Bump the development-dependencies group with 7 updates by dependabot[bot] · Pull Request #740 · changesets/action

dependabot · 2026-10-01T05:54:37Z

Bumps the development-dependencies group with 7 updates:

Package	From	To
@changesets/changelog-github	`1.0.0`	`1.0.1`
@changesets/cli	`3.0.1`	`3.0.3`
@types/node	`26.3.0`	`26.6.2`
fs-fixture	`2.14.0`	`2.16.0`
oxfmt	`0.65.0`	`0.70.0`
rolldown	`1.2.5`	`1.2.10`
yaml	`2.9.0`	`2.9.1`

Updates @changesets/changelog-github from 1.0.0 to 1.0.1

Release notes

Sourced from @changesets/changelog-github's releases.

@changesets/changelog-github@1.0.1

Patch Changes

Updated dependencies [4d7b4fb]:

@changesets/get-github-info@1.0.1

Changelog

Sourced from @changesets/changelog-github's changelog.

1.0.1

Patch Changes

Updated dependencies [4d7b4fb]:

@changesets/get-github-info@1.0.1

Commits

d7e4a2d Version Packages (#2266)
See full diff in compare view

Updates @changesets/cli from 3.0.1 to 3.0.3

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@3.0.3

Patch Changes

#2297 3f163da Thanks @Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

#2276 ca9d110 Thanks @Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

Updated dependencies [3f163da, bfe9050, e522996]:

@changesets/apply-release-plan@8.1.1

@changesets/config@4.0.1

@changesets/cli@3.0.2

Patch Changes

#2270 a0a4dc6 Thanks @bluwy! - Add review message on pre exit

Updated dependencies [1f4eb61, 059f70a]:

@changesets/apply-release-plan@8.1.0

@changesets/git@4.0.1

@changesets/read@1.0.1

Changelog

Sourced from @changesets/cli's changelog.

3.0.3

Patch Changes

#2297 3f163da Thanks @Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

#2276 ca9d110 Thanks @Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

Updated dependencies [3f163da, bfe9050, e522996]:

@changesets/apply-release-plan@8.1.1

@changesets/config@4.0.1

3.0.2

Patch Changes

#2270 a0a4dc6 Thanks @bluwy! - Add review message on pre exit

Updated dependencies [1f4eb61, 059f70a]:

@changesets/apply-release-plan@8.1.0

@changesets/git@4.0.1

@changesets/read@1.0.1

Commits

c9269c0 Version Packages (#2291)
ca9d110 Fix pnpm 10 publishing with npm 12 (#2276)
7be7fde Build(deps): Bump the production-dependencies group across 1 directory with 6...
b430ce0 Move e2e tests to an on-demand workspace (#2275)
93314a8 test: add happy path tests for add (#2289)
d13a39e test: use inline snapshots for publish plan tests (#2284)
d7e4a2d Version Packages (#2266)
68affee Upgrade to Vitest 5 (#2281)
5eeb012 Build(deps): Bump human-id in the production-dependencies group (#2279)
a0a4dc6 Add review message on pre exit (#2270)
Additional commits viewable in compare view

Updates @types/node from 26.3.0 to 26.6.2

Commits

See full diff in compare view

Updates fs-fixture from 2.14.0 to 2.16.0

Release notes

Sourced from fs-fixture's releases.

v2.16.0

2.16.0 (2026-09-03)

Features

read fixture root by default (121f1b9)

v2.15.0

2.15.0 (2026-08-31)

Features

add fixture initializer functions (fd5c6fb)

Commits

121f1b9 feat: read fixture root by default
827e62b build: upgrade lint and type tooling
55ac41a build: upgrade package tooling
1625195 test: upgrade manten and vfs
fd5c6fb feat: add fixture initializer functions
5ceb1f8 chore: upgrade skills-npm to v1.2.0
12362e6 ci: restrict release workflow to public org
See full diff in compare view

Updates oxfmt from 0.65.0 to 0.70.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.70.0

🚀 Features

415b742 oxlint,oxfmt: Do not discover nested config in Vite+ mode (#26763) (leaysgur)

Commits

288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
b4da00b release(apps): oxlint v1.82.0 && oxfmt v0.67.0 (#26384)
9a612d5 chore(deps): update npm packages (#26178)
0b4e2e6 release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)
5ff57f8 fix(formatter/sort-imports): handle custom side effect groups (#26217)
63bc313 chore(npm): update funding URL (#26066)
See full diff in compare view

Updates rolldown from 1.2.5 to 1.2.10

Release notes

Sourced from rolldown's releases.

v1.2.10

[1.2.10] - 2026-09-23

🚀 Features

rolldown_plugin_esm_external_require: prefer 'module.exports' over a namespace spread (#10901) by @isker

watch: support directories in addWatchFile (#10944) by @shulaoda

label code-splitting timing rows (#10896) by @IWANABETHATGUY

separate code-splitting group timing rows (#10892) by @IWANABETHATGUY

clarify callback owners in the timing report (#10890) by @IWANABETHATGUY

add checks.bundlerTimings with deprecated pluginTimings alias (#10883) by @IWANABETHATGUY

🐛 Bug Fixes

code-splitting: initialize leaves behind a re-exported namespace import (#10694) by @hyfdev

node: record the WASI target on the WebContainer binding fallback (#10952) by @shulaoda

dev: force incremental build on in DevEngine::new (#10958) by @o-alexandrov

tree-shaking: propagate side effects through cycles (#10893) by @IWANABETHATGUY

deconflict CJS locals that shadow a renamed require wrapper (#10793) by @logaretm

include group indexes in labeled codeSplitting timing rows (#10916) by @IWANABETHATGUY

docs: type-check Algolia indices option (#10934) by @shulaoda

docs: restore Algolia search (#10929) by @isker

tell code-splitting timing rows apart by position (#10903) by @IWANABETHATGUY

🚜 Refactor

rolldown_fs_watcher: remove the single-path API (#10950) by @shulaoda

dev: register watch files through FsWatcher (#10949) by @shulaoda

watch: let FsWatcher own the watched paths (#10948) by @shulaoda

watch: identify watch files by normalized absolute path (#10943) by @shulaoda

plugin: build a plugin-resolved ResolvedId in one place (#10921) by @IWANABETHATGUY

📚 Documentation

dev: add HMR design, align dev docs and engine comments (#10271) by @h-a-n-a

⚡ Performance

batch sourcemapPathTransform calls (#10763) by @IWANABETHATGUY

batch sourcemapIgnoreList calls (#10762) by @IWANABETHATGUY

hmr: drop the unused kind argument from registerFactory (#10915) by @h-a-n-a

🧪 Testing

handle Windows paths in sourcemap callback tests (#10942) by @IWANABETHATGUY

⚙️ Miscellaneous Tasks

replace custom ban-expect-assertions JS lint with builtin no-restricted-properties (#10933) by @isker

deps: update napi (#10959) by @renovate[bot]

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.10] - 2026-09-23

🚀 Features

rolldown_plugin_esm_external_require: prefer 'module.exports' over a namespace spread (#10901) by @isker

watch: support directories in addWatchFile (#10944) by @shulaoda

label code-splitting timing rows (#10896) by @IWANABETHATGUY

separate code-splitting group timing rows (#10892) by @IWANABETHATGUY

clarify callback owners in the timing report (#10890) by @IWANABETHATGUY

add checks.bundlerTimings with deprecated pluginTimings alias (#10883) by @IWANABETHATGUY

🐛 Bug Fixes

code-splitting: initialize leaves behind a re-exported namespace import (#10694) by @hyfdev

node: record the WASI target on the WebContainer binding fallback (#10952) by @shulaoda

dev: force incremental build on in DevEngine::new (#10958) by @o-alexandrov

tree-shaking: propagate side effects through cycles (#10893) by @IWANABETHATGUY

deconflict CJS locals that shadow a renamed require wrapper (#10793) by @logaretm

include group indexes in labeled codeSplitting timing rows (#10916) by @IWANABETHATGUY

docs: type-check Algolia indices option (#10934) by @shulaoda

docs: restore Algolia search (#10929) by @isker

tell code-splitting timing rows apart by position (#10903) by @IWANABETHATGUY

🚜 Refactor

rolldown_fs_watcher: remove the single-path API (#10950) by @shulaoda

dev: register watch files through FsWatcher (#10949) by @shulaoda

watch: let FsWatcher own the watched paths (#10948) by @shulaoda

watch: identify watch files by normalized absolute path (#10943) by @shulaoda

plugin: build a plugin-resolved ResolvedId in one place (#10921) by @IWANABETHATGUY

📚 Documentation

dev: add HMR design, align dev docs and engine comments (#10271) by @h-a-n-a

⚡ Performance

batch sourcemapPathTransform calls (#10763) by @IWANABETHATGUY

batch sourcemapIgnoreList calls (#10762) by @IWANABETHATGUY

hmr: drop the unused kind argument from registerFactory (#10915) by @h-a-n-a

🧪 Testing

handle Windows paths in sourcemap callback tests (#10942) by @IWANABETHATGUY

⚙️ Miscellaneous Tasks

replace custom ban-expect-assertions JS lint with builtin no-restricted-properties (#10933) by @isker

deps: update napi (#10959) by @renovate[bot]

deps: upgrade oxc to 0.151.0 (#10939) by @camc314

... (truncated)

Commits

3b8e06e release: v1.2.10 (#10969)
ec5bab8 feat(rolldown_plugin_esm_external_require): prefer 'module.exports' over a na...
bb1db15 chore(deps): update napi (#10959)
374639e fix(node): record the WASI target on the WebContainer binding fallback (#10952)
cfc9d19 refactor(watch): let FsWatcher own the watched paths (#10948)
1551cf8 feat(watch): support directories in addWatchFile (#10944)
b12f077 test: handle Windows paths in sourcemap callback tests (#10942)
e9e6fcb docs(dev): add HMR design, align dev docs and engine comments (#10271)
6db3aa8 fix: include group indexes in labeled codeSplitting timing rows (#10916)
7b9340b perf: batch sourcemapPathTransform calls (#10763)
Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

Limit recursive merge aliases (#685, #713)

Simplify line unfolding during quoted string parsing (#714)

Commits

1440ecd 2.9.1
c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
d11ce77 fix: Limit recursive merge aliases (#713)
c5f49f4 chore: Update docs-slate
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [@changesets/changelog-github](https://github.com/changesets/changesets/tree/HEAD/packages/changelog-github) | `1.0.0` | `1.0.1` | | [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.3.0` | `26.6.2` | | [fs-fixture](https://github.com/privatenumber/fs-fixture) | `2.14.0` | `2.16.0` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.65.0` | `0.70.0` | | [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.5` | `1.2.10` | | [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` | Updates `@changesets/changelog-github` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/changelog-github/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/changelog-github@1.0.1/packages/changelog-github) Updates `@changesets/cli` from 3.0.1 to 3.0.3 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli) Updates `@types/node` from 26.3.0 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `fs-fixture` from 2.14.0 to 2.16.0 - [Release notes](https://github.com/privatenumber/fs-fixture/releases) - [Commits](privatenumber/fs-fixture@v2.14.0...v2.16.0) Updates `oxfmt` from 0.65.0 to 0.70.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.70.0/npm/oxfmt) Updates `rolldown` from 1.2.5 to 1.2.10 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.10/packages/rolldown) Updates `yaml` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.9.0...v2.9.1) --- updated-dependencies: - dependency-name: "@changesets/changelog-github" dependency-version: 1.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@changesets/cli" dependency-version: 3.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 26.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: fs-fixture dependency-version: 2.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxfmt dependency-version: 0.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: rolldown dependency-version: 1.2.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: yaml dependency-version: 2.9.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-10-01T05:54:43Z

⚠️ No Changeset found

Latest commit: c6bd880

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-10-01T05:54:59Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@changesets/cli@3.0.1 ⏵ 3.0.3	⁺¹	⁺¹	^-1
rolldown@1.2.5 ⏵ 1.2.10	⁺¹	⁺¹	⁺¹
@types/node@26.3.0 ⏵ 26.6.2	⁺¹	⁺¹
oxfmt@0.65.0 ⏵ 0.70.0	⁺¹	⁺¹	⁺¹
yaml@2.9.0 ⏵ 2.9.1	⁺¹
fs-fixture@2.14.0 ⏵ 2.16.0	⁺⁹	⁺¹	⁺³
@changesets/changelog-github@1.0.0 ⏵ 1.0.1			⁺²

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

bluwy approved these changes Oct 1, 2026

View reviewed changes

bluwy added this pull request to the merge queue Oct 1, 2026

Merged via the queue into main with commit a4133a0 Oct 1, 2026
8 checks passed

bluwy deleted the dependabot/npm_and_yarn/development-dependencies-3f09aeb3d6 branch October 1, 2026 09:19

Navigation Menu

Repository navigation

Bump the development-dependencies group with 7 updates - #740

Bump the development-dependencies group with 7 updates#740
bluwy merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-3f09aeb3d6

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

changeset-bot Bot commented Oct 1, 2026

Uh oh!

socket-security Bot commented Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

@​changesets/changelog-github@​1.0.1

Patch Changes

1.0.1

Patch Changes

@​changesets/cli@​3.0.3

Patch Changes

@​changesets/cli@​3.0.2

Patch Changes

3.0.3

Patch Changes

3.0.2

Patch Changes

v2.16.0

2.16.0 (2026-09-03)

Features

v2.15.0

2.15.0 (2026-08-31)

Features

oxfmt v0.70.0

🚀 Features

v1.2.10

[1.2.10] - 2026-09-23

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

[1.2.10] - 2026-09-23

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

v2.9.1

Uh oh!

changeset-bot Bot commented Oct 1, 2026

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@changesets/changelog-github@1`.0.1

`@changesets/cli@3`.0.3

`@changesets/cli@3`.0.2