[代理镜像] chore: bump the development-dependencies group with 8 updates by dependabot[bot] · Pull Request #45 · advanced-security/codeql-scanner-vscode

dependabot · 2026-04-20T11:07:22Z

Bumps the development-dependencies group with 8 updates:

Package	From	To
@types/chai	`5.2.2`	`5.2.3`
@types/node	`25.5.2`	`25.6.0`
@types/vscode	`1.110.0`	`1.116.0`
@typescript-eslint/eslint-plugin	`8.58.0`	`8.58.2`
@typescript-eslint/parser	`8.58.0`	`8.58.2`
eslint	`10.2.0`	`10.2.1`
sinon	`21.0.3`	`21.1.2`
typescript	`6.0.2`	`6.0.3`

Updates @types/chai from 5.2.2 to 5.2.3

Commits

See full diff in compare view

Updates @types/node from 25.5.2 to 25.6.0

Commits

See full diff in compare view

Updates @types/vscode from 1.110.0 to 1.116.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.58.0 to 8.58.2

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

❤️ Thank You

Abhijeet Singh @cseas

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.58.2 (2026-04-13)

🩹 Fixes

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

remove tsbuildinfo cache file from published packages (#12187)

❤️ Thank You

Abhijeet Singh @cseas

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.1 (2026-04-08)

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

90c2803 chore(release): publish 8.58.2
7c9e06f fix(eslint-plugin): [no-unnecessary-condition] use assignability checks in ch...
dae1732 chore(eslint-plugin): switch auto-generated test cases to hand-written in unb...
be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
5311ed3 chore(release): publish 8.58.1
c3f8ed5 fix(eslint-plugin): [no-unused-vars] fix false negative for type predicate pa...
e372a66 Revert: feat(eslint-plugin): [no-unnecessary-type-arguments] report inferred ...
See full diff in compare view

Updates @typescript-eslint/parser from 8.58.0 to 8.58.2

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

❤️ Thank You

Abhijeet Singh @cseas

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.58.2 (2026-04-13)

🩹 Fixes

remove tsbuildinfo cache file from published packages (#12187)

❤️ Thank You

Abhijeet Singh @cseas

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.1 (2026-04-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

90c2803 chore(release): publish 8.58.2
be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
5311ed3 chore(release): publish 8.58.1
See full diff in compare view

Updates eslint from 10.2.0 to 10.2.1

Release notes

Sourced from eslint's releases.

v10.2.1

Bug Fixes

14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)

84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)

af764af fix: clarify language and processor validation errors (#20729) (Pixel998)

e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)

57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)

c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)

1418d52 docs: Update README (GitHub Actions Bot)

39771e6 docs: Update README (GitHub Actions Bot)

71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)

22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)

8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])

fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])

7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)

4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])

51080eb test: processor service (#20731) (kuldeep kumar)

e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)

4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)

066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)

Commits

4d1d8f9 10.2.1
3e33105 Build: changelog update for 10.2.1
ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768)
7ddfea9 chore: update dependency prettier to v3.8.2 (#20770)
57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767)
c1621b9 docs: fix typos in code-path-analyzer.js (#20700)
fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763)
7246f92 test: add tests for SuppressionsService.load() error handling (#20734)
4f34b1e chore: update pnpm/action-setup action to v5 (#20762)
1418d52 docs: Update README
Additional commits viewable in compare view

Updates sinon from 21.0.3 to 21.1.2

Changelog

Sourced from sinon's changelog.

21.1.2

53817f7d Upgrade to ESLint 10 and new shared config (#2696) (Carl-Erik Kopseng)

Upgrade to ESLint 10 and new shared config

Update deps

d7a682e0 fix: move npm-run-all to devDeps (#2694) (Avi Vahl)

used only during dev, and caused a considerable dep count jump downstream

5b8720ec use latest shared eslint-config (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-11.

21.1.1

3c8b023b Update deps (Carl-Erik Kopseng)

2eabf5da fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693) (Carl-Erik Kopseng)

fix(#2692): Remove ESM-only supports-color as it breaks CJS exports

Released by Carl-Erik Kopseng on 2026-04-10.

21.1.0

0a5526c5 updated deps (Carl-Erik Kopseng)

5262204f fix: build artifacts before running bundled tests (Carl-Erik Kopseng)

819bb64b Migration to ECMAScript modules (ESM) (#2683) (Carl-Erik Kopseng)

This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating ./lib

Modern ignores 😁

test: add distribution harness

test: verify packed cjs and esm entrypoints

test: lock distribution api manifest

test: smoke test built pkg artifacts

docs: require contract tests for package migration

test: guard esm migration regressions

docs: require contract gate for esm migration

build: generate cjs lib from esm source entries

refactor: port root api surface to esm

build: clean port of root api to esm

docs: include implementation plans

fix: align lint and smoke tests with esm migration

refactor: complete esm port of all core components

refactor: finalize esm migration with sandbox and naming fixes

fix: finish esm migration stabilization

... (truncated)

Commits

c9ee063 21.1.2
53817f7 Upgrade to ESLint 10 and new shared config (#2696)
d7a682e fix: move npm-run-all to devDeps (#2694)
5b8720e use latest shared eslint-config
40f9d6b 21.1.1
3c8b023 Update deps
2eabf5d fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693)
30cf67e 21.1.0
0a5526c updated deps
5262204 fix: build artifacts before running bundled tests
Additional commits viewable in compare view

Updates typescript from 6.0.2 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

Commits

050880c Bump version to 6.0.3 and LKG
eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

felickz · 2026-04-20T17:50:03Z

@dependabot recreate

Bumps the development-dependencies group with 8 updates: | Package | From | To | | --- | --- | --- | | [@types/chai](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chai) | `5.2.2` | `5.2.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.6.0` | | [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.110.0` | `1.116.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.58.0` | `8.58.2` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.58.0` | `8.58.2` | | [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.2.1` | | [sinon](https://github.com/sinonjs/sinon) | `21.0.3` | `21.1.2` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` | Updates `@types/chai` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chai) Updates `@types/node` from 25.5.2 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/vscode` from 1.110.0 to 1.116.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode) Updates `@typescript-eslint/eslint-plugin` from 8.58.0 to 8.58.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.2/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.58.0 to 8.58.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.2/packages/parser) Updates `eslint` from 10.2.0 to 10.2.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.2.0...v10.2.1) Updates `sinon` from 21.0.3 to 21.1.2 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v21.0.3...v21.1.2) Updates `typescript` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.2...v6.0.3) --- updated-dependencies: - dependency-name: "@types/chai" dependency-version: 5.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@types/vscode" dependency-version: 1.116.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.58.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.58.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: eslint dependency-version: 10.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: sinon dependency-version: 21.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 20, 2026

dependabot bot requested a review from a team as a code owner April 20, 2026 11:07

dependabot bot requested review from adrienpessu and felickz April 20, 2026 11:07

dependabot bot force-pushed the dependabot/npm_and_yarn/main/development-dependencies-2693da86e3 branch from e62b30c to 9df881e Compare April 20, 2026 17:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump the development-dependencies group with 8 updates#45

chore: bump the development-dependencies group with 8 updates#45
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/development-dependencies-2693da86e3

dependabot bot commented on behalf of github Apr 20, 2026 •

edited

Loading

Uh oh!

felickz commented Apr 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

❤️ Thank You

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

8.58.1 (2026-04-08)

🩹 Fixes

❤️ Thank You

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

❤️ Thank You

8.58.2 (2026-04-13)

🩹 Fixes

❤️ Thank You

8.58.1 (2026-04-08)

v10.2.1

Bug Fixes

Documentation

Chores

21.1.2

21.1.1

21.1.0

TypeScript 6.0.3

Uh oh!

felickz commented Apr 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Apr 20, 2026 •

edited

Loading