Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 3 updates#52

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-a1bb9d6d50
Open

chore(deps-dev): bump the development-dependencies group across 1 directory with 3 updates#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-a1bb9d6d50

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 3 updates in the / directory: @yao-pkg/pkg, tsx and vitest.

Updates @yao-pkg/pkg from 6.20.0 to 6.21.0

Release notes

Sourced from @​yao-pkg/pkg's releases.

Release 6.21.0

6.21.0 (2026-06-30)

Features

Bug Fixes

  • detector: pick up six more silent-drop shapes (re-exports, new URL, multi-arg path.join, path.resolve(__dirname,…), createRequire aliases, import.meta.resolve) (#272) (ea66111), closes #269
  • sea: set process.pkg in worker threads (#270) (376e2a4)

Test added

  • fetch-all: track supported node majors, drop node20 (#286) (1b0002f)
  • split unit tests into node:test suite, add c8 coverage (#271) (26f10a3), closes #267 #267

Chores

  • add worktrees to gitignore (d585e27)
  • deps: bump esbuild to >=0.28.1 to fix security vuln (#282) (#284) (68f41d5)
Changelog

Sourced from @​yao-pkg/pkg's changelog.

6.21.0 (2026-06-30)

Features

Bug Fixes

  • detector: pick up six more silent-drop shapes (re-exports, new URL, multi-arg path.join, path.resolve(__dirname,…), createRequire aliases, import.meta.resolve) (#272) (ea66111), closes #269
  • sea: set process.pkg in worker threads (#270) (376e2a4)

Test added

  • fetch-all: track supported node majors, drop node20 (#286) (1b0002f)
  • split unit tests into node:test suite, add c8 coverage (#271) (26f10a3), closes #267 #267

Chores

  • add worktrees to gitignore (d585e27)
  • deps: bump esbuild to >=0.28.1 to fix security vuln (#282) (#284) (68f41d5)

6.19.0 (2026-04-24)

Features

  • config: accept CLI-only build flags in pkg config (#263) (a8e91df)

Bug Fixes

  • deps: update @​roberts_lando/vfs to version 0.3.3 (#266) (d155e24)
  • detector: stop silent dependency drops in SEA mode (ESM parse, dynamic import, decorators) (#268) (81c6c88)
  • sea: silence benign LIEF warnings during postject injection (#265) (974df53)

6.18.2 (2026-04-22)

Bug Fixes

6.18.1 (2026-04-21)

Bug Fixes

  • pkg: ship all .d.ts files in npm package (#258) (7e10ce2)

6.18.0 (2026-04-20)

... (truncated)

Commits

Updates tsx from 4.22.4 to 4.23.0

Release notes

Sourced from tsx's releases.

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

Features


This release is also available on:

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

  • isolate hook state per async module.register() registration (a305f36)

This release is also available on:

Commits
  • 1dfad37 docs: cite esbuild's extension-resolution model in node notes
  • 257bbbb fix: avoid redundant filesystem probes during module resolution
  • c178197 feat: add multi-scenario startup benchmark suite
  • 51800ac docs: add Node internals knowledge base (notes/node)
  • a305f36 fix: isolate hook state per async module.register() registration
  • ca501a9 chore: upgrade skills-npm to v1.2.0
  • 596cd1f test: cover __dirname, __filename, & require.cache in CJS TS file
  • 75d9bf0 test: lock in lenient ESM for ambiguous and CJS-typed packages
  • 1472f3e test: cover ESM-syntax dependency with omitted "type" field
  • See full diff in compare view

Updates vitest from 4.1.8 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • a7a61e7 chore: release v4.1.9 (#10598)
  • 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
  • 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
  • a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@socket-security

socket-security Bot commented Jul 13, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedvitest@​4.1.8 ⏵ 4.1.1098 +110079 +198 +1100
Addedtsx@​4.23.01001008294100
Added@​yao-pkg/​pkg@​6.21.0921009289100

View full report

@brendanjryan

Copy link
Copy Markdown
Contributor

@dependabot rebase

…ectory with 3 updates

Bumps the development-dependencies group with 3 updates in the / directory: [@yao-pkg/pkg](https://github.com/yao-pkg/pkg), [tsx](https://github.com/privatenumber/tsx) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@yao-pkg/pkg` from 6.20.0 to 6.21.0
- [Release notes](https://github.com/yao-pkg/pkg/releases)
- [Changelog](https://github.com/yao-pkg/pkg/blob/main/CHANGELOG.md)
- [Commits](https://github.com/yao-pkg/pkg/commits/v6.21.0)

Updates `tsx` from 4.22.4 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.0)

Updates `vitest` from 4.1.8 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@yao-pkg/pkg"
  dependency-version: 6.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: tsx
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-a1bb9d6d50 branch from b962568 to 2e955f4 Compare July 15, 2026 21:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant