chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #229 · aicodingstack/aicodingstack.io

dependabot · 2026-08-31T06:12:43Z

Bumps the dev-dependencies group with 8 updates in the / directory:

Package	From	To
@next/bundle-analyzer	`16.3.1`	`16.3.3`
@next/mdx	`16.3.1`	`16.3.3`
@types/react-dom	`19.2.4`	`19.2.5`
@typescript-eslint/parser	`8.67.0`	`8.68.0`
@typescript-eslint/types	`8.67.0`	`8.68.0`
cspell	`10.0.1`	`10.1.1`
lint-staged	`17.3.0`	`17.4.1`
wrangler	`4.125.0`	`4.127.0`

Updates @next/bundle-analyzer from 16.3.1 to 16.3.3

Release notes

Sourced from @next/bundle-analyzer's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

Commits

a9a1cb7 v16.3.3
d0ac882 v16.3.2
See full diff in compare view

Updates @next/mdx from 16.3.1 to 16.3.3

Release notes

Sourced from @next/mdx's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

Commits

a9a1cb7 v16.3.3
d0ac882 v16.3.2
See full diff in compare view

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

See full diff in compare view

Updates @typescript-eslint/parser from 8.67.0 to 8.68.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

Niki @phaux

Thiago Barbosa

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

8f4e00a chore(release): publish 8.68.0
55f6d5d chore: enable source maps (#12677)
See full diff in compare view

Updates @typescript-eslint/types from 8.67.0 to 8.68.0

Release notes

Sourced from @typescript-eslint/types's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

Niki @phaux

Thiago Barbosa

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/types's changelog.

8.68.0 (2026-08-24)

This was a version bump only for types to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

8f4e00a chore(release): publish 8.68.0
55f6d5d chore: enable source maps (#12677)
See full diff in compare view

Updates cspell from 10.0.1 to 10.1.1

Release notes

Sourced from cspell's releases.

v10.1.1

Fixes

fix: Do not load .pnp.js files when untrusted (#9064)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#9055)

Update Dictionaries (main)

Summary
 packages/cspell-bundled-dicts/package.json | 2 +-
 pnpm-lock.yaml                             | 9 +++++++--
 2 files changed, 8 insertions(+), 3 deletions(-)
v10.1.0

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

Closes #4570.

Adds @cspell/cspell-junit-reporter, a new workspace package modeled on packages/cspell-json-reporter, that emits a JUnit-compatible XML report of a cspell run.

The issue asked for a minimal mapping along the lines of:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.1.1 (2026-08-25)

Fixes

fix: Do not load .pnp.js files when untrusted (#9064)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#9055)

Update Dictionaries (main)

Summary
 packages/cspell-bundled-dicts/package.json | 2 +-
 pnpm-lock.yaml                             | 9 +++++++--
 2 files changed, 8 insertions(+), 3 deletions(-)
v10.1.0 (2026-08-22)

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

Closes #4570.

Adds @cspell/cspell-junit-reporter, a new workspace package modeled on packages/cspell-json-reporter, that emits a JUnit-compatible XML report of a cspell run.

The issue asked for a minimal mapping along the lines of:
</tr></table> 

... (truncated)

Commits

bc3bc22 v10.1.1
77992dd chore: Prepare Release v10.1.1 (auto-deploy) (#9043)
8ca97eb fix: add publishConfig with provenance to cspell package (#9041)
401518c v10.1.0
acf8449 chore: Prepare Release v10.1.0 (auto-deploy) (#8883)
3078371 fix: Workflow Bot -- Update Dictionaries (main) (#9024)
f557824 ci: Workflow Bot -- Update ALL Dependencies (main) (#9014)
1c11da6 ci: Workflow Bot -- Update ALL Dependencies (main) (#8970)
67448c8 chore: bump the development-dependencies group across 1 directory with 16 upd...
ce30dc7 chore: bump chalk from 5.6.2 to 6.0.0 (#8973)
Additional commits viewable in compare view

Updates lint-staged from 17.3.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

#1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes
#1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:
// lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})
#1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.
Patch Changes

#1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

#1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

#1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes
#1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:
// lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})
#1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.
Patch Changes

#1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

#1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Commits

d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
f061335 chore(changeset): release
d2721af Merge pull request #1840 from lint-staged/updates
efe5b63 ci: update Changesets action because it failed to publish
cd76ce3 build: update dependencies
ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
a6a0d61 chore(changeset): release
0a09098 Merge pull request #1832 from lint-staged/add-all-flag
7fd685b fix: further fix parsing options logic
510a27c feat: add --all flag for including all files tracked by Git instead of just...
Additional commits viewable in compare view

Updates wrangler from 4.125.0 to 4.127.0

Release notes

Sourced from wrangler's releases.

wrangler@4.127.0

Minor Changes
#15356 fe265f8 Thanks @rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.
{
  "workflows": [
    {
      "binding": "MY_WORKFLOW",
      "name": "my-workflow",
      "class_name": "MyWorkflow",
      "concurrency": { "limit": 10 }
    }
  ]
}
Patch Changes

#15367 412c79e Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260825.1 ^5.20260826.1

workerd 1.20260825.1 1.20260826.1

#15375 92874f6 Thanks @WillTaylorDev! - Upload wrangler preview modules as multipart form data

wrangler preview used to base64 the bundle, its modules, and any sourcemaps into a single JSON request body. Base64 inflates content by a third, so a Worker with a large sourcemap could exceed the API request size limit and fail to deploy.

The preview deployment request is now multipart/form-data. The deployment settings travel in a metadata part and each module follows as its own part carrying raw bytes, matching how wrangler deploy already uploads a Worker.

Updated dependencies [412c79e]:

miniflare@5.20260826.0-alpha

wrangler@4.126.0

Minor Changes
#15332 d1cc3af Thanks @pombosilva! - Add default_retention to Workflow bindings for configuring how long instances are retained

Workflow instances are retained for an account-wide default period after they finish. You can now set a per-Workflow default in your Wrangler configuration, applied to instances that do not specify their own retention:
{
  "workflows": [

... (truncated)

Commits

a831498 Version Packages (#15372)
fe265f8 [wrangler] Add per-workflow concurrency limit config (#15356)
92874f6 WC-5857 [wrangler] Upload preview deployments as multipart form data (#15375)
e9df120 Support multiple named Workers in the build output (#15371)
5377aae Version Packages (#15354)
e56d2e6 Revert "Version Packages" (#15355)
d765e10 Version Packages (#15291)
433fa98 [wrangler] Add pull request title to preview deployment annotations (#15307)
ad89456 [wrangler] Add hyperdrive planetscale signature command (#15065)
d589d30 [wrangler] Pause automatic skills installation offers (#15296)
Additional commits viewable in compare view

github-actions · 2026-08-31T06:23:24Z

Preview deployment

Status	URL
Skipped	-

Commit: 3ae6080
Updated: 2026-08-31T06:28:56.310Z

Reason: Dependabot-triggered workflows do not have access to repository secrets in this workflow.

If you want a preview deployment, please ask a maintainer to run this from a branch within the main repository.

…tory with 8 updates Bumps the dev-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@next/bundle-analyzer](https://github.com/vercel/next.js/tree/HEAD/packages/next-bundle-analyzer) | `16.3.1` | `16.3.3` | | [@next/mdx](https://github.com/vercel/next.js/tree/HEAD/packages/next-mdx) | `16.3.1` | `16.3.3` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.67.0` | `8.68.0` | | [@typescript-eslint/types](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/types) | `8.67.0` | `8.68.0` | | [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.0.1` | `10.1.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.4.1` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.125.0` | `4.127.0` | Updates `@next/bundle-analyzer` from 16.3.1 to 16.3.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.3/packages/next-bundle-analyzer) Updates `@next/mdx` from 16.3.1 to 16.3.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.3.3/packages/next-mdx) Updates `@types/react-dom` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@typescript-eslint/parser` from 8.67.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/parser) Updates `@typescript-eslint/types` from 8.67.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/types/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/types) Updates `cspell` from 10.0.1 to 10.1.1 - [Release notes](https://github.com/streetsidesoftware/cspell/releases) - [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md) - [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.1.1/packages/cspell) Updates `lint-staged` from 17.3.0 to 17.4.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.3.0...v17.4.1) Updates `wrangler` from 4.125.0 to 4.127.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.127.0/packages/wrangler) --- updated-dependencies: - dependency-name: "@next/bundle-analyzer" dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@next/mdx" dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/types" dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: cspell dependency-version: 10.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: lint-staged dependency-version: 17.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: wrangler dependency-version: 4.127.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added automated dependencies labels Aug 31, 2026

dependabot Bot requested a review from a team as a code owner August 31, 2026 06:12

dependabot Bot added automated dependencies labels Aug 31, 2026

dependabot Bot changed the title ~~chore(deps)(deps-dev): bump the dev-dependencies group with 8 updates~~ chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates Aug 31, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-7415996a22 branch from 7b24363 to 6dca263 Compare August 31, 2026 06:21

github-actions Bot enabled auto-merge (squash) August 31, 2026 06:22

github-actions Bot added auto-merge minor-update labels Aug 31, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-7415996a22 branch from 6dca263 to 8b6bf79 Compare August 31, 2026 06:27

github-actions Bot merged commit c2218fe into main Aug 31, 2026
11 checks passed

github-actions Bot deleted the dependabot/npm_and_yarn/dev-dependencies-7415996a22 branch August 31, 2026 06:29

Navigation Menu

Uh oh!

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates - #229

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates#229
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-7415996a22

dependabot Bot commented on behalf of github Aug 31, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 31, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Dependency	From	To
`@cloudflare/workers-types`	^5.20260825.1	^5.20260826.1
workerd	1.20260825.1	1.20260826.1

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.3.3

v16.3.2

Core Changes

Credits

v16.3.3

v16.3.2

Core Changes

Credits

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

8.68.0 (2026-08-24)

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

8.68.0 (2026-08-24)

v10.1.1

Fixes

fix: Do not load .pnp.js files when untrusted (#9064)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#9055)

Update Dictionaries (main)

Summary

v10.1.0

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

v10.1.1 (2026-08-25)

Fixes

fix: Do not load .pnp.js files when untrusted (#9064)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#9055)

Update Dictionaries (main)

Summary

v10.1.0 (2026-08-22)

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

v17.4.1

17.4.1

Patch Changes

17.4.0

Minor Changes

Patch Changes

17.4.1

Patch Changes

17.4.0

Minor Changes

Patch Changes

wrangler@4.127.0

Minor Changes

Patch Changes

wrangler@4.126.0

Minor Changes

Uh oh!

github-actions Bot commented Aug 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Preview deployment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 31, 2026 •

edited

Loading

github-actions Bot commented Aug 31, 2026 •

edited

Loading