chore(deps): bump the nodejs group with 10 updates #244

dependabot · 2026-01-01T04:03:51Z

Bumps the nodejs group with 10 updates:

Package	From	To
@actions/cache	`4.1.0`	`5.0.1`
@actions/core	`1.11.1`	`2.0.1`
@actions/exec	`1.1.1`	`2.0.0`
smol-toml	`1.5.2`	`1.6.0`
zod	`4.1.13`	`4.3.4`
@eslint/js	`9.39.1`	`9.39.2`
@types/node	`24.10.1`	`25.0.3`
eslint	`9.39.1`	`9.39.2`
prettier	`3.7.3`	`3.7.4`
typescript-eslint	`8.48.0`	`8.51.0`

Updates @actions/cache from 4.1.0 to 5.0.1

Changelog

Sourced from @actions/cache's changelog.

5.0.1

Fix Node.js 24 punycode deprecation warning by updating @azure/storage-blob from ^12.13.0 to ^12.29.1 #2213

Newer storage-blob uses @azure/core-rest-pipeline instead of deprecated @azure/core-http, which eliminates the transitive dependency on node-fetch@2 → whatwg-url@5 → tr46@0.0.3 that used the deprecated punycode module

5.0.0

Remove @azure/ms-rest-js dependency #2197

The TransferProgressEvent type is now imported from @azure/core-rest-pipeline instead of @azure/ms-rest-js

Bump @actions/core from ^1.11.1 to ^2.0.0 #2198

Bump @actions/exec from ^1.0.1 to ^2.0.0 #2198

Bump @actions/glob from ^0.1.0 to ^0.5.0 #2198

Bump @actions/http-client from ^2.1.1 to ^3.0.0 #2198

Bump @actions/io from ^1.0.1 to ^2.0.0 #2198

Add support for Node.js 24 #2110

Add node-fetch override to resolve audit vulnerabilities #2110

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @actions/cache since your current version.

Updates @actions/core from 1.11.1 to 2.0.1

Changelog

Sourced from @actions/core's changelog.

2.0.1

Bump @actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

Add support for Node 24 #2110

Bump @actions/http-client from 2.0.1 to 3.0.0

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @actions/core since your current version.

Updates @actions/exec from 1.1.1 to 2.0.0

Changelog

Sourced from @actions/exec's changelog.

2.0.0

Add support for Node 24 #2110

Bump @actions/io dependency from ^1.0.1 to ^2.0.0

Commits

See full diff in compare view

Updates smol-toml from 1.5.2 to 1.6.0

Release notes

Sourced from smol-toml's releases.

v1.6.0

As of this version, smol-toml now supports the newly released TOML 1.1.0 specification!

Highlights

Multiline inline tables

TOML 1.1.0 now allows inline tables to have newlines, as well as trailing commas.
database = {
  driver = "postgresql",
  server = {
    host = "127.0.0.1",
    port = 3307,
  },
}
Omitting seconds in datetime and time

TOML 1.1.0 renders the seconds component of time elements optional.
datetime-tz = 1979-05-27 07:32Z
datetime = 2001-09-21 10:17
time = 13:37
New string escapes

Strings now support 2 additional escape sequences:

\xHH for code points between 0 and 255

\e for the escape character (U+001B)

What's Changed

feat: toml 1.1 support by @cyyynthia in squirrelchat/smol-toml#49

Full Changelog: squirrelchat/smol-toml@v1.5.2...v1.6.0

Commits

399c545 chore: version bump
06521ca Merge pull request #49 from squirrelchat/toml-110
f3a68a7 fix: properly test \e escape
9743a86 fix: properly run toml-test v2
1ec5303 docs: toml 1.1.0 in the readme
8bc0e2b chore: upgrade dependencies, actions
24618db feat: allow omitting seconds in datetime and time values
41688da feat: support \e unicode escape in strings
2f64496 feat: support \xHH unicode escape in strings
aa66c9b feat: toml 1.1 allows newline and trailing comma in inline tables
See full diff in compare view

Updates zod from 4.1.13 to 4.3.4

Release notes

Sourced from zod's releases.

v4.3.4

Commits:

1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests

e01cd02b2f23d7e9078d3813830b146f8a2258b4 Support patternProperties for looserecord (#5592)

089e5fbb0f58ce96d2c4fb34cd91724c78df4af5 Improve looseRecord docs

decef9c418d9a598c3f1bada06891ba5d922c5cd Fix lint

9443aab00d44d5d5f4a7eada65fc0fc851781042 Drop iso time in fromJSONSchema

66bda7491a1b9eab83bdeec0c12f4efc7290bd48 Remove .refine() from ZodMiniType

b4ab94ca608cd5b581bfc12b20dd8d95b35b3009 4.3.4

v4.3.3

Commits:

f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3

v4.3.2

Commits:

bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection (#5587)

f71dc0182ab0f0f9a6be6295b07faca269e10179 Remove Juno (#5590)

0f41e5a12a43e6913c9dcb501b2b5136ea86500d 4.3.2

v4.3.1

Commits:

0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1

v4.3.0

This is Zod's biggest release since 4.0. It addresses several of Zod's longest-standing feature requests.

z.fromJSONSchema()

Convert JSON Schema to Zod (#5534, #5586)

You can now convert JSON Schema definitions directly into Zod schemas. This function supports JSON Schema "draft-2020-12", "draft-7", "draft-4", and OpenAPI 3.0.
import * as z from "zod";
const schema = z.fromJSONSchema({
type: "object",
properties: {
name: { type: "string", minLength: 1 },
age: { type: "integer", minimum: 0 },
},
required: ["name"],
});
schema.parse({ name: "Alice", age: 30 }); // ✅
</tr></table>

... (truncated)

Commits

b4ab94c 4.3.4
66bda74 Remove .refine() from ZodMiniType
9443aab Drop iso time in fromJSONSchema
decef9c Fix lint
089e5fb Improve looseRecord docs
e01cd02 Support patternProperties for looserecord (#5592)
1a8bea3 Add integration tests
f3b2151 v4.3.3
0f41e5a 4.3.2
f71dc01 Remove Juno (#5590)
Additional commits viewable in compare view

Updates @eslint/js from 9.39.1 to 9.39.2

Release notes

Sourced from @eslint/js's releases.

v9.39.2

Bug Fixes

5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

c43ce24 chore: package.json update for @eslint/js release (Jenkins)

4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

c43ce24 chore: package.json update for @eslint/js release
See full diff in compare view

Updates @types/node from 24.10.1 to 25.0.3

Commits

See full diff in compare view

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

c43ce24 chore: package.json update for @eslint/js release (Jenkins)

4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

9278324 9.39.2
542266a Build: changelog update for 9.39.2
7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394)
c43ce24 chore: package.json update for @eslint/js release
5705833 fix: warn when eslint-env configuration comments are found (#20381)
506f154 build: add .scss files entry to knip (#20391)
4c9858e ci: add v9.x-dev branch (#20382)
See full diff in compare view

Updates prettier from 3.7.3 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

Fix comment in union type gets duplicated by @fisker in prettier/prettier#18393

Fix unstable comment print in union type by @fisker in prettier/prettier#18395

Avoid quote around LWC interpolations by @kovsu in prettier/prettier#18383

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by `@fisker`)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits

7848357 Release 3.7.4
7686c59 Release @prettier/plugin-hermes & @prettier/plugin-oxc v0.1.3
fe49434 Remove dead code checking union/intersection types length (#18396)
ca02b37 Fix unstable comment print (#18395)
7efb988 Fix comment in union type get duplicated (#18393)
cfa92c1 Update dependency @angular/compiler to v21.0.2 (#18392)
1de2737 Update dependency yaml to v2.8.2 (#18391)
706aa4e Switch js parse postprocess to onEnter (#18382)
d3eb2b2 Reuse arrays in visitor keys (#18386)
c45fef1 Fix LWC attribute with --embedded-language-formatting off (#18383)
Additional commits viewable in compare view

Updates typescript-eslint from 8.48.0 to 8.51.0

Release notes

Sourced from typescript-eslint's releases.

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

eslint-plugin: expose rule name via RuleModule interface (#11719)

eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)

eslint-plugin: add namespace to plugin meta (#11885)

tsconfig-utils: more informative error on parsing failures (#11888)

🩹 Fixes

eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)

eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)

eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)

eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)

❤️ Thank You

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

mdm317

Ulrich Stark

Yannick Decat @mho22

Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

❤️ Thank You

Josh Goldberg ✨

Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

v8.50.0

8.50.0 (2025-12-15)

🚀 Features

eslint-plugin: [no-useless-default-assignment] add rule (#11720)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.51.0 (2025-12-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.0 (2025-12-15)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

e4c57f5 chore(release): publish 8.51.0
d520b88 chore(release): publish 8.50.1
c62e858 chore(release): publish 8.50.0
864595a chore(release): publish 8.49.0
32b7e89 chore(deps): update dependency @vitest/eslint-plugin to v1.5.1 (#11816)
8fe3445 chore(release): publish 8.48.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the nodejs group with 10 updates: | Package | From | To | | --- | --- | --- | | [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `4.1.0` | `5.0.1` | | [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.11.1` | `2.0.1` | | [@actions/exec](https://github.com/actions/toolkit/tree/HEAD/packages/exec) | `1.1.1` | `2.0.0` | | [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.5.2` | `1.6.0` | | [zod](https://github.com/colinhacks/zod) | `4.1.13` | `4.3.4` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.1` | `9.39.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `25.0.3` | | [eslint](https://github.com/eslint/eslint) | `9.39.1` | `9.39.2` | | [prettier](https://github.com/prettier/prettier) | `3.7.3` | `3.7.4` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.48.0` | `8.51.0` | Updates `@actions/cache` from 4.1.0 to 5.0.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache) Updates `@actions/core` from 1.11.1 to 2.0.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/@actions/artifact@2.0.1/packages/core) Updates `@actions/exec` from 1.1.1 to 2.0.0 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/exec/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/exec) Updates `smol-toml` from 1.5.2 to 1.6.0 - [Release notes](https://github.com/squirrelchat/smol-toml/releases) - [Commits](squirrelchat/smol-toml@v1.5.2...v1.6.0) Updates `zod` from 4.1.13 to 4.3.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.1.13...v4.3.4) Updates `@eslint/js` from 9.39.1 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js) Updates `@types/node` from 24.10.1 to 25.0.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.39.1 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.1...v9.39.2) Updates `prettier` from 3.7.3 to 3.7.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.7.3...3.7.4) Updates `typescript-eslint` from 8.48.0 to 8.51.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@actions/cache" dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nodejs - dependency-name: "@actions/core" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nodejs - dependency-name: "@actions/exec" dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nodejs - dependency-name: smol-toml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs - dependency-name: zod dependency-version: 4.3.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nodejs - dependency-name: "@eslint/js" dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs - dependency-name: "@types/node" dependency-version: 25.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs - dependency-name: eslint dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs - dependency-name: prettier dependency-version: 3.7.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs - dependency-name: typescript-eslint dependency-version: 8.51.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026

dependabot bot requested a review from pavelzw as a code owner January 1, 2026 04:03

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026

build

5f0cdf1

pavelzw merged commit 51b9803 into main Jan 10, 2026
172 checks passed

pavelzw deleted the dependabot/npm_and_yarn/nodejs-0166c6361e branch January 10, 2026 18:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the nodejs group with 10 updates #244

chore(deps): bump the nodejs group with 10 updates #244

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): bump the nodejs group with 10 updates #244

chore(deps): bump the nodejs group with 10 updates #244

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 1, 2026

5.0.1

5.0.0

2.0.1

2.0.0

2.0.0

v1.6.0

Highlights

Multiline inline tables

Omitting seconds in datetime and time

New string escapes

What's Changed

v4.3.4

Commits:

v4.3.3

Commits:

v4.3.2

Commits:

v4.3.1

Commits:

v4.3.0

z.fromJSONSchema()

v9.39.2

Bug Fixes

Build Related

Chores

v9.39.2

Bug Fixes

Build Related

Chores

3.7.4

What's Changed

3.7.4

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

❤️ Thank You

v8.50.0

8.50.0 (2025-12-15)

🚀 Features

8.51.0 (2025-12-29)

8.50.1 (2025-12-22)

8.50.0 (2025-12-15)

8.49.0 (2025-12-08)

8.48.1 (2025-12-02)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`z.fromJSONSchema()`

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)

TypeScript: Fix unstable comment print in union type comments (#18395 by `@fisker`)