Bump the all-dependencies group across 2 directories with 6 updates #329

dependabot · 2025-12-15T16:48:12Z

Bumps the all-dependencies group with 6 updates in the / directory:

Package	From	To
@rollup/plugin-commonjs	`28.0.6`	`29.0.0`
@typescript-eslint/eslint-plugin	`8.47.0`	`8.49.0`
@typescript-eslint/parser	`8.47.0`	`8.49.0`
esbuild	`0.25.10`	`0.27.1`
prettier	`3.6.2`	`3.7.4`
sass	`1.94.1`	`1.96.0`

Bumps the all-dependencies group with 2 updates in the /@stellar/design-system directory: @rollup/plugin-commonjs and esbuild.

Updates @rollup/plugin-commonjs from 28.0.6 to 29.0.0

Changelog

Sourced from @rollup/plugin-commonjs's changelog.

v29.0.0

2025-10-30

Breaking Changes

feat!: revert #1909 and add requireNodeBuiltins option (#1937)

v28.0.9

2025-10-24

Bugfixes

fix: handle node: builtins with strictRequires: auto (#1930)

v28.0.8

2025-10-16

Bugfixes

fix: guard moduleSideEffects for wrapped externals (#1914)

v28.0.7

2025-10-14

Bugfixes

fix: avoid hoisting dynamically required node: builtins under strictRequires (#1909)

Commits

c8e78c8 chore(release): commonjs v29.0.0
d2b14ed feat(commonjs)!: revert #1909 and add requireNodeBuiltins option (#1937)
b079b59 chore(release): commonjs v28.0.9
0881496 fix(commonjs): handle node: builtins with strictRequires: auto (#1930)
232dcf8 chore(release): commonjs v28.0.8
5a6175b fix(commonjs): guard moduleSideEffects for wrapped externals (#1914)
1935e9e chore(release): commonjs v28.0.7
e80d4b2 fix(commonjs): avoid hoisting dynamically required node: builtins under stric...
0862902 chore(repo): update commonjs comment to clarify top-level this rewrite (#1888)
See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.47.0 to 8.49.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

Justin McBride

Kirk Waiblinger @kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)

eslint-plugin: honor ignored base types on generic classes (#11767)

eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

Josh Goldberg

OleksandraKordonets

SangheeSon @Higangssh

tao

You can read about our versioning strategy and releases on our website.

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)

rule-tester: remove workaround for jest circular structure error (#11772)

typescript-estree: gate all errors behind allowInvalidAST (#11693)

typescript-estree: replace fast-glob with tinyglobby (#11740)

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.49.0 (2025-12-08)

🚀 Features

eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

Justin McBride

Kirk Waiblinger @kirkwaiblinger

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

🩹 Fixes

eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

eslint-plugin: honor ignored base types on generic classes (#11767)

eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)

❤️ Thank You

Josh Goldberg

OleksandraKordonets

SangheeSon @Higangssh

tao

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

🚀 Features

eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)

🩹 Fixes

typescript-estree: disallow binding patterns in parameter properties (#11760)

eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#10477)

❤️ Thank You

Dima Barabash @dbarabashh

JamesHenry @JamesHenry

Josh Goldberg

... (truncated)

Commits

864595a chore(release): publish 8.49.0
32b7e89 chore(deps): update dependency @vitest/eslint-plugin to v1.5.1 (#11816)
56149a2 feat(eslint-plugin): use Intl.Segmenter instead of graphemer (#11804)
34a49a4 fix(deps): update dependency prettier to v3.7.2 (#11820)
d2d7ace docs: fixes bad link to jest docs in unbound-method rule page (#11823)
8fe3445 chore(release): publish 8.48.1
5ac66a6 fix(eslint-plugin): revert "[no-redundant-type-constituents] use assignabilit...
906cc3c fix(eslint-plugin): [restrict-template-expressions] check base types in allow...
16cf0f7 test(eslint-plugin): [consistent-type-exports] add more shadowed imports test...
0db02ac fix(eslint-plugin): honor ignored base types on generic classes (#11767)
Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.47.0 to 8.49.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

Justin McBride

Kirk Waiblinger @kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)

eslint-plugin: honor ignored base types on generic classes (#11767)

eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

Josh Goldberg

OleksandraKordonets

SangheeSon @Higangssh

tao

You can read about our versioning strategy and releases on our website.

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)

rule-tester: remove workaround for jest circular structure error (#11772)

typescript-estree: gate all errors behind allowInvalidAST (#11693)

typescript-estree: replace fast-glob with tinyglobby (#11740)

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.49.0 (2025-12-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

864595a chore(release): publish 8.49.0
32b7e89 chore(deps): update dependency @vitest/eslint-plugin to v1.5.1 (#11816)
8fe3445 chore(release): publish 8.48.1
6fb1551 chore(release): publish 8.48.0
a4dc42a chore: migrate to nx 22 (#11780)
See full diff in compare view

Updates esbuild from 0.25.10 to 0.27.1

Release notes

Sourced from esbuild's releases.

v0.27.1
Fix bundler bug with var nested inside if (#4348)

This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.
Fix minifier bug with for inside try inside label (#4351)

This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:
// Original code
d: {
  e: {
    try {
      while (1) { break d }
    } catch { break e; }
  }
}
// Old output (with --minify)
a:try{e:for(;;)break a}catch{break e}
// New output (with --minify)
a:e:try{for(;;)break a}catch{break e}
Inline IIFEs containing a single expression (#4354)

Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:
// Original code
const foo = () => {
  const cb = () => {
    console.log(x())
  }
  return cb()
}
// Old output (with --minify)
const foo=()=>(()=>{console.log(x())})();
// New output (with --minify)
const foo=()=>{console.log(x())};
The minifier now strips empty finally clauses (#4353)

This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.1
Fix bundler bug with var nested inside if (#4348)

This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.
Fix minifier bug with for inside try inside label (#4351)

This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:
// Original code
d: {
  e: {
    try {
      while (1) { break d }
    } catch { break e; }
  }
}
// Old output (with --minify)
a:try{e:for(;;)break a}catch{break e}
// New output (with --minify)
a:e:try{for(;;)break a}catch{break e}
Inline IIFEs containing a single expression (#4354)

Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:
// Original code
const foo = () => {
  const cb = () => {
    console.log(x())
  }
  return cb()
}
// Old output (with --minify)
const foo=()=>(()=>{console.log(x())})();
// New output (with --minify)
const foo=()=>{console.log(x())};
The minifier now strips empty finally clauses (#4353)

This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

... (truncated)

Commits

5e0e56d publish 0.27.1 to npm
5a89732 fix #4354: improve IIFE inlining for expressions
b940218 minify: move unused expr simplification later
c46d498 fix #4353: remove empty try/finally clauses
7a72735 fix #4348: bundler bug with var inside if
4e4e177 fix #4351: label + try + for minifier bug
d6427c9 fix: deno release url wrong comment (#4326)
48e3e19 calling Symbol.for with a primitive never throws
4ff88d0 update decorator-tests.js snapshot
1877e60 calling Symbol with a primitive will never throw
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Updates prettier from 3.6.2 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

Fix comment in union type gets duplicated by @fisker in prettier/prettier#18393

Fix unstable comment print in union type by @fisker in prettier/prettier#18395

Avoid quote around LWC interpolations by @kovsu in prettier/prettier#18383

🔗 Changelog

3.7.3

What's Changed

Fix prettier.getFileInfo() change that breaks VSCode extension by @fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

Fix string print when switching quotes by @fisker in prettier/prettier#18351

Preserve quote for embedded HTML attribute values by @kovsu in prettier/prettier#18352

Fix comment in empty type literal by @fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

Fix performance regression in doc printer (#18342 by @fisker)

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by `@fisker`)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits

7848357 Release 3.7.4
7686c59 Release @prettier/plugin-hermes & @prettier/plugin-oxc v0.1.3
fe49434 Remove dead code checking union/intersection types length (#18396)
ca02b37 Fix unstable comment print (#18395)
7efb988 Fix comment in union type get duplicated (#18393)
cfa92c1 Update dependency @angular/compiler to v21.0.2 (#18392)
1de2737 Update dependency yaml to v2.8.2 (#18391)
706aa4e Switch js parse postprocess to onEnter (#18382)
d3eb2b2 Reuse arrays in visitor keys (#18386)
c45fef1 Fix LWC attribute with --embedded-language-formatting off (#18383)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.

Updates sass from 1.94.1 to 1.96.0

Release notes

Sourced from sass's releases.

Dart Sass 1.96.0

To install Sass 1.96.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Allow numbers with complex units (more than one numerator unit or more than zero denominator units) to be emitted to CSS. These are now emitted as calc() expressions, which now support complex units in plain CSS.

See the full changelog for changes in earlier releases.

Dart Sass 1.95.1

To install Sass 1.95.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.95.0

To install Sass 1.95.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Add support for the CSS-style if() function. In addition to supporting the plain CSS syntax, this also supports a sass() query that takes a Sass expression that evaluates to true or false at preprocessing time depending on whether the Sass value is truthy. If there are no plain-CSS queries, the function will return the first value whose query returns true during preprocessing. For example, if(sass(false): 1; sass(true): 2; else: 3) returns 2.

The old Sass if() syntax is now deprecated. Users are encouraged to migrate to the new CSS syntax. if($condition, $if-true, $if-false) can be changed to if(sass($condition): $if-true; else: $if-false).

See the Sass website for details.

Plain-CSS if() functions are now considered "special numbers", meaning that they can be used in place of arguments to CSS color functions.

Plain-CSS if() functions and attr() functions are now considered "special variable strings" (like var()), meaning they can now be used in place of multiple arguments or syntax fragments in various CSS functions.

See the full changelog for changes in earlier releases.

Dart Sass 1.94.3

To install Sass 1.94.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.96.0

Allow numbers with complex units (more than one numerator unit or more than zero denominator units) to be emitted to CSS. These are now emitted as calc() expressions, which now support complex units in plain CSS.

1.95.1

No user-visible changes.

1.95.0

Add support for the CSS-style if() function. In addition to supporting the plain CSS syntax, this also supports a sass() query that takes a Sass expression that evaluates to true or false at preprocessing time depending on whether the Sass value is truthy. If there are no plain-CSS queries, the function will return the first value whose query returns true during preprocessing. For example, if(sass(false): 1; sass(true): 2; else: 3) returns 2.

The old Sass if() syntax is now deprecated. Users are encouraged to migrate to the new CSS syntax. if($condition, $if-true, $if-false) can be changed to if(sass($condition): $if-true; else: $if-false).

See the Sass website for details.

Plain-CSS if() functions are now considered "special numbers", meaning that they can be used in place of arguments to CSS color functions.

Plain-CSS if() functions and attr() functions are now considered "special variable strings" (like var()), meaning they can now be used in place of multiple arguments or syntax fragments in various CSS functions.

1.94.3

Fix the span reported for standalone % expressions followed by whitespace.

1.94.2

Command-Line Interface

Using --fatal-deprecation <version> no longer emits warnings about deprecations that are obsolete.

Dart API

Deprecation.forVersion now excludes obsolete deprecations from the set it returns.

... (truncated)

Commits

f6bdc02 Add support for complex units in CSS (#2699)
4aa6d5f Support parseSelectors in ImportCache (#2701)
eae38c5 Fix an incorrect link in the changelog (#2700)
4747063 Bump the sass-parser version (#2697)
2abc89e Merge pull request #2693 from sass/css-if
2f7a16c Revert "Bump chokidar from 4.0.3 to 5.0.0 in /package (#2690)" (#2691)
38d4ac8 Add ArgumentList.namedSpans
6f9a593 Add support for plain-CSS if()
3b95eb7 Rename IfExpression to LegacyIfExpression
e2bf843 Make the recursive AST visitor comprehensive (#2694)
Additional commits viewable in compare view

Updates @rollup/plugin-commonjs from 28.0.9 to 29.0.0

Changelog

Sourced from @rollup/plugin-commonjs's changelog.

v29.0.0

2025-10-30

Breaking Changes

feat!: revert #1909 and add requireNodeBuiltins option (#1937)

v28.0.9

2025-10-24

Bugfixes

fix: handle node: builtins with strictRequires: auto (#1930)

v28.0.8

2025-10-16

Bugfixes

fix: guard moduleSideEffects for wrapped externals (#1914)

v28.0.7

2025-10-14

Bugfixes

fix: avoid hoisting dynamically required node: builtins under strictRequires (#1909)

Commits

c8e78c8 chore(release): commonjs v29.0.0
d2b14ed feat(commonjs)!: revert #1909 and add requireNodeBuiltins option (#1937)
b079b59 chore(release): commonjs v28.0.9
0881496 fix(commonjs): handle node: builtins with strictRequires: auto (#1930)
232dcf8 chore(release): commonjs v28.0.8
5a6175b fix(commonjs): guard moduleSideEffects for wrapped externals (#1914)
1935e9e chore(release): commonjs v28.0.7
e80d4b2 fix(commonjs): avoid hoisting dynamically required node: builtins under stric...
0862902 chore(repo): update commonjs comment to clarify top-level this rewrite (#1888)
See full diff in compare view

Updates esbuild from 0.25.12 to 0.27.1

Release notes

Sourced from esbuild's releases.

v0.27.1
Fix bundler bug with var nested inside if (#4348)

This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.
Fix minifier bug with for inside try inside label (#4351)

This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:
// Original code
d: {
  e: {
    try {
      while (1) { break d }
    } catch { break e; }
  }
}
// Old output (with --minify)
a:try{e:for(;;)break a}catch{break e}
// New output (with --minify)
a:e:try{for(;;)break a}catch{break e}
Inline IIFEs containing a single expression (#4354)

Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:
// Original code
const foo = () => {
  const cb = () => {
    console.log(x())
  }
  return cb()
}
// Old output (with --minify)
const foo=()=>(()=>{console.log(x())})();
// New output (with --minify)
const foo=()=>{console.log(x())};
The minifier now strips empty finally clauses (#4353)

This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.1
Fix bundler bug with var nested inside if (#4348)

This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.
Fix minifier bug with for inside try inside label (#4351)

This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:
// Original code
d: {
  e: {
    try {
      while (1) { break d }
    } catch { break e; }
  }
}
// Old output (with --minify)
a:try{e:for(;;)break a}catch{break e}
// New output (with --minify)
a:e:try{for(;;)break a}catch{break e}
Inline IIFEs containing a single expression (#4354)

Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:
// Original code
const foo = () => {
  const cb = () => {
    console.log(x())
  }
  return cb()
}
// Old output (with --minify)
const foo=()=>(()=>{console.log(x())})();
// New output (with --minify)
const foo=()=>{console.log(x())};
The minifier now strips empty finally clauses (#4353)

This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

... (truncated)

Commits

5e0e56d publish 0.27.1 to npm
5a89732 fix #4354: improve IIFE inlining for expressions
b940218 minify: move unused expr simplification later
c46d498 fix #4353: remove empty try/finally clauses
7a72735 fix #4348: bundler bug with var inside if
4e4e177 fix #4351: label + try + for minifier bug
d6427c9 fix: deno release url wrong comment (#4326)
48e3e19 calling Symbol.for with a primitive never throws
4ff88d0 update decorator-tests.js snapshot
1877e60 calling Symbol with a primitive will never throw
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `28.0.6` | `29.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.47.0` | `8.49.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.47.0` | `8.49.0` | | [esbuild](https://github.com/evanw/esbuild) | `0.25.10` | `0.27.1` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` | | [sass](https://github.com/sass/dart-sass) | `1.94.1` | `1.96.0` | Bumps the all-dependencies group with 2 updates in the /@stellar/design-system directory: [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) and [esbuild](https://github.com/evanw/esbuild). Updates `@rollup/plugin-commonjs` from 28.0.6 to 29.0.0 - [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.0/packages/commonjs) Updates `@typescript-eslint/eslint-plugin` from 8.47.0 to 8.49.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.47.0 to 8.49.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/parser) Updates `esbuild` from 0.25.10 to 0.27.1 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.25.10...v0.27.1) Updates `prettier` from 3.6.2 to 3.7.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.7.4) Updates `sass` from 1.94.1 to 1.96.0 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.94.1...1.96.0) Updates `@rollup/plugin-commonjs` from 28.0.9 to 29.0.0 - [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.0/packages/commonjs) Updates `esbuild` from 0.25.12 to 0.27.1 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.25.10...v0.27.1) --- updated-dependencies: - dependency-name: "@rollup/plugin-commonjs" dependency-version: 29.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.49.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.49.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: esbuild dependency-version: 0.27.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: prettier dependency-version: 3.7.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: sass dependency-version: 1.96.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@rollup/plugin-commonjs" dependency-version: 29.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: esbuild dependency-version: 0.27.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2025-12-15T16:48:41Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Maintenance
esbuild@0.25.10 ⏵ 0.27.1		^-2
@rollup/plugin-commonjs@28.0.6 ⏵ 29.0.0	⁺¹
sass@1.93.1 ⏵ 1.96.0		⁺¹

View full report

dependabot · 2026-01-01T19:10:02Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies javascript Pull requests that update javascript code labels Dec 15, 2025

dependabot bot closed this Jan 1, 2026

dependabot bot deleted the dependabot/npm_and_yarn/all-dependencies-1c18d218af branch January 1, 2026 19:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-dependencies group across 2 directories with 6 updates #329

Bump the all-dependencies group across 2 directories with 6 updates #329

Uh oh!

dependabot bot commented on behalf of github Dec 15, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Dec 15, 2025

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the all-dependencies group across 2 directories with 6 updates #329

Bump the all-dependencies group across 2 directories with 6 updates #329

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v29.0.0

Breaking Changes

v28.0.9

Bugfixes

v28.0.8

Bugfixes

v28.0.7

Bugfixes

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

🩹 Fixes

❤️ Thank You

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

8.49.0 (2025-12-08)

🚀 Features

🩹 Fixes

❤️ Thank You

8.48.1 (2025-12-02)

🩹 Fixes

❤️ Thank You

8.48.0 (2025-11-24)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

🩹 Fixes

❤️ Thank You

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

8.49.0 (2025-12-08)

8.48.1 (2025-12-02)

8.48.0 (2025-11-24)

v0.27.1

0.27.1

3.7.4

What's Changed

3.7.3

What's Changed

3.7.2

What's Changed

3.7.1

3.7.0

3.7.4

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

Dart Sass 1.96.0

Changes

Dart Sass 1.95.1

Changes

Dart Sass 1.95.0

Changes

Dart Sass 1.94.3

1.96.0

1.95.1

1.95.0

1.94.3

1.94.2

dependabot bot commented on behalf of github Dec 15, 2025 •

edited

Loading

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)

TypeScript: Fix unstable comment print in union type comments (#18395 by `@fisker`)