Skip to content

deps: bump the dependency-updates group across 1 directory with 7 updates#1951

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/dependency-updates-d1ebdc3ab6
Closed

deps: bump the dependency-updates group across 1 directory with 7 updates#1951
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/dependency-updates-d1ebdc3ab6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the dependency-updates group with 7 updates in the / directory:

Package From To
@primer/octicons-react 19.24.0 19.25.0
@primer/react 38.19.0 38.20.0
postcss 8.5.9 8.5.12
eslint-plugin-promise 7.2.1 7.3.0
eslint-plugin-react-hooks 7.0.1 7.1.1
prettier 3.8.2 3.8.3
tap 21.6.3 21.7.1

Updates @primer/octicons-react from 19.24.0 to 19.25.0

Release notes

Sourced from @​primer/octicons-react's releases.

v19.25.0

Minor Changes

v19.24.1

Patch Changes

Changelog

Sourced from @​primer/octicons-react's changelog.

19.25.0

Minor Changes

19.24.1

Patch Changes

Commits

Updates @primer/react from 38.19.0 to 38.20.0

Release notes

Sourced from @​primer/react's releases.

@​primer/react@​38.20.0

Minor Changes

  • #7723 ec6c88f Thanks @​liuliu-dev! - Add Card component with subcomponents: Card.Icon, Card.Image, Card.Heading, Card.Description, Card.Menu, and Card.Metadata

  • #7725 d7b9313 Thanks @​TylerJDev! - AnchoredOverlay: Remove polyfill for CSS Anchor Positioning, use primer/behaviors as fallback. Ensure overlays take available space.

  • #7752 d7380a7 Thanks @​liuliu-dev! - Breadcrumbs: Graduate primer_react_breadcrumbs_overflow_menu feature flag, making the overflow menu behavior always-on.

  • #7733 b9211db Thanks @​francinelucca! - Overlay: Graduate primer_react_overlay_max_height_clamp_to_viewport feature flag

    The max-height of overlays is now clamped to the viewport height by default using min(size, 100dvh). This prevents overlays from extending beyond the viewport on smaller screens.

  • #7698 5c34ab4 Thanks @​hectahertz! - Timeline: add variant prop to Timeline.Badge for built-in color schemes (accent, success, attention, severe, danger, done, open, closed, sponsors)

Patch Changes

  • #7738 f5f2869 Thanks @​francinelucca! - ActionMenu, Table: Fix component mutation issue where Object.assign was modifying original @primer/react components. Now uses wrapper components to avoid side effects.

  • #7747 b7dfb78 Thanks @​copilot-swe-agent! - Fix IssueLabelToken text contrast in light theme by updating the lightness-switch formula to use a division-based approach that properly produces a binary switch value for selecting black vs white text

  • #7739 efa7af8 Thanks @​copilot-swe-agent! - Spinner: Remove feature flag primer_react_spinner_synchronize_animations, treat it as always enabled.

  • #7746 30206c4 Thanks @​jonrohan! - Update TokenTextContainer line-height to use primer primitives CSS variable var(--base-text-lineHeight-normal)

Commits
  • aeffb84 Release tracking 38.20.0 (#7740)
  • 5c34ab4 feat(Timeline): add variant prop to Timeline.Badge (#7698)
  • d7380a7 remove primer_react_breadcrumbs_overflow_menu feature flag (#7752)
  • 30dfb69 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#7687)
  • d7b9313 Replace polyfill with useAnchoredPosition (#7725)
  • efa7af8 chore: remove primer_react_spinner_synchronize_animations feature flag (#7739)
  • 5402c71 chore: update @​github/relative-time-element to 5.0.0 (#7741)
  • 94c96a4 fix(ActionList): replace deprecated --control-medium-lineBoxHeight with --bas...
  • b9211db chore: graduate primer_react_overlay_max_height_clamp_to_viewport (#7733)
  • b7dfb78 fix(IssueLabelToken): Fix lightness-switch formula for label text contrast (#...
  • Additional commits viewable in compare view

Updates postcss from 8.5.9 to 8.5.12

Release notes

Sourced from postcss's releases.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Changelog

Sourced from postcss's changelog.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Commits
  • 9bc81c4 Release 8.5.12 version
  • 85c4d7d Another try to fix coverage
  • 94484ca Try to fix coverage
  • c64b748 Load only .map source maps
  • aaec7b7 Avoid throwing JSON parsing errors for non-JSON source maps
  • 233fb26 Mention original author of the solution
  • 2502f75 Release 8.5.11 version
  • 5ca1901 Speed up parsing many nested brackets
  • 42b5337 Update dependencies
  • 7e36e15 Cache node.raws locally in Stringifier hot methods
  • Additional commits viewable in compare view

Updates eslint-plugin-promise from 7.2.1 to 7.3.0

Release notes

Sourced from eslint-plugin-promise's releases.

v7.3.0

7.3.0 (2026-04-27)

🌟 Features

  • no-promise-in-callback: add exemptDeclarations option (#513) (550524f)
  • add support for ESLint v10 (#617) (6096821)

🩹 Fixes

  • no-native: fix to report Promise usage in eslint v9 or later (#619) (1230ced)

🧹 Chores

  • add missing 'use strict' directive (#593) (4cd7ea1)
  • deps-dev: update eslint-plugin-eslint-plugin to v6.4.0 (#583) (45385a3)
  • deps-dev: update eslint-plugin-jest to v28.11.0 (#585) (a33ffb6)
  • deps-dev: update eslint-plugin-n to v17.14.0 (#575) (fad9049)
  • deps-dev: update eslint-plugin-prettier to v5.2.3 (#586) (b2095cb)
  • deps-dev: update eslint-plugin-prettier to v5.2.4 (#600) (fad5029)
  • deps-dev: update lint-staged to v15.4.3 (#582) (d1e23e5)
  • deps-dev: update prettier to v3.4.1 (#578) (3fae241)
  • deps-dev: update prettier to v3.4.2 (#580) (7219528)
  • deps-dev: update prettier to v3.5.0 (#588) (5da83c4)
  • deps: update globals to v15.13.0 (#579) (75defcf)
  • deps: update globals to v15.14.0 (#584) (846ad48)
  • deps: update typescript to v5.7.3 (#589) (79b0eff)
  • package: explicitly declare js module type (#592) (b19e133)
  • update typescript to ~5.7.0 (#577) (04d0b2b)
Changelog

Sourced from eslint-plugin-promise's changelog.

7.3.0 (2026-04-27)

🌟 Features

  • no-promise-in-callback: add exemptDeclarations option (#513) (550524f)
  • add support for ESLint v10 (#617) (6096821)

🩹 Fixes

  • no-native: fix to report Promise usage in eslint v9 or later (#619) (1230ced)

🧹 Chores

  • add missing 'use strict' directive (#593) (4cd7ea1)
  • deps-dev: update eslint-plugin-eslint-plugin to v6.4.0 (#583) (45385a3)
  • deps-dev: update eslint-plugin-jest to v28.11.0 (#585) (a33ffb6)
  • deps-dev: update eslint-plugin-n to v17.14.0 (#575) (fad9049)
  • deps-dev: update eslint-plugin-prettier to v5.2.3 (#586) (b2095cb)
  • deps-dev: update eslint-plugin-prettier to v5.2.4 (#600) (fad5029)
  • deps-dev: update lint-staged to v15.4.3 (#582) (d1e23e5)
  • deps-dev: update prettier to v3.4.1 (#578) (3fae241)
  • deps-dev: update prettier to v3.4.2 (#580) (7219528)
  • deps-dev: update prettier to v3.5.0 (#588) (5da83c4)
  • deps: update globals to v15.13.0 (#579) (75defcf)
  • deps: update globals to v15.14.0 (#584) (846ad48)
  • deps: update typescript to v5.7.3 (#589) (79b0eff)
  • package: explicitly declare js module type (#592) (b19e133)
  • update typescript to ~5.7.0 (#577) (04d0b2b)
Commits
  • f1dd605 chore(main): release 7.3.0 (#576)
  • 6096821 feat: add support for ESLint v10 (#617)
  • 1230ced fix(no-native): fix to report Promise usage in eslint v9 or later (#619)
  • 6cf7adb ci: trusted publishing (#610)
  • fad5029 chore(deps-dev): update eslint-plugin-prettier to v5.2.4 (#600)
  • 4cd7ea1 chore: add missing 'use strict' directive (#593)
  • b19e133 chore(package): explicitly declare js module type (#592)
  • 5da83c4 chore(deps-dev): update prettier to v3.5.0 (#588)
  • d1e23e5 chore(deps-dev): update lint-staged to v15.4.3 (#582)
  • b2095cb chore(deps-dev): update eslint-plugin-prettier to v5.2.3 (#586)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-promise since your current version.


Updates eslint-plugin-react-hooks from 7.0.1 to 7.1.1

Release notes

Sourced from eslint-plugin-react-hooks's releases.

eslint-plugin-react-hooks@7.1.1 (April 17, 2026)

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

  • Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

eslint-plugin-react-hooks@7.1.0 (April 16, 2026)

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.1.1

Note: 7.1.0 accidentally removed the component-hook-factories rule, causing errors for users who referenced it in their ESLint config. This is now fixed.

  • Add deprecated no-op component-hook-factories rule for backwards compatibility. (@​mofeiZ in #36307)

7.1.0

This release adds ESLint v10 support, improves performance by skipping compilation for non-React files, and includes compiler lint improvements including better set-state-in-effect detection, improved ref validation, and more helpful error reporting.

Commits

Updates prettier from 3.8.2 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

Commits

Updates tap from 21.6.3 to 21.7.1

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
tap [>= 18.a, < 19]
tap [>= 19.a, < 20]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the dependency-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@primer/octicons-react](https://github.com/primer/octicons) | `19.24.0` | `19.25.0` |
| [@primer/react](https://github.com/primer/react) | `38.19.0` | `38.20.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.9` | `8.5.12` |
| [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) | `7.2.1` | `7.3.0` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `7.0.1` | `7.1.1` |
| [prettier](https://github.com/prettier/prettier) | `3.8.2` | `3.8.3` |
| [tap](https://github.com/tapjs/tapjs) | `21.6.3` | `21.7.1` |



Updates `@primer/octicons-react` from 19.24.0 to 19.25.0
- [Release notes](https://github.com/primer/octicons/releases)
- [Changelog](https://github.com/primer/octicons/blob/main/CHANGELOG.md)
- [Commits](primer/octicons@v19.24.0...v19.25.0)

Updates `@primer/react` from 38.19.0 to 38.20.0
- [Release notes](https://github.com/primer/react/releases)
- [Commits](https://github.com/primer/react/compare/@primer/react@38.19.0...@primer/react@38.20.0)

Updates `postcss` from 8.5.9 to 8.5.12
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.9...8.5.12)

Updates `eslint-plugin-promise` from 7.2.1 to 7.3.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-promise/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-promise/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-promise@v7.2.1...v7.3.0)

Updates `eslint-plugin-react-hooks` from 7.0.1 to 7.1.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/eslint-plugin-react-hooks@7.1.1/packages/eslint-plugin-react-hooks)

Updates `prettier` from 3.8.2 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.2...3.8.3)

Updates `tap` from 21.6.3 to 21.7.1
- [Release notes](https://github.com/tapjs/tapjs/releases)
- [Commits](https://github.com/tapjs/tapjs/commits)

---
updated-dependencies:
- dependency-name: "@primer/octicons-react"
  dependency-version: 19.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: "@primer/react"
  dependency-version: 38.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: postcss
  dependency-version: 8.5.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: eslint-plugin-promise
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: tap
  dependency-version: 21.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Apr 27, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 27, 2026 05:57
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Apr 27, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 4, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/main/dependency-updates-d1ebdc3ab6 branch May 4, 2026 06:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants