Skip to content

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates - #60

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-d70966964a
Closed

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-d70966964a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 4 updates in the / directory: @preact/signals, @typescript-eslint/eslint-plugin, preact and prettier.

Updates @preact/signals from 2.9.0 to 2.9.2

Release notes

Sourced from @​preact/signals's releases.

@​preact/signals@​2.9.2

Patch Changes

  • #942 e76780c Thanks @​JoviDeCroock! - Fix stale <For> render-prop indexes after removals/reorders by making each cached item's index reactive (a per-item signal) instead of a frozen prop. Cached children are reused and re-render with the new index rather than being recreated, so DOM/component identity is preserved.

  • #938 e0ce9fd Thanks @​JoviDeCroock! - Fix Signal-bound DOM props getting stranded at a stale value when Preact reuses a DOM node. The prop-binding effect now writes the applied value back into the rendered props, keeping Preact's diff baseline in sync with the DOM instead of assuming Preact applied every update.

  • Updated dependencies [beb84c1]:

    • @​preact/signals-core@​1.14.3
Changelog

Sourced from @​preact/signals's changelog.

2.9.2

Patch Changes

  • #942 e76780c Thanks @​JoviDeCroock! - Fix stale <For> render-prop indexes after removals/reorders by making each cached item's index reactive (a per-item signal) instead of a frozen prop. Cached children are reused and re-render with the new index rather than being recreated, so DOM/component identity is preserved.

  • #938 e0ce9fd Thanks @​JoviDeCroock! - Fix Signal-bound DOM props getting stranded at a stale value when Preact reuses a DOM node. The prop-binding effect now writes the applied value back into the rendered props, keeping Preact's diff baseline in sync with the DOM instead of assuming Preact applied every update.

  • Updated dependencies [beb84c1]:

    • @​preact/signals-core@​1.14.3

2.9.1

Patch Changes

  • #924 ebcee90 Thanks @​JoviDeCroock! - Fix redundant DOM attribute writes when a parent rerenders with unchanged signal props. The DIFFED hook no longer writes Signal references back into vnode.props, which was causing Preact's prop diff to see a mismatch (old: Signal, new: peeked value) and re-apply every signal-bound attribute on every parent rerender.
Commits

Updates @typescript-eslint/eslint-plugin from 8.59.2 to 8.62.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
  • eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

🩹 Fixes

  • add "files" to rule-schema-to-typescript-types (#12441)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

8.61.1 (2026-06-15)

🩹 Fixes

  • eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)
  • eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)
  • eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.62.1 (2026-06-29)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
  • eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)
  • eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)
  • eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)

❤️ Thank You

... (truncated)

Commits
  • 3ea32f4 chore(release): publish 8.62.1
  • 4ecca6d fix(eslint-plugin): [no-unnecessary-type-assertion] parenthesize object liter...
  • f3a7ec7 chore(eslint-plugin-internal): [no-dynamic-tests] restrict where noFormat can...
  • 301f350 fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] preserve boolean...
  • ebce2d4 fix(eslint-plugin): [prefer-optional-chain] use suggestion instead of autofix...
  • 54e2857 chore(release): publish 8.62.0
  • 81e4c26 feat: remove redundant package.json "files" (#12444)
  • b784054 chore: use stableTypeOrdering compiler option (#12427)
  • aaad718 chore(release): publish 8.61.1
  • 0cc8f35 fix(eslint-plugin): [no-unnecessary-template-expression] respect ECMAScript l...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.59.2 to 8.62.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
  • eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

🩹 Fixes

  • add "files" to rule-schema-to-typescript-types (#12441)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

8.61.1 (2026-06-15)

🩹 Fixes

  • eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)
  • eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)
  • eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.0 (2026-06-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.1 (2026-06-01)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.0 (2026-05-25)

This was a version bump only for parser to align it with other projects, there were no code changes.

... (truncated)

Commits

Updates preact from 10.29.1 to 10.29.4

Release notes

Sourced from preact's releases.

10.29.4

Fixes

10.29.3

Fixes

Performance

Types

Maintenance

10.29.2

Fixes

Maintenance

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for preact since your current version.


Updates prettier from 3.8.3 to 3.9.4

Release notes

Sourced from prettier's releases.

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.4

diff

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

<!-- Input -->
<FancyButton [label]="title">
  @content (icon) {
    <span>Icon!</span>
  }
  @content (description) {
    <span>Description text</span>
  }
  <span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.3 -->
<FancyButton [label]="title">
@​content(icon) {
<span>Icon!</span>
}
@​content(description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.4 -->
<FancyButton [label]="title">
@​content (icon) {
<span>Icon!</span>
}
@​content (description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

</tr></table>

... (truncated)

Commits
  • b693cb2 Release 3.9.4
  • 2e92ac0 Angular: Format @content(name) -> @content (name) to align with other blo...
  • abed2c2 Bump Prettier dependency to 3.9.3
  • 6cfbc00 Clean changelog_unreleased
  • 3732e1d Release 3.9.3
  • a74a7b0 Allow decorators to be used with declare on class fields (#19492)
  • bd9e11a Correct text identification in liquid syntax (#19489)
  • 269eee3 Bump Prettier dependency to 3.9.1
  • ec7ccd1 Clean changelog_unreleased
  • c47654c Release 3.9.1
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 7 packages with OpenSSF Scorecard issues.

View full job summary

@github-actions

github-actions Bot commented Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown

📊 Test Coverage Report

Metric Coverage CI Gate Target
Lines ✅ 86.4% (11426/13228) 75% 80%
Statements ✅ 86.4% (11426/13228) 75% 80%
Branches ✅ 80.4% (1381/1718) 70% 80%
Functions 🟡 78.3% (257/328) — 80%

🟡 CI gate passed — coverage below 80% target

Files below 80% coverage
File Lines Functions Branches
src/middlewares/guardrail/GuardrailInterceptorHook.ts 76.6% 100.0% 73.0%
src/middlewares/guardrail/GuardrailMiddleware.ts 75.6% 66.7% 68.2%
src/middlewares/guardrail/GuardrailScanner.ts 93.4% 100.0% 64.3%
src/middlewares/guardrail/GuardrailWriteScannerHook.ts 71.0% 100.0% 78.2%
src/middlewares/guardrail/ModerationGuardHook.ts 74.8% 100.0% 58.8%
src/middlewares/guardrail/guards/canary-tracker.ts 98.0% 80.0% 66.7%
src/middlewares/guardrail/guards/content-moderation.ts 78.4% 100.0% 90.6%
src/middlewares/guardrail/guards/sensitive-paths.ts 94.1% 100.0% 77.3%
src/middlewares/guardrail/scanners/HeuristicScanner.ts 100.0% 100.0% 75.0%
src/middlewares/guardrail/scanners/RegexScanner.ts 90.3% 100.0% 78.6%
src/middlewares/guardrail/storage/ConfigStore.ts 88.0% 71.4% 80.0%
src/middlewares/guardrail/storage/DecisionLog.ts 70.3% 40.0% 100.0%
src/middlewares/hitl/Interceptor.ts 89.8% 83.3% 75.7%
src/middlewares/hitl/index.ts 85.8% 54.5% 66.7%
src/middlewares/hitl/script-content-loader.ts 47.8% 0.0% 100.0%
src/middlewares/hitl/tool-interceptor.ts 89.5% 100.0% 70.9%
src/middlewares/hitl/approval/ApprovalQueue.ts 79.7% 81.3% 78.6%
src/middlewares/hitl/approval/Arbitrator.ts 36.1% 25.0% 91.7%
src/middlewares/hitl/approval/TotpManager.ts 93.9% 87.5% 71.4%
src/middlewares/hitl/approval/approval-commands.ts 84.8% 100.0% 72.7%
src/middlewares/hitl/scoring/IrreversibilityScorer.ts 95.6% 100.0% 75.0%
src/middlewares/hitl/storage/BrowserSessionStore.ts 94.7% 100.0% 72.5%
src/middlewares/hitl/storage/DecisionLog.ts 70.6% 25.0% 100.0%
src/middlewares/hitl/storage/PolicyStore.ts 89.4% 85.7% 64.3%
src/middlewares/hitl/storage/StatsTracker.ts 91.2% 71.4% 80.0%
src/middlewares/pii-sanitizer/PiiSanitizerMiddleware.ts 75.7% 58.3% 74.2%
src/middlewares/pii-sanitizer/PolicyEngine.ts 96.6% 100.0% 70.6%
src/middlewares/pii-sanitizer/ScannerEngine.ts 70.0% 85.7% 87.5%
src/middlewares/pii-sanitizer/storage/DlpStore.ts 70.6% 18.2% 100.0%
src/middlewares/tool-call-limit/ToolCallLimitMiddleware.ts 86.8% 72.2% 86.3%
src/middlewares/tool-call-limit/storage/LimitPolicyStore.ts 74.6% 50.0% 75.0%

Generated by CI on commit 0900767

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-d70966964a branch from 9d72961 to 119c49d Compare June 23, 2026 22:32
@dependabot
chore(deps)(deps-dev): bump the dev-dependencies group across 1 direc…
d4d828e 
…tory with 5 updates

Bumps the dev-dependencies group with 4 updates in the / directory: [@preact/signals](https://github.com/preactjs/signals/tree/HEAD/packages/preact), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [preact](https://github.com/preactjs/preact) and [prettier](https://github.com/prettier/prettier).


Updates `@preact/signals` from 2.9.0 to 2.9.2
- [Release notes](https://github.com/preactjs/signals/releases)
- [Changelog](https://github.com/preactjs/signals/blob/main/packages/preact/CHANGELOG.md)
- [Commits](https://github.com/preactjs/signals/commits/@preact/signals@2.9.2/packages/preact)

Updates `@typescript-eslint/eslint-plugin` from 8.59.2 to 8.62.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.59.2 to 8.62.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/parser)

Updates `preact` from 10.29.1 to 10.29.4
- [Release notes](https://github.com/preactjs/preact/releases)
- [Commits](preactjs/preact@10.29.1...10.29.4)

Updates `prettier` from 3.8.3 to 3.9.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.4)

---
updated-dependencies:
- dependency-name: "@preact/signals"
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: preact
  dependency-version: 10.29.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.8.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-d70966964a branch from 119c49d to d4d828e Compare July 6, 2026 10:08
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 20, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-d70966964a branch July 20, 2026 10:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mfurqanazhar92 mfurqanazhar92 Awaiting requested review from mfurqanazhar92 mfurqanazhar92 is a code owner
@sshariqali sshariqali Awaiting requested review from sshariqali sshariqali is a code owner
@sapience-tholken sapience-tholken Awaiting requested review from sapience-tholken sapience-tholken is a code owner
@frankdsai frankdsai Awaiting requested review from frankdsai frankdsai is a code owner
@clee-sai clee-sai Awaiting requested review from clee-sai clee-sai is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants