Skip to content

chore(deps-dev): bump the development-dependencies group with 4 updates#753

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/development-dependencies-92274eff33
Open

chore(deps-dev): bump the development-dependencies group with 4 updates#753
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/development-dependencies-92274eff33

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 20, 2026

Bumps the development-dependencies group with 4 updates: @types/node, stylelint, undici and vite.

Updates @types/node from 25.5.2 to 25.6.0

Commits

Updates stylelint from 17.6.0 to 17.7.0

Release notes

Sourced from stylelint's releases.

17.7.0

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

Changelog

Sourced from stylelint's changelog.

17.7.0 - 2026-04-12

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

Commits
  • 0b9b48b Release 17.7.0 (#9210)
  • d0c992e Fix function-url-quotes false positives when URLs have modifiers (#8702)
  • 64d07a8 Fix clarity of problem messages (#9199)
  • 38b2df2 Bump lodash from 4.17.23 to 4.18.1 (#9208)
  • 2d9a53d Bump globby from 16.1.1 to 16.2.0 (#9207)
  • 37b1766 Bump @​csstools/css-syntax-patches-for-csstree from 1.1.1 to 1.1.2 in the csst...
  • db04992 Bump codecov/codecov-action from 5.5.2 to 6.0.0 (#9205)
  • 5dd17db Fix --print-config CLI flag to hide internal properties (#9194)
  • f5010d4 Refactor to document properties in Config type (#9195)
  • 73f4834 Refactor to remove unused Config.ignorePatterns property type (#9193)
  • Additional commits viewable in compare view

Updates undici from 8.0.2 to 8.1.0

Release notes

Sourced from undici's releases.

v8.1.0

What's Changed

Full Changelog: nodejs/undici@v8.0.3...v8.1.0

v8.0.3

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.0.2...v8.0.3

Commits

Updates vite from 8.0.7 to 8.0.8

Release notes

Sourced from vite's releases.

v8.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.8 (2026-04-09)

Features

Bug Fixes

  • avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
  • ssr: class property keys hoisting matching imports (#22199) (e137601)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 4 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [stylelint](https://github.com/stylelint/stylelint), [undici](https://github.com/nodejs/undici) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@types/node` from 25.5.2 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `stylelint` from 17.6.0 to 17.7.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.6.0...17.7.0)

Updates `undici` from 8.0.2 to 8.1.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.0.2...v8.1.0)

Updates `vite` from 8.0.7 to 8.0.8
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: stylelint
  dependency-version: 17.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: undici
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Apr 20, 2026

⚠️ No Changeset found

Latest commit: b3e2f00

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedundici@​8.0.2 ⏵ 8.1.07210010098100
Updatedvite@​8.0.7 ⏵ 8.0.8991008298100
Updatedstylelint@​17.6.0 ⏵ 17.7.098 +110010097 +2100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants