build(deps-dev): bump the dependencies group across 1 directory with 7 updates #432

dependabot · 2025-12-01T23:19:41Z

Bumps the dependencies group with 6 updates in the / directory:

Package	From	To
@types/node	`24.10.0`	`24.10.1`
@typescript-eslint/eslint-plugin	`8.46.4`	`8.48.0`
@vscode/test-web	`0.0.75`	`0.0.76`
@vscode/vsce	`3.7.0`	`3.7.1`
prettier	`3.6.2`	`3.7.3`
webpack	`5.102.1`	`5.103.0`

Updates @types/node from 24.10.0 to 24.10.1

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.46.4 to 8.48.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)

rule-tester: remove workaround for jest circular structure error (#11772)

typescript-estree: gate all errors behind allowInvalidAST (#11693)

typescript-estree: replace fast-glob with tinyglobby (#11740)

🩹 Fixes

eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#10477)

scope-manager: change unhelpful aaa error message and change analyze to expects Program (#11747)

typescript-estree: infers singleRun as true for project service (#11327)

typescript-estree: disallow binding patterns in parameter properties (#11760)

❤️ Thank You

Ben McCann @benmccann

Dima Barabash @dbarabashh

fisker Cheung @fisker

James Henry @JamesHenry

JamesHenry @JamesHenry

Josh Goldberg

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

mdm317 @gen-ip-1

Younsang Na @nayounsang

You can read about our versioning strategy and releases on our website.

v8.47.0

8.47.0 (2025-11-17)

🚀 Features

eslint-plugin: [no-unused-private-class-members] new extension rule (#10913)

❤️ Thank You

Brad Zacher @bradzacher

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.48.0 (2025-11-24)

🚀 Features

eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)

🩹 Fixes

typescript-estree: disallow binding patterns in parameter properties (#11760)

eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#10477)

❤️ Thank You

Dima Barabash @dbarabashh

JamesHenry @JamesHenry

Josh Goldberg

mdm317 @gen-ip-1

You can read about our versioning strategy and releases on our website.

8.47.0 (2025-11-17)

🚀 Features

eslint-plugin: [no-unused-private-class-members] new extension rule (#10913)

❤️ Thank You

Brad Zacher @bradzacher

You can read about our versioning strategy and releases on our website.

Commits

6fb1551 chore(release): publish 8.48.0
d26e9de chore(eslint-plugin): correct TODO comment on the wrong line (#11773)
5f04910 fix(typescript-estree): disallow binding patterns in parameter properties (#1...
a4dc42a chore: migrate to nx 22 (#11780)
2ffb168 feat(eslint-plugin): [no-redundant-type-constituents] use assignability check...
5ea21f1 fix(eslint-plugin): [consistent-generic-constructors] ignore when constructor...
28cf803 chore(release): publish 8.47.0
6c6db24 feat(eslint-plugin): [no-unused-private-class-members] new extension rule (#1...
See full diff in compare view

Updates @typescript-eslint/parser from 8.46.4 to 8.48.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)

rule-tester: remove workaround for jest circular structure error (#11772)

typescript-estree: gate all errors behind allowInvalidAST (#11693)

typescript-estree: replace fast-glob with tinyglobby (#11740)

🩹 Fixes

eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#10477)

scope-manager: change unhelpful aaa error message and change analyze to expects Program (#11747)

typescript-estree: infers singleRun as true for project service (#11327)

typescript-estree: disallow binding patterns in parameter properties (#11760)

❤️ Thank You

Ben McCann @benmccann

Dima Barabash @dbarabashh

fisker Cheung @fisker

James Henry @JamesHenry

JamesHenry @JamesHenry

Josh Goldberg

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

mdm317 @gen-ip-1

Younsang Na @nayounsang

You can read about our versioning strategy and releases on our website.

v8.47.0

8.47.0 (2025-11-17)

🚀 Features

eslint-plugin: [no-unused-private-class-members] new extension rule (#10913)

❤️ Thank You

Brad Zacher @bradzacher

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.48.0 (2025-11-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.47.0 (2025-11-17)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

6fb1551 chore(release): publish 8.48.0
a4dc42a chore: migrate to nx 22 (#11780)
28cf803 chore(release): publish 8.47.0
See full diff in compare view

Updates @vscode/test-web from 0.0.75 to 0.0.76

Release notes

Sourced from @vscode/test-web's releases.

v0.0.76

Changes:

#182: Prepare for 0.0.76 release

#181: Update to support .ts builtin extensions script

#178: Bump js-yaml from 4.1.0 to 4.1.1 in /sample

This list of changes was auto generated.

Commits

00a5320 Merge pull request #182 from microsoft/dev/mjbvz/76
3b0b33f Prepare for 0.0.76 release
80f6136 Merge pull request #181 from microsoft/dev/mjbvz/enchanting-prawn
489f121 Update to support .ts builtin extensions script
5dadb4d Bump js-yaml from 4.1.0 to 4.1.1 in /sample (#178)
See full diff in compare view

Updates @vscode/vsce from 3.7.0 to 3.7.1

Release notes

Sourced from @vscode/vsce's releases.

v3.7.1

Changes:

#1223: Bump js-yaml

#1222: Bump glob

This list of changes was auto generated.

v3.7.1-1

Changes:

#1223: Bump js-yaml

This list of changes was auto generated.

v3.7.1-0

Changes:

#1222: Bump glob

This list of changes was auto generated.

Commits

44181d1 Merge pull request #1223 from microsoft/dependabot/npm_and_yarn/multi-75e6bc5210
a831389 Bump js-yaml
5d9e78f Merge pull request #1222 from microsoft/dependabot/npm_and_yarn/multi-12cb0b0c21
c9023e9 Bump glob
See full diff in compare view

Updates prettier from 3.6.2 to 3.7.3

Release notes

Sourced from prettier's releases.

3.7.3

What's Changed

Fix prettier.getFileInfo() change that breaks VSCode extension by @fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

Fix string print when switching quotes by @fisker in prettier/prettier#18351

Preserve quote for embedded HTML attribute values by @kovsu in prettier/prettier#18352

Fix comment in empty type literal by @fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

Fix performance regression in doc printer (#18342 by @fisker)

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.3

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#18375 by @fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

3.7.2

diff

JavaScript: Fix string print when switching quotes (#18351 by @fisker)
// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")
// Prettier 3.7.1
console.log('A descriptor\'s .kind must be "method" or "field".');
// Prettier 3.7.2
console.log('A descriptor\'s .kind must be "method" or "field".');
JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @kovsu)
// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;
// Prettier 3.7.1
const html = /* HTML */ &lt;div class=${styles.banner}&gt;&lt;/div&gt;;
// Prettier 3.7.2
const html = /* HTML */ &lt;div class=&quot;${styles.banner}&quot;&gt;&lt;/div&gt;;
TypeScript: Fix comment in empty type literal (#18364 by @fisker)
// Input
export type XXX = {
  // tbd
};
// Prettier 3.7.1
</tr></table>

... (truncated)

Commits

fdfa670 Release 3.7.3
2dce3ec Fix typo
27d6c64 Revert previous change to getFileInfo (#18375)
f4a7afa Add types for config related functions (#18376)
9266e3e Add resolved test cases (#18358)
3bfc014 Bump Prettier dependency to 3.7.2
081b846 Clean changelog_unreleased
03384c9 Release 3.7.2
514e51a Release @prettier/plugin-hermes & @prettier/plugin-oxc v0.1.2
29a11ae Fix comment in empty type literal (#18364)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.

Updates webpack from 5.102.1 to 5.103.0

Release notes

Sourced from webpack's releases.

v5.103.0

Features

Added DotenvPlugin and top level dotenv option to enable this plugin

Added WebpackManifestPlugin

Added support the ignoreList option in devtool plugins

Allow to use custom javascript parse function

Added import.meta.env support for environment variables

Added support for import.meta.dirname and import.meta.filename

Added support import.defer() for statistical path

Handle import.meta.main

Added suport to setup named exports for JSON modules and disable usage named export for import file from "./file.json" with { type: "json" }

Added support __dirname/__filename/import.meta.dirname/import.meta.filename for universal target

[CSS] Added the exportType option with link (by default), "text" and css-style-sheet values

[CSS] Added support for composes properties

Fixes

The dependOn chunk must be loaded before the common chunk

Return to namespace import when the external request includes a specific export

No runtime extra runtime code for module libraries

Delay HMR accept dependencies to preserve import attributes

Properly handle external presets for universal target

Fixed incorrect identifier of import binding for module externals

Fixed when defer import and dynamic default export mixed

Reduce generated output when globalThis supported

Fixed loading async modules in defer import

Reexport module for default import when no used exports for systemjs library

Rename HarmonyExportDependencyParserPlugin exported id to CompatibilityPlugin tagged id

Handle __dirname and __filename for ES modules

Rename single nested __webpack_export__ and __webpack_require__ in already bundled code

[Types] webpack function type

[Types] NormalModule type

[Types] Multi compiler configuration type

[Types] Fixed regression in custom hashDigest type

[CSS] No extra runtime for initial chunk

[CSS] Fixed a lot of CSS modules bugs

Commits

e021948 chore(release): 5.103.0
1dc6967 chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#20130)
077417f fix(css): many css modules bugs (#20129)
7722518 chore: fix script (#20128)
688a7f9 test: no runtime requirements for module library (#20127)
04fe5a1 refactor: pkg.pr.new publish (#20093)
27c05c7 fix: return to namespace import when the external request includes a specific...
067cc60 refactor: no runtime requirements for module library (#20096)
d4208ba fix: delay HMR accept dependencies to preserve import attributes (#20124)
102e1a4 feat(css): added css-style-sheet to exportType for CSSStyleSheet return (#20104)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…7 updates Bumps the dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `24.10.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.4` | `8.48.0` | | [@vscode/test-web](https://github.com/microsoft/vscode-test-web) | `0.0.75` | `0.0.76` | | [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.7.0` | `3.7.1` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.3` | | [webpack](https://github.com/webpack/webpack) | `5.102.1` | `5.103.0` | Updates `@types/node` from 24.10.0 to 24.10.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.46.4 to 8.48.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.46.4 to 8.48.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/parser) Updates `@vscode/test-web` from 0.0.75 to 0.0.76 - [Release notes](https://github.com/microsoft/vscode-test-web/releases) - [Changelog](https://github.com/microsoft/vscode-test-web/blob/main/CHANGELOG.md) - [Commits](microsoft/vscode-test-web@v0.0.75...v0.0.76) Updates `@vscode/vsce` from 3.7.0 to 3.7.1 - [Release notes](https://github.com/Microsoft/vsce/releases) - [Commits](microsoft/vscode-vsce@v3.7.0...v3.7.1) Updates `prettier` from 3.6.2 to 3.7.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.7.3) Updates `webpack` from 5.102.1 to 5.103.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.102.1...v5.103.0) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.10.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@vscode/test-web" dependency-version: 0.0.76 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@vscode/vsce" dependency-version: 3.7.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: prettier dependency-version: 3.7.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: webpack dependency-version: 5.103.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

socket-security · 2025-12-01T23:20:10Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@typescript-eslint/parser@8.46.4 ⏵ 8.48.0
@typescript-eslint/eslint-plugin@8.46.4 ⏵ 8.48.0	⁺¹	⁺¹
@types/node@24.10.0 ⏵ 24.10.1		⁺¹
prettier@3.6.2 ⏵ 3.7.3	^-8	^-3
webpack@5.102.1 ⏵ 5.103.0
@vscode/vsce@3.7.0 ⏵ 3.7.1
@vscode/test-web@0.0.75 ⏵ 0.0.76		⁺¹	⁺²

View full report

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 1, 2025

dependabot bot requested a review from a team as a code owner December 1, 2025 23:19

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the dependencies group across 1 directory with 7 updates #432

build(deps-dev): bump the dependencies group across 1 directory with 7 updates #432

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Dec 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps-dev): bump the dependencies group across 1 directory with 7 updates #432

Are you sure you want to change the base?

build(deps-dev): bump the dependencies group across 1 directory with 7 updates #432

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.47.0

8.47.0 (2025-11-17)

🚀 Features

❤️ Thank You

8.48.0 (2025-11-24)

🚀 Features

🩹 Fixes

❤️ Thank You

8.47.0 (2025-11-17)

🚀 Features

❤️ Thank You

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.47.0

8.47.0 (2025-11-17)

🚀 Features

❤️ Thank You

8.48.0 (2025-11-24)

8.47.0 (2025-11-17)

v0.0.76

Changes:

v3.7.1

Changes:

v3.7.1-1

Changes:

v3.7.1-0

Changes:

3.7.3

What's Changed

3.7.2

What's Changed

3.7.1

3.7.0

3.7.3

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#18375 by @​fisker)

3.7.2

JavaScript: Fix string print when switching quotes (#18351 by @​fisker)

JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @​kovsu)

TypeScript: Fix comment in empty type literal (#18364 by @​fisker)

v5.103.0

Features

Fixes

Uh oh!

socket-security bot commented Dec 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

API: Fix `prettier.getFileInfo()` change that breaks VSCode extension (#18375 by `@fisker`)

JavaScript: Fix string print when switching quotes (#18351 by `@fisker`)

JavaScript: Preserve quote for embedded HTML attribute values (#18352 by `@kovsu`)

TypeScript: Fix comment in empty type literal (#18364 by `@fisker`)