Skip to content

chore: bump the npm-patch-minor group with 5 updates - #75

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-patch-minor-04031d29f6
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-patch-minor-04031d29f6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-patch-minor group with 5 updates:

Package From To
jszip 3.10.1 3.10.2
roku-deploy 3.18.2 3.18.4
@types/node 26.2.0 26.6.2
@uinaf/skillcheck 0.4.0 0.5.3
vite-plus 0.2.9 0.3.3

Updates jszip from 3.10.1 to 3.10.2

Changelog

Sourced from jszip's changelog.

v3.10.2 2026-09-09

  • Fix cross-realm binary type detection in getTypeOf. Fixes #759 (see #578)
  • Add missing types for JSZip.defaults. Fixes #690 (see #927)
  • Fix Blob support in Node.js 18 and up. Fixes #941 (see #955)
Commits
Maintainer changes

This version was pushed to npm by jkoops, a new releaser for jszip since your current version.


Updates roku-deploy from 3.18.2 to 3.18.4

Release notes

Sourced from roku-deploy's releases.

3.18.4

Changed

3.18.3

Changed

  • Security enhancements (#345)

Fixed

  • bug where signed .pkg downloads are corrupted by utf8 decoding (#359)
  • chore: Add 1s breathing room between device tests (#346)
Changelog

Sourced from roku-deploy's changelog.

3.18.4 - 2026-09-02

Changed

3.18.3 - 2026-08-28

Changed

  • Security enhancements (#345)

Fixed

  • bug where signed .pkg downloads are corrupted by utf8 decoding (#359)
  • chore: Add 1s breathing room between device tests (#346)
Commits
  • b93b637 3.18.4 (#391)
  • e405261 3.18.3 (#383)
  • 61dd28a fix: signed .pkg downloads are corrupted by utf8 decoding (#359)
  • c6dfe27 chore: Hard-reboot device via smart switch for device tests (#354)
  • 7450b7f Apply suggestion from @​TwitchBronBron
  • 464e973 Tweak comment to trigger CI builds
  • 1ad8e3c Longer sleep after a detected reboot
  • 32a51d1 Drop the after-suite reboot; the next run's before-all already reboots
  • a705904 Move rebootDevice test to the suite midpoint instead of a separate check
  • 27d6006 Rename Tuya-specific env vars to generic SMART_SWITCH_*
  • Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.6.2

Commits

Updates @uinaf/skillcheck from 0.4.0 to 0.5.3

Release notes

Sourced from @​uinaf/skillcheck's releases.

v0.5.3

0.5.3 (2026-09-12)

Bug Fixes

  • deps: clear high advisories and gate on audit (#24) (026d76c)

v0.5.2

0.5.2 (2026-09-05)

Bug Fixes

  • require Cursor terminal success and bounded cleanup (#17) (a0e8935)

v0.5.1

0.5.1 (2026-09-05)

Bug Fixes

  • preserve scorecard errors and revision integrity (#16) (5529614)

v0.5.0

0.5.0 (2026-08-20)

Features

  • make the eval engine an optional peer so lint-only installs stay small (#11) (63eddf7)
Commits
  • 79084b5 chore(release): 0.5.3 [skip ci]
  • 026d76c fix(deps): clear high advisories and gate on audit (#24)
  • 375fbe2 docs(scan): say what the weekly scan actually catches (#23)
  • 2f575f2 docs(scan): state the pin consequence precisely (#22)
  • 06a5d71 docs(scan): state the history behaviour in every caller (#21)
  • 5bfb111 docs(scan): describe what the scan caller actually does (#20)
  • 99e617a ci: enable gated native Renovate automerge
  • f963a39 ci: bind release writeback to verified source (#19)
  • 1dcc0fe chore: migrate dependency updates from Dependabot to Renovate
  • 9bf1535 ci: use GitHub-hosted runners for verification (#18)
  • Additional commits viewable in compare view

Updates vite-plus from 0.2.9 to 0.3.3

Release notes

Sourced from vite-plus's releases.

vite-plus v0.3.3: Homebrew setup and workspace dependency fixes

This release fixes Homebrew setup, Windows installation, and workspace dependency commands. It also updates Rolldown, Oxlint, and Oxfmt.

Fixes & Enhancements

  • Homebrew installations complete setup once, retain their bundled CLI, and direct upgrades to brew upgrade vite-plus (#2729), by @​fengmk2.
  • Windows installations decode remote legacy PowerShell scripts correctly (#2701), by @​james-elicx.
  • vp migrate removes the unsupported React Refresh allowCompoundComponents option and warns about possible lint errors (#2702), by @​fengmk2.
  • New monorepo packages use the root lint configuration without a conflicting nested configuration (#2667), by @​semimikoh.
  • Yarn Classic rejects filtered additions and removals instead of changing unintended dependencies (#2705), by @​jong-kyung.
  • Yarn Berry rejects unsupported filtered updates and respects filters during recursive removal (#2709, #2712), by @​jong-kyung.
  • Yarn and Bun warn when a command does not support --workspace-root. Yarn Classic accepts root additions through vp add and vp install <packages> (#2713), by @​jong-kyung.
  • vp dedupe warns about unsupported check options (#2717), by @​jong-kyung.
  • Rust command output respects NO_COLOR (#2716), by @​liangmiQwQ.
  • Windows commands find lowercase shims in directories with case-sensitive file names (#2727), by @​fengmk2.

Dependency Updates

  • Update rolldown@1.2.8 to rolldown@1.2.9, oxlint@1.82.0 to oxlint@1.83.0, and oxfmt@0.67.0 to oxfmt@0.68.0. The new lint and format versions can flag code that passed before. Run vp fmt after upgrading if CI runs vp check (#2725), by @​voidzero-guard[bot].

Docs

Chore

Bundled Versions

Tool Version Source
vite 8.3.0 434e8e9
rolldown 1.2.9 5b4746e
tsdown 0.23.0 npm
vitest 4.1.11 npm
oxlint 1.83.0 npm
oxlint-tsgolint 7.0.2001 npm
oxfmt 0.68.0 npm

Upgrade

vp upgrade
</tr></table> 

... (truncated)

Commits
  • 45f9b9a release: v0.3.3: Homebrew setup and workspace dependency fixes (#2734)
  • 2722c75 fix(cli): resolve lowercase Windows shims in case-sensitive directories (#2727)
  • a3035cf fix(create): remove nested monorepo lint config (#2667)
  • 6089186 feat(deps): upgrade upstream dependencies (#2725)
  • ae2fe51 fix(cli): honor NO_COLOR in Rust output (#2716)
  • c596871 fix(installer): decode remote legacy PowerShell scripts (#2701)
  • c7c1e62 fix(migrate): omit unsupported React Refresh option (#2702)
  • 9fd0d0a release: v0.3.2: independent package-manager versions and Oxlint plugin APIs ...
  • 5b30ff0 revert(migrate): stop merging Oxc configs in existing projects (#2696)
  • ace6ceb fix(migrate): report skipped ESLint rules (#2689)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-patch-minor group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` |
| [roku-deploy](https://github.com/rokucommunity/roku-deploy) | `3.18.2` | `3.18.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.2` |
| [@uinaf/skillcheck](https://github.com/uinaf/skillcheck) | `0.4.0` | `0.5.3` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.2.9` | `0.3.3` |


Updates `jszip` from 3.10.1 to 3.10.2
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.10.1...v3.10.2)

Updates `roku-deploy` from 3.18.2 to 3.18.4
- [Release notes](https://github.com/rokucommunity/roku-deploy/releases)
- [Changelog](https://github.com/rokucommunity/roku-deploy/blob/master/CHANGELOG.md)
- [Commits](rokucommunity/roku-deploy@v3.18.2...v3.18.4)

Updates `@types/node` from 26.2.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@uinaf/skillcheck` from 0.4.0 to 0.5.3
- [Release notes](https://github.com/uinaf/skillcheck/releases)
- [Commits](uinaf/skillcheck@v0.4.0...v0.5.3)

Updates `vite-plus` from 0.2.9 to 0.3.3
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.3.3/packages/cli)

---
updated-dependencies:
- dependency-name: jszip
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patch-minor
- dependency-name: roku-deploy
  dependency-version: 3.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-patch-minor
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-patch-minor
- dependency-name: "@uinaf/skillcheck"
  dependency-version: 0.5.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-patch-minor
- dependency-name: vite-plus
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants