Skip to content

Bump the dev-dependencies group with 7 updates - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-e97f745171
Closed

Bump the dev-dependencies group with 7 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-e97f745171

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the dev-dependencies group with 7 updates:

Package From To
typescript 5.9.3 7.0.2
vite 8.1.5 8.2.0
magicast 0.5.3 0.5.4
@types/react 19.2.17 19.2.18
@types/react-dom 19.2.3 19.2.4
vue-tsc 3.3.8 3.3.9
@vue/language-core 3.3.8 3.3.9

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates vite from 8.1.5 to 8.2.0

Release notes

Sourced from vite's releases.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.0 (2026-07-30)

Features

  • add input to server.fs.allow (#23035) (95a3cda)
  • bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
  • bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
  • config: include column in config incompatibility location (#23064) (8a24572)
  • dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

  • bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
  • deps: update all non-major dependencies (#23069) (4c07b74)
  • hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
  • importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
  • module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
  • server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
  • support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

  • config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

8.2.0-beta.0 (2026-07-22)

Features

  • add input option (#22642) (9beae37)
  • config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)
  • css: export PostCSS config type for type-safe configs (#22792) (302c755)
  • dev: label network URLs with their interface name (#22830) (78accc4)
  • optimizer: support aube lockfile (#22813) (6319827)
  • optimizer: support nub lockfile (#22891) (65d3604)
  • update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)
  • wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

Performance Improvements

... (truncated)

Commits

Updates magicast from 0.5.3 to 0.5.4

Release notes

Sourced from magicast's releases.

v0.5.4

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • ea6470c chore: release v0.5.4
  • f8b3656 chore: update coverage
  • 205a95b chore(deps): upgrade dependencies and re-vendor recast to 0.23.18 (#170)
  • 42dd47d fix: handle standalone comments in builders.raw (#164)
  • 84cd035 fix: preserve inner comment when adding a property to an empty object (#165)
  • See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

Updates vue-tsc from 3.3.8 to 3.3.9

Release notes

Sourced from vue-tsc's releases.

v3.3.9

language-core

language-service

  • fix: preserve trailing modifiers when completing in the middle of a directive (#6133) - Thanks to @​lazerg!
  • fix: only replace current directive modifier on completion - Thanks to @​KazariEX!
  • fix: preserve current modifier when filtering completion duplicates - Thanks to @​KazariEX!

component-meta

workspace

  • feat: migrate build and tests to typescript-native-bridge (#6129)

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.9 (2026-07-31)

component-meta

language-core

language-service

  • fix: preserve trailing modifiers when completing in the middle of a directive (#6133) - Thanks to @​lazerg!
  • fix: only replace current directive modifier on completion - Thanks to @​KazariEX!
  • fix: preserve current modifier when filtering completion duplicates - Thanks to @​KazariEX!

workspace

  • feat: migrate build and tests to typescript-native-bridge (#6129)
Commits
  • 51617b9 v3.3.9 (#6138)
  • 9d08c43 feat(language-core): check unused generic type parameters (#6137)
  • c99eb00 fix(component-meta): keep getProgramAndFile free of side effects (#6136)
  • 00ce7ec feat(component-meta): expose runtime values of enum members in schema (#6131)
  • c4e58ea feat: migrate build and tests to typescript-native-bridge (#6129)
  • See full diff in compare view

Updates @vue/language-core from 3.3.8 to 3.3.9

Release notes

Sourced from @​vue/language-core's releases.

v3.3.9

language-core

language-service

  • fix: preserve trailing modifiers when completing in the middle of a directive (#6133) - Thanks to @​lazerg!
  • fix: only replace current directive modifier on completion - Thanks to @​KazariEX!
  • fix: preserve current modifier when filtering completion duplicates - Thanks to @​KazariEX!

component-meta

workspace

  • feat: migrate build and tests to typescript-native-bridge (#6129)

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from @​vue/language-core's changelog.

3.3.9 (2026-07-31)

component-meta

language-core

language-service

  • fix: preserve trailing modifiers when completing in the middle of a directive (#6133) - Thanks to @​lazerg!
  • fix: only replace current directive modifier on completion - Thanks to @​KazariEX!
  • fix: preserve current modifier when filtering completion duplicates - Thanks to @​KazariEX!

workspace

  • feat: migrate build and tests to typescript-native-bridge (#6129)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group with 7 updates
02daa9d 
Bumps the dev-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.2.0` |
| [magicast](https://github.com/unjs/magicast) | `0.5.3` | `0.5.4` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.8` | `3.3.9` |
| [@vue/language-core](https://github.com/vuejs/language-tools/tree/HEAD/packages/language-core) | `3.3.8` | `3.3.9` |


Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vite` from 8.1.5 to 8.2.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite)

Updates `magicast` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/unjs/magicast/releases)
- [Changelog](https://github.com/unjs/magicast/blob/main/CHANGELOG.md)
- [Commits](unjs/magicast@v0.5.3...v0.5.4)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `vue-tsc` from 3.3.8 to 3.3.9
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.9/packages/tsc)

Updates `@vue/language-core` from 3.3.8 to 3.3.9
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.9/packages/language-core)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: magicast
  dependency-version: 0.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vue-tsc
  dependency-version: 3.3.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@vue/language-core"
  dependency-version: 3.3.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates skip-changeset PR needs no changeset / release labels Aug 4, 2026
@socket-security

socket-security Bot commented Aug 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​types/​react-dom@​19.2.41001007590100
Added@​types/​react@​19.2.181001007994100
Addedvite@​8.2.0991008298100
Addedtypescript@​7.0.29910089100100
Addedmagicast@​0.5.410010010090100
Addedvue-tsc@​3.3.91001009197100
Added@​vue/​language-core@​3.3.910010010097100

View full report

@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 11, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-e97f745171 branch August 11, 2026 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates skip-changeset PR needs no changeset / release

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants