Bump the npm-vscode-bicep group across 1 directory with 8 updates by dependabot[bot] · Pull Request #20164 · Azure/bicep

dependabot · 2026-08-09T23:34:28Z

Bumps the npm-vscode-bicep group with 8 updates in the /src/vscode-bicep directory:

Package	From	To
fs-extra	`11.3.6`	`11.4.0`
@types/node	`25.9.5`	`26.1.2`
@types/semver	`7.7.1`	`7.8.0`
eslint	`10.7.0`	`10.8.0`
eslint-plugin-jest	`29.15.5`	`29.16.0`
typescript	`6.0.3`	`7.0.2`
webpack	`5.108.4`	`5.109.2`
webpack-cli	`7.2.1`	`7.2.2`

Updates fs-extra from 11.3.6 to 11.4.0

Changelog

Sourced from fs-extra's changelog.

11.4.0 / 2026-07-23

Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#925, #1076)

Commits

53a8d1a 11.4.0
9c2d3c9 Throw EEXIST when ensureSymlink dest is a broken symlink (#1076)
See full diff in compare view

Updates @types/node from 25.9.5 to 26.1.2

Commits

See full diff in compare view

Updates @types/semver from 7.7.1 to 7.8.0

Commits

See full diff in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)

9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)

e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)

20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)

8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)

b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)

784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)

7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))

92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)

68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)

d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)

eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)

c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)

2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)

eccbe7b test: add error locations to no-class-assign (#21123) (devoil)

e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])

e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])

ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)

044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)

fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)

5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)

9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)

a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)

8dde645 test: add error locations to no-ex-assign (#21102) (devoil)

13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)

a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)

c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)

0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)

3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)

dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)

2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))

5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])

d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)

bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

Commits

749dfed 10.8.0
4bd0d75 Build: changelog update for 10.8.0
4fbf46d test: pin webpack version to 5.108.4 (#21137)
6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
784dfbe docs: Clarify no-eq-null description (#21120)
6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
eccbe7b test: add error locations to no-class-assign (#21123)
2fee9bb feat: export ConfigObject from eslint/config (#21082)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
Additional commits viewable in compare view

Updates eslint-plugin-jest from 29.15.5 to 29.16.0

Release notes

Sourced from eslint-plugin-jest's releases.

v29.16.0

29.16.0 (2026-07-24)

Features

valid-expect-with-promise: add checkThenables option for custom promises (#1996) (692c748)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.16.0 (2026-07-24)

Features

valid-expect-with-promise: add checkThenables option for custom promises (#1996) (692c748)

Commits

98206fb chore(release): 29.16.0 [skip ci]
692c748 feat(valid-expect-with-promise): add checkThenables option for custom promi...
4d690c3 chore(deps): update yarn to v4.17.1 (#1990)
224b92c chore(deps): update actions/setup-node action to v7 (#1993)
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Updates webpack from 5.108.4 to 5.109.2

Release notes

Sourced from webpack's releases.

v5.109.2

Patch Changes

Resolve aliases pointing at a package directory whose name ends with .js again. (by @alexander-akait in #21542)

Name CSS sources in source maps by their resource path, without the css prefix. (by @bjohansebas in #21536)

Delete no longer referenced files from the filesystem cache directory after storing the cache, age them by recorded time so restored caches are cleaned too, and collect every fully expired pack in one store instead of one per build. (by @bjohansebas in #21528)

Report "universal" as the loader context target for the universal target. (by @alexander-akait in #21540)

Skip require().prop in dead branches gated by inlined imported constants. (by @hai-x in #21517)

Annotate configuration options and public hooks in the generated types with the @since JSDoc tag. (by @bjohansebas in #21473)

v5.109.1

Patch Changes

Fix stray semicolon emitted before an imported call following a parenthesized sequence element. (by @alexander-akait in #21533)

Make require(esm) module.exports re-export analysis independent of module processing order. (by @alexander-akait in #21521)

Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so compiler.close() succeeds on Bun. (by @alexander-akait in #21521)

Name the failing key when DefinePlugin fails to evaluate a typeof value. (by @alexander-akait in #21503)

Improve Deno compatibility: guard setNoDelay and force-close connections on lazy-compilation backend dispose, and return a real ArrayBuffer from the Node async/sync wasm loader so WebAssembly.instantiate accepts it. (by @alexander-akait in #21524)

Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing. (by @alexander-akait in #21492)

Track CommonJS build dependencies by parsing sources when require.cache children are unavailable (e.g. Bun). (by @alexander-akait in #21531)

Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers. (by @alexander-akait in #21500)

Build the CSS parseA* AST on the SoA store instead of node classes, cutting parse memory and time. (by @alexander-akait in #21498)

Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively. (by @alexander-akait in #21504)

Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals. (by @alexander-akait in #21511)

Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors. (by @alexander-akait in #21506)

Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead. (by @bjohansebas in #21520)

Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths. (by @alexander-akait in #21516)

Enable the Node.js compile cache in the webpack CLI entry point. (by @bjohansebas in #21523)

Encode the persistent cache with V8's value serializer. (by @avivkeller in #21514)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.109.2

Patch Changes

Resolve aliases pointing at a package directory whose name ends with .js again. (by @alexander-akait in #21542)

Name CSS sources in source maps by their resource path, without the css prefix. (by @bjohansebas in #21536)

Delete no longer referenced files from the filesystem cache directory after storing the cache, age them by recorded time so restored caches are cleaned too, and collect every fully expired pack in one store instead of one per build. (by @bjohansebas in #21528)

Report "universal" as the loader context target for the universal target. (by @alexander-akait in #21540)

Skip require().prop in dead branches gated by inlined imported constants. (by @hai-x in #21517)

Annotate configuration options and public hooks in the generated types with the @since JSDoc tag. (by @bjohansebas in #21473)

5.109.1

Patch Changes

Fix stray semicolon emitted before an imported call following a parenthesized sequence element. (by @alexander-akait in #21533)

Make require(esm) module.exports re-export analysis independent of module processing order. (by @alexander-akait in #21521)

Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so compiler.close() succeeds on Bun. (by @alexander-akait in #21521)

Name the failing key when DefinePlugin fails to evaluate a typeof value. (by @alexander-akait in #21503)

Improve Deno compatibility: guard setNoDelay and force-close connections on lazy-compilation backend dispose, and return a real ArrayBuffer from the Node async/sync wasm loader so WebAssembly.instantiate accepts it. (by @alexander-akait in #21524)

Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing. (by @alexander-akait in #21492)

Track CommonJS build dependencies by parsing sources when require.cache children are unavailable (e.g. Bun). (by @alexander-akait in #21531)

Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers. (by @alexander-akait in #21500)

Build the CSS parseA* AST on the SoA store instead of node classes, cutting parse memory and time. (by @alexander-akait in #21498)

Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively. (by @alexander-akait in #21504)

Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals. (by @alexander-akait in #21511)

Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors. (by @alexander-akait in #21506)

Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead. (by @bjohansebas in #21520)

Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths. (by @alexander-akait in #21516)

Enable the Node.js compile cache in the webpack CLI entry point. (by @bjohansebas in #21523)

... (truncated)

Commits

6a24bd6 chore(release): new release (#21534)
d1b5b6d fix: resolve aliases pointing at a package directory ending in .js (#21542)
9cdcc57 fix(target): report "universal" as the loader target (#21540)
774e7e4 feat: annotate schema options with added keywords (#21473)
ff07bdc fix(css): name CSS sources in source maps by their resource path (#21536)
d56d82d fix(cache): reclaim stale filesystem cache files reliably (#21539)
ae67e2a chore(readme): add codspeed (#21497)
964bbfa fix: delete no longer referenced files from the filesystem cache directory (#...
075d0cd feat: skip require().prop in dead branches (#21517)
ec39088 chore(release): new release (#21493)
Additional commits viewable in compare view

Updates webpack-cli from 7.2.1 to 7.2.2

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

Changelog

Sourced from webpack-cli's changelog.

7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

Commits

191fa9f chore(release): new release (#4820)
1082235 chore(deps-dev): bump js-yaml from 5.2.1 to 5.2.2 (#4821)
e36ae82 chore: add publish workflow and script for pkg.pr.new integration (#4819)
b0a2024 perf: enable the Node.js compile cache (#4818)
53f6d72 chore(deps): bump actions/checkout in the dependencies group (#4816)
8856346 chore: add allowscripts to work with npm 12 (#4811)
0b0f1ee chore(deps): bump fast-uri from 3.1.2 to 3.1.4 (#4815)
d60a777 chore(deps-dev): bump postcss from 8.5.10 to 8.5.22 (#4814)
8c1719a chore(deps): bump shell-quote from 1.8.4 to 1.10.0 (#4813)
8c2473c chore(deps): bump immutable from 5.1.5 to 5.1.9 (#4812)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

###### Microsoft Reviewers: [Open in CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com//pull/20164)

Bumps the npm-vscode-bicep group with 8 updates in the /src/vscode-bicep directory: | Package | From | To | | --- | --- | --- | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.6` | `11.4.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.5` | `26.1.2` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` | | [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` | | [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.15.5` | `29.16.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.109.2` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.1` | `7.2.2` | Updates `fs-extra` from 11.3.6 to 11.4.0 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.6...11.4.0) Updates `@types/node` from 25.9.5 to 26.1.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/semver` from 7.7.1 to 7.8.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `eslint` from 10.7.0 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.7.0...v10.8.0) Updates `eslint-plugin-jest` from 29.15.5 to 29.16.0 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](jest-community/eslint-plugin-jest@v29.15.5...v29.16.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `webpack` from 5.108.4 to 5.109.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.4...v5.109.2) Updates `webpack-cli` from 7.2.1 to 7.2.2 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.1...webpack-cli@7.2.2) --- updated-dependencies: - dependency-name: fs-extra dependency-version: 11.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-vscode-bicep - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-vscode-bicep - dependency-name: "@types/semver" dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-vscode-bicep - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-vscode-bicep - dependency-name: eslint-plugin-jest dependency-version: 29.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-vscode-bicep - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-vscode-bicep - dependency-name: webpack dependency-version: 5.109.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-vscode-bicep - dependency-name: webpack-cli dependency-version: 7.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-vscode-bicep ... Signed-off-by: dependabot[bot] <support@github.com>

microsoft-github-policy-service

microsoft-github-policy-service

microsoft-github-policy-service

microsoft-github-policy-service

microsoft-github-policy-service

github-actions · 2026-08-09T23:37:31Z

Test this change out locally with the following install scripts (Action run 31342231398)

VSCode

Mac/Linux

bash <(curl -Ls https://aka.ms/bicep/nightly-vsix.sh) --run-id 31342231398

Windows

iex "& { $(irm https://aka.ms/bicep/nightly-vsix.ps1) } -RunId 31342231398"

Azure CLI

Mac/Linux

bash <(curl -Ls https://aka.ms/bicep/nightly-cli.sh) --run-id 31342231398

Windows

iex "& { $(irm https://aka.ms/bicep/nightly-cli.ps1) } -RunId 31342231398"

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 9, 2026

microsoft-github-policy-service Bot enabled auto-merge (squash) August 9, 2026 23:34

microsoft-github-policy-service Bot added the auto-merge Automatically merge this PR label Aug 9, 2026

microsoft-github-policy-service Bot approved these changes Aug 9, 2026

View reviewed changes

Navigation Menu

Uh oh!

Bump the npm-vscode-bicep group across 1 directory with 8 updates - #20164

Bump the npm-vscode-bicep group across 1 directory with 8 updates#20164
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/vscode-bicep/npm-vscode-bicep-5ba9121e92

dependabot Bot commented on behalf of github Aug 9, 2026 •

edited by microsoft-github-policy-service Bot

Loading

Uh oh!

microsoft-github-policy-service Bot left a comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Uh oh!

github-actions Bot commented Aug 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 9, 2026 • edited by microsoft-github-policy-service Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

11.4.0 / 2026-07-23

v10.8.0

Features

Bug Fixes

Documentation

Chores

v29.16.0

29.16.0 (2026-07-24)

Features

29.16.0 (2026-07-24)

Features

v5.109.2

Patch Changes

v5.109.1

Patch Changes

5.109.2

Patch Changes

5.109.1

Patch Changes

webpack-cli@7.2.2

Patch Changes

7.2.2

Patch Changes

Uh oh!

microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

Uh oh!

microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Aug 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 9, 2026 •

edited by microsoft-github-policy-service Bot

Loading