Skip to content

build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates - #678

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-17312f0e24
Open

build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates#678
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-17312f0e24

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 7 updates in the / directory:

Package From To
@oclif/test 3.2.15 4.1.21
eslint 10.5.0 10.8.1
eslint-plugin-mocha 11.3.0 12.0.2
globby 16.2.0 16.2.3
mocha 11.7.6 11.8.0
nock 14.0.15 14.0.17
sinon 22.0.0 22.1.0

Updates @oclif/test from 3.2.15 to 4.1.21

Release notes

Sourced from @​oclif/test's releases.

4.1.21

Bug Fixes

  • deps: bump js-yaml from 4.2.0 to 4.3.0 (c7f5819)

4.1.20

Bug Fixes

  • deps: bump js-yaml from 4.1.1 to 4.2.0 (18815a3)

4.1.19

Bug Fixes

  • deps: bump esbuild from 0.28.0 to 0.28.1 (429ee9b)

4.1.18

Bug Fixes

  • deps: bump lodash from 4.17.23 to 4.18.1 (5d3a6f6)

4.1.17

Bug Fixes

  • deps: bump flatted from 3.3.2 to 3.4.2 (842792a)

4.1.16

Bug Fixes

  • deps: bump lodash from 4.17.21 to 4.17.23 (dab8924)

4.1.15

Bug Fixes

  • deps: bump js-yaml from 4.1.0 to 4.1.1 (f6eb102)

4.1.14

Bug Fixes

  • deps: bump debug from 4.4.1 to 4.4.3 (5d1ed0d)

4.1.13

Bug Fixes

  • deps: bump debug from 4.4.0 to 4.4.1 (fe3a4ca)

4.1.12

Bug Fixes

  • deps: bump ansis from 3.16.0 to 3.17.0 (3350a10)

... (truncated)

Changelog

Sourced from @​oclif/test's changelog.

4.1.21 (2026-07-26)

Bug Fixes

  • deps: bump js-yaml from 4.2.0 to 4.3.0 (c7f5819)

4.1.20 (2026-06-21)

Bug Fixes

  • deps: bump js-yaml from 4.1.1 to 4.2.0 (18815a3)

4.1.19 (2026-06-13)

Bug Fixes

  • deps: bump esbuild from 0.28.0 to 0.28.1 (429ee9b)

4.1.18 (2026-04-05)

Bug Fixes

  • deps: bump lodash from 4.17.23 to 4.18.1 (5d3a6f6)

4.1.17 (2026-03-21)

Bug Fixes

  • deps: bump flatted from 3.3.2 to 3.4.2 (842792a)

4.1.16 (2026-01-22)

Bug Fixes

... (truncated)

Commits
  • 702cb73 chore(release): 4.1.21 [skip ci]
  • 2ab0db5 Merge pull request #917 from oclif/dependabot-npm_and_yarn-js-yaml-4.3.0
  • c7f5819 fix(deps): bump js-yaml from 4.2.0 to 4.3.0
  • 24b7c77 Merge pull request #916 from oclif/dependabot-npm_and_yarn-oclif-core-4.13.0
  • ac18e06 chore(dev-deps): bump @​oclif/core from 4.11.14 to 4.13.0
  • 0216607 Merge pull request #912 from oclif/dependabot-npm_and_yarn-eslint-config-ocli...
  • a1c0454 Merge pull request #913 from oclif/dependabot-npm_and_yarn-tsx-4.23.1
  • 8c0d925 chore(dev-deps): bump tsx from 4.23.0 to 4.23.1
  • 4a0eee7 chore(dev-deps): bump eslint-config-oclif from 6.0.175 to 6.0.176
  • 427ad28 Merge pull request #909 from oclif/dependabot-npm_and_yarn-eslint-config-ocli...
  • Additional commits viewable in compare view

Updates eslint from 10.5.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

  • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
  • 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
  • 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
  • 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
  • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

  • 7d0cbf8 docs: Update README (GitHub Actions Bot)
  • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
  • 678c90b docs: Update README (GitHub Actions Bot)
  • 8a10424 docs: Update README (GitHub Actions Bot)
  • 69bb948 docs: Update README (GitHub Actions Bot)

Chores

  • 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
  • 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
  • 5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
  • ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
  • f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
  • 1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
  • d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
  • 65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
  • 22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
  • 55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
  • 7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
  • eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
  • 60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
  • f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
  • d086293 test: add error locations to no-undef (#21147) (JIYEON)
  • cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
  • 688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
  • 7c1e175 test: add error locations to require-await (#21145) (Grit)
  • 588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
  • 059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
  • 5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

... (truncated)

Commits

Updates eslint-plugin-mocha from 11.3.0 to 12.0.2

Release notes

Sourced from eslint-plugin-mocha's releases.

eslint-plugin-mocha@12.0.2

12.0.2 (August 4, 2026)

Bug Fixes

  • Fix handle-done-callback for object property callbacks (#561)

Dependency Upgrades

  • Update type-fest to 5.8.0
  • Update dependency globals to v17.8.0 (#552)

eslint-plugin-mocha@12.0.1

12.0.1 (July 28, 2026)

Bug Fixes

  • Fix handle-done-callback for nested callback handoffs (#549)

eslint-plugin-mocha@12.0.0

12.0.0 (July 27, 2026)

Breaking Changes

  • Rename no-return-and-callback to no-return-and-done (#467)
  • Adjust recommended config defaults (#466)
  • Rename no-synchronous-tests option to allowedAsyncMethods (#449)
  • Rename no-setup-in-describe to no-setup-in-suite (#447)
  • Rename no-hooks-for-single-case to no-hooks-for-single-child (#448)
  • Move no-sibling-hooks functionality into consistent-structure (#441)
  • Rename no-global-tests to no-top-level-tests (#434)
  • Rename no-top-level-hooks to no-root-hooks (#433)
  • Rename named-import interface setting from exports to require (#432)
  • Require ESLint v10.2.0 (#425)

Bug Fixes

  • Fix no-sibling-hooks nested function false positives (#439)
  • Fix no-mocha-arrows fixer for commented concise bodies (#430)
  • Don’t flag usage of non-configured mocha interface methods (#431)
  • Declare rules as JS-only (#426)
  • Guard the no-async-suite fixer against await expressions (#417)

Features

  • Add no-conditional-tests rule (#461)
  • Add limit-slow rule (#458)
  • Add limit-retries rule (#457)
  • Add limit-timeout rule (#456)
  • Add rule no-done-twice to reject multiple done() calls (#453)

... (truncated)

Changelog

Sourced from eslint-plugin-mocha's changelog.

eslint-plugin-mocha 12.0.2 (August 3, 2026)

Bug Fixes

  • Fix handle-done-callback for object property callbacks (#561)

Dependency Upgrades

  • Update type-fest to 5.8.0
  • Update dependency globals to v17.8.0 (#552)

eslint-plugin-mocha 12.0.1 (July 28, 2026)

Bug Fixes

  • Fix handle-done-callback for nested callback handoffs (#549)

eslint-plugin-mocha 12.0.0 (July 27, 2026)

Breaking Changes

  • Rename no-return-and-callback to no-return-and-done (#467)
  • Adjust recommended config defaults (#466)
  • Rename no-synchronous-tests option to allowedAsyncMethods (#449)
  • Rename no-setup-in-describe to no-setup-in-suite (#447)
  • Rename no-hooks-for-single-case to no-hooks-for-single-child (#448)
  • Move no-sibling-hooks functionality into consistent-structure (#441)
  • Rename no-global-tests to no-top-level-tests (#434)
  • Rename no-top-level-hooks to no-root-hooks (#433)
  • Rename named-import interface setting from exports to require (#432)
  • Require ESLint v10.2.0 (#425)

Bug Fixes

  • Fix no-sibling-hooks nested function false positives (#439)
  • Fix no-mocha-arrows fixer for commented concise bodies (#430)
  • Don’t flag usage of non-configured mocha interface methods (#431)
  • Declare rules as JS-only (#426)
  • Guard the no-async-suite fixer against await expressions (#417)

Features

  • Add no-conditional-tests rule (#461)
  • Add limit-slow rule (#458)
  • Add limit-retries rule (#457)
  • Add limit-timeout rule (#456)
  • Add rule no-done-twice to reject multiple done() calls (#453)
  • Add no-code-after-done rule to reject code after done() (#451)
  • Add rule no-async-and-done to forbid async callbacks with done (#455)
  • Add rule for async operations in synchronous tests (#444)

... (truncated)

Commits
  • b586d3a Merge pull request #553 from lo1tuma/release/eslint-plugin-mocha
  • 71251ba Release packages
  • a941e1f Merge pull request #564 from lo1tuma/renovate/knip-6.x
  • da41b40 Update dependency knip to v6.30.0
  • be3bf50 Merge pull request #563 from lo1tuma/renovate/lock-file-maintenance
  • 46e760f Merge pull request #562 from lo1tuma/renovate/packtory
  • 2245601 Enable TypeScript integrity package checks
  • 53c677c Update dependency @​packtory/cli to v0.0.78
  • 4c470a5 Lock file maintenance
  • d74e830 Update dependency @​packtory/cli to v0.0.75
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-mocha since your current version.


Updates globby from 16.2.0 to 16.2.3

Release notes

Sourced from globby's releases.

v16.2.3

  • Fix backslash-escaped .gitignore rules 5775ffb

sindresorhus/globby@v16.2.2...v16.2.3

v16.2.2

  • Fix: Do not enumerate ignored directories with gitignore option 8bf8f54

sindresorhus/globby@v16.2.1...v16.2.2

v16.2.1

  • Fix gitignore ignoring an entire checkout under an anchored ancestor path (#277) e7bd988

sindresorhus/globby@v16.2.0...v16.2.1

Commits

Updates mocha from 11.7.6 to 11.8.0

Release notes

Sourced from mocha's releases.

v11.8.0

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

v11.7.7

11.7.7 (2026-06-13)

🩹 Fixes

Changelog

Sourced from mocha's changelog.

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

11.7.7 (2026-06-13)

🩹 Fixes

Commits
  • 90c1bb3 chore(v11.x): release 11.8.0 (#6076)
  • 05aec43 chore(CI): bump Node from 22 to 24 in publish action (#6206)
  • 1f44d5f chore: change site title to Mocha 11, update index note (#6086)
  • 26deb23 chore: add modern Netlify to v11.x branch (#6082)
  • 7830309 feat: add --fail-hook-affected-tests option to report skipped tests as failed...
  • 41f2b95 chore(v11.x): release 11.7.7 (#6068)
  • 3477563 fix: surface ts-node compile errors (#6045)
  • See full diff in compare view

Updates nock from 14.0.15 to 14.0.17

Release notes

Sourced from nock's releases.

v14.0.17

14.0.17 (2026-07-30)

Bug Fixes

  • remove interceptor from scope.interceptors on nock.removeInterceptor (#2997) (1ee467c)

v14.0.16

14.0.16 (2026-06-26)

Bug Fixes

  • guard against AbortSignal-aborted requests in response handler (#2977) (2d68e8a), closes #2949
Commits
  • 1ee467c fix: remove interceptor from scope.interceptors on nock.removeInterceptor (#2...
  • da20f4b chore(deps): bump actions/checkout from 6 to 7 (#2987)
  • 2d68e8a fix: guard against AbortSignal-aborted requests in response handler (#2977)
  • See full diff in compare view

Updates sinon from 22.0.0 to 22.1.0

Changelog

Sourced from sinon's changelog.

22.1.0

  • d36e921b fix: let returns override returnsArg (王胜)

    Signed-off-by: 王胜 2318857637@qq.com

  • 40c4caa0 fix: align restoreObject docs test with idempotent behavior (#2745) (Julia Miller)

    restoreObject was made idempotent in #2737 — it no longer throws for objects with no restorable methods. Updates the docs page and its corresponding test to reflect this.

  • a68dac19 fix: throw a clear error when throwArg index equals the argument count (#2743) (spokodev)
    • fix: throw a clear error when throwArg index equals the argument count

    spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it with pos equal to the number of recorded arguments slipped past the guard and reached throw this.args[pos], throwing undefined instead of the intended TypeError. A thrown undefined cannot be inspected as an Error and is reported by test frameworks as no exception thrown.

    Use >= to match ensureArgs in behavior.js and the sibling callArg helpers, which already reject an out-of-range index with a clear error.

  • 9ea504e3 feat: make sinon.restoreObject idempotent (#2737) (Ilia Choly)

    Passing an object with no live fakes to restoreObject now restores nothing instead of throwing, giving it symmetry with sinon.restore() and sandbox.restore(). The strict "found no methods" check is retained for spy(object) and stub(object), which now use a dedicated walkObjectStrict export, while restoreObject uses the loose walkObject. Passing a falsy value still throws.

    Fixes #2736

  • 4db4feff fix: preserve fake undefined argument validation (Vishal Kumar Singh)
  • 755a40d7 fix: isolate callId counter per sandbox for parallel test support (Vishal Kumar Singh)

    The global callId counter in proxy-invoke.js caused calledImmediatelyBefore and calledImmediatelyAfter to fail when tests run in parallel with separate sandboxes. Each sandbox now maintains its own callId counter, passed through the spy/stub/fake creation chain via a context object.

    Fixes #2472

Released by Morgan Roderick on 2026-07-20.

Commits
  • ab289e9 22.1.0
  • bb3b75a chore: remove Jekyll steps from version hook
  • bb38f25 chore: run docs tests in preversion hook
  • d36e921 fix: let returns override returnsArg
  • 11db213 ci: run docs tests on every PR (#2746)
  • 40c4caa fix: align restoreObject docs test with idempotent behavior (#2745)
  • 5ccb7fd build(deps): bump the action-deps group with 4 updates (#2744)
  • a68dac1 fix: throw a clear error when throwArg index equals the argument count (#2743)
  • 9ea504e feat: make sinon.restoreObject idempotent (#2737)
  • cf5d9e8 fix: remove dead link and exclude code example URLs from link check
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 7 updates

Bumps the dev-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@oclif/test](https://github.com/oclif/test) | `3.2.15` | `4.1.21` |
| [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.8.1` |
| [eslint-plugin-mocha](https://github.com/lo1tuma/eslint-plugin-mocha) | `11.3.0` | `12.0.2` |
| [globby](https://github.com/sindresorhus/globby) | `16.2.0` | `16.2.3` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.6` | `11.8.0` |
| [nock](https://github.com/nock/nock) | `14.0.15` | `14.0.17` |
| [sinon](https://github.com/sinonjs/sinon) | `22.0.0` | `22.1.0` |



Updates `@oclif/test` from 3.2.15 to 4.1.21
- [Release notes](https://github.com/oclif/test/releases)
- [Changelog](https://github.com/oclif/test/blob/main/CHANGELOG.md)
- [Commits](oclif/test@3.2.15...4.1.21)

Updates `eslint` from 10.5.0 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.5.0...v10.8.1)

Updates `eslint-plugin-mocha` from 11.3.0 to 12.0.2
- [Release notes](https://github.com/lo1tuma/eslint-plugin-mocha/releases)
- [Changelog](https://github.com/lo1tuma/eslint-plugin-mocha/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lo1tuma/eslint-plugin-mocha/compare/11.3.0...eslint-plugin-mocha@12.0.2)

Updates `globby` from 16.2.0 to 16.2.3
- [Release notes](https://github.com/sindresorhus/globby/releases)
- [Commits](sindresorhus/globby@v16.2.0...v16.2.3)

Updates `mocha` from 11.7.6 to 11.8.0
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.8.0/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.6...v11.8.0)

Updates `nock` from 14.0.15 to 14.0.17
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.15...v14.0.17)

Updates `sinon` from 22.0.0 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v22.0.0...v22.1.0)

---
updated-dependencies:
- dependency-name: "@oclif/test"
  dependency-version: 4.1.21
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-mocha
  dependency-version: 12.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: globby
  dependency-version: 16.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: mocha
  dependency-version: 11.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: nock
  dependency-version: 14.0.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants