Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates - #469

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dev-dependencies-e9486ae5b3
Open

chore(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates#469
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dev-dependencies-e9486ae5b3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 8 updates in the / directory:

Package From To
@biomejs/biome 2.5.6 2.5.13
@types/node 25.9.5 25.9.6
esbuild 0.28.1 0.28.2
gitnexus 1.6.9 1.6.12
turbo 2.10.8 2.10.12
vitest 4.1.10 4.1.11
electron 42.8.0 42.11.3
@types/vscode 1.120.0 1.137.0

Updates @biomejs/biome from 2.5.6 to 2.5.13

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.13

2.5.13

Patch Changes

  • #11379 07a0073 Thanks @​Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.

    /* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@​import 'foo.css' layer(base);
@​layer base {
.my-style {
color: red;
}
}

  • #11667 e997900 Thanks @​devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.

    element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");

  • #11620 20e513a Thanks @​jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

  • #11657 e322040 Thanks @​ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

  • #11670 4969ee1 Thanks @​ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

  • #11627 23aad6d Thanks @​ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.

  • #11631 00dbd3a Thanks @​ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.

  • #11628 a2f8ff7 Thanks @​dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.

    const kibibyte = 2 ^ 10; // 8, not 1024

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.13

Patch Changes

... (truncated)

Commits

Updates @types/node from 25.9.5 to 25.9.6

Commits

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x

... (truncated)

Commits
  • 609683d publish 0.28.2 to npm
  • 11b1fe4 add to release notes
  • ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
  • 04627b6 fix #4498: async TLA checks need a worklist
  • 5c15177 disable gopls in the go folder
  • fc2ee9b css: adjust parser to allow --foo: {...}
  • 209db54 release notes for css nesting bugfix
  • c625d31 fix #4497: preserve nested ampersands during minification (#4500)
  • 34474e2 better isolation of current part in js parser
  • 07f6e8c fix #4507: import assignment tree-shaking bug
  • Additional commits viewable in compare view

Updates gitnexus from 1.6.9 to 1.6.12

Release notes

Sourced from gitnexus's releases.

v1.6.12

GitNexus v1.6.12

The portable-index release. Index artifacts no longer have to live inside the checkout — GITNEXUS_STORAGE_PATH and GITNEXUS_STORAGE_ROOT put them wherever an orchestrator wants them, and GITNEXUS_CONTENT_RETENTION decides how much source text comes along. Objective-C joins the supported languages, staleness stops calling an unresolvable index fresh, and long embedding jobs resume instead of restarting. 62 merged pull requests since v1.6.11.

✨ Highlights

  • 📂 Index artifacts can live outside the checkout — GITNEXUS_STORAGE_PATH writes one repository's graph, metadata, parse caches, locks and branch indexes to any absolute directory; GITNEXUS_STORAGE_ROOT gives many repositories one shared root with an isolated <repo-basename>-<canonical-path-hash>/ slot each. Built for managed and short-lived workspaces where something else collects, promotes or cleans up the output. Opt-in — unset, it is still <repo>/.gitnexus/. (#3060)
  • 🗜️ Content retention tiers — GITNEXUS_CONTENT_RETENTION=full|symbol|none chooses how much source-derived text is persisted at generation time: full file and symbol text, symbol snippets only, or graph structure with no source bodies. Graph-oriented CLI, MCP and UI workflows behave the same at every tier, and each surface now says plainly when retention or a missing checkout is hiding file text rather than returning a blank. (#3060)
  • 🍎 Objective-C is a supported language — a vendored tree-sitter-objc grammar and a deterministic provider covering interfaces, implementations, categories, methods, properties and header classification. (#3179)
  • 🧭 The index stops overstating what it knows — a rev-list failure on a pruned branch-pinned clone used to collapse into fresh; staleness now reports current, behind, diverged or unknown. GET /api/repos and GET /api/repo expose the indexed branch, lastCommit and how far behind it is, and doctor separates vector capability from repository index state. (#3257, #3232, #3199, #3228)
  • ♻️ Long embedding jobs are resumable — gitnexus embeddings fills an existing index in place: every successful batch is durable, reruns skip vectors whose content hash still matches, endpoint timeouts retry under GITNEXUS_EMBEDDING_RETRY_TIMEOUTS, and the structural graph is not rebuilt. Sync fails closed on foreign embedding identity and vector-width drift. (#3065, #3260)
  • 🛡️ Durability on the write path — a parse-cache chunk whose durable generation could not be reset is retired instead of leaving a stale generation reachable through the coherence gate, stale file-lock reclamation is guarded, and the LadybugDB pool-adapter checkpoint race is fixed with @ladybugdb/core pinned to 0.18.3. (#3271, #3234, #3189)

🚀 Added

  • Configurable index artifact storage — GITNEXUS_STORAGE_PATH writes one repository's index artifacts (graph data, metadata, parse caches, locks, branch indexes) to a caller-selected absolute directory, and GITNEXUS_STORAGE_ROOT gives several repositories one shared external root with an isolated <repo-basename>-<canonical-path-hash>/ slot each. GITNEXUS_STORAGE_PATH wins when both are set. Opt-in: unset, GitNexus still writes to <repo>/.gitnexus/ (#3060)
  • Generation-time content retention tiers — GITNEXUS_CONTENT_RETENTION=full|symbol|none chooses how much source-derived text is persisted: full file and symbol text, symbol snippets only, or structural graph data with no source bodies. Graph-oriented CLI, MCP and UI workflows are unchanged; CLI, MCP, the HTTP API and the web UI now say so explicitly when retention or a missing checkout hides file text. Storage and retention compatibility metadata is persisted, so an index is rebuilt when those semantics change (#3060)
  • Objective-C is a supported language — vendored tree-sitter-objc grammar with a deterministic provider covering interfaces, implementations, categories, methods, properties and header classification (#3179)
  • analyze --skip-fts / GITNEXUS_SKIP_FTS=1 — explicit FTS opt-out that skips extension loading and keyword-search indexes; the flag and the env var are one mode, so toggling the discriminator alone no longer forces a same-commit rebuild (#3205, #3263)
  • gitnexus embeddings fills an existing index in place — long HTTP embedding jobs are resumable: every successful batch is durable, reruns skip vectors whose content hash still matches, endpoint timeouts retry under GITNEXUS_EMBEDDING_RETRY_TIMEOUTS, and the structural graph is not rebuilt (#3065)
  • Staleness reports diverged and unknown instead of fresh — checkStaleness / checkStalenessAsync return an additive status (current, behind, diverged, unknown) so a rev-list failure on a pruned branch-pinned clone stops reading as an up-to-date index (#3257)
  • Serve API exposes branch and index freshness — GET /api/repos and GET /api/repo return the indexed branch, lastCommit, and how far behind the working tree is; POST /api/analyze honors branch (#3232, #3199)

🐛 Fixed

  • Parse-cache chunk whose durable generation could not be reset is retired, instead of leaving a stale generation reachable through the coherence gate (#3271)
  • Stale file-lock reclamation is guarded, closing the lock-recovery failure paths (#3234)
  • LadybugDB checkpoint race in the pool adapter, with @ladybugdb/core pinned to 0.18.3 (#3189)
  • MCP rejects unknown tool arguments and honors depth (#3267)
  • Deleted files map to indexed symbol ranges on incremental analyze (#3269)
  • Metadata-only diff files are retained by the parser (#3251); stable cache packs stay parallel (#3194)
  • Embedding sync fails closed on foreign identity and vector-width drift (#3260)
  • Dart — @name is anchored so a constructor initializer stops minting a second symbol (#3224)
  • Zig — callable-value references are modeled and their absence is no longer reported as exact (#3219); cross-file static gates resolve (#3185); tree-sitter-zig is vendored so npm i -g no longer warns on peers (#3180)
  • Go — test siblings resolve and package discovery is tighter (#3191)
  • TypeScript — tsconfig paths aliases resolve on Windows (#3203)
  • Ruby — gem requires are guarded with dependency metadata (#3096)
  • COBOL — copybook directories are preferred so COPY EXTERNAL does not hit vendor decoys (#3240)
  • Python — group detects function-local imports (#3254)
  • NestJS GraphQL contracts extract on real indexes (#3227); Spring constructor-to-bean injection edges persist to the schema (#3239)
  • Derived graph flows exclude guessed call edges (#3193), and fallback guesses are labeled while export visibility is preserved (#3190)
  • doctor distinguishes vector capability from repository index state (#3228)
  • CI looks up fork prebuild PRs by head owner and branch (#3236)

⚡ Performance

  • MCP tools/list no longer spawns one git process per repo — the registry is read directly (#3259)

... (truncated)

Changelog

Sourced from gitnexus's changelog.

[1.6.12] - 2026-09-12

Added

  • Configurable index artifact storage — GITNEXUS_STORAGE_PATH writes one repository's index artifacts (graph data, metadata, parse caches, locks, branch indexes) to a caller-selected absolute directory, and GITNEXUS_STORAGE_ROOT gives several repositories one shared external root with an isolated <repo-basename>-<canonical-path-hash>/ slot each. GITNEXUS_STORAGE_PATH wins when both are set. Opt-in: unset, GitNexus still writes to <repo>/.gitnexus/ (#3060)
  • Generation-time content retention tiers — GITNEXUS_CONTENT_RETENTION=full|symbol|none chooses how much source-derived text is persisted: full file and symbol text, symbol snippets only, or structural graph data with no source bodies. Graph-oriented CLI, MCP and UI workflows are unchanged; CLI, MCP, the HTTP API and the web UI now say so explicitly when retention or a missing checkout hides file text. Storage and retention compatibility metadata is persisted, so an index is rebuilt when those semantics change (#3060)
  • Objective-C is a supported language — vendored tree-sitter-objc grammar with a deterministic provider covering interfaces, implementations, categories, methods, properties and header classification (#3179)
  • analyze --skip-fts / GITNEXUS_SKIP_FTS=1 — explicit FTS opt-out that skips extension loading and keyword-search indexes; the flag and the env var are one mode, so toggling the discriminator alone no longer forces a same-commit rebuild (#3205, #3263)
  • gitnexus embeddings fills an existing index in place — long HTTP embedding jobs are resumable: every successful batch is durable, reruns skip vectors whose content hash still matches, endpoint timeouts retry under GITNEXUS_EMBEDDING_RETRY_TIMEOUTS, and the structural graph is not rebuilt (#3065)
  • Staleness reports diverged and unknown instead of fresh — checkStaleness / checkStalenessAsync return an additive status (current, behind, diverged, unknown) so a rev-list failure on a pruned branch-pinned clone stops reading as an up-to-date index (#3257)
  • Serve API exposes branch and index freshness — GET /api/repos and GET /api/repo return the indexed branch, lastCommit, and how far behind the working tree is; POST /api/analyze honors branch (#3232, #3199)

Fixed

  • Parse-cache chunk whose durable generation could not be reset is retired, instead of leaving a stale generation reachable through the coherence gate (#3271)
  • Stale file-lock reclamation is guarded, closing the lock-recovery failure paths (#3234)
  • LadybugDB checkpoint race in the pool adapter, with @ladybugdb/core pinned to 0.18.3 (#3189)
  • MCP rejects unknown tool arguments and honors depth (#3267)
  • Deleted files map to indexed symbol ranges on incremental analyze (#3269)
  • Metadata-only diff files are retained by the parser (#3251); stable cache packs stay parallel (#3194)
  • Embedding sync fails closed on foreign identity and vector-width drift (#3260)
  • Dart — @name is anchored so a constructor initializer stops minting a second symbol (#3224)
  • Zig — callable-value references are modeled and their absence is no longer reported as exact (#3219); cross-file static gates resolve (#3185); tree-sitter-zig is vendored so npm i -g no longer warns on peers (#3180)
  • Go — test siblings resolve and package discovery is tighter (#3191)
  • TypeScript — tsconfig paths aliases resolve on Windows (#3203)
  • Ruby — gem requires are guarded with dependency metadata (#3096)
  • COBOL — copybook directories are preferred so COPY EXTERNAL does not hit vendor decoys (#3240)
  • Python — group detects function-local imports (#3254)
  • NestJS GraphQL contracts extract on real indexes (#3227); Spring constructor-to-bean injection edges persist to the schema (#3239)
  • Derived graph flows exclude guessed call edges (#3193), and fallback guesses are labeled while export visibility is preserved (#3190)
  • doctor distinguishes vector capability from repository index state (#3228)
  • CI looks up fork prebuild PRs by head owner and branch (#3236)

Performance

  • MCP tools/list no longer spawns one git process per repo — the registry is read directly (#3259)
  • Scope resolution stops re-scanning the ParsedFile store once per language (#3211) and avoids quadratic config-walk queues (#3237)
  • Parse dispatch — cache packs batch into one dispatch round, the round's memory bound is tightened, and the worker-pool override is unclamped (#3196, #3200)
  • File locking probes this process's own start time once (#3222)

Chore / Dependencies

  • Benchmark and skill-evolution harness — evolution runs against historical PRs, bounded packed-scheduler primitives with offline replay, provider-native usage recorded at the gateway, and offline benchmarks against a scripted provider (#2785, #3206, #3207, #3220, #3235)
  • Docs — FTS closed as an optimization target with measured evidence, edit-loop numbers corrected with an FTS per-index breakdown, RepoCloud one-click deploy button (#3208, #3209, #3212)
  • Dependency bumps across gitnexus (hono, ignore, joi, express-rate-limit, @types/node), gitnexus-web (@langchain/langgraph, react-i18next, @types/react, @vitejs/plugin-react, @testing-library/user-event), and GitHub Actions (softprops/action-gh-release, docker/setup-qemu-action) (#3164, #3165, #3214, #3215, #3231, #3233, #3243–#3249, #3265)

[1.6.11] - 2026-09-04

Added

... (truncated)

Commits
  • c4ecf39 chore: release v1.6.12 (#3272)
  • 79543c8 feat(storage): add configurable index storage and content retention tiers (#3...
  • a8736a0 fix(lbug): checkpoint race in pool-adapter.ts + pin @​ladybugdb/core to 0.18.3...
  • ceaff27 fix(parse-cache): retire a chunk whose durable generation could not be reset ...
  • 3f5ca8c fix(storage): guard stale file-lock reclamation (#3234)
  • 1f64bec fix(mcp): reject unknown tool arguments and honor depth (#3267)
  • 68eca0c fix: map deleted files to indexed symbol ranges (#3269)
  • 75cc8dd chore(deps)(deps): bump ignore from 7.0.8 to 7.0.9 in /gitnexus (#3265)
  • 68c4200 fix(dart): anchor @​name so a constructor initializer stops minting a … (#3224)
  • af2d9ae refactor(fts): share skip-FTS helpers and capability defaults (#3263)
  • Additional commits viewable in compare view

Updates turbo from 2.10.8 to 2.10.12

Release notes

Sourced from turbo's releases.

Turborepo v2.10.12

What's Changed

Changelog

@dependabot
chore(deps-dev): bump the dev-dependencies group across 1 directory w…
01d316a 
…ith 8 updates

Bumps the dev-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.6` | `2.5.13` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.5` | `25.9.6` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [gitnexus](https://github.com/abhigyanpatwari/GitNexus/tree/HEAD/gitnexus) | `1.6.9` | `1.6.12` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.8` | `2.10.12` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [electron](https://github.com/electron/electron) | `42.8.0` | `42.11.3` |
| [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.120.0` | `1.137.0` |



Updates `@biomejs/biome` from 2.5.6 to 2.5.13
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.13/packages/@biomejs/biome)

Updates `@types/node` from 25.9.5 to 25.9.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `gitnexus` from 1.6.9 to 1.6.12
- [Release notes](https://github.com/abhigyanpatwari/GitNexus/releases)
- [Changelog](https://github.com/abhigyanpatwari/GitNexus/blob/main/gitnexus/CHANGELOG.md)
- [Commits](https://github.com/abhigyanpatwari/GitNexus/commits/v1.6.12/gitnexus)

Updates `turbo` from 2.10.8 to 2.10.12
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.8...v2.10.12)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `electron` from 42.8.0 to 42.11.3
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.8.0...v42.11.3)

Updates `@types/vscode` from 1.120.0 to 1.137.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: gitnexus
  dependency-version: 1.6.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: turbo
  dependency-version: 2.10.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: electron
  dependency-version: 42.11.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@types/vscode"
  dependency-version: 1.137.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 16, 2026
@dependabot
dependabot Bot requested a review from ceilf6 as a code owner September 16, 2026 03:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ceilf6 ceilf6 Awaiting requested review from ceilf6 ceilf6 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants