chore(deps-dev): bump the development-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #31 · spiritledsoftware/language-server-mcp

dependabot · 2026-07-20T09:23:10Z

Bumps the development-dependencies group with 10 updates in the / directory:

Package	From	To
@changesets/cli	`2.31.0`	`2.31.1`
@types/node	`25.9.1`	`26.1.1`
@typescript/native-preview	`7.0.0-dev.20260526.1`	`7.0.0-dev.20260707.2`
oxfmt	`0.52.0`	`0.59.0`
oxlint	`1.67.0`	`1.74.0`
rolldown	`1.0.2`	`1.2.0`
tsx	`4.22.3`	`4.23.1`
typescript	`6.0.3`	`7.0.2`
vitest	`4.1.7`	`4.1.10`
vscode-languageserver-types	`3.17.5`	`3.18.0`

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@2.31.1

Patch Changes

#2159 15cf592 Thanks @ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

Commits

a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
e8650b9 Version Packages (#2161)
15cf592 Fixed handling of the npm 12 info output (#2159)
9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
8f6acd6 Update dependabot group to exclude major (#2067)
c70c675 Setup backport workflow and sync next setup (#2057)
9672019 Remove SECURITY.md to defer to .github (#2055)
18e1661 Use internal bot for versioning (#2039)
Additional commits viewable in compare view

Updates @types/node from 25.9.1 to 26.1.1

Commits

See full diff in compare view

Updates @typescript/native-preview from 7.0.0-dev.20260526.1 to 7.0.0-dev.20260707.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @typescript/native-preview since your current version.

Updates oxfmt from 0.52.0 to 0.59.0

Changelog

Sourced from oxfmt's changelog.

[0.59.0] - 2026-07-13

🐛 Bug Fixes

415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)

[0.55.0] - 2026-06-15

🚀 Features

9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

[0.54.0] - 2026-06-08

📚 Documentation

dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)

f88961a oxfmt: Annotate each config option with supported languages (#22953) (leaysgur)

Commits

2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
415fe1e fix(oxfmt): error on ignorePatterns that cannot match files outside the confi...
39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
5306f24 release(apps): oxlint v1.72.0 && oxfmt v0.57.0 (#23935)
c4be770 release(apps): oxlint v1.71.0 && oxfmt v0.56.0 (#23707)
aa79b5b release(apps): oxlint v1.70.0 && oxfmt v0.55.0 (#23442)
9a2788b feat(linter/unicorn): implement prefer-export-from rule (#22935)
44ae845 release(apps): oxlint v1.69.0 && oxfmt v0.54.0 (#23116)
dadafe3 docs(oxlint, oxfmt): mention migrate skills in npm READMEs (#22965)
f88961a docs(oxfmt): annotate each config option with supported languages (#22953)
Additional commits viewable in compare view

Updates oxlint from 1.67.0 to 1.74.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)

2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)

bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)

5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)

7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)

2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)

ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)

6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)

7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)

732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)

a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)

ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)

3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)

ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)

e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)

6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)

85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)

fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)

ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)

dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)

989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)

cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

25d577e language_server: Start tools in parallel (#15500) (Sysix)

3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)

3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)

9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)

3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)

444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)

2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)

a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)

3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)

2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)

57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.74.0] - 2026-07-13

🚀 Features

0433a83 linter/eslint/no-inner-declarations: Add namespaces option (#24044) (Boshen)

🐛 Bug Fixes

8337835 linter: Error on ignorePatterns that cannot match files aoutside the config directory (#24341) (leaysgur)

2ce5a33 linter: Resolve ignorePatterns relative to the config dir (#24339) (leaysgur)

⚡ Performance

7f80cac linter/vue/prop-name-casing: Precompile ignoreProps regex pattern (#24413) (connorshea)

6272051 linter/typescript/no-require-imports: Compile allow patterns once (#24417) (connorshea)

33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex once (#24420) (connorshea)

[1.73.0] - 2026-07-06

🚀 Features

a2c97f3 linter/unicorn: Implement explicit-timer-delay rule (#23612) (Mikhail Baev)

85735cb linter/unicorn: Implement no-confusing-array-with rule (#23638) (Shekhu☺️)

cb4fbb9 linter/eslint: Implement no-unreachable-loop rule (#23975) (Todor Andonov)

dc32112 linter/eslint/no-constant-binary-expression: Check relational comparisons (#24088) (camc314)

d963967 linter/unicorn/no-array-sort: Add allowAfterSpread option (#24043) (Boshen)

0a75682 linter: Add per-rule timings for type-aware linting (#22488) (camchenry)

743e222 linter/react: Add disallowedValues option for forbid-dom-props rule (#23970) (Mikhail Baev)

🐛 Bug Fixes

bdb51c7 linter/jest/prefer-ending-with-an-expect: Validate config patterns (#24122) (camc314)

45d607d linter/react/forbid-component-props: Make allow/disallow lists optional in schema (#24024) (Boshen)

[1.72.0] - 2026-06-29

🚀 Features

1c8f50c linter: Add schema for eslint/no-restricted-import (#23642) (Sysix)

🐛 Bug Fixes

742be36 refactor/node/handle-callback-err: Reject invalid regex config (#23740) (camc314)

[1.71.0] - 2026-06-22

🚀 Features

0dc2405 linter: Add schema for eslint/no-restricted-properties (#23619) (Sysix)

b638d0e linter: Add schema for node/callback-return (#23615) (Sysix)

... (truncated)

Commits

2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
7f80cac perf(linter/vue/prop-name-casing): precompile ignoreProps regex pattern (#2...
6272051 perf(linter/typescript/no-require-imports): compile allow patterns once (#24417)
33805b9 perf(linter/jsdoc/require-param): compile checkTypesPattern regex once (#24420)
0433a83 feat(linter/eslint/no-inner-declarations): add namespaces option (#24044)
8337835 fix(linter): error on ignorePatterns that cannot match files aoutside the c...
2ce5a33 fix(linter): resolve ignorePatterns relative to the config dir (#24339)
39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
a2c97f3 feat(linter/unicorn): implement explicit-timer-delay rule (#23612)
bdb51c7 fix(linter/jest/prefer-ending-with-an-expect): validate config patterns (#24122)
Additional commits viewable in compare view

Updates rolldown from 1.0.2 to 1.2.0

Release notes

Sourced from rolldown's releases.

v1.2.0

[1.2.0] - 2026-07-15

🚀 Features

dev: skip shipping factories for newly imported top-level modules (#10223) by @h-a-n-a

dev: per-client ship map for HMR patch sizing (#10208) by @h-a-n-a

dev: client-side HMR (#10164) by @h-a-n-a

dev: send a full-reload update to clients when a tsconfig changes (#10262) by @shulaoda

treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as side-effect free (#10267) by @sapphi-red

rewrite import.meta['url'] (#10251) by @sapphi-red

add FILE_NOT_FOUND error (#10220) by @sapphi-red

treat import.meta.ROLLUP_FILE_URL_* as side-effect free (#10217) by @sapphi-red

🐛 Bug Fixes

sourcemap: preserve unmapped boundaries during composition (#10254) by @hyfdev

[format] in *FileNames option for ESM format should be es instead of esm (#10214) by @sapphi-red

sourcemap: preserve coarse mappings during composition (#10249) by @hyfdev

rolldown_plugin_vite_import_glob: support tsconfig paths with import.meta.glob (#10167) by @sapphi-red

dev: clear tsconfig caches for bare full builds (#10276) by @shulaoda

dev: force a full rebuild when a tsconfig changes (#10261) by @shulaoda

treat rooted drive-less module ids as absolute in preserveModules naming (#10235) by @IWANABETHATGUY

watch: rebuild when tsconfig files change (#10258) by @shulaoda

watch: drop tsconfig-merged transform options on each rebuild (#10257) by @shulaoda

incorrect EMPTY_IMPORT_META warning for import.meta.ROLLUP_FILE_URL_* for CJS output (#10221) by @sapphi-red

deconflict: rename CJS locals shadowing wrapped-ESM namespace objects (#9970) by @IWANABETHATGUY

rolldown: drop the unused runtime module after entry-level external flattening (#10237) by @IWANABETHATGUY

rolldown: re-propagate has_dynamic_exports to transitive star importers (#10239) by @IWANABETHATGUY

tree-shaking: tree-shake destructured dynamic import namespace bindings (#10213) by @logaretm

s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix (#10211) by @satyamg1620

🚜 Refactor

dev: move full-reload to client side (#10207) by @h-a-n-a

readability follow-ups to the ReplaceWith migration (#10286) by @IWANABETHATGUY

replace take_in-then-write-back with ReplaceWith and by-value moves (#10285) by @Boshen

share the main resolver's cache with the transformer's tsconfig lookups (#10205) by @shulaoda

rolldown: extract the ns star-external __reExport emission rule into LinkingMetadata (#10238) by @IWANABETHATGUY

rolldown: unify link/generate diagnostics into a Diagnostics accumulator (#10234) by @IWANABETHATGUY

sourcemap_filenames: drop dead sourcemap-filename plumbing (#10189) by @IWANABETHATGUY

extract external import symbol merging into a method (#10224) by @IWANABETHATGUY

rolldown: skip CJS namespace merging under strict execution order (#10203) by @hyfdev

resolve the manual tsconfig per file instead of once at startup (#10200) by @shulaoda

rolldown: route interop ESM init emission through a shared init-target view (#10202) by @hyfdev

rolldown: collapse vestigial wrap-kind state and share chunk sort helper (#10201) by @hyfdev

📚 Documentation

show plugin kinds in JSDoc and each hook's description (#10218) by @sapphi-red

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.0] - 2026-07-15

🚀 Features

dev: skip shipping factories for newly imported top-level modules (#10223) by @h-a-n-a

dev: per-client ship map for HMR patch sizing (#10208) by @h-a-n-a

dev: client-side HMR (#10164) by @h-a-n-a

dev: send a full-reload update to clients when a tsconfig changes (#10262) by @shulaoda

treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as side-effect free (#10267) by @sapphi-red

rewrite import.meta['url'] (#10251) by @sapphi-red

add FILE_NOT_FOUND error (#10220) by @sapphi-red

treat import.meta.ROLLUP_FILE_URL_* as side-effect free (#10217) by @sapphi-red

🐛 Bug Fixes

sourcemap: preserve unmapped boundaries during composition (#10254) by @hyfdev

[format] in *FileNames option for ESM format should be es instead of esm (#10214) by @sapphi-red

sourcemap: preserve coarse mappings during composition (#10249) by @hyfdev

rolldown_plugin_vite_import_glob: support tsconfig paths with import.meta.glob (#10167) by @sapphi-red

dev: clear tsconfig caches for bare full builds (#10276) by @shulaoda

dev: force a full rebuild when a tsconfig changes (#10261) by @shulaoda

treat rooted drive-less module ids as absolute in preserveModules naming (#10235) by @IWANABETHATGUY

watch: rebuild when tsconfig files change (#10258) by @shulaoda

watch: drop tsconfig-merged transform options on each rebuild (#10257) by @shulaoda

incorrect EMPTY_IMPORT_META warning for import.meta.ROLLUP_FILE_URL_* for CJS output (#10221) by @sapphi-red

deconflict: rename CJS locals shadowing wrapped-ESM namespace objects (#9970) by @IWANABETHATGUY

rolldown: drop the unused runtime module after entry-level external flattening (#10237) by @IWANABETHATGUY

rolldown: re-propagate has_dynamic_exports to transitive star importers (#10239) by @IWANABETHATGUY

tree-shaking: tree-shake destructured dynamic import namespace bindings (#10213) by @logaretm

s390x: use json-escape-simd 3.1.1 for big-endian JSON escaping fix (#10211) by @satyamg1620

🚜 Refactor

dev: move full-reload to client side (#10207) by @h-a-n-a

readability follow-ups to the ReplaceWith migration (#10286) by @IWANABETHATGUY

replace take_in-then-write-back with ReplaceWith and by-value moves (#10285) by @Boshen

share the main resolver's cache with the transformer's tsconfig lookups (#10205) by @shulaoda

rolldown: extract the ns star-external __reExport emission rule into LinkingMetadata (#10238) by @IWANABETHATGUY

rolldown: unify link/generate diagnostics into a Diagnostics accumulator (#10234) by @IWANABETHATGUY

sourcemap_filenames: drop dead sourcemap-filename plumbing (#10189) by @IWANABETHATGUY

extract external import symbol merging into a method (#10224) by @IWANABETHATGUY

rolldown: skip CJS namespace merging under strict execution order (#10203) by @hyfdev

resolve the manual tsconfig per file instead of once at startup (#10200) by @shulaoda

rolldown: route interop ESM init emission through a shared init-target view (#10202) by @hyfdev

rolldown: collapse vestigial wrap-kind state and share chunk sort helper (#10201) by @hyfdev

📚 Documentation

show plugin kinds in JSDoc and each hook's description (#10218) by @sapphi-red

add an explanation about removing imports from external modules without any messages (#10215) by @sapphi-red

... (truncated)

Commits

03e1e34 release: v1.2.0 (#10292)
f49ebe4 fix(sourcemap): preserve unmapped boundaries during composition (#10254)
1d3fb15 feat(dev): skip shipping factories for newly imported top-level modules (#10223)
3bd65ff refactor(dev): move full-reload to client side (#10207)
ab584a3 fix(sourcemap): preserve coarse mappings during composition (#10249)
84afd72 feat(dev): client-side HMR (#10164)
152ff69 fix(rolldown_plugin_vite_import_glob): support tsconfig paths with `import.me...
bb96d64 fix: treat rooted drive-less module ids as absolute in preserveModules naming...
fd6a0d0 fix(watch): rebuild when tsconfig files change (#10258)
fd15520 feat: treat import.meta['url'] and import.meta['ROLLUP_FILE_URL_*'] as si...
Additional commits viewable in compare view

Updates tsx from 4.22.3 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

support tsImport after global preload (8d4ffc2)

watch: avoid clearing piped output (95d0672)

watch: treat script and dependency paths literally (79fddde)

Performance Improvements

index transform cache lazily (e818ad6)

load esbuild lazily in CLI (d067938)

map Node TypeScript formats directly (cdcc623)

use sync module hooks on Node v22.22.3+ (f8992f1)

This release is also available on:

npm package (@latest dist-tag)

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #809 hi#signal privatenumber/tsx#145 #809

This release is also available on:

npm package (@latest dist-tag)

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

isolate hook state per async module.register() registration (a305f36)

This release is also available on:

npm package (@latest dist-tag)

... (truncated)

Commits

79fddde fix(watch): treat script and dependency paths literally
e818ad6 perf: index transform cache lazily
cdcc623 perf: map Node TypeScript formats directly
d067938 perf: load esbuild lazily in CLI
95d0672 fix(watch): avoid clearing piped output
6fd4607 docs: add per-page metadata
f4176d8 docs: generate sitemap
8d4ffc2 fix: support tsImport after global preload
f0e89b2 docs: document Node's public type-stripping API vs internal loader path
f8992f1 perf: use sync module hooks on Node v22.22.3+
Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.7 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)

browser:

Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)

Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)

mocker:

Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)

pool:

Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
a7a61e7 chore: release v4.1.9 (#10598)
934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
See full diff in compare view

Updates vscode-languageserver-types from 3.17.5 to 3.18.0

Release notes

Sourced from vscode-languageserver-types's releases.

release/protocol/3.18.0

No release notes provided.

release/types/3.18.0

Changes:

Feature Requests:

#1691: Use NoInfer for better typing

#1692: setImmediate Implementation in browser RAL for json-rpc is not ideal.

#1698: RenameParams does not reference TextDocumentPositionParams interface in the JSON metamodel

Bugs:

#752: Edits are applied twice

#1717: Client requests textDocument/diagnostics before textDocument/didOpen

#1693: Output channel leak when stopping LanguageClient

#1581: Client error 'Failed to determine file type' after undoing rename with Cmd+Z

#1548: Extra true in the output log when a language server disconnects

Others:

#1785: Allow returning null in SemanticTokensFeatureShape.on handler

#1784: SemanticTokensFeatureShape.on handler does not allow returning null

#1780: Add getMessageString function to Diagnostic namespace

#1779: Add 3.17 version check method for Diagnostic

#1778: Merge next release into main

#1777: Update lock files for dependencies

#1775: Update dependencies and improve compatibility

#1774: Bump qs from 6.15.0 to 6.15.2

#1773: Implement TextDocumentSnapshot for delay open notifications

#1772: Prevent pulling diagnostics on untitled documents

#1770: Update documentation and fix lint errors

#1767: Inline value documentation improvements

#1769: Fix glob pattern documentation

#1768: Make document color requests consistent with the specification

#1766: Add optional MarkupContent support to diagnostics

#1751: forgetDocument is crashing the extension host

#1765: Fixes #1751: Prevent crash in forgetDocument when disposed

#1752: fix: random pipe path length extends limit on macos

#1764: Fixes double application of edits during renaming

#1762: Bump brace-expansion from 5.0.3 to 5.0.6 in /client

... (truncated)

Commits

2cc5bf0 Prepare 3.18 release
f5e23e2 Add getMessageString function to Diagnostic namespace (#1780)
3e8ab80 Add 3.17 version check method for Diagnostic (#1779)
b21577c Merge next release into main (#1778)
c08bcae Update dependencies and improve compatibility (#1775)
f168f85 Update documentation and fix lint errors (Description has been truncated

…ectory with 10 updates Bumps the development-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@changesets/cli](https://github.com/changesets/changesets) | `2.31.0` | `2.31.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.1.1` | | [@typescript/native-preview](https://github.com/microsoft/typescript-go) | `7.0.0-dev.20260526.1` | `7.0.0-dev.20260707.2` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.52.0` | `0.59.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.67.0` | `1.74.0` | | [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.2` | `1.2.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.22.3` | `4.23.1` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.7` | `4.1.10` | | [vscode-languageserver-types](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/types) | `3.17.5` | `3.18.0` | Updates `@changesets/cli` from 2.31.0 to 2.31.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.31.0...@changesets/cli@2.31.1) Updates `@types/node` from 25.9.1 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript/native-preview` from 7.0.0-dev.20260526.1 to 7.0.0-dev.20260707.2 - [Release notes](https://github.com/microsoft/typescript-go/releases) - [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md) - [Commits](https://github.com/microsoft/typescript-go/commits) Updates `oxfmt` from 0.52.0 to 0.59.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.59.0/npm/oxfmt) Updates `oxlint` from 1.67.0 to 1.74.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.74.0/npm/oxlint) Updates `rolldown` from 1.0.2 to 1.2.0 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.0/packages/rolldown) Updates `tsx` from 4.22.3 to 4.23.1 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.22.3...v4.23.1) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vitest` from 4.1.7 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) Updates `vscode-languageserver-types` from 3.17.5 to 3.18.0 - [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases) - [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/types/3.18.0/types) --- updated-dependencies: - dependency-name: "@changesets/cli" dependency-version: 2.31.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: "@typescript/native-preview" dependency-version: 7.0.0-dev.20260707.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: oxfmt dependency-version: 0.59.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint dependency-version: 1.74.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: rolldown dependency-version: 1.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: tsx dependency-version: 4.23.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vscode-languageserver-types dependency-version: 3.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-20T09:23:39Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	License
vscode-languageserver-types@3.18.0
rolldown@1.2.0
vitest@4.1.10
@types/node@26.1.1
tsx@4.23.1
@typescript/native-preview@7.0.0-dev.20260707.2
oxfmt@0.59.0
typescript@6.0.3 ⏵ 7.0.2	^-6	^-1	⁺¹⁰
oxlint@1.74.0
@changesets/cli@2.31.1

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the development-dependencies group across 1 directory with 10 updates - #31

chore(deps-dev): bump the development-dependencies group across 1 directory with 10 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-e71ce00598

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​changesets/cli@​2.31.1

Patch Changes

[0.59.0] - 2026-07-13

🐛 Bug Fixes

[0.55.0] - 2026-06-15

🚀 Features

[0.54.0] - 2026-06-08

📚 Documentation

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

Oxfmt v0.12.0

[1.74.0] - 2026-07-13

🚀 Features

🐛 Bug Fixes

⚡ Performance

[1.73.0] - 2026-07-06

🚀 Features

🐛 Bug Fixes

[1.72.0] - 2026-06-29

🚀 Features

🐛 Bug Fixes

[1.71.0] - 2026-06-22

🚀 Features

v1.2.0

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

[1.2.0] - 2026-07-15

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

Performance Improvements

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

Features

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

v4.1.10

🐞 Bug Fixes

View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

🐞 Bug Fixes

View changes on GitHub

release/protocol/3.18.0

release/types/3.18.0

Changes:

Feature Requests:

Bugs:

Others:

Uh oh!

socket-security Bot commented Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited

Loading

`@changesets/cli@2`.31.1