Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps the patch-and-minor-updates group with 14 updates in the / directory:

Package From To
@babel/core 7.28.0 7.28.5
@eslint/json 0.13.0 0.13.2
@lerna-lite/cli 4.6.1 4.9.1
@lerna-lite/publish 4.6.1 4.9.1
@lerna-lite/version 4.6.1 4.9.1
@nl-design-system/eslint-config 2.1.0 2.1.2
@types/node 24.0.14 24.9.2
eslint-config-prettier 10.1.5 10.1.8
lint-staged 16.1.2 16.2.6
npm-check-updates 19.0.0 19.1.2
rimraf 6.0.1 6.1.0
typescript 5.8.3 5.9.3
typescript-eslint 8.37.0 8.46.2
@octokit/core 7.0.3 7.0.6

Updates @babel/core from 7.28.0 to 7.28.5

Release notes

Sourced from @​babel/core's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

  • babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • babel-plugin-transform-regenerator

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

v7.28.4 (2025-09-05)

🏠 Internal

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/core since your current version.


Updates @eslint/json from 0.13.0 to 0.13.2

Release notes

Sourced from @​eslint/json's releases.

json: v0.13.2

0.13.2 (2025-08-25)

Bug Fixes

  • allow any type for meta.docs.recommended in custom rules (#132) (d2c0d5a)

json: v0.13.1

0.13.1 (2025-07-22)

Bug Fixes

  • bump plugin-kit to latest to resolve security vulnerabilities (#125) (5de1544)
Changelog

Sourced from @​eslint/json's changelog.

0.13.2 (2025-08-25)

Bug Fixes

  • allow any type for meta.docs.recommended in custom rules (#132) (d2c0d5a)

0.13.1 (2025-07-22)

Bug Fixes

  • bump plugin-kit to latest to resolve security vulnerabilities (#125) (5de1544)
Commits

Updates @lerna-lite/cli from 4.6.1 to 4.9.1

Release notes

Sourced from @​lerna-lite/cli's releases.

v4.9.1

4.9.1 (2025-10-17)

A bit more internal code cleanup and more use of Node native code. This release is also the first release that I am officially using OIDC Trusted Publisher to publish Lerna-Lite itself on NPM via OIDC and everything went quite smoothly :)

With recent supply chain attacks in recent months, it's strongly encouraged, if you can, to switch to OIDC Trusted Publishing, because as you may have heard, NPM has started dropping lifetime tokens and are now changing default token longevity to 3 months max. Switching to OIDC would completely drop the need for an NPM token since it uses short-lived token when a release is triggered, which is considered safer and the bonus is that it automatically generates Provenance attestations out of the box. You can read GitHub Blog Strengthening npm security for more info.

Note that the current process of assigning trusted publisher to each and every package is a bit tedious (especially if you have a lot of packages), so hopefully they'll provide a global scope config in the future (it's been asked in the original OIDC Discussion).

Bug Fixes

v4.9.0 - OIDC Trusted Publishing

4.9.0 (2025-09-26)

OIDC Trusted Publishing is now supported in Lerna-Lite (and Lerna) 🎉⭐

credit goes to James for bringing it first in [email protected]

Features

Bug Fixes

v4.8.0 - Yarn Catalogs

4.8.0 (2025-09-20)

Lerna-Lite now supports Catalogs in 3 different package managers (pnpm, bun and now yarn)

This version brings Yarn catalogs support (which is the same usage as pnpm Catalogs with the small exception that Yarn Catalogs are located in .yarnrc.yml

Cheers and Happy Coding 🚀 ⭐

Features

... (truncated)

Changelog

Sourced from @​lerna-lite/cli's changelog.

4.9.1 (2025-10-17)

Note: Version bump only for package @​lerna-lite/cli

4.9.0 (2025-09-26)

Note: Version bump only for package @​lerna-lite/cli

4.8.0 (2025-09-20)

Note: Version bump only for package @​lerna-lite/cli

4.7.3 (2025-08-29)

Bug Fixes

4.7.2 (2025-08-16)

Note: Version bump only for package @​lerna-lite/cli

4.7.1 (2025-08-13)

Note: Version bump only for package @​lerna-lite/cli

4.7.0 (2025-08-08)

Note: Version bump only for package @​lerna-lite/cli

4.6.2 (2025-07-25)

Bug Fixes

Commits
  • 19df4e1 chore(release): publish new version v4.9.1
  • 7218947 chore: remove any refs to eslint and unnecessary eslint ignores (#1170)
  • 200e440 chore: add prettier-plugin-sort-imports (#1169)
  • acb4f85 chore: switch from eslint to oxlint (OXC) (#1166)
  • b4710cf chore(release): publish new version v4.9.0
  • 4184b3d chore(release): publish new version v4.8.0
  • 77aa650 chore: lint and fix a few missing TS types
  • 51f207a chore(release): publish new version v4.7.3
  • 089becf fix: peer deps with workspace: shouldn't duplicate version to devDeps (#1119)
  • 994d622 chore(release): publish new version v4.7.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​lerna-lite/cli since your current version.


Updates @lerna-lite/publish from 4.6.1 to 4.9.1

Release notes

Sourced from @​lerna-lite/publish's releases.

v4.9.1

4.9.1 (2025-10-17)

A bit more internal code cleanup and more use of Node native code. This release is also the first release that I am officially using OIDC Trusted Publisher to publish Lerna-Lite itself on NPM via OIDC and everything went quite smoothly :)

With recent supply chain attacks in recent months, it's strongly encouraged, if you can, to switch to OIDC Trusted Publishing, because as you may have heard, NPM has started dropping lifetime tokens and are now changing default token longevity to 3 months max. Switching to OIDC would completely drop the need for an NPM token since it uses short-lived token when a release is triggered, which is considered safer and the bonus is that it automatically generates Provenance attestations out of the box. You can read GitHub Blog Strengthening npm security for more info.

Note that the current process of assigning trusted publisher to each and every package is a bit tedious (especially if you have a lot of packages), so hopefully they'll provide a global scope config in the future (it's been asked in the original OIDC Discussion).

Bug Fixes

v4.9.0 - OIDC Trusted Publishing

4.9.0 (2025-09-26)

OIDC Trusted Publishing is now supported in Lerna-Lite (and Lerna) 🎉⭐

credit goes to James for bringing it first in [email protected]

Features

Bug Fixes

v4.8.0 - Yarn Catalogs

4.8.0 (2025-09-20)

Lerna-Lite now supports Catalogs in 3 different package managers (pnpm, bun and now yarn)

This version brings Yarn catalogs support (which is the same usage as pnpm Catalogs with the small exception that Yarn Catalogs are located in .yarnrc.yml

Cheers and Happy Coding 🚀 ⭐

Features

... (truncated)

Changelog

Sourced from @​lerna-lite/publish's changelog.

4.9.1 (2025-10-17)

Bug Fixes

4.9.0 (2025-09-26)

Features

Bug Fixes

4.8.0 (2025-09-20)

Features

Bug Fixes

4.7.3 (2025-08-29)

Bug Fixes

4.7.2 (2025-08-16)

Bug Fixes

4.7.1 (2025-08-13)

Bug Fixes

4.7.0 (2025-08-08)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​lerna-lite/publish since your current version.


Updates @lerna-lite/version from 4.6.1 to 4.9.1

Release notes

Sourced from @​lerna-lite/version's releases.

v4.9.1

4.9.1 (2025-10-17)

A bit more internal code cleanup and more use of Node native code. This release is also the first release that I am officially using OIDC Trusted Publisher to publish Lerna-Lite itself on NPM via OIDC and everything went quite smoothly :)

With recent supply chain attacks in recent months, it's strongly encouraged, if you can, to switch to OIDC Trusted Publishing, because as you may have heard, NPM has started dropping lifetime tokens and are now changing default token longevity to 3 months max. Switching to OIDC would completely drop the need for an NPM token since it uses short-lived token when a release is triggered, which is considered safer and the bonus is that it automatically generates Provenance attestations out of the box. You can read GitHub Blog Strengthening npm security for more info.

Note that the current process of assigning trusted publisher to each and every package is a bit tedious (especially if you have a lot of packages), so hopefully they'll provide a global scope config in the future (it's been asked in the original OIDC Discussion).

Bug Fixes

v4.9.0 - OIDC Trusted Publishing

4.9.0 (2025-09-26)

OIDC Trusted Publishing is now supported in Lerna-Lite (and Lerna) 🎉⭐

credit goes to James for bringing it first in [email protected]

Features

Bug Fixes

v4.8.0 - Yarn Catalogs

4.8.0 (2025-09-20)

Lerna-Lite now supports Catalogs in 3 different package managers (pnpm, bun and now yarn)

This version brings Yarn catalogs support (which is the same usage as pnpm Catalogs with the small exception that Yarn Catalogs are located in .yarnrc.yml

Cheers and Happy Coding 🚀 ⭐

Features

... (truncated)

Changelog

Sourced from @​lerna-lite/version's changelog.

4.9.1 (2025-10-17)

Note: Version bump only for package @​lerna-lite/version

4.9.0 (2025-09-26)

Note: Version bump only for package @​lerna-lite/version

4.8.0 (2025-09-20)

Features

4.7.3 (2025-08-29)

Bug Fixes

4.7.2 (2025-08-16)

Bug Fixes

4.7.1 (2025-08-13)

Note: Version bump only for package @​lerna-lite/version

4.7.0 (2025-08-08)

Features

4.6.2 (2025-07-25)

Note: Version bump only for package @​lerna-lite/version

Commits
  • 19df4e1 chore(release): publish new version v4.9.1
  • 7218947 chore: remove any refs to eslint and unnecessary eslint ignores (#1170)
  • 200e440 chore: add prettier-plugin-sort-imports (#1169)
  • 8915119 chore: ignore some lines to increase coverage (#1167)
  • acb4f85 chore: switch from eslint to oxlint (OXC) (#1166)
  • e0bf0f9 chore: add a few test line ignores (#1164)
  • be1757f chore: simplify npmlog has-color (#1163)
  • 79aa4fc chore(tests): remove test flakiness by updating test (#1161)
  • 0898fe4 chore(tests): run all unit tests with ANSI colors enabled but strip ANSI (#1160)
  • 6d62423 docs: update conventional-changelog to v9
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​lerna-lite/version since your current version.


Updates @nl-design-system/eslint-config from 2.1.0 to 2.1.2

Release notes

Sourced from @​nl-design-system/eslint-config's releases.

@​nl-design-system/eslint-config@​2.1.2

Patch Changes

  • 7f41ce5: This was a version bump for dependencies only, there were no code changes

@​nl-design-system/eslint-config@​2.1.1

Patch Changes

  • fa7f586: This was a version bump for dependencies only, there were no code changes
Changelog

Sourced from @​nl-design-system/eslint-config's changelog.

2.1.2

Patch Changes

  • 7f41ce5: This was a version bump for dependencies only, there were no code changes

2.1.1

Patch Changes

  • fa7f586: This was a version bump for dependencies only, there were no code changes
Commits
  • c26205e docs(release): design system packages
  • c60094a chore: upgrade all dependencies (minor range)
  • 68ac91e chore: upgrade all dependencies (patch range)
  • d5024bb docs(release): design system packages
  • fa7f586 chore: dependencies
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​nl-design-system/eslint-config since your current version.


Updates @types/node from 24.0.14 to 24.9.2

Commits

Updates eslint-config-prettier from 10.1.5 to 10.1.8

Release notes

Sourced from eslint-config-prettier's releases.

v10.1.8

republish latest version

Full Changelog: prettier/eslint-config-prettier@v10.1.5...v10.1.8

Changelog

Sourced from eslint-config-prettier's changelog.

eslint-config-prettier

Commits

Updates lint-staged from 16.1.2 to 16.2.6

Release notes

Sourced from lint-staged's releases.

v16.2.6

Patch Changes

  • #1693 33d4502 Thanks @​Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

v16.2.5

Patch Changes

  • #1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

v16.2.4

Patch Changes

…ctory with 14 updates

Bumps the patch-and-minor-updates group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.0` | `7.28.5` |
| [@eslint/json](https://github.com/eslint/json) | `0.13.0` | `0.13.2` |
| [@lerna-lite/cli](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/cli) | `4.6.1` | `4.9.1` |
| [@lerna-lite/publish](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/publish) | `4.6.1` | `4.9.1` |
| [@lerna-lite/version](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/version) | `4.6.1` | `4.9.1` |
| [@nl-design-system/eslint-config](https://github.com/nl-design-system/basis/tree/HEAD/packages/eslint-config) | `2.1.0` | `2.1.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.0.14` | `24.9.2` |
| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.1.5` | `10.1.8` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.1.2` | `16.2.6` |
| [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | `19.0.0` | `19.1.2` |
| [rimraf](https://github.com/isaacs/rimraf) | `6.0.1` | `6.1.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.37.0` | `8.46.2` |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.3` | `7.0.6` |



Updates `@babel/core` from 7.28.0 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-core)

Updates `@eslint/json` from 0.13.0 to 0.13.2
- [Release notes](https://github.com/eslint/json/releases)
- [Changelog](https://github.com/eslint/json/blob/main/CHANGELOG.md)
- [Commits](eslint/json@json-v0.13.0...json-v0.13.2)

Updates `@lerna-lite/cli` from 4.6.1 to 4.9.1
- [Release notes](https://github.com/lerna-lite/lerna-lite/releases)
- [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/lerna-lite/lerna-lite/commits/v4.9.1/packages/cli)

Updates `@lerna-lite/publish` from 4.6.1 to 4.9.1
- [Release notes](https://github.com/lerna-lite/lerna-lite/releases)
- [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/publish/CHANGELOG.md)
- [Commits](https://github.com/lerna-lite/lerna-lite/commits/v4.9.1/packages/publish)

Updates `@lerna-lite/version` from 4.6.1 to 4.9.1
- [Release notes](https://github.com/lerna-lite/lerna-lite/releases)
- [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/version/CHANGELOG.md)
- [Commits](https://github.com/lerna-lite/lerna-lite/commits/v4.9.1/packages/version)

Updates `@nl-design-system/eslint-config` from 2.1.0 to 2.1.2
- [Release notes](https://github.com/nl-design-system/basis/releases)
- [Changelog](https://github.com/nl-design-system/basis/blob/main/packages/eslint-config/CHANGELOG.md)
- [Commits](https://github.com/nl-design-system/basis/commits/@nl-design-system/[email protected]/packages/eslint-config)

Updates `@types/node` from 24.0.14 to 24.9.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-config-prettier` from 10.1.5 to 10.1.8
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-config-prettier@v10.1.5...v10.1.8)

Updates `lint-staged` from 16.1.2 to 16.2.6
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.1.2...v16.2.6)

Updates `npm-check-updates` from 19.0.0 to 19.1.2
- [Release notes](https://github.com/raineorshine/npm-check-updates/releases)
- [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md)
- [Commits](raineorshine/npm-check-updates@v19.0.0...v19.1.2)

Updates `rimraf` from 6.0.1 to 6.1.0
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.0.1...v6.1.0)

Updates `typescript` from 5.8.3 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.8.3...v5.9.3)

Updates `typescript-eslint` from 8.37.0 to 8.46.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.2/packages/typescript-eslint)

Updates `@octokit/core` from 7.0.3 to 7.0.6
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.28.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor-updates
- dependency-name: "@eslint/json"
  dependency-version: 0.13.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor-updates
- dependency-name: "@lerna-lite/cli"
  dependency-version: 4.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: "@lerna-lite/publish"
  dependency-version: 4.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: "@lerna-lite/version"
  dependency-version: 4.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: "@nl-design-system/eslint-config"
  dependency-version: 2.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor-updates
- dependency-name: "@types/node"
  dependency-version: 24.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: eslint-config-prettier
  dependency-version: 10.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor-updates
- dependency-name: lint-staged
  dependency-version: 16.2.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: npm-check-updates
  dependency-version: 19.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: rimraf
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: typescript-eslint
  dependency-version: 8.46.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-updates
- dependency-name: "@octokit/core"
  dependency-version: 7.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 1, 2025 11:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 1, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented Nov 1, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant