Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 15 updates - #640

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-5e8e6b2bbd
Open

chore(deps-dev): bump the dev-dependencies group across 1 directory with 15 updates#640
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-5e8e6b2bbd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 15 updates in the / directory:

Package From To
@commitlint/cli 21.2.2 21.2.4
@commitlint/config-conventional 21.2.2 21.2.4
@microsoft/api-extractor 7.59.1 7.59.4
@stryker-mutator/core 10.0.0 10.1.1
@stryker-mutator/vitest-runner 10.0.0 10.1.1
@vitest/browser-webdriverio 4.1.11 5.0.0
@vitest/coverage-v8 4.1.11 5.0.5
eslint-plugin-sonarjs 4.2.1 4.2.2
fast-check 4.10.1 4.10.2
jscpd 5.2.1 5.4.2
knip 6.36.0 6.43.0
lockfile-lint 5.0.1 5.1.0
publint 0.3.24 0.3.25
vite-plus 0.3.2 1.4.0
webdriverio 9.31.9 10.1.0

Updates @commitlint/cli from 21.2.2 to 21.2.4

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

Refactor

Chore, ci, build, etc.

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/cli

21.2.3 (2026-09-19)

Bug Fixes

  • lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)
Commits

Updates @commitlint/config-conventional from 21.2.2 to 21.2.4

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

Refactor

Chore, ci, build, etc.

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/config-conventional

21.2.3 (2026-09-19)

Bug Fixes

  • rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)
Commits

Updates @microsoft/api-extractor from 7.59.1 to 7.59.4

Changelog

Sourced from @​microsoft/api-extractor's changelog.

7.59.4

Tue, 06 Oct 2026 00:04:37 GMT

Version update only

7.59.3

Mon, 28 Sep 2026 20:08:26 GMT

Version update only

7.59.2

Tue, 22 Sep 2026 17:35:41 GMT

Patches

  • Update the @microsoft/tsdoc dependency to ~0.17.0 and the @microsoft/tsdoc-config dependency to ~0.18.2.
Commits

Updates @stryker-mutator/core from 10.0.0 to 10.1.1

Release notes

Sourced from @​stryker-mutator/core's releases.

v10.1.1

10.1.1 (2026-10-23)

Due to the below provenance issue in the release process, this is a re-release of v10.1.0.

For more information on the provenance issue, see: sigstore/sigstore-js#1708 and npm/cli#10078

v10.1.0

10.1.0 (2026-10-23)

Bug Fixes

  • core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250
  • instrumenter: crash when mutating ts non null expression in babel >= 8 (#6221) (e873a24), closes #6185
  • vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
  • vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)

Features

Changelog

Sourced from @​stryker-mutator/core's changelog.

10.1.1 (2026-10-23)

Note: Version bump only for package @​stryker-mutator/core

10.1.0 (2026-10-23)

Bug Fixes

  • core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250

Features

Commits
  • 9591277 v10.1.1
  • d6148ff v10.1.0
  • c931a93 fix(core): prevent test runners racing to populate shared caches on startup (...
  • 7284a4a feat(core): report mutant duration in the mutation report (#6252)
  • 8419413 chore(deps): update dependency prettier to v3.9.4 (#6089)
  • aa7f3bb feat(core): cli option for command runner (#6006)
  • 201dce8 feat: add opt-in mutation-phase test timing diagnostics with sidecar reporter...
  • 61c7a59 chore(deps): update dependency @​types/semver to v7.8.0 (#6165)
  • See full diff in compare view

Updates @stryker-mutator/vitest-runner from 10.0.0 to 10.1.1

Release notes

Sourced from @​stryker-mutator/vitest-runner's releases.

v10.1.1

10.1.1 (2026-10-23)

Due to the below provenance issue in the release process, this is a re-release of v10.1.0.

For more information on the provenance issue, see: sigstore/sigstore-js#1708 and npm/cli#10078

v10.1.0

10.1.0 (2026-10-23)

Bug Fixes

  • core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250
  • instrumenter: crash when mutating ts non null expression in babel >= 8 (#6221) (e873a24), closes #6185
  • vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
  • vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)

Features

Changelog

Sourced from @​stryker-mutator/vitest-runner's changelog.

10.1.1 (2026-10-23)

Note: Version bump only for package @​stryker-mutator/vitest-runner

10.1.0 (2026-10-23)

Bug Fixes

  • vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
  • vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)

Features

Commits
  • 9591277 v10.1.1
  • d6148ff v10.1.0
  • cf5695e fix(vitest-runner): report mutant collection failures instead of surviving mu...
  • 3073ea2 feat(vitest-runner): support vitest pool options (#6268)
  • 6ad4adb fix(vitest-runner): do not select tests whose name only starts with a filtere...
  • 10e2cca feat(vitest-runner): support vitest v5 (#6214)
  • 7284a4a feat(core): report mutant duration in the mutation report (#6252)
  • d763db3 chore(deps): update dependency vite to v8.3.2 (#6091)
  • 8419413 chore(deps): update dependency prettier to v3.9.4 (#6089)
  • 201dce8 feat: add opt-in mutation-phase test timing diagnostics with sidecar reporter...
  • Additional commits viewable in compare view

Updates @vitest/browser-webdriverio from 4.1.11 to 5.0.0

Release notes

Sourced from @​vitest/browser-webdriverio's releases.

v5.0.0

   🚀 Features

    View changes on GitHub

v5.0.0-rc.1

No significant changes

    View changes on GitHub

v5.0.0-beta.6

   🐞 Bug Fixes

    View changes on GitHub

v4.1.12

No significant changes

    View changes on GitHub
Commits

Updates @vitest/coverage-v8 from 4.1.11 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates eslint-plugin-sonarjs from 4.2.1 to 4.2.2

Commits

Updates fast-check from 4.10.1 to 4.10.2

Release notes

Sourced from fast-check's releases.

v4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

  • (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes
Changelog

Sourced from fast-check's changelog.

4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

  • (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes
Commits

Updates jscpd from 5.2.1 to 5.4.2

Release notes

Sourced from jscpd's releases.

Release v5.4.2

The post What's new in jscpd 5.4.2 shows the new features with commands and real output.

New Features

  • Boundaries keep the code of a module inside it. The new boundaries key of the config file lists rules. A rule names the code it protects (code: a folder, a file, a glob, or a method as path#name), where copies of it must not show up (notIn, or every file outside code when it is left out) and where they may after all (allow). Every clone run checks the rules, and a copy of protected code outside its boundary fails the run with exit code 1. Import linters miss such copies, because a copied function imports nothing.

    • jscpd looks for copies three ways, and a rule can set its own bars in thresholds. Token clones find copy-paste, the structure comparison of --similarity finds an edited copy, and the --semantic model finds the same logic written again, often in another language. disable turns kinds off by their --kind names. Without a downloaded model, jscpd prints a warning and checks the rules without the semantic search.
    • A mistake in a rule, such as an unknown key or a glob that doesn't compile, stops the run with an error that names the rule. A rule that checks nothing in a run, after a typo in a path or a method name for example, gets a warning.
    • The console, console-full, ai and json reporters show the violations, the json one under boundaries. Baselines and --changed don't apply to violations yet, and SARIF, the language server and the MCP server don't report them.
    • fixtures/boundaries-demo is a small shop whose web app copies the backend's pricing and loan code. (#1225, #1227)

  • --ignore-identifiers pairs a name with one name. Every name used to match every other name, so x = x + x * x was a clone of d = a + b * c, although its data flows another way. Now a name on one side has to stand for the same name on the other side every time, and two names can't stand for one, as in Baker's parameterized matching and NiCad's consistent renaming. On 24 projects in 11 languages, 6,942 of the 14,501 renamed clones that the old matching reported had no such mapping.

    • jscpd cuts a clone where a name starts to stand for two and still reports every part of --min-tokens tokens or more.
    • A name reached as a member, after . or ?., and after -> in C, C++, PHP and Perl, is another name than a local of the same text. A constructor that sets this.url = url still matches its copy that sets this.url = link (#1220).
    • --ignore-identifiers and --ignore-identifiers=consistent give the new matching, --ignore-identifiers=blind the old one. The config takes "ignoreIdentifiers": true, "consistent" or "blind", and the Action input takes consistent or blind. The value goes after = only, so --ignore-identifiers src/ still scans src/.
    • fixtures/type2-demo has the consistent and members examples. (#1217, #1218)

  • --similarity pairs a name with one name too. The fingerprint of a subtree now records how its names repeat, so x = x + x * x no longer scores 1.0 against d = a + b * c, and a renamed copy still does. Members, labels such as keyword arguments and object keys, and types each have names of their own, so self.url = url still matches self.url = link. A function's own name matches any name. Kotlin's true, false and null and Clojure's true, false and nil are literals now. On the same 24 projects, 15 of 23,530 pairs fell below 0.8, and runs take 2 to 9% longer. --ignore-identifiers=blind brings back the old scores and also turns on renamed token clones. fixtures/similarity-demo/names scores a renamed copy at 1.00 and a mirrored function at 0.74. (#1219)

  • --history tracks the health score, and a bare --history walks the last 30 commits. Every commit of the series gets the score that jscpd --health gives its tree. The console draws a health chart under the duplication chart and adds HEALTH and CHANGE columns, and every point of the JSON report has health. --health and --dashboard take --history now: the badge or the dashboard comes first, then the series, in the markdown and html reports too.

    • jscpd --history used to fail with "a value is required". Without a value the flag takes the config's historyDescription has been truncated

@dependabot
chore(deps-dev): bump the dev-dependencies group across 1 directory w…
d410cc0 
…ith 15 updates

Bumps the dev-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.2` | `21.2.4` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.2` | `21.2.4` |
| [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.59.1` | `7.59.4` |
| [@stryker-mutator/core](https://github.com/stryker-mutator/stryker-js/tree/HEAD/packages/core) | `10.0.0` | `10.1.1` |
| [@stryker-mutator/vitest-runner](https://github.com/stryker-mutator/stryker-js/tree/HEAD/packages/vitest-runner) | `10.0.0` | `10.1.1` |
| [@vitest/browser-webdriverio](https://github.com/vitest-community/vitest-webdriverio) | `4.1.11` | `5.0.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.11` | `5.0.5` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.2.1` | `4.2.2` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.10.1` | `4.10.2` |
| [jscpd](https://github.com/kucherenko/jscpd/tree/HEAD/rust/jscpd) | `5.2.1` | `5.4.2` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.36.0` | `6.43.0` |
| [lockfile-lint](https://github.com/lirantal/lockfile-lint/tree/HEAD/packages/lockfile-lint) | `5.0.1` | `5.1.0` |
| [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.24` | `0.3.25` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.3.2` | `1.4.0` |
| [webdriverio](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/webdriverio) | `9.31.9` | `10.1.0` |



Updates `@commitlint/cli` from 21.2.2 to 21.2.4
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/cli)

Updates `@commitlint/config-conventional` from 21.2.2 to 21.2.4
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/config-conventional)

Updates `@microsoft/api-extractor` from 7.59.1 to 7.59.4
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/api-extractor)

Updates `@stryker-mutator/core` from 10.0.0 to 10.1.1
- [Release notes](https://github.com/stryker-mutator/stryker-js/releases)
- [Changelog](https://github.com/stryker-mutator/stryker-js/blob/master/packages/core/CHANGELOG.md)
- [Commits](https://github.com/stryker-mutator/stryker-js/commits/v10.1.1/packages/core)

Updates `@stryker-mutator/vitest-runner` from 10.0.0 to 10.1.1
- [Release notes](https://github.com/stryker-mutator/stryker-js/releases)
- [Changelog](https://github.com/stryker-mutator/stryker-js/blob/master/packages/vitest-runner/CHANGELOG.md)
- [Commits](https://github.com/stryker-mutator/stryker-js/commits/v10.1.1/packages/vitest-runner)

Updates `@vitest/browser-webdriverio` from 4.1.11 to 5.0.0
- [Release notes](https://github.com/vitest-community/vitest-webdriverio/releases)
- [Commits](https://github.com/vitest-community/vitest-webdriverio/commits/v5.0.0)

Updates `@vitest/coverage-v8` from 4.1.11 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `eslint-plugin-sonarjs` from 4.2.1 to 4.2.2
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `fast-check` from 4.10.1 to 4.10.2
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.10.2/packages/fast-check)

Updates `jscpd` from 5.2.1 to 5.4.2
- [Release notes](https://github.com/kucherenko/jscpd/releases)
- [Commits](https://github.com/kucherenko/jscpd/commits/v5.4.2/rust/jscpd)

Updates `knip` from 6.36.0 to 6.43.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.43.0/packages/knip)

Updates `lockfile-lint` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/lirantal/lockfile-lint/releases)
- [Changelog](https://github.com/lirantal/lockfile-lint/blob/main/packages/lockfile-lint/CHANGELOG.md)
- [Commits](https://github.com/lirantal/lockfile-lint/commits/lockfile-lint-api@5.1.0/packages/lockfile-lint)

Updates `publint` from 0.3.24 to 0.3.25
- [Release notes](https://github.com/publint/publint/releases)
- [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md)
- [Commits](https://github.com/publint/publint/commits/publint@0.3.25/packages/publint)

Updates `vite-plus` from 0.3.2 to 1.4.0
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v1.4.0/packages/cli)

Updates `webdriverio` from 9.31.9 to 10.1.0
- [Release notes](https://github.com/webdriverio/webdriverio/releases)
- [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webdriverio/webdriverio/commits/v10.1.0/packages/webdriverio)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 21.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@microsoft/api-extractor"
  dependency-version: 7.59.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@stryker-mutator/core"
  dependency-version: 10.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@stryker-mutator/vitest-runner"
  dependency-version: 10.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@vitest/browser-webdriverio"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: fast-check
  dependency-version: 4.10.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: jscpd
  dependency-version: 5.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: knip
  dependency-version: 6.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: lockfile-lint
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: publint
  dependency-version: 0.3.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vite-plus
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: webdriverio
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026
@dependabot
dependabot Bot requested a review from hyanmandian as a code owner November 2, 2026 12:05
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Nov 2, 2026
@coderabbitai

coderabbitai Bot commented Nov 2, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 83841dfd-c831-4dcc-a847-2f0813935a2c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hyanmandian hyanmandian Awaiting requested review from hyanmandian hyanmandian is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants