Skip to content

build(deps-dev): bump the frontend-tooling group across 1 directory with 4 updates - #321

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-tooling-99aefdefc5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-tooling-99aefdefc5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the frontend-tooling group with 4 updates in the /frontend directory: @typescript-eslint/eslint-plugin, @typescript-eslint/parser, @vitejs/plugin-react and vite.

Updates @typescript-eslint/eslint-plugin from 8.71.1 to 8.72.2

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.2

8.72.2 (2026-11-09)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] parse RegExps with the v flag in unicode sets mode (#13102)
  • eslint-plugin: [no-deprecated] stop on circular alias chains (#13117)
  • eslint-plugin: [no-unnecessary-type-assertion] don't report number to enum assertions (#13104)
  • eslint-plugin: [prefer-nullish-coalescing] treat unconstrained type parameters as possibly nullish (#12994)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.2 (2026-11-09)

🩹 Fixes

  • eslint-plugin: [prefer-nullish-coalescing] treat unconstrained type parameters as possibly nullish (#12994)
  • eslint-plugin: [no-unnecessary-type-assertion] don't report number to enum assertions (#13104)
  • eslint-plugin: [no-deprecated] stop on circular alias chains (#13117)
  • eslint-plugin: [prefer-string-starts-ends-with] parse RegExps with the v flag in unicode sets mode (#13102)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • eslint-plugin: lazy load rules (#13010)

🩹 Fixes

  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)

... (truncated)

Commits
  • 12e452f chore(release): publish 8.72.2
  • 72ad812 fix(eslint-plugin): [prefer-nullish-coalescing] treat unconstrained type para...
  • 9cce167 fix(eslint-plugin): [no-unnecessary-type-assertion] don't report number to en...
  • 2b1f967 fix(eslint-plugin): [no-deprecated] stop on circular alias chains (#13117)
  • 101d39c fix(eslint-plugin): [prefer-string-starts-ends-with] parse RegExps with the v...
  • a5092d9 chore(deps): update dependency unist-util-visit to ^5.2.0 (#13127)
  • 4ad6b75 chore(release): publish 8.72.1
  • 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
  • 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
  • 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.71.1 to 8.72.2

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.2

8.72.2 (2026-11-09)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] parse RegExps with the v flag in unicode sets mode (#13102)
  • eslint-plugin: [no-deprecated] stop on circular alias chains (#13117)
  • eslint-plugin: [no-unnecessary-type-assertion] don't report number to enum assertions (#13104)
  • eslint-plugin: [prefer-nullish-coalescing] treat unconstrained type parameters as possibly nullish (#12994)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.2 (2026-11-09)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @vitejs/plugin-react from 6.1.2 to 6.3.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.3.0

Make reactCompilerPreset work with @rolldown/plugin-babel's parallel option (#1549)

reactCompilerPreset now refers to its Babel preset by module path instead of by function, so it can be sent to worker threads.

plugin-react@6.2.1

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

plugin-react@6.2.0

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.3.0 (2026-11-09)

Make reactCompilerPreset work with @rolldown/plugin-babel's parallel option (#1549)

reactCompilerPreset now refers to its Babel preset by module path instead of by function, so it can be sent to worker threads.

6.2.1 (2026-11-02)

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

6.2.0 (2026-11-02)

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Commits
  • 0e95069 release: plugin-react@6.3.0 (#1557)
  • 8a7d0d4 feat(plugin-react): make reactCompilerPreset work with @​rolldown/plugin-babel...
  • 29efd1c release: plugin-react@6.2.1 (#1544)
  • 22079fa fix(plugin-react): fix new refreshInclude option (#1543)
  • d0f7234 release: plugin-react@6.2.0 (#1542)
  • 186d1e8 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1541)
  • a554a33 feat(plugin-react): expand oxc-transform-react peer dep range (#1540)
  • ef758ba fix(deps): update all non-major dependencies (#1531)
  • 304a92a feat(plugin-react): add refreshInclude and refreshExclude options (#1516)
  • b3e9835 fix(deps): update all non-major dependencies (#1517)
  • Additional commits viewable in compare view

Updates vite from 8.3.4 to 8.3.8

Release notes

Sourced from vite's releases.

v8.3.8

Bug Fixes

  • build: keep magicString and ast in transform hook meta (#24012) (a3b28e8)
  • bundled-dev: emit assets referenced by inline workers during load (#23103) (5e50bae)
  • config: skip native loader compat checks for type-only imports (#24021) (e554294)
  • css: reject CSS entrypoints when build.cssCodeSplit: false (#23112) (e4ad62b)
  • deps: update all non-major dependencies (#24027) (a13aa04)
  • hide console window when running yarn config get on Windows (#24013) (3f6c4cd)

Performance Improvements

  • css: import sass once instead of per file (#24041) (db8b119)
  • defer net use until a UNC path is resolved on Windows (#24014) (b643046)

Miscellaneous Chores

Code Refactoring

  • optimizer: use non-capturing group for external types regex (#24048) (ef23433)

Tests

v8.3.7

Bug Fixes

Miscellaneous Chores

Tests

Build System

v8.3.6

Bug Fixes

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.8 (2026-11-11)

Bug Fixes

  • build: keep magicString and ast in transform hook meta (#24012) (a3b28e8)
  • bundled-dev: emit assets referenced by inline workers during load (#23103) (5e50bae)
  • config: skip native loader compat checks for type-only imports (#24021) (e554294)
  • css: reject CSS entrypoints when build.cssCodeSplit: false (#23112) (e4ad62b)
  • deps: update all non-major dependencies (#24027) (a13aa04)
  • hide console window when running yarn config get on Windows (#24013) (3f6c4cd)

Performance Improvements

  • css: import sass once instead of per file (#24041) (db8b119)
  • defer net use until a UNC path is resolved on Windows (#24014) (b643046)

Miscellaneous Chores

Code Refactoring

  • optimizer: use non-capturing group for external types regex (#24048) (ef23433)

Tests

8.3.7 (2026-11-09)

Bug Fixes

Miscellaneous Chores

Tests

Build System

8.3.6 (2026-11-05)

Bug Fixes

... (truncated)

Commits
  • b39e6e6 release: v8.3.8 (#24066)
  • afc44f0 chore: revert "fix(build): keep magicString and ast in transform hook met...
  • e4ad62b fix(css): reject CSS entrypoints when build.cssCodeSplit: false (#23112)
  • 5e50bae fix(bundled-dev): emit assets referenced by inline workers during load (#23103)
  • fbb0a4e test: avoid joining logs for assertion (#24057)
  • b8c8270 chore: enable vitest style rules in Oxlint (#24053)
  • ce979e4 chore: enable vitest plugin in Oxlint (#24052)
  • a3b28e8 fix(build): keep magicString and ast in transform hook meta (#24012)
  • dd780cd chore(deps): update dependency @​types/node to v26 (#24029)
  • b643046 perf: defer net use until a UNC path is resolved on Windows (#24014)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026

@graphify-labs graphify-labs Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Graphify reviewed this change.

No issues found by static checks — no coupling regressions or blocking issues in the code graph. That is not the same as safe to merge: see what was not checked.

Not checked: tests were not run; no formal proof of the changed code.


Graphify review — findings

Bumps frontend dev tooling to newer patch and minor releases, including @typescript-eslint/eslint-plugin (8.72.1), @vitejs/plugin-react (6.2.1) and vite (8.3.6). The lockfile also moves the transitive Rolldown native bindings from 1.2.13 to 1.2.16 and @oxc-project/types to 0.156.0. Only the dev-time build and lint toolchain changes; no app code or runtime dependencies are touched in the visible diff.

No blocking issues surfaced.

Analysis details — impact, health, verification

Impact & health

Graphify review

Impact — 69 functions depend on the 69 functions this change touches.

Health — grade A; no new coupling hotspots.

Verification — 69 functions in the blast radius were not formally verified this run (proofs are advisory here).

Gate & verification

graphify gate

PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.

Advisory (not blocking):

  • verification_scope: 69 function(s) in the blast radius were not formally verified this run

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/frontend-tooling-99aefdefc5 branch 8 times, most recently from 8cfb0f9 to 2573717 Compare November 14, 2026 19:57
…ith 4 updates

Bumps the frontend-tooling group with 4 updates in the /frontend directory: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser), [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@typescript-eslint/eslint-plugin` from 8.71.1 to 8.72.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.2/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.71.1 to 8.72.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.2/packages/parser)

Updates `@vitejs/plugin-react` from 6.1.2 to 6.3.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.3.0/packages/plugin-react)

Updates `vite` from 8.3.4 to 8.3.8
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.8/packages/vite)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-tooling
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-tooling
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-tooling
- dependency-name: vite
  dependency-version: 8.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/frontend-tooling-99aefdefc5 branch from 2573717 to faa6f1c Compare November 14, 2026 20:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants