build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #7684 · ether/etherpad

dependabot · 2026-05-06T15:37:11Z

Bumps the dev-dependencies group with 7 updates in the / directory:

Package	From	To
sinon	`21.1.2`	`22.0.0`
@typescript-eslint/eslint-plugin	`8.59.1`	`8.59.2`
@typescript-eslint/parser	`8.59.1`	`8.59.2`
i18next	`26.0.8`	`26.0.9`
react-router-dom	`7.14.2`	`7.15.0`
zustand	`5.0.12`	`5.0.13`
oxc-minify	`0.128.0`	`0.129.0`

Updates sinon from 21.1.2 to 22.0.0

Changelog

Sourced from sinon's changelog.

22.0.0

ed911df5 Update Ruby gems (Carl-Erik Kopseng)

75a1e5b8 Update to Node 26 (Carl-Erik Kopseng)

197d6608 Update documentation on faking timers to reflect the current state of fake-timers (Carl-Erik Kopseng)

c5ddf80b Update fake-timers@15.4: includes new Temporal API (Carl-Erik Kopseng)

f4ab02f6 Update updatable packages (Carl-Erik Kopseng)

0536afc8 Quality: Global mutable call id can grow unbounded across long-lived processes (#2691) (tuanaiseo)

refactor: global mutable call id can grow unbounded across l

callId is module-scoped and incremented on every invocation. In long-running test runners or embedded usage, this can grow indefinitely and eventually lose integer precision semantics for strict ordering comparisons.

Affected files: proxy-invoke.js

Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com

Wrap around for all values that are too high

Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

f4f7d93b Perform additional cleanup when calling callThrough() (#2670) (Cyrille)

6199e9e4 improve GitHubworkflows by introducing zizmor for monitoring (#2686) (Till!)

fix(workflows): fetch-depth is for actions/checkout

chore(workflows): update

pin all actions to precise commits

avoid credential leakage from actions/checkout

group action updates going forward

add zimor config to ignore "secrets outside env"

add job to keep validating workflows

f7476b59 Use path.normalize() for path normalization (Carl-Erik Kopseng)

2c975393 fix: make build and node test scripts cross-platform (laplace young)

a7692917 fix: isolate walk state from Object prototype (laplace young)

66df977a Fix sinon.restore() cascade-restoring sub-sandboxes (#2704) (Charlie Leitheiser)

The ESM port of createApi (#2683, shipped in 21.1.0) replaced createSandbox: createSandbox with a wrapper that pushes every newly-created sandbox into the root sandbox's fake collection:

... (truncated)

Commits

52555af 22.0.0
ed911df Update Ruby gems
75a1e5b Update to Node 26
197d660 Update documentation on faking timers to reflect the current state of fake-ti...
c5ddf80 Update fake-timers@15.4: includes new Temporal API
f4ab02f Update updatable packages
0536afc Quality: Global mutable call id can grow unbounded across long-lived processe...
f4f7d93 Perform additional cleanup when calling callThrough() (#2670)
6199e9e improve GitHubworkflows by introducing zizmor for monitoring (#2686)
1519009 Merge #2703: isolate walk state from Object prototype
Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.59.1 to 8.59.2

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.59.2

8.59.2 (2026-05-04)

🩹 Fixes

eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#12150)

eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#12292)

rule-tester: add TypeScript as a peer dependency (#12288)

❤️ Thank You

Dariusz Czajkowski

Dima Barabash

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.59.2 (2026-05-04)

🩹 Fixes

eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#12292)

eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#12150)

❤️ Thank You

Dima Barabash

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

2ec35f1 chore(release): publish 8.59.2
ec3ef25 test: make no-useless-empty-export tests fully static (#12260)
60d0a51 chore(eslint-plugin): switch auto-generated test cases to hand-written in no-...
5c53da2 fix(eslint-plugin): [no-deprecated] object destructuring values should be tre...
80c28a1 fix(eslint-plugin): [no-unsafe-type-assertion] handle crash on recursive temp...
b7b2670 test: make no-this-alias tests fully static (#12258)
See full diff in compare view

Updates @typescript-eslint/parser from 8.59.1 to 8.59.2

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.59.2

8.59.2 (2026-05-04)

🩹 Fixes

eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#12150)

eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#12292)

rule-tester: add TypeScript as a peer dependency (#12288)

❤️ Thank You

Dariusz Czajkowski

Dima Barabash

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.59.2 (2026-05-04)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

2ec35f1 chore(release): publish 8.59.2
See full diff in compare view

Updates i18next from 26.0.8 to 26.0.9

Release notes

Sourced from i18next's releases.

v26.0.9

fix(types): unformatted interpolation values are now typed as string | number (was string). i18next stringifies values at runtime, so requiring callers to wrap numbers in String(...) for plain {{var}} placeholders was unnecessary friction — and could mask the real problem when a non-string value was passed alongside multiple interpolation slots (the t() overload resolution would fall through to the 3-arg form and report a confusing "not assignable to string" error against the options object). Typed format specifiers like {{x, number}}, {{x, currency}}, {{x, datetime}}, etc. keep their precise types; this only relaxes the no-format default. The count variable remains number-only

Changelog

Sourced from i18next's changelog.

26.0.9

fix(types): unformatted interpolation values are now typed as string | number (was string). i18next stringifies values at runtime, so requiring callers to wrap numbers in String(...) for plain {{var}} placeholders was unnecessary friction — and could mask the real problem when a non-string value was passed alongside multiple interpolation slots (the t() overload resolution would fall through to the 3-arg form and report a confusing "not assignable to string" error against the options object). Typed format specifiers like {{x, number}}, {{x, currency}}, {{x, datetime}}, etc. keep their precise types; this only relaxes the no-format default. The count variable remains number-only

Commits

caf33f6 26.0.9
eed0146 fix(types): relax unformatted interpolation values to string | number
170fb0a Modernize locize.com URLs and refresh UTM tags
See full diff in compare view

Updates react-router-dom from 7.14.2 to 7.15.0

Changelog

Sourced from react-router-dom's changelog.

v7.15.0

Patch Changes

Updated dependencies:

react-router@7.15.0

Commits

97c8de7 Release v7.15.0 (#15018)
See full diff in compare view

Updates zustand from 5.0.12 to 5.0.13

Release notes

Sourced from zustand's releases.

v5.0.13

This release includes an improvement in the devtools middleware.

What's Changed

refactor(devtools): remove duplicate module augmentation by @mahmoodhamdi in pmndrs/zustand#3443

fix(devtools): support Firefox/Safari stack format in findCallerName by @SBolsec in pmndrs/zustand#3469

New Contributors

@mahmoodhamdi made their first contribution in pmndrs/zustand#3443

@FelixEckl-vireq made their first contribution in pmndrs/zustand#3466

@KimHyeongRae0 made their first contribution in pmndrs/zustand#3471

@lstak made their first contribution in pmndrs/zustand#3483

@AlexRixten made their first contribution in pmndrs/zustand#3474

@SBolsec made their first contribution in pmndrs/zustand#3469

Full Changelog: pmndrs/zustand@v5.0.12...v5.0.13

Commits

6bc451e 5.0.13
8ec2169 chore(deps): update dev dependencies (#3486)
4e9bcf0 fix(devtools): support Firefox/Safari stack format in findCallerName (#3469)
4b96f4e fix(docs): correct react-dom test utils import path (#3474)
c7516c1 fix(tests): change parameters for 'expect' in test (#3483)
1b04af1 docs(persist): fix signature to require persistOptions (#3477)
95d3f33 test(middleware/immer): add runtime tests for immer middleware (#3471)
3201328 Update TypeScript guide links in README.md (#3466)
00f96a3 chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#3447)
6330044 test: expand React subscribe test coverage (#3442)
Additional commits viewable in compare view

Updates oxc-minify from 0.128.0 to 0.129.0

Release notes

Sourced from oxc-minify's releases.

oxc crates_v0.129.0

💥 BREAKING CHANGES

0ffbe0d allocator: [BREAKING] Remove Allocator::end_ptr method (#21871) (overlookmotel)

🚀 Features

9593ec8 transformer/jsx: Add jsxDEV source metadata for fragments (#21932) (Ido Rosenthal)

🐛 Bug Fixes

81e834c parser: Prevent multiple Parser instances in binary (#22120) (overlookmotel)

429deac napi/parser: Export visitorKeys from wasm entrypoint (#21996) (NullVoxPopuli)

e852911 codegen: Preserve legal comments orphaned by upstream passes (#21575) (Dunqing)

e3399ec transformer/class-properties: Preserve RHS in logical-assignment to static private field (#21950) (Dunqing)

c59c199 transformer/typescript: Emit class fields for parameter properties (#21831) (Dunqing)

aaabde4 parser: Attach legal comments to following token (#21670) (Dunqing)

⚡ Performance

0bf0cb9 allocator: Per-platform Arena::new_fixed_size implementations (#22088) (overlookmotel)

📚 Documentation

62ec410 allocator: Correct doc comment for Allocator::from_raw_parts (#22093) (overlookmotel)

3e152c6 allocator: Correct typos in comments (#22092) (overlookmotel)

e220855 allocator: Correct doc comment for Allocator::set_cursor_ptr (#21866) (overlookmotel)

Changelog

Sourced from oxc-minify's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

ec00055 release(crates): oxc v0.129.0 (#22108)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 7 updates Bumps the dev-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sinon](https://github.com/sinonjs/sinon) | `21.1.2` | `22.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.59.1` | `8.59.2` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.59.1` | `8.59.2` | | [i18next](https://github.com/i18next/i18next) | `26.0.8` | `26.0.9` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.14.2` | `7.15.0` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.0.13` | | [oxc-minify](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.128.0` | `0.129.0` | Updates `sinon` from 21.1.2 to 22.0.0 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v21.1.2...v22.0.0) Updates `@typescript-eslint/eslint-plugin` from 8.59.1 to 8.59.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.59.1 to 8.59.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/parser) Updates `i18next` from 26.0.8 to 26.0.9 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v26.0.8...v26.0.9) Updates `react-router-dom` from 7.14.2 to 7.15.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.15.0/packages/react-router-dom) Updates `zustand` from 5.0.12 to 5.0.13 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.12...v5.0.13) Updates `oxc-minify` from 0.128.0 to 0.129.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/minify/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.129.0/napi/minify) --- updated-dependencies: - dependency-name: sinon dependency-version: 22.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.59.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.59.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: i18next dependency-version: 26.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: react-router-dom dependency-version: 7.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: zustand dependency-version: 5.0.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: oxc-minify dependency-version: 0.129.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 6, 2026

SamTV12345 merged commit 629c754 into develop May 6, 2026
44 checks passed

SamTV12345 deleted the dependabot/npm_and_yarn/dev-dependencies-18e8728bb0 branch May 6, 2026 18:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates#7684

build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates#7684
SamTV12345 merged 1 commit intodevelopfrom
dependabot/npm_and_yarn/dev-dependencies-18e8728bb0

dependabot Bot commented on behalf of github May 6, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 6, 2026

22.0.0

v8.59.2

8.59.2 (2026-05-04)

🩹 Fixes

❤️ Thank You

8.59.2 (2026-05-04)

🩹 Fixes

❤️ Thank You

v8.59.2

8.59.2 (2026-05-04)

🩹 Fixes

❤️ Thank You

8.59.2 (2026-05-04)

v26.0.9

26.0.9

v7.15.0

Patch Changes

v5.0.13

What's Changed

New Contributors

oxc crates_v0.129.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

Changelog

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant