Skip to content

chore(deps-dev): bump the development-dependencies group with 4 updates#735

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/development-dependencies-ebc8305bda
Open

chore(deps-dev): bump the development-dependencies group with 4 updates#735
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/development-dependencies-ebc8305bda

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps the development-dependencies group with 4 updates: @stylistic/stylelint-plugin, eslint-plugin-jsdoc, stylelint and vite.

Updates @stylistic/stylelint-plugin from 5.0.1 to 5.1.0

Release notes

Sourced from @​stylistic/stylelint-plugin's releases.

Release v5.1.0

Added

  • The no-multiple-whitespaces rule, which disallows multiple whitespaces between property values and function arguments.

Fixed

  • The dependencies have now been updated to versions that include security fixes.
Changelog

Sourced from @​stylistic/stylelint-plugin's changelog.

[5.1.0] — 2026–03–28

Added

  • The no-multiple-whitespaces rule, which disallows multiple whitespaces between property values and function arguments.

Fixed

  • The dependencies have now been updated to versions that include security fixes.
Commits

Updates eslint-plugin-jsdoc from 62.8.0 to 62.8.1

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v62.8.1

62.8.1 (2026-03-25)

Bug Fixes

  • valid-types: allow required default names; fixes #1675 (bca557b)
Commits
  • bca557b fix(valid-types): allow required default names; fixes #1675
  • 78335ff chore(deps): bump picomatch from 2.3.1 to 2.3.2
  • 7bc2525 chore(deps): bump undici from 6.23.0 to 6.24.0
  • See full diff in compare view

Updates stylelint from 17.5.0 to 17.6.0

Release notes

Sourced from stylelint's releases.

17.6.0

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

  • Added: support for extending units to languageOptions (#9166) (@​jeddy3).
  • Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
  • Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).
Changelog

Sourced from stylelint's changelog.

17.6.0 - 2026-03-26

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

  • Added: support for extending units to languageOptions (#9166) (@​jeddy3).
  • Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
  • Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).
Commits
  • f74ceaf Release 17.6.0 (#9180)
  • 895f7f2 Add support for extending units to languageOptions (#9166)
  • dd7231b Refactor to replace imurmurhash with node:crypto (#9177)
  • 5b6b024 Bump picomatch (#9178)
  • 7e25378 Bump @​csstools/css-syntax-patches-for-csstree from 1.0.29 to 1.1.1 in the css...
  • 9edeff4 Group csstree and @csstools/css-syntax-patches-for-csstree in dependabot ...
  • 2f7c0ca Bump actions/download-artifact from 8.0.0 to 8.0.1 (#9167)
  • 59f310d Bump write-file-atomic from 7.0.0 to 7.0.1 (#9169)
  • ab2ffcb Bump @​vscode/windows-process-tree from 0.6.3 to 0.7.0 (#9170)
  • a9f3e5b Bump lint-staged from 16.3.3 to 16.4.0 (#9171)
  • Additional commits viewable in compare view

Updates vite from 8.0.2 to 8.0.3

Release notes

Sourced from vite's releases.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.3 (2026-03-26)

Features

Bug Fixes

  • html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
  • module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
  • module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
  • optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
  • ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

Tests

Commits
  • 6a34ac3 fix(deps): update all non-major dependencies (#21096)
  • 02ceaec chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#21099)
  • 572aaca release: v7.2.2
  • 728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
  • a532e68 release: v7.2.1
  • 82d2d6c fix(worker): some worker asset was missing (#21074)
  • f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
  • 8293de0 release: v7.2.0
  • 2833c55 fix(types): add undefined to optional properties for exactOptionalProperties ...
  • e3a6a83 chore(deps): update rolldown-related dependencies (#21047)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 4 updates: [@stylistic/stylelint-plugin](https://github.com/stylelint-stylistic/stylelint-stylistic), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc), [stylelint](https://github.com/stylelint/stylelint) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@stylistic/stylelint-plugin` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/stylelint-stylistic/stylelint-stylistic/releases)
- [Changelog](https://github.com/stylelint-stylistic/stylelint-stylistic/blob/main/CHANGELOG.md)
- [Commits](stylelint-stylistic/stylelint-stylistic@v5.0.1...v5.1.0)

Updates `eslint-plugin-jsdoc` from 62.8.0 to 62.8.1
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.8.0...v62.8.1)

Updates `stylelint` from 17.5.0 to 17.6.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.5.0...17.6.0)

Updates `vite` from 8.0.2 to 8.0.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.3/packages/vite)

---
updated-dependencies:
- dependency-name: "@stylistic/stylelint-plugin"
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: stylelint
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 6, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Apr 6, 2026

⚠️ No Changeset found

Latest commit: 024c92b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedvite@​8.0.2 ⏵ 8.0.394 +110082 +198 -1100
Updated@​stylistic/​stylelint-plugin@​5.0.1 ⏵ 5.1.0100 +110093 +187 +1100
Updatedeslint-plugin-jsdoc@​62.8.0 ⏵ 62.8.197 +110010096 +1100
Updatedstylelint@​17.5.0 ⏵ 17.6.098 +110010096 -1100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants