Bump the npm-dependencies group across 1 directory with 8 updates #899

dependabot · 2025-11-18T02:21:54Z

Bumps the npm-dependencies group with 7 updates in the / directory:

Package	From	To
esbuild	`0.25.12`	`0.27.0`
glob	`11.0.3`	`12.0.0`
@cloudflare/vitest-pool-workers	`0.9.14`	`0.10.7`
@vitest/coverage-istanbul	`3.2.4`	`4.0.10`
@vitest/coverage-v8	`3.2.4`	`4.0.10`
lerna	`9.0.0`	`9.0.1`
vitest	`3.2.4`	`4.0.10`

Updates esbuild from 0.25.12 to 0.27.0

Release notes

Sourced from esbuild's releases.

v0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

Use Uint8Array.fromBase64 if available (#4286)

With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

This raises the operating system requirements for running esbuild:

Linux: now requires a kernel version of 3.2 or later

macOS: now requires macOS 12 (Monterey) or later

v0.26.0

Enable trusted publishing (#4281)

GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

Changelog

Sourced from esbuild's changelog.

0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

Use Uint8Array.fromBase64 if available (#4286)

With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

This raises the operating system requirements for running esbuild:

Linux: now requires a kernel version of 3.2 or later

macOS: now requires macOS 12 (Monterey) or later

0.26.0

Enable trusted publishing (#4281)

GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

Commits

2b91699 publish 0.27.0 to npm
22b425c fix #4286: use Uint8Array.fromBase64 if present (#4295)
6d187ef update go 1.25.3 => 1.25.4
9d0d4e7 update go 1.23.12 => 1.25.3 (#4318)
b6979d8 use a patched go compiler for release builds
893d2b9 delete temporary release.yml workflow
cee3918 add a temporary release.yml workflow
f5bb1d6 fix publish.yml
17ff82b publish 0.26.0 to npm
f87181f enable trusted publishing (#4319)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Updates glob from 11.0.3 to 12.0.0

Changelog

Sourced from glob's changelog.

changeglob

12

Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)

Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.

Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

Drop support for node before v20

10.4

Add includeChildMatches: false option

Export the Ignore class

10.3

Add --default -p flag to provide a default pattern

exclude symbolic links to directories when follow and nodir are both set

10.2

Add glob cli

10.1

Return '.' instead of the empty string '' when the current working directory is returned as a match.

Add posix: true option to return / delimited paths, even on Windows.

10.0.0

No default exports, only named exports

... (truncated)

Commits

2b03cca 12.0.0
d56203d prettier config
bb521e5 Remove --shell option where unsafe to use
2551fb5 11.1.0
47473c0 bin: Do not expose filenames to shell expansion
bc33fe1 skip tilde test on systems that lack tilde expansion
59bf9ca fix notes
dde4fa6 docs(README): add #anchor and improve notes
0559b0e docs: add better links to path-scurry docs
c9773c2 fix: correct typos in README.md
Additional commits viewable in compare view

Updates @cloudflare/vitest-pool-workers from 0.9.14 to 0.10.7

Release notes

Sourced from @cloudflare/vitest-pool-workers's releases.

@cloudflare/vitest-pool-workers@0.10.7

Patch Changes

Updated dependencies [43fe9f3, 3908162, 305ffb3, 14d79f2, dfc6513, 46ccf0e]:

[email protected]

[email protected]

@cloudflare/vitest-pool-workers@0.10.6

Patch Changes

Updated dependencies [5286309, 2d16610, dd7d584, 4259256, 63defa2, 5cf8a39, 70d3d4a, 38396ed, 8abc789, cdcecfc, e85f965, 88aa707]:

[email protected]

[email protected]

@cloudflare/vitest-pool-workers@0.10.5

Patch Changes

Updated dependencies [240ebeb, 05440a1, 1ae020d, 53b0fce, c3ed531, 305d7bf, b55a3c7, c3ed531, 5d7c4c2, c3ed531]:

[email protected]

[email protected]

@cloudflare/vitest-pool-workers@0.10.4

Patch Changes

Updated dependencies [8ffbd17, 77ed7e2, bb00f9d, ed666a1, 14f60e8, 22f25fd]:

[email protected]

[email protected]

@cloudflare/vitest-pool-workers@0.10.3

Patch Changes

Updated dependencies [6822aaf, bce8142]:

[email protected]

@cloudflare/vitest-pool-workers@0.10.1

Patch Changes

Updated dependencies [d0208fe, dbe51c1, d4f2daf]:

[email protected]

@cloudflare/vitest-pool-workers@0.10.0

Minor Changes

#11047 0ff1964 Thanks @petebacondarwin! - Infer latest locally available compatibility date if none is provided in the test configuration

Patch Changes

#10919 ca6c010 Thanks @Caio-Nogueira! - migrate workflow to use a wrapped binding

#11047 0ff1964 Thanks @petebacondarwin! - ensure that vitest specific nodejs polyfills override native modules

... (truncated)

Changelog

Sourced from @cloudflare/vitest-pool-workers's changelog.

0.10.7

Patch Changes

Updated dependencies [43fe9f3, 3908162, 305ffb3, 14d79f2, dfc6513, 46ccf0e]:

[email protected]

[email protected]

0.10.6

Patch Changes

Updated dependencies [5286309, 2d16610, dd7d584, 4259256, 63defa2, 5cf8a39, 70d3d4a, 38396ed, 8abc789, cdcecfc, e85f965, 88aa707]:

[email protected]

[email protected]

0.10.5

Patch Changes

Updated dependencies [240ebeb, 05440a1, 1ae020d, 53b0fce, c3ed531, 305d7bf, b55a3c7, c3ed531, 5d7c4c2, c3ed531]:

[email protected]

[email protected]

0.10.4

Patch Changes

Updated dependencies [8ffbd17, 77ed7e2, bb00f9d, ed666a1, 14f60e8, 22f25fd]:

[email protected]

[email protected]

0.10.3

Patch Changes

Updated dependencies [6822aaf, bce8142]:

[email protected]

0.10.2

Patch Changes

Updated dependencies [55657eb, d47f166]:

[email protected]

0.10.1

Patch Changes

... (truncated)

Commits

a72f6dc Version Packages (#11237)
c193d0e Version Packages (#11198)
4be581a Use eslint flat file config (#11207)
dd7d584 Bump the workerd-and-workers-types group across 1 directory with 2 updates (#...
cabbaf1 Version Packages (#11175)
a586c03 Version Packages (#11141)
8445f29 Version Packages (#11131)
6958fa7 Version Packages (#11115)
cb47614 Version Packages (#11085)
a5eb513 Version Packages (#11054)
Additional commits viewable in compare view

Updates @vitest/coverage-istanbul from 3.2.4 to 4.0.10

Release notes

Sourced from @vitest/coverage-istanbul's releases.

v4.0.10

   🐞 Bug Fixes

Remove onCancel when worker is terminated - by @sheremet-va in vitest-dev/vitest#9033 (6d7f0)

browser:

Don't scale the iframe if UI is disabled - by @sheremet-va in vitest-dev/vitest#9018 (5406e)

Handle dependency stack traces with external source maps. Resolves: #9003 - by @iclectic in vitest-dev/vitest#9016 and vitest-dev/vitest#9003 (57ae5)

bun:

Parsing of stack trace for bun runtime - by @nazarhussain in vitest-dev/vitest#9032 (f3ec6)

core:

Prevent starting new run when cancelling - by @AriPerkkio in vitest-dev/vitest#8991 (eb98d)

pool:

Prevent writing to closed worker - by @AriPerkkio and @sheremet-va in vitest-dev/vitest#9023 (042c6)

reporters:

Report correct test run duration at the end - by @sheremet-va in vitest-dev/vitest#8969 (bc3a6)

ui:

Use execution time from ws reporter (onFinished) - by @userquin in vitest-dev/vitest#8975 (f56dc)

    View changes on GitHub

v4.0.9

   🚀 Experimental Features

expect: Add Set support to toBeOneOf - by @tim-we and @sheremet-va in vitest-dev/vitest#8906 (a415d)

   🐞 Bug Fixes

browser: Add favicon icons to the browser mode ui - by @userquin in vitest-dev/vitest#8972 (353ee)

forks: Increase worker start timeout - by @AriPerkkio in vitest-dev/vitest#9027 (5e750)

jsdom: Cloned request is an instance of Request - by @sheremet-va in vitest-dev/vitest#8985 (506a9)

ui: Collect file/suite/test duration correctly - by @userquin in vitest-dev/vitest#8976 (8016d)

    View changes on GitHub

v4.0.8

   🐞 Bug Fixes

Workaround noExternal merging bug on Vite 6 - by @hi-ogawa in vitest-dev/vitest#8950 (bcb13)

Missed context.d.ts file - by @termorey in vitest-dev/vitest#8965 (9044d)

Incorrect error message for non-awaited expect.element() - by @StyleShit in vitest-dev/vitest#8954 (9638d)

browser: Cleanup frame-ancestors from CSP header at coverage middleware - by @userquin in vitest-dev/vitest#8941 (1f730)

deps: Update all non-major dependencies - by @sheremet-va in vitest-dev/vitest#8636 (da8b9)

forks: Do not fail with Windows Defender enabled - by @sheremet-va in vitest-dev/vitest#8967 (c79f4)

runner: Properly encode Uint8Array body in annotations - by @Livan-pro in vitest-dev/vitest#8951 (997ca)

spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class) - by @sheremet-va in vitest-dev/vitest#8956 (75e7f)

webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument - by @julienw in vitest-dev/vitest#8937 (069e6)

    View changes on GitHub

v4.0.7

... (truncated)

Commits

259a3d1 chore: release v4.0.10
62fab24 chore: release v4.0.9
46bfd09 chore: release v4.0.8
1f5d9d2 chore: release v4.0.7
2e7b2b8 chore: release v4.0.6
e3b7775 fix(coverage): prevent filtering out virtual files before remapping to source...
ed9fc71 chore: release v4.0.5
9b75ec5 chore: release v4.0.4
ca1766f chore: release v4.0.3
07bc56a chore: release v4.0.2
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @vitest/coverage-istanbul since your current version.

Updates @vitest/coverage-v8 from 3.2.4 to 4.0.10

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.0.10

   🐞 Bug Fixes

Remove onCancel when worker is terminated - by @sheremet-va in vitest-dev/vitest#9033 (6d7f0)

browser:

Don't scale the iframe if UI is disabled - by @sheremet-va in vitest-dev/vitest#9018 (5406e)

Handle dependency stack traces with external source maps. Resolves: #9003 - by @iclectic in vitest-dev/vitest#9016 and vitest-dev/vitest#9003 (57ae5)

bun:

Parsing of stack trace for bun runtime - by @nazarhussain in vitest-dev/vitest#9032 (f3ec6)

core:

Prevent starting new run when cancelling - by @AriPerkkio in vitest-dev/vitest#8991 (eb98d)

pool:

Prevent writing to closed worker - by @AriPerkkio and @sheremet-va in vitest-dev/vitest#9023 (042c6)

reporters:

Report correct test run duration at the end - by @sheremet-va in vitest-dev/vitest#8969 (bc3a6)

ui:

Use execution time from ws reporter (onFinished) - by @userquin in vitest-dev/vitest#8975 (f56dc)

    View changes on GitHub

v4.0.9

   🚀 Experimental Features

expect: Add Set support to toBeOneOf - by @tim-we and @sheremet-va in vitest-dev/vitest#8906 (a415d)

   🐞 Bug Fixes

browser: Add favicon icons to the browser mode ui - by @userquin in vitest-dev/vitest#8972 (353ee)

forks: Increase worker start timeout - by @AriPerkkio in vitest-dev/vitest#9027 (5e750)

jsdom: Cloned request is an instance of Request - by @sheremet-va in vitest-dev/vitest#8985 (506a9)

ui: Collect file/suite/test duration correctly - by @userquin in vitest-dev/vitest#8976 (8016d)

    View changes on GitHub

v4.0.8

   🐞 Bug Fixes

Workaround noExternal merging bug on Vite 6 - by @hi-ogawa in vitest-dev/vitest#8950 (bcb13)

Missed context.d.ts file - by @termorey in vitest-dev/vitest#8965 (9044d)

Incorrect error message for non-awaited expect.element() - by @StyleShit in vitest-dev/vitest#8954 (9638d)

browser: Cleanup frame-ancestors from CSP header at coverage middleware - by @userquin in vitest-dev/vitest#8941 (1f730)

deps: Update all non-major dependencies - by @sheremet-va in vitest-dev/vitest#8636 (da8b9)

forks: Do not fail with Windows Defender enabled - by @sheremet-va in vitest-dev/vitest#8967 (c79f4)

runner: Properly encode Uint8Array body in annotations - by @Livan-pro in vitest-dev/vitest#8951 (997ca)

spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class) - by @sheremet-va in vitest-dev/vitest#8956 (75e7f)

webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument - by @julienw in vitest-dev/vitest#8937 (069e6)

    View changes on GitHub

v4.0.7

... (truncated)

Commits

259a3d1 chore: release v4.0.10
62fab24 chore: release v4.0.9
46bfd09 chore: release v4.0.8
da8b93a fix(deps): update all non-major dependencies (#8636)
1f5d9d2 chore: release v4.0.7
2e7b2b8 chore: release v4.0.6
e3b7775 fix(coverage): prevent filtering out virtual files before remapping to source...
ed9fc71 chore: release v4.0.5
9b75ec5 chore: release v4.0.4
ca1766f chore: release v4.0.3
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @vitest/coverage-v8 since your current version.

Updates lerna from 9.0.0 to 9.0.1

Release notes

Sourced from lerna's releases.

v9.0.1

9.0.1 (2025-11-14)

Bug Fixes

expand version range to include nx v22.x (#4242) (0cca286)

Changelog

Sourced from lerna's changelog.

9.0.1 (2025-11-14)

Bug Fixes

expand version range to include nx v22.x (#4242) (0cca286)

Commits

9df335a chore(misc): publish 9.0.1
0cca286 fix: expand version range to include nx v22.x (#4242)
See full diff in compare view

Updates vitest from 3.2.4 to 4.0.10

Release notes

Sourced from vitest's releases.

v4.0.10

   🐞 Bug Fixes

Remove onCancel when worker is terminated - by @sheremet-va in vitest-dev/vitest#9033 (6d7f0)

browser:

Don't scale the iframe if UI is disabled - by @sheremet-va in vitest-dev/vitest#9018 (5406e)

Handle dependency stack traces with external source maps. Resolves: #9003 - by @iclectic in vitest-dev/vitest#9016 and vitest-dev/vitest#9003 (57ae5)

bun:

Parsing of stack trace for bun runtime - by @nazarhussain in vitest-dev/vitest#9032 (f3ec6)

core:

Prevent starting new run when cancelling - by @AriPerkkio in vitest-dev/vitest#8991 (eb98d)

pool:

Prevent writing to closed worker - by @AriPerkkio and @sheremet-va in vitest-dev/vitest#9023 (042c6)

reporters:

Report correct test run duration at the end - by @sheremet-va in vitest-dev/vitest#8969 (bc3a6)

ui:

Use execution time from ws reporter (onFinished) - by @userquin in vitest-dev/vitest#8975 (f56dc)

    View changes on GitHub

v4.0.9

   🚀 Experimental Features

expect: Add Set support to toBeOneOf - by @tim-we and @sheremet-va in vitest-dev/vitest#8906 (a415d)

   🐞 Bug Fixes

browser: Add favicon icons to the browser mode ui - by @userquin in vitest-dev/vitest#8972 (353ee)

forks: Increase worker start timeout - by @AriPerkkio in vitest-dev/vitest#9027 (5e750)

jsdom: Cloned request is an instance of Request - by @sheremet-va in vitest-dev/vitest#8985 (506a9)

ui: Collect file/suite/test duration correctly - by @userquin in vitest-dev/vitest#8976 (8016d)

    View changes on GitHub

v4.0.8

   🐞 Bug Fixes

Workaround noExternal merging bug on Vite 6 - by @hi-ogawa in vitest-dev/vitest#8950 (bcb13)

Missed context.d.ts file - by @termorey in vitest-dev/vitest#8965 (9044d)

Incorrect error message for non-awaited expect.element() - by @StyleShit in vitest-dev/vitest#8954 (9638d)

browser: Cleanup frame-ancestors from CSP header at coverage middleware - by @userquin in vitest-dev/vitest#8941 (1f730)

deps: Update all non-major dependencies - by @sheremet-va in vitest-dev/vitest#8636 (da8b9)

forks: Do not fail with Windows Defender enabled - by @sheremet-va in vitest-dev/vitest#8967 (c79f4)

runner: Properly encode Uint8Array body in annotations - by @Livan-pro in vitest-dev/vitest#8951 (997ca)

spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class) - by @sheremet-va in vitest-dev/vitest#8956 (75e7f)

webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument - by @julienw in vitest-dev/vitest#8937 (069e6)

    View changes on GitHub

v4.0.7

... (truncated)

Commits

259a3d1 chore: release v4.0.10
bc3a692 fix(reporters): report correct test run duration at the end (#8969)
f3ec6fc fix(bun): parsing of stack trace for bun runtime (#9032)
042c60c fix(pool): prevent writing to closed worker (#9023)
80f2bb6 chore(deps): update all non-major dependencies (#9037)
Description has been truncated

Bumps the npm-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [esbuild](https://github.com/evanw/esbuild) | `0.25.12` | `0.27.0` | | [glob](https://github.com/isaacs/node-glob) | `11.0.3` | `12.0.0` | | [@cloudflare/vitest-pool-workers](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vitest-pool-workers) | `0.9.14` | `0.10.7` | | [@vitest/coverage-istanbul](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul) | `3.2.4` | `4.0.10` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `3.2.4` | `4.0.10` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `9.0.0` | `9.0.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.0.10` | Updates `esbuild` from 0.25.12 to 0.27.0 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.25.12...v0.27.0) Updates `glob` from 11.0.3 to 12.0.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.0.3...v12.0.0) Updates `@cloudflare/vitest-pool-workers` from 0.9.14 to 0.10.7 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vitest-pool-workers/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/[email protected]/packages/vitest-pool-workers) Updates `@vitest/coverage-istanbul` from 3.2.4 to 4.0.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.10/packages/coverage-istanbul) Updates `@vitest/coverage-v8` from 3.2.4 to 4.0.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.10/packages/coverage-v8) Updates `lerna` from 9.0.0 to 9.0.1 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v9.0.1/packages/lerna) Updates `vitest` from 3.2.4 to 4.0.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.10/packages/vitest) Updates `wrangler` from 4.44.0 to 4.48.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: glob dependency-version: 12.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@cloudflare/vitest-pool-workers" dependency-version: 0.10.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@vitest/coverage-istanbul" dependency-version: 4.0.10 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.10 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: lerna dependency-version: 9.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: vitest dependency-version: 4.0.10 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: wrangler dependency-version: 4.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

cloudflare-workers-and-pages · 2025-11-18T02:21:56Z

Deploying brisbanesocialchess with Cloudflare Pages

Latest commit:	`c7a61f7`
Status:	🚫 Build failed.

View logs

socket-security · 2025-11-18T02:22:42Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
@vitest/coverage-istanbul@3.2.4 ⏵ 4.0.10				⁺¹
@vitest/coverage-v8@3.2.4 ⏵ 4.0.10			^-3	⁺¹
esbuild@0.25.12 ⏵ 0.27.0
@cloudflare/vitest-pool-workers@0.9.14 ⏵ 0.10.7	⁺¹
lerna@9.0.0 ⏵ 9.0.1
luxon@3.7.2
glob@11.0.3 ⏵ 12.0.0	⁺¹	⁺²²	⁺¹

View full report

github-actions · 2025-11-18T02:22:55Z

Thanks for your first pull request! We appreciate your contribution.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 18, 2025

dependabot bot requested a review from jbampton as a code owner November 18, 2025 02:21

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 18, 2025

github-actions bot added root backend labels Nov 18, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the npm-dependencies group across 1 directory with 8 updates #899

Bump the npm-dependencies group across 1 directory with 8 updates #899

Uh oh!

dependabot bot commented on behalf of github Nov 18, 2025

Uh oh!

cloudflare-workers-and-pages bot commented Nov 18, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Nov 18, 2025

Uh oh!

github-actions bot commented Nov 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Bump the npm-dependencies group across 1 directory with 8 updates #899

Are you sure you want to change the base?

Bump the npm-dependencies group across 1 directory with 8 updates #899

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 18, 2025

v0.27.0

v0.26.0

0.27.0

0.26.0

changeglob

12

11.1

11.0

10.4

10.3

10.2

10.1

10.0.0

@​cloudflare/vitest-pool-workers@​0.10.7

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.6

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.5

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.4

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.3

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.1

Patch Changes

@​cloudflare/vitest-pool-workers@​0.10.0

Minor Changes

Patch Changes

0.10.7

Patch Changes

0.10.6

Patch Changes

0.10.5

Patch Changes

0.10.4

Patch Changes

0.10.3

Patch Changes

0.10.2

Patch Changes

0.10.1

Patch Changes

v4.0.10

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.8

🐞 Bug Fixes

v4.0.7

v4.0.10

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.8

🐞 Bug Fixes

v4.0.7

v9.0.1

9.0.1 (2025-11-14)

Bug Fixes

9.0.1 (2025-11-14)

Bug Fixes

v4.0.10

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.8

🐞 Bug Fixes

v4.0.7

Uh oh!

cloudflare-workers-and-pages bot commented Nov 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

`@cloudflare/vitest-pool-workers@0`.10.7

`@cloudflare/vitest-pool-workers@0`.10.6

`@cloudflare/vitest-pool-workers@0`.10.5

`@cloudflare/vitest-pool-workers@0`.10.4

`@cloudflare/vitest-pool-workers@0`.10.3

`@cloudflare/vitest-pool-workers@0`.10.1

`@cloudflare/vitest-pool-workers@0`.10.0

cloudflare-workers-and-pages bot commented Nov 18, 2025 •

edited

Loading