Skip to content

build(deps): bump picomatch, @rollup/pluginutils and mocha - #672

Merged
eidoriantan merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8a55131c4f
Jun 22, 2026
Merged

build(deps): bump picomatch, @rollup/pluginutils and mocha#672
eidoriantan merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8a55131c4f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps picomatch to 4.0.4 and updates ancestor dependencies picomatch, @rollup/pluginutils and mocha. These dependencies need to be updated together.

Updates picomatch from 2.3.1 to 4.0.4

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

4.0.3

What's Changed

New Contributors

Full Changelog: micromatch/picomatch@4.0.2...4.0.3

3.0.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@3.0.1...3.0.2

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Updates @rollup/pluginutils from 5.0.2 to 5.4.0

Changelog

Sourced from @​rollup/pluginutils's changelog.

v5.4.0

2026-05-29

Features

  • feat: named exports for reserved-word keys + fix duplicate default export in dataToEsm (#2002)

v5.3.0

2025-09-04

Features

  • feat: add suffixRegex & support multiple string (#1886)

v5.2.0

2025-06-17

Features

  • feat: add exactRegex and prefixRegex (#1865)

v5.1.4

2024-12-15

Updates

  • refactor: replace test with includes (#1787)

v5.1.3

2024-10-23

Bugfixes

  • fix: upgrade picomatch (#1796)

v5.1.2

2024-09-23

Bugfixes

  • fix: optimize createFilter and normalizePath (#1750)

v5.1.1

... (truncated)

Commits
  • b54225e chore(release): pluginutils v5.4.0
  • 1d7199a feat(pluginutils): named exports for reserved-word keys + fix duplicate defau...
  • 1cfa530 chore(repo): test migration to vitest. phase 3 (#1977)
  • ca47809 chore(release): pluginutils v5.3.0
  • 917d710 feat(pluginutils): add suffixRegex & support multiple string (#1886)
  • a0b954e chore(release): pluginutils v5.2.0
  • dae1bd3 feat(pluginutils): add exactRegex and prefixRegex (#1865)
  • d32bcf6 chore(release): pluginutils v5.1.4
  • 4cfc1c3 refactor(pluginutils,node-resolve): replace test with includes (#1787)
  • 92daef0 chore(release): pluginutils v5.1.3
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​rollup/pluginutils since your current version.


Updates mocha from 10.8.2 to 11.7.6

Release notes

Sourced from mocha's releases.

v11.7.6

11.7.6 (2026-02-14)

🩹 Fixes

  • make describe().timeout() work (aafe6fd)
  • test: replace wmic usage with native Windows API (#5694) (73ebdfa)

🧹 Chores

v11.7.5

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

v11.7.4

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

v11.7.3

11.7.3 (2025-09-30)

... (truncated)

Changelog

Sourced from mocha's changelog.

11.7.6 (2026-02-14)

🩹 Fixes

  • make describe().timeout() work (aafe6fd)
  • test: replace wmic usage with native Windows API (#5694) (73ebdfa)

🧹 Chores

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 22, 2026
@eidoriantan

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [picomatch](https://github.com/micromatch/picomatch) to 4.0.4 and updates ancestor dependencies [picomatch](https://github.com/micromatch/picomatch), [@rollup/pluginutils](https://github.com/rollup/plugins/tree/HEAD/packages/pluginutils) and [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together.


Updates `picomatch` from 2.3.1 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...4.0.4)

Updates `@rollup/pluginutils` from 5.0.2 to 5.4.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/pluginutils/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/pluginutils-v5.4.0/packages/pluginutils)

Updates `mocha` from 10.8.2 to 11.7.6
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.6/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.8.2...v11.7.6)

---
updated-dependencies:
- dependency-name: "@rollup/pluginutils"
  dependency-version: 5.4.0
  dependency-type: indirect
- dependency-name: mocha
  dependency-version: 11.7.6
  dependency-type: direct:development
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-8a55131c4f branch from 04bfc4b to 7297263 Compare June 22, 2026 14:05
@eidoriantan
eidoriantan merged commit 8e34400 into main Jun 22, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-8a55131c4f branch June 22, 2026 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant