chore(deps-dev): bump the dependencies group with 7 updates by dependabot[bot] · Pull Request #509 · openfga/vscode-ext

dependabot · 2026-04-14T19:44:17Z

Bumps the dependencies group with 7 updates:

Package	From	To
@types/node	`25.5.2`	`25.6.0`
@typescript-eslint/eslint-plugin	`8.58.0`	`8.58.2`
@typescript-eslint/parser	`8.58.0`	`8.58.2`
@vscode/vsce	`3.7.1`	`3.8.0`
ovsx	`0.10.10`	`0.10.11`
prettier	`3.8.1`	`3.8.2`
webpack	`5.105.4`	`5.106.1`

Updates @types/node from 25.5.2 to 25.6.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.58.0 to 8.58.2

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

❤️ Thank You

Abhijeet Singh @cseas

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.58.2 (2026-04-13)

🩹 Fixes

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

remove tsbuildinfo cache file from published packages (#12187)

❤️ Thank You

Abhijeet Singh @cseas

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.1 (2026-04-08)

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

90c2803 chore(release): publish 8.58.2
7c9e06f fix(eslint-plugin): [no-unnecessary-condition] use assignability checks in ch...
dae1732 chore(eslint-plugin): switch auto-generated test cases to hand-written in unb...
be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
5311ed3 chore(release): publish 8.58.1
c3f8ed5 fix(eslint-plugin): [no-unused-vars] fix false negative for type predicate pa...
e372a66 Revert: feat(eslint-plugin): [no-unnecessary-type-arguments] report inferred ...
See full diff in compare view

Updates @typescript-eslint/parser from 8.58.0 to 8.58.2

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

❤️ Thank You

Abhijeet Singh @cseas

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

❤️ Thank You

Abhijeet Singh @cseas

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.1 (2026-04-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

90c2803 chore(release): publish 8.58.2
be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
5311ed3 chore(release): publish 8.58.1
See full diff in compare view

Updates @vscode/vsce from 3.7.1 to 3.8.0

Release notes

Sourced from @vscode/vsce's releases.

v3.8.0

Changes:

#1258: fix: run npm audit fix

#1255: Bump brace-expansion

#1253: Bump picomatch from 2.3.1 to 2.3.2

#1252: Bump yauzl from 2.10.0 to 3.2.1

#1250: Bump underscore from 1.13.1 to 1.13.8

#1249: Bump minimatch

#1243: Bump markdown-it from 14.1.0 to 14.1.1

#1244: Bump qs from 6.14.1 to 6.14.2

#1239: Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1

#1238: Bump lodash from 4.17.21 to 4.17.23

#1234: Bump qs from 6.11.0 to 6.14.1

#1233: Return non-zero exit code when signature verification fails

#1232: Audit npm package

#1228: Bump jws

This list of changes was auto generated.

v3.7.2-13

Changes:

#1258: fix: run npm audit fix

This list of changes was auto generated.

v3.7.2-12

Changes:

#1255: Bump brace-expansion

This list of changes was auto generated.

v3.7.2-11

Changes:

#1253: Bump picomatch from 2.3.1 to 2.3.2

This list of changes was auto generated.

... (truncated)

Commits

cbdd401 fix: run npm audit fix to update package-lock.json (#1258)
13c5fa8 Merge pull request #1255 from microsoft/dependabot/npm_and_yarn/multi-580a7c2f10
c6f98dc Bump brace-expansion
01da009 Bump picomatch from 2.3.1 to 2.3.2 (#1253)
bb899fa Merge pull request #1252 from microsoft/dependabot/npm_and_yarn/yauzl-3.2.1
3f4fa96 Bump yauzl from 2.10.0 to 3.2.1
72f3196 Merge pull request #1250 from microsoft/dependabot/npm_and_yarn/underscore-1....
c651312 Bump underscore from 1.13.1 to 1.13.8
82cd05b Merge pull request #1249 from microsoft/dependabot/npm_and_yarn/multi-3189fdc835
f8e9271 Bump minimatch
Additional commits viewable in compare view

Updates ovsx from 0.10.10 to 0.10.11

Release notes

Sourced from ovsx's releases.

CLI v0.10.11

Dependencies

Bump picomatch from 2.3.1 to 2.3.2 (#1719)

Bump picomatch from 4.0.3 to 4.0.4

Bump brace-expansion from 1.1.12 to 1.1.13 (#1725)

Bump brace-expansion from 2.0.2 to 2.0.3

Bump brace-expansion from 5.0.4 to 5.0.5

Bump lodash from 4.17.23 to 4.18.1 (#1745)

Changelog

Sourced from ovsx's changelog.

[v0.10.11] (13/04/2026)

Dependencies

Bump picomatch from 2.3.1 to 2.3.2 (#1719)

Bump picomatch from 4.0.3 to 4.0.4

Bump brace-expansion from 1.1.12 to 1.1.13 (#1725)

Bump brace-expansion from 2.0.2 to 2.0.3

Bump brace-expansion from 5.0.4 to 5.0.5

Bump lodash from 4.17.23 to 4.18.1 (#1745)

Commits

a057355 chore: prepare for cli-0.10.11 release
1ceaaa0 chore: prepare for cli-0.10.11 release
65856ae chore(deps): bump brace-expansion dependencies
b2e9721 build(deps): bump lodash from 4.17.23 to 4.18.1 in /cli (#1745)
86f3667 build(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /cli (#1725)
5304c24 chore(deps): also bump picomatch 4.0.3 to 4.0.4
f032b1c build(deps): bump picomatch from 2.3.1 to 2.3.2 in /cli (#1719)
d571efb chore: bump for next dev cycle
See full diff in compare view

Updates prettier from 3.8.1 to 3.8.2

Release notes

Sourced from prettier's releases.

3.8.2

Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@switch (foo) {
@case (1) {}
@default never;
}

arrow function and instanceof expressions.

<!-- Input -->
@let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.1 -->
@let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.2 -->
@let fn = (a) => (a ? 1 : 2);
{{ fn(a instanceof b) }}

Commits

b31557c Release 3.8.2
96bbaed Support Angular v21.2 (#18722)
881360b Support default never in Angular v21.2 (#19034)
07d6724 Bump Prettier dependency to 3.8.1
8b4a53a Clean changelog_unreleased
See full diff in compare view

Updates webpack from 5.105.4 to 5.106.1

Release notes

Sourced from webpack's releases.

v5.106.1

Patch Changes

Fix two ES5-environment regressions in the anonymous default export .name fix-up: the generated code referenced an undeclared __WEBPACK_DEFAULT_EXPORT__ binding causing ReferenceError, and used Reflect.defineProperty which is not available in pre-ES2015 runtimes. The fix-up now references the real assignment target and uses Object.defineProperty / Object.getOwnPropertyDescriptor. (by @xiaoxiaojx in #20796)

Prevent !important from being renamed as a local identifier in CSS modules. (by @xiaoxiaojx in #20798)

Use compiler context instead of module context for CSS modules local ident hashing to avoid hash collisions when files with the same name exist in different directories. (by @xiaoxiaojx in #20799)

v5.106.0

Minor Changes

Add exportType: "style" for CSS modules to inject styles into DOM via HTMLStyleElement, similar to style-loader functionality. (by @xiaoxiaojx in #20579)

Add context option support for VirtualUrlPlugin (by @xiaoxiaojx in #20449)

The context for the virtual module. A string path. Defaults to 'auto', which will try to resolve the context from the module id.

Support custom context path for resolving relative imports in virtual modules

Add examples demonstrating context usage and filename customization

Generate different CssModule instances for different exportType values. (by @xiaoxiaojx in #20590)

Added the localIdentHashFunction option to configure the hash function to be used for hashing. (by @alexander-akait in #20694) Additionally, the localIdentName option can now be a function.

Added support for destructuring assignment require in cjs, allowing for tree shaking. (by @ahabhgk in #20548)

Added the validate option to enable/disable validation in webpack/plugins/loaders, also implemented API to make it inside plugins. (by @xiaoxiaojx in #20275)

Added source support for async WASM modules. (by @magic-akari in #20364)

Patch Changes

Add a static getSourceBasicTypes method to the Module class to prevent errors across multiple versions. (by @xiaoxiaojx in #20614)

Included fragment groups in the conflicting order warning for CSS. (by @aryanraj45 in #20660)

Avoid rendering unused top-level __webpack_exports__ declaration when output ECMA module library. (by @hai-x in #20669)

Fixed resolving in CSS modules. (by @alexander-akait in #20771)

Allow external modules place in async chunks when output ECMA module. (by @hai-x in #20662)

Implement deprecate flag in schema for better TypeScript support to show which options are already deprecated by the configuration (by @bjohansebas in #20432)

Set .name to "default" for anonymous default export functions and classes per ES spec (by @xiaoxiaojx in #20773)

Hash entry chunks after runtime chunks to prevent stale content hash references in watch mode (by @xiaoxiaojx in #20724)

Fix multiple bugs and optimizations in CSS modules: correct third code point position in walkCssTokens number detection, fix multiline CSS comment regex, fix swapped :import/:export error message, fix comma callback incorrectly popping balanced stack, fix cache comparison missing array length check, fix match.index mutation side effect, move publicPathAutoRegex to module scope, precompute merged callbacks in consumeUntil, simplify redundant ternary in CssGenerator, fix typo GRID_TEMPLATE_ARES, remove duplicate grid-column-start, and merge duplicate getCompilationHooks calls. (by @xiaoxiaojx in #20648)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.106.1

Patch Changes

Fix two ES5-environment regressions in the anonymous default export .name fix-up: the generated code referenced an undeclared __WEBPACK_DEFAULT_EXPORT__ binding causing ReferenceError, and used Reflect.defineProperty which is not available in pre-ES2015 runtimes. The fix-up now references the real assignment target and uses Object.defineProperty / Object.getOwnPropertyDescriptor. (by @xiaoxiaojx in #20796)

Prevent !important from being renamed as a local identifier in CSS modules. (by @xiaoxiaojx in #20798)

Use compiler context instead of module context for CSS modules local ident hashing to avoid hash collisions when files with the same name exist in different directories. (by @xiaoxiaojx in #20799)

5.106.0

Minor Changes

Add exportType: "style" for CSS modules to inject styles into DOM via HTMLStyleElement, similar to style-loader functionality. (by @xiaoxiaojx in #20579)

Add context option support for VirtualUrlPlugin (by @xiaoxiaojx in #20449)

The context for the virtual module. A string path. Defaults to 'auto', which will try to resolve the context from the module id.

Support custom context path for resolving relative imports in virtual modules

Add examples demonstrating context usage and filename customization

Generate different CssModule instances for different exportType values. (by @xiaoxiaojx in #20590)

Added the localIdentHashFunction option to configure the hash function to be used for hashing. (by @alexander-akait in #20694) Additionally, the localIdentName option can now be a function.

Added support for destructuring assignment require in cjs, allowing for tree shaking. (by @ahabhgk in #20548)

Added the validate option to enable/disable validation in webpack/plugins/loaders, also implemented API to make it inside plugins. (by @xiaoxiaojx in #20275)

Added source support for async WASM modules. (by @magic-akari in #20364)

Patch Changes

Add a static getSourceBasicTypes method to the Module class to prevent errors across multiple versions. (by @xiaoxiaojx in #20614)

Included fragment groups in the conflicting order warning for CSS. (by @aryanraj45 in #20660)

Avoid rendering unused top-level __webpack_exports__ declaration when output ECMA module library. (by @hai-x in #20669)

Fixed resolving in CSS modules. (by @alexander-akait in #20771)

Allow external modules place in async chunks when output ECMA module. (by @hai-x in #20662)

Implement deprecate flag in schema for better TypeScript support to show which options are already deprecated by the configuration (by @bjohansebas in #20432)

Set .name to "default" for anonymous default export functions and classes per ES spec (by @xiaoxiaojx in #20773)

Hash entry chunks after runtime chunks to prevent stale content hash references in watch mode (by @xiaoxiaojx in #20724)

... (truncated)

Commits

a934b9b chore(release): new release (#20808)
ecb436b fix: use compiler context for CSS modules hash to avoid collisions (#20799)
c0e8cf4 fix: prevent !important from being renamed in CSS modules (#20798)
f8d274b fix: anonymous default export name fix-up in ES5 environment (#20796)
e370b76 chore(deps-dev): bump the dependencies group with 5 updates (#20790)
8774a01 chore(release): new release (#20593)
cc66616 fix: add @deprecated to methods
7cdc173 feat: support source phase import for WebAssembly modules (#20364)
0b60f1c chore(members): update to match @webpack/core-wg (#20784)
955a68c test: generate snapshots per stats test case (#20785)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

socket-security · 2026-04-14T19:44:43Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@typescript-eslint/parser@8.58.0 ⏵ 8.58.2
@typescript-eslint/eslint-plugin@8.58.0 ⏵ 8.58.2	⁺¹	⁺¹
@types/node@25.5.2 ⏵ 25.6.0
webpack@5.105.4 ⏵ 5.106.1
ovsx@0.10.10 ⏵ 0.10.11	⁺¹		⁺⁶
prettier@3.8.1 ⏵ 3.8.2		⁺¹
@vscode/vsce@3.7.1 ⏵ 3.8.0	⁺¹	⁺¹

View full report

socket-security · 2026-04-14T19:44:44Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		License policy violation: npm `ovsx` under EPL-2.0 License: EPL-2.0 - The applicable license policy does not permit this license (5) (npm metadata) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/check-license.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/check-license.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/create-namespace.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/verify-pat.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/main.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/main.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/util.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/util.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/get.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/main.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/util.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/check-license.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/create-namespace-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/create-namespace-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/login-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/logout.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/store.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/zip.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/login-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/login.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/logout.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/store.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/zip.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/verify-pat-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/verify-pat-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/publish.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/index.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/get-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/publish-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry-options.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/registry-options.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/get-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/publish-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/registry-options.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/pat.d.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/pat.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/index.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/lib/index.js) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/registry.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/src/publish.ts) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/package.json) License: EPL-2.0 - The applicable license policy does not permit this license (5) (package/LICENSE) From: package-lock.json → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Copilot

Pull request overview

Updates root-level dev tooling dependencies (TypeScript/ESLint, packaging/publishing, formatting, and bundling) and refreshes the npm lockfile to match the new resolved versions.

Changes:

Bump devDependencies: @types/node, @typescript-eslint/eslint-plugin, @vscode/vsce, ovsx, prettier, and webpack.
Update package-lock.json with the newly resolved versions/transitive deps (notably @typescript-eslint/*, undici-types, and yauzl).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates declared root devDependency versions for several tooling packages.
package-lock.json	Updates resolved versions and transitive dependency graph to match the new tooling versions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-16T21:46:01Z

    "@types/webpack-env": "^1.18.8",
-    "@typescript-eslint/eslint-plugin": "^8.58.0",
+    "@typescript-eslint/eslint-plugin": "^8.58.2",
    "@typescript-eslint/parser": "^8.56.0",


@typescript-eslint/eslint-plugin@^8.58.2 declares a peer dependency on @typescript-eslint/parser@^8.58.2 (see package-lock). The current @typescript-eslint/parser range (^8.56.0) still allows versions that would violate that peer constraint (e.g., 8.56.x), which can lead to peer-dependency warnings/errors depending on the installer/settings. Consider bumping the declared parser range to ^8.58.2 (and regenerating the lockfile) to make the minimum compatible version explicit.

Suggested change

"@typescript-eslint/parser": "^8.56.0",

"@typescript-eslint/parser": "^8.58.2",

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 14, 2026

dependabot Bot requested a review from a team as a code owner April 14, 2026 19:44

Copilot AI review requested due to automatic review settings April 14, 2026 19:44

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 14, 2026

dependabot Bot removed the request for review from Copilot April 14, 2026 19:44

curfew-marathon approved these changes Apr 16, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/dependencies-de9bddbe58

2e2e132

Copilot AI review requested due to automatic review settings April 16, 2026 21:43

curfew-marathon added this pull request to the merge queue Apr 16, 2026

Copilot started reviewing on behalf of curfew-marathon April 16, 2026 21:43 View session

Merged via the queue into main with commit 96ad1ff Apr 16, 2026
11 of 14 checks passed

curfew-marathon deleted the dependabot/npm_and_yarn/dependencies-de9bddbe58 branch April 16, 2026 21:43

Copilot AI reviewed Apr 16, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the dependencies group with 7 updates#509

chore(deps-dev): bump the dependencies group with 7 updates#509
curfew-marathon merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dependencies-de9bddbe58

dependabot Bot commented on behalf of github Apr 14, 2026

Uh oh!

socket-security Bot commented Apr 14, 2026

Uh oh!

socket-security Bot commented Apr 14, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	"@typescript-eslint/parser": "^8.56.0",
	"@typescript-eslint/parser": "^8.58.2",

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 14, 2026

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

❤️ Thank You

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

8.58.1 (2026-04-08)

🩹 Fixes

❤️ Thank You

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

❤️ Thank You

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

8.58.1 (2026-04-08)

v3.8.0

Changes:

v3.7.2-13

Changes:

v3.7.2-12

Changes:

v3.7.2-11

Changes:

CLI v0.10.11

Dependencies

[v0.10.11] (13/04/2026)

Dependencies

3.8.2

3.8.2

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

v5.106.1

Patch Changes

v5.106.0

Minor Changes

Patch Changes

5.106.1

Patch Changes

5.106.0

Minor Changes

Patch Changes

Uh oh!

socket-security Bot commented Apr 14, 2026

Uh oh!

socket-security Bot commented Apr 14, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)