Bump the dev-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #81 · snow-actions/qrcode

dependabot · 2026-07-15T18:23:25Z

Bumps the dev-dependencies group with 5 updates in the / directory:

Package	From	To
@eslint/eslintrc	`3.3.5`	`3.3.6`
@vercel/ncc	`0.38.4`	`0.44.1`
eslint	`10.2.0`	`10.7.0`
globals	`17.5.0`	`17.7.0`
jest	`30.3.0`	`30.4.2`

Updates @eslint/eslintrc from 3.3.5 to 3.3.6

Release notes

Sourced from @eslint/eslintrc's releases.

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Changelog

Sourced from @eslint/eslintrc's changelog.

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Commits

b433a22 chore: release 3.3.6 🚀 (#236)
0c5de74 fix: update js-yaml to 4.3.0 to address security vulnerability (#235)
94837a4 docs: Update README sponsors
dbae1a1 docs: Update README sponsors
19fe72a docs: Update README sponsors
92ebd17 docs: Update README sponsors
3ba4c8c ci: add Node.js 26 to CI (#231)
f8d268a docs: Update README sponsors
6e20867 docs: Update README sponsors
6d722b6 docs: Update README sponsors
Additional commits viewable in compare view

Updates @vercel/ncc from 0.38.4 to 0.44.1

Release notes

Sourced from @vercel/ncc's releases.

0.44.1

0.44.1 (2026-06-29)

Bug Fixes

preserve runtime createRequire in ESM builds (#1334) (8f0aefd), closes #1312

0.44.0

0.44.0 (2026-06-09)

Features

read permissions pr.yml (#1323) (5ea625e)

0.43.0

0.43.0 (2026-06-09)

Changes

BREAKING CHANGE: add Node 24 and 26 support, remove 20 (#1318) (#1305)

switch npm releases to trusted publishing (OIDC) (#1325) (#1327) (#1328) (#1329) (#1330) (#1331) (#1332)

switch package management to pnpm (#1321)

fix predictable global cache directory in /tmp enables symlink/hijack risks (#1314)

reorder extension resolution to prioritise TypeScript over JSON (#1315)

support TypeScript 6 transpile builds (#1316)

Commits

8f0aefd fix: preserve runtime createRequire in ESM builds (#1334)
b9c6310 chore: Update vm2 to latest version (3.11.5) (#1333)
88be21f chore(deps): Bump actions/checkout from 5 to 6 (#1300)
5ea625e feat: read permissions pr.yml (#1323)
a1ff315 feat: remove npm devDependency (#1332)
9e077ab feat: add publishConfig to package.json (#1331)
7290aa7 feat(ci): upgrade python and remove LLVM LTO flags from MSVC build to fix Nod...
a428a10 feat: publish using node@24 (#1329)
3192116 feat: use canonical package repository metadata (#1328)
4461a52 feat: lock semantic-release publish dependencies (#1327)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @vercel/ncc since your current version.

Updates eslint from 10.2.0 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)

f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)

0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)

96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)

0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)

75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)

b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)

e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)

a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)

d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)

8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)

a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)

8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

c30d808 docs: Update README (GitHub Actions Bot)

5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)

04174cb docs: Update README (GitHub Actions Bot)

026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)

9d42fef docs: Update README (GitHub Actions Bot)

b230159 docs: Update README (GitHub Actions Bot)

0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

9489379 chore: update dependency @eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])

81a4774 chore: updates for v9.39.5 release (Jenkins)

9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)

72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)

833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])

7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)

8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)

e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])

0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)

1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])

4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)

993539f chore: update dependency @eslint/json to ^2.0.1 (#21042) (renovate[bot])

53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)

5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)

a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)

7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits

fabd99b 10.7.0
37c5e75 Build: changelog update for 10.7.0
9489379 chore: update dependency @eslint/eslintrc to ^3.3.6 (#21076)
81a4774 chore: updates for v9.39.5 release
3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
c30d808 docs: Update README
f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
Additional commits viewable in compare view

Updates globals from 17.5.0 to 17.7.0

Release notes

Sourced from globals's releases.

v17.7.0

Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

v17.6.0

Update globals (2026-05-01) (#343) 00a4dd9

sindresorhus/globals@v17.5.0...v17.6.0

Commits

a19670c 17.7.0
9611620 Update actions (#346)
33b75f9 Update globals (2026-06-22) (#345)
887dd52 Fix build script (#344)
6b15870 17.6.0
00a4dd9 Update globals (2026-05-01) (#343)
See full diff in compare view

Updates jest from 30.3.0 to 30.4.2

Release notes

Sourced from jest's releases.

v30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Full Changelog: jestjs/jest@v30.4.1...v30.4.2

v30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

Full Changelog: jestjs/jest@v30.4.0...v30.4.1

v30.4.0

Big release! 😀

Main feature is a rewrite of our custom runtime in preparation for stabilisation of native support of ESM. As part of that work require(esm) module is now supported on Node 24.9+ (still requires --experimental-vm-modules like before).

In addition we now support fake timers for the recently released Temporal API in Node v26.

React 19 is also supported properly in pretty-format, meaning snapshots of React components now work like they should.

Due to all the changes, there might be regressions that snuck in. Please report them!

Full list of changes below

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

... (truncated)

Changelog

Sourced from jest's changelog.

30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

30.4.0

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

[pretty-format] Support React 19 (#16123)

Fixes

[expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)

[@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)

[fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)

[jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)

[jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#16003)

[jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#15967)

[jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#15961)

[jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#16132)

[jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#16132)

[jest-environment-node] Fix --localstorage-file warning on Node 25+ (#16086)

[jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#16137)

... (truncated)

Commits

746f2a0 v30.4.2
b3b4a09 v30.4.1
5cbb21e v30.4.0
db7141a fix: allow collectCoverage and coverageProvider in project config (#16132)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.5` | `3.3.6` | | [@vercel/ncc](https://github.com/vercel/ncc) | `0.38.4` | `0.44.1` | | [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.7.0` | | [globals](https://github.com/sindresorhus/globals) | `17.5.0` | `17.7.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.3.0` | `30.4.2` | Updates `@eslint/eslintrc` from 3.3.5 to 3.3.6 - [Release notes](https://github.com/eslint/eslintrc/releases) - [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md) - [Commits](eslint/eslintrc@eslintrc-v3.3.5...eslintrc-v3.3.6) Updates `@vercel/ncc` from 0.38.4 to 0.44.1 - [Release notes](https://github.com/vercel/ncc/releases) - [Commits](vercel/ncc@0.38.4...0.44.1) Updates `eslint` from 10.2.0 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.2.0...v10.7.0) Updates `globals` from 17.5.0 to 17.7.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.5.0...v17.7.0) Updates `jest` from 30.3.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) --- updated-dependencies: - dependency-name: "@eslint/eslintrc" dependency-version: 3.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@vercel/ncc" dependency-version: 0.44.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: globals dependency-version: 17.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dev-dependencies group across 1 directory with 5 updates - #81

Bump the dev-dependencies group across 1 directory with 5 updates#81
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dev-dependencies-1b199c0b63

dependabot Bot commented on behalf of github Jul 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 15, 2026

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

3.3.6 (2026-07-10)

Bug Fixes

0.44.1

0.44.1 (2026-06-29)

Bug Fixes

0.44.0

0.44.0 (2026-06-09)

Features

0.43.0

0.43.0 (2026-06-09)

Changes

v10.7.0

Features

Bug Fixes

Documentation

Chores

v10.6.0

Features

v17.7.0

v17.6.0

v30.4.2

Fixes

v30.4.1

Features

Fixes

v30.4.0

Features

30.4.2

Fixes

30.4.1

Features

Fixes

30.4.0

Features

Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants