Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 10 updates - #604

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-edff3763af
Open

chore(deps): bump the minor-and-patch group across 1 directory with 10 updates#604
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-edff3763af

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 10 updates in the / directory:

Package From To
nx 23.2.0 23.2.1
@clack/prompts 1.7.0 1.8.0
open 11.0.2 11.0.3
yaml 2.9.0 2.9.1
zod 4.5.4 4.6.2
@cloudflare/workers-types 5.20260905.1 5.20260911.1
@types/node 25.9.5 25.9.6
@typescript-eslint/eslint-plugin 8.69.0 8.70.0
@typescript-eslint/parser 8.69.0 8.70.0
auto-changelog 2.6.0 2.6.1

Updates nx from 23.2.0 to 23.2.1

Release notes

Sourced from nx's releases.

23.2.1 (2026-09-09)

🚀 Features

  • core: report the cache location alongside usage (#36959)
  • repo: add a .NET example for @​nx/dotnet (#36701)

🩹 Fixes

  • angular: correct declaration maps and exports of buildable libraries (#36373, #36357)
  • core: separate daemon runtime env from graph identity (#36565, #36564)
  • core: validate the migrations path before extracting package migrations (#36887)
  • core: release per-run process listeners and task history results (#36866)
  • core: read the pnpm 12 min-release-age policy instead of deferring to an install (#36915, #36914)
  • core: carry minimumReleaseAge into pruned pnpm deploy output (#36900, #36899)
  • core: report how a plugin worker was lost instead of always calling it an exit (#36894)
  • core: keep the cache in the workspace on CI (#36922)
  • core: restore the wasm walker imports dropped by a stray cfg attribute (#36924)
  • core: avoid mutating target options when resolving configurations (#36934)
  • js: resolve tsconfig to absolute path so ${configDir} paths type-check without baseUrl (#36445)
  • misc: scan package projects for env vars (#36847)
  • release: exclude AI coding agents from the changelog Thank You section (#36892)
  • release: use the release group name when resolving the previous tag for fixed groups (#36554)
  • repo: provision JDK 17 for Gradle builds with mise (#36965)
  • repo: guard JAVA17_HOME against an uninstalled JDK (#36969)
  • rspack: write the normalized cache option in NxAppRspackPlugin (#36905, #36878)

❤️ Thank You

Commits
  • 4008ffd chore(repo): check the wasm target on PRs that touch rust (#36925)
  • 6e7f827 feat(core): report the cache location alongside usage (#36959)
  • 0a267e4 fix(core): avoid mutating target options when resolving configurations (#36934)
  • f9ba81b fix(core): restore the wasm walker imports dropped by a stray cfg attribute (...
  • 9469e56 fix(core): keep the cache in the workspace on CI (#36922)
  • c0b2f2d fix(core): report how a plugin worker was lost instead of always calling it a...
  • 90aab17 fix(core): carry minimumReleaseAge into pruned pnpm deploy output (#36900)
  • 4871a95 fix(core): read the pnpm 12 min-release-age policy instead of deferring to an...
  • 0ae9069 fix(core): release per-run process listeners and task history results (#36866)
  • de37c5e fix(core): validate the migrations path before extracting package migrations ...
  • Additional commits viewable in compare view

Updates @clack/prompts from 1.7.0 to 1.8.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Changelog

Sourced from @​clack/prompts's changelog.

1.8.0

Minor Changes

  • #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

  • #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

  • #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

Commits

Updates open from 11.0.2 to 11.0.3

Release notes

Sourced from open's releases.

v11.0.3

  • Fix Windows launches being killed when the parent process exits 734b821

sindresorhus/open@v11.0.2...v11.0.3

Commits

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

  • Limit recursive merge aliases (#685, #713)
  • Simplify line unfolding during quoted string parsing (#714)
Commits

Updates zod from 4.5.4 to 4.6.2

Release notes

Sourced from zod's releases.

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

  • .validate() — checks input validity without building a result (up to 35x faster than .safeParse().success on a compiled schema)
  • z.instanceof().properties() — validates properties of an instance
  • fromJSONSchema() — enforces six validation keywords it used to ignore
  • z.iban() — electronic-format IBAN plus mod-97 checksum
  • z.withParser() — installs a parser generated elsewhere, for environments without new Function
  • Faster CommonJS — drops the getter on every export (~3x faster z.validate() under require)
  • Memory retention in recursive schemas — releases the parsed input, fixing a 4.5 out-of-memory regression
  • @zod/mini — Zod Mini as a standalone package, versioned in lockstep with zod since 4.5

.validate()

Standalone boolean validation, in Zod, Zod Mini, and Zod Core. It answers "is this input valid?" without constructing a ZodError, which makes rejection cheap. The return type is a guard on the schema's input type.

z.validate(z.string(), "hi"); // true
z.validate(z.string(), 42);   // false

It is a method on Zod Classic schemas too. (#6547)

const Player = z.object({
  username: z.string(),
  xp: z.number(),
});
</tr></table>

... (truncated)

Commits
  • e359f73 4.6.2
  • 9446b5c fix: preserve undefined prefault outputs and object keys (#6587)
  • 0c483c5 docs: Zod 4.6 announcement post (#6546)
  • a00c3f3 docs: use Trigger.dev's brand-kit lockups for the platinum card
  • 62311eb 4.6.1
  • 2efa8b8 ci: give the npm wait a real budget and drop the back-publish path (#6583)
  • b12aa52 fix: preserve unique tags with defaulted discriminators (#6582)
  • dd9c36f fix(v4): defer recursive object index inference (#6580)
  • 574d480 fix(locales): clarify Tajik discriminator value message
  • c532d76 test(locales): cover Tajik error branches
  • Additional commits viewable in compare view

Updates @cloudflare/workers-types from 5.20260905.1 to 5.20260911.1

Commits

Updates @types/node from 25.9.5 to 25.9.6

Commits

Updates @typescript-eslint/eslint-plugin from 8.69.0 to 8.70.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

  • eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
  • website: generate per-page social preview cards (#12734)

🩹 Fixes

  • use stable release of pnpm 12 (#12808)
  • update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
  • eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
  • eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
  • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
  • project-service: avoid discarded tsserver logs (#12748)
  • typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.70.0 (2026-09-07)

🚀 Features

  • eslint-plugin: [no-generated-empty-object-type] add rule (#12730)

🩹 Fixes

  • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
  • eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
  • eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 7ee7608 chore(release): publish 8.70.0
  • f66bdca test(eslint-plugin): [member-ordering] use RuleTester directly in `optional...
  • 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
  • f8e1e4e fix(eslint-plugin): [no-unnecessary-condition] no false positive on RHS of a ...
  • 889cece fix(eslint-plugin): [member-ordering] don't report fields that read fields de...
  • 1a5a8b1 feat(eslint-plugin): [no-generated-empty-object-type] add rule (#12730)
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.69.0 to 8.70.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

  • eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
  • website: generate per-page social preview cards (#12734)

🩹 Fixes

  • use stable release of pnpm 12 (#12808)
  • update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
  • eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
  • eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
  • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
  • project-service: avoid discarded tsserver logs (#12748)
  • typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.70.0 (2026-09-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates auto-changelog from 2.6.0 to 2.6.1

Changelog

Sourced from auto-changelog's changelog.

v2.6.1

  • Breaking change: [Fix] treat in-repo config as untrusted to prevent code execution 1d02a48
  • [Fix] pass fixes to the processFixes plugin hook be95155
  • [Fix] don't crash on a non-semver --starting-version or tag f5b0fd8
Commits
  • 3c33a5b v2.6.1
  • 1174dc6 [Dev Deps] update tape
  • 35daed2 [Fix] report a useful error for --plugins with no plugin names
  • 28c99e6 [Fix] render all commits for --backfill-limit false
  • 3df67ed [Fix] don't let stat-less commits corrupt the relevance sort
  • f5b0fd8 [Fix] don't crash on a non-semver --starting-version or tag
  • 647ee47 [Fix] include the oldest release when --starting-version predates every tag
  • be95155 [Fix] pass fixes to the processFixes plugin hook
  • 1d02a48 [Fix] treat in-repo config as untrusted to prevent code execution
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 15, 2026
@sw-release-bot
sw-release-bot Bot enabled auto-merge (squash) September 15, 2026 02:11
@coderabbitai

coderabbitai Bot commented Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 33a90b20-3059-4bd4-8cc7-7967906c0385

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 1…
e0199c2 
…0 updates

Bumps the minor-and-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `23.2.0` | `23.2.1` |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.7.0` | `1.8.0` |
| [open](https://github.com/sindresorhus/open) | `11.0.2` | `11.0.3` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.2` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260905.1` | `5.20260911.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.5` | `25.9.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.69.0` | `8.70.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.69.0` | `8.70.0` |
| [auto-changelog](https://github.com/CookPete/auto-changelog) | `2.6.0` | `2.6.1` |



Updates `nx` from 23.2.0 to 23.2.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.2.1/packages/nx)

Updates `@clack/prompts` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.8.0/packages/prompts)

Updates `open` from 11.0.2 to 11.0.3
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v11.0.2...v11.0.3)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `zod` from 4.5.4 to 4.6.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.2)

Updates `@cloudflare/workers-types` from 5.20260905.1 to 5.20260911.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@types/node` from 25.9.5 to 25.9.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.69.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.69.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/parser)

Updates `auto-changelog` from 2.6.0 to 2.6.1
- [Changelog](https://github.com/cookpete/auto-changelog/blob/master/CHANGELOG.md)
- [Commits](cookpete/auto-changelog@v2.6.0...v2.6.1)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260911.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: auto-changelog
  dependency-version: 2.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nx
  dependency-version: 23.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: open
  dependency-version: 11.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-edff3763af branch from 09b844a to e0199c2 Compare September 15, 2026 02:21
@sonarqubecloud

sonarqubecloud Bot commented Sep 15, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sw-release-bot sw-release-bot[bot] sw-release-bot[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants