Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 25 updates - #47

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-d1e697ef08
Open

chore(deps): bump the minor-and-patch group across 1 directory with 25 updates#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-d1e697ef08

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 25 updates in the / directory:

Package From To
@biomejs/biome 2.4.15 2.4.16
@microsoft/api-extractor 7.58.7 7.59.4
@types/node 22.19.21 22.20.5
fast-check 4.9.0 4.10.2
rollup 4.60.4 4.64.5
turbo 2.9.14 2.11.7
@bugsee/bugsee-cli 0.7.11 0.7.13
ajv 8.18.0 8.20.0
elysia 1.4.28 1.4.30
express 5.2.1 5.3.0
fastify 5.8.5 5.12.5
@hapi/hapi 21.4.9 21.4.10
hono 4.12.25 4.13.13
@opentelemetry/sdk-trace-base 2.7.1 2.12.0
esbuild 0.27.7 0.28.2
miniflare 4.20260722.0 4.20260730.0
playwright 1.62.1 1.64.0
tsx 4.22.4 4.23.15
webpack 5.111.0 5.111.1
@nuxt/kit 3.21.8 3.21.11
nuxt 4.4.8 4.6.1
svelte 5.56.3 5.57.2
@sveltejs/kit 2.67.0 2.70.3
@sveltejs/vite-plugin-svelte 7.1.2 7.3.1
vite 8.0.14 8.3.4

Updates @biomejs/biome from 2.4.15 to 2.4.16

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.16

2.4.16

Patch Changes

  • #10329 ef764d5 Thanks @​Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.

  • #10363 50aa415 Thanks @​dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

    Input:

    <span
  ><!-- 1
--><span>a</span
  ><!-- 2
--><span>b</span
  ><!-- 3
--></span>

    Output:

      <span
	  ><!-- 1
- --> <span>a</span<!-- 2
- --> ><span>b</span><!-- 3
+ --><span>a</span><!-- 2
+ --><span>b</span><!-- 3
  --></span
  >

  • #10465 0c718da Thanks @​dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

  • #10358 05c2617 Thanks @​dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

  • #10300 950247c Thanks @​dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

  • #9786 e71f584 Thanks @​MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

  • #10425 1948b72 Thanks @​sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

  • #10442 001f94f Thanks @​ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

  • #10318 9b1577f Thanks @​dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.

  • #10319 2e37709 Thanks @​dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.16

Patch Changes

  • #10329 ef764d5 Thanks @​Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.

  • #10363 50aa415 Thanks @​dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

    Input:

    <span
  ><!-- 1
--><span>a</span
  ><!-- 2
--><span>b</span
  ><!-- 3
--></span>

    Output:

      <span
	  ><!-- 1
- --> <span>a</span<!-- 2
- --> ><span>b</span><!-- 3
+ --><span>a</span><!-- 2
+ --><span>b</span><!-- 3
  --></span
  >

  • #10465 0c718da Thanks @​dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

  • #10358 05c2617 Thanks @​dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

  • #10300 950247c Thanks @​dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

  • #9786 e71f584 Thanks @​MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

  • #10425 1948b72 Thanks @​sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

  • #10442 001f94f Thanks @​ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

  • #10318 9b1577f Thanks @​dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.

  • #10319 2e37709 Thanks @​dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

    

    • 






... (truncated)





Commits

    

  • 5f4ea56 ci: release (#10326)
    • 

  • de2a33c fix(core): regression in emitted types (#10478)
    • 

  • d835303 docs: remove redundant default phrase in useConsistentObjectDefinitions rul...
    • 

  • 4f1aaf2 fix: incorrect build when using build or test (#10426)
    • 

  • dc73b6b refactor: make plugins opt-in via feature gate (#10418)
    • 

  • e71f584 feat(useDestructuring): add options for assignment/declaration and improve di...
    • 

  • 9b1577f fix(config): support trailingCommas in overrides (#10318)
    • 

  • See full diff in compare view
    • 







Updates @microsoft/api-extractor from 7.58.7 to 7.59.4



Changelog

Sourced from @​microsoft/api-extractor's changelog.




7.59.4


Tue, 06 Oct 2026 00:04:37 GMT


Version update only


7.59.3


Mon, 28 Sep 2026 20:08:26 GMT


Version update only


7.59.2


Tue, 22 Sep 2026 17:35:41 GMT


Patches


    

  • Update the @microsoft/tsdoc dependency to ~0.17.0 and the @microsoft/tsdoc-config dependency to ~0.18.2.
    • 



7.59.1


Sat, 05 Sep 2026 00:15:08 GMT


Version update only


7.59.0


Fri, 21 Aug 2026 15:16:34 GMT


Minor changes


    

  • Report a new ae-unresolved-import-path message when an inline import() type with a relative path cannot be resolved, instead of silently emitting the unusable path into the .d.ts rollup.
    • 



7.58.13


Thu, 20 Aug 2026 00:16:38 GMT


Version update only


7.58.12


Tue, 21 Jul 2026 02:53:22 GMT


Patches


    

  • Improve the performance of the internal excerpt token condensing algorithm from O(n^2) to O(n) by eliminating repeated array splicing and per-merge bookkeeping.
    • 



7.58.11


Fri, 17 Jul 2026 00:15:59 GMT


Version update only


7.58.10


Thu, 16 Jul 2026 00:16:13 GMT


Version update only





... (truncated)





Commits





Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​microsoft/api-extractor since your current version.






Updates @types/node from 22.19.21 to 22.20.5



Commits






Updates fast-check from 4.9.0 to 4.10.2



Release notes

Sourced from fast-check's releases.




v4.10.2


Fix interrupt plugin (throwing)
[Code][Diff]


Fixes


    

  • (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes
    • 



Fix fake-timer compatibility in timeout and interrupt plugins


[Code][Diff]


Fixes


    

  • (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
    • 

  • (PR#7282) CI: Temporarily disable documentation updates until v5
    • 

  • (PR#7279) Doc: Release note for 4.10.0
    • 



New plugin API and deprecations ahead of v5


[Code][Diff]


Features


    

  • (PR#7216) Introduce a plugin API
    • 

  • (PR#7221) Refine plugin API
    • 

  • (PR#7222) Add ability to configure plugins globally
    • 

  • (PR#7224) Add the beforeEach plugin to hook in life-cycle
    • 

  • (PR#7227) Create an afterEach plugin
    • 

  • (PR#7232) Deprecate life-cycle methods
    • 

  • (PR#7235) Support teardown of beforeEach plugin
    • 

  • (PR#7228) Add timeout plugin to stop long running predicates
    • 

  • (PR#7237) Deprecate timeout from parameters
    • 

  • (PR#7238) Pass a store to plugins
    • 

  • (PR#7239) Add extra plugin's method called onAllRunsComplete
    • 

  • (PR#7240) Deprecate reporter and asyncReporter from parameters
    • 

  • (PR#7229) Add plugin to interrupt after time limit
    • 

  • (PR#7245) Support failOnInterrupt on the plugin
    • 

  • (PR#7230) Add plugins to drop runs on already covered cases
    • 

  • (PR#7259) Add ability to decorate generate via Plugins
    • 

  • (PR#7231) Add the unbiased plugin to generate without bias
    • 

  • (PR#7260) Deprecate parameters superseded by plugins
    • 

  • (PR#7261) Deprecate v5 removals
    • 



Fixes


    

  • (PR#7225) Bug: Proper ordering between plugins
    • 

  • (PR#7127) CI: Announce on Bluesky when drafting the release
    • 

  • (PR#7217) CI: Dedupe packages for pnpm
    • 

  • (PR#7137) Doc: Release note for 4.9.0
    • 






... (truncated)





Changelog

Sourced from fast-check's changelog.




4.10.2


Fix interrupt plugin (throwing)
[Code][Diff]


Fixes


    

  • (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes
    • 



4.10.1


Fix fake-timer compatibility in timeout and interrupt plugins
[Code][Diff]


Fixes


    

  • (PR#7292) Bug: Capture timer globals for timeout plugin
    • 

  • (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
    • 

  • (PR#7282) CI: Temporarily disable documentation updates until v5
    • 

  • (PR#7279) Doc: Release note for 4.10.0
    • 



4.10.0


New plugin API and deprecations ahead of v5
[Code][Diff]


Features


    

  • (PR#7216) Introduce a plugin API
    • 

  • (PR#7221) Refine plugin API
    • 

  • (PR#7222) Add ability to configure plugins globally
    • 

  • (PR#7224) Add the beforeEach plugin to hook in life-cycle
    • 

  • (PR#7227) Create an afterEach plugin
    • 

  • (PR#7232) Deprecate life-cycle methods
    • 

  • (PR#7235) Support teardown of beforeEach plugin
    • 

  • (PR#7228) Add timeout plugin to stop long running predicates
    • 

  • (PR#7237) Deprecate timeout from parameters
    • 

  • (PR#7238) Pass a store to plugins
    • 

  • (PR#7239) Add extra plugin's method called onAllRunsComplete
    • 

  • (PR#7240) Deprecate reporter and asyncReporter from parameters
    • 

  • (PR#7229) Add plugin to interrupt after time limit
    • 

  • (PR#7245) Support failOnInterrupt on the plugin
    • 

  • (PR#7230) Add plugins to drop runs on already covered cases
    • 

  • (PR#7259) Add ability to decorate generate via Plugins
    • 

  • (PR#7231) Add the unbiased plugin to generate without bias
    • 

  • (PR#7260) Deprecate parameters superseded by plugins
    • 

  • (PR#7261) Deprecate v5 removals
    • 



Fixes





... (truncated)





Commits






Updates rollup from 4.60.4 to 4.64.5



Release notes

Sourced from rollup's releases.




v4.64.5


4.64.5


2026-10-10


Bug Fixes


    

  • Prevent cycles when using indirect top-level await for dynamic imports (#6516)
    • 



Pull Requests



v4.64.4


4.64.4


2026-10-10


Bug Fixes


    

  • Support the Rollup WASM build on big-endian hosts (#6559)
    • 



Pull Requests



v4.64.3


4.64.3


2026-10-08


Bug Fixes


    

  • Fix a performance regression when bundling code with deeply nested property calls (#6565)
    • 



Pull Requests


    

  • #6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)
    • 



v4.64.2


4.64.2


2026-10-07


Bug Fixes





... (truncated)





Changelog

Sourced from rollup's changelog.




4.64.5


2026-10-10


Bug Fixes


    

  • Prevent cycles when using indirect top-level await for dynamic imports (#6516)
    • 



Pull Requests



4.64.4


2026-10-10


Bug Fixes


    

  • Support the Rollup WASM build on big-endian hosts (#6559)
    • 



Pull Requests



4.64.3


2026-10-08


Bug Fixes


    

  • Fix a performance regression when bundling code with deeply nested property calls (#6565)
    • 



Pull Requests


    

  • #6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)
    • 



4.64.2


2026-10-07


Bug Fixes


    

  • Fix a regression where certain CoreJS helpers were wrongly tree-shaken (#6562)
    • 

  • Do not show errors from closeBundle if there were also build errors (#6554)
    • 



Pull Requests





... (truncated)





Commits






Updates turbo from 2.9.14 to 2.11.7



Release notes

Sourced from turbo's releases.




Turborepo v2.11.7



What's Changed


Changelog



Full Changelog: vercel/turborepo@v2.11.6...v2.11.7


Turborepo v2.11.6



What's Changed


Changelog



New Contributors



Full Changelog: vercel/turborepo@v2.11.5...v2.11.6


Turborepo v2.11.5



What's Changed


Changelog





... (truncated)





Commits






Updates @bugsee/bugsee-cli from 0.7.11 to 0.7.13



Release notes

Sourced from @​bugsee/bugsee-cli's releases.




0.7.13 - 2026-10-07


Release Notes


Added


    

  • Licensed under MIT. The repository has a LICENSE, the crate declares license = "MIT",
and every published artefact carries it: the release archives, the Homebrew formula, and all
eight npm packages (@bugsee/cli, its six platform packages and @bugsee/bugsee-cli), which
previously had no license field. See #67.
    • 



Changed


    

  • The @bugsee/cli npm page shows the corrected README: run it once as npx @bugsee/cli
(a bare npx bugsee-cli outside a project that installed it is an E404), and the
postinstall fallback is described accurately. Docs only. See #65.
    • 



Fixed


    

  • build-env machine-label falls back to the hostname on macOS and Windows. Outside CI it
shelled out to /usr/bin/hostname, which does not exist on macOS (/bin/hostname) or Windows,
so it printed an empty line, CI=true without $HOSTNAME gave a bare ci, and a local
xcode post-action registered builds without build_metadata.machine. The hostname is now read
with gethostname(2) on Unix and COMPUTERNAME on Windows. See #66.
    • 



#65: bugsee/bugsee-cli#65
#66: bugsee/bugsee-cli#66
#67: bugsee/bugsee-cli#67


Install bugsee-cli 0.7.13


Install prebuilt binaries via shell script


curl --proto '=https' --tlsv1.2 -LsSf https://github.com/bugsee/bugsee-cli/releases/download/v0.7.13/bugsee-cli-installer.sh | sh


Install prebuilt binaries via powershell script


powershell -ExecutionPolicy Bypass -c "irm https://github.com/bugsee/bugsee-cli/releases/download/v0.7.13/bugsee-cli-installer.ps1 | iex"


Install prebuilt binaries via Homebrew


brew install bugsee/tap/bugsee-cli


Install prebuilt binaries into your npm project


npm install @bugsee/bugsee-cli@0.7.13





... (truncated)





Changelog

Sourced from @​bugsee/bugsee-cli's changelog.




[0.7.13] - 2026-10-07


Added


    

  • Licensed under MIT. The repository has a LICENSE, the crate declares license = "MIT",
and every published artefact carries it: the release archives, the Homebrew formula, and all
eight npm packages (@bugsee/cli, its six platform packages and @bugsee/bugsee-cli), which
previously had no license field. See #67.
    • 



Changed


    

  • The @bugsee/cli npm page shows the corrected README: run it once as npx @bugsee/cli
(a bare npx bugsee-cli outside a project that installed it is an E404), and the
postinstall fallback is described accurately. Docs only. See #65.
    • 



Fixed


    

  • build-env machine-label falls back to the hostname on macOS and Windows. Outside CI it
shelled out to /usr/bin/hostname, which does not exist on macOS (/bin/hostname) or Windows,
so it printed an empty line, CI=true without $HOSTNAME gave a bare ci, and a local
xcode post-action registered builds without build_metadata.machine. The hostname is now read
with gethostname(2) on Unix and COMPUTERNAME on Windows. See #66.
    • 



#65: bugsee/bugsee-cli#65
#66: bugsee/bugsee-cli#66
#67: bugsee/bugsee-cli#67


[0.7.12] - 2026-10-07


Added


    

  • 

    upload build can register a build without shipping the artefact's bytes — omit --artifact.
That is the normal case on every platform that has not opted into size analysis (Android unless
sizeAnalysis.enabled, the iOS post-action unless BUGSEE_SIZE_ANALYSIS_ENABLED), and it is the
only case a web build can express, having no single artefact to ship. The mode already existed
inside build::Params and xcode post-action used it; nothing on the command line could reach it,
because --artifact was required and request_artifact_upload was hard-coded true.
    

    --deps and --timings still travel without an artefact — the build-info bundle is a separate
upload. The flags that only describe how artefact bytes move (--mapping, --chunked, --out) are
rejected with exit 20 rather than ignored: silently dropping a --mapping would cost symbolication,
and a caller who passed --chunked is saying they expect bytes to move.
    

    Groundwork for web-build registration — the design and its decisions are in the JS repo,
docs/design/web-build-registration.md. See #52.
    

    format is forwarded from the payload, not validated here, so a web build's format: "web"
needs the backend to accept it (bugsee-appserver#42) — this release adds no new format value.
    

    • 

  • 

    debug-files upload --extension <SUFFIX> picks up files under a spelling the CLI does not
know yet, for any --type — so a toolchain change no longer needs a CLI release before its
symbols upload. Repeat the flag or comma-separate values; the leading . is optional. Suffixes
ADD to each type's built-in names and match the end of the whole name (.so.sym works).
Content checks still apply (ELF build-id, PDB container, dSYM DWARF), and stylesheet /
type-declaration source maps are still skipped under the new spelling. An empty, dot-only or
    

    • 






... (truncated)





Commits

    

  • 6d516d3 chore(release): 0.7.13 (#68)
    • 

  • d868ab5 chore: license under MIT (#67)
    • 

  • 72a6728 fix(build-env): machine-label hostname fallback was empty on macOS (#66)
    • 

  • d8426ca docs: validate READMEs against the code and published 0.7.12 (#65)
    • 

  • 07f9068 chore(release): 0.7.12 (#64)
    • 

  • c854891 chore(deps): bump zstd from 0.13.3 to 0.14.0 (#38)
    • 

  • 6bcbfae feat(debug-files): --extension adds caller-supplied file-name suffixes (#63)
    • 

  • e90b3fe chore(deps): bump the cargo-minor-patch group across 1 directory with 2 updat...
    • 

  • 6b79637 ci(deps): bump actions/checkout (#55)
    • 

  • 9e51e70 fix(elf): accept AGP SYMBOL_TABLE .so.sym entries (#62)
    • 

  • Additional commits viewable in compare view
    • 







Updates ajv from 8.18.0 to 8.20.0



Release notes

Sourced from ajv's releases.




v8.20.0


What's Changed



Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0


v8.19.0


What's Changed



Full Changelog: ajv-validator/ajv@v8.18.0...v8.19.0







Commits






Updates elysia from 1.4.28 to 1.4.30



Release notes

Sourced from elysia's releases.




1.4.30


What's changed


The current development effort will be focused in Elysia 2, see kiana and beta release note.


1.4.x will only publish security updates, no new features.


Chore:


    

  • update test case for Bun 1.4
    • 



Advisory:



Full Changelog: elysiajs/elysia@1.4.29...1.4.30


1.4.29


What's changed


Improvement:


    

  • normalize a multipart/form-data with .get instead of .getAll for faster performance
    • 



Full Changelog: elysiajs/elysia@1.4.28...1.4.29







Changelog

Sourced from elysia's changelog.




1.4.30 - 26 Aug 2026


Chore:


    

  • update test case for Bun 1.4
    • 



Advisory:



1.4.29 - 17 Jun 2026


Bug fix:


    

  • normalize a multipart/form-data with .get instead of .getAll for faster performance
    • 








Commits

    

  • e037eca 🧹 chore: correct spelling mistake in changelog
    • 

  • acea3a7 🧹 chore: add SECURITY.md
    • 

  • a6b9fc7 🧹 chore: update for bun 1.4
    • 

  • b1c325f Merge branch 'main' of https://github.com/elysiajs/elysia
    • 

  • b8256cc 🧹 chore: update for bun 1.4
    • 

  • 767bad1 Merge commit from fork
    • 

  • be31c27 🔧 fix: escape schema default keys and values to prevent code injection
    • 

  • 89088df 🧹 chore: remove blank issue
    • 

  • 2c8b61d 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
    • 

  • 7e7dabd 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
    • 

  • Additional commits viewa...

    Description has been truncated

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      
  dependencies

  Pull requests that update a dependency file

      
  javascript

  Pull requests that update javascript code

  labels


      Oct 12, 2026

    

  



    

    

      
    

    


      


          @dependabot
dependabot
Bot



        changed the title
build(deps): bump the minor-and-patch group across 1 directory with 25 updates

chore(deps): bump the minor-and-patch group across 1 directory with 25 updates


      Oct 13, 2026

    

  



  

  
  

  
    

        

              @dependabot


        

      

        

              dependabot
Bot

              force-pushed
    the
        
      
  dependabot/npm_and_yarn/minor-and-patch-d1e697ef08


    
 branch
    from
    d98632d    to
    364b796      
    Compare
  



          October 13, 2026 06:25          
        

      

    










      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the minor-and-patch group across 1 directory with 2…
        

          
                        
      


      

        

    
    
    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          bf06cf4
        
      

    

  

    

      
…5 updates

Bumps the minor-and-patch group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.4.16` |
| [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.58.7` | `7.59.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.21` | `22.20.5` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.9.0` | `4.10.2` |
| [rollup](https://github.com/rollup/rollup) | `4.60.4` | `4.64.5` |
| [turbo](https://github.com/vercel/turborepo) | `2.9.14` | `2.11.7` |
| [@bugsee/bugsee-cli](https://github.com/bugsee/bugsee-cli) | `0.7.11` | `0.7.13` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [elysia](https://github.com/elysiajs/elysia) | `1.4.28` | `1.4.30` |
| [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` |
| [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.12.5` |
| [@hapi/hapi](https://github.com/hapijs/hapi) | `21.4.9` | `21.4.10` |
| [hono](https://github.com/honojs/hono) | `4.12.25` | `4.13.13` |
| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.12.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.7` | `0.28.2` |
| [miniflare](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/miniflare) | `4.20260722.0` | `4.20260730.0` |
| [playwright](https://github.com/microsoft/playwright) | `1.62.1` | `1.64.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.15` |
| [webpack](https://github.com/webpack/webpack) | `5.111.0` | `5.111.1` |
| [@nuxt/kit](https://github.com/nuxt/nuxt/tree/HEAD/packages/kit) | `3.21.8` | `3.21.11` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.8` | `4.6.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.3` | `5.57.2` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.67.0` | `2.70.3` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `7.1.2` | `7.3.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.14` | `8.3.4` |



Updates `@biomejs/biome` from 2.4.15 to 2.4.16
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.16/packages/@biomejs/biome)

Updates `@microsoft/api-extractor` from 7.58.7 to 7.59.4
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/api-extractor)

Updates `@types/node` from 22.19.21 to 22.20.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `fast-check` from 4.9.0 to 4.10.2
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.10.2/packages/fast-check)

Updates `rollup` from 4.60.4 to 4.64.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.4...v4.64.5)

Updates `turbo` from 2.9.14 to 2.11.7
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.9.14...v2.11.7)

Updates `@bugsee/bugsee-cli` from 0.7.11 to 0.7.13
- [Release notes](https://github.com/bugsee/bugsee-cli/releases)
- [Changelog](https://github.com/bugsee/bugsee-cli/blob/main/CHANGELOG.md)
- [Commits](bugsee/bugsee-cli@v0.7.11...v0.7.13)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `elysia` from 1.4.28 to 1.4.30
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.4.28...1.4.30)

Updates `express` from 5.2.1 to 5.3.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.2.1...v5.3.0)

Updates `fastify` from 5.8.5 to 5.12.5
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.8.5...v5.12.5)

Updates `@hapi/hapi` from 21.4.9 to 21.4.10
- [Release notes](https://github.com/hapijs/hapi/releases)
- [Commits](hapijs/hapi@v21.4.9...v21.4.10)

Updates `hono` from 4.12.25 to 4.13.13
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.25...v4.13.13)

Updates `@opentelemetry/sdk-trace-base` from 2.7.1 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v2.12.0/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.12.0)

Updates `esbuild` from 0.27.7 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.7...v0.28.2)

Updates `miniflare` from 4.20260722.0 to 4.20260730.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/miniflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/miniflare@4.20260730.0/packages/miniflare)

Updates `playwright` from 1.62.1 to 1.64.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.64.0)

Updates `tsx` from 4.22.4 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.4...v4.23.15)

Updates `webpack` from 5.111.0 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.111.0...v5.111.1)

Updates `@nuxt/kit` from 3.21.8 to 3.21.11
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v3.21.11/packages/kit)

Updates `nuxt` from 4.4.8 to 4.6.1
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.6.1/packages/nuxt)

Updates `svelte` from 5.56.3 to 5.57.2
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.2/packages/svelte)

Updates `@sveltejs/kit` from 2.67.0 to 2.70.3
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.70.3/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 7.1.2 to 7.3.1
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.3.1/packages/vite-plugin-svelte)

Updates `vite` from 8.0.14 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@bugsee/bugsee-cli"
  dependency-version: 0.7.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@hapi/hapi"
  dependency-version: 21.4.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@microsoft/api-extractor"
  dependency-version: 7.59.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nuxt/kit"
  dependency-version: 3.21.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-trace-base"
  dependency-version: 2.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.70.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 22.20.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: elysia
  dependency-version: 1.4.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: express
  dependency-version: 5.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fast-check
  dependency-version: 4.10.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fastify
  dependency-version: 5.12.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: hono
  dependency-version: 4.13.13
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: miniflare
  dependency-version: 4.20260730.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nuxt
  dependency-version: 4.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: playwright
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: rollup
  dependency-version: 4.64.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: svelte
  dependency-version: 5.57.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: turbo
  dependency-version: 2.11.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
          

  
  

  
    

        

              @dependabot


        

      

        

              dependabot
Bot

              force-pushed
    the
        
      
  dependabot/npm_and_yarn/minor-and-patch-d1e697ef08


    
 branch
    from
    364b796    to
    bf06cf4      
    Compare
  



          October 16, 2026 01:36          
        

      

    










      

  
      



  

  @coderabbitai






  



    

      

  

    

      
          
      

      
            coderabbitai
    Bot

      

      

      commented


        Oct 16, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          


Review in Change Stack →




No actionable comments were generated in the recent review. 🎉



ℹ️ Recent review info






⚙️ Run configuration





    

  • Configuration used: Organization UI
    • 

  • Review profile: CHILL
    • 

  • Plan: Advanced
    • 

  • Run ID: 8a7c5cc5-23c0-4f0c-a5c7-7b2a3ccf6526
    • 










📥 Commits





Reviewing files that changed from the base of the PR and between 0b90b78 and bf06cf4.









⛔ Files ignored due to path filters: 1





    

  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
    • 










📒 Files selected for processing: 22





    

  • package.json
    • 

  • packages/bun/package.json
    • 

  • packages/bundler-plugin-core/package.json
    • 

  • packages/deno/package.json
    • 

  • packages/e2e-kit/package.json
    • 

  • packages/electron/package.json
    • 

  • packages/elysia/package.json
    • 

  • packages/express/package.json
    • 

  • packages/fastify/package.json
    • 

  • packages/hapi/package.json
    • 

  • packages/hono/package.json
    • 

  • packages/instrumentation-tests/package.json
    • 

  • packages/koa/package.json
    • 

  • packages/nestjs/package.json
    • 

  • packages/nextjs/package.json
    • 

  • packages/node-utils/package.json
    • 

  • packages/node/package.json
    • 

  • packages/nuxt-e2e/package.json
    • 

  • packages/nuxt/package.json
    • 

  • packages/opentelemetry/package.json
    • 

  • packages/sveltekit-e2e/package.json
    • 

  • packages/sveltekit/package.json
    • 









Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.











📝 Summary






Summary by CodeRabbit


    

  • Chores

      

    • Updated development and test tooling across the project.
      • 

    • Refreshed framework and integration versions used by supported platform packages.
      • 

    

    • 




This change updates dependency version ranges across the root and package manifests. It changes ranges for build tools, Node.js types, framework packages, and test and instrumentation dependencies. No exported declarations change.


Suggested reviewers: krassx










Priority: ⬇️ Low



Change: Other




Merge Risk: ⚪ Minimal · up to bf06c








This PR refreshes workspace dependency ranges. The lockfile is consistent, and the inspected Node type changes align with the supported Node versions; no concrete merge-blocking dependency failure is evident.









### Architecture Summary

Architecture risk: 🔵 Low · up to bf06c


The change affects 22 systems.


Changed systems: package.json, packages/bun, packages/bundler-plugin-core, packages/deno, packages/e2e-kit, packages/electron, packages/elysia, packages/express, packages/fastify, packages/hapi, packages/hono, packages/instrumentation-tests, packages/koa, packages/nestjs, packages/nextjs, packages/node, packages/node-utils, packages/nuxt, packages/nuxt-e2e, packages/opentelemetry, packages/sveltekit, packages/sveltekit-e2e


Architecture concerns

No architecture-level concerns identified.



Review details





Systems and components


    

  • observed — package.json (service) was modified; 1 changed file maps to changed impact.
    • 

  • observed — packages/bun (library) was modified; 1 changed file maps to changed impact.
    • 

  • observed — packages/bundler-plugin-core (library) was modified; 1 changed file maps to changed impact.
    • 

  • observed — packages/deno (library) was modified; 1 changed file maps to changed impact.
    • 



Before / after behavior


    

  • observed — Modified behavior in package.json: Updated dependency ranges: Biome 2.4.15 → 2.4.16, API Extractor 7.58.7 → 7.59.4, Node.js types 25.9.1 → 22.20.5, fast-check 4.9.0 → 4.10.2, Rollup 4.60.4 → 4.64.5, and Turbo 2.9.14 → 2.11.7. The other dependencies in this block are unchanged.
    • 

  • observed — Modified behavior in packages/bun/package.json: Changed the @types/node development dependency range from ^25.9.1 to ^22.20.5.
    • 

  • observed — Modified behavior in packages/bundler-plugin-core/package.json: The CLI dependency range changes from ^0.7.11 to ^0.7.13, and the Node.js types development dependency range changes from ^25.9.1 to ^22.20.5; the unplugin range is unchanged.
    • 

  • observed — Modified behavior in packages/deno/package.json: The @types/node devDependency range changes from ^25.9.1 to ^22.20.5.
    • 












Pre-merge checks: Passed 5









Check name
Status
Explanation






Title check
Passed
The title clearly identifies a dependency update and states that 25 minor and patch updates are included. It accurately summarizes the main change.




Description check
Passed
The description directly documents the 25 dependency updates, including package names and version changes. It is related to the changeset.




Linked Issues check
Passed
No active directly linked issue targets remain. Issue #2603 is closed and provides historical context only. Therefore, this pull request has no linked-issue coding requirements.




Out of Scope Changes check
Passed
The reviewed changes update dependency version ranges in package manifests. The changes match the current pull request intent to update the 25 listed packages. No unrelated source, test, or configurat…




Docstring Coverage
Passed
No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…















✨ Finishing Touches






🧪 Generate unit tests (beta)





    

  •   Commit to this branch
    • 

  •   Create a new PR
    • 

















    

  •   Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
    • 





Comment @coderabbitai help to get the list of available commands.



      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    
















  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










    
        

  

    
    

    

  

    Reviewers
  


    

    No reviews






  
      

  


      
  

    Assignees
  



        


    No one assigned







  
        


  


  

    Labels
  



    

      
    dependencies

  Pull requests that update a dependency file
  
    javascript

  Pull requests that update javascript code








  
        

  

    

        

    Projects
  


        




    None yet




  



  
        


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            

Successfully merging this pull request may close these issues.





  
  



      
    

  




      

  
  
        

  

    

      0 participants