8000 dev-deps: bump the development-dependencies group with 4 updates by dependabot[bot] · Pull Request #454 · dominicusin/dominicusin.github.io · GitHub
[go: up one dir, main page]
Skip to content

dev-deps: bump the development-dependencies group with 4 updates - #454

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-bf9520470d
Closed

dev-deps: bump the development-dependencies group with 4 updates#454
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-bf9520470d

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading
Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 4 updates: cssnano, eslint, hardhat and html-validate.

Updates cssnano from 9.8.0 to 9.9.0

Release notes

Sourced from cssnano's releases.

v9.9.0

What's Changed

  • cssnano now ships its presets and plugins in a single package, so installing it adds one cssnano package to your dependency tree instead of about thirty, and you have fewer packages to review in audits and lockfile updates.

    preset: 'lite' and preset: 'advanced' now work without installing another package. An installed preset package still takes precedence over the built-in one and prints a one-time CSSNANO_INSTALLED_PRESET warning; pass the imported preset function to keep it without the warning. Full names such as cssnano-preset-default fall back to the built-in preset when no package is installed. Projects that require cssnano-preset-default directly must declare it as a dependency, or switch to preset: ['default', {...}]. overrides and resolutions that pin an individual plugin no longer apply.

Commits
  • a1f4561 Publish cssnano 9.9.0
  • e548b3c test: attempt to load file paths correctly on Windows
  • cd4980f feat: warn when overriding built-in presets and update docs
  • aa6750a fix(mutation): count unapplied mutations as errored, not killed
  • b24b88d refactor(cssnano): fold utils, stylehacks, plugins and presets into cssnano
  • b947c7b docs: reword autoprefixer mentions
  • 3b08f09 Publich cssnano-preset-advanced 10.0.0
  • e2de02b feat!(cssnano-preset-advanced): remove autoprefixer and css-declaration-sorter
  • c1019e8 docs: use default astro output directory
  • af46c61 docs: website copy tweaks
  • Additional commits viewable in compare view

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates hardhat from 3.20.0 to 3.21.0

Release notes

Sourced from hardhat's releases.

Hardhat v3.21.0

This release includes multiple small bug fixes and expands our Amsterdam hardfork support to include EIP-7954: Increase Maximum Contract Size. See our Amsterdam Support guide for more details.

Changes

  • #8747 5309dcd Thanks @​kanej! - Added experimental EIP-7954 support to the Amsterdam hardfork: deployment transactions may carry up to 128 KiB of init code and deploy up to 64 KiB of contract code.

  • #8670 1dbf44d Thanks @​schaable! - Fixed a cryptic error when a private key in a network's accounts is invalid.

  • #8708 c8e13d7 Thanks @​Kropiunig! - Fixed --coverage crashing when generating the report if Hardhat is run from a directory other than the project root (e.g. a subdirectory, or with --config).

  • #8747 5309dcd Thanks @​kanej! - Upgraded EDR to v0.24.0.

  • #8747 5309dcd Thanks @​kanej! - Fixed the GASLIMIT opcode returning 1_000_000 while the block gas limit is disabled; it now returns the parent block's gas limit, which the mined block's header already carried.

  • #8747 5309dcd Thanks @​kanej! - Added the Amsterdam hardfork activation on Hoodi, so forking Hoodi uses amsterdam for blocks after it activates.

  • #8747 5309dcd Thanks @​kanej! - Fixed simulated OP networks not charging the L1 data fee, so transactions now pay it and their receipts report it.

  • #8734 4c2a07c Thanks @​mikeua! - Fixed the node:test link in the node:test + viem project template README.

  • #8655 de7c792 Thanks @​aelmanaa! - Fixed prompts only receiving the first line when input is piped (e.g. printf 'password\npassword\nvalue\n' | npx hardhat keystore set KEY); later prompts now read the following lines instead of the process exiting with an unsettled top-level await.

  • #8743 ac2776f Thanks @​clippytool! - Fixed the solc compiler list cache not refreshing when it only contains a prerelease build for a requested stable version.

  • #8751 0a2a248 Thanks @​clippytool! - Fixed peer dependency detection during project initialization when npm's legacy-peer-deps or pnpm's auto-install-peers is explicitly configured.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​5.1.0

💡 The Nomic Foundation is hiring! Check our open positions.

Changelog

Sourced from hardhat's changelog.

3.21.0

Minor Changes

  • #8747 5309dcd Thanks @​kanej! - Added experimental EIP-7954 support to the Amsterdam hardfork: deployment transactions may carry up to 128 KiB of init code and deploy up to 64 KiB of contract code.

Patch Changes

  • #8670 1dbf44d Thanks @​schaable! - Fixed a cryptic error when a private key in a network's accounts is invalid.

  • #8708 c8e13d7 Thanks @​Kropiunig! - Fixed --coverage crashing when generating the report if Hardhat is run from a directory other than the project root (e.g. a subdirectory, or with --config).

  • #8747 5309dcd Thanks @​kanej! - Upgraded EDR to v0.24.0.

  • #8747 5309dcd Thanks @​kanej! - Fixed the GASLIMIT opcode returning 1_000_000 while the block gas limit is disabled; it now returns the parent block's gas limit, which the mined block's header already carried.

  • #8747 5309dcd Thanks @​kanej! - Added the Amsterdam hardfork activation on Hoodi, so forking Hoodi uses amsterdam for blocks after it activates.

  • #8747 5309dcd Thanks @​kanej! - Fixed simulated OP networks not charging the L1 data fee, so transactions now pay it and their receipts report it.

  • #8734 4c2a07c Thanks @​mikeua! - Fixed the node:test link in the node:test + viem project template README.

  • #8655 de7c792 Thanks @​aelmanaa! - Fixed prompts only receiving the first line when input is piped (e.g. printf 'password\npassword\nvalue\n' | npx hardhat keystore set KEY); later prompts now read the following lines instead of the process exiting with an unsettled top-level await.

  • #8743 ac2776f Thanks @​clippytool! - Fixed the solc compiler list cache not refreshing when it only contains a prerelease build for a requested stable version.

  • #8751 0a2a248 Thanks @​clippytool! - Fixed peer dependency detection during project initialization when npm's legacy-peer-deps or pnpm's auto-install-peers is explicitly configured.

  • Updated dependencies:

    • @​nomicfoundation/hardhat-utils@​5.1.0
Commits
  • 825070a Version Packages
  • 9a29972 refactor: simplify mocking
  • 0a2a248 fix: normalize package manager config output when detecting peer dependency b...
  • e5220d6 build: upgrade to EDR v0.24.0
  • 0352b3f Merge pull request #8655 from aelmanaa/fix/user-interruptions-piped-input
  • 9365af4 test: simplify the filter test
  • ac2776f fix: refresh solc compiler list when only a prerelease build is cached
  • 4c2a07c Fix the node:test link in the node-test-runner-viem template README
  • 780478b align test to repo patterns
  • a46b0ec Merge branch 'main' of github.com:NomicFoundation/hardhat into fix/user-inter...
  • Additional commits 8000 viewable in compare view

Updates html-validate from 11.16.2 to 11.17.0

Release notes

Sourced from html-validate's releases.

v11.17.0

11.17.0 (2026-10-20)

Features

  • api: add ErrorFixer.renameTag() (68a3454)
  • api: add related to Message for secondary elements (9d76007)
  • dom: add HtmlElement.startTagLocation and endTagLocation (1fae6dc)
  • rules: suggest multiple elements in prefer-native-element (829addd)

Bug Fixes

  • dom: handle quoted strings and whitespace in selector combinators (a23ffa2), closes #355
  • lexer: match </script> end tag case-insensitively (6b93d63), closes #375
  • lexer: match </style> end tag case-insensitively (c6e5ee7), closes #375
  • lexer: match </textarea> end tag case-insensitively (6c75f7a), closes #375
  • lexer: match </title> end tag case-insensitively (49ef906), closes #375
  • lexer: match script, style, textarea and title start tags case-insensitively (f4fffd1), closes #375
  • parser: match html end tags case-insensitively (ededae8), closes #374
  • parser: match retained svg desc and title end tags case-insensitively (337d006), closes #375
  • rules: ignore role matching implicit role in prefer-native-element (c7d51af), closes #373

v11.16.4

11.16.4 (2026-10-18)

Bug Fixes

  • config: disable cache in FlatConfigLoader when configOverride is given (28da344), closes #369
  • dom: handle empty attribute selector (8a467b9), closes #356
  • rules: unrecognized-char-ref flags legacy references without semicolon (b467b84), closes #312
  • rules: report error on <label> when empty or hidden instead of on <input> (8e70f82), closes #290

v11.16.3

11.16.3 (2026-10-17)

Bug Fixes

  • add @__NO_SIDE_EFFECTS__ annotation to define* helpers for better treeshaking (f44b9b3)
  • html5: allow color attribute on <link> (b0ab7f9)
  • html5: allow fetchpriority attribute on <link> (d04875f)
  • html5: allow hreflang attribute on <link> (13f73c0)
  • html5: allow media attribute on <link> (3b22eb0)
  • html5: allow sizes attribute on <link> (3a99da7)
  • html5: allow type attribute on <link> (0b298e7), closes #371
Commits
  • 871343e chore(release): 11.17.0
  • 446d20a Merge branch 'feature/rules-related' into 'master'
  • 07c4f65 refactor(rules): report related elements where applicable
  • 8e4bc7c Merge branch 'renovate/postcss-8.x' into 'master'
  • 85eb074 chore(deps): update dependency postcss to v8.5.31
  • 81d0b57 Merge branch 'feature/message-related' into 'master'
  • 9d76007 feat(api): add related to Message for secondary elements
  • b87c5c7 Merge branch 'fix/retained-svg-end-tag-case' into 'master'
  • f4fffd1 fix(lexer): match script, style, textarea and title start tags case-i...
  • 6c75f7a fix(lexer): match \</textarea> end tag case-insensitively
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
dev-deps: bump the development-dependencies group with 4 updates
31af4b4 
Bumps the development-dependencies group with 4 updates: [cssnano](https://github.com/cssnano/cssnano), [eslint](https://github.com/eslint/eslint), [hardhat](https://github.com/NomicFoundation/hardhat/tree/HEAD/packages/hardhat) and [html-validate](https://gitlab.com/html-validate/html-validate).


Updates `cssnano` from 9.8.0 to 9.9.0
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@9.8.0...cssnano@9.9.0)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `hardhat` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/NomicFoundation/hardhat/releases)
- [Changelog](https://github.com/NomicFoundation/hardhat/blob/main/packages/hardhat/CHANGELOG.md)
- [Commits](https://github.com/NomicFoundation/hardhat/commits/hardhat@3.21.0/packages/hardhat)

Updates `html-validate` from 11.16.2 to 11.17.0
- [Release notes](https://gitlab.com/html-validate/html-validate/tags)
- [Commits](https://gitlab.com/html-validate/html-validate/compare/v11.16.2...v11.17.0)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: hardhat
  dependency-version: 3.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: html-validate
  dependency-version: 11.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from dominicusin as a code owner October 26, 2026 10:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 26, 2026
@vercel
vercel Bot commented Oct 26, 2026 •
edited
Loading
Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
dominicusin-github-io Error Error Oct 26, 2026 10:25am UTC
3 Skipped Deployments
Project Deployment Actions Updated
dominicusin-dominicusin.github.io Ignored Ignored Preview Oct 26, 2026 10:25am UTC
dominicusin-dominicusin.github.io-lw64 Ignored Ignored Preview Oct 26, 2026 10:25am UTC
dominicusin-github-io-5612 Ignored Ignored Preview Oct 26, 2026 10:25am UTC

@bolt-new-by-stackblitz
bolt-new-by-stackblitz Bot commented Oct 26, 2026
Copy link
Copy Markdown

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@coderabbitai
coderabbitai Bot commented Oct 26, 2026
Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 2ef853e4-f2e5-4977-8c40-39733e5a2b4c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions
github-actions Bot commented Oct 26, 2026
Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@nomicfoundation/edr 0.24.0 UnknownUnknown
npm/@nomicfoundation/edr-darwin-arm64 0.24.0 UnknownUnknown
npm/@nomicfoundation/edr-darwin-x64 0.24.0 UnknownUnknown
npm/@nomicfoundation/edr-linux-arm64-gnu 0.24.0 UnknownUnknown
npm/@nomicfoundation/edr-linux-arm64-musl 0.24.0 UnknownUnknown
npm/@nomicfoundation/edr-linux-x64-gnu 0.24.0 UnknownUnknown
npm/@nomicfoundation/edr-linux-x64-musl 0.24.0 UnknownUnknown
npm/@nomicfoundation/edr-win32-x64-msvc 0.24.0 UnknownUnknown
npm/@nomicfoundation/hardhat-utils 5.1.0 UnknownUnknown
npm/cssnano 9.9.0 🟢 7.4
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/11 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
SAST🟢 10SAST tool is run on all commits
npm/eslint 10.13.0 🟢 6.5
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 7Found 19/25 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/hardhat 3.21.0 UnknownUnknown
npm/html-validate 11.17.0 UnknownUnknown

Scanned Files

  • package-lock.json

@dependabot @github
dependabot Bot commented on behalf of github Nov 2, 2026
Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-bf9520470d branch November 2, 2026 10:13

This branch had an error being deployed

1 failed deployment
Preview – dominicusin-github-io — 31af4b4a Deployed Oct 26, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dominicusin dominicusin Awaiting requested review from dominicusin dominicusin is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file size/XS

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

0