fix: build(deps-dev) - bump the dependencies group with 4 updates by dependabot[bot] · Pull Request #483 · openfga/vscode-ext

dependabot · 2026-03-17T19:43:55Z

Bumps the dependencies group with 4 updates: @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser and webpack-cli.

Updates @types/node from 25.4.0 to 25.5.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.57.0 to 8.57.1

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#12126)

❤️ Thank You

Newton Yuan @NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.57.1 (2026-03-16)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#12126)

❤️ Thank You

Newton Yuan @NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

c7c38aa chore(release): publish 8.57.1
e114629 fix(eslint-plugin): [prefer-optional-chain] no report for property on interse...
See full diff in compare view

Updates @typescript-eslint/parser from 8.57.0 to 8.57.1

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#12126)

❤️ Thank You

Newton Yuan @NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.57.1 (2026-03-16)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

c7c38aa chore(release): publish 8.57.1
See full diff in compare view

Updates webpack-cli from 6.0.1 to 7.0.2

Release notes

Sourced from webpack-cli's releases.

[email protected]

Patch Changes

Resolve configuration path for cache build dependencies. (by @alexander-akait in #4707)

[email protected]

Patch Changes

The file protocol for configuration options (--config/--extends) is supported. (by @alexander-akait in #4702)

[email protected]

Major Changes

The minimum supported version of Node.js is 20.9.0. (by @alexander-akait in #4677)

Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @alexander-akait in #4677)

Removed the --node-env argument in favor of the --config-node-env argument. (by @alexander-akait in #4677)

The version command only output versions right now. (by @alexander-akait in #4677)

Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @alexander-akait in #4677)

Patch Changes

Allow configuration freezing. (by @alexander-akait in #4677)

Use graceful shutdown when file system cache is enabled. (by @alexander-akait in #4677)

Performance improved. (by @alexander-akait in #4677)

Changelog

Sourced from webpack-cli's changelog.

7.0.2

Patch Changes

Resolve configuration path for cache build dependencies. (by @alexander-akait in #4707)

7.0.1

Patch Changes

The file protocol for configuration options (--config/--extends) is supported. (by @alexander-akait in #4702)

7.0.0

Major Changes

The minimum supported version of Node.js is 20.9.0. (by @alexander-akait in #4677)

Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @alexander-akait in #4677)

Removed the --node-env argument in favor of the --config-node-env argument. (by @alexander-akait in #4677)

The version command only output versions right now. (by @alexander-akait in #4677)

Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @alexander-akait in #4677)

Patch Changes

Allow configuration freezing. (by @alexander-akait in #4677)

Use graceful shutdown when file system cache is enabled. (by @alexander-akait in #4677)

Performance improved. (by @alexander-akait in #4677)

Commits

49efdc0 chore(release): new release (#4708)
1fc1b9d fix: resolve configuration path for build dependencies (#4707)
fd02100 chore(release): new release (#4705)
a653b02 fix: use a new create-webpack-app package name (#4704)
173e4bf chore(release): new release (#4703)
c033657 ci: avoid extra step
fd28679 fix: support file protocol in configuration options (#4702)
37e4270 chore: normalize package.json (#4700)
d5290e3 ci: fix
0b116f7 chore(release): new release (#4679)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for webpack-cli since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

socket-security · 2026-03-17T19:44:27Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@typescript-eslint/parser@8.57.0 ⏵ 8.57.1
@typescript-eslint/eslint-plugin@8.57.0 ⏵ 8.57.1	⁺¹	⁺¹
@types/node@25.4.0 ⏵ 25.5.0	⁺¹	⁺¹
webpack-cli@6.0.1 ⏵ 7.0.2	⁺⁴		^-1

View full report

Copilot

Pull request overview

This Dependabot PR updates development tooling dependencies used to build, lint, and bundle the VS Code extension.

Changes:

Bump @types/node to ^25.5.0
Bump @typescript-eslint/eslint-plugin to ^8.57.1 (and lockfile-resolved @typescript-eslint/* packages accordingly)
Bump webpack-cli to ^7.0.2 (major)

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File	Description
package.json	Updates devDependency versions for Node typings, TypeScript ESLint plugin, and webpack-cli.
package-lock.json	Refreshes the lockfile to reflect the updated dependency graph and new tooling engine requirements.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

SoulPancake · 2026-03-19T14:31:02Z

@dependabot update

dependabot · 2026-03-19T14:31:06Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

SoulPancake · 2026-03-19T14:31:43Z

@dependabot recreate

curfew-marathon · 2026-03-19T16:10:31Z

@dependabot recreate

Siddhant-K-code · 2026-03-23T16:22:01Z

@dependabot update

dependabot · 2026-03-23T16:22:05Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Siddhant-K-code · 2026-03-23T16:22:24Z

@dependabot recreate

dependabot · 2026-03-23T16:23:38Z

Dependabot attempted to update this pull request, but because the branch dependabot/npm_and_yarn/dependencies-4357ae2daf is protected it was unable to do so.

dependabot · 2026-03-23T16:23:39Z

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 17, 2026

dependabot Bot requested a review from a team as a code owner March 17, 2026 19:43

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 17, 2026

dependabot Bot requested review from Copilot and removed request for Copilot March 17, 2026 19:43

Copilot AI review requested due to automatic review settings March 19, 2026 12:51

Copilot AI reviewed Mar 19, 2026

View reviewed changes

Comment thread package.json

Comment thread package.json

dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-4357ae2daf branch from 66af269 to 06aeb61 Compare March 19, 2026 14:39

dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-4357ae2daf branch from 06aeb61 to a512a92 Compare March 19, 2026 16:13

Merge branch 'main' into dependabot/npm_and_yarn/dependencies-4357ae2daf

b23231b

Siddhant-K-code changed the title ~~build(deps-dev): bump the dependencies group with 4 updates~~ fix: build(deps-dev) - bump the dependencies group with 4 updates Mar 23, 2026

Siddhant-K-code approved these changes Mar 23, 2026

View reviewed changes

Siddhant-K-code added this pull request to the merge queue Mar 23, 2026

Merged via the queue into main with commit 80cc65f Mar 23, 2026
17 of 19 checks passed

Siddhant-K-code deleted the dependabot/npm_and_yarn/dependencies-4357ae2daf branch March 23, 2026 16:23

openfga-releaser-bot Bot mentioned this pull request Jul 7, 2026

release: v0.2.27 #558

Merged

Uh oh!

Conversation

dependabot Bot commented on behalf of github Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

❤️ Thank You

8.57.1 (2026-03-16)

🩹 Fixes

❤️ Thank You

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

❤️ Thank You

8.57.1 (2026-03-16)

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Major Changes

Patch Changes

7.0.2

Patch Changes

7.0.1

Patch Changes

7.0.0

Major Changes

Patch Changes

Uh oh!

socket-security Bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

SoulPancake commented Mar 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 19, 2026

Uh oh!

SoulPancake commented Mar 19, 2026

Uh oh!

curfew-marathon commented Mar 19, 2026

Uh oh!

Siddhant-K-code commented Mar 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 23, 2026

Uh oh!

Siddhant-K-code commented Mar 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 23, 2026

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Mar 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

dependabot Bot commented on behalf of github Mar 17, 2026 •

edited

Loading

socket-security Bot commented Mar 17, 2026 •

edited

Loading