Skip to content

chore(deps-dev): bump the dependencies group with 3 updates#500

Merged
rhamzeh merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-6cac48d21a
Apr 1, 2026
Merged

chore(deps-dev): bump the dependencies group with 3 updates#500
rhamzeh merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-6cac48d21a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 3 updates: @typescript-eslint/eslint-plugin, @typescript-eslint/parser and ovsx.

Updates @typescript-eslint/eslint-plugin from 8.57.2 to 8.58.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.58.0

8.58.0 (2026-03-30)

🚀 Features

  • support TypeScript 6 (#12124)

🩹 Fixes

  • eslint-plugin: crash in no-unnecessary-type-arguments (#12163)
  • eslint-plugin: [no-extraneous-class] handle index signatures (#12142)
  • eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#12161)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.58.0 (2026-03-30)

🚀 Features

  • support TypeScript 6 (#12124)

🩹 Fixes

  • eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#12161)
  • eslint-plugin: [no-extraneous-class] handle index signatures (#12142)
  • eslint-plugin: crash in no-unnecessary-type-arguments (#12163)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 4933417 chore(release): publish 8.58.0
  • 5a9bd36 fix(eslint-plugin): [prefer-regexp-exec] avoid fixing unknown RegExp flags (#...
  • edb90eb fix(eslint-plugin): [no-extraneous-class] handle index signatures (#12142)
  • 8cde2d0 feat: support TypeScript 6 (#12124)
  • 1bf86c9 fix(eslint-plugin): crash in no-unnecessary-type-arguments (#12163)
  • e9cc25a docs(eslint-plugin): fix typo (#12155)
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.57.2 to 8.58.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.58.0

8.58.0 (2026-03-30)

🚀 Features

  • support TypeScript 6 (#12124)

🩹 Fixes

  • eslint-plugin: crash in no-unnecessary-type-arguments (#12163)
  • eslint-plugin: [no-extraneous-class] handle index signatures (#12142)
  • eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#12161)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.58.0 (2026-03-30)

🚀 Features

  • support TypeScript 6 (#12124)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates ovsx from 0.10.9 to 0.10.10

Release notes

Sourced from ovsx's releases.

CLI v0.10.10

Dependencies

  • Bump ajv from 6.12.6 to 6.14.0 (#1632)
  • Bump ajv from 8.17.1 to 8.18.0
  • Bump tar from 7.5.7 to 7.5.11 (#1681)
  • Bump minimatch to 3.1.5, 9.0.9 and 10.2.4
  • Bump underscore from 1.13.6 to 1.13.8 (#1656)
  • Bump flatted from 3.3.1 to 3.4.2 (#1703)
Changelog

Sourced from ovsx's changelog.

[v0.10.10] (Mar. 2026)

Dependencies

  • Bump ajv from 6.12.6 to 6.14.0 (#1632)
  • Bump ajv from 8.17.1 to 8.18.0
  • Bump tar from 7.5.7 to 7.5.11 (#1681)
  • Bump minimatch to 3.1.5, 9.0.9 and 10.2.4
  • Bump underscore from 1.13.6 to 1.13.8 (#1656)
  • Bump flatted from 3.3.1 to 3.4.2 (#1703)
Commits
  • a367a40 chore: fix repo links after transfer
  • b6e70ef chore: prepare release for cli 0.10.10
  • 01ad56b chore: prepare release for cli 0.10.10
  • f9cc4c1 build(deps): bump flatted from 3.3.1 to 3.4.2 in /cli (#1703)
  • 313cef0 build(deps): bump tar from 7.5.10 to 7.5.11 in /cli (#1681)
  • a971a9c chore: update changelog wrt tar update in cli
  • e605e7f build(deps): bump tar from 7.5.9 to 7.5.10 in /cli (#1666)
  • a600c08 build(deps): bump underscore from 1.13.6 to 1.13.8 in /cli (#1656)
  • 294f2dd chore(deps): bump minimatch in cli
  • 671ef30 chore(deps): bump used afv from 8.17.1 to 8.18.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [ovsx](https://github.com/eclipse-openvsx/openvsx/tree/HEAD/cli).


Updates `@typescript-eslint/eslint-plugin` from 8.57.2 to 8.58.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.57.2 to 8.58.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser)

Updates `ovsx` from 0.10.9 to 0.10.10
- [Release notes](https://github.com/eclipse-openvsx/openvsx/releases)
- [Changelog](https://github.com/eclipse-openvsx/openvsx/blob/main/cli/CHANGELOG.md)
- [Commits](https://github.com/eclipse-openvsx/openvsx/commits/cli-0.10.10/cli)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.58.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.58.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ovsx
  dependency-version: 0.10.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 31, 2026
Copilot AI review requested due to automatic review settings March 31, 2026 19:44
@dependabot
dependabot Bot requested a review from a team as a code owner March 31, 2026 19:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 31, 2026
@dependabot
dependabot Bot removed the request for review from Copilot March 31, 2026 19:44
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​typescript-eslint/​parser@​8.57.2 ⏵ 8.58.09910071 +198 +1100
Updated@​typescript-eslint/​eslint-plugin@​8.57.2 ⏵ 8.58.099 +110080 +198 +1100
Updatedovsx@​0.10.9 ⏵ 0.10.10981009090 -470

View full report

@socket-security

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
License policy violation: npm ovsx under EPL-2.0

License: EPL-2.0 - the applicable license policy does not allow this license (4) (npm metadata)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/check-license.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/check-license.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/create-namespace.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/create-namespace.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/create-namespace.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/verify-pat.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/verify-pat.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/verify-pat.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/get.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/get.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/main.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/main.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/util.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/util.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/get.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/main.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/util.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/check-license.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/create-namespace-options.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/create-namespace-options.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/create-namespace-options.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/registry.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/login-options.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/logout.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/store.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/zip.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/login-options.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/login.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/logout.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/store.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/zip.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/verify-pat-options.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/verify-pat-options.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/verify-pat-options.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/publish.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/index.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/registry.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/get-options.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/get-options.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/publish-options.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/registry-options.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/registry-options.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/get-options.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/publish-options.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/registry-options.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/pat.d.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/pat.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/index.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/lib/index.js)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/registry.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/src/publish.ts)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/package.json)

License: EPL-2.0 - the applicable license policy does not allow this license (4) (package/LICENSE)

From: package-lock.jsonnpm/[email protected]

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@rhamzeh
rhamzeh added this pull request to the merge queue Apr 1, 2026
Merged via the queue into main with commit 0b11dec Apr 1, 2026
14 checks passed
@rhamzeh
rhamzeh deleted the dependabot/npm_and_yarn/dependencies-6cac48d21a branch April 1, 2026 02:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant