Skip to content

build(deps): bump the npm group with 7 updates - #111

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-175ca97fc0
Open

build(deps): bump the npm group with 7 updates#111
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-175ca97fc0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 7 updates:

Package From To
gulp-replace 1.1.3 1.1.4
luxon 2.5.2 3.7.2
@11ty/eleventy 2.0.0 3.1.6
del 6.0.0 8.0.1
gulp 4.0.2 5.0.1
gulp-purgecss 4.1.3 8.0.0
gulp-rev-all 3.0.0 5.1.0

Updates gulp-replace from 1.1.3 to 1.1.4

Release notes

Sourced from gulp-replace's releases.

1.1.4

  • Permit any version of @​types/node #134
Commits

Updates luxon from 2.5.2 to 3.7.2

Changelog

Sourced from luxon's changelog.

3.7.2 (2025-07-09)

  • Fix ES6 packaging

3.7.1 (2025-07-09)

  • Revert change in ES6 packaging

3.7.0 (2025-07-09)

  • Added showZeros option to Duration#toHuman
  • Added Duration#removeZeros method.
  • Added rounding option to DateTime#toRelative
  • Added precision option to ISO formatting methods
  • Added signMode option to Duration#toFormat
  • Allow escaping single quotes in format strings
  • Improve output of Info.months and Info.monthsFormat for ja locale
  • Accept lowercase t as a separator in ISO strings
  • Accept lowercase z as an offset in ISO strings
  • Reject non-finite numbers where previously only NaN was rejected
  • Improve the documentation for Interval
  • Added a dark theme for the documentation site

3.6.1 (2025-03-31)

  • Add Fallback for minimalDays being removed from Intl.WeekInfo
  • Fix various caches when JS keywords like "constructor" are used for names

3.6.0 (2025-03-25)

  • Add Interval.lastDateTime
  • Fix a bug that could cause wrong timezone calculations when multiple timezones are in use

3.5.0 (2024-08-03)

  • Various performance improvements
  • throwOnInvalid causes the constructor to throw if the year is invalid

3.4.4 (2023-11-12)

  • Localized week support (#1454)
  • Added custom inspect for Node (#1526)
  • Fix sorting in Interval.splitAt (#1524)

3.4.3 (2023-09-05)

  • Fixes another regression from 3.4.0 (#1496)

3.4.2 (2023-08-26)

  • Fixes regression from 3.4.1 (#1493)

3.4.1 (2023-08-23)

  • Fixes for regressions from 3.4.0 (#1482 and #1488)

... (truncated)

Commits
  • 4262a38 Version 3.7.2
  • 738144d Fix the build ES6 code having the wrong file extension and use it in package....
  • 3b2f374 Release version 3.7.1
  • c67ee7d Revert "build: use the es6 build for ESM exports (#1707)"
  • cfa58a2 Release version 3.7.0
  • 7d379cc Fix unsupported signDisplay value
  • 4e81ef9 Implement "signMode" on Duration#toFormat
  • 5aa55da Improve documentation regarding Interval's half-openness
  • b188e10 add dark theme to docs (#1713)
  • cf67025 build: use the es6 build for ESM exports (#1707)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by diesieben07, a new releaser for luxon since your current version.


Updates @11ty/eleventy from 2.0.0 to 3.1.6

Release notes

Sourced from @​11ty/eleventy's releases.

Eleventy v3.1.6: Everybody wants to do Maintenance

  • Fixes Node 26 module.register deprecation warning shown in console #4283 (fixed in v4 alphas in #4271)
  • Minor dependency upgrades for npm audit fixes
    • liquidjs upgrade from 1.25.0 to 1.27.0
    • markdown-it upgrade from 14.1.1 to 14.2.0
  • Adds Node 26 to CI for v3 branch
  • Opt out of package manager cache for GitHub Actions CI release workflow (hardening security)

Milestone: https://github.com/11ty/eleventy/milestone/52?closed=1 Full Changelog: 11ty/buildawesome@v3.1.5...v3.1.6

Eleventy v3.1.5: Dependable Dependencies

  • No Eleventy core code changes, this release is for minor version dependency updates on 3.x only
  • Small improvements to HTML Relative Passthrough Copy tests

Full Changelog: 11ty/buildawesome@v3.1.2...v3.1.5

Eleventy v3.1.4

⚠️ This immutable release failed to publish. Please use the identical Eleventy v3.1.5 instead!

Eleventy v3.1.3

⚠️ This immutable release failed to publish. Please use the identical Eleventy v3.1.5 instead!

Eleventy v3.1.2 (we fixed 15 more things)

Try it out in your project

npm install @11ty/eleventy@latest

Release notes

  • Bug fix: issue with Computed Data with Array -> Object -> Template Strings #3850
  • Bug fix:Workaround dependency bug in tinyglobby when using ../ for input directory (and/or passthrough copy) #3854 #3862
  • Bug fix: issue with absolute path for input directory resulting in incorrect output directory #3853
  • Bug fix: issue with pagination over collections missing the all collection #3860
  • Bug fix: Custom template engines should inherit aliased the parent cacheable value for advanced control of internal cache (related docs). Fixes issues with JavaScript import cache busting in Windows #3824 #3832
  • Bug fix: Server cache issue with newly created directory data file not picked up during --watch or --serve (on subsequent builds) #3569
  • Bug fix: Saving your Configuration file may keep the process open after ⌘+C or CTRL+C #3873
  • Bug fix: Incremental builds may result in templateRender has not yet initialized error after Configuration reset #3870
  • Bug fix: #3874 Config reset for dev server restart
  • Bug fix: #3875 #1525 numeric tags for collection names

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​11ty/eleventy since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates del from 6.0.0 to 8.0.1

Release notes

Sourced from del's releases.

v8.0.1

  • Internal changes.

sindresorhus/del@v8.0.0...v8.0.1

v8.0.0

Breaking

  • Require Node.js 18 (#161) e2e5b71

Improvements

  • Update dependencies (#161) e2e5b71

sindresorhus/del@v7.1.0...v8.0.0

v7.1.0

  • Add path to onProgress event (#155) f5d31e6

sindresorhus/del@v7.0.0...v7.1.0

v7.0.0

Breaking

  • Require Node.js 14 (#143) 106d7d8
  • This package is now pure ESM. Please read this.
  • Moved from a default export to named exports:
    • require('del') → import {deleteAsync} from 'del'
    • require('del').sync → import {deleteSync} from 'del'

sindresorhus/del@v6.1.1...v7.0.0

v6.1.1

  • Fix ProgressData#deletedCount (#142) 7b4c881

sindresorhus/del@v6.1.0...v6.1.1

v6.1.0

sindresorhus/del@v6.0.0...v6.1.0

Commits

Updates gulp from 4.0.2 to 5.0.1

Release notes

Sourced from gulp's releases.

gulp v5.0.1

Bug Fixes

  • Avoid globbing before read stream is opened (#2839) (19122f3)
  • Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)
  • Support top-level await on Node 22.12+ (#2836) (04b4a74)

gulp v5.0.0

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

  • Drop support for Node.js <10.13
  • Default stream encoding to UTF-8
  • Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!
  • Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream
  • All globs and paths are normalized to unix-like filepaths
  • Only allow JS variants for .gulp.* config files
  • Removed support for alpha releases of v4 from gulp-cli
  • Removed the --verify flag
  • Renamed the --require flag to --preload to avoid conflicting with Node.js flags
  • Removed many legacy and deprecated loaders
  • Upgrade to chokidar v3
  • Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data
  • Stop using process.umask() to make directories, instead falling back to Node's default mode
  • Throw on non-function, non-string option coercers
  • Drop support of Node.js snake_case flags
  • Use a Symbol for attaching the gulplog namespace to the store
  • Use a Symbol for attaching the gulplog store to the global
  • Use sha256 to hash the v8flags cache into a filename

Features

  • Streamlined the dependency tree
  • Switch all streams implementation to Streamx
  • Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation
  • Implement translation support for all CLI messages and all messages passing through gulplog
  • Allow users to customize or remove the timestamp from their logs
  • Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5
  • Added support for gulpile.cjs and gulpfile.mjs
  • Add support for swc, esbuild, sucrase, and mdx loaders
  • Provide an ESM export (#2760) (b00de68)
  • Support sourcemap handling on streaming Vinyl contents

... (truncated)

Changelog

Sourced from gulp's changelog.

5.0.1 (2025-06-01)

Bug Fixes

  • Avoid globbing before read stream is opened (#2839) (19122f3)
  • Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)
  • Support top-level await on Node 22.12+ (#2836) (04b4a74)

5.0.0 (2024-03-29)

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

  • Drop support for Node.js <10.13
  • Default stream encoding to UTF-8
  • Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!
  • Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream
  • All globs and paths are normalized to unix-like filepaths
  • Only allow JS variants for .gulp.* config files
  • Removed support for alpha releases of v4 from gulp-cli
  • Removed the --verify flag
  • Renamed the --require flag to --preload to avoid conflicting with Node.js flags
  • Removed many legacy and deprecated loaders
  • Upgrade to chokidar v3
  • Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data
  • Stop using process.umask() to make directories, instead falling back to Node's default mode
  • Throw on non-function, non-string option coercers
  • Drop support of Node.js snake_case flags
  • Use a Symbol for attaching the gulplog namespace to the store
  • Use a Symbol for attaching the gulplog store to the global
  • Use sha256 to hash the v8flags cache into a filename

Features

  • Streamlined the dependency tree
  • Switch all streams implementation to Streamx
  • Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation
  • Implement translation support for all CLI messages and all messages passing through gulplog
  • Allow users to customize or remove the timestamp from their logs
  • Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5
  • Added support for gulpile.cjs and gulpfile.mjs
  • Add support for swc, esbuild, sucrase, and mdx loaders
  • Provide an ESM export (#2760) (b00de68)
  • Support sourcemap handling on streaming Vinyl contents

... (truncated)

Commits

Updates gulp-purgecss from 4.1.3 to 8.0.0

Release notes

Sourced from gulp-purgecss's releases.

v8.0.0

BREAKING CHANGES

  • Revert the changes from v7.0.2 that modified the import of the PostCSS plugin. This was causing issues (see #1295). The PostCSS plugin should now be imported via a default import:
import purgeCSSPlugin from '@fullhuman/postcss-purgecss';

Features

  • feat: add --preserve-paths option to CLI for maintaining folder hierarchy (aa5ac9d), closes #377

Bug fixes

  • fix: for code scanning alert no. 5: Incomplete multi-character sanitization (#1403) (3f39411), closes #1403
  • fix: enhance setOptions to support both ES modules and CommonJS config exports (4ad48c4), closes #1340
  • fix: fix glob expression illegal operations on directories (#1308) (b27293f), closes #1308 #1266
  • fix: update import statements for purgeCSSPlugin in documentation and source files (e5cbce2), closes #1295
  • fix(#995): preserve relative paths in source maps (4f6c4d9), closes #995
  • fix: enhance keyframes handling to preserve animations referenced via CSS variables (076c027), closes #478

New Contributors

Full Changelog: FullHuman/purgecss@v7.0.2...v8.0.0

v7.0.2

Bug Fixes

  • fix: fix issue where pseudo classes like :where, :not, :is were always removed at root level (89024ce), closes #1282 #978
  • build: add named export for postcss plugin (87d15b7), closes #1263

Features

  • feat(purgecss-from-pug): returns ExtractorResultDetailed instead of selectors (fb51dc6)

BREAKING CHANGES

  • PostCSS plugin should now be imported via purgeCSSPlugin
import { purgeCSSPlugin } from '@fullhuman/postcss-purgecss';
  • drop support for node 18.

Other

  • build(deps-dev): update dependencies
  • build(deps): update dependencies

... (truncated)

Changelog

Sourced from gulp-purgecss's changelog.

8.0.0

BREAKING CHANGES

  • Revert the changes from v7.0.2 that modified the import of the PostCSS plugin. This was causing issues (see #1295. The PostCSS plugin should now be imported via a default import:
import purgeCSSPlugin from '@fullhuman/postcss-purgecss';

Features

  • feat: add --preserve-paths option to CLI for maintaining folder hierarchy (aa5ac9d), closes #377

Bug fixes

  • fix: for code scanning alert no. 5: Incomplete multi-character sanitization (#1403) (3f39411), closes #1403
  • fix: enhance setOptions to support both ES modules and CommonJS config exports (4ad48c4), closes #1340
  • fix: fix glob expression illegal operations on directories (#1308) (b27293f), closes #1308 #1266
  • fix: update import statements for purgeCSSPlugin in documentation and source files (e5cbce2), closes #1295
  • fix(#995): preserve relative paths in source maps (4f6c4d9), closes #995
  • fix: enhance keyframes handling to preserve animations referenced via CSS variables (076c027), closes #478

Changes (commits since v7.0.2)

  • Add French documentation for PurgeCSS guides and plugins (b9f4309)
  • fix for "Workflow does not contain permissions" (eb6d3b8)
  • fix(#995): preserve relative paths in source maps (4f6c4d9), closes #995
  • v8.0.0 (2e315a5)
  • chore: format (6c0c84e)
  • chore: format (7ad2fb7)
  • docs: add breaking changes for v7 about named export for postcss plugin (7d86fb5)
  • docs: add changelog for v7 (bafb8a1)
  • docs: add SEO enhancements and sitemap support to documentation (6505b7d)
  • docs: remove outdated TailwindCSS sponsor image (3949790)
  • docs: update sponsorship images and remove outdated link (bdf87e4)
  • docs: use named export for postcss plugin (8eb027d)
  • feat: add --preserve-paths option to CLI for maintaining folder hierarchy (aa5ac9d), closes #377
  • feat: enhance keyframes handling to preserve animations referenced via CSS variables (076c027), closes #478
  • build(deps-dev): bump @​eslint/eslintrc from 3.1.0 to 3.2.0 (#1303) (8308cdb), closes #1303
  • build(deps-dev): bump @​eslint/js from 9.11.1 to 9.39.0 (#1391) (2348f82), closes #1391
  • build(deps-dev): bump @​rollup/plugin-typescript from 12.1.0 to 12.1.2 (#1312) (9387a9b), closes #1312
  • build(deps-dev): bump @​rollup/plugin-typescript from 12.1.2 to 12.3.0 (#1407) (5902189), closes #1407
  • build(deps-dev): bump @​types/glob from 8.0.0 to 9.0.0 (#1408) (aa30f0f), closes #1408
  • build(deps-dev): bump @​types/jest from 29.5.13 to 29.5.14 (#1301) (cb3d1c4), closes #1301
  • build(deps-dev): bump @​types/node from 22.13.0 to 25.0.3 (#1406) (ca242ee), closes #1406
  • build(deps-dev): bump @​types/node from 22.8.6 to 22.13.0 (#1322) (0d9f594), closes #1322
  • build(deps-dev): bump @​typescript-eslint/parser from 8.14.0 to 8.46.2 (#1390) (67b5b0c), closes #1390
  • build(deps-dev): bump @​vuepress/plugin-search (#1320) (00251a7), closes #1320
  • build(deps-dev): bump @​vuepress/plugin-search (#1372) (307f8d2), closes #1372
  • build(deps-dev): bump @​vuepress/theme-default (#1405) (047f0ea), closes #1405

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for gulp-purgecss since your current version.


Updates gulp-rev-all from 3.0.0 to 5.1.0

Release notes

Sourced from gulp-rev-all's releases.

v5.0.2

Full Changelog: smysnk/gulp-rev-all@v5.0.0...v5.0.2

v5.0.0

Full Changelog: smysnk/gulp-rev-all@v4.1.2...v5.0.0

v4.1.1

Changed

  • Replaced ESLint with Biome as the linting stack.
  • Updated CI to run npm test on Node 16/18 with modern GitHub Actions versions.
  • Kept gulp pinned at 4.0.2 and applied targeted dependency overrides to reduce transitive risk.
  • Made reference hash calculation deterministic by sorting hash inputs before digesting.
  • Fixed recursive hash traversal stack handling to avoid order-dependent cycle behavior.
  • Updated reference replacement logic to preserve original filenames when targets are configured not to be renamed.

Fixed

  • Fixed extensionless TypeScript references not being rewritten (./module where target is .ts).
  • Fixed non-deterministic revision hashes caused by unordered reference iteration.
  • Fixed incorrect hashed .html target rewrites when dontRenameFile is enabled for HTML.

Added

  • Added Biome configuration (biome.json).
  • Added regression tests for:
    • deterministic hash regardless of child-reference key order,
    • preserving unhashed references for files excluded by dontRenameFile,
    • rewriting extensionless TypeScript imports.
  • Added TypeScript fixture files for extensionless import coverage:
    • test/fixtures/config1/script/app-typescript.ts
    • test/fixtures/config1/script/short-ts-only.ts
    • test/fixtures/config1/script/short-ts-duplicate-only.ts

Removed

  • Removed ESLint config stack (eslint.config.js and related ESLint dependencies).

v4.0.0

  • Convert to ESM (breaking change)
  • Require Node 16+ (breaking change)
  • Update dependencies
  • Replace through2 with easy-transform-stream
  • Replace 'merge' with spread operator
  • Clean up code (remove IIFE)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the npm group with 7 updates
621329a 
Bumps the npm group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [gulp-replace](https://github.com/lazd/gulp-replace) | `1.1.3` | `1.1.4` |
| [luxon](https://github.com/moment/luxon) | `2.5.2` | `3.7.2` |
| [@11ty/eleventy](https://github.com/11ty/eleventy) | `2.0.0` | `3.1.6` |
| [del](https://github.com/sindresorhus/del) | `6.0.0` | `8.0.1` |
| [gulp](https://github.com/gulpjs/gulp) | `4.0.2` | `5.0.1` |
| [gulp-purgecss](https://github.com/FullHuman/purgecss) | `4.1.3` | `8.0.0` |
| [gulp-rev-all](https://github.com/smysnk/gulp-rev-all) | `3.0.0` | `5.1.0` |


Updates `gulp-replace` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/lazd/gulp-replace/releases)
- [Commits](lazd/gulp-replace@v1.1.3...v1.1.4)

Updates `luxon` from 2.5.2 to 3.7.2
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](moment/luxon@2.5.2...3.7.2)

Updates `@11ty/eleventy` from 2.0.0 to 3.1.6
- [Release notes](https://github.com/11ty/eleventy/releases)
- [Changelog](https://github.com/11ty/buildawesome/blob/main/docs/release-instructions.md)
- [Commits](11ty/buildawesome@v2.0.0...v3.1.6)

Updates `del` from 6.0.0 to 8.0.1
- [Release notes](https://github.com/sindresorhus/del/releases)
- [Commits](sindresorhus/del@v6.0.0...v8.0.1)

Updates `gulp` from 4.0.2 to 5.0.1
- [Release notes](https://github.com/gulpjs/gulp/releases)
- [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md)
- [Commits](gulpjs/gulp@v4.0.2...v5.0.1)

Updates `gulp-purgecss` from 4.1.3 to 8.0.0
- [Release notes](https://github.com/FullHuman/purgecss/releases)
- [Changelog](https://github.com/FullHuman/purgecss/blob/main/CHANGELOG.md)
- [Commits](FullHuman/purgecss@v4.1.3...v8.0.0)

Updates `gulp-rev-all` from 3.0.0 to 5.1.0
- [Release notes](https://github.com/smysnk/gulp-rev-all/releases)
- [Commits](https://github.com/smysnk/gulp-rev-all/commits)

---
updated-dependencies:
- dependency-name: gulp-replace
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: luxon
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@11ty/eleventy"
  dependency-version: 3.1.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: del
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: gulp
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: gulp-purgecss
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: gulp-rev-all
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants