Bump the development-minor-and-patch group with 6 updates by dependabot[bot] · Pull Request #4960 · xh/hoist-react

dependabot · 2026-11-07T02:46:43Z

Bumps the development-minor-and-patch group with 6 updates:

Package	From	To
@types/node	`26.6.5`	`26.6.6`
@vitest/ui	`5.0.5`	`5.1.0`
@xh/hoist-dev-utils	`16.1.1`	`16.2.0`
eslint	`10.13.0`	`10.14.0`
globals	`17.13.0`	`17.14.0`
pdfjs-dist	`6.3.289`	`6.5.438`

Updates @types/node from 26.6.5 to 26.6.6

Commits

See full diff in compare view

Updates @vitest/ui from 5.0.5 to 5.1.0

Release notes

Sourced from @vitest/ui's releases.

v5.1.0

🚀 Features

Add --last-failed to run only failed tests - by @sheremet-va in vitest-dev/vitest#11558 (82f63)

Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime() - by @Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M context), @hi-ogawa and Codex (GPT-6) in vitest-dev/vitest#11321 (f150f)

Introduce --since-last-run flag - by @sheremet-va in vitest-dev/vitest#11516 (08bd9)

Expose per-retry/repeat attempt result - by @hi-ogawa, Codex (GPT-6) and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11232 (21be4)

Support fake timers for node:timers and node:timers/promise - by @hi-ogawa, OpenCode and Codex (GPT-6) in vitest-dev/vitest#10899 (fbe97)

Allow coverage providers to store data in fs module cache - by @AriPerkkio in vitest-dev/vitest#11747 (54a2b)

Interactively review failed snapshots - by @macarie and @hi-ogawa in vitest-dev/vitest#11325 (54e5b)

browser:

Mock modules through an import map - by @sheremet-va in vitest-dev/vitest#11534 (707f8)

Drop experimental label from trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11518 (44c3c)

Introduce experimental pointer API - by @macarie in vitest-dev/vitest#10780 (5dc09)

Capture aria snapshot in trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11492 (0cc39)

Show trace steps timeline on terminal on test failure - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11594 (973dc)

Add failure-only trace view mode - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11612 (d5d7d)

Enable failure-only trace view by default - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11766 (f37b6)

coverage:

V8 to support ignoreNode option - by @erickserra and @AriPerkkio in vitest-dev/vitest#11688 (e02db)

experimental:

Add trace timeline for node - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11753 (4e985)

Add message option to vi.waitFor and vi.waitUntil - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11754 (fd145)

🐞 Bug Fixes

Rerun setup files after --changed filtering - by @sheremet-va in vitest-dev/vitest#11621 (3a39c)

Return the mock to concurrent imports - by @sheremet-va in vitest-dev/vitest#11623 (1453b)

Don't fail on console log pending at teardown - by @sheremet-va in vitest-dev/vitest#11619 (a60b8)

Reference chai types in every d.ts chunk - by @sheremet-va in vitest-dev/vitest#11618 (fb150)

Detect mock factory cycles that form later - by @sheremet-va in vitest-dev/vitest#11642 (e9554)

Skip fs module cache for typed import.meta.glob - by @sheremet-va in vitest-dev/vitest#11666 (79501)

Run tests that import a deleted file - by @sheremet-va in vitest-dev/vitest#11669 (80aa1)

Keep syntax highlighting in code frames - by @sheremet-va in vitest-dev/vitest#11705 (d39f5)

Respect CLI filters when prewarming browsers - by @sheremet-va and Benjamin Tang in vitest-dev/vitest#11706 (10947)

Read cached source as utf-8 - by @juan-fernandez in vitest-dev/vitest#11682 and vitest-dev/vitest#11709 (867a5)

Inherit watch from the root config in projects - by @nstepien and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11724 (77c12)

Prefix expect.poll message to all errors - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11756 (cab58)

Support api.port 0 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11641 (3667c)

Show attempts in test error logs of retried tests - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11696 (77a94)

Preserve rootDir in project paths - by @btea in vitest-dev/vitest#11816 (bf96d)

browser:

Change default port to 23315 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11640 (a2ec4)

Advance fake timers in actions and expect.element - by @julienw, @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11242 (68190)

Drop trace view warning without html reporter - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11665 (e6407)

Detect shared chunks via the optimizer - by @sheremet-va in vitest-dev/vitest#11661 (e2e9c)

Clear screenshot stability timeout - by @sheremet-va in vitest-dev/vitest#11659 (fbe37)

Measure prepare duration with one clock - by @sheremet-va in vitest-dev/vitest#11667 (a3ed4)

Keep failure screenshot per attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11694 (a5022)

Print trace timeline of each attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11695 (27229)

... (truncated)

Commits

7a38449 chore: release v5.1.0 (#11838)
e46c6c1 refactor: share trace types and utils (#11825)
5bdc347 chore(deps): update vite to 8.3.5 (#11828)
62ef1d5 devops: upload test results to the dashboard (#11786)
c022d63 fix(ui): open trace view only for tests with a trace (#11770)
59c2dd3 fix(ui): let coverage report follow UI color scheme (#11765)
b9b7359 fix(ui): fix quirks mode in trace view replay (#11744)
34b44a3 test(ui): disable virtualization in e2e by default (#11664)
d5d7d2f feat(browser): add failure-only trace view mode (#11612)
ff5e20e chore(deps): update dependency vitest-browser-vue to v3 (#11742)
Additional commits viewable in compare view

Updates @xh/hoist-dev-utils from 16.1.1 to 16.2.0

Release notes

Sourced from @xh/hoist-dev-utils's releases.

v16.2.0

What's Changed

Document the Toolbox Favicon Designer, remove svg-favicon.sh by @amcclain in xh/hoist-dev-utils#84

Full Changelog: xh/hoist-dev-utils@v16.1.1...v16.2.0

Changelog

Sourced from @xh/hoist-dev-utils's changelog.

16.2.0 - 2026-11-02

🐞 Bug Fixes

The validate-release-version GitHub action now accepts a repo's first release. With no release tags, it validates against an implied v0.0.0, so the first version must be 1.0.0, 0.1.0 or 0.0.1. A first release cannot be a hotfix.

📚 Libraries

@rsbuild/core 2.2 → 2.3

sass-embedded 1.105 → 1.107

Commits

84d74dd Document the Toolbox Favicon Designer, remove svg-favicon.sh (#84)
0ad081c Accept a repo's first release in validate-release-version
6236ca6 Minor dependency updates
5da3290 Run pnpm update
a10a079 Keep pnpm-lock.yaml a single document for GitHub's dependency graph
2430441 Declare read-only permissions for the Unit Test Github Actions workflow
eed34e0 Drop the NPM_TOKEN fallback from npm publishes
1fb4c4c Publish snapshots to npm via trusted publishing
See full diff in compare view

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)

827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)

161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)

6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)

9155e14 fix: Update @humanfs/node dependency version (#21434) (Nicholas C. Zakas)

cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)

5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)

dab466e docs: Update README (GitHub Actions Bot)

97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)

7697550 docs: Update README (GitHub Actions Bot)

0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)

0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)

e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)

6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])

a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)

67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)

276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])

449724e chore: update ecosystem plugins (#21420) (ESLint Bot)

8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

Commits

12cbff4 10.14.0
6b696e7 Build: changelog update for 10.14.0
0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
0f94f47 docs: remove zh-hans from docs language switcher (#21437)
dab466e docs: Update README
827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
161558a fix: handle LS, PS and empty hashbang comments (#21419)
Additional commits viewable in compare view

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

Update globals (2026-11-01) (#355) 7abfb5d

sindresorhus/globals@v17.13.0...v17.14.0

Commits

3080111 17.14.0
c61cc23 Tweaks
7abfb5d Update globals (2026-11-01) (#355)
See full diff in compare view

Updates pdfjs-dist from 6.3.289 to 6.5.438

Release notes

Sourced from pdfjs-dist's releases.

v6.5.438

This release contains improvements for accessibility, annotation editing, annotation rendering, font conversion, image conversion, performance, scripting, tiling pattern rendering and the viewer.

Changes since v6.4.299

Bump the stable version in pdfjs.config by @timvandermeij in mozilla/pdf.js#22066

Fix a few edge cases when converting RGB images in convertRGBToRGBA and ImageResizer by @calixteman in mozilla/pdf.js#22046

Directly call Set.prototype.delete in the ChunkedStreamManager code by @Snuffleupagus in mozilla/pdf.js#22065

Don't stop at the first broken /Kids entry in Catalog.getAllPageDicts (issue 22011) by @xjtu-ctgg in mozilla/pdf.js#22013

Keep the sign of negative numbers greater than -1 in util.printf by @kwy404 in mozilla/pdf.js#22017

Downscale large images without a full-size RGBA buffer by @calixteman in mozilla/pdf.js#22067

Create the LIGATURE_TO_UNICODE Map only once by @Snuffleupagus in mozilla/pdf.js#22068

Replace gulp-replace with transform for the Chromium manifest by @calixteman in mozilla/pdf.js#22072

[api-minor] Don't re-layout the textLayer on update (PR 20492 follow-up) by @Snuffleupagus in mozilla/pdf.js#22045

Bump library version to 6.5 by @Snuffleupagus in mozilla/pdf.js#22073

Remove the explicit gulp-cli dependency by @calixteman in mozilla/pdf.js#22077

Replace ttest with a local Welch's t-test by @calixteman in mozilla/pdf.js#22075

Add a reference test for issue 7802 by @Snuffleupagus in mozilla/pdf.js#22074

Replace webpack-stream with the Webpack API by @calixteman in mozilla/pdf.js#22070

Match the whole string in the getCharUnicodeCategory regular expression (issue 21890) by @Om-singhaI in mozilla/pdf.js#21960

Add pull request viewer previews by @calixteman in mozilla/pdf.js#22090

[api-minor] Offload canvas drawing operations to a worker by @Aditi-1400 in mozilla/pdf.js#21860

Check preview deployment before posting links by @calixteman in mozilla/pdf.js#22093

Bump source-map-js from 1.2.1 to 1.2.2 by @dependabot[bot] in mozilla/pdf.js#22091

Bump github/codeql-action/init from 4.38.1 to 4.38.2 by @dependabot[bot] in mozilla/pdf.js#22084

Bump github/codeql-action/analyze from 4.38.1 to 4.38.2 by @dependabot[bot] in mozilla/pdf.js#22085

Bump github/codeql-action/autobuild from 4.38.1 to 4.38.2 by @dependabot[bot] in mozilla/pdf.js#22086

Ensure that errors in the Optional Content won't prevent all rendering by @Snuffleupagus in mozilla/pdf.js#22082

Replace Metalsmith with a docs gulp task by @calixteman in mozilla/pdf.js#22081

Don't swallow postMessage errors when replying to sendWithPromise messages (issue 22079) by @Snuffleupagus in mozilla/pdf.js#22080

Collect renderer worker coverage by @calixteman in mozilla/pdf.js#22094

Extract viewer preview checks and preparation into scripts by @calixteman in mozilla/pdf.js#22095

Use CharCodeMap for font character mappings (bug 2077176) by @calixteman in mozilla/pdf.js#22092

Ensure that the RendererWorker version matches the API version, and reduce the size of the built pdf.renderer.mjs file (PR 21860 follow-up) by @Snuffleupagus in mozilla/pdf.js#22097

Fix the DOMCanvasFactory import in the new debugger (PR 22097 follow-up) by @Snuffleupagus in mozilla/pdf.js#22098

Resolve PDF.js aliases when linting imports by @calixteman in mozilla/pdf.js#22099

A couple of RendererWorker improvements (PR 21860 follow-up) by @Snuffleupagus in mozilla/pdf.js#22103

Move renderer worker support out of api.js (PR 21860 follow-up) by @calixteman in mozilla/pdf.js#22105

Always check if crypto.randomUUID is available in the getUuid helper (issue 22107) by @Snuffleupagus in mozilla/pdf.js#22108

Split the src/display/display_utils.js file into multiple ones (PR 21860 follow-up) by @Snuffleupagus in mozilla/pdf.js#22101

Reduce duplication in the type1FontGlyphMapping function by @Snuffleupagus in mozilla/pdf.js#22104

Create canvasFactory and filterFactory just once in the RendererMessageHandler (PR 21860 follow-up) by @Snuffleupagus in mozilla/pdf.js#22114

Cache decoded page images in the worker in Firefox (PR 22105 follow-up) by @calixteman in mozilla/pdf.js#22112

Test main-thread and worker rendering paths by @calixteman in mozilla/pdf.js#22096

Use the main-thread pixel ratio for worker image smoothing by @calixteman in mozilla/pdf.js#22120

Fit the Nova zoom select in the compact toolbar (bug 2075731) by @calixteman in mozilla/pdf.js#22118

Add unit-tests for the StatTimer.prototype.toString method by @Snuffleupagus in mozilla/pdf.js#22109

Add a method in BaseCanvasFactory for getting a no-alpha canvas context by @Snuffleupagus in mozilla/pdf.js#22116

Update the thumbnail status label and controls together (bug 2080269) by @calixteman in mozilla/pdf.js#22119

Keep scripting internals out of the global scope (issue 22121) by @calixteman in mozilla/pdf.js#22122

Parse structure trees without a ParentTree by @calixteman in mozilla/pdf.js#22115

... (truncated)

Commits

0a41533 Merge pull request #22371 from andrewfader/stream-reader-cancel-errored
956f0cd Merge pull request #22375 from andrewfader/xref-discard-corrupt-state
743422f Prevent unhandled rejections when cancelling an errored stream reader
4794c39 Discard the state of a corrupt XRef table/stream before parsing the next one
ab3819f Merge pull request #22409 from Snuffleupagus/initAnnotationLayer-inline
b1b2849 Merge pull request #22402 from calixteman/truncated-rgb-image-data
5b02155 Merge pull request #22386 from calixteman/bug2084610
4ef78fe Inline the AnnotationLayerBuilder.prototype.#initAnnotationLayer method
079921e Regenerate button appearances for NeedAppearances (bug 2084610)
743102c Merge pull request #22408 from Snuffleupagus/AnnotationElement-shadow-svgFactory
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-minor-and-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` | | [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `5.0.5` | `5.1.0` | | [@xh/hoist-dev-utils](https://github.com/xh/hoist-dev-utils) | `16.1.1` | `16.2.0` | | [eslint](https://github.com/eslint/eslint) | `10.13.0` | `10.14.0` | | [globals](https://github.com/sindresorhus/globals) | `17.13.0` | `17.14.0` | | [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.3.289` | `6.5.438` | Updates `@types/node` from 26.6.5 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/ui` from 5.0.5 to 5.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/ui) Updates `@xh/hoist-dev-utils` from 16.1.1 to 16.2.0 - [Release notes](https://github.com/xh/hoist-dev-utils/releases) - [Changelog](https://github.com/xh/hoist-dev-utils/blob/develop/CHANGELOG.md) - [Commits](xh/hoist-dev-utils@v16.1.1...v16.2.0) Updates `eslint` from 10.13.0 to 10.14.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.13.0...v10.14.0) Updates `globals` from 17.13.0 to 17.14.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.13.0...v17.14.0) Updates `pdfjs-dist` from 6.3.289 to 6.5.438 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](mozilla/pdf.js@v6.3.289...v6.5.438) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-and-patch - dependency-name: "@vitest/ui" dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-and-patch - dependency-name: "@xh/hoist-dev-utils" dependency-version: 16.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-and-patch - dependency-name: eslint dependency-version: 10.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-and-patch - dependency-name: globals dependency-version: 17.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-and-patch - dependency-name: pdfjs-dist dependency-version: 6.5.438 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies javascript Pull requests that update javascript code labels Nov 7, 2026

Navigation Menu

Repository navigation

Bump the development-minor-and-patch group with 6 updates - #4960

Bump the development-minor-and-patch group with 6 updates#4960
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/development-minor-and-patch-748fa46727

dependabot Bot commented on behalf of github Nov 7, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 7, 2026

v5.1.0

🚀 Features

🐞 Bug Fixes

v16.2.0

What's Changed

16.2.0 - 2026-11-02

🐞 Bug Fixes

📚 Libraries

v10.14.0

Features

Bug Fixes

Documentation

Chores

v17.14.0

v6.5.438

Changes since v6.4.299

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants