Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps the development-dependencies group with 9 updates in the / directory:

Package From To
@eslint/js 9.34.0 9.39.2
autoprefixer 10.4.21 10.4.24
cross-env 10.0.0 10.1.0
find-unused-sass-variables 6.1.0 6.1.1
globals 14.0.0 17.3.0
hugo-bin 0.146.0 0.149.2
lockfile-lint 4.14.1 5.0.0
stylelint 16.23.1 17.1.0
vnu-jar 24.10.17 26.2.1

Updates @eslint/js from 9.34.0 to 9.39.2

Release notes

Sourced from @​eslint/js's releases.

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

v9.39.1

Bug Fixes

  • 650753e fix: Only pass node to JS lang visitor methods (#20283) (Nicholas C. Zakas)

Documentation

  • 51b51f4 docs: add a section on when to use extends vs cascading (#20268) (Tanuj Kanti)
  • b44d426 docs: Update README (GitHub Actions Bot)

Chores

  • 92db329 chore: update @eslint/js version to 9.39.1 (#20284) (Francesco Trotta)
  • c7ebefc chore: package.json update for @​eslint/js release (Jenkins)
  • 61778f6 chore: update eslint-config-eslint dependency @​eslint/js to ^9.39.0 (#20275) (renovate[bot])
  • d9ca2fc ci: Add rangeStrategy to eslint group in renovate config (#20266) (唯然)
  • 009e507 test: fix version tests for ESLint v10 (#20274) (Milos Djermanovic)

v9.39.0

Features

  • cc57d87 feat: update error loc to key in no-dupe-class-members (#20259) (Tanuj Kanti)
  • 126552f feat: update error location in for-direction and no-dupe-args (#20258) (Tanuj Kanti)
  • 167d097 feat: update complexity rule to highlight only static block header (#20245) (jaymarvelz)

Bug Fixes

  • 15f5c7c fix: forward traversal step.args to visitors (#20253) (jaymarvelz)
  • 5a1a534 fix: allow JSDoc comments in object-shorthand rule (#20167) (Nitin Kumar)
  • e86b813 fix: Use more types from @​eslint/core (#20257) (Nicholas C. Zakas)
  • 927272d fix: correct Scope typings (#20198) (jaymarvelz)
  • 37f76d9 fix: use AST.Program type for Program node (#20244) (Francesco Trotta)
  • ae07f0b fix: unify timing report for concurrent linting (#20188) (jaymarvelz)
  • b165d47 fix: correct Rule typings (#20199) (jaymarvelz)
  • fb97cda fix: improve error message for missing fix function in suggestions (#20218) (jaymarvelz)

Documentation

  • d3e81e3 docs: Always recommend to include a files property (#20158) (Percy Ma)
  • 0f0385f docs: use consistent naming recommendation (#20250) (Alex M. Spieslechner)
  • a3b1456 docs: Update README (GitHub Actions Bot)
  • cf5f2dd docs: fix correct tag of no-useless-constructor (#20255) (Tanuj Kanti)
  • 10b995c docs: add TS options and examples for nofunc in no-use-before-define (#20249) (Tanuj Kanti)
  • 2584187 docs: remove repetitive word in comment (#20242) (reddaisyy)

... (truncated)

Commits
  • c43ce24 chore: package.json update for @​eslint/js release
  • c7ebefc chore: package.json update for @​eslint/js release
  • 2375a6d chore: package.json update for @​eslint/js release
  • 9e7fad4 chore: add script to auto-generate eslint:recommended configuration (#20208)
  • 25d0e33 chore: package.json update for @​eslint/js release
  • abee4ca chore: package.json update for @​eslint/js release
  • 90a71bf docs: update README files to add badge and instructions (#20115)
  • 488cba6 chore: package.json update for @​eslint/js release
  • 1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#20116)
  • af2a087 chore: package.json update for @​eslint/js release
  • Additional commits viewable in compare view

Updates autoprefixer from 10.4.21 to 10.4.24

Release notes

Sourced from autoprefixer's releases.

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).

10.4.23

10.4.22

  • Fixed stretch prefixes on new Can I Use database.
  • Updated fraction.js.
Changelog

Sourced from autoprefixer's changelog.

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).

10.4.23

10.4.22

  • Fixed stretch prefixes on new Can I Use database.
  • Updated fraction.js.
Commits

Updates cross-env from 10.0.0 to 10.1.0

Release notes

Sourced from cross-env's releases.

v10.1.0

10.1.0 (2025-09-29)

Features

  • add support for default value syntax (152ae6a)

For example:

"dev:server": "cross-env wrangler dev --port ${PORT:-8787}",

If PORT is already set, use that value, otherwise fallback to 8787.

Learn more about Shell Parameter Expansion

Commits

Updates find-unused-sass-variables from 6.1.0 to 6.1.1

Release notes

Sourced from find-unused-sass-variables's releases.

v6.1.1

What's Changed

  • Update dependencies
  • Specify expandDirectories: false for tinyglobby

Full Changelog: XhmikosR/find-unused-sass-variables@v6.1.0...v6.1.1

Commits
  • a67c9d9 6.1.1
  • bf1d73e Bump the github-actions group with 2 updates (#305)
  • 6de5163 CI: add Node.js 24
  • 55f9b18 Specify expandDirectories: false for tinyglobby
  • 17e0d35 Bump js-yaml from 4.1.0 to 4.1.1 (#304)
  • 85e50b2 Bump the github-actions group with 2 updates (#303)
  • 16b426d Bump xo from 1.2.2 to 1.2.3 in the development-dependencies group (#302)
  • f4aa51d Bump the github-actions group with 2 updates (#301)
  • ab0dab3 Bump tinyglobby in the production-dependencies group (#300)
  • 4160fef chore: pin actions
  • Additional commits viewable in compare view

Updates globals from 14.0.0 to 17.3.0

Release notes

Sourced from globals's releases.

v17.3.0

  • Update globals (2026-02-01) (#336) 295fba9

sindresorhus/globals@v17.2.0...v17.3.0

v17.2.0

  • jasmine: Add throwUnless and throwUnlessAsync globals (#335) 97f23a7

sindresorhus/globals@v17.1.0...v17.2.0

v17.1.0

  • Add webpack and rspack globals (#333) 65cae73

sindresorhus/globals@v17.0.0...v17.1.0

v17.0.0

Breaking

  • Split audioWorklet environment from browser (#320) 7bc293e

Improvements

  • Update globals (#329) ebe1063
  • Get all browser globals from both chrome and firefox (#321) 59ceff8
  • Add bunBuiltin environment (#324) 1bc6e3b
  • Add denoBuiltin environment (#324) 1bc6e3b
  • Add paintWorklet environment (#323) 4b78f56
  • Add sharedWorker environment (#322) 4a02a85

sindresorhus/globals@v16.5.0...v17.0.0

v16.5.0

  • Update globals (2025-11-01) (#316) 6d441ca
  • Add Vue, Svelte, and Astro globals (#314) ea31521

sindresorhus/globals@v16.4.0...v16.5.0

v16.4.0

  • Update globals (#309) 8b8a2d6

... (truncated)

Commits

Updates hugo-bin from 0.146.0 to 0.149.2

Commits

Updates lockfile-lint from 4.14.1 to 5.0.0

Release notes

Sourced from lockfile-lint's releases.

[email protected]

Major Changes

Changelog

Sourced from lockfile-lint's changelog.

5.0.0

Major Changes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lockfile-lint since your current version.


Updates stylelint from 16.23.1 to 17.1.0

Release notes

Sourced from stylelint's releases.

17.1.0

It fixes 5 bugs and adds the display-notation rule. Before we turn it on in our standard config, we'd like to hear the community's thoughts on which options to use.

17.0.0

It contains 14 breaking changes, which we've detailed in the migrating to 17.0.0 guide. Additionally, it adds 3 options to the rules and fixes 9 bugs. We've also released compatible versions of our shared config, Visual Studio Code extension, Node.js Rule Tester and Jest preset.

  • Removed: CommonJS Node.js API (#8859) (@​jeddy3).
  • Removed: output property in the Node.js API returned resolved object (#8878) (@​jeddy3).
  • Removed: support for Node.js less than 20.19.0 (#8867) (@​jeddy3).
  • Removed: GitHub formatter (#8888) (@​jeddy3).
  • Removed: resolveNestedSelectors option from selector-class-pattern (#8931) (@​jeddy3).
  • Removed: checkContextFunctionalPseudoClasses option from selector-max-id (#8913) (@​jeddy3).
  • Changed: default fix mode to strict (#8889) (@​jeddy3).
  • Changed: report to be consistent and predictable in how it handles the provided position arguments (#8217) (@​romainmenke).
  • Changed: selector-max-* syntax rules for standard CSS nesting and modern functional pseudo-classes (#8913) (@​jeddy3).
  • Changed: *-specificity semantic rules for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: no-duplicate-selectors and selector-no-qualifying-type for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: *-list rules to have consistent behaviour for vendor prefixes and case (#8912) (@​jeddy3).
  • Changed: *-no-vendor-prefix rules to have consistent behaviour for their ignore*: [] secondary options (#8924) (@​jeddy3).
  • Changed: declaration-property-max-values rule to have consistent behaviour for vendor prefixes (#8926) (@​jeddy3).
  • Added: except: ["after-block"] to custom-property-empty-line-before (#8921) (@​kovsu).
  • Added: except: ["after-block"] to declaration-empty-line-before (#8910) (@​kovsu).
  • Added: ignoreSelectors: [] to no-duplicate-selectors (#8883) (@​kovsu).
  • Fixed: Windows drive letter casing inconsistencies when matching patterns against file paths (#8941) (@​adalinesimonian).
  • Fixed: CLI help to include TypeScript config files (#8908) (@​kovsu).
  • Fixed: at-rule-descriptor-no-unknown false positives for declarations within feature-value-blocks (#8868) (@​kovsu).
  • Fixed: declaration-block-no-redundant-longhand-properties false negatives for short and long combinations (#8892) (@​nathannewyen).
  • Fixed: media-feature-name-no-unknown false positives for namespaced dollar variables and range context queries (#8890) (@​kovsu).
  • Fixed: nesting-selector-no-missing-scoping-root false positives for CSS-in-JS (#8905) (@​kovsu).
  • Fixed: no-invalid-position-declaration false negatives for embedded blocks (#8907) (@​kovsu).
  • Fixed: selector-no-qualifying-type false negatives for :is/where() (#8940) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for MathML 4 tags (#8874) (@​jeddy3).

16.26.1

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

  • Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@​romainmenke).
  • Fixed: at-rule-no-unknown false positives for @function (#8851) (@​jeddy3).
  • Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@​jeddy3).
  • Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@​taearls).
  • Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#8856) (@​Mouvedia).

16.26.0

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.1.0 - 2026-01-30

It fixes 5 bugs and adds the display-notation rule. Before we turn it on in our standard config, we'd like to hear the community's thoughts on which options to use.

17.0.0 - 2026-01-15

It contains 14 breaking changes, which we've detailed in the migrating to 17.0.0 guide. Additionally, it adds 3 options to the rules and fixes 9 bugs. We've also released compatible versions of our shared config, Visual Studio Code extension, Node.js Rule Tester and Jest preset.

  • Removed: CommonJS Node.js API (#8859) (@​jeddy3).
  • Removed: output property in the Node.js API returned resolved object (#8878) (@​jeddy3).
  • Removed: support for Node.js less than 20.19.0 (#8867) (@​jeddy3).
  • Removed: GitHub formatter (#8888) (@​jeddy3).
  • Removed: resolveNestedSelectors option from selector-class-pattern (#8931) (@​jeddy3).
  • Removed: checkContextFunctionalPseudoClasses option from selector-max-id (#8913) (@​jeddy3).
  • Changed: default fix mode to strict (#8889) (@​jeddy3).
  • Changed: report to be consistent and predictable in how it handles the provided position arguments (#8217) (@​romainmenke).
  • Changed: selector-max-* syntax rules for standard CSS nesting and modern functional pseudo-classes (#8913) (@​jeddy3).
  • Changed: *-specificity semantic rules for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: no-duplicate-selectors and selector-no-qualifying-type for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: *-list rules to have consistent behaviour for vendor prefixes and case (#8912) (@​jeddy3).
  • Changed: *-no-vendor-prefix rules to have consistent behaviour for their ignore*: [] secondary options (#8924) (@​jeddy3).
  • Changed: declaration-property-max-values rule to have consistent behaviour for vendor prefixes (#8926) (@​jeddy3).
  • Added: except: ["after-block"] to custom-property-empty-line-before (#8921) (@​kovsu).
  • Added: except: ["after-block"] to declaration-empty-line-before (#8910) (@​kovsu).
  • Added: ignoreSelectors: [] to no-duplicate-selectors (#8883) (@​kovsu).
  • Fixed: Windows drive letter casing inconsistencies when matching patterns against file paths (#8941) (@​adalinesimonian).
  • Fixed: CLI help to include TypeScript config files (#8908) (@​kovsu).
  • Fixed: at-rule-descriptor-no-unknown false positives for declarations within feature-value-blocks (#8868) (@​kovsu).
  • Fixed: declaration-block-no-redundant-longhand-properties false negatives for short and long combinations (#8892) (@​nathannewyen).
  • Fixed: media-feature-name-no-unknown false positives for namespaced dollar variables and range context queries (#8890) (@​kovsu).
  • Fixed: nesting-selector-no-missing-scoping-root false positives for CSS-in-JS (#8905) (@​kovsu).
  • Fixed: no-invalid-position-declaration false negatives for embedded blocks (#8907) (@​kovsu).
  • Fixed: selector-no-qualifying-type false negatives for :is/where() (#8940) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for MathML 4 tags (#8874) (@​jeddy3).

16.26.1 - 2025-11-28

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

  • Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@​romainmenke).
  • Fixed: at-rule-no-unknown false positives for @function (#8851) (@​jeddy3).
  • Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@​jeddy3).
  • Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@​taearls).

... (truncated)

Commits
  • 48f6372 Release 17.1.0 (#9007)
  • 5bed108 Fix selector-type-no-unknown false positives for geolocation and `usermed...
  • 7b0b6f7 Revert "Fix resolution of configs, plugins, processors, and custom syntaxes i...
  • 9b30fbd Remove display-notation secondary options while the specification is in flu...
  • 17ebd25 Fix resolution of configs, plugins, processors, and custom syntaxes in Yarn P...
  • 590df52 Bump prettier from 3.8.0 to 3.8.1 (#9002)
  • d101b15 Remove ignoring ESLint major updates in Dependabot config (#9000)
  • 0d9df2f Add display-notation rule (#8981)
  • 5721667 Turn off skipLibCheck TypeScript configuration option (#8999)
  • 79cf2cf Fix GlobbyOptions TypeScript errors (#8992)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for stylelint since your current version.


Updates vnu-jar from 24.10.17 to 26.2.1

Release notes

Sourced from vnu-jar's releases.

latest

[!IMPORTANT] The release named “latest” is “production-ready” and is the only release you want to use. This project no longer does “major” version-numbered releases. Release 20.6.30 (30 June 2020) was the final such release. For a changelog of the latest changes, see https://github.com/validator/validator/commits/latest/.

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vnu-jar since your current version.


Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
globals [>= 15.a, < 16]
globals [>= 16.a, < 17]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the development-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.34.0` | `9.39.2` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.21` | `10.4.24` |
| [cross-env](https://github.com/kentcdodds/cross-env) | `10.0.0` | `10.1.0` |
| [find-unused-sass-variables](https://github.com/XhmikosR/find-unused-sass-variables) | `6.1.0` | `6.1.1` |
| [globals](https://github.com/sindresorhus/globals) | `14.0.0` | `17.3.0` |
| [hugo-bin](https://github.com/fenneclab/hugo-bin) | `0.146.0` | `0.149.2` |
| [lockfile-lint](https://github.com/lirantal/lockfile-lint/tree/HEAD/packages/lockfile-lint) | `4.14.1` | `5.0.0` |
| [stylelint](https://github.com/stylelint/stylelint) | `16.23.1` | `17.1.0` |
| [vnu-jar](https://github.com/validator/validator) | `24.10.17` | `26.2.1` |



Updates `@eslint/js` from 9.34.0 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js)

Updates `autoprefixer` from 10.4.21 to 10.4.24
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.21...10.4.24)

Updates `cross-env` from 10.0.0 to 10.1.0
- [Release notes](https://github.com/kentcdodds/cross-env/releases)
- [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md)
- [Commits](kentcdodds/cross-env@v10.0.0...v10.1.0)

Updates `find-unused-sass-variables` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/XhmikosR/find-unused-sass-variables/releases)
- [Commits](XhmikosR/find-unused-sass-variables@v6.1.0...v6.1.1)

Updates `globals` from 14.0.0 to 17.3.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v14.0.0...v17.3.0)

Updates `hugo-bin` from 0.146.0 to 0.149.2
- [Release notes](https://github.com/fenneclab/hugo-bin/releases)
- [Commits](fenneclab/hugo-bin@v0.146.0...v0.149.2)

Updates `lockfile-lint` from 4.14.1 to 5.0.0
- [Release notes](https://github.com/lirantal/lockfile-lint/releases)
- [Changelog](https://github.com/lirantal/lockfile-lint/blob/main/packages/lockfile-lint/CHANGELOG.md)
- [Commits](https://github.com/lirantal/lockfile-lint/commits/[email protected]/packages/lockfile-lint)

Updates `stylelint` from 16.23.1 to 17.1.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@16.23.1...17.1.0)

Updates `vnu-jar` from 24.10.17 to 26.2.1
- [Release notes](https://github.com/validator/validator/releases)
- [Commits](https://github.com/validator/validator/commits)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.4.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: cross-env
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: find-unused-sass-variables
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: globals
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: hugo-bin
  dependency-version: 0.149.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: lockfile-lint
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: stylelint
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: vnu-jar
  dependency-version: 26.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants