Skip to content

chore(deps-dev): bump the tooling group across 1 directory with 7 updates - #10

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/tooling-78a9b6d84d
Closed

chore(deps-dev): bump the tooling group across 1 directory with 7 updates#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/tooling-78a9b6d84d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the tooling group with 7 updates in the / directory:

Package From To
@eslint-react/eslint-plugin 5.24.9 5.27.2
@cloudflare/workers-types 5.20261008.1 5.20261016.1
@types/bun 1.4.2 1.4.3
wrangler 4.149.0 4.151.0
@tanstack/router-plugin 1.168.42 1.168.46
@vitest/coverage-v8 5.0.3 5.0.5
shadcn 4.21.4 4.21.5

Updates @eslint-react/eslint-plugin from 5.24.9 to 5.27.2

Release notes

Sourced from @​eslint-react/eslint-plugin's releases.

v5.27.2 (2026-10-15)

What's Changed

🏗️ Internal

  • Added the missing @tsconfig/node20 and @types/node dependencies to the workspace packages. (#2040)
  • Bumped effect and @effect/platform-node to 4.0.5, import-integrity-lint to 1.3.1, and sort-package-json to 4.1.0. (#2040)

Full Changelog: Rel1cx/eslint-react@v5.27.1...v5.27.2

Attestation

https://github.com/Rel1cx/eslint-react/attestations/56222271

v5.27.1 (2026-10-15)

What's Changed

🐞 Fixes

  • Lifecycle methods defined as class properties (ex: componentDidMount = () => { this.setState(...) }, including type-expression-wrapped values) are now reported just like the method shorthand form. (#2039) Affected rules:
    • react-x/no-set-state-in-component-did-mount
    • react-x/no-set-state-in-component-did-update
    • react-x/no-set-state-in-component-will-update
  • Effect cleanups are now recognized when the useEffect call is nested in an outer return (ex: return useEffect(() => () => { ... })), so resources released there are no longer reported as leaked. (#2039) Affected rules:
    • react-web-api/no-leaked-event-listener
    • react-web-api/no-leaked-fetch
    • react-web-api/no-leaked-intersection-observer
    • react-web-api/no-leaked-interval
    • react-web-api/no-leaked-resize-observer
    • react-web-api/no-leaked-timeout

🏗️ Internal

  • @eslint-react/ast: added the Check.isFunctionOrClass and Check.isTypeOrChainExpression helpers; parent lookups across ast, core, and the rules are now bounded at enclosing function/class boundaries. (#2039)
  • @eslint-react/core: isUseEffectSetupCallback and isUseEffectCleanupCallback reimplemented on bounded parent lookups. (#2039)

Full Changelog: Rel1cx/eslint-react@v5.27.0...v5.27.1

Attestation

https://github.com/Rel1cx/eslint-react/attestations/56083726

v5.27.0 (2026-10-15)

What's Changed

... (truncated)

Changelog

Sourced from @​eslint-react/eslint-plugin's changelog.

v5.27.2 (2026-10-15)

🏗️ Internal

  • Added the missing @tsconfig/node20 and @types/node dependencies to the workspace packages. (#2040)
  • Bumped effect and @effect/platform-node to 4.0.5, import-integrity-lint to 1.3.1, and sort-package-json to 4.1.0. (#2040)

Full Changelog: Rel1cx/eslint-react@v5.27.1...v5.27.2

v5.27.1 (2026-10-15)

🐞 Fixes

  • Lifecycle methods defined as class properties (ex: componentDidMount = () => { this.setState(...) }, including type-expression-wrapped values) are now reported just like the method shorthand form. (#2039) Affected rules:
    • react-x/no-set-state-in-component-did-mount
    • react-x/no-set-state-in-component-did-update
    • react-x/no-set-state-in-component-will-update
  • Effect cleanups are now recognized when the useEffect call is nested in an outer return (ex: return useEffect(() => () => { ... })), so resources released there are no longer reported as leaked. (#2039) Affected rules:
    • react-web-api/no-leaked-event-listener
    • react-web-api/no-leaked-fetch
    • react-web-api/no-leaked-intersection-observer
    • react-web-api/no-leaked-interval
    • react-web-api/no-leaked-resize-observer
    • react-web-api/no-leaked-timeout

🏗️ Internal

  • @eslint-react/ast: added the Check.isFunctionOrClass and Check.isTypeOrChainExpression helpers; parent lookups across ast, core, and the rules are now bounded at enclosing function/class boundaries. (#2039)
  • @eslint-react/core: isUseEffectSetupCallback and isUseEffectCleanupCallback reimplemented on bounded parent lookups. (#2039)

Full Changelog: Rel1cx/eslint-react@v5.27.0...v5.27.1

v5.27.0 (2026-10-15)

🐞 Fixes

  • react-web-api/no-leaked-event-listener: cleanups returned through conditional expressions (ex: return cond ? () => window.removeEventListener(...) : null) are now recognized and no longer reported. (#2038)
  • react-web-api/no-leaked-fetch: effect setups wrapped in type expressions (ex: useEffect((() => { fetch(...) }) as any, [])) are now recognized. (#2038)
  • react-debug/function-component: computed string-literal displayName keys (ex: App["displayName"] = "...") are now recognized. (#2038)

📝 Documentation

  • Revised the rule implementation pattern guides and refined the core ideas and layer dependency model in the fact-based rule implementation docs. (#2034, #2035)

🏗️ Internal

  • @eslint-react/core: accuracy and consistency fixes in detection helpers. (#2038)
  • react-x: the custom tsl config now enforces the fact-based layer dependency order. (#2036)
  • Bumped react and react-dom to 19.3.1, and next to 16.4.1.

... (truncated)

Commits

Updates @cloudflare/workers-types from 5.20261008.1 to 5.20261016.1

Commits

Updates @types/bun from 1.4.2 to 1.4.3

Commits

Updates wrangler from 4.149.0 to 4.151.0

Release notes

Sourced from wrangler's releases.

[email protected]

Minor Changes

  • #16245 d6b1c82 Thanks @​WalshyDev! - Include source maps by default in wrangler build --experimental-cf-build-output

    Build Output now matches wrangler deploy and wrangler versions upload, which upload source maps by default, so Workers built for tools like cf get stack traces that point at the original source. Source maps that can't be resolved are skipped rather than failing the build. Set upload_source_maps = false to opt out.

Patch Changes

  • #16220 97b2fb1 Thanks @​FlorentCollin! - Support local D1 queries through the experimental d1_binding_jsrpc compatibility flag

    Local D1 bindings now implement the RPC query backend used by D1Database.query() and prepared-statement methods when the flag is enabled. Queries reuse local SQLite execution, including transactional batches, execution metadata, and session bookmarks, while bindings without the flag continue to use HTTP. Update the bundled workerd runtime to 1.20261012.1 and align the default compatibility date with that release.

  • Updated dependencies [f360829, 97b2fb1, 97b2fb1, acd2822]:

[email protected]

Minor Changes

  • #16231 091e5ec Thanks @​WalshyDev! - Upload source maps by default for wrangler deploy, wrangler versions upload and wrangler preview

    When upload_source_maps isn't set in config or via --upload-source-maps, Wrangler now generates and uploads source maps so stack traces in logs and wrangler tail point at your original source without extra setup. In this default mode, source maps that can't be resolved (for example inline data: maps or missing .map files from a custom build) are skipped rather than failing the upload. Setting upload_source_maps = true keeps the existing strict behaviour, and upload_source_maps = false (or --no-upload-source-maps for deploy and versions upload) opts out.

    wrangler build --experimental-cf-build-output is unchanged and still only includes source maps when upload_source_maps = true.

  • #16128 daae435 Thanks @​redsteadz! - Stop wrangler deploy, wrangler versions upload and wrangler preview in projects that build for the Cloudflare CLI (cf)

    If your project builds through cf, deploying it with Wrangler reads a different configuration, so it could update the wrong Worker or fail without explaining why. These commands now stop before uploading anything, name the .cloudflare/output directory they found, and tell you to run cf deploy instead. If that directory is just left over from an earlier build, deleting it restores the Wrangler workflow.

    Ordinary Wrangler projects are unaffected, and --dry-run still works on deploy and versions upload. This is a new guard for the experimental Build Output Specification rather than a fix, and it gives three stable commands a failure mode they did not have before, so it is a minor.

Patch Changes

  • #16161 fcf625d Thanks @​dario-piotrowicz! - Clarify the Worker not found error during CI deploy validation

    Wrangler now reports that the configured Worker could not be found in the account instead of incorrectly describing the failure as a name mismatch.

  • #16156 18f061c Thanks @​armancharan! - Ignore .wrangler writes in the dev assets watcher

    wrangler dev reloaded in a loop when assets.directory was the project root, because the assets watcher treated wrangler's own writes under .wrangler as asset changes and dropped in-flight requests. The watcher now ignores the project's .wrangler directory and dev.persist, except when that path is the assets directory.

  • #16025 61e07fd Thanks @​kohjunhao! - Fix optional Docker lookups printing Docker CLI errors during successful builds

    cf build looks for Container images left behind by earlier builds so it can remove them. This lookup is best effort, but when Docker could not be reached it still printed errors such as Cannot connect to the Docker daemon, even when the build succeeded and no image needed Docker. Docker commands whose output Wrangler reads no longer forward the Docker CLI's error output to the terminal. If one of these commands fails in a way that stops the command, the error message still includes the Docker CLI's output.

  • #16151 cafd3f9 Thanks @​DevVettel! - Time out the OAuth token request instead of waiting indefinitely

    The request that exchanges an authorization code or refresh token for an access token had no timeout, so a stalled connection (for example behind an HTTP proxy) could leave wrangler login hanging silently for many minutes after the browser step had succeeded. The request now gives up after 30 seconds and reports that the Cloudflare auth server could not be reached.

  • #15517 ea64ec4 Thanks @​xgame92! - Preserve binding options when provisioning resources through a redirected config

... (truncated)

Commits
  • b81efbc Version Packages (#16241)
  • d6b1c82 Generate source maps by default for Vite plugin Workers and Build Output (#16...
  • fb3d9c8 Version Packages (#16162)
  • 091e5ec [wrangler] Upload source maps by default (#16231)
  • ea64ec4 [wrangler] Preserve D1 migration paths during redirected provisioning (#15517)
  • d232454 [wrangler] Preserve public HTTPS response URLs behind TLS-terminating proxies...
  • 18f061c [wrangler] Ignore .wrangler writes in the dev assets watcher (#16156)
  • fdd4b53 [wrangler] Fix preview URL warning E2E snapshot (#16213)
  • fcf625d Clarify the Worker not found error during CI deploy validation (#16161)
  • 794855c [ci] Shorten test critical path and expose flaky retries (#16179)
  • Additional commits viewable in compare view

Updates @tanstack/router-plugin from 1.168.42 to 1.168.46

Release notes

Sourced from @​tanstack/router-plugin's releases.

@​tanstack/router-plugin@​1.168.46

Patch Changes

  • Updated dependencies [923d98b]:
    • @​tanstack/router-utils@​1.162.4
    • @​tanstack/router-generator@​1.167.44

@​tanstack/router-plugin@​1.168.45

Patch Changes

  • Updated dependencies [d6ba115]:
    • @​tanstack/router-core@​1.171.37
    • @​tanstack/react-router@​1.170.44
    • @​tanstack/router-generator@​1.167.43

@​tanstack/router-plugin@​1.168.44

Patch Changes

  • #8655 e66da18 - Remove redundant string excludes from the reference code-splitter transform filter to avoid unnecessary glob compilation in unplugin bundler adapters.

  • Updated dependencies [57bd1a9, 94d6d8e]:

    • @​tanstack/router-generator@​1.167.42
    • @​tanstack/router-core@​1.171.36
    • @​tanstack/react-router@​1.170.43
Changelog

Sourced from @​tanstack/router-plugin's changelog.

1.168.46

Patch Changes

  • Updated dependencies [923d98b]:
    • @​tanstack/router-utils@​1.162.4
    • @​tanstack/router-generator@​1.167.44

1.168.45

Patch Changes

  • Updated dependencies [d6ba115]:
    • @​tanstack/router-core@​1.171.37
    • @​tanstack/react-router@​1.170.44
    • @​tanstack/router-generator@​1.167.43

1.168.44

Patch Changes

  • #8655 e66da18 - Remove redundant string excludes from the reference code-splitter transform filter to avoid unnecessary glob compilation in unplugin bundler adapters.

  • Updated dependencies [57bd1a9, 94d6d8e]:

    • @​tanstack/router-generator@​1.167.42
    • @​tanstack/router-core@​1.171.36
    • @​tanstack/react-router@​1.170.43

1.168.43

Patch Changes

Commits

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates shadcn from 4.21.4 to 4.21.5

Release notes

Sourced from shadcn's releases.

[email protected]

Patch Changes

Changelog

Sourced from shadcn's changelog.

4.21.5

Patch Changes

Commits
  • 0023018 chore(release): version packages (#12194)
  • 7aa2110 fix(mcp): await the add command in search and list results (#12297)
  • 4407349 chore(deps): bump the deps group across 1 directory with 5 updates (#12214)
  • 2af71ac chore(deps): bump @​modelcontextprotocol/sdk from 1.26.0 to 1.31.0 (#12174)
  • cfb4cb6 chore(deps): bump undici from 7.29.0 to 7.29.1 (#12048)
  • dd34945 refactor(registry): move modules out of src/utils (#12192)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the tooling group across 1 directory with 7 upd…
2fc958b 
…ates

Bumps the tooling group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint-react/eslint-plugin](https://github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin) | `5.24.9` | `5.27.2` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20261008.1` | `5.20261016.1` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.2` | `1.4.3` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.149.0` | `4.151.0` |
| [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin) | `1.168.42` | `1.168.46` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.5` |
| [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.21.4` | `4.21.5` |



Updates `@eslint-react/eslint-plugin` from 5.24.9 to 5.27.2
- [Release notes](https://github.com/Rel1cx/eslint-react/releases)
- [Changelog](https://github.com/Rel1cx/eslint-react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Rel1cx/eslint-react/commits/v5.27.2/plugins/eslint-plugin)

Updates `@cloudflare/workers-types` from 5.20261008.1 to 5.20261016.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@types/bun` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `wrangler` from 4.149.0 to 4.151.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler)

Updates `@tanstack/router-plugin` from 1.168.42 to 1.168.46
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/[email protected]/packages/router-plugin)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `shadcn` from 4.21.4 to 4.21.5
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/[email protected]/packages/shadcn)

---
updated-dependencies:
- dependency-name: "@eslint-react/eslint-plugin"
  dependency-version: 5.27.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tooling
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20261016.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tooling
- dependency-name: "@types/bun"
  dependency-version: 1.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tooling
- dependency-name: wrangler
  dependency-version: 4.151.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tooling
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.168.46
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tooling
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tooling
- dependency-name: shadcn
  dependency-version: 4.21.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tooling
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 23, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/tooling-78a9b6d84d branch October 23, 2026 07:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants