Skip to content

Bump the development_dependencies group across 1 directory with 3 updates - #8219

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-development_dependencies-e50457dd74
Open

Bump the development_dependencies group across 1 directory with 3 updates#8219
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-development_dependencies-e50457dd74

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development_dependencies group with 3 updates in the / directory: @changesets/cli, oclif and node-stream-zip.

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Commits
  • a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
  • e8650b9 Version Packages (#2161)
  • 15cf592 Fixed handling of the npm 12 info output (#2159)
  • 9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
  • 97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
  • 13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
  • 8f6acd6 Update dependabot group to exclude major (#2067)
  • c70c675 Setup backport workflow and sync next setup (#2057)
  • 9672019 Remove SECURITY.md to defer to .github (#2055)
  • 18e1661 Use internal bot for versioning (#2039)
  • Additional commits viewable in compare view

Updates oclif from 4.23.27 to 4.23.28

Release notes

Sourced from oclif's releases.

4.23.28

Bug Fixes

  • pinned certain tests to TS6 (W-23513992) (#2076) (536f8cd)
Changelog

Sourced from oclif's changelog.

4.23.28 (2026-07-20)

Bug Fixes

  • pinned certain tests to TS6 (W-23513992) (#2076) (536f8cd)
Commits

Updates node-stream-zip from 1.15.0 to 1.16.0

Changelog

Sourced from node-stream-zip's changelog.

v1.16.0 (2026-07-22)

+ fixed reading compressed entry size to prevent exploitation reported by @​DumDumSu
* updated dependencies

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 31, 2026
@dependabot
dependabot Bot requested review from a team as code owners July 31, 2026 09:34
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 31, 2026
@dependabot dependabot Bot mentioned this pull request Jul 31, 2026
Closed
@github-actions github-actions Bot added no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users. devtools-gardener Post the issue or PR to Slack for the gardener labels Jul 31, 2026
@dependabot
Bump the development_dependencies group across 1 directory with 3 upd…
4c3534a 
…ates

Bumps the development_dependencies group with 3 updates in the / directory: [@changesets/cli](https://github.com/changesets/changesets), [oclif](https://github.com/oclif/oclif) and [node-stream-zip](https://github.com/antelle/node-stream-zip).


Updates `@changesets/cli` from 2.31.0 to 2.31.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.31.0...@changesets/cli@2.31.1)

Updates `oclif` from 4.23.27 to 4.23.28
- [Release notes](https://github.com/oclif/oclif/releases)
- [Changelog](https://github.com/oclif/oclif/blob/main/CHANGELOG.md)
- [Commits](oclif/oclif@4.23.27...4.23.28)

Updates `node-stream-zip` from 1.15.0 to 1.16.0
- [Changelog](https://github.com/antelle/node-stream-zip/blob/master/release-notes.md)
- [Commits](antelle/node-stream-zip@1.15.0...1.16.0)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development_dependencies
- dependency-name: node-stream-zip
  dependency-version: 1.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development_dependencies
- dependency-name: oclif
  dependency-version: 4.23.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development_dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-npm_and_yarn-development_dependencies-e50457dd74 branch from 86476f8 to 4c3534a Compare July 31, 2026 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file devtools-gardener Post the issue or PR to Slack for the gardener no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants