Skip to content

chore(deps): bump brace-expansion, @babel/cli, nyc, pretty-quick and rimraf - #63

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-874e3e152b
Closed

chore(deps): bump brace-expansion, @babel/cli, nyc, pretty-quick and rimraf#63
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-874e3e152b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion to 5.0.8 and updates ancestor dependencies brace-expansion, @babel/cli, nyc, pretty-quick and rimraf. These dependencies need to be updated together.

Updates brace-expansion from 1.1.13 to 5.0.8

Release notes

Sourced from brace-expansion's releases.

v4.0.1

  • fmt 5a5cc17
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

juliangruber/brace-expansion@v4.0.0...v4.0.1

v4.0.0

  • feat: use string replaces instead of splits (#64) 278132b
  • fmt dd72a59
  • add tea.yaml 70e4c1b

juliangruber/brace-expansion@v3.0.0...v4.0.0

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

v3.0.1

  • pkg: publish on tag 3.x 3059c07
  • fmt 8229e6f
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

juliangruber/brace-expansion@v3.0.0...v3.0.1

v3.0.0

  • Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
  • added jsdoc (#55) 68c0e37
  • node 16 is EOL 9e781e9
  • add standard 3494c4d
  • use const and let (#57) dd5a4cb
  • docs 6dad209
  • remove test e3dd8ae
  • ci: update node versions d23ede9
  • docs: add @​lanodan to contributors 1eb3fa4
  • docs 1e7c9cd
  • switch from tape to test module (#60) 2520537
  • Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
  • Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
  • docs: add back ci badge 8ee5626
  • Add github actions, remove travis. Closes #52 (#53) 5c8756a
  • CI: Drop unused sudo: false Travis directive (#50) 05978a7

juliangruber/brace-expansion@v2.0.1...v3.0.0

v2.1.1

  • Backport v5.0.6 change to v2 (#109) c3a817c

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @babel/cli from 7.22.9 to 8.0.4

Release notes

Sourced from @​babel/cli's releases.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

Committers: 4

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

Committers: 2

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

Committers: 2

... (truncated)

Changelog

Sourced from @​babel/cli's changelog.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

v8.0.1 (2026-06-17)

💥 Breaking Change

  • babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

  • babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • babel-parser

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/cli since your current version.


Updates nyc from 15.1.0 to 18.0.0

Release notes

Sourced from nyc's releases.

nyc: v18.0.0

18.0.0 (2026-02-22)

⚠ BREAKING CHANGES

  • deps: transitive dependencies now require node 20 || >=22.

Bug Fixes

  • deps: update dependencies pulling in old glob (#1612) (0707729)

nyc: v17.1.0

17.1.0 (2024-09-19)

Features

  • deps: bump foreground-child from ^2.0.0 to ^3.0.0 (#1546) (af74d1e)

Bug Fixes

nyc: v17.0.0

17.0.0 (2024-04-19)

⚠ BREAKING CHANGES

  • minimum Node version now 18

Bug Fixes

Build System

  • minimum Node version now 18 (9ef340e)
Changelog

Sourced from nyc's changelog.

18.0.0 (2026-02-22)

⚠ BREAKING CHANGES

  • deps: transitive dependencies now require node 20 || >=22.

Bug Fixes

  • deps: update dependencies pulling in old glob (#1612) (0707729)

17.1.0 (2024-09-19)

Features

  • deps: bump foreground-child from ^2.0.0 to ^3.0.0 (#1546) (af74d1e)

Bug Fixes

17.0.0 (2024-04-19)

⚠ BREAKING CHANGES

  • minimum Node version now 18

Bug Fixes

Build System

  • minimum Node version now 18 (9ef340e)

16.0.0 (2024-04-10)

⚠ BREAKING CHANGES

  • minimum Node version now 18

Bug Fixes

... (truncated)

Commits
  • 3ce6d97 chore(main): release nyc 18.0.0 (#1613)
  • b9f6781 build: publication is now manual again due to changes in tokens
  • 0707729 fix(deps)!: update dependencies pulling in old glob (#1612)
  • 41f4476 chore(main): release nyc 17.1.0 (#1572)
  • d338985 chore(deps-dev): bump requirejs from 2.3.6 to 2.3.7 (#1582)
  • af74d1e feat(deps): bump foreground-child from ^2.0.0 to ^3.0.0 (#1546)
  • ae657b6 fix: reduce size of serialized JSON output (#1570)
  • b6a9484 chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#1571)
  • b86edbc chore(deps-dev): bump ws from 8.16.0 to 8.17.1 (#1568)
  • fee2821 chore(main): release nyc 17.0.0 (#1558)
  • Additional commits viewable in compare view

Updates pretty-quick from 3.1.3 to 3.3.1

Release notes

Sourced from pretty-quick's releases.

v3.3.1

Patch Changes

Full Changelog: prettier/pretty-quick@v3.3.0...v3.3.1

v3.3.0

Minor Changes

  • #180 93924ab Thanks @​SukkaW! - refactor: replace chalk and multimatch with their lightweight and performant alternatives

Patch Changes

New Contributors

Full Changelog: prettier/pretty-quick@v3.2.1...v3.3.0

v3.2.1

Patch Changes

Full Changelog: prettier/pretty-quick@v3.2.0...v3.2.1

v3.2.0

Minor Changes

Full Changelog: prettier/pretty-quick@v3.1.4...v3.2.0

v3.1.4

Patch Changes

Full Changelog: prettier/pretty-quick@v3.1.3...v3.1.4

Changelog

Sourced from pretty-quick's changelog.

3.3.1

Patch Changes

3.3.0

Minor Changes

  • #180 93924ab Thanks @​SukkaW! - refactor: replace chalk and multimatch with their lightweight and performant alternatives

Patch Changes

3.2.1

Patch Changes

3.2.0

Minor Changes

3.1.4

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by jounqin, a new releaser for pretty-quick since your current version.


Updates rimraf from 5.0.1 to 6.1.3

Changelog

Sourced from rimraf's changelog.

6.1

  • Move to native fs/promises usage instead of promisifying manually.

6.0

  • Drop support for nodes before v20
  • Add --version to CLI

5.0

  • No default export, only named exports

4.4

  • Provide Dirent or Stats object as second argument to filter

4.3

  • Return boolean indicating whether the path was fully removed
  • Add filter option
  • bin: add --verbose, -v to print files as they are deleted
  • bin: add --no-verbose, -V to not print files as they are deleted
  • bin: add -i --interactive to be prompted on each deletion
  • bin: add -I --no-interactive to not be prompted on each deletion
  • 4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

  • Brought back glob support, using the new and improved glob v9

v4.1

  • Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.
  • Accept and ignore -rf and -fr arguments to the bin.

v4.0

  • Remove glob dependency entirely. This library now only accepts actual file and folder names to delete.
  • Accept array of paths or single path.
  • Windows performance and reliability improved.
  • All strategies separated into explicitly exported methods.
  • Drop support for Node.js below version 14
  • rewrite in TypeScript

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…rimraf

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.8 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli), [nyc](https://github.com/istanbuljs/nyc), [pretty-quick](https://github.com/prettier/pretty-quick) and [rimraf](https://github.com/isaacs/rimraf). These dependencies need to be updated together.


Updates `brace-expansion` from 1.1.13 to 5.0.8
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.13...v5.0.8)

Updates `@babel/cli` from 7.22.9 to 8.0.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-cli)

Updates `nyc` from 15.1.0 to 18.0.0
- [Release notes](https://github.com/istanbuljs/nyc/releases)
- [Changelog](https://github.com/istanbuljs/nyc/blob/main/CHANGELOG.md)
- [Commits](istanbuljs/nyc@v15.1.0...nyc-v18.0.0)

Updates `pretty-quick` from 3.1.3 to 3.3.1
- [Release notes](https://github.com/prettier/pretty-quick/releases)
- [Changelog](https://github.com/prettier/pretty-quick/blob/master/CHANGELOG.md)
- [Commits](prettier/pretty-quick@v3.1.3...v3.3.1)

Updates `rimraf` from 5.0.1 to 6.1.3
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v5.0.1...v6.1.3)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.8
  dependency-type: indirect
- dependency-name: "@babel/cli"
  dependency-version: 8.0.4
  dependency-type: direct:development
- dependency-name: nyc
  dependency-version: 18.0.0
  dependency-type: direct:development
- dependency-name: pretty-quick
  dependency-version: 3.3.1
  dependency-type: direct:development
- dependency-name: rimraf
  dependency-version: 6.1.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 28, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-874e3e152b branch July 28, 2026 01:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants