chore(deps): Bump the all-npm-dependencies group with 11 updates by dependabot[bot] · Pull Request #8848 · github/gh-aw-firewall

dependabot · 2026-09-21T17:15:42Z

Bumps the all-npm-dependencies group with 11 updates:

Package	From	To
chalk	`4.1.2`	`6.0.0`
commander	`12.1.0`	`15.0.0`
execa	`5.1.1`	`10.0.1`
js-yaml	`5.4.1`	`5.4.2`
@babel/core	`8.0.1`	`8.0.5`
@babel/preset-env	`8.0.2`	`8.0.5`
@types/node	`26.5.0`	`26.5.1`
@typescript-eslint/eslint-plugin	`8.69.0`	`8.70.0`
@typescript-eslint/parser	`8.69.0`	`8.70.0`
typescript	`5.9.3`	`7.0.2`
typescript-eslint	`8.69.0`	`8.70.0`

Updates chalk from 4.1.2 to 6.0.0

Release notes

Sourced from chalk's releases.

v6.0.0

Breaking

Require Node.js 22 8a94e0e

Improvements

Add underline styles and underline colors (#689) 4c304dd

Improve performance 5729845 fa5cff2

Fixes

Treat a numeric FORCE_COLOR as an exact level (#688) e912931

Downsample ansi256() and bgAnsi256() to 16 colors at level 1 (#687) ff549c5

chalk/chalk@v5.6.2...v6.0.0

v5.6.2

Fix vulnerability in 5.6.1, see: chalk/chalk#656

v5.6.0

Make WezTerm terminal use true color a8f5bf7

chalk/chalk@v5.5.0...v5.6.0

v5.5.0

Make Ghostty terminal use true color (#653) 79ee2d3

chalk/chalk@v5.4.1...v5.5.0

v5.4.1

Fix navigator not defined ReferenceError (#642) 4ebb62d

chalk/chalk@v5.4.0...v5.4.1

v5.4.0

Update CIRCLECI environments to return level 3 color support f838120

chalk/chalk@v5.3.0...v5.4.0

v5.3.0

Add sideEffects field to package.json 5aafc0a

Add support for Gitea Actions (#603) 29b8569

... (truncated)

Commits

661317e 6.0.0
5729845 Improve performance
4c304dd Add extended underline styles and underline colors (#689)
e912931 Fix: Treat a numeric FORCE_COLOR as an exact level (#688)
8a94e0e Require Node.js 22
fa5cff2 Optimize 2-argument calls (#670)
ff549c5 Fix: Downsample ansi256() and bgAnsi256() to 16 colors at level 1 (#687)
678e550 Tweaks
aa06bb5 Fix typos (#664)
5155778 5.6.2
Additional commits viewable in compare view

Updates commander from 12.1.0 to 15.0.0

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

Changed

Breaking: migrated Commander implementation from CommonJS to ESM (#2464)

Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).

dev: switch tests from Jest to node:test test runner (#2463)

Deleted

Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

Changed

Breaking: migrated Commander implementation from CommonJS to ESM (#2464)

Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).

dev: switch tests from Jest to node:test test runner (#2463)

Deleted

Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

[14.0.3] (2026-01-31)

Added

Release Policy document (#2462)

Changes

old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)

clarify typing for deprecated callback parameter to .outputHelp() (#2427)

... (truncated)

Commits

ba6d13d Fix release dates in changelog (#2523)
a752ed9 Pin GitHub actions with hash (#2521)
74d5dfe Drop EOL node 20 from test matrix, and add node 26 (#2520)
6df9b68 Update details for 15.0.0 release (#2519)
01ce5d0 Remove jest esm examples (#2517)
d785d8b Update dependencies (#2518)
9098b48 Update dependencies (#2506)
373f660 Use node:util stripVTControlCharacters instead of own code (#2486)
987f289 Use simple match in test (to avoid warning about expensive regex) (#2485)
0ea3bb3 Update dependecies and lint (#2489)
Additional commits viewable in compare view

Updates execa from 5.1.1 to 10.0.1

Release notes

Sourced from execa's releases.

v10.0.1

Fix preferLocal argument escaping edge-case on Windows (#1259) e771733

sindresorhus/execa@v10.0.0...v10.0.1

v10.0.0

Breaking

Require Node.js 22. (#1243) 04b4454

The subprocess is now a normal promise, instead of a ChildProcess instance augmented with promise methods. All the methods and properties documented by Execa are unchanged. Node.js-specific ChildProcess APIs (such as .on(), .send(), .ref() and .unref()) must now be accessed through the new subprocess.nodeChildProcess property. (#1255) ade74bf
const subprocess = execa('node', ['file.js']);
- subprocess.on('spawn', onSpawn);
+ subprocess.nodeChildProcess.on('spawn', onSpawn);
Removed execaCommand() and execaCommandSync(). Use the template string syntax instead, which splits on spaces. If the command is a dynamic string, split it with https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADChttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADghttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD. (#1244) 3ced394
- await execaCommand('npm run build');
+ await execa`npm run build`;

await execaCommand(commandString);


await execa${parseCommandString(commandString)};
Removed the old undocumented stdio: [..., 'ipc'] syntax. Use the ipc: true option instead. (#1245) dcf611c
- await execa('node', ['file.js'], {stdio: ['pipe', 'pipe', 'pipe', 'ipc']});
+ await execa('node', ['file.js'], {ipc: true});
When the input or inputFile option is combined with an inherited stdin (for example stdio: 'inherit'), the explicit input is now used, instead of being ignored. To combine multiple inputs, pass an array like stdin: ['inherit', {string: 'input'}]. (#1232) 3ed0544

Improvements

Terminate the subprocess' descendant processes by using the killDescendants option. This is useful when the subprocess spawns its own processes, such as when using the shell option. (#1256) 84fa0ec
await execa('npm', ['run', 'build'], {killDescendants: true, timeout: 5000});
Convert the subprocess to a web stream by using https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD, https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADwhttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD or https://github.com/sindresorhus/execa/blob/HEAD[https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADShttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD`https://github.com/sindresorhus/execa/blob/HEAD]https://github.com/sindresorhus/execa/blob/HEAD(https://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD/https://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEAD.https://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEAD#https://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADbhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADchttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADfhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADrhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADahttps://github.com/sindresorhus/execa/blob/HEADmhttps://github.com/sindresorhus/execa/blob/HEADdhttps://github.com/sindresorhus/execa/blob/HEADuhttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADlhttps://github.com/sindresorhus/execa/blob/HEADehttps://github.com/sindresorhus/execa/blob/HEADxhttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADphttps://github.com/sindresorhus/execa/blob/HEADthttps://github.com/sindresorhus/execa/blob/HEADihttps://github.com/sindresorhus/execa/blob/HEADohttps://github.com/sindresorhus/execa/blob/HEADnhttps://github.com/sindresorhus/execa/blob/HEADshttps://github.com/sindresorhus/execa/blob/HEAD)https://github.com/sindresorhus/execa/blob/HEAD. (#1254) 29d9cfc
</tr></table> 

... (truncated)

Commits

8017b27 10.0.1
e771733 Fix preferLocal argument escaping edge-case on Windows (#1259)
499fe80 Meta tweaks
e389369 10.0.0
3d9d820 Improve taskkill usage (#1258)
5944b2d Update dev dependencies (#1257)
84fa0ec Add killDescendants option to also terminate descendant processes (#1256)
ade74bf Add nodeChildProcess to subprocess promises and make the subprocess a norma...
29d9cfc Add .readableStream(), .writableStream() and .transformStream() methods...
522654a Fix flaky test
Additional commits viewable in compare view

Updates js-yaml from 5.4.1 to 5.4.2

Changelog

Sourced from js-yaml's changelog.

[5.4.2] - 2026-09-13

Fixed

forceQuotes no longer quotes non-string scalars, #798.

Commits

494400b 5.4.2 released
6d8adb4 Fix forceQuotes quoting non-string scalars, #798
See full diff in compare view

Updates @babel/core from 8.0.1 to 8.0.5

Release notes

Sourced from @babel/core's releases.

v8.0.5 (2026-09-10)

Thanks @drubetti, @jibin7jose, @joelle-a-dev, @journey-ad, @Kjubikstronk, @MatteoGabriele, and @zhangli091011 for your first PRs!

👓 Spec Compliance

babel-parser

#18218 fix(parser): do not form html entity for invalid codepoint (@JLHwung)

🐛 Bug Fix

babel-parser

#18215 fix(parser): remove non-decimal prefix from bigint (@JLHwung)

#18063 Disallow new import prop access (@JLHwung)

babel-plugin-transform-destructuring

#18214 fix: only collapse the empty-object check when it targets the declared binding (@Kjubikstronk)

babel-plugin-transform-typescript

#18190 fix(ts): improve variable handling in namespace (@JLHwung)

#18207 [ts] Allow merging enum into a namespace (@nicolo-ribaudo)

babel-node

#18217 Fix import path for babel-node.js (@drubetti)

babel-plugin-bugfix-safari-rest-destructuring-rhs-array

#18213 fix(bugfix): bound check before array access (@JLHwung)

babel-traverse

#18183 fix(remove): unwrap single sequence expression (@JLHwung)

#18153 Handle null in getAll{Prev,Next}Siblings (@JLHwung)

babel-plugin-transform-block-scoping

#18194 fix: improve for loop closure environment check (@JLHwung)

#18193 fix: assign closure body after handling return (@JLHwung)

#18088 Fix initialization of nested for loop head declarations (@journey-ad)

babel-generator

#18202 fix(generator): keep parens for ?. chain in tag (@JLHwung)

babel-register

#18137 fix(babel-register): preserve app-managed graceful shutdown (@jibin7jose)

Other

#18140 chore: fix @babel/eslint-plugin peer deps (@JLHwung)

babel-cli, babel-helper-transform-fixture-test-runner, babel-register

#18131 fix(register): do not inherit parent execArgv (@JLHwung)

babel-standalone

#18095 Add types for @babel/standalone (@liuxingbaoyu)

📝 Documentation

#18187 Add AI policy (@nicolo-ribaudo)

🏠 Internal

babel-cli, babel-core, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin, babel-helper-fixtures, babel-preset-env

#18145 refactor: replace semver with verkit (@sxzz)

babel-node

#18177 Update node flags list (@nicolo-ribaudo)

babel-types

#18103 Simplify AST validators (@fisker)

... (truncated)

Changelog

Sourced from @babel/core's changelog.

v8.0.5 (2026-09-10)

👓 Spec Compliance

babel-parser

#18218 fix(parser): do not form html entity for invalid codepoint (@JLHwung)

🐛 Bug Fix

babel-parser

#18215 fix(parser): remove non-decimal prefix from bigint (@JLHwung)

#18063 Disallow new import prop access (@JLHwung)

babel-plugin-transform-destructuring

#18214 fix: only collapse the empty-object check when it targets the declared binding (@Kjubikstronk)

babel-plugin-transform-typescript

#18190 fix(ts): improve variable handling in namespace (@JLHwung)

#18207 [ts] Allow merging enum into a namespace (@nicolo-ribaudo)

babel-node

#18217 Fix import path for babel-node.js (@drubetti)

babel-plugin-bugfix-safari-rest-destructuring-rhs-array

#18213 fix(bugfix): bound check before array access (@JLHwung)

babel-traverse

#18183 fix(remove): unwrap single sequence expression (@JLHwung)

#18153 Handle null in getAll{Prev,Next}Siblings (@JLHwung)

babel-plugin-transform-block-scoping

#18194 fix: improve for loop closure environment check (@JLHwung)

#18193 fix: assign closure body after handling return (@JLHwung)

#18088 Fix initialization of nested for loop head declarations (@journey-ad)

babel-generator

#18202 fix(generator): keep parens for ?. chain in tag (@JLHwung)

babel-register

#18137 fix(babel-register): preserve app-managed graceful shutdown (@jibin7jose)

Other

#18140 chore: fix @babel/eslint-plugin peer deps (@JLHwung)

babel-cli, babel-helper-transform-fixture-test-runner, babel-register

#18131 fix(register): do not inherit parent execArgv (@JLHwung)

babel-standalone

#18095 Add types for @babel/standalone (@liuxingbaoyu)

📝 Documentation

Bumps the all-npm-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [chalk](https://github.com/chalk/chalk) | `4.1.2` | `6.0.0` | | [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` | | [execa](https://github.com/sindresorhus/execa) | `5.1.1` | `10.0.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.1` | `5.4.2` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.1` | `8.0.5` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `8.0.2` | `8.0.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.5.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.69.0` | `8.70.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.69.0` | `8.70.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.69.0` | `8.70.0` | Updates `chalk` from 4.1.2 to 6.0.0 - [Release notes](https://github.com/chalk/chalk/releases) - [Commits](chalk/chalk@v4.1.2...v6.0.0) Updates `commander` from 12.1.0 to 15.0.0 - [Release notes](https://github.com/tj/commander.js/releases) - [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md) - [Commits](tj/commander.js@v12.1.0...v15.0.0) Updates `execa` from 5.1.1 to 10.0.1 - [Release notes](https://github.com/sindresorhus/execa/releases) - [Commits](sindresorhus/execa@v5.1.1...v10.0.1) Updates `js-yaml` from 5.4.1 to 5.4.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.4.1...5.4.2) Updates `@babel/core` from 8.0.1 to 8.0.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.5/packages/babel-core) Updates `@babel/preset-env` from 8.0.2 to 8.0.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.5/packages/babel-preset-env) Updates `@types/node` from 26.5.0 to 26.5.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.69.0 to 8.70.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.69.0 to 8.70.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/parser) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) Updates `typescript-eslint` from 8.69.0 to 8.70.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: chalk dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: commander dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: execa dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: js-yaml dependency-version: 5.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-dependencies - dependency-name: "@babel/core" dependency-version: 8.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-dependencies - dependency-name: "@babel/preset-env" dependency-version: 8.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-dependencies - dependency-name: "@types/node" dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-21T17:17:03Z

🚀 Security Guard has started processing this pull request

dependabot · 2026-09-22T14:24:09Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026

lpcox closed this Sep 22, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/all-npm-dependencies-6e858753dc branch September 22, 2026 14:24

Navigation Menu

chore(deps): Bump the all-npm-dependencies group with 11 updates - #8848

chore(deps): Bump the all-npm-dependencies group with 11 updates#8848
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-npm-dependencies-6e858753dc

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026

v6.0.0

Breaking

Improvements

Fixes

v5.6.2

v5.6.0

v5.5.0

v5.4.1

v5.4.0

v5.3.0

v15.0.0

Added

Fixed

Changed

Deleted

Migration Tips

v15.0.0-0

Added

Fixed

[15.0.0] (2026-05-29)

Added

Fixed

Changed

Deleted

Migration Tips

[15.0.0-0] (2026-02-22)

[14.0.3] (2026-01-31)

Added

Changes

v10.0.1

v10.0.0

Breaking

Improvements

[5.4.2] - 2026-09-13

Fixed

v8.0.5 (2026-09-10)

👓 Spec Compliance

🐛 Bug Fix

📝 Documentation

🏠 Internal

v8.0.5 (2026-09-10)

👓 Spec Compliance

🐛 Bug Fix

📝 Documentation

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant