chore(deps-dev): bump the dependencies group with 5 updates by dependabot[bot] · Pull Request #514 · openfga/vscode-ext

dependabot · 2026-04-21T19:44:03Z

Bumps the dependencies group with 5 updates:

Package	From	To
@typescript-eslint/eslint-plugin	`8.58.2`	`8.59.0`
@typescript-eslint/parser	`8.58.2`	`8.59.0`
@vscode/vsce	`3.8.0`	`3.9.1`
prettier	`3.8.2`	`3.8.3`
webpack	`5.106.1`	`5.106.2`

Updates @typescript-eslint/eslint-plugin from 8.58.2 to 8.59.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.59.0

8.59.0 (2026-04-20)

🚀 Features

eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#11789)

❤️ Thank You

Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.59.0 (2026-04-20)

🚀 Features

eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#11789)

❤️ Thank You

Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

ea9ae4f chore(release): publish 8.59.0
cfca550 feat(eslint-plugin): [no-unnecessary-type-assertion] report more cases based ...
6d599b4 chore(eslint-plugin): switch auto-generated test cases to hand-written in ret...
33c8169 chore: fix cspell violations in code blocks (#12167)
See full diff in compare view

Updates @typescript-eslint/parser from 8.58.2 to 8.59.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.59.0

8.59.0 (2026-04-20)

🚀 Features

eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#11789)

❤️ Thank You

Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.59.0 (2026-04-20)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

ea9ae4f chore(release): publish 8.59.0
See full diff in compare view

Updates @vscode/vsce from 3.8.0 to 3.9.1

Release notes

Sourced from @vscode/vsce's releases.

v3.9.1

Changes:

#1266: fix: module type mismatch

This list of changes was auto generated.

v3.9.1-0

Changes:

#1266: fix: module type mismatch

This list of changes was auto generated.

v3.9.0

Changes:

#1263: fix: build regressions in 3.8.1

#1261: Add override for serialize-javascript

This list of changes was auto generated.

v3.8.2-1

Changes:

#1263: fix: build regressions in 3.8.1

This list of changes was auto generated.

v3.8.2-0

Changes:

#1261: Add override for serialize-javascript

This list of changes was auto generated.

v3.8.1

Changes:

... (truncated)

Commits

98cca9e fix: module type mismatch (#1266)
9329b35 fix: build regressions in 3.8.1 (#1263)
165b0f2 Add override for serialize-javascript (#1261)
7d124ab chore: update @azure/identity to 4.13.1 and modernize TypeScript/Node.js conf...
See full diff in compare view

Updates prettier from 3.8.2 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @kovsu)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

Commits

d7108a7 Release 3.8.3
177f908 Prevent trailing comma in SCSS if() function (#18471)
1cd4066 Release @prettier/plugin-oxc@0.1.4
a8700e2 Update oxc-parser to v0.125.0
752157c Fix tests
053fd41 Bump Prettier dependency to 3.8.2
904c636 Clean changelog_unreleased
dc1f7fc Update dependents count
See full diff in compare view

Updates webpack from 5.106.1 to 5.106.2

Release notes

Sourced from webpack's releases.

v5.106.2

Patch Changes

CSS @import now inherits the parent module's exportType, so a file configured as "text" correctly creates a style tag when @imported by a "style" parent. (by @xiaoxiaojx in #20838)

Make asset modules available in JS context when referenced from both CSS and a lazily compiled JS chunk. (by @xiaoxiaojx in #20801)

Include missing generator options in hash to ensure persistent cache invalidation when configuration changes (CssGenerator exportsOnly, JsonGenerator JSONParse, WebAssemblyGenerator mangleImports). (by @xiaoxiaojx in #20821)

Fix || default value handling in ProgressPlugin and ManifestPlugin that incorrectly overrode user-provided falsy values (e.g. modules: false, entries: false, entrypoints: false). (by @xiaoxiaojx in #20823)

Migrate from mime-types to mime-db. (by @alexander-akait in #20812)

Handle @charset at-rules in CSS modules. (by @alexander-akait in #20831)

Marked all experimental options in types. (by @alexander-akait in #20814)

Changelog

Sourced from webpack's changelog.

5.106.2

Patch Changes

CSS @import now inherits the parent module's exportType, so a file configured as "text" correctly creates a style tag when @imported by a "style" parent. (by @xiaoxiaojx in #20838)

Make asset modules available in JS context when referenced from both CSS and a lazily compiled JS chunk. (by @xiaoxiaojx in #20801)

Include missing generator options in hash to ensure persistent cache invalidation when configuration changes (CssGenerator exportsOnly, JsonGenerator JSONParse, WebAssemblyGenerator mangleImports). (by @xiaoxiaojx in #20821)

Fix || default value handling in ProgressPlugin and ManifestPlugin that incorrectly overrode user-provided falsy values (e.g. modules: false, entries: false, entrypoints: false). (by @xiaoxiaojx in #20823)

Migrate from mime-types to mime-db. (by @alexander-akait in #20812)

Handle @charset at-rules in CSS modules. (by @alexander-akait in #20831)

Marked all experimental options in types. (by @alexander-akait in #20814)

Commits

0d7e3e0 chore(release): new release (#20815)
d5df118 chore(deps): bump actions/cache in the dependencies group (#20839)
5f0874b fix: make asset modules available in JS when referenced from CSS and lazy JS ...
b63ab37 chore(deps): bump test/test262-cases in the dependencies group (#20792)
313dfc5 ci: improve time for windows (#20840)
a553f61 test: update test262 (#20841)
1ef747c fix: CSS @import should inherit parent's exportType over parser config (#20838)
485d4ce chore(deps): update open-cli (#20834)
46042b9 chore(deps): no outdated strip-ansi (#20835)
8c7700b fix: handle @charset at-rules in CSS modules
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

socket-security · 2026-04-21T19:54:23Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@typescript-eslint/parser@8.58.2 ⏵ 8.59.0
webpack@5.106.1 ⏵ 5.106.2	^-5	⁺¹	⁺¹
@typescript-eslint/eslint-plugin@8.58.2 ⏵ 8.59.0	⁺¹	⁺¹
prettier@3.8.2 ⏵ 3.8.3	⁺¹	⁺¹	⁺¹
@vscode/vsce@3.8.0 ⏵ 3.9.1	⁺³	⁺¹	⁺¹

View full report

Copilot

Pull request overview

This PR updates the root dev dependency set (and lockfile) for the VS Code extension workspace, keeping lint/format/build tooling current.

Changes:

Bump @typescript-eslint/eslint-plugin to ^8.59.0 (lockfile resolves parser/tooling to 8.59.0).
Bump publishing/formatting/build tooling: @vscode/vsce to ^3.9.1, prettier to ^3.8.3, webpack to ^5.106.2.
Refresh package-lock.json to reflect the updated dependency graph (including webpack dependency shifts).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates root devDependency versions for linting/packaging/formatting/build.
package-lock.json	Updates resolved versions and transitive deps to match the new devDependency set.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 21, 2026

Copilot AI review requested due to automatic review settings April 21, 2026 19:44

dependabot Bot requested a review from a team as a code owner April 21, 2026 19:44

dependabot Bot removed the request for review from Copilot April 21, 2026 19:44

Merge branch 'main' into dependabot/npm_and_yarn/dependencies-cabc36968b

0b9492f

Copilot AI review requested due to automatic review settings April 22, 2026 02:44

curfew-marathon enabled auto-merge April 22, 2026 02:45

Copilot started reviewing on behalf of curfew-marathon April 22, 2026 02:45 View session

Copilot AI reviewed Apr 22, 2026

View reviewed changes

Comment thread package.json

curfew-marathon approved these changes Apr 27, 2026

View reviewed changes

curfew-marathon added this pull request to the merge queue Apr 27, 2026

Merged via the queue into main with commit 263b0de Apr 27, 2026
20 checks passed

curfew-marathon deleted the dependabot/npm_and_yarn/dependencies-cabc36968b branch April 27, 2026 00:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the dependencies group with 5 updates#514

chore(deps-dev): bump the dependencies group with 5 updates#514
curfew-marathon merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dependencies-cabc36968b

dependabot Bot commented on behalf of github Apr 21, 2026

Uh oh!

socket-security Bot commented Apr 21, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 21, 2026

v8.59.0

8.59.0 (2026-04-20)

🚀 Features

❤️ Thank You

8.59.0 (2026-04-20)

🚀 Features

❤️ Thank You

v8.59.0

8.59.0 (2026-04-20)

🚀 Features

❤️ Thank You

8.59.0 (2026-04-20)

v3.9.1

Changes:

v3.9.1-0

Changes:

v3.9.0

Changes:

v3.8.2-1

Changes:

v3.8.2-0

Changes:

v3.8.1

Changes:

3.8.3

3.8.3

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

v5.106.2

Patch Changes

5.106.2

Patch Changes

Uh oh!

socket-security Bot commented Apr 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

socket-security Bot commented Apr 21, 2026 •

edited

Loading