Skip to content

Bump launch-editor from 2.14.1 to 2.14.2 - #47

Merged
mpsq merged 1 commit into
mainfrom
dependabot/npm_and_yarn/launch-editor-2.14.2
Oct 21, 2026
Merged

mpsq merged 1 commit into
mainfrom
dependabot/npm_and_yarn/launch-editor-2.14.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps launch-editor from 2.14.1 to 2.14.2.

Commits
  • b533489 v2.14.2
  • f13cd83 fix: check file existence after path resolution (#157)
  • f6e6701 fix: ensure filenames passed to editors are not considered as flags (#156)
  • 3c2f9bf fix: reject paths containing % on windows (#155)
  • ecdfce1 refactor: extract constructWindowsLaunchCommand (#154)
  • 24d5d84 fix: correctly show error when the third parameter is not passed (#153)
  • 7bae9bc refactor: merge statements
  • 571fe00 chore(deps): update actions/setup-node action to v7 (#149)
  • d8ed423 chore(deps): update actions/checkout action to v7 (#148)
  • 75b3e6c fix(deps): update all non-major dependencies (#146)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Low Risk
Lockfile-only patch bump of a transitive dev dependency with no application code changes.

Overview
Bumps the transitive launch-editor dependency from 2.14.1 to 2.14.2 in pnpm-lock.yaml (no direct package.json changes in this diff).

The new patch release tightens editor-launch behavior: safer path resolution and existence checks, Windows handling for paths with %, and ensuring file names are not passed as CLI flags to editors. This affects tooling that opens files in an IDE (e.g. via the Changesets stack that pulls in launch-editor).

Reviewed by Cursor Bugbot for commit 0f6d027. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.14.1 to 2.14.2.
- [Commits](vitejs/launch-editor@v2.14.1...v2.14.2)

---
updated-dependencies:
- dependency-name: launch-editor
  dependency-version: 2.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 21, 2026 11:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@greptile-apps

greptile-apps Bot commented Oct 21, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@mpsq
mpsq merged commit 8f49f65 into main Oct 21, 2026
10 checks passed
@mpsq
mpsq deleted the dependabot/npm_and_yarn/launch-editor-2.14.2 branch October 21, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant