Skip to content

Bump chokidar from 4.0.3 to 5.0.0 - #448

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chokidar-5.0.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chokidar-5.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps chokidar from 4.0.3 to 5.0.0.

Release notes

Sourced from chokidar's releases.

5.0.0

  • Make the package ESM-only. Reduces on-disk package size from ~150kb to ~80kb
  • Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs
  • fix: Make types more precise paulmillr/chokidar#1424
  • perf: re-use double slash regex paulmillr/chokidar#1435
  • Update readdirp to ESM-only v5
  • Lots of minor improvements in tests
  • Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt
  • Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

Full Changelog: paulmillr/chokidar@4.0.3...5.0.0

Changelog

Sourced from chokidar's changelog.

5.0.0 (2025-11-25)

  • Made the package ESM-only, reducing on-disk size from ~150 KB to ~80 KB.
  • Required Node.js 20.19 or later, which can load ESM from CommonJS.
  • Updated readdirp to the ESM-only v5.
  • Made matcher types more precise, contributed by @​43081j in [pull request #1424](paulmillr/chokidar#1424).
  • Reused the double-slash regex, contributed by @​43081j in [pull request #1435](paulmillr/chokidar#1435).
  • Switched npm releases to token-less Trusted Publishing with jsbt.
  • Switched compilation to isolatedDeclarations-based TypeScript for simpler auto-generated docs.
  • Improved tests.

New contributors

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chokidar since your current version.


@dependabot
dependabot Bot requested a review from a team as a code owner October 17, 2026 19:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 17, 2026
@dependabot
dependabot Bot requested review from kimkim0814 and removed request for a team October 17, 2026 19:14
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Oct 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chokidar-5.0.0 branch 3 times, most recently from b95b857 to ec4152f Compare October 21, 2026 06:07
@atm-snag2

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [chokidar](https://github.com/paulmillr/chokidar) from 4.0.3 to 5.0.0.
- [Release notes](https://github.com/paulmillr/chokidar/releases)
- [Changelog](https://github.com/paulmillr/chokidar/blob/main/CHANGELOG.md)
- [Commits](paulmillr/chokidar@4.0.3...5.0.0)

---
updated-dependencies:
- dependency-name: chokidar
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chokidar-5.0.0 branch from ec4152f to b86b2f3 Compare October 23, 2026 05:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant