Skip to content

deps(deps-dev): bump the development-dependencies group across 1 directory with 3 updates - #91

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/development-dependencies-604d80ec38
Open

deps(deps-dev): bump the development-dependencies group across 1 directory with 3 updates#91
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/development-dependencies-604d80ec38

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 3 updates in the / directory: @wordpress/element, @wordpress/env and pa11y-ci.

Updates @wordpress/element from 6.46.0 to 8.6.0

Changelog

Sourced from @​wordpress/element's changelog.

8.6.0 (2026-08-26)

Bug Fixes

  • serialize/renderToString: Render memo-wrapped components instead of serializing them to an empty string (#81986).

Internal

  • Split tsconfig into a build project and a default dev project so dev files are type checked without publishing their declarations. (#81514)

8.5.0 (2026-08-12)

8.4.0 (2026-07-29)

Bug Fixes

  • createInterpolateElement: Warn and stop interpolating instead of throwing when an unmatched closing tag is present (#60843).

8.3.0 (2026-07-14)

Breaking Changes

  • Move react and react-dom from dependencies to peerDependencies. Consumers must now provide react and react-dom themselves. @types/react and @types/react-dom become optional peer dependencies (#80053).

8.2.0 (2026-07-01)

8.1.0 (2026-06-24)

8.0.1 (2026-06-16)

8.0.0 (2026-06-10)

Breaking Changes

  • Revert React back to v18 #78940.

7.0.0 (2026-05-27)

Breaking Changes

  • Updated dependencies to React 19.2.4 (#61521).
  • Removed the render, hydrate and unmountComponentAtNode exports that have been deprecated since WordPress 6.2 after upgrade to React 18 (#61521).

New Features

  • Added new react exports: Activity, use, useActionState, useEffectEvent, and useOptimistic (#61521).
  • Added new react-dom exports: useFormStatus, preconnect, prefetchDNS, preinit, preinitModule, preload, and preloadModule (#61521).
Commits
  • d06b010 chore(release): publish (#82084)
  • 0790fa5 Update changelog files
  • 098e3ba Merge changes published in the Gutenberg plugin "release/23.9" branch
  • 989764d chore(release): publish
  • e18aa00 Update changelog files
  • dbb73c9 Merge changes published in the Gutenberg plugin "release/23.8" branch
  • 7e8b17a chore(release): publish
  • 42ad080 Update changelog files
  • edffa74 Merge changes published in the Gutenberg plugin "release/23.7" branch
  • e9a74f9 chore(release): publish
  • Additional commits viewable in compare view

Updates @wordpress/env from 11.4.0 to 11.14.0

Changelog

Sourced from @​wordpress/env's changelog.

11.14.0 (2026-08-26)

Bug Fixes

  • Update git sources to the latest commit when --update is passed. Previously, a source pointing at a branch (such as "core": "WordPress/WordPress") stayed at the commit it was first cloned at, no matter how many times it was updated.
  • Do not fail wp-env start when Docker images cannot be pulled (e.g., the Docker registry is unreachable); fall back to locally cached images and show a notice instead. (#81631)

11.13.0 (2026-08-12)

11.12.0 (2026-07-29)

11.11.0 (2026-07-14)

11.10.0 (2026-07-01)

11.9.0 (2026-06-24)

11.8.1 (2026-06-16)

11.8.0 (2026-06-10)

Enhancements

  • Use partial clones (--filter=blob:none) when downloading git sources and the PHPUnit test suite to reduce download size. (#78918)

Bug Fixes

  • Replace extract-zip with adm-zip to fix silent hang on Node 24.16.0 (libuv 1.52.1) when downloading URL-based zip sources. (#78762)

11.7.0 (2026-05-27)

11.6.0 (2026-05-14)

11.5.0 (2026-04-29)

Commits
  • d06b010 chore(release): publish (#82084)
  • 0790fa5 Update changelog files
  • 098e3ba Merge changes published in the Gutenberg plugin "release/23.9" branch
  • 989764d chore(release): publish
  • e18aa00 Update changelog files
  • dbb73c9 Merge changes published in the Gutenberg plugin "release/23.8" branch
  • 7e8b17a chore(release): publish
  • 42ad080 Update changelog files
  • edffa74 Merge changes published in the Gutenberg plugin "release/23.7" branch
  • e9a74f9 chore(release): publish
  • Additional commits viewable in compare view

Updates pa11y-ci from 3.1.0 to 4.1.1

Release notes

Sourced from pa11y-ci's releases.

v4.1.1

Pa11y CI 4.1.1 updates the lodash dependency to ~4.18.1 to resolve GHSA-f23m-r3pf-42r / CVE-2026-2950.

v4.1.0

What's changed

  • Add support for config files with the .cjs extension
  • Improve documentation for sitemap-exclude
  • Improve npm keywords for better discoverability
  • Replace nyc with c8 for test coverage
  • Replace mockery with quibble for mocking
  • Upgrade dependencies to recent versions matching pa11y's to ensure deduplication works well

New Contributors

Full Changelog: pa11y/pa11y-ci@4.0.1...4.1.0

v4.0.1

Pa11y CI 4.0.1 reintroduces compatibility for node >=20.0.0 <20.18.1.

(At the time of writing, v20.19.4 is the latest version of node 20.)

Pa11y CI 4.0.0 updated the cheerio dependency to 1.1.2. But this causes EBADENGINE warnings when installing if node <20.18.1. We target compatibility with node >20, which after some discussion we think should mean >20.0.0.

Full Changelog: pa11y/pa11y-ci@4.0.0...4.0.1

v4.0.0

Pa11y CI 4.0.0 requires a stable (even-numbered) Node.js version of 20 or above, updates to the latest version of Pa11y (9) and Puppeteer (24), updates several other dependencies, and includes some GitHub actions and documentation cleanup. See the migration guide for details.

Changes

  • Breaking: Upgrade Node.js support: Pa11y CI 4 requires a stable (even-numbered) Node.js version of 20 or above, dropping support for Node 12, 14, 16, 18.
  • Breaking: Upgrade pa11y to 9 (from 6), which updates numerous dependencies, fixes issues with Pa11y CI failing to run on Ubuntu 24.04, and resolves several vulnerabilities and deprecated packages (closing #198, #227, #242, #247).
    • Upgrade puppeteer to 24 (from 9.1), which updates to the current Chrome. This changes Chrome's default headless mode, see the migration guide for details. Also expand the puppeteer dependency compatibility to caret (patch and minor releases) to allow upgrades to a more recent compatible version upon install (which frequently contains Chrome updates and security patches).
    • Upgrade axe-core to 4.10 from 4.2. This includes rule fixes that may change results when using the axe runner. See axe-core releases for complete details.
    • Upgrade semver to 7.7 from 7.3, resolving CVE-2022-25883.
  • Fixed issue with pa11y-ci process hanging if browser passed from config file. (#248)
  • Other dependency upgrades: commander to 14.0, async to 3.2, cheerio to 1.1, and node-fetch to 2.7.
  • GitHub Actions changes: Update workflows for supported Node version, Ubuntu 24.04 compatibility, and publishing package with provenance.
  • Other changes: Refactor code and tests for dependency compatibility, update support table and fix some links in the README.

See the migration guide for details.

Full changelog

3.1.0...4.0.0

Changelog

Sourced from pa11y-ci's changelog.

4.1.1 (2026-05-11)

Pa11y CI 4.1.1 updates the lodash dependency to ~4.18.1 to resolve GHSA-f23m-r3pf-42r / CVE-2026-2950.

4.1.0 (2026-03-02)

  • Add support for config files with the .cjs extension
  • Improve documentation for sitemap-exclude
  • Improve npm keywords for better discoverability
  • Replace nyc with c8 for test coverage
  • Replace mockery with quibble for mocking
  • Upgrade dependencies to recent versions matching pa11y's to ensure deduplication works well

New Contributors

Full Changelog: pa11y/pa11y-ci@4.0.1...4.1.0

4.0.1 (2025-08-15)

Pa11y CI 4.0.1 reintroduces compatibility for node >=20.0.0 <20.18.1. (At the time of writing, v20.19.4 is the latest version of node 20.)

Pa11y CI 4.0.0 updated the cheerio dependency to 1.1.2. But this causes EBADENGINE warnings when installing, if node <20.18.1. We target compatibility with node >=20, which after some discussion we think should mean >=20.0.0.

Full changelog

4.0.0...4.0.1

4.0.0 (2025-07-22)

Pa11y CI 4.0.0 requires a stable (even-numbered) Node.js version of 20 or above, updates to the latest version of Pa11y (9) and Puppeteer (24), updates several other dependencies, and includes some GitHub actions and documentation cleanup. See the migration guide for details.

Changes

  • Breaking: Upgrade Node.js support: Pa11y CI 4 requires a stable (even-numbered) Node.js version of 20 or above, dropping support for Node 12, 14, 16, 18.
  • Breaking: Upgrade pa11y to 9 (from 6), which updates numerous dependencies, fixes issues with Pa11y CI failing to run on Ubuntu 24.04, and resolves several vulnerabilities and deprecated packages (closing #198, #227, #242, #247).
    • Upgrade puppeteer to 24 (from 9.1), which updates to the current Chrome. This changes Chrome's default headless mode, see the migration guide for details. Also expand the puppeteer dependency compatibility to caret (patch and minor releases) to allow upgrades to a more recent compatible version upon install (which frequently contains Chrome updates and security patches).
    • Upgrade axe-core to 4.10 from 4.2. This includes rule fixes that may change results when using the axe runner. See axe-core releases for complete details.
    • Upgrade semver to 7.7 from 7.3, resolving CVE-2022-25883.
  • Fixed issue with pa11y-ci process hanging if browser passed from config file. (#248)
  • Other dependency upgrades: commander to 14.0, async to 3.2, cheerio to 1.1, and node-fetch to 2.7.
  • GitHub Actions changes: Update workflows for supported Node version, Ubuntu 24.04 compatibility, and publishing package with provenance.
  • Other changes: Refactor code and tests for dependency compatibility, update support table and fix some links in the README.

See the migration guide for details.

Full changelog

3.1.0...4.0.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pa11y-ci since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(deps-dev): bump the development-dependencies group across 1 dire…
a36f83e 
…ctory with 3 updates

Bumps the development-dependencies group with 3 updates in the / directory: [@wordpress/element](https://github.com/WordPress/gutenberg/tree/HEAD/packages/element), [@wordpress/env](https://github.com/WordPress/gutenberg/tree/HEAD/packages/env) and [pa11y-ci](https://github.com/pa11y/pa11y-ci).


Updates `@wordpress/element` from 6.46.0 to 8.6.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/element/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/element@8.6.0/packages/element)

Updates `@wordpress/env` from 11.4.0 to 11.14.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/env/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/env@11.14.0/packages/env)

Updates `pa11y-ci` from 3.1.0 to 4.1.1
- [Release notes](https://github.com/pa11y/pa11y-ci/releases)
- [Changelog](https://github.com/pa11y/pa11y-ci/blob/main/CHANGELOG.md)
- [Commits](pa11y/pa11y-ci@3.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: "@wordpress/element"
  dependency-version: 8.6.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@wordpress/env"
  dependency-version: 11.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: pa11y-ci
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown

📊 Lighthouse Audit Results

⚠ Unable to generate Lighthouse report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants