Skip to content

Bump the development-dependencies group across 1 directory with 4 updates - #683

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-e8f7985f54
Open

Bump the development-dependencies group across 1 directory with 4 updates#683
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-e8f7985f54

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 4 updates in the / directory: fs-fixture, oxfmt, rolldown and vitest.

Updates fs-fixture from 2.13.0 to 2.14.0

Release notes

Sourced from fs-fixture's releases.

v2.14.0

2.14.0 (2026-05-18)

Features

  • document grouped path prefixes (5b00042)
Commits

Updates oxfmt from 0.48.0 to 0.60.0

Commits
  • 83abe3b release(apps): oxlint v1.75.0 && oxfmt v0.60.0 (#24713)
  • e2e0f94 chore(docs): update sponsor section (#24588)
  • 2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
  • 415fe1e fix(oxfmt): error on ignorePatterns that cannot match files outside the confi...
  • 39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
  • 5306f24 release(apps): oxlint v1.72.0 && oxfmt v0.57.0 (#23935)
  • c4be770 release(apps): oxlint v1.71.0 && oxfmt v0.56.0 (#23707)
  • aa79b5b release(apps): oxlint v1.70.0 && oxfmt v0.55.0 (#23442)
  • 9a2788b feat(linter/unicorn): implement prefer-export-from rule (#22935)
  • 44ae845 release(apps): oxlint v1.69.0 && oxfmt v0.54.0 (#23116)
  • Additional commits viewable in compare view

Updates rolldown from 1.0.1 to 1.2.0

Release notes

Sourced from rolldown's releases.

v1.2.0

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

... (truncated)

Commits
  • 03e1e34 release: v1.2.0 (#10292)
  • f49ebe4 fix(sourcemap): preserve unmapped boundaries during composition (#10254)
  • 1d3fb15 feat(dev): skip shipping factories for newly imported top-level modules (#10223)
  • 3bd65ff refactor(dev): move full-reload to client side (#10207)
  • ab584a3 fix(sourcemap): preserve coarse mappings during composition (#10249)
  • 84afd72 feat(dev): client-side HMR (#10164)
  • 152ff69 fix(rolldown_plugin_vite_import_glob): support tsconfig paths with `import.me...
  • bb96d64 fix: treat rooted drive-less module ids as absolute in preserveModules naming...
  • fd6a0d0 fix(watch): rebuild when tsconfig files change (#10258)
  • fd15520 feat: treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as si...
  • Additional commits viewable in compare view

Updates vitest from 4.1.6 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • a7a61e7 chore: release v4.1.9 (#10598)
  • 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
  • 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
  • a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • a09d472 chore: release v4.1.7
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@changeset-bot

changeset-bot Bot commented Jul 1, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 0284952

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Jul 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedrolldown@​1.2.0911007898100
Addedvitest@​4.1.10981007999100
Addedfs-fixture@​2.14.0861009789100
Addedoxfmt@​0.60.0861008896100

View full report

@socket-security

socket-security Bot commented Jul 1, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

…ates

Bumps the development-dependencies group with 4 updates in the / directory: [fs-fixture](https://github.com/privatenumber/fs-fixture), [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt), [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `fs-fixture` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/privatenumber/fs-fixture/releases)
- [Commits](privatenumber/fs-fixture@v2.13.0...v2.14.0)

Updates `oxfmt` from 0.48.0 to 0.60.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.60.0/npm/oxfmt)

Updates `rolldown` from 1.0.1 to 1.2.0
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.0/packages/rolldown)

Updates `vitest` from 4.1.6 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: fs-fixture
  dependency-version: 2.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxfmt
  dependency-version: 0.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: rolldown
  dependency-version: 1.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 4.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the development-dependencies group with 4 updates Bump the development-dependencies group across 1 directory with 4 updates Aug 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-e8f7985f54 branch from 14fb171 to 0284952 Compare August 1, 2026 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants