Skip to content

build(deps): bump the npm-dependencies group across 1 directory with 10 updates - #694

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-978fce4864
Open

build(deps): bump the npm-dependencies group across 1 directory with 10 updates#694
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-978fce4864

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 10 updates in the / directory:

Package From To
fast-xml-parser 5.11.2 5.12.0
semver 7.8.5 7.8.6
web-tree-sitter 0.27.1 0.27.2
@cyclonedx/cyclonedx-library 10.3.0 10.5.0
@types/node 26.6.5 26.6.6
eslint 10.13.0 10.14.0
eslint-plugin-import-x 4.17.1 4.18.1
esmock 2.8.0 3.0.0
globals 17.13.0 17.14.0
msw 3.0.3 3.0.4

Updates fast-xml-parser from 5.11.2 to 5.12.0

Release notes

Sourced from fast-xml-parser's releases.

v5.12.0

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.12.0 / 2026-11-03

  • perf improvement for stop node: After the first failure in a given stop node, the function stops using readTagExp and switches to a cheap fallback.
  • devdep:jasmine 7.0
  • deps:
    • @​nodable/entities v3.1.0
    • fast-xml-builder v1.3.1
    • is-unsafe v2.0.3
    • strnum v2.5.1
  • fix cjs typing
  • fix: preserve original metadata offsets for CRLF input (#911) (By sskift)

5.11.2 / 2026-09-29

  • fix (#875): decode Uint8Array XML input as UTF-8 (By emme1t)
  • fix (#880) :type EntityDecoderOptions.setXmlVersion's version as a number (By Yevhenii Kotyrlo)

5.11.1 / 2026-08-27

  • fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

  • feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]
  • fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]
  • fix: DOCTYPE to read SYSTEM/PUBLIC
  • deps: strnum v2.4.2

5.10.1 / 2026-07-17

  • fix: multiple DOCTYPE declarations.
  • deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

  • upgrade:
    • xml-naming v0.3.0: cache support
    • PEM v1.6.2: sibling bug fix
    • is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

  • update strnum

*5.9.2 / 2026-06-17

  • dummy release to test changes in github action

*5.9.1 / 2026-06-17

  • dummy release to test release from github action

*5.9.0 / 2026-06-15

  • update strnum to 2.3.0

... (truncated)

Commits

Updates semver from 7.8.5 to 7.8.6

Release notes

Sourced from semver's releases.

v7.8.6

7.8.6 (2026-11-02)

Bug Fixes

Chores

Changelog

Sourced from semver's changelog.

7.8.6 (2026-11-02)

Bug Fixes

Chores

Commits

Updates web-tree-sitter from 0.27.1 to 0.27.2

Release notes

Sourced from web-tree-sitter's releases.

v0.27.2

What's Changed

Full Changelog: tree-sitter/tree-sitter@v0.27.1...v0.27.2

Commits
  • 3fb7be4 release v0.27.2
  • c407c25 fix(web): free the collected cursor in the TreeCursor finalizer
  • cc3fc26 fix(web): use string indices for Query pattern ranges and step offsets
  • 84d966f fix(web): use Edit#editPoint in Node#edit
  • be35c12 fix(web): follow the new tree in TreeCursor#reset and #resetTo
  • 4bef513 fix(web): keep ERROR last in descendantsOfType's symbol list
  • a0deeb5 fix(web): convert query index ranges to bytes
  • fa67edf fix(web): read the goal and result correctly in gotoFirstChildFor*
  • 9df6407 fix(web): marshal the cursor in TreeCursor#copy
  • See full diff in compare view

Updates @cyclonedx/cyclonedx-library from 10.3.0 to 10.5.0

Release notes

Sourced from @​cyclonedx/cyclonedx-library's releases.

10.5.0

Added

  • Publish sub-namespace types OptionalFeature (via #1535)

#1535: CycloneDX/cyclonedx-javascript-library#1535

What's Changed

Full Changelog: CycloneDX/cyclonedx-javascript-library@v10.4.0...v10.5.0

10.4.0

Added

  • Optional-feature classes expose a static cannot property (via #1534)
    It tells whether missing optional dependencies prevent the class from acting: false when the feature is available; otherwise an object with a message describing why the feature is unavailable. Affected classes:
    • Serialize.JsonSerializer — always false
    • Serialize.XmlSerializer — always false in web builds; in node it depends on an optional XML library
    • Validation.JsonValidator
    • Validation.JsonStrictValidator
    • Validation.XmlValidator

Changed

  • Serialize.XmlSerializer, Validation.JsonValidator, Validation.JsonStrictValidator and Validation.XmlValidator now throw MissingOptionalDependencyError based on the new cannot check, instead of wrapping the underlying OptPlugError (via #1534)

#1534: CycloneDX/cyclonedx-javascript-library#1534

What's Changed

Full Changelog: CycloneDX/cyclonedx-javascript-library@v10.3.0...v10.4.0

10.4.0-rc.0

No release notes provided.

Changelog

Sourced from @​cyclonedx/cyclonedx-library's changelog.

10.5.0 -- 2026-11-09

  • Added
    • Publish sub-namespace types OptionalFeature (via #1535)

#1535: CycloneDX/cyclonedx-javascript-library#1535

10.4.0 -- 2026-11-03

  • Added
    • Optional-feature classes expose a static cannot property (via #1534)
      It tells whether missing optional dependencies prevent the class from acting: false when the feature is available; otherwise an object with a message describing why the feature is unavailable. Affected classes:
      • Serialize.JsonSerializer — always false
      • Serialize.XmlSerializer — always false in web builds; in node it depends on an optional XML library
      • Validation.JsonValidator
      • Validation.JsonStrictValidator
      • Validation.XmlValidator
  • Changed
    • Serialize.XmlSerializer, Validation.JsonValidator, Validation.JsonStrictValidator and Validation.XmlValidator now throw MissingOptionalDependencyError based on the new cannot check, instead of wrapping the underlying OptPlugError (via #1534)

#1534: CycloneDX/cyclonedx-javascript-library#1534

Commits

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates eslint-plugin-import-x from 4.17.1 to 4.18.1

Release notes

Sourced from eslint-plugin-import-x's releases.

v4.18.1

Patch Changes

  • #599 d9c8a4e Thanks @​SwastikTripathi! - fix(core): don't load the optional @typescript-eslint/utils peer at runtime, so the plugin loads again without it

  • #604 28779e0 Thanks @​gilbarbara! - fix(extensions): stop requiring a js alias on extensionless imports that resolve to a file whose extension is never, such as .ts with { js: 'always', ts: 'never' }.

  • #600 6172d1d Thanks @​thekhegay! - fix(first): the autofix puts imports above the decorators of @dec() export class and on their own line when they have no semicolon, it could leave code that doesn't parse in both cases

New Contributors

Full Changelog: un-ts/eslint-plugin-import-x@v4.18.0...v4.18.1

v4.18.0

Minor Changes

  • #520 802441c Thanks @​SwastikTripathi! - Add a checkSelfReference option to the extensions rule. When set, a package's import of its own subpath export (e.g. pkg/sub from inside pkg) is treated as a package import, so ignorePackages applies to it.

  • #403 f4d0a4b Thanks @​Zamiell! - extensions: when an import has no extension and cannot be resolved as-is, try the extensions configured as always in pattern and use the unique one that resolves for the fix or suggestion. If several resolve, report the missing extension without guessing. When no extension can be determined automatically, explain that in the missing message instead of only reporting a bare missing extension.

  • #572 fc17206 Thanks @​SwastikTripathi! - feat(no-duplicates): add a whitelist option listing entry points that share one declaration file but are different modules, such as svelte and svelte/easing

  • #504 f10dcc4 Thanks @​morgan-coded! - Add a "top" mode to the order rule's warnOnUnassignedImports option for requiring no-specifier ESM imports before assigned imports.

  • #502 9c85ced Thanks @​SukkaW! - Rewrite the module analysis core for performance boosts. The speedup depends on your project, and we expect no performance regression in any setup — if you measure one, please report it.

    Rules like named, default, namespace, no-cycle, no-deprecated, and many more, need to know what the modules you import actually export. Until now, answering that meant running the full ESLint parser over every one of those files — including everything you pull in from node_modules.

    That core has been rewritten:

    • Plain JavaScript is now read with es-module-lexer instead of being parsed. Anything it can't read faithfully — TypeScript, JSX, Flow — still goes through the ESLint parser exactly as before.
    • Analysis is lazy. Much of the work now happens when a rule actually asks for it, so enabling one rule no longer pays for what the others would have needed.
    • Results are cached and shared between rules.

    There are no breaking changes: no configuration changes are needed, and no behavior changes are intended. Every rule should report exactly what it reported before, with one known exception: an imported plain JavaScript file that has a syntax error no longer gets a "Parse errors in imported module" report. ESLint still reports the syntax error when it lints that file itself. The full test suite passes, but there could be some edge cases. If a rule starts reporting something it didn't before, or stops reporting something it should, please open an issue with a minimum reproduction — bug reports on this are very welcome.

  • #456 7b78aae Thanks @​43081j! - Add four barrel file detection rules ported from eslint-plugin-barrel-files: avoid-barrel-files, avoid-importing-barrel-files, avoid-namespace-import and avoid-re-export-all.

    avoid-importing-barrel-files checks every runtime way a module can be referenced — static imports, re-exports (export … from, export * from, export * as ns from), dynamic import() and CommonJS require() — with type-only statements exempt.

  • #157 89cfe42 Thanks @​Zamiell! - feat(no-rename-default): accept names derived from bare package paths and add a whitelist option for modules that mangle their default export names

Patch Changes

  • #562 7cbe683 Thanks @​JounQin! - perf(avoid-importing-barrel-files): skip the surface parse for a dependency that cannot be a barrel

    The rule sizes the runtime module graph behind every imported target, and a target only becomes a candidate once its export count passes amountOfExportsToConsiderModuleAsBarrel. A lexer-analyzed module already reports its export entries, so a count at or below the threshold settles the

... (truncated)

Changelog

Sourced from eslint-plugin-import-x's changelog.

4.18.1

Patch Changes

  • #599 d9c8a4e Thanks @​SwastikTripathi! - fix(core): don't load the optional @typescript-eslint/utils peer at runtime, so the plugin loads again without it

  • #604 28779e0 Thanks @​gilbarbara! - fix(extensions): stop requiring a js alias on extensionless imports that resolve to a file whose extension is never, such as .ts with { js: 'always', ts: 'never' }.

  • #600 6172d1d Thanks @​thekhegay! - fix(first): the autofix puts imports above the decorators of @dec() export class and on their own line when they have no semicolon, it could leave code that doesn't parse in both cases

4.18.0

Minor Changes

  • #520 802441c Thanks @​SwastikTripathi! - Add a checkSelfReference option to the extensions rule. When set, a package's import of its own subpath export (e.g. pkg/sub from inside pkg) is treated as a package import, so ignorePackages applies to it.

  • #403 f4d0a4b Thanks @​Zamiell! - extensions: when an import has no extension and cannot be resolved as-is, try the extensions configured as always in pattern and use the unique one that resolves for the fix or suggestion. If several resolve, report the missing extension without guessing. When no extension can be determined automatically, explain that in the missing message instead of only reporting a bare missing extension.

  • #572 fc17206 Thanks @​SwastikTripathi! - feat(no-duplicates): add a whitelist option listing entry points that share one declaration file but are different modules, such as svelte and svelte/easing

  • #504 f10dcc4 Thanks @​morgan-coded! - Add a "top" mode to the order rule's warnOnUnassignedImports option for requiring no-specifier ESM imports before assigned imports.

  • #502 9c85ced Thanks @​SukkaW! - Rewrite the module analysis core for performance boosts. The speedup depends on your project, and we expect no performance regression in any setup — if you measure one, please report it.

    Rules like named, default, namespace, no-cycle, no-deprecated, and many more, need to know what the modules you import actually export. Until now, answering that meant running the full ESLint parser over every one of those files — including everything you pull in from node_modules.

    That core has been rewritten:

    • Plain JavaScript is now read with es-module-lexer instead of being parsed. Anything it can't read faithfully — TypeScript, JSX, Flow — still goes through the ESLint parser exactly as before.
    • Analysis is lazy. Much of the work now happens when a rule actually asks for it, so enabling one rule no longer pays for what the others would have needed.
    • Results are cached and shared between rules.

    There are no breaking changes: no configuration changes are needed, and no behavior changes are intended. Every rule should report exactly what it reported before, with one known exception: an imported plain JavaScript file that has a syntax error no longer gets a "Parse errors in imported module" report. ESLint still reports the syntax error when it lints that file itself. The full test suite passes, but there could be some edge cases. If a rule starts reporting something it didn't before, or stops reporting something it should, please open an issue with a minimum reproduction — bug reports on this are very welcome.

  • #456 7b78aae Thanks @​43081j! - Add four barrel file detection rules ported from eslint-plugin-barrel-files: avoid-barrel-files, avoid-importing-barrel-files, avoid-namespace-import and avoid-re-export-all.

    avoid-importing-barrel-files checks every runtime way a module can be referenced — static imports, re-exports (export … from, export * from, export * as ns from), dynamic import() and CommonJS require() — with type-only statements exempt.

  • #157 89cfe42 Thanks @​Zamiell! - feat(no-rename-default): accept names derived from bare package paths and add a whitelist option for modules that mangle their default export names

Patch Changes

  • #562 7cbe683 Thanks @​JounQin! - perf(avoid-importing-barrel-files): skip the surface parse for a dependency that cannot be a barrel

    The rule sizes the runtime module graph behind every imported target, and a target only becomes a candidate once its export count passes amountOfExportsToConsiderModuleAsBarrel. A lexer-analyzed module already reports its export entries, so a count at or below the threshold settles the question without producing the exact export/declaration surface — one parse saved per small plain-JS dependency.

... (truncated)

Commits
  • 522c2c2 chore: release eslint-plugin-import-x (#603)
  • 28779e0 fix(extensions): don't require a js alias when the resolved extension is neve...
  • 6172d1d fix(first): keep code parsable after the autofix with decorators and no semic...
  • f88be8f test: fix type errors that fail the staged typecheck (#606)
  • d9c8a4e fix(core): don't load the optional @​typescript-eslint/utils peer at runtime (...
  • eb711a1 chore: release eslint-plugin-import-x (#514)
  • 89cfe42 feat(no-rename-default): recognize package/path names and add a whitelist opt...
  • fc17206 feat(no-duplicates): add a whitelist option for packages sharing a declaratio...
  • 4afef66 fix(no-relative-packages): keep the imported path in the suggested package im...
  • 0c82c7e fix(extensions): point directory imports at their index file in fixes (#594)
  • Additional commits viewable in compare view

Updates esmock from 2.8.0 to 3.0.0

Release notes

Sourced from esmock's releases.

drop legacy support

From this release, esmock now supports minimum node version 22.15. Changes here are mostly credit to @​tommy-mitchell.

Older versions of esmock supported numerous different scenarious as required by legacy versions of nodejs, which added complexity and noise to source code, to bundling operations and to unit-tests. As a result of dropping support for older node versions, esmock's install size is smaller than ever, ~20.5Kb; its CI test-coverage is higher than ever, 100%, its test pipeline finishes sooner and its source code is more readable.

Changelog

Sourced from esmock's changelog.

changelog

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-978fce4864 branch from e1dbd96 to 67f6246 Compare November 12, 2026 10:40
@codecov-commenter

codecov-commenter commented Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.60%. Comparing base (ce9658d) to head (95d5ef1).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #694   +/-   ##
=======================================
  Coverage   91.60%   91.60%           
=======================================
  Files          44       44           
  Lines       11638    11638           
  Branches     2346     2346           
=======================================
  Hits        10661    10661           
  Misses        977      977
Flag Coverage Δ
unit-tests 91.60% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot
build(deps): bump the npm-dependencies group across 1 directory with …
95d5ef1 
…10 updates

Bumps the npm-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.11.2` | `5.12.0` |
| [semver](https://github.com/npm/node-semver) | `7.8.5` | `7.8.6` |
| [web-tree-sitter](https://github.com/tree-sitter/tree-sitter/tree/HEAD/lib/binding_web) | `0.27.1` | `0.27.2` |
| [@cyclonedx/cyclonedx-library](https://github.com/CycloneDX/cyclonedx-javascript-library) | `10.3.0` | `10.5.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |
| [eslint](https://github.com/eslint/eslint) | `10.13.0` | `10.14.0` |
| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.17.1` | `4.18.1` |
| [esmock](https://github.com/iambumblehead/esmock) | `2.8.0` | `3.0.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.13.0` | `17.14.0` |
| [msw](https://github.com/mswjs/msw) | `3.0.3` | `3.0.4` |



Updates `fast-xml-parser` from 5.11.2 to 5.12.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0)

Updates `semver` from 7.8.5 to 7.8.6
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.5...v7.8.6)

Updates `web-tree-sitter` from 0.27.1 to 0.27.2
- [Release notes](https://github.com/tree-sitter/tree-sitter/releases)
- [Commits](https://github.com/tree-sitter/tree-sitter/commits/v0.27.2/lib/binding_web)

Updates `@cyclonedx/cyclonedx-library` from 10.3.0 to 10.5.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-javascript-library/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-javascript-library/blob/main/HISTORY.md)
- [Commits](CycloneDX/cyclonedx-javascript-library@v10.3.0...v10.5.0)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.13.0 to 10.14.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.13.0...v10.14.0)

Updates `eslint-plugin-import-x` from 4.17.1 to 4.18.1
- [Release notes](https://github.com/un-ts/eslint-plugin-import-x/releases)
- [Changelog](https://github.com/un-ts/eslint-plugin-import-x/blob/master/CHANGELOG.md)
- [Commits](un-ts/eslint-plugin-import-x@v4.17.1...v4.18.1)

Updates `esmock` from 2.8.0 to 3.0.0
- [Release notes](https://github.com/iambumblehead/esmock/releases)
- [Changelog](https://github.com/iambumblehead/esmock/blob/main/CHANGELOG.md)
- [Commits](iambumblehead/esmock@v2.8.0...v3.0.0)

Updates `globals` from 17.13.0 to 17.14.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.13.0...v17.14.0)

Updates `msw` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: "@cyclonedx/cyclonedx-library"
  dependency-version: 10.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: eslint
  dependency-version: 10.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-import-x
  dependency-version: 4.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: esmock
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: fast-xml-parser
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: globals
  dependency-version: 17.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: msw
  dependency-version: 3.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: semver
  dependency-version: 7.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: web-tree-sitter
  dependency-version: 0.27.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-978fce4864 branch from 67f6246 to 95d5ef1 Compare November 13, 2026 06:44

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@codecov-commenter