Skip to content

build(deps): bump the all group with 5 updates - #132

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-4f8e679826
Oct 1, 2026
Merged

build(deps): bump the all group with 5 updates#132
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-4f8e679826

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 5 updates:

Package From To
jsonc 2.0.0 3.0.0
vscode-languageserver 10.1.1 10.1.2
vscode-languageserver-textdocument 1.0.14 1.0.15
@types/node 26.4.0 26.6.3
mocha 12.0.0 12.0.2

Updates jsonc from 2.0.0 to 3.0.0

Release notes

Sourced from jsonc's releases.

v3.0.0

Breaking release!.. ESM-only, Node.js 22+, and a few behavior changes; see Changed. The method names and signatures are the same as v2.

Added

  • allowTrailingCommas option for parse(), read(), readSync() and their safe versions. Opt-in (default false); allows trailing commas in objects and arrays, as in JSONC files such as tsconfig.json. Takes effect only when comments are stripped.
  • Generic return types for parse<T>(), read<T>(), readSync<T>() and normalize<T>() (default any); the safe versions return SafeResult<T>. The type is not validated at runtime.
  • handleCircular option for write() / writeSync() (default true).
  • Named exports: jsonc, safe and all option types (IParseOptions, IStringifyOptions, IReadOptions, IWriteOptions, IConfig, Replacer, Reviver, SafeResult); jsonc is also the default export. In v2, the typings only declared jsonc, so import { safe } from 'jsonc' did not type-check.

Changed

  • Breaking: ESM-only. The package is now "type": "module" with an exports map; the CommonJS index.js entry is removed. On Node.js 22.12 or newer, require('jsonc') still works (Node's require(esm)) and returns jsonc itself as in v2; so const jsonc = require('jsonc') and const { jsonc, safe } = require('jsonc') both work. On 22.0 – 22.11, use import.
  • Breaking: Requires Node.js 22 or newer (was 8).
  • Breaking: write() / writeSync() now handle circular references like stringify() does (written as "[Circular]"); they used to throw. Pass handleCircular: false for the old behavior.
  • Breaking: stringify() (and normalize()) now throw for a BigInt and rethrow any other serialization error (e.g. from a toJSON()), as the native method does. They used to return the string "[unable to serialize, circular reference is too complex to analyze]".
  • Breaking: safe.stringify() now honors handleCircular: false and returns [TypeError, undefined] for a circular value; it used to ignore the option.
  • parse() now replaces comments with whitespace instead of removing them, so the position, line and column in a parse error point into the original string (read() already did this). The parsed result is the same.
  • write() / writeSync() return type is narrowed from boolean to true.
  • config() argument is now optional; omitted streams reset to process.stdout / process.stderr.
  • Updated parse-json to v8 and strip-json-comments to v5. Parse errors are parse-json v8's JSONError (with a code frame).

Fixed

  • Fixed an issue where log() / logp() would print an empty string for undefined and would throw for a Symbol argument.
  • Fixed the Replacer type, which only allowed a function; it now also accepts an allow-list array of property names (as the runtime always did).
  • Fixed the IConfig stream types (NodeJS.WriteStream, i.e. a TTY stream), which rejected file streams such as fs.createWriteStream(). They are now NodeJS.WritableStream.
  • Fixed broken examples in the API docs (safe read() / write() examples had syntax errors; stringify() docs claimed it throws on circular references by default).

Removed

  • Removed the graceful-fs, mkdirp and strip-bom dependencies; file I/O uses node:fs and node:fs/promises, with native recursive mkdir. Runtime dependencies are now fast-safe-stringify, parse-json and strip-json-comments.
  • Removed the Docma docs build; the README is the documentation now.

Tooling

  • TypeScript build (tsc) to lib/ with tsconfig-oy; Biome (biome-config-oy) replaces TSLint.
  • Vitest replaces Jest; 100% coverage on all four metrics plus Stryker mutation testing at 100%.
  • GitHub Actions CI (Node.js 22, 24, 26 + a mutation job) replaces Travis CI and Coveralls.
Changelog

Sourced from jsonc's changelog.

3.0.0 (2026-09-24)

Breaking release!.. ESM-only, Node.js 22+, and a few behavior changes; see Changed. The method names and signatures are the same as v2.

Added

  • allowTrailingCommas option for parse(), read(), readSync() and their safe versions. Opt-in (default false); allows trailing commas in objects and arrays, as in JSONC files such as tsconfig.json. Takes effect only when comments are stripped.
  • Generic return types for parse<T>(), read<T>(), readSync<T>() and normalize<T>() (default any); the safe versions return SafeResult<T>. The type is not validated at runtime.
  • handleCircular option for write() / writeSync() (default true).
  • Named exports: jsonc, safe and all option types (IParseOptions, IStringifyOptions, IReadOptions, IWriteOptions, IConfig, Replacer, Reviver, SafeResult); jsonc is also the default export. In v2, the typings only declared jsonc, so import { safe } from 'jsonc' did not type-check.

Changed

  • Breaking: ESM-only. The package is now "type": "module" with an exports map; the CommonJS index.js entry is removed. On Node.js 22.12 or newer, require('jsonc') still works (Node's require(esm)) and returns jsonc itself as in v2; so const jsonc = require('jsonc') and const { jsonc, safe } = require('jsonc') both work. On 22.0 – 22.11, use import.
  • Breaking: Requires Node.js 22 or newer (was 8).
  • Breaking: write() / writeSync() now handle circular references like stringify() does (written as "[Circular]"); they used to throw. Pass handleCircular: false for the old behavior.
  • Breaking: stringify() (and normalize()) now throw for a BigInt and rethrow any other serialization error (e.g. from a toJSON()), as the native method does. They used to return the string "[unable to serialize, circular reference is too complex to analyze]".
  • Breaking: safe.stringify() now honors handleCircular: false and returns [TypeError, undefined] for a circular value; it used to ignore the option.
  • parse() now replaces comments with whitespace instead of removing them, so the position, line and column in a parse error point into the original string (read() already did this). The parsed result is the same.
  • write() / writeSync() return type is narrowed from boolean to true.
  • config() argument is now optional; omitted streams reset to process.stdout / process.stderr.
  • Updated parse-json to v8 and strip-json-comments to v5. Parse errors are parse-json v8's JSONError (with a code frame).

Fixed

  • Fixed an issue where log() / logp() would print an empty string for undefined and would throw for a Symbol argument.
  • Fixed the Replacer type, which only allowed a function; it now also accepts an allow-list array of property names (as the runtime always did).
  • Fixed the IConfig stream types (NodeJS.WriteStream, i.e. a TTY stream), which rejected file streams such as fs.createWriteStream(). They are now NodeJS.WritableStream.
  • Fixed broken examples in the API docs (safe read() / write() examples had syntax errors; stringify() docs claimed it throws on circular references by default).

Removed

  • Removed the graceful-fs, mkdirp and strip-bom dependencies; file I/O uses node:fs and node:fs/promises, with native recursive mkdir. Runtime dependencies are now fast-safe-stringify, parse-json and strip-json-comments.
  • Removed the Docma docs build; the README is the documentation now.

Tooling

  • TypeScript build (tsc) to lib/ with tsconfig-oy; Biome (biome-config-oy) replaces TSLint.
  • Vitest replaces Jest; 100% coverage on all four metrics plus Stryker mutation testing at 100%.
  • GitHub Actions CI (Node.js 22, 24, 26 + a mutation job) replaces Travis CI and Coveralls.
Commits
  • 02eb679 docs(changelog): drop the orphan compare link
  • 599c0da docs(changelog): use the house heading format
  • 89897ea docs: document the 3.0.0 changes in the README and CHANGELOG
  • decd8be chore: use node:fs instead of graceful-fs
  • 689eecb rev: type the write() / writeSync() result as true
  • 9411c26 feat: generic return types for parse(), read(), readSync() and normalize()
  • b558724 feat: add the allowTrailingCommas option to parse() and read()
  • 914edbe fix: point parse() error positions into the source string
  • 3f85bf8 fix: throw for BigInt and other unserializable values in stringify()
  • e44a835 fix: honor handleCircular: false in safe.stringify()
  • Additional commits viewable in compare view

Updates vscode-languageserver from 10.1.1 to 10.1.2

Commits

Updates vscode-languageserver-textdocument from 1.0.14 to 1.0.15

Release notes

Sourced from vscode-languageserver-textdocument's releases.

release/textDocument/1.0.15

Changes:

  • #1864: Remove publishPackageToAzureArtifacts property
  • #1854: Include error code and message in the 'Sending response' trace log
  • #1853: Route jsonrpc connection logging to the output channel instead of console
  • #1827: Expose null progress reporter detection
  • #1855: Fix unhandled rejection when writing a JSON-RPC request fails
  • #1856: Bump js-yaml from 4.3.1 to 4.3.2
  • #1858: Fall back to a full result when previousResult gets an unknown id
  • #1846: Fix socket transport when TransportKind.socket uses port 0
  • #1850: Bump fast-uri from 3.1.5 to 3.1.7
  • #1851: Bump browserslist from 4.28.1 to 4.28.8
  • #1852: Bump @​humanfs/node from 0.16.7 to 0.16.8
  • #1848: Align implementation with specification
  • #1847: Enable publishing to Azure Artifacts
  • #1841: redirect console.info to avoid corrupting stdio
  • #1844: Release version 3.18.3 and update lock files
  • #1843: 3.18.3 release and lock file updates

This list of changes was auto generated.

Commits

Updates @types/node from 26.4.0 to 26.6.3

Commits

Updates mocha from 12.0.0 to 12.0.2

Release notes

Sourced from mocha's releases.

v12.0.2

12.0.2 (2026-09-17)

🩹 Fixes

  • fail nested tests on beforeEach failure (#6292) (a75b43b)
  • give CLI reporter-option precedence over config file (#6331) (571110f)
  • propagate spec file path on parallel worker death (#6268) (55a544a)
  • use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342) (a652ff5)
  • watch existing dirs so first run starts armed (#6263) (f5c8aca)

📚 Documentation

🧹 Chores

v12.0.1

12.0.1 (2026-09-08)

... (truncated)

Changelog

Sourced from mocha's changelog.

12.0.2 (2026-09-17)

🩹 Fixes

  • fail nested tests on beforeEach failure (#6292) (a75b43b)
  • give CLI reporter-option precedence over config file (#6331) (571110f)
  • propagate spec file path on parallel worker death (#6268) (55a544a)
  • use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342) (a652ff5)
  • watch existing dirs so first run starts armed (#6263) (f5c8aca)

📚 Documentation

🧹 Chores

12.0.1 (2026-09-08)

🩹 Fixes

... (truncated)

Commits
  • 70db1c7 chore(main): release 12.0.2 (#6300)
  • 571110f fix: give CLI reporter-option precedence over config file (#6331)
  • a652ff5 fix: use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342)
  • a8309fd chore: stop auto-adding PRs to project (#6352)
  • 2668e71 chore: replace find-conflicts with improved smoke versions (#6344)
  • 6728030 chore: add folder for reproducing issues (#6330)
  • e7b7fe1 chore: exclude "v11.x" from "stale branch" workflow (#6338)
  • a923e25 Ping maintainers on stale branch review issues (#6326)
  • 633480c chore: fixup workflow perms in-job (#6327)
  • cd2a730 chore: set author to Mark Wiemer (#6305)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the all group with 5 updates
c8c18a9 
Bumps the all group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [jsonc](https://github.com/onury/jsonc) | `2.0.0` | `3.0.0` |
| [vscode-languageserver](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/server) | `10.1.1` | `10.1.2` |
| [vscode-languageserver-textdocument](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/textDocument) | `1.0.14` | `1.0.15` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.6.3` |
| [mocha](https://github.com/mochajs/mocha) | `12.0.0` | `12.0.2` |


Updates `jsonc` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/onury/jsonc/releases)
- [Changelog](https://github.com/onury/jsonc/blob/master/CHANGELOG.md)
- [Commits](onury/jsonc@v2.0.0...v3.0.0)

Updates `vscode-languageserver` from 10.1.1 to 10.1.2
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.2/server)

Updates `vscode-languageserver-textdocument` from 1.0.14 to 1.0.15
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/textDocument/1.0.15/textDocument)

Updates `@types/node` from 26.4.0 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `mocha` from 12.0.0 to 12.0.2
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v12.0.0...v12.0.2)

---
updated-dependencies:
- dependency-name: jsonc
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vscode-languageserver
  dependency-version: 10.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: vscode-languageserver-textdocument
  dependency-version: 1.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: mocha
  dependency-version: 12.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2026
@github-actions
github-actions Bot merged commit 9a57e69 into main Oct 1, 2026
1 of 4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/all-4f8e679826 branch October 1, 2026 21:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants