Skip to content

chore(deps-dev): bump the npm-updates group across 1 directory with 3 updates - #370

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-updates-15f3ed903b
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-updates-15f3ed903b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-updates group with 3 updates in the / directory: @commitlint/cli, eslint and rollup.

Updates @commitlint/cli from 21.2.3 to 21.2.4

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/cli

Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates rollup from 4.64.7 to 4.65.0

Release notes

Sourced from rollup's releases.

v4.65.0

4.65.0

2026-10-22

Features

  • Support synthetic named exports in namespaces when preserving modules (#6589)

Bug Fixes

  • Fix a situation where unaligned sourcemaps resulted in a wrong segment (#6591)
  • Forward startup errors on native module load when starting rollup (#6592)

Pull Requests

v4.64.12

4.64.12

2026-10-20

Bug Fixes

  • Allow generating logs from transform hooks at position 0 (#6587)
  • Properly handle global or sticky regular expressions for file names (#6588)

Pull Requests

v4.64.10

4.64.10

2026-10-18

Bug Fixes

  • Avoid breaking lazy loading when a dynamic import only contains reexports from a manual chunk (#6583)
  • Ensure HTML entities in JSX are properly decoded in the output (#6584)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.65.0

2026-10-22

Features

  • Support synthetic named exports in namespaces when preserving modules (#6589)

Bug Fixes

  • Fix a situation where unaligned sourcemaps resulted in a wrong segment (#6591)
  • Forward startup errors on native module load when starting rollup (#6592)

Pull Requests

4.64.12

2026-10-20

Bug Fixes

  • Allow generating logs from transform hooks at position 0 (#6587)
  • Properly handle global or sticky regular expressions for file names (#6588)

Pull Requests

4.64.10

2026-10-18

Bug Fixes

  • Avoid breaking lazy loading when a dynamic import only contains reexports from a manual chunk (#6583)
  • Ensure HTML entities in JSX are properly decoded in the output (#6584)

Pull Requests

... (truncated)

Commits
  • 9aac09a 4.65.0
  • 56200ea Preserve native module load errors (#6592)
  • 61ce2a7 Close bundles in the Gulp examples (#6593)
  • fba8c01 Merge synthetic named exports into static namespaces when preserving modules ...
  • 0cae2c7 Improve review instructions and resolve audit (#6594)
  • 05c6ba2 Use the last sourcemap segment for log locations after its start (#6591)
  • e70c19b Stabilize flaky watch test "treats filenames literally, not as globs" (#6590)
  • 78d43df 4.64.12
  • 375a2d0 Match stateful external regular expressions consistently (#6588)
  • 3a9f4af Fix transform diagnostics at position zero (#6587)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 26, 2026 07:05
@dependabot
dependabot Bot requested a review from leticiafernandes October 26, 2026 07:05
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 26, 2026
@dependabot
dependabot Bot requested a review from ingvaar October 26, 2026 07:05
@dependabot dependabot Bot added dev Pull Requests that deployed to dev javascript Pull requests that update Javascript code minor Pull requests with new features security labels Oct 26, 2026
@coderabbitai

coderabbitai Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: cdf1fda7-4121-42a9-92f0-2be8269e29ad
Commits

Reviewing files that changed from the base of the PR and between 34a2195 and 2d84a3a.

Files ignored due to path filters: 1
  • yarn.lock is excluded by !**/yarn.lock, !**/*.lock
Files selected for processing: 1
  • package.json
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

Files skipped from review as they are similar to previous changes: 1
  • package.json

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 6 remain after this review.

Summary by CodeRabbit

  • Chores
    • Updated the development tooling to a newer patch version. This maintenance update does not change the app’s features or behavior, and there are no end-user-facing changes to highlight in this release.

Walkthrough

The pull request updates the @commitlint/cli development dependency from 21.2.3 to 21.2.4. This package change is not in the production runtime path.

Changes

Development dependency update

Layer / File(s) Summary
Update commitlint CLI version
package.json
The development dependency @commitlint/cli changes from 21.2.3 to 21.2.4.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: Minimal · up to 2d84a

The dependency update has no identified issue blocking merge after normal checks.

Architecture risk: Low · up to cbdc7

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in package.json: The @commitlint/cli development dependency version changes from 21.2.3 to 21.2.4.
Pre-merge checks: Passed 4
Check name Status Explanation
Title check Passed The title names the dependency group bump (chore(deps-dev)) and its scope. This matches the changeset, which bumps dev dependencies in the npm-updates group. The title states the type of change and th…
Description check Passed The description states the grouped update of three packages (@commitlint/cli, eslint, rollup) in the root directory. It includes the release notes for each package. This matches the changeset's depend…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title names the dependency group bump (chore(deps-dev)) and its scope. This matches the changeset, which bumps dev dependencies in the npm-updates group. The title states the type of change and the group, but not the specific packages. It does not describe the three updated packages or their versions.

Full details: Description check

Explanation

The description states the grouped update of three packages (@commitlint/cli, eslint, rollup) in the root directory. It includes the release notes for each package. This matches the changeset's dependency updates. The raw summary covers only the @commitlint/cli change, so the description's mention of eslint and rollup goes beyond what the summary shows. This does not make the description off-topic.

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@dependabot dependabot Bot changed the title chore(deps-dev): bump the npm-updates group with 3 updates chore(deps-dev): bump the npm-updates group across 1 directory with 3 updates Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-updates-15f3ed903b branch 2 times, most recently from 34a2195 to c666bc0 Compare October 26, 2026 13:07
… updates

Bumps the npm-updates group with 3 updates in the / directory: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli), [eslint](https://github.com/eslint/eslint) and [rollup](https://github.com/rollup/rollup).


Updates `@commitlint/cli` from 21.2.3 to 21.2.4
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/cli)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `rollup` from 4.64.7 to 4.65.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.64.7...v4.65.0)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 21.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-updates
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: rollup
  dependency-version: 4.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-updates-15f3ed903b branch from c666bc0 to 2d84a3a Compare October 26, 2026 13:12
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-updates-15f3ed903b branch November 2, 2026 07:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file dev Pull Requests that deployed to dev javascript Pull requests that update Javascript code minor Pull requests with new features security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants