bug Fixes

Commits
  • e72d34d fix(cjs-build): enable evaluating import.meta in cjs build (#1236)
  • 186af2b chore(deps): Bump amannn/action-semantic-pull-request from 5.5.3 to 6.1.1 (#1...
  • 162c7d4 chore(deps): Bump actions/checkout from 4 to 5 (#1283)
  • 24734b5 chore(deps): Bump cipher-base from 1.0.4 to 1.0.6 (#1280)
  • 7bf44d5 chore(deps): Bump sha.js from 2.4.11 to 2.4.12 (#1281)
  • 50f1851 chore(deps): Bump tmp from 0.2.3 to 0.2.4 (#1278)
  • d797f1b chore(deps-dev): Bump koa from 2.16.1 to 3.0.1 (#1272)
  • 9bdbd47 chore(deps): Bump pbkdf2 from 3.1.2 to 3.1.3 (#1266)
  • cbfd660 chore(deps-dev): bump test deps for aws-sdk (#1263)
  • d17397f chore(deps-dev): Bump axios from 1.7.7 to 1.8.2 (#1262)
  • Additional commits viewable in compare view

Updates esbuild from 0.25.3 to 0.27.0

Release notes

Sourced from esbuild's releases.

v0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

  • Use Uint8Array.fromBase64 if available (#4286)

    With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

  • Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

    This raises the operating system requirements for running esbuild:

    • Linux: now requires a kernel version of 3.2 or later
    • macOS: now requires macOS 12 (Monterey) or later

v0.26.0

  • Enable trusted publishing (#4281)

    GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

    Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

v0.25.12

  • Fix a minification regression with CSS media queries (#4315)

    The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.

  • Update the list of known JavaScript globals (#4310)

    This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

    From ES2017:

    • Atomics
    • SharedArrayBuffer

    From ES2020:

    • BigInt64Array
    • BigUint64Array

    From ES2021:

    • FinalizationRegistry
    • WeakRef

    From ES2025:

    • Float16Array
    • Iterator

    Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:

    // This can now be tree-shaken by esbuild:

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

  • Use Uint8Array.fromBase64 if available (#4286)

    With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

  • Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

    This raises the operating system requirements for running esbuild:

    • Linux: now requires a kernel version of 3.2 or later
    • macOS: now requires macOS 12 (Monterey) or later

0.26.0

  • Enable trusted publishing (#4281)

    GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

    Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

0.25.12

  • Fix a minification regression with CSS media queries (#4315)

    The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.

  • Update the list of known JavaScript globals (#4310)

    This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

    From ES2017:

    • Atomics
    • SharedArrayBuffer

    From ES2020:

    • BigInt64Array
    • BigUint64Array

    From ES2021:

    • FinalizationRegistry
    • WeakRef

    From ES2025:

    • Float16Array
    • Iterator

    Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.


Updates eslint-config-prettier from 9.1.2 to 10.1.8

Release notes

Sourced from eslint-config-prettier's releases.

v10.1.8

republish latest version

Full Changelog: prettier/eslint-config-prettier@v10.1.5...v10.1.8

v10.1.5

Patch Changes

Full Changelog: prettier/eslint-config-prettier@v10.1.4...v10.1.5

v10.1.4

Patch Changes

@dependabot
Bump the all-dependencies group across 1 directory with 23 updates
7e1c18a 
Bumps the all-dependencies group with 22 updates in the /cli directory:

| Package | From | To |
| --- | --- | --- |
| [commander](https://github.com/tj/commander.js) | `13.1.0` | `14.0.2` |
| [cross-env](https://github.com/kentcdodds/cross-env) | `7.0.3` | `10.1.0` |
| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.1` | `5.0.6` |
| [inquirer](https://github.com/SBoudrias/Inquirer.js) | `9.3.7` | `9.3.8` |
| [@types/inquirer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/inquirer) | `9.0.7` | `9.0.9` |
| [marked](https://github.com/markedjs/marked) | `15.0.11` | `17.0.1` |
| [open](https://github.com/sindresorhus/open) | `10.1.2` | `11.0.0` |
| [portfinder](https://github.com/http-party/node-portfinder) | `1.0.37` | `1.0.38` |
| [@trivago/prettier-plugin-sort-imports](https://github.com/trivago/prettier-plugin-sort-imports) | `5.2.2` | `6.0.0` |
| [@types/cors](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/cors) | `2.8.17` | `2.8.19` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.15.3` | `24.10.1` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.38.3` | `0.38.4` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.3` | `0.27.0` |
| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `9.1.2` | `10.1.8` |
| [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `4.10.2` | `6.0.0` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `28.11.0` | `29.2.1` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.2.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `15.5.1` | `16.2.7` |
| [nodemon](https://github.com/remy/nodemon) | `3.1.10` | `3.1.11` |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.7.3` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.3.2` | `29.4.6` |



Updates `commander` from 13.1.0 to 14.0.2
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v13.1.0...v14.0.2)

Updates `cross-env` from 7.0.3 to 10.1.0
- [Release notes](https://github.com/kentcdodds/cross-env/releases)
- [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md)
- [Commits](kentcdodds/cross-env@v7.0.3...v10.1.0)

Updates `express` from 5.1.0 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.1)

Updates `@types/express` from 5.0.1 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `inquirer` from 9.3.7 to 9.3.8
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@9.3.7...inquirer@9.3.8)

Updates `@types/inquirer` from 9.0.7 to 9.0.9
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/inquirer)

Updates `marked` from 15.0.11 to 17.0.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v15.0.11...v17.0.1)

Updates `open` from 10.1.2 to 11.0.0
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v10.1.2...v11.0.0)

Updates `portfinder` from 1.0.37 to 1.0.38
- [Release notes](https://github.com/http-party/node-portfinder/releases)
- [Commits](http-party/node-portfinder@v1.0.37...v1.0.38)

Updates `@trivago/prettier-plugin-sort-imports` from 5.2.2 to 6.0.0
- [Release notes](https://github.com/trivago/prettier-plugin-sort-imports/releases)
- [Changelog](https://github.com/trivago/prettier-plugin-sort-imports/blob/main/CHANGELOG.md)
- [Commits](trivago/prettier-plugin-sort-imports@v5.2.2...v6.0.0)

Updates `@types/cors` from 2.8.17 to 2.8.19
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cors)

Updates `@types/express` from 5.0.1 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `@types/inquirer` from 9.0.7 to 9.0.9
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/inquirer)

Updates `@types/node` from 22.15.3 to 24.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vercel/ncc` from 0.38.3 to 0.38.4
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.38.3...0.38.4)

Updates `esbuild` from 0.25.3 to 0.27.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.3...v0.27.0)

Updates `eslint-config-prettier` from 9.1.2 to 10.1.8
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-config-prettier/commits/v10.1.8)

Updates `eslint-plugin-github` from 4.10.2 to 6.0.0
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](github/eslint-plugin-github@v4.10.2...v6.0.0)

Updates `eslint-plugin-jest` from 28.11.0 to 29.2.1
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v28.11.0...v29.2.1)

Updates `jest` from 29.7.0 to 30.2.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest)

Updates `lint-staged` from 15.5.1 to 16.2.7
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.5.1...v16.2.7)

Updates `nodemon` from 3.1.10 to 3.1.11
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v3.1.10...v3.1.11)

Updates `prettier` from 3.5.3 to 3.7.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.5.3...3.7.3)

Updates `ts-jest` from 29.3.2 to 29.4.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.3.2...v29.4.6)

Updates `typescript` from 5.8.3 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v5.9.3)

---
updated-dependencies:
- dependency-name: commander
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: cross-env
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: inquirer
  dependency-version: 9.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/inquirer"
  dependency-version: 9.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: marked
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: open
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: portfinder
  dependency-version: 1.0.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@trivago/prettier-plugin-sort-imports"
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@types/cors"
  dependency-version: 2.8.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/inquirer"
  dependency-version: 9.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: esbuild
  dependency-version: 0.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: eslint-config-prettier
  dependency-version: 10.1.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-github
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-jest
  dependency-version: 29.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: jest
  dependency-version: 30.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: lint-staged
  dependency-version: 16.2.7
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: nodemon
  dependency-version: 3.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: prettier
  dependency-version: 3.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 2, 2025
@vercel

vercel Bot commented Dec 2, 2025 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
stoat-docs Ready Ready Preview Comment Dec 2, 2025 1:28am

@stoat-app

stoat-app Bot commented Dec 2, 2025 •
edited
Loading

Copy link
Copy Markdown

Easy and customizable dashboards for your build system. Learn more about Stoat ↗︎

Chart

Package Size
Runner Memory Usage

Job Runtime

job runtime chart

debug

@dependabot @github

dependabot Bot commented on behalf of github Jan 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jan 1, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/cli/all-dependencies-a3a7405809 branch January 1, 2026 23:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants