Skip to content

chore(deps-dev): bump the dev-dependencies group with 7 updates - #245

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-886b48154b
Open

chore(deps-dev): bump the dev-dependencies group with 7 updates#245
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-886b48154b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown

Bumps the dev-dependencies group with 7 updates:

Package From To
eslint 10.13.0 10.14.0
postcss 8.5.31 8.5.32
rolldown 1.2.15 1.2.16
shadcn 4.22.1 4.23.0
typescript-eslint 8.72.0 8.72.1
@agentclientprotocol/sdk 2.0.2 2.2.0
tsdown 0.23.2 0.23.4

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates postcss from 8.5.31 to 8.5.32

Release notes

Sourced from postcss's releases.

8.5.32

  • Fixed Input#origin() without opts.from (by @​wleeaf).
  • Fixed final-word lookup without source offsets (by @​Don-Yin).
  • Fixed explicit start in Warning#toString() (by @​Don-Yin).
  • Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).
Changelog

Sourced from postcss's changelog.

8.5.32

  • Fixed Input#origin() without opts.from (by @​wleeaf).
  • Fixed final-word lookup without source offsets (by @​Don-Yin).
  • Fixed explicit start in Warning#toString() (by @​Don-Yin).
  • Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).
Commits

Updates rolldown from 1.2.15 to 1.2.16

Release notes

Sourced from rolldown's releases.

v1.2.16

[1.2.16] - 2026-10-29

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.16] - 2026-10-29

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

... (truncated)

Commits
  • de6facf release: v1.2.16 (#11383)
  • c9e8b54 feat(devtools): report mode - agent-readable build metrics report (#10364)
  • 9c0af88 fix: await bundle.close() in loadConfig and clean up every generated config f...
  • 155368e fix(transform): don't crash when the working directory has been deleted (#11352)
  • d2b79ac fix(import-glob): follow directory symlinks on the wasm binding (#10624)
  • f79cf6c feat(inline-common-chunks): print record factories parenthesized so they comp...
  • bc13a9f fix(transform): report tsconfigFilePaths for a tsconfig resolved through `T...
  • 8a7874f fix(tsconfig): don't apply tsconfig when resolving imports from virtual modul...
  • b1c2508 chore(deps): update oxc to 0.156.0 (#11326)
  • ce12e5d perf: avoid copying module code for renderedLength and share chunk.code a...
  • Additional commits viewable in compare view

Updates shadcn from 4.22.1 to 4.23.0

Release notes

Sourced from shadcn's releases.

shadcn@4.23.0

Minor Changes

  • #12296 15f59b4 Thanks @​mattzcarey! - Upgrade the MCP server to MCP TypeScript SDK v2 (@modelcontextprotocol/server). shadcn mcp now serves MCP protocol 2026-07-28 as well as earlier versions. The shadcn/mcp export is now an McpServer, and a new createServer() export returns a fresh instance per connection. Code that called server.setRequestHandler(...) on the old Server export should use server.registerTool(...) or server.server.setRequestHandler(...) instead.

shadcn@4.22.2

Patch Changes

Changelog

Sourced from shadcn's changelog.

4.23.0

Minor Changes

  • #12296 15f59b4 Thanks @​mattzcarey! - Upgrade the MCP server to MCP TypeScript SDK v2 (@modelcontextprotocol/server). shadcn mcp now serves MCP protocol 2026-07-28 as well as earlier versions. The shadcn/mcp export is now an McpServer, and a new createServer() export returns a fresh instance per connection. Code that called server.setRequestHandler(...) on the old Server export should use server.registerTool(...) or server.server.setRequestHandler(...) instead.

4.22.2

Patch Changes

Commits

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @agentclientprotocol/sdk from 2.0.2 to 2.2.0

Release notes

Sourced from @​agentclientprotocol/sdk's releases.

v2.2.0

2.2.0 (2026-10-30)

Features

  • update to schema v1.28.0 and v2.0.0-alpha.11 (#326) (c19627e)
  • v2: add a helper that rejects unadvertised MCP transports (#324) (08a0d30)
  • v2: keep ActiveSession.configOptions in sync with config updates (#323) (446874d)

v2.1.0

2.1.0 (2026-10-28)

Features

  • add RequestError.sessionNotFound and align examples and docs with the latest protocol (#317) (cbb81e9)
  • unstable: add MCP-over-ACP caller and provider (#311) (1fe5041)
  • unstable: add MCP-over-ACP HTTP bridge (#313) (b979377)
  • unstable: serve MCP SDK servers over MCP-over-ACP (#314) (bca8e49)
  • update to schema v1.27.0 and v2.0.0-alpha.10 (#315) (6c3e6d3)

Bug Fixes

  • don't print raw invalid messages or failed notification params (#318) (c5db504)
  • match Rust parsing for null lists, elicitation scope and 64-bit integers (#316) (a68441d)
  • v2: follow v2 initialize negotiation rules and reject null request IDs (#319) (4805748)
Changelog

Sourced from @​agentclientprotocol/sdk's changelog.

2.2.0 (2026-10-30)

Features

  • update to schema v1.28.0 and v2.0.0-alpha.11 (#326) (c19627e)
  • v2: add a helper that rejects unadvertised MCP transports (#324) (08a0d30)
  • v2: keep ActiveSession.configOptions in sync with config updates (#323) (446874d)

2.1.0 (2026-10-28)

Features

  • add RequestError.sessionNotFound and align examples and docs with the latest protocol (#317) (cbb81e9)
  • unstable: add MCP-over-ACP caller and provider (#311) (1fe5041)
  • unstable: add MCP-over-ACP HTTP bridge (#313) (b979377)
  • unstable: serve MCP SDK servers over MCP-over-ACP (#314) (bca8e49)
  • update to schema v1.27.0 and v2.0.0-alpha.10 (#315) (6c3e6d3)

Bug Fixes

  • don't print raw invalid messages or failed notification params (#318) (c5db504)
  • match Rust parsing for null lists, elicitation scope and 64-bit integers (#316) (a68441d)
  • v2: follow v2 initialize negotiation rules and reject null request IDs (#319) (4805748)
Commits
  • e23cc64 chore(main): release 2.2.0 (#325)
  • c19627e feat: update to schema v1.28.0 and v2.0.0-alpha.11 (#326)
  • 08a0d30 feat(v2): add a helper that rejects unadvertised MCP transports (#324)
  • 446874d feat(v2): keep ActiveSession.configOptions in sync with config updates (#323)
  • f60028e docs(examples): reject prompt content the dual-version agent doesn't advertis...
  • f935d75 docs(examples): make session/close idempotent in the dual-version agent (#321)
  • dbbe157 chore(main): release 2.1.0 (#312)
  • 4805748 fix(v2): follow v2 initialize negotiation rules and reject null request IDs (...
  • c5db504 fix: don't print raw invalid messages or failed notification params (#318)
  • cbb81e9 feat: add RequestError.sessionNotFound and align examples and docs with the l...
  • Additional commits viewable in compare view

Updates tsdown from 0.23.2 to 0.23.4

Release notes

Sourced from tsdown's releases.

v0.23.4

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v0.23.3

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 83b6fb5 chore: release v0.23.4
  • 8e22a34 chore: upgrade deps, hoist regex patterns
  • f925e52 perf: use tinyps in hooks (#1112)
  • 17bd0fc fix(config): ignore empty env file paths and scope env deps per watcher
  • 5800398 feat(cjs): warn when platform is ignored for the CJS format (#1111)
  • 5d55836 feat(config): support multiple env files (#1110)
  • 75a78ce fix(css): inline ?inline CSS imported from dependencies (#1109)
  • a853d19 fix(attw): apply profiles to file-based problems (#1108)
  • 53638e8 chore: release v0.23.3
  • 0344c4f fix: downgrade rolldown-plugin-dts to 0.28 to restore TypeScript 7.0 support ...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-dependencies group with 7 updates
947195e 
Bumps the dev-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [eslint](https://github.com/eslint/eslint) | `10.13.0` | `10.14.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.31` | `8.5.32` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.15` | `1.2.16` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.22.1` | `4.23.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.72.0` | `8.72.1` |
| [@agentclientprotocol/sdk](https://github.com/agentclientprotocol/typescript-sdk) | `2.0.2` | `2.2.0` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.23.2` | `0.23.4` |


Updates `eslint` from 10.13.0 to 10.14.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.13.0...v10.14.0)

Updates `postcss` from 8.5.31 to 8.5.32
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.31...8.5.32)

Updates `rolldown` from 1.2.15 to 1.2.16
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.16/packages/rolldown)

Updates `shadcn` from 4.22.1 to 4.23.0
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.23.0/packages/shadcn)

Updates `typescript-eslint` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `@agentclientprotocol/sdk` from 2.0.2 to 2.2.0
- [Release notes](https://github.com/agentclientprotocol/typescript-sdk/releases)
- [Changelog](https://github.com/agentclientprotocol/typescript-sdk/blob/main/CHANGELOG.md)
- [Commits](agentclientprotocol/typescript-sdk@v2.0.2...v2.2.0)

Updates `tsdown` from 0.23.2 to 0.23.4
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.23.2...v0.23.4)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: postcss
  dependency-version: 8.5.32
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: rolldown
  dependency-version: 1.2.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: shadcn
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@agentclientprotocol/sdk"
  dependency-version: 2.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: tsdown
  dependency-version: 0.23.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from dgesteves as a code owner November 3, 2026 23:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 3, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dgesteves dgesteves Awaiting requested review from dgesteves dgesteves is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants