Bump brace-expansion, ava and xo

[dependabot]

Bumps brace-expansion to 5.0.7 and updates ancestor dependencies brace-expansion, ava and xo. These dependencies need to be updated together.

Updates brace-expansion from 5.0.6 to 5.0.7

Commits

• b735ba6 5.0.7
• c7e33ec Merge commit from fork
• fa1786a Bump tar from 7.5.11 to 7.5.16 (#116)
• c16f1ec fix(package.json): use git+https instead of git+ssh for repository URL (#115)
• 196bbcc Bump ip-address from 10.1.0 to 10.2.0 (#104)
• eb18dd6 Update ci.yml (#107)
• a39928d Bump minimatch (#106)
• 7950ae3 ci: correct test workflow (#105)
• See full diff in compare view

Updates ava from 6.4.1 to 8.0.1

Release notes

Sourced from ava's releases.

v8.0.1

What's Changed

This release officially adds Node.js 26 support, with thanks to @​novemberborn in avajs/ava#3450.

Per our policy, support for Node.js 25 has been removed.

Full Changelog: avajs/ava@v8.0.0...v8.0.1

v8.0.0

Breaking Changes

AVA now expects Node.js 22.20, 24.12 or newer.

Internally AVA is now fully ESM. This is possible now that Node.js supports loading ES modules using require() calls and simplifies AVA's types and internals.

If you use AVA from a CommonJS project you'll have to update your imports:

-const test = require('ava');
+const {default: test} = require('ava');

We expect an increasing number of projects to be ESM only. As per the above, CommonJS is still supported, but we don't expect cjs extensions to be used. The default file extensions are now js and mjs. Specify extensions: ['cjs', 'js', 'mjs'] for AVA to run test files with the cjs extension.

All test files (and those loaded through AVA's require config) are now loaded via import(). Use customization hooks for transpilation. The object form of the extensions configuration is no longer supported.

If you use AVA with @​ava/typescript you must upgrade that package to v7.

New Features

There's two new test modifiers courtesy of @​sindresorhus: test.skipIf() to skip a test based on a runtime condition. test.runIf() is the inverse: the test only runs when the condition is true.

test.skipIf(process.platform === 'win32')('not on Windows', t => {
	t.pass();
});
test.runIf(process.platform === 'linux')('Linux only', t => {
t.pass();
});

These work with other modifiers like .serial and .failing:

test.serial.skipIf(process.platform === 'win32')('serial, not on Windows', t => {
	t.pass();
});
</tr></table>

... (truncated)

Commits

• bbfd946 v8.0.1
• 332fcd7 Pre-release updates (#3451)
• fcaaf43 Add Node.js 26 support; drop 25 (#3450)
• a913804 Test using AVA 8 (#3440)
• fe31286 v8.0.0
• 7bdbabb Improve error when throwsAsync/notThrowsAsync is not awaited (#3436)
• a304990 Full ESM internals; bias away from CJS; require @​ava/typescript@​7
• d012c64 Update release process documentation (#3435)
• 2cea71e CI tweaks (#3438)
• 27e9c84 Remove Node.js 20 support; update dependencies prior to release (#3432)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ava since your current version.

Updates xo from 0.58.0 to 4.0.0

Release notes

Sourced from xo's releases.

v4.0.0

Improvements

• Lint node:test files with the new eslint-node-test plugin
• Recognize any tool's *-ignore/*:ignore comment (like svelte-ignore), not just a hardcoded list, for capitalized-comments

New rules

• unicorn/consistent-conditional-object-spread
• unicorn/consistent-tuple-labels
• unicorn/default-export-style
• unicorn/no-accidental-bitwise-operator
• unicorn/no-array-concat-in-loop
• unicorn/no-array-front-mutation
• unicorn/no-array-sort-for-min-max
• unicorn/no-async-promise-finally
• unicorn/no-boolean-sort-comparator
• unicorn/no-chained-comparison
• unicorn/no-collection-bracket-access
• unicorn/no-constant-zero-expression
• unicorn/no-double-comparison
• unicorn/no-duplicate-if-branches
• unicorn/no-duplicate-logical-operands
• unicorn/no-impossible-length-comparison
• unicorn/no-invalid-character-comparison
• unicorn/no-invalid-well-known-symbol-methods
• unicorn/no-late-event-control
• unicorn/no-loop-iterable-mutation
• unicorn/no-misrefactored-assignment
• unicorn/no-nonstandard-builtin-properties
• unicorn/no-selector-as-dom-name
• unicorn/no-unnecessary-boolean-comparison
• unicorn/no-unnecessary-fetch-options
• unicorn/no-unsafe-promise-all-settled-values
• unicorn/no-useless-compound-assignment
• unicorn/no-useless-delete-check
• unicorn/no-useless-logical-operand
• unicorn/no-xor-as-exponentiation
• unicorn/prefer-abort-signal-any
• unicorn/prefer-abort-signal-timeout
• unicorn/prefer-aggregate-error
• unicorn/prefer-array-flat-map
• unicorn/prefer-array-from-async
• unicorn/prefer-array-from-range
• unicorn/prefer-array-iterable-methods
• unicorn/prefer-block-statement-over-iife
• unicorn/prefer-boolean-return
• unicorn/prefer-continue
• unicorn/prefer-dom-node-replace-children
• unicorn/prefer-error-is-error

... (truncated)

Commits

• 2775f7f 4.0.0
• 5d90a39 Update dependencies
• 5201c05 Update ISSUE_TEMPLATE to remove TypeScript link (#893)
• 41b9bb9 3.0.2
• 7baa7f2 Fix --fix corrupting TypeScript files outside the tsconfig
• 561be4e 3.0.1
• 91d3e6d Fix type resolution for TypeScript files outside the tsconfig
• 698a903 3.0.0
• a728ac5 Replace xoToEslintConfig with xo/eslint-adapter and delegate Prettier to ...
• 9fbffd0 Add issue template config to route rule issues to config repos
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.