Skip to content

chore(dev-deps): bump the dev-major group across 1 directory with 12 updates - #455

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/dev-major-7aba2b6bf0
Open

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/dev-major-7aba2b6bf0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dev-major group with 12 updates in the / directory:

Package From To
@oclif/test 4.1.18 5.0.0
@types/node 25.6.2 26.6.2
@vitest/coverage-v8 4.1.5 5.0.1
@vitest/ui 4.1.5 5.0.1
dotenv 17.4.2 18.0.1
eslint-plugin-n 17.24.0 18.3.0
eslint-plugin-unicorn 64.0.0 76.0.0
execa 9.6.1 10.0.1
oclif 4.23.0 6.0.0
vitest 4.1.5 5.0.1
@testing-library/jest-dom 6.9.1 7.0.1
@vercel/node 5.7.15 13.0.1

Updates @oclif/test from 4.1.18 to 5.0.0

Release notes

Sourced from @​oclif/test's releases.

5.0.0

BREAKING CHANGES

  • bump node engine to >=22.0.0

4.2.0

Features

  • bumped eslint to v10 (W-23473845) (8fb8c87)

4.1.22

Bug Fixes

  • deps: bump js-yaml from 4.3.0 to 4.3.1 (34b2397)

4.1.21

Bug Fixes

  • deps: bump js-yaml from 4.2.0 to 4.3.0 (c7f5819)

4.1.20

Bug Fixes

  • deps: bump js-yaml from 4.1.1 to 4.2.0 (18815a3)

4.1.19

Bug Fixes

  • deps: bump esbuild from 0.28.0 to 0.28.1 (429ee9b)
Changelog

Sourced from @​oclif/test's changelog.

5.0.0 (2026-08-31)

BREAKING CHANGES

  • bump node engine to >=22.0.0

4.2.0 (2026-08-24)

Features

  • bumped eslint to v10 (W-23473845) (8fb8c87)

4.1.22 (2026-08-09)

Bug Fixes

  • deps: bump js-yaml from 4.3.0 to 4.3.1 (34b2397)

4.1.21 (2026-07-26)

Bug Fixes

  • deps: bump js-yaml from 4.2.0 to 4.3.0 (c7f5819)

4.1.20 (2026-06-21)

Bug Fixes

  • deps: bump js-yaml from 4.1.1 to 4.2.0 (18815a3)

4.1.19 (2026-06-13)

... (truncated)

Commits
  • f6b9fb8 chore(release): 5.0.0 [skip ci]
  • 723eb0a Merge pull request #928 from oclif/sl/oclif-core-v5
  • 97e758e feat!: upgrade oclif/core to v5 @​W-23512455@
  • 3512a05 Merge pull request #926 from oclif/k80/ts-v6
  • b51db2a build: migrate to TypeScript 6
  • ac789f2 chore(release): 4.2.0 [skip ci]
  • 9cf84d1 Merge pull request #924 from oclif/d/W-23473845
  • 8fb8c87 feat: bumped eslint to v10 (W-23473845)
  • 284e6dd Merge pull request #923 from oclif/dependabot-npm_and_yarn-tsx-4.23.12
  • 657e6fb chore(dev-deps): bump tsx from 4.23.8 to 4.23.12
  • Additional commits viewable in compare view

Updates @types/node from 25.6.2 to 26.6.2

Commits

Updates @vitest/coverage-v8 from 4.1.5 to 5.0.1

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits

Updates @vitest/ui from 4.1.5 to 5.0.1

Release notes

Sourced from @​vitest/ui's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits

Updates dotenv from 17.4.2 to 18.0.1

Changelog

Sourced from dotenv's changelog.

18.0.1 (2026-09-18)

Changed

  • Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

  • NEW: Dotenv now has a CLI. (#1022)
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
  • NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#1010)
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv

Changed

  • Injecting message sent to stderr rather than stdout and tips removed (#1037)

Removed

  • Remove tips (#1031)
  • Remove skill files (#1032)
  • Remove Spanish README (#1034)
  • Remove .env.vault support (#1033)
  • Remove preloading. Instead use cli dotenv run -- your-command (#1035)
Commits

Updates eslint-plugin-n from 17.24.0 to 18.3.0

Release notes

Sourced from eslint-plugin-n's releases.

v18.3.0

18.3.0 (2026-08-08)

🌟 Features

  • add prefer-process-get-builtin-module rule (#554) (8d9bd05)
  • implement prefer-import/assert-strict rule (#553) (d7afbed)

🩹 Fixes

  • handle import.meta paths in no-path-concat (#559) (a6b3ce2)
  • no-unsupported-features: classify util.styleText as experimental (#560) (b8e39c5)
  • support brace expansion and extglobs in package files (#558) (8cae1af)

📚 Documentation

  • add eslint-plugin-node migration guide (#561) (4138d4e)
  • update outdated http links to https in docs/rules (#562) (a6cd6a5)

🧹 Chores

v18.2.2

18.2.2 (2026-07-11)

🩹 Fixes

  • Ignore HTTP imports in no-missing-import (#547) (3ff929d)
  • no-callback-literal: report object, array, and template literals (#552) (dca2330)

v18.2.1

18.2.1 (2026-06-26)

🩹 Fixes

v18.2.0

18.2.0 (2026-06-25)

🌟 Features

... (truncated)

Changelog

Sourced from eslint-plugin-n's changelog.

18.3.0 (2026-08-08)

🌟 Features

  • add prefer-process-get-builtin-module rule (#554) (8d9bd05)
  • implement prefer-import/assert-strict rule (#553) (d7afbed)

🩹 Fixes

  • handle import.meta paths in no-path-concat (#559) (a6b3ce2)
  • no-unsupported-features: classify util.styleText as experimental (#560) (b8e39c5)
  • support brace expansion and extglobs in package files (#558) (8cae1af)

📚 Documentation

  • add eslint-plugin-node migration guide (#561) (4138d4e)
  • update outdated http links to https in docs/rules (#562) (a6cd6a5)

🧹 Chores

18.2.2 (2026-07-11)

🩹 Fixes

  • Ignore HTTP imports in no-missing-import (#547) (3ff929d)
  • no-callback-literal: report object, array, and template literals (#552) (dca2330)

18.2.1 (2026-06-26)

🩹 Fixes

18.2.0 (2026-06-25)

🌟 Features

  • add module.exports for require(esm) interop (#542) (04c99df)

18.1.0 (2026-06-08)

... (truncated)

Commits
  • 6a9980a chore(master): release 18.3.0 (#564)
  • d7afbed feat: implement prefer-import/assert-strict rule (#553)
  • d499fc1 chore: rename default export n (#556)
  • 8d9bd05 feat: add prefer-process-get-builtin-module rule (#554)
  • 8cae1af fix: support brace expansion and extglobs in package files (#558)
  • a6b3ce2 fix: handle import.meta paths in no-path-concat (#559)
  • b8e39c5 fix(no-unsupported-features): classify util.styleText as experimental (#560)
  • a6cd6a5 docs: update outdated http links to https in docs/rules (#562)
  • 4138d4e docs: add eslint-plugin-node migration guide (#561)
  • 0c31d00 chore(master): release 18.2.2 (#548)
  • Additional commits viewable in compare view

Updates eslint-plugin-unicorn from 64.0.0 to 76.0.0

Release notes

Sourced from eslint-plugin-unicorn's releases.

v76.0.0

Breaking

Improvements

  • prefer-minimal-ternary: Add autofix (#3716) aaa75a46
  • prefer-logical-operator-over-ternary: Handle boolean expressions (#3711)
  • prefer-ternary: Preserve readable branches (#3709) f7a35aea
  • no-typeof-undefined: Ignore TypeScript ambient variables (#3708) 9245ed87
  • Fix autofixes that hardcoded a tab for inserted indentation (#3721) db20ce1c

sindresorhus/eslint-plugin-unicorn@v75.0.0...v76.0.0

v75.0.0

New rules

Improvements

... (truncated)

Commits
  • f70155e 76.0.0
  • db20ce1 Fix autofixes that hardcoded a tab for inserted indentation (#3721)
  • aaa75a4 prefer-minimal-ternary: Add autofix (#3716)
  • 577746b prefer-logical-operator-over-ternary: Handle boolean expressions (#3711)
  • d8fbfde no-break-in-nested-loop: Add checkContinue option and default it to off (...
  • a0fdbef prefer-combined-guards: Add checkCompoundConditions option and make it of...
  • f7a35ae prefer-ternary: Preserve readable branches (#3709)
  • 9245ed8 no-typeof-undefined: Ignore TypeScript ambient variables (#3708)
  • 4686e7e no-immediate-mutation: Add checkConditionals option and default it to off...
  • 80939f9 75.0.0
  • Additional commits viewable in compare view

Updates execa from 9.6.1 to 10.0.1

Release notes

Sourced from execa's releases.

v10.0.1

  • Fix preferLocal argument escaping edge-case on Windows (#1259) e771733

sindresorhus/execa@v10.0.0...v10.0.1

v10.0.0

Breaking

…updates

Bumps the dev-major group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@oclif/test](https://github.com/oclif/test) | `4.1.18` | `5.0.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.6.2` | `26.6.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.5` | `5.0.1` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.5` | `5.0.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.1` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `17.24.0` | `18.3.0` |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `64.0.0` | `76.0.0` |
| [execa](https://github.com/sindresorhus/execa) | `9.6.1` | `10.0.1` |
| [oclif](https://github.com/oclif/oclif) | `4.23.0` | `6.0.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `5.0.1` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.1` |
| [@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node) | `5.7.15` | `13.0.1` |



Updates `@oclif/test` from 4.1.18 to 5.0.0
- [Release notes](https://github.com/oclif/test/releases)
- [Changelog](https://github.com/oclif/test/blob/main/CHANGELOG.md)
- [Commits](oclif/test@4.1.18...5.0.0)

Updates `@types/node` from 25.6.2 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.5 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/coverage-v8)

Updates `@vitest/ui` from 4.1.5 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/ui)

Updates `dotenv` from 17.4.2 to 18.0.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.1)

Updates `eslint-plugin-n` from 17.24.0 to 18.3.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v17.24.0...v18.3.0)

Updates `eslint-plugin-unicorn` from 64.0.0 to 76.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v64.0.0...v76.0.0)

Updates `execa` from 9.6.1 to 10.0.1
- [Release notes](https://github.com/sindresorhus/execa/releases)
- [Commits](sindresorhus/execa@v9.6.1...v10.0.1)

Updates `oclif` from 4.23.0 to 6.0.0
- [Release notes](https://github.com/oclif/oclif/releases)
- [Changelog](https://github.com/oclif/oclif/blob/main/CHANGELOG.md)
- [Commits](oclif/oclif@4.23.0...6.0.0)

Updates `vitest` from 4.1.5 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.9.1...v7.0.1)

Updates `@vercel/node` from 5.7.15 to 13.0.1
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/13.0.1/packages/node)

---
updated-dependencies:
- dependency-name: "@oclif/test"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: "@vitest/ui"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: dotenv
  dependency-version: 18.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: eslint-plugin-n
  dependency-version: 18.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: eslint-plugin-unicorn
  dependency-version: 76.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: execa
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: oclif
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 7.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
- dependency-name: "@vercel/node"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 28, 2026
@vercel

vercel Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
cli-web-cli Ready Ready Preview Sep 28, 2026 9:53am UTC

Request Review

eslint-plugin-unicorn v76 sets `defaultOptions: [null]` on the
logical-assignment-operators rule (because the underlying built-in
ESLint rule has no defaultOptions), which ESLint 10.3.0's stricter
defaultOptions validation rejects at config-init time with a schema
error. Fixed by providing explicit options ["error", "always"] so
ESLint bypasses the broken default.

v65–v76 also introduced ~60 new recommended rules that were not
present in v64. Disabled all newly failing rules in eslint.config.js
to keep CI green; each can be re-enabled and the code fixed in
follow-up PRs. Also renamed the no-array-for-each disable directive
to no-for-each (rule was renamed in unicorn v65).

Fixed two pre-existing logical-assignment-operators violations in
did-you-mean.test.ts that the schema error had been masking.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@ci-lockfile-regen

Copy link
Copy Markdown

Dependabot Fix Assessment

Package: `eslint-plugin-unicorn` `64.0.0` → `76.0.0` (major — 12 major versions)
Scope: devDependency
Workspace: root

What changed upstream

unicorn v65–v76 introduced approximately 60 new recommended rules that were not present in v64. Release notes: https://github.com/sindresorhus/eslint-plugin-unicorn/releases

The breaking issue specific to v76 + ESLint 10.3.0: unicorn/logical-assignment-operators now sets defaultOptions: [null] on its rule metadata (because the underlying built-in ESLint rule has no defaultOptions). ESLint 10.3.0 added stricter validation that checks defaultOptions values against the rule's schema at config-initialization time. [null] doesn't match either "always" or "never" in the schema's oneOf, causing ESLint to crash before linting any file.

Migration concerns checked

  • Peer dependencies: OK — no peer dep conflicts
  • Type changes: OK — this is a linting plugin only
  • Config files: Fixed — eslint.config.js updated
  • Module format: OK — ESM compatible
  • React compatibility: OK — not applicable
  • Monorepo impact: Affects root only (lint runs from root)

What broke

  • All three CI lint checks: ESLint crashed at config initialization with Error: Key "rules": Key "unicorn/logical-assignment-operators": Value undefined should be equal to constant. Value [null] should match exactly one schema in oneOf.
    • Root cause: unicorn/logical-assignment-operators rule metadata in v76 has defaultOptions: [null], which ESLint 10.3.0 rejects during schema validation
    • After fixing the crash: ~60 new recommended rules from v65–v76 fired on our codebase (2,285 errors)

What was fixed

  1. eslint.config.js: Added explicit ["error", "always"] options to unicorn/logical-assignment-operators to override the broken defaultOptions: [null]. When user-supplied options are provided, ESLint skips the broken default.
  2. eslint.config.js: Disabled all ~60 new rules introduced in unicorn v65–v76 that our codebase doesn't yet follow. These are commented with "New rules added in unicorn v65–v76 — disabled for now, address in follow-up PRs."
  3. eslint.config.js: Updated unicorn/no-array-for-each (renamed to unicorn/no-for-each in v65) so the disable directive is still effective.
  4. test/hooks/command_not_found/did-you-mean.test.ts: Fixed 2 pre-existing logical-assignment-operators violations (x = x || y → x ||= y) that the schema crash had been masking.

Verification

  • Build: ✅ pnpm prepare succeeds
  • Lint: ✅ pnpm exec eslint . — 0 errors, 10 warnings (pre-existing @typescript-eslint/no-deprecated)
  • Unit tests: ✅ 2644 tests pass across 188 test files
  • Web CLI tests: ✅ 57 tests pass

Notes for reviewer

The ~60 disabled rules represent genuine code quality improvements unicorn v65–v76 wants us to make (early returns, logical assignment operators, boolean naming, class member ordering, etc.). None of these are security or correctness issues — they're style and idiom rules. Follow-up PRs can re-enable them one at a time with corresponding code fixes. The largest rule by violation count is unicorn/name-replacements (927 instances), which wants abbreviations like args → arguments_, params → parameters, env → environment.

This branch was successfully deployed

1 active deployment
Preview — da58ac2c Deployed Sep 28, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Development

Successfully merging this pull request may close these issues.

0 participants