Skip to content

Bump the development-dependencies group with 7 updates #2175

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 1, 2025

Bumps the development-dependencies group with 7 updates:

Package From To
@eslint/js 9.28.0 9.30.0
bootstrap 5.3.6 5.3.7
hugo-bin 0.144.7 0.144.9
postcss 8.5.4 8.5.6
stylelint 16.20.0 16.21.0
stylelint-config-twbs-bootstrap 16.0.0 16.1.0
svgo 3.3.2 4.0.0

Updates @eslint/js from 9.28.0 to 9.30.0

Release notes

Sourced from @​eslint/js's releases.

v9.30.0

Features

  • 52a5fca feat: Support basePath property in config objects (#19879) (Milos Djermanovic)
  • 4ab4482 feat: add allowSeparateTypeImports option to no-duplicate-imports (#19872) (sethamus)
  • b8a7e7a feat: throw error when column is negative in getIndexFromLoc (#19831) (루밀LuMir)

Bug Fixes

  • 6a0f164 fix: handle null type loc in getIndexFromLoc method (#19862) (루밀LuMir)
  • 3fbcd70 fix: update error message for no-restricted-properties (#19855) (Tanuj Kanti)
  • 7ef4cf7 fix: remove unnecessary semicolon from fixes (#19857) (Francesco Trotta)
  • 7dabc38 fix: use process.version in --env-info (#19865) (TKDev7)

Documentation

  • 8662ed1 docs: adopt eslint-stylistic sub packages related changes (#19887) (ntnyq)
  • 20158b0 docs: typo in comment for unused variables handling (#19870) (leopardracer)
  • ebfb5b4 docs: Fixed Typo in configuration-files.md (#19873) (0-20)
  • 4112fd0 docs: clarify that boolean is still allowed for rule meta.deprecated (#19866) (Bryan Mishkin)

Chores

  • 2b6491c chore: upgrade to @eslint/js@9.30.0 (#19889) (Francesco Trotta)
  • 5a5d526 chore: package.json update for @​eslint/js release (Jenkins)
  • eaf8a41 chore: Correct typos in linter tests (#19878) (kilavvy)

v9.29.0

Features

  • f686fcb feat: add ecmaVersion: 2026, parsing using and await using (#19832) (Milos Djermanovic)
  • 19cdd22 feat: prune suppressions for non-existent files (#19825) (TKDev7)
  • b3d720f feat: add ES2025 globals (#19835) (fisker Cheung)
  • 677a283 feat: add auto-accessor fields support to class-methods-use-this (#19789) (sethamus)
  • dbba058 feat: allow global type declaration in no-var (#19714) (Remco Haszing)
  • 342bd29 feat: ignore type annotations in no-restricted-globals (#19781) (sethamus)
  • 786bcd1 feat: add allowProperties option to no-restricted-properties (#19772) (sethamus)
  • 05b66d0 feat: add sourceCode.isGlobalReference(node) method (#19695) (Nitin Kumar)

Bug Fixes

  • 85c082c fix: explicit matching behavior with negated patterns and arrays (#19845) (Milos Djermanovic)
  • 9bda4a9 fix: fix LintOptions.filterCodeBlock types (#19837) (ntnyq)
  • 7ab77a2 fix: correct breaking deprecation of FlatConfig type (#19826) (Logicer)
  • 1ba3318 fix: add language and dialects to no-use-before-define (#19808) (Francesco Trotta)

Documentation

  • 00e3e6a docs: add support for custom name parameter to includeIgnoreFile (#19795) (루밀LuMir)
  • 3aed075 docs: Update README (GitHub Actions Bot)
  • a2f888d docs: enhance documentation with links and fix typos (#19761) (루밀LuMir)
  • 53c3235 docs: update to clarify prompt usage (#19748) (Jennifer Davis)

Chores

  • 5c114c9 chore: upgrade @​eslint/js@​9.29.0 (#19851) (Milos Djermanovic)
  • acf2201 chore: package.json update for @​eslint/js release (Jenkins)
  • a806994 refactor: Remove eslintrc from flat config functionality (#19833) (Nicholas C. Zakas)

... (truncated)

Changelog

Sourced from @​eslint/js's changelog.

v9.30.0 - June 27, 2025

  • 2b6491c chore: upgrade to @eslint/js@9.30.0 (#19889) (Francesco Trotta)
  • 5a5d526 chore: package.json update for @​eslint/js release (Jenkins)
  • 52a5fca feat: Support basePath property in config objects (#19879) (Milos Djermanovic)
  • 6a0f164 fix: handle null type loc in getIndexFromLoc method (#19862) (루밀LuMir)
  • 8662ed1 docs: adopt eslint-stylistic sub packages related changes (#19887) (ntnyq)
  • eaf8a41 chore: Correct typos in linter tests (#19878) (kilavvy)
  • 4ab4482 feat: add allowSeparateTypeImports option to no-duplicate-imports (#19872) (sethamus)
  • 3fbcd70 fix: update error message for no-restricted-properties (#19855) (Tanuj Kanti)
  • 20158b0 docs: typo in comment for unused variables handling (#19870) (leopardracer)
  • ebfb5b4 docs: Fixed Typo in configuration-files.md (#19873) (0-20)
  • b8a7e7a feat: throw error when column is negative in getIndexFromLoc (#19831) (루밀LuMir)
  • 7ef4cf7 fix: remove unnecessary semicolon from fixes (#19857) (Francesco Trotta)
  • 7dabc38 fix: use process.version in --env-info (#19865) (TKDev7)
  • 4112fd0 docs: clarify that boolean is still allowed for rule meta.deprecated (#19866) (Bryan Mishkin)

v9.29.0 - June 13, 2025

  • 5c114c9 chore: upgrade @​eslint/js@​9.29.0 (#19851) (Milos Djermanovic)
  • acf2201 chore: package.json update for @​eslint/js release (Jenkins)
  • f686fcb feat: add ecmaVersion: 2026, parsing using and await using (#19832) (Milos Djermanovic)
  • 85c082c fix: explicit matching behavior with negated patterns and arrays (#19845) (Milos Djermanovic)
  • 00e3e6a docs: add support for custom name parameter to includeIgnoreFile (#19795) (루밀LuMir)
  • 9bda4a9 fix: fix LintOptions.filterCodeBlock types (#19837) (ntnyq)
  • a806994 refactor: Remove eslintrc from flat config functionality (#19833) (Nicholas C. Zakas)
  • 19cdd22 feat: prune suppressions for non-existent files (#19825) (TKDev7)
  • b3d720f feat: add ES2025 globals (#19835) (fisker Cheung)
  • 677a283 feat: add auto-accessor fields support to class-methods-use-this (#19789) (sethamus)
  • 3aed075 docs: Update README (GitHub Actions Bot)
  • 7ab77a2 fix: correct breaking deprecation of FlatConfig type (#19826) (Logicer)
  • a2f888d docs: enhance documentation with links and fix typos (#19761) (루밀LuMir)
  • dbba058 feat: allow global type declaration in no-var (#19714) (Remco Haszing)
  • 152ed51 test: switch to flat config mode in code path analysis tests (#19824) (Milos Djermanovic)
  • b647239 chore: Update first-party dependencies faster with Renovate (#19822) (Nicholas C. Zakas)
  • 7abe42e refactor: SafeEmitter -> SourceCodeVisitor (#19708) (Nicholas C. Zakas)
  • 342bd29 feat: ignore type annotations in no-restricted-globals (#19781) (sethamus)
  • e392895 perf: improve time complexity of getLocFromIndex (#19782) (루밀LuMir)
  • 1ba3318 fix: add language and dialects to no-use-before-define (#19808) (Francesco Trotta)
  • 786bcd1 feat: add allowProperties option to no-restricted-properties (#19772) (sethamus)
  • 05b66d0 feat: add sourceCode.isGlobalReference(node) method (#19695) (Nitin Kumar)
  • 53c3235 docs: update to clarify prompt usage (#19748) (Jennifer Davis)
  • 0ed289c chore: remove accidentally committed file (#19807) (Francesco Trotta)
Commits
  • 5a5d526 chore: package.json update for @​eslint/js release
  • acf2201 chore: package.json update for @​eslint/js release
  • See full diff in compare view

Updates bootstrap from 5.3.6 to 5.3.7

Release notes

Sourced from bootstrap's releases.

v5.3.7

📚 Documentation

  • Fixed broken "View on GitHub" URLs
  • Corrected HTML <head> content generated by the "Download examples" button
  • Refined sanitizer documentation for clarity and completeness
  • Improved accessibility in the "On this page" table of contents and section heading anchor links
  • Relocated ads to the right sidebar to minimize content reflow
  • Added a new section on the Download page for the Intelissence extension
  • Clarified the "Via JavaScript" usage example for Accordion Collapse
  • Made internal documentation improvements to support future maintenance (no visible user impact)
  • Mention CDN integrity and crossorigin attributes in introduction page
  • Enhance floating labels placeholder usage description
  • Add example of showing dynamic range value with output

🎨 Sass

  • Consolidated multiple 'none' values in the box-shadow Sass mixin for cleaner output

🤖 JavaScript

  • Fixed popover and tooltip behavior with a trigger: "hover click" configuration

🤝 Contributions

  • Added recommended VSCode extensions and settings configuration to the repository
Commits
  • e0032ae Release v5.3.7 (#41509)
  • 0f63de9 Build(deps-dev): Bump zod from 3.25.56 to 3.25.57
  • 37f33ff Build(deps-dev): Bump the development-dependencies group with 2 updates (#41531)
  • 03f27a2 Docs: add example of showing dynamic range value with output (#41516)
  • f04b980 Docs: enhance floating labels placeholder usage description (#41526)
  • 1c00b1f Build(deps-dev): Bump the development-dependencies group with 3 updates (#41528)
  • 590226f Build(deps-dev): Bump the development-dependencies group with 2 updates
  • 0a9fa30 Build(deps-dev): Bump the development-dependencies group with 4 updates (#41525)
  • 0b6c09a Build(deps-dev): Bump zod from 3.25.48 to 3.25.49 (#41513)
  • e6fdd27 Mentions CDN integrity and crossorigin attributes in Intro docs page (#41515)
  • Additional commits viewable in compare view

Updates hugo-bin from 0.144.7 to 0.144.9

Commits

Updates postcss from 8.5.4 to 8.5.6

Release notes

Sourced from postcss's releases.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).
Changelog

Sourced from postcss's changelog.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).
Commits

Updates stylelint from 16.20.0 to 16.21.0

Release notes

Sourced from stylelint's releases.

16.21.0

It rounds out the message secondary option and marks it as stable, adds 1 new option to a rule, and fixes 4 bugs.

  • Added: non-experimental support for functional message secondary option (#8595) (@​ybiquitous).
  • Added: ignore: ["after-custom-property"] to custom-property-empty-line-before (#8627) (@​imkesin).
  • Fixed: cache configuration property not being respected (#8599) (@​ybiquitous).
  • Fixed: fastest-levenshtein import when bundling (#8621) (@​onigoetz).
  • Fixed: named-grid-areas-no-invalid false positives for interpolated grid-template-areas in CSS-in-JS (#8606) (@​shahana308).
  • Fixed: selector-pseudo-*-no-unknown false positives for the missing form control styling selectors (#8623) (@​tyrann0us).
Changelog

Sourced from stylelint's changelog.

16.21.0 - 2025-06-19

It rounds out the message secondary option and marks it as stable, adds 1 new option to a rule, and fixes 4 bugs.

  • Added: non-experimental support for functional message secondary option (#8595) (@​ybiquitous).
  • Added: ignore: ["after-custom-property"] to custom-property-empty-line-before (#8627) (@​imkesin).
  • Fixed: cache configuration property not being respected (#8599) (@​ybiquitous).
  • Fixed: fastest-levenshtein import when bundling (#8621) (@​onigoetz).
  • Fixed: named-grid-areas-no-invalid false positives for interpolated grid-template-areas in CSS-in-JS (#8606) (@​shahana308).
  • Fixed: selector-pseudo-*-no-unknown false positives for the missing form control styling selectors (#8623) (@​tyrann0us).
Commits
  • 90ffc0b 16.21.0
  • e34a2a3 Prepare 16.21.0 (#8598)
  • 18c9d63 Fix selector-pseudo-*-no-unknown false positives for form control styling s...
  • b006c58 Fix cache configuration property not being respected (#8599)
  • b764c23 Fix named-grid-areas-no-invalid false positives for interpolated grid-templ...
  • 103c2d2 Add ignore: ["after-custom-property"] to `custom-property-empty-line-before...
  • 1f9791b Document custom-property-empty-line-before ignore examples correctly (#8628)
  • 8a9a830 Fix fastest-levenshtein import when bundling (#8621)
  • 651a1b4 Document notation typo fix (#8624)
  • 93d1af1 Bump known-css-properties from 0.36.0 to 0.37.0 (#8619)
  • Additional commits viewable in compare view

Updates stylelint-config-twbs-bootstrap from 16.0.0 to 16.1.0

Release notes

Sourced from stylelint-config-twbs-bootstrap's releases.

v16.1.0

What's Changed

Full Changelog: twbs/stylelint-config-twbs-bootstrap@v16.0.0...v16.1.0

Commits

Updates svgo from 3.3.2 to 4.0.0

Release notes

Sourced from svgo's releases.

v4.0.0

Banner celebrating the release of SVGO v4.0.0. Includes the SVGO mascot drawing on a chalkboard with the changes in default plugins. For example, removeViewBox was moved from default plugins to available plugins.

Illustration by Vukory

It's been just over a year since our first release candidate, but I believe we can now release SVGO v4.0.0 with confidence! Thank you to all contributors who tested our RC builds and reported issues back up, this really smoothed out the process.

We actually wanted to do the release sooner, but it was a challenge to find the right time to publish a major release, since that means setting time aside to support users through migrations, helping downstream projects migrate, being available to fix or document things that users found to have an unexpected impact by this release, etc. I appreciate everyone's patience, and now that this is done, we can hopefully increase the pace of development again and tackle that backlog of old bugs. ^-^'

Breaking Changes

Please refer to the Migration Guide from v3 to v4 for a more concise version! This section is more verbose as it delves into the motivation of changes too.

Dropped Support for Node.js v14

Node.js v14 is no longer supported by the Node.js team, including security support, since 30 April 2023. Node.js v16 is no longer supported either, but as some are still using it, we'll save dropping support for Node.js v16 for the next major release.

This allows us to update our dependencies to more recent versions and to access more modern Node.js APIs.

Node.js v14 may still work at the time of this release, but we'll no longer be testing against v14 from now on.

Default Plugins

Both removeViewBox and removeTitle have been disabled by default. Both have been major pain points for users and don't make sense to enable in most cases. Other libraries wrapping SVGO have also been disabling these plugins by default, such as Docusaurus and SVGR.

  • removeViewBox removes the scalability of SVGs.
  • removeTitle reduces accessibility, which preserving accessibility is more important than optimization.

If you would like either of these plugins enabled, you can do so by configuring it in the SVGO config, see the README for more context, however please read the warnings described in the documentation of the plugins first:

  export default {
    plugins: [
      'preset-default', // built-in plugins enabled by default
+     'removeViewBox',
+     'removeTitle',
    ],
  };

removeScriptElement → removeScripts

The removeScriptElement plugin has been renamed to removeScripts, to more accurately reflect what the plugin does. It does not only remove the <script> tag, but also event handlers and script URIs from links.

To migrate, amend your SVGO config to refer to removeScripts instead if you use that plugin.

... (truncated)

Commits
  • 71e1f05 chore: prepare v4 stable release (#2143)
  • 4078c13 chore: increment version to v4.0.0-rc.5 (#2142)
  • cb3eea8 fix(#2140): SVGO fails with ERR_UNSUPPORTED_ESM_URL_SCHEME on Windows (#2141)
  • 2582096 chore(deps): bump streetsidesoftware/cspell-action from 6 to 7 (#2139)
  • e1252fa deps: drop yarn/releases directory (#2138)
  • feb9b5e fix(convertColors): use currentColor instead of currentcolor (#2137)
  • e645d71 performance: small optimization when parsing svgs (#2133)
  • 26d059f fix: invoke mapNodesToParents lazily (#2132)
  • b761d1b feat: add editor namespace for Boxy SVG (#2008)
  • 31328bc chore: add krita namespace to list of editor namespaces (#2131)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.28.0` | `9.30.0` |
| [bootstrap](https://github.com/twbs/bootstrap) | `5.3.6` | `5.3.7` |
| [hugo-bin](https://github.com/fenneclab/hugo-bin) | `0.144.7` | `0.144.9` |
| [postcss](https://github.com/postcss/postcss) | `8.5.4` | `8.5.6` |
| [stylelint](https://github.com/stylelint/stylelint) | `16.20.0` | `16.21.0` |
| [stylelint-config-twbs-bootstrap](https://github.com/twbs/stylelint-config-twbs-bootstrap) | `16.0.0` | `16.1.0` |
| [svgo](https://github.com/svg/svgo) | `3.3.2` | `4.0.0` |


Updates `@eslint/js` from 9.28.0 to 9.30.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.30.0/packages/js)

Updates `bootstrap` from 5.3.6 to 5.3.7
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v5.3.6...v5.3.7)

Updates `hugo-bin` from 0.144.7 to 0.144.9
- [Release notes](https://github.com/fenneclab/hugo-bin/releases)
- [Commits](fenneclab/hugo-bin@v0.144.7...v0.144.9)

Updates `postcss` from 8.5.4 to 8.5.6
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.4...8.5.6)

Updates `stylelint` from 16.20.0 to 16.21.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@16.20.0...16.21.0)

Updates `stylelint-config-twbs-bootstrap` from 16.0.0 to 16.1.0
- [Release notes](https://github.com/twbs/stylelint-config-twbs-bootstrap/releases)
- [Commits](twbs/stylelint-config-twbs-bootstrap@v16.0.0...v16.1.0)

Updates `svgo` from 3.3.2 to 4.0.0
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v3.3.2...v4.0.0)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 9.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: bootstrap
  dependency-version: 5.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: hugo-bin
  dependency-version: 0.144.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: postcss
  dependency-version: 8.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: stylelint
  dependency-version: 16.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: stylelint-config-twbs-bootstrap
  dependency-version: 16.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: svgo
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@XhmikosR
Copy link
Member

XhmikosR commented Jul 1, 2025

@dependabot ignore svgo major version

Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 1, 2025

OK, I won't notify you about version 4.x.x of svgo again, unless you unignore it.

Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jul 1, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/development-dependencies-44aa708e64 branch July 1, 2025 13:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant