Skip to content

chore(deps): bump the cli-dependencies group across 1 directory with 10 updates - #174

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-98fefd6d67
Open

chore(deps): bump the cli-dependencies group across 1 directory with 10 updates#174
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/cli/cli-dependencies-98fefd6d67

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cli-dependencies group with 10 updates in the /cli directory:

Package From To
@clack/prompts 1.7.0 1.8.1
oauth4webapi 3.8.7 3.8.8
yaml 2.9.0 2.9.1
@types/bun 1.4.3 1.4.4
eslint-plugin-no-relative-import-paths 1.6.1 1.7.3
knip 6.32.2 6.44.0
oxfmt 0.71.0 0.75.0
oxlint 1.86.0 1.90.0
oxlint-tsgolint 7.0.2003 7.0.2005
typescript 6.0.3 7.0.2

Updates @clack/prompts from 1.7.0 to 1.8.1

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

@​clack/prompts@​1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Changelog

Sourced from @​clack/prompts's changelog.

1.8.1

Patch Changes

  • 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

  • Updated dependencies [8bd9129]:

    • @​clack/core@​1.5.1

1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Commits

Updates oauth4webapi from 3.8.7 to 3.8.8

Release notes

Sourced from oauth4webapi's releases.

v3.8.8

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Changelog

Sourced from oauth4webapi's changelog.

3.8.8 (2026-09-05)

Fixes

  • accept space runs in Bearer and DPoP credentials (3414db5)
  • decode HTTP authentication quoted pairs correctly (bd7fcb0)
  • forward arguments to AVA test runners (b898ba5)
  • honor explicit auth-time skips in authorization responses (656d762)
  • recognize DPoP nonce errors among multiple challenges (70bd8a1)
  • release: separate changelog sections (a827c39)
  • validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

  • consolidate ID Token validation policy (53900cc)

Performance

  • cache imported issuer verification keys by algorithm (fbe6c02)
  • coalesce compatible in-flight JWKS requests (e64849e)
Commits
  • 916b979 chore(release): 3.8.8
  • eb564a4 test: accept WebCrypto DOMException rejections on Node 20
  • fbe6c02 perf: cache imported issuer verification keys by algorithm
  • e64849e perf: coalesce compatible in-flight JWKS requests
  • 53900cc refactor: consolidate ID Token validation policy
  • edbebeb fix: validate ID Token subjects and DPoP identifiers as strings
  • bd7fcb0 fix: decode HTTP authentication quoted pairs correctly
  • 3414db5 fix: accept space runs in Bearer and DPoP credentials
  • 656d762 fix: honor explicit auth-time skips in authorization responses
  • b898ba5 fix: forward arguments to AVA test runners
  • Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

  • Limit recursive merge aliases (#685, #713)
  • Simplify line unfolding during quoted string parsing (#714)
Commits

Updates @types/bun from 1.4.3 to 1.4.4

Commits

Updates eslint-plugin-no-relative-import-paths from 1.6.1 to 1.7.3

Release notes

Sourced from eslint-plugin-no-relative-import-paths's releases.

1.7.3

No release notes provided.

1.7.2

Re-release

1.7.1

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@1.7.0...1.7.1

1.7.0

What's Changed

New Contributors

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-no-relative-import-paths since your current version.


Updates knip from 6.32.2 to 6.44.0

Release notes

Sourced from knip's releases.

Release 6.44.0

  • Clarify that custom entry still adds entry files from package.json (#2206) (4099ddeef28406ed8c9b798cf5ce525241818642) - thanks @​MannXo!
  • Resolve expanded package scripts against the directory of their manifest (#2209) (9d8464dd7335b9898a17a0db59c3c33a7ae460f4) - thanks @​fixfon!
  • Track exports through namespace member chains of any depth (#2210) (75697027e89e176c16e3d567cff3d6e016d0e9f0) - thanks @​fixfon!
  • Do not treat Windows drive letters as package names (#2217) (d412c5be3a5c2d69583ce54b32e033813c1d2972) - thanks @​Cherry!
  • Generate built-in compilers list from source (#2216) (d6f594cc767fa41c6f94cf49bfa0302be4b9de40) - thanks @​abrahamguo!
  • Update to pnpm@^11 + pnpm dedupe (ef5b819eddbb0b4ff92804524aca590797a199fc)
  • Stop growing and rewriting the analysis cache on warm runs (close #2213) (54b02dd84181867f41f98a6c80209dad32fa3da6)
  • Use entry in plugins that do not resolve their config files (0b0e3285e3a440650b86a776b5e2a1fc1816bca8)
  • Reuse graph reachability for incremental sessions (#2190) (38d926a652e820a375fe59d04ba0980393882153) - thanks @​jakeleventhal!
  • fix: reload discovered configuration in watch sessions (#2211) (cefef30891c4428635e5cfc7b147faa42857247d) - thanks @​jakeleventhal!
  • Keep editor sessions and views current (#2215) (cfe91abb5e6064230a71926f0d7565fce94486c0) - thanks @​jakeleventhal!
  • Add Lingui plugin (#2212) (611e7dbe1c6675612e457324aae411bf4cda5b11) - thanks @​clean99!
  • Update dependency bun to v1.4.4 (#2219) (3f35bbdf863057f69f237ab507053271019fc315) - thanks @​renovate[bot]!
  • Read CSpell configuration from package.json (#2228) (86ab963cf3cd279a8b8af3a3f0098d24762c59cb) - thanks @​clean99!
  • Ignore file discovery order in session configuration test (51a8d33dbe04e76da8f2e2ed24d8943d0e9e15fe)
  • Fix strict mode for caught optional peer imports (#2218) (e535f40b8cacea80c830282544975f0be2191323) - thanks @​jay23606!
  • Add kysely-codegen plugin (#2223) (a50e8423d28406bd20c213334d3aac4857c1cce0) - thanks @​clean99!
  • Add PurgeCSS plugin (#2224) (668aea696a217d7c537791771be6044fc5ae375b) - thanks @​clean99!
  • Document plugin args and path bases, issue key order and real-world fixes (8e48df60c4502c66d9daba87d5f436898ae60116)
  • Add Mastra plugin (#2227) (dd4e1f72de127eb8328dd941fa4492034f29d69d) - thanks @​ashokram-si!
  • Count findPackageJSON() bare specifiers as dependencies (#2235) (d4e387b31235d49fe755acb79553b385aa0de4c9) - thanks @​abrahamguo!
  • Add universal hooks file to SvelteKit entries (#2237) (f286584f168d27255769bd9529b49a3518e4f788) - thanks @​APX403!
  • Attribute extended tsconfig plugins correctly (#2230) (8d1d1d1e54204287b8321a0a5d50cbfa4562759e) - thanks @​gioboa!
  • Resolve reporter in the Mocha plugin (#2232) (c413715a334be72094a02af0dbb37e36e878e262) - thanks @​X-Guardian!
  • Read nyc.config.cjs and nyc.config.mjs in the nyc plugin (#2240) (724c3c9bd44d9919f35fa5b5be955fa3b6c9339d) - thanks @​SwastikTripathi!
  • Read hidden .biome.json and .biome.jsonc in the Biome plugin (#2239) (dde22a754d9cd7a4e98aaeef6b0ad8b22b14040d) - thanks @​SwastikTripathi!
  • fix: narrow Remix plugin enabler to @​remix-run/dev (#2242) (5e10c52abfe21839dc9bd515fd900ff035fac170) - thanks @​gioboa!
  • Document alsoReferenceOwner on Input (387e97f0988da93d74df53ad46a906db3d29dba8)
  • Document path bases and the dir option per input type (98180d375b154663d8c9b967c9b8b54c0de06927)
  • Emit the Gatsby production entries from resolveConfig (c224f16c629cec5ec56ce06b8bcf9207255ba69f)
  • Emit the TanStack Router entry files from resolveConfig (c2598a3dae1e9616191d88d81eafcde6ab0f5b82)
  • Discover Marko tag files when only marko-tag.json files exist (c264697fab8c0783f2e23c983aacb1d4178953fc)
  • Remove the static public/sw.js production entry from the vite-plugin-pwa plugin (b3f9a56216195e279ec73935f0de1e6ff490230c)
  • Keep absolute build.lib.entry paths in the Vitest plugin (5d974fa1bdfe3bbc696645139cc04bb963d5f9d9)
  • Resolve Vite alias targets from the workspace without prefixing absolute paths (8f93e9d3425e47d9933baec078d1cdf9ad8a49ca)
  • Keep absolute testDir paths in the Playwright plugin (4e3e6b3d8b978a7f4a99438c661a86a93c73745d)
  • Keep absolute stories paths in the Storybook plugin (321decc499e3ec15b75c4abace3a58a0cd8f6b50)
  • Resolve an absolute basePath in the Karma plugin (64e8b1bbe28e0c0f9f80112683b5c5f51f7d4512)
  • Keep absolute local plugin paths in the Docusaurus plugin (058930d9eb30490c796af1ee8bab3682e852dae2)
  • Keep absolute local plugin paths in the Serverless Framework plugin (0176d78dec4cd8ba9204c61c3c0ec7385a02ae9c)
  • Resolve Nx run-commands cwd from the workspace root (39c08aab2149cf11f74c60195b3fdf0bcadc29f2)
  • Resolve package specifiers in Marko tag definitions (168ee52857cf646ac0f1b18528bf6867fdd10c4f)
  • Keep absolute include paths in the Taskfile plugin (7945ec15a327bd65ad6ed00809ba4f12b3f3d814)
  • Resolve Lefthook root from the repository root (f28fae68d56c527f9c6388d983344e5694e5a906)
  • Pass specifiers with dir instead of absolutizing them in the webpack, Nx and textlint plugins (1ad804d6f24f55c28ffd9d306b1bb43175064429)
  • Drop redundant relative calls on entry patterns in the rstest and Marko plugins (9096f254bade552cdd556255157dd440ee634b27)
  • Use toAbsolute in the Jasmine, Lunaria and electron-vite plugins (b4266efef59359dcb2632b97a7c6335f9d47251d)
  • Mark inputs from the start script as production (2fb10243bb1385060d8f94204081f750405460ec)
  • Mark inputs from scripts in production files as production (af469e9c88bd87e3b71b8d010abf069115cf2a19)

... (truncated)

Commits
  • 0d14731 Release knip@6.44.0
  • 153ba1e Escape pipes in symbols in the markdown reporter (#2254)
  • 624da93 Detect SWC plugins in options set directly on a webpack rule (#2252)
  • acbbbf5 Support pnpm workspace config includes (#2238)
  • e118ef4 Treat packageExtensions peers as optional (#2246)
  • 1a58eb5 Add --output-file option to write reporter output to a file (#2243)
  • 5d10668 Let core resolve script entries from dir in the Playwright, Railway and mis...
  • 381e3e3 Parse MCP server commands against their cwd
  • 98d0b98 Parse GitHub Actions step scripts against their working directory
  • 2070464 Pin the scope of negations and workspace exclusions for plugin entry patterns...
  • Additional commits viewable in compare view

Updates oxfmt from 0.71.0 to 0.75.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.75.0

🐛 Bug Fixes

  • 5042019 formatter: Keep fill layout for array with comment after [ (#28170) (leaysgur)
  • 9d37ff6 formatter: Use position-based comment checks for concise arrays (#28169) (leaysgur)
  • 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#28103) (vidigoat)
  • 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#28168) (leaysgur)
  • a5314a1 formatter: Keep ; before in and instanceof class members (#28166) (leaysgur)
  • 3a56e7c formatter: Keep closing HTML comments at the start of a line (#28064) (Cameron)
  • 23d23d6 formatter_markdown: Honor range ignore inside directives (#28164) (leaysgur)
  • 5f1fd3d formatter: Measure width heuristics by display width (#28098) (leaysgur)
  • a5a52cf formatter: Keep parens around private in expressions (#28096) (leaysgur)
  • 999496e formatter: Measure a short key by its display width (#28026) (vidigoat)
  • 7e9aa44 formatter: Keep parens around a looser operand of an instantiation expression (#28025) (vidigoat)
  • 6912d1f formatter: Keep an arrow signature that exactly fills the line for any body (#27989) (leaysgur)
  • eb1d9f9 formatter_core: Count a flat line space in fits only when text follows (#27987) (leaysgur)

⚡ Performance

  • 1ed93af data_structures: Copy short strings without a memcpy call (#27953) (leaysgur)
  • 7948f0b formatter_core: Shrink FormatElement to 16B (#28012) (leaysgur)
  • 788af22 formatter: Keep AstNodes on the stack, and only chain links in the arena (#27963) (leaysgur)

📚 Documentation

  • 068a8ea formatter: Fix up wording (#28167) (leaysgur)
  • db55461 formatter_core: Document text width divergence (#28095) (leaysgur)
  • 880d229 formatter: Add vitest-test-call to known divergences (#28006) (leaysgur)

oxfmt v0.74.0

🐛 Bug Fixes

  • e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#27957) (leaysgur)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#27955) (leaysgur)
  • 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#27948) (leaysgur)
  • 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#27947) (leaysgur)
  • 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#27946) (leaysgur)
  • c22a9b2 formatter: Treat static block with only empty statements as empty (#27945) (leaysgur)
  • d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#27823) (leaysgur)
  • c4c1727 formatter/sort_imports: Keep comments after the last import (#27822) (leaysgur)
  • a64677e formatter: Print JSDoc embedded snippets with LF (#27821) (leaysgur)
  • 2c1cc20 formatter: Keep comment only Vue bindings as-is (#27820) (leaysgur)
  • 1bf236d formatter/sort_imports: Do not use comments as import source (#27819) (leaysgur)
  • 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#27818) (leaysgur)
  • 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#27814) (leaysgur)
  • a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#27812) (leaysgur)
  • de110ce formatter: Keep more parens around TSInstantiationExpression (#27811) (leaysgur)
  • 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#27785) (leaysgur)
  • 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#27780) (leaysgur)

... (truncated)

Commits
  • 9b6fff4 release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)
  • 3e7f0f5 chore(oxfmt): bump prettier-plugin-astro to 1.1.2 (#28162)
  • 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
  • 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
  • a495e82 feat(oxfmt): support associations config to specify language over filepath ...
  • 408d87f docs(oxfmt): simplify oxfmtrc docs (#27432)
  • 5db28fa feat(oxfmt): support Astro via prettier-plugin-astro@1.x (#27386)
  • 902e188 docs(oxfmt): update how embeddedLanguageFormatting option works (#27362)
  • 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
  • See full diff in compare view

Updates oxlint from 1.86.0 to 1.90.0

Release notes

Sourced from oxlint's releases.

oxlint v1.90.0

🚀 Features

  • cf34678 oxlint: Export Oxlintrc type (#28132) (Sysix)
  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

🐛 Bug Fixes

  • 7f3c908 linter/eslint/array-callback-return: Check callbacks passed with extra arguments (#28133) (sarankumar)
  • 53be530 linter: Filter by type aware rules when looking up tsgolint rule severity (#28138) (NavpreetSSidhu)
  • e0f8937 react-compiler: Compile a try whose catch is unreachable instead of panicking (#28066) (Dunqing)
  • f5b625f linter/eslint/no-useless-concat: See through parenthesized expressions (#27984) (Rahul Kashyap)
  • 4629bb2 linter/jest/no-conditional-expect: Check function expression callbacks (#28055) (camc314)
  • 5c84098 semantic,linter: Report names with lone surrogates in enum and lint checks (#27991) (Dunqing)
  • f3705a9 linter/eslint/prefer-const: Skip fixers if any declarator is reassigned (#28008) (Prince Jain)
  • 4c0fa90 minifier,linter: Keep delete of constant members and later JSX keys (#27990) (Dunqing)
  • 0298062 linter/arrow-body-style: Keep type assertions when adding a block body (#27978) (Yan Almeida)

oxlint v1.89.0

💥 BREAKING CHANGES

  • e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
  • a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

  • 770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)
  • ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)
  • d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)
  • e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)
  • 7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)
  • d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)
  • 199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)
  • 780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)
  • 6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)
  • b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)
  • c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)
  • 6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

  • 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • 326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)
  • f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)
  • 00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)
  • 9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)
  • 01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.90.0] - 2026-10-27

🚀 Features

  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

[1.89.0] - 2026-10-19

🐛 Bug Fixes

  • 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)

[1.88.0] - 2026-10-13

🚀 Features

  • 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)
Commits
  • 9b6fff4 release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)
  • 831cdf1 feat(oxlint): require mininum oxlint-tsgolint version v7.0.2005 (#28118)
  • d1b00f4 feat(linter/typescript): implement no-unsafe-enum-assignment rule (#28117)
  • 165c91f feat(linter/typescript/await-thenable): support allowMixedPromiseArrays opt...
  • 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
  • 9a424c2 fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)
  • 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
  • 3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
  • 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
  • See full diff in compare view

Updates oxlint-tsgolint from 7.0.2003 to 7.0.2005

Release notes

Sourced from oxlint-tsgolint's releases.

v7.0.2005

What's Changed

New Contributors

Full Changelog: oxc-project/tsgolint@v7.0.2004...v7.0.2005

v7.0.2004

What's Changed

New Contributors

Full Changelog: oxc-project/tsgolint@v7.0.2003...v7.0.2004

Commits
  • 4ebf80f fix(require-array-sort-compare): report tuples (#1317)
  • 62e97c9 feat(no-unsafe-enum-assignment): add rule (#1316)
  • e649c1e fix(no-unnecessary-type-parameters): count generic type arguments (#1297)
  • e333787 ci: pin just version in setup and autofix (#1312)
  • bcab203 chore: remove update-typescript-go.yml (#1311)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 28, 2026
@albert20260301

albert20260301 commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

This replacement still fails required verification at src/ui/prompts.ts:70: Type 'string | symbol' is not assignable to type 'string' (job log). It is the same compatibility blocker recorded on the now-closed #162; the updated dependency group does not resolve it.

A compatible prompt result handling change or dependency resolution is needed before this group can be approved. Integration, runtime-compatibility and binary checks cannot establish readiness while canonical verification stops at typecheck.

@dependabot
chore(deps): bump the cli-dependencies group across 1 directory with …
a3b25d2 
…10 updates

Bumps the cli-dependencies group with 10 updates in the /cli directory:

| Package | From | To |
| --- | --- | --- |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.7.0` | `1.8.1` |
| [oauth4webapi](https://github.com/panva/oauth4webapi) | `3.8.7` | `3.8.8` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.3` | `1.4.4` |
| [eslint-plugin-no-relative-import-paths](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths) | `1.6.1` | `1.7.3` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.44.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.71.0` | `0.75.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.86.0` | `1.90.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2003` | `7.0.2005` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@clack/prompts` from 1.7.0 to 1.8.1
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.8.1/packages/prompts)

Updates `oauth4webapi` from 3.8.7 to 3.8.8
- [Release notes](https://github.com/panva/oauth4webapi/releases)
- [Changelog](https://github.com/panva/oauth4webapi/blob/main/CHANGELOG.md)
- [Commits](panva/oauth4webapi@v3.8.7...v3.8.8)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `@types/bun` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `eslint-plugin-no-relative-import-paths` from 1.6.1 to 1.7.3
- [Release notes](https://github.com/MelvinVermeer/eslint-plugin-no-relative-import-paths/releases)
- [Commits](MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.3)

Updates `knip` from 6.32.2 to 6.44.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.44.0/packages/knip)

Updates `oxfmt` from 0.71.0 to 0.75.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.75.0/npm/oxfmt)

Updates `oxlint` from 1.86.0 to 1.90.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.90.0/npm/oxlint)

Updates `oxlint-tsgolint` from 7.0.2003 to 7.0.2005
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v7.0.2003...v7.0.2005)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: "@types/bun"
  dependency-version: 1.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: eslint-plugin-no-relative-import-paths
  dependency-version: 1.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: knip
  dependency-version: 6.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oauth4webapi
  dependency-version: 3.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: oxfmt
  dependency-version: 0.74.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint
  dependency-version: 1.89.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cli-dependencies
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2005
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: cli-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cli-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/cli/cli-dependencies-98fefd6d67 branch from d1e4c02 to a3b25d2 Compare November 2, 2026 14:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@albert20260301