Skip to content

Bump the npm-dependencies group across 1 directory with 6 updates #887

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Bump the npm-dependencies group across 1 directory with 6 updates #887

wants to merge 2 commits into from
+994 −530

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025 •
edited
Loading

Bumps the npm-dependencies group with 5 updates in the / directory:

Package From To
esbuild 0.25.12 0.27.0
@cloudflare/vitest-pool-workers 0.9.14 0.10.5
@vitest/coverage-istanbul 3.2.4 4.0.8
@vitest/coverage-v8 3.2.4 4.0.8
vitest 3.2.4 4.0.8

Updates esbuild from 0.25.12 to 0.27.0

Release notes

Sourced from esbuild's releases.

v0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

  • Use Uint8Array.fromBase64 if available (#4286)

    With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

  • Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

    This raises the operating system requirements for running esbuild:

    • Linux: now requires a kernel version of 3.2 or later
    • macOS: now requires macOS 12 (Monterey) or later

v0.26.0

  • Enable trusted publishing (#4281)

    GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

    Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

Changelog

Sourced from esbuild's changelog.

0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

  • Use Uint8Array.fromBase64 if available (#4286)

    With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

  • Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

    This raises the operating system requirements for running esbuild:

    • Linux: now requires a kernel version of 3.2 or later
    • macOS: now requires macOS 12 (Monterey) or later

0.26.0

  • Enable trusted publishing (#4281)

    GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

    Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.


Updates @cloudflare/vitest-pool-workers from 0.9.14 to 0.10.5

Release notes

Sourced from @​cloudflare/vitest-pool-workers's releases.

@​cloudflare/vitest-pool-workers@​0.10.5

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.4

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.3

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.1

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.0

Minor Changes

Patch Changes

Changelog

Sourced from @​cloudflare/vitest-pool-workers's changelog.

0.10.5

Patch Changes

0.10.4

Patch Changes

0.10.3

Patch Changes

0.10.2

Patch Changes

0.10.1

Patch Changes

0.10.0

Minor Changes

Patch Changes

... (truncated)

Commits

Updates @vitest/coverage-istanbul from 3.2.4 to 4.0.8

Release notes

Sourced from @​vitest/coverage-istanbul's releases.

v4.0.8

   🐞 Bug Fixes

    View changes on GitHub

v4.0.7

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.6

   🐞 Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vitest/coverage-istanbul since your current version.


Updates @vitest/coverage-v8 from 3.2.4 to 4.0.8

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.8

   🐞 Bug Fixes

    View changes on GitHub

v4.0.7

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.6

   🐞 Bug Fixes

... (truncated)

Commits
  • 46bfd09 chore: release v4.0.8
  • da8b93a fix(deps): update all non-major dependencies (#8636)
  • 1f5d9d2 chore: release v4.0.7
  • 2e7b2b8 chore: release v4.0.6
  • e3b7775 fix(coverage): prevent filtering out virtual files before remapping to source...
  • ed9fc71 chore: release v4.0.5
  • 9b75ec5 chore: release v4.0.4
  • ca1766f chore: release v4.0.3
  • 07bc56a chore: release v4.0.2
  • 4a28faa chore: release v4.0.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vitest/coverage-v8 since your current version.


Updates vitest from 3.2.4 to 4.0.8

Release notes

Sourced from vitest's releases.

v4.0.8

   🐞 Bug Fixes

    View changes on GitHub

v4.0.7

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.6

   🐞 Bug Fixes

... (truncated)

Commits
  • 46bfd09 chore: release v4.0.8
  • c79f47c fix(forks): do not fail with Windows Defender enabled (#8967)
  • 7ed99cd chore: remove unnecessery values() call for set (#8964)
  • 9a9323b chore(deps): update dependency @​antfu/eslint-config to v6 (#8832)
  • 46b3529 chore(deps): update dependency jsdom to v27 (#8700)
  • 65292c3 docs: update structure (#8625)
  • da8b93a fix(deps): update all non-major dependencies (#8636)
  • bcb132f fix: workaround noExternal merging bug on Vite 6 (#8950)
  • 1f5d9d2 chore: release v4.0.7
  • a1b7361 fix(jsdom): support URL.createObjectURL, FormData.set(prop, blob) (#8935)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.


Updates wrangler from 4.44.0 to 4.46.0

Release notes

Sourced from wrangler's releases.

[email protected]

Minor Changes

@dependabot
Bump the npm-dependencies group across 1 directory with 6 updates
2dcad4b 
Bumps the npm-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.12` | `0.27.0` |
| [@cloudflare/vitest-pool-workers](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vitest-pool-workers) | `0.9.14` | `0.10.5` |
| [@vitest/coverage-istanbul](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul) | `3.2.4` | `4.0.8` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `3.2.4` | `4.0.8` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.0.8` |



Updates `esbuild` from 0.25.12 to 0.27.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.12...v0.27.0)

Updates `@cloudflare/vitest-pool-workers` from 0.9.14 to 0.10.5
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vitest-pool-workers/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/[email protected]/packages/vitest-pool-workers)

Updates `@vitest/coverage-istanbul` from 3.2.4 to 4.0.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.8/packages/coverage-istanbul)

Updates `@vitest/coverage-v8` from 3.2.4 to 4.0.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.8/packages/coverage-v8)

Updates `vitest` from 3.2.4 to 4.0.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.8/packages/vitest)

Updates `wrangler` from 4.44.0 to 4.46.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@cloudflare/vitest-pool-workers"
  dependency-version: 0.10.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@vitest/coverage-istanbul"
  dependency-version: 4.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 4.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: wrangler
  dependency-version: 4.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 10, 2025
@dependabot dependabot bot requested a review from jbampton as a code owner November 10, 2025 12:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 10, 2025
@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Nov 10, 2025 •
edited
Loading

Deploying brisbanesocialchess with  Cloudflare Pages  Cloudflare Pages

Latest commit: fc360ac
Status:🚫  Build failed.

View logs

@github-actions
Copy link
Contributor

github-actions bot commented Nov 10, 2025

Thanks for your first pull request! We appreciate your contribution.

@socket-security
Copy link

socket-security bot commented Nov 10, 2025 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedesbuild@​0.25.12 ⏵ 0.27.099 +810074 +194 +1100
Updated@​cloudflare/​vitest-pool-workers@​0.9.14 ⏵ 0.8.699910076 -1100100
Updated@​cloudflare/​vitest-pool-workers@​0.9.14 ⏵ 0.10.599 +110078100100
Addedvitest@​3.2.4981007999100
Addedwrangler@​4.33.2981009496100
Updated@​vitest/​coverage-istanbul@​3.2.4 ⏵ 4.0.8100 +2100100 +34100 +2100
Updated@​vitest/​coverage-v8@​3.2.4 ⏵ 4.0.8100 +2100100 +29100 +2100

View full report

@deepsource-io
Copy link

deepsource-io bot commented Nov 10, 2025 •
edited
Loading

Here's the code health analysis summary for commits cb86043..fc360ac. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Python LogoPython✅ SuccessView Check ↗
DeepSource Secrets LogoSecrets✅ SuccessView Check ↗
DeepSource Shell LogoShell✅ SuccessView Check ↗
DeepSource Docker LogoDocker✅ SuccessView Check ↗
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗
💡 If you’re a repository administrator, you can configure the quality gates from the settings.

@jbampton jbampton self-assigned this Nov 10, 2025
@BaseMax
Copy link
Member

BaseMax commented Nov 11, 2025

CI/CD and some tests has been failed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jbampton jbampton Awaiting requested review from jbampton jbampton is a code owner

Assignees

@jbampton jbampton

Labels

backend dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code root

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@BaseMax @jbampton