Skip to content

Bump the packages group with 5 updates#204

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/packages-7ef3474f69
Jul 8, 2025
Merged

Bump the packages group with 5 updates#204
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/packages-7ef3474f69

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 8, 2025

Bumps the packages group with 5 updates:

Package From To
@types/node 24.0.10 24.0.11
dotenv 17.0.1 17.1.0
vite 7.0.2 7.0.3
@typescript-eslint/types 8.35.1 8.36.0
zod 3.25.75 3.25.76

Updates @types/node from 24.0.10 to 24.0.11

Commits

Updates dotenv from 17.0.1 to 17.1.0

Changelog

Sourced from dotenv's changelog.

17.1.0 (2025-07-07)

Added

  • Add additional security and configuration tips to the runtime log (#884)
  • Dim the tips text from the main injection information text
const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
  '🛠️  run anywhere with `dotenvx run -- yourcommand`',
  '⚙️  specify custom .env file path with { path: \'/custom/path/.env\' }',
  '⚙️  enable debug logging with { debug: true }',
  '⚙️  override existing env vars with { override: true }',
  '⚙️  suppress all logs with { quiet: true }',
  '⚙️  write to custom object with { processEnv: myObject }',
  '⚙️  load multiple .env files with { path: [\'.env.local\', \'.env\'] }'
]
Commits

Updates vite from 7.0.2 to 7.0.3

Release notes

Sourced from vite's releases.

v7.0.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.0.3 (2025-07-08)

Bug Fixes

  • client: protect against window being defined but addEv undefined (#20359) (31d1467)
  • define: replace optional values (#20338) (9465ae1)
  • deps: update all non-major dependencies (#20366) (43ac73d)

Miscellaneous Chores

Code Refactoring

  • minor changes to reduce diff between normal Vite and rolldown-vite (#20354) (2e8050e)
Commits
  • f562df8 release: v7.0.3
  • 38bb268 chore: use n/prefer-node-protocol rule (#20368)
  • 45040d4 chore(deps): update dependency dotenv to v17 (#20325)
  • 9465ae1 fix(define): replace optional values (#20338)
  • 43ac73d fix(deps): update all non-major dependencies (#20366)
  • 31d1467 fix(client): protect against window being defined but addEv undefined (#20359)
  • 5ab25e7 chore(deps): update dependency rolldown to ^1.0.0-beta.24 (#20365)
  • 2e8050e refactor: minor changes to reduce diff between normal Vite and rolldown-vite ...
  • See full diff in compare view

Updates @typescript-eslint/types from 8.35.1 to 8.36.0

Release notes

Sourced from @​typescript-eslint/types's releases.

v8.36.0

8.36.0 (2025-07-07)

🚀 Features

  • typescript-eslint: support basePath in tseslint.config() (#11357)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/types's changelog.

8.36.0 (2025-07-07)

This was a version bump only for types to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates zod from 3.25.75 to 3.25.76

Release notes

Sourced from zod's releases.

v3.25.76

Commits:

  • 91c9ca6385bef38278605294498af06c89b9aa68 fix: cleanup _idmap of $ZodRegistry (#4837)
  • 9cce1c5779aea32d00226a931a7f67d3e2529d58 docs: fix typo in flattenError example on error-formatting page (#4819) (#4833)
  • a3560aeb6c3a8675a932601be79cfae897eec9d9 v3.25.76 (#4838)
  • 50606616c0d291caf3210a7521da51271b918333 Release 3.25.76
  • 7baee4e17f86f4017e09e12b0acdee36a5b1c087 Update index.mdx (#4831)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the packages group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.0.10` | `24.0.11` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.0.1` | `17.1.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.0.2` | `7.0.3` |
| [@typescript-eslint/types](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/types) | `8.35.1` | `8.36.0` |
| [zod](https://github.com/colinhacks/zod) | `3.25.75` | `3.25.76` |


Updates `@types/node` from 24.0.10 to 24.0.11
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `dotenv` from 17.0.1 to 17.1.0
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.0.1...v17.1.0)

Updates `vite` from 7.0.2 to 7.0.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.0.3/packages/vite)

Updates `@typescript-eslint/types` from 8.35.1 to 8.36.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/types/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.36.0/packages/types)

Updates `zod` from 3.25.75 to 3.25.76
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.75...v3.25.76)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.0.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: packages
- dependency-name: dotenv
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: packages
- dependency-name: vite
  dependency-version: 7.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: packages
- dependency-name: "@typescript-eslint/types"
  dependency-version: 8.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: packages
- dependency-name: zod
  dependency-version: 3.25.76
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot assigned poad Jul 8, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 8, 2025
@amazon-q-developer
Copy link

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

@vercel
Copy link

vercel bot commented Jul 8, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
github-rest-api-executor ❌ Failed (Inspect) Jul 8, 2025 10:46pm

@github-actions github-actions bot merged commit 011f175 into main Jul 8, 2025
4 of 5 checks passed
@github-actions github-actions bot deleted the dependabot/npm_and_yarn/packages-7ef3474f69 branch July 8, 2025 22:47
@amazon-q-developer
Copy link

✅ I finished the code review, and didn't find any security or code quality issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant