Skip to content

chore(deps): bump the dependencies group across 1 directory with 11 updates - #2414

Merged
alexander-akait merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dependencies-d3a7985664
Sep 20, 2026
Merged

chore(deps): bump the dependencies group across 1 directory with 11 updates#2414
alexander-akait merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dependencies-d3a7985664

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 11 updates in the / directory:

Package From To
memfs 4.68.2 4.78.0
schema-utils 4.3.3 4.5.0
@changesets/cli 3.0.1 3.0.3
@changesets/get-github-info 1.0.0 1.0.1
cspell 10.2.0 10.3.3
eslint-config-webpack 4.9.6 4.14.0
fastify 5.12.1 5.12.5
hono 4.13.5 4.13.8
lint-staged 17.4.1 17.5.1
prettier 3.9.6 3.9.7
webpack 5.110.3 5.111.0

Updates memfs from 4.68.2 to 4.78.0

Release notes

Sourced from memfs's releases.

Release v4.78.0

What's Changed

Full Changelog: streamich/memfs@v4.77.0...v4.78.0

Release v4.77.0

What's Changed

Full Changelog: streamich/memfs@v4.76.0...v4.77.0

Release v4.76.0

What's Changed

Full Changelog: streamich/memfs@v4.75.0...v4.76.0

Release v4.75.0

What's Changed

Full Changelog: streamich/memfs@v4.74.0...v4.75.0

Release v4.74.0

What's Changed

Full Changelog: streamich/memfs@v4.73.0...v4.74.0

Release v4.73.0

What's Changed

Full Changelog: streamich/memfs@v4.72.2...v4.73.0

Release v4.72.2

What's Changed

Full Changelog: streamich/memfs@v4.72.1...v4.72.2

Release v4.72.1

... (truncated)

Commits
  • 3f944e5 chore: release v4.78.0
  • 7d0b4b1 Merge pull request #1294 from streamich/improve-cp
  • be8ae19 test: 💍 handle Windows case
  • 2836970 feat: 🎸 improve cp edge cases
  • 27828a3 fix: 🐛 extend cp guard to all parents
  • 300c8da fix: 🐛 correctly concatenate path
  • 1f54d7b fix: 🐛 make trailing args optional
  • d4737a0 style: 💄 run Prettier
  • d6183ee chore: 🤖 catch up with master
  • 2b68a5f feat: 🎸 implement Node-compatible cp module
  • Additional commits viewable in compare view

Updates schema-utils from 4.3.3 to 4.5.0

Release notes

Sourced from schema-utils's releases.

v4.5.0

Minor Changes

  • The absolutePath keyword reads a file: URL the way Node's own URL parser does: the scheme may be followed by any number of slashes, so file:/directory is accepted alongside file:///directory, and it is matched case-insensitively, so FILE:///directory is too. A scheme with no slash after it — file:directory — still names no absolute path and is rejected. (by @​alexander-akait in #226)

v4.4.0

Minor Changes

  • The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @​laymonage, @​alexander-akait in #222)

  • process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @​alexander-akait in #217)

  • At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @​alexander-akait in #217)

Patch Changes

  • read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @​alexander-akait in #225)

  • output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @​alexander-akait in #224)

  • Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @​alexander-akait in #221)

  • A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @​alexander-akait in #223)

  • Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @​alexander-akait in #217)

All notable changes to this project will be documented in this file.

4.3.3 (2025-10-02)

Bug Fixes

  • reexport ValidationErrorConfiguration type (#204) (49af922)

4.3.2 (2025-04-22)

Bug Fixes

4.3.1 (2025-04-22)

Bug Fixes

  • export Schema and additional schemas (#197) (f72cd60)
Changelog

Sourced from schema-utils's changelog.

4.5.0

Minor Changes

  • The absolutePath keyword reads a file: URL the way Node's own URL parser does: the scheme may be followed by any number of slashes, so file:/directory is accepted alongside file:///directory, and it is matched case-insensitively, so FILE:///directory is too. A scheme with no slash after it — file:directory — still names no absolute path and is rejected. (by @​alexander-akait in #226)

4.4.0

Minor Changes

  • The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @​laymonage, @​alexander-akait in #222)

  • process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @​alexander-akait in #217)

  • At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @​alexander-akait in #217)

Patch Changes

  • read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @​alexander-akait in #225)

  • output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @​alexander-akait in #224)

  • Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @​alexander-akait in #221)

  • A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @​alexander-akait in #223)

  • Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @​alexander-akait in #217)

All notable changes to this project will be documented in this file.

Commits
  • 1cb9c8d chore(release): new release (#227)
  • 9578e1a feat: read a file: URL the way Node does in absolutePath (#226)
  • b4fd660 chore(release): new release (#220)
  • 0f99aa9 feat: read the format keyword as part of the type (#225)
  • 4baf113 feat: output the type of object properties in error messages (#224)
  • 49bb7ce fix: say which strings an absolutePath keyword accepts (#223)
  • 5c21244 feat: allow file:// protocol prefix in absolute paths (#222)
  • fc918a9 chore: update dependencies (#221)
  • d72a15b chore: release with changesets (#219)
  • 1d0404e test: cover collecting a subtree of errors and grouping a nested anyOf (#218)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for schema-utils since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @changesets/cli from 3.0.1 to 3.0.3

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1

@​changesets/cli@​3.0.2

Patch Changes

Changelog

Sourced from @​changesets/cli's changelog.

3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1

3.0.2

Patch Changes

Commits

Updates @changesets/get-github-info from 1.0.0 to 1.0.1

Release notes

Sourced from @​changesets/get-github-info's releases.

@​changesets/get-github-info@​1.0.1

Patch Changes

Changelog

Sourced from @​changesets/get-github-info's changelog.

1.0.1

Patch Changes

Commits

Updates cspell from 10.2.0 to 10.3.3

Release notes

Sourced from cspell's releases.

v10.3.3

Fixes

fix: Add --json option to check text for use with AI (#9254)

This pull request adds support for a --json output mode to the check CLI command, enabling results to be emitted as structured JSON per file. It also introduces comprehensive test coverage for the new JSON output behavior, including error handling and exit code logic.

CLI Enhancements:

  • Added a --json flag to the check command, allowing users to receive results in JSON format. This includes proper handling of multiple files and error cases, such as missing files. [1] [2]
  • Updated the exit code logic to work with both standard and JSON output, respecting the --no-exit-code flag. [1] [2]

Implementation Details:

  • Introduced separate processing functions: processRequestAnsi for standard output and processRequestJSON for JSON output, with the latter aggregating results and errors per file. [1] [2]
  • Added a helper function to detect missing files and report them as JSON errors.

Testing Improvements:

  • Expanded CLI test coverage to include various --json scenarios, such as files with spelling errors, missing files, and the interaction with --no-exit-code. [1] [2]
  • Added utility functions and interfaces in tests to parse and validate the JSON output.

fix: Mark ParsedTags as read only. (#9253)

This pull request makes a small but important change to the ParsedText interface in several files, improving type safety by marking the tags property as a read-only type. This ensures that the tags associated with a parsed text segment cannot be modified after creation.

  • Updated the tags property in the ParsedText interface to use Readonly<ParsedTags> instead of ParsedTags, making the tags immutable in the following files:
    • packages/cspell-types/api/Parser/index.d.mts
    • packages/cspell-types/api/index.d.mts
    • packages/cspell-types/src/Parser/parser.ts

fix: Make sure Parser and DocumentParser can be used together. (#9252)

This pull request enhances the parser interface definitions in the cspell-types package to provide better flexibility and clarity for parser implementations. The main changes introduce optional parseDocument and parse methods to both the Parser and DocumentParser interfaces, across both type declaration and source files.

Parser interface enhancements:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.3.3 (2026-09-16)

Fixes

fix: Add --json option to check text for use with AI (#9254)

This pull request adds support for a --json output mode to the check CLI command, enabling results to be emitted as structured JSON per file. It also introduces comprehensive test coverage for the new JSON output behavior, including error handling and exit code logic.

CLI Enhancements:

  • Added a --json flag to the check command, allowing users to receive results in JSON format. This includes proper handling of multiple files and error cases, such as missing files. [1] [2]
  • Updated the exit code logic to work with both standard and JSON output, respecting the --no-exit-code flag. [1] [2]

Implementation Details:

  • Introduced separate processing functions: processRequestAnsi for standard output and processRequestJSON for JSON output, with the latter aggregating results and errors per file. [1] [2]
  • Added a helper function to detect missing files and report them as JSON errors.

Testing Improvements:

  • Expanded CLI test coverage to include various --json scenarios, such as files with spelling errors, missing files, and the interaction with --no-exit-code. [1] [2]
  • Added utility functions and interfaces in tests to parse and validate the JSON output.

fix: Mark ParsedTags as read only. (#9253)

This pull request makes a small but important change to the ParsedText interface in several files, improving type safety by marking the tags property as a read-only type. This ensures that the tags associated with a parsed text segment cannot be modified after creation.

  • Updated the tags property in the ParsedText interface to use Readonly<ParsedTags> instead of ParsedTags, making the tags immutable in the following files:
    • packages/cspell-types/api/Parser/index.d.mts
    • packages/cspell-types/api/index.d.mts
    • packages/cspell-types/src/Parser/parser.ts

fix: Make sure Parser and DocumentParser can be used together. (#9252)

... (truncated)

Commits

Updates eslint-config-webpack from 4.9.6 to 4.14.0

Release notes

Sourced from eslint-config-webpack's releases.

v4.14.0

Minor Changes

v4.13.0

Minor Changes

  • Report a minLength other than 1 and a non-primitive enum value in webpack/valid-schema. (by @​alexander-akait in #201)

v4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

v4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

v4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Changelog

Sourced from eslint-config-webpack's changelog.

4.14.0

Minor Changes

4.13.0

Minor Changes

  • Report a minLength other than 1 and a non-primitive enum value in webpack/valid-schema. (by @​alexander-akait in #201)

4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Commits

Updates fastify from 5.12.1 to 5.12.5

Release notes

Sourced from fastify's releases.

v5.12.5

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.4...v5.12.5

v5.12.4

Fixed the fastify.js version mismatch.

Full Changelog: fastify/fastify@v5.12.2...v5.12.4

v5.12.2

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

Commits
  • ba235fd Bumped v5.12.5
  • ad06a4c Merge commit from fork
  • 7af0d77 [Backport 5.x] perf: avoid redundant request-part reads during validation (#7...
  • 990ebef [Backport 5.x] perf: reduce content-type parser overhead (#7019)
  • 1690e35 Bumped v5.12.4
  • 1c991c4 Bumped v5.12.3
  • 942a2be Bumped v5.12.2
  • 853f6e2 test(validation): cover normalization and async branches
  • f02d8d4 fix(validation): do not unwrap async validator results
  • 93c239a fix: reject malformed URLs before custom 404 handlers
  • Additional commits viewable in compare view

Updates hono from 4.13.5 to 4.13.8

Release notes

Sourced from hono's releases.

v4.13.8

What's Changed

Full Changelog: honojs/hono@v4.13.7...v4.13.8

v4.13.7

Security fixes

This release includes a fix for the following security issue:

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv

Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.

v4.13.6

What's Changed

Full Changelog: honojs/hono@v4.13.5...v4.13.6

Commits
  • 098e119 4.13.8
  • e8c8c21 perf(jsx/dom): optimize matching-head child lookup during reconciliation (#5329)
  • 8755b17 docs(combine): fix except() JSDoc param and add missing @​returns (#5346)
  • edd138e fix(request): keep the request media type when reusing a cached body (#5366)
  • 9b4e9c2 fix(accept): clamp a negative q to 0, not 1 (#5357)
  • 65cff90 fix(accept): treat the q parameter name as case-insensitive (#5349)
  • f147de5 fix(accepts, language): skip accept entries with quality 0 when matching (#5311)
  • 90e1b94 fix(aws-lambda): respect backpressure when streaming the response body (#5351)
  • 7792f5d perf(jsx/dom): reduce lookup work for large keyed updates (#5340)
  • e7b38ee docs: fix typos in code comments and link third-party middleware section (#5343)
  • Additional commits viewable in compare view

Updates lint-staged from 17.4.1 to 17.5.1

Release notes

Sourced from lint-staged's releases.

v17.5.1

Patch Changes

  • #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

    A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

v17.5.0

Minor Changes

  • #1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

  • #1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

  • #1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

  • #1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Changelog

Sourced from

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 20, 2026
@changeset-bot

changeset-bot Bot commented Sep 20, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: b168f55

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

webpack[bot]
webpack Bot previously approved these changes Sep 20, 2026
View reviewed changes
@webpack
webpack Bot enabled auto-merge (squash) September 20, 2026 18:24
@socket-security

socket-security Bot commented Sep 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​changesets/​cli@​3.0.1 ⏵ 3.0.399 +110074 +195 -1100
Updated@​changesets/​get-github-info@​1.0.0 ⏵ 1.0.1100 +110090 +193 +3100
Updatedeslint-config-webpack@​4.9.6 ⏵ 4.14.091 +3100100 +1599 +4100
Updatedmemfs@​4.68.2 ⏵ 4.78.099 +110093 +196 +2100
Updatedwebpack@​5.110.3 ⏵ 5.111.093 +110093 +199 +2100
Updatedschema-utils@​4.3.3 ⏵ 4.5.099 +110010093100
Updatedcspell@​10.2.0 ⏵ 10.3.398 +110010096 +1100
Updatedhono@​4.13.5 ⏵ 4.13.8100 +110097 +196100
Updatedlint-staged@​17.4.1 ⏵ 17.5.110010010097 +1100
Updatedprettier@​3.9.6 ⏵ 3.9.79810097 +198100
Updatedfastify@​5.12.1 ⏵ 5.12.59810010099100

View full report

@dependabot
chore(deps): bump the dependencies group across 1 directory with 11 u…
36bbd91 
…pdates

Bumps the dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [memfs](https://github.com/streamich/memfs) | `4.68.2` | `4.78.0` |
| [schema-utils](https://github.com/webpack/schema-utils) | `4.3.3` | `4.5.0` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.3` |
| [@changesets/get-github-info](https://github.com/changesets/changesets/tree/HEAD/packages/get-github-info) | `1.0.0` | `1.0.1` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.2.0` | `10.3.3` |
| [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack) | `4.9.6` | `4.14.0` |
| [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.5` |
| [hono](https://github.com/honojs/hono) | `4.13.5` | `4.13.8` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.5.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.7` |
| [webpack](https://github.com/webpack/webpack) | `5.110.3` | `5.111.0` |



Updates `memfs` from 4.68.2 to 4.78.0
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.68.2...v4.78.0)

Updates `schema-utils` from 4.3.3 to 4.5.0
- [Release notes](https://github.com/webpack/schema-utils/releases)
- [Changelog](https://github.com/webpack/schema-utils/blob/main/CHANGELOG.md)
- [Commits](webpack/schema-utils@v4.3.3...v4.5.0)

Updates `@changesets/cli` from 3.0.1 to 3.0.3
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli)

Updates `@changesets/get-github-info` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/get-github-info/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/get-github-info@1.0.1/packages/get-github-info)

Updates `cspell` from 10.2.0 to 10.3.3
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.3/packages/cspell)

Updates `eslint-config-webpack` from 4.9.6 to 4.14.0
- [Release notes](https://github.com/webpack/eslint-config-webpack/releases)
- [Changelog](https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/eslint-config-webpack@v4.9.6...v4.14.0)

Updates `fastify` from 5.12.1 to 5.12.5
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.1...v5.12.5)

Updates `hono` from 4.13.5 to 4.13.8
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.5...v4.13.8)

Updates `lint-staged` from 17.4.1 to 17.5.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.4.1...v17.5.1)

Updates `prettier` from 3.9.6 to 3.9.7
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.7)

Updates `webpack` from 5.110.3 to 5.111.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.110.3...v5.111.0)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@changesets/get-github-info"
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cspell
  dependency-version: 10.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-config-webpack
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: fastify
  dependency-version: 5.12.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: hono
  dependency-version: 4.13.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: lint-staged
  dependency-version: 17.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: memfs
  dependency-version: 4.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.9.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: schema-utils
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: webpack
  dependency-version: 5.111.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-d3a7985664 branch from 5fb3f09 to 36bbd91 Compare September 20, 2026 19:38
webpack[bot]
webpack Bot previously approved these changes Sep 20, 2026
View reviewed changes
@alexander-akait
test: follow fastify and schema-utils on the bumped dependencies
b168f55 
fastify 5.12.5 rejects a malformed percent-encoding in its router as
`FST_ERR_BAD_URL`, where 5.12.1 answered 404. The middleware is reached on
neither version, so these cases only ever asserted fastify's own routing:
expect its 400 and keep 404 for every other framework.

schema-utils 4.5.0 prints property types inside its object shape hints, so
the validation messages now read `object { path?: string, ... }`.
@alexander-akait
alexander-akait merged commit c5c1372 into main Sep 20, 2026
20 checks passed
@alexander-akait
alexander-akait deleted the dependabot/npm_and_yarn/dependencies-d3a7985664 branch September 20, 2026 20:45
@codecov

codecov Bot commented Sep 20, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.17%. Comparing base (7185cb2) to head (b168f55).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #2414      +/-   ##
==========================================
+ Coverage   97.11%   97.17%   +0.06%     
==========================================
  Files          13       13              
  Lines        1664     1664              
==========================================
+ Hits         1616     1617       +1     
+ Misses         48       47       -1

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webpack webpack[bot] webpack[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@alexander-akait