Skip to content

Bump the dev-dependencies group across 1 directory with 16 updates - #132

Merged
PDowney merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-063115c892
Oct 28, 2026
Merged

Bump the dev-dependencies group across 1 directory with 16 updates#132
PDowney merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-063115c892

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 16 updates in the / directory:

Package From To
@wordpress/browserslist-config 6.57.0 7.0.0
@wordpress/eslint-plugin 27.1.0 28.0.0
jsdom 30.1.2 30.1.3
@asamuzakjp/css-color 7.1.3 7.1.9
@babel/helper-string-parser 7.29.7 7.29.11
@babel/parser 7.29.9 7.29.11
@vitest/eslint-plugin 1.6.27 1.6.28
baseline-browser-mapping 2.11.28 2.11.34
browserslist 4.29.3 4.29.5
caniuse-lite 1.0.30001816 1.0.30001819
napi-postinstall 0.3.4 0.3.7
postcss 8.5.29 8.5.32
postcss-selector-parser 7.1.6 7.1.7
tldts 7.4.16 7.4.19
typescript-eslint 8.71.2 8.72.1
whatwg-url 17.2.0 17.3.0

Updates @wordpress/browserslist-config from 6.57.0 to 7.0.0

Changelog

Sourced from @​wordpress/browserslist-config's changelog.

7.0.0 (2026-10-20)

Breaking Changes

  • Raise the minimum required Node.js version to >=22.13.0, for stable require(esm) support (#84313).
Commits
  • 8d30f92 chore(release): publish
  • e7922b3 Update changelog files
  • e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
  • fa4301b Update changelog files
  • 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
  • 2555c8d Update changelog files
  • 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
  • See full diff in compare view

Updates @wordpress/eslint-plugin from 27.1.0 to 28.0.0

Changelog

Sourced from @​wordpress/eslint-plugin's changelog.

28.0.0 (2026-10-20)

Breaking Changes

  • Raise the minimum required Node.js version to >=22.13.0, for stable require(esm) support (#84313).

Enhancements

  • use-recommended-components: Recommend useEnableWpCompatOverlaySlot from @wordpress/ui (#84305).
  • use-recommended-components: Recommend Notice from @wordpress/ui instead of Tip from @wordpress/components (#84197).
  • use-recommended-components: Recognize Avatar from @wordpress/ui as use-with-caution. (#84145)

Bug Fixes

  • use-recommended-components: Require allowUseWithCaution for ControlWithError, ValidatedInputControl, and ValidatedTextareaControl from @wordpress/ui, matching their Storybook status (#84319).

Internal

  • Remove the unused @eslint-community/eslint-plugin-eslint-comments dependency (#85102).
Commits
  • 8d30f92 chore(release): publish
  • e7922b3 Update changelog files
  • e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
  • fa4301b Update changelog files
  • 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
  • 2555c8d Update changelog files
  • 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
  • See full diff in compare view

Updates jsdom from 30.1.2 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

  • Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@​scttcper, @​asamuzaK)
  • Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@​scttcper)
  • Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
  • Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
  • Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@​rnavarro)
  • Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
  • Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
  • Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
  • Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
  • Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
  • Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
  • Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
  • Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
  • Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@​asamuzaK)
Commits
  • 058c0f5 30.1.3
  • fcd1fd1 Cascade parsed longhands independently
  • a3ee786 Cascade computed style properties on demand
  • f42dc15 Resolve colors before caching or using currentcolor
  • 074b1fb Compute background-position lengths against the final font size
  • d19598c Apply style rules nested in multiple @​media rules
  • 45d626c Rule out attribute selector subjects before matching
  • 3ff0a5b Upgrade Undici and remove abort workarounds
  • 8813bb1 Ignore CSS declarations with unparseable math functions
  • 63712d8 Fix XHR credentials across redirects
  • Additional commits viewable in compare view

Updates @asamuzakjp/css-color from 7.1.3 to 7.1.9

Release notes

Sourced from @​asamuzakjp/css-color's releases.

v7.1.9

What's Changed

Full Changelog: asamuzaK/cssColor@v7.1.8...v7.1.9

v7.1.8

What's Changed

Full Changelog: asamuzaK/cssColor@v7.1.7...v7.1.8

v7.1.7

Full Changelog: asamuzaK/cssColor@v7.1.6...v7.1.7

v7.1.6

What's Changed

Full Changelog: asamuzaK/cssColor@v7.1.5...v7.1.6

v7.1.5

What's Changed

Full Changelog: asamuzaK/cssColor@v7.1.4...v7.1.5

v7.1.4

What's Changed

New Contributors

Full Changelog: asamuzaK/cssColor@v7.1.3...v7.1.4

Commits

Updates @babel/helper-string-parser from 7.29.7 to 7.29.11

Release notes

Sourced from @​babel/helper-string-parser's releases.

v7.29.11 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

  • babel-plugin-transform-classes

🔬 Output optimization

  • babel-plugin-transform-spread

Committers: 1

v7.29.10 (2026-10-07)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-traverse

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 2

... (truncated)

Commits

Updates @babel/parser from 7.29.9 to 7.29.11

Release notes

Sourced from @​babel/parser's releases.

v7.29.11 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

  • babel-plugin-transform-classes

🔬 Output optimization

  • babel-plugin-transform-spread

Committers: 1

v7.29.10 (2026-10-07)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-traverse

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 2

... (truncated)

Commits
  • d4e8b0f v7.29.11
  • f094e8e fix(parser): ASI between arrow body and /= regex (#18403)
  • 93b69a0 Disallow eval and arguments as class names (#18405)
  • b985fae Allow ASI after export default from without exportDefaultFrom (#18402)
  • 7cc6d6f fix(parser): disallow const x followed by linebreak and of (#18404)
  • 3327c7e fix(parser): disallow named specifiers after * as ns (#18400)
  • 792af3f fix(parser): allow arguments as a label in class (#18401)
  • 76eaed4 Skip HTML-like comments in the parser's character lookahead (#18378)
  • 4b1f8f0 fix(parser): register function id in labeled function declaration (#18375)
  • 6d406f4 fix(parser): reject delete (x) when createParenthesizedExpressions: true (#18...
  • Additional commits viewable in compare view

Updates @vitest/eslint-plugin from 1.6.27 to 1.6.28

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.28

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • c5df105 chore: release v1.6.28
  • 8eb6991 fix(parse-vitest-fn-call): recognize member-form hooks like test.aroundAll ...
  • e2aaac6 fix(prefer-describe-function-title): ignore type-only imports (#957)
  • 4c0ae5a fix(prefer-spy-on): pass an implementation to mockImplementation in the fix (...
  • a6acf78 fix(prefer-comparison-matcher): skip non-numeric operands with typecheck (#984)
  • 743f81f fix(unbound-method): account for optional chaining (#975)
  • 8bdb180 docs: typo in prefer-to-contain rule docs (#973)
  • 0bea6e1 refactor(valid-expect): remove unneeded conditions and use optional chaining ...
  • b3636d8 docs(consistent-test-it): fixed the description of the consistent-test-it opt...
  • 22d672a chore: Update TypeScript version to v6 (#945)
  • Additional commits viewable in compare view

Updates baseline-browser-mapping from 2.11.28 to 2.11.34

Commits
  • 4a311c7 Patch to 2.11.34 because browser or feature data changed
  • cadd64d Browser or feature data changed
  • 7439261 Updating static site
  • 47dde6e Patch to 2.11.33 because browser or feature data changed
  • 7d23626 Browser or feature data changed
  • 107852a Updating static site
  • b010b39 Patch to 2.11.32 because browser or feature data changed
  • b41f5fb Browser or feature data changed
  • b1b7b47 Updating static site
  • 22ea69a Patch to 2.11.31 because browser or feature data changed
  • Additional commits viewable in compare view

Updates browserslist from 4.29.3 to 4.29.5

Release notes

Sourced from browserslist's releases.

4.29.5

4.29.4

  • Fixed joined version bounds in version ray and range queries (by @​ybai08).
  • Fixed whitespaces processing (by @​abhu85).
Changelog

Sourced from browserslist's changelog.

4.29.5

4.29.4

  • Fixed joined version bounds in version ray and range queries (by @​ybai08).
  • Fixed whitespaces processing (by @​abhu85).
Commits
  • 2e4b904 Release 4.29.5 version
  • 11a13ec Update dependencies
  • e80fabc Merge pull request #957 from nk-batman21/fix-coverage-custom-stats-versions
  • cac8029 Normalize custom statistics versions in coverage
  • f7a99b9 Release 4.29.4 version
  • 03fc702 Update dependencies
  • efe07e1 Merge pull request #956 from ybai08/fix-joined-range-bounds
  • ef50f5b Fix joined version bounds in version ray and range queries
  • 8219dd7 Merge pull request #954 from abhu85/fix-since-extends-whitespace
  • 893120b Allow arbitrary whitespaces in since, extends, config and not queries
  • See full diff in compare view

Updates caniuse-lite from 1.0.30001816 to 1.0.30001819

Commits

Updates napi-postinstall from 0.3.4 to 0.3.7

Release notes

Sourced from napi-postinstall's releases.

v0.3.7

Patch Changes

  • #81 0a96d2a Thanks @​JounQin! - Copy the installed binding binary to the loader's local path so the runtime fallback still works when Node has cached the failed package lookup.

  • #79 0f3601d Thanks @​JounQin! - Add a napi-patch bin for injecting the all-platform runtime fallback into generated napi-rs loaders. It inserts the all-platform fallback before the loader's final if (!nativeBinding) check, with no WebContainer-only guard. The API accepts an entry, package name and extra text to append; nested entries such as napi/index.js are supported. The inserted fallback is guarded by SKIP_<PACKAGE>_FALLBACK; scoped names are encoded as SKIP_SCOPE_PACKAGE_FALLBACK. A loader that already ran the fallback gives up instead of starting another nested install.

v0.3.6

Patch Changes

  • #73 d95190c Thanks @​JounQin! - Support WASI targets listed in napi.targets when the WASI binding is not declared in optionalDependencies, matching the fallback behavior.

  • #70 6527bce Thanks @​JounQin! - Avoid EBADDEVENGINES when the caller declares a different devEngines.packageManager by running the fallback npm install with the temporary directory as its prefix.

  • #75 b4ee025 Thanks @​JounQin! - Use the locally installed CLI for the runtime fallback instead of invoking npx/pnpm/yarn, and expose the CLI as napi-postinstall/cli. This also removes the package-manager and Deno detection from the fallback.

  • #76 a94c0db Thanks @​JounQin! - Respect the project's .npmrc when a missing platform binding has to be installed by the nested npm fallback. Custom registries configured with registry and _authToken now work instead of falling back to the public registry. The nested install runs from the project directory, so relative values in that file such as cafile, certfile and cache keep pointing at the project.

    The registry used by the JS API is resolved from the same config as well, including @scope:registry. It stays there when the configured registry answers: neither the manifest lookup nor the tarball download falls back to the public registry, since a public manifest could otherwise decide which package is resolved next. When npm itself cannot be queried at all (no npm on the machine, or an unreadable project .npmrc), the lookup returns the public default rather than failing, and says so in the log.

    Known limitations:

    • A cross-device move copies the tree, and Node below 16.15 ignores verbatimSymlinks, so symlinks inside it (such as node_modules/.bin for a WASI install) are resolved against the source that is then removed. Node 16.7-16.14 failed that move outright before, so nothing regresses, but the links can break there.
    • The project directory is the one npm reports for the install, or the directory that owns the node_modules the package was installed into. Workspace roots are not derived, so an install that lands in a member's node_modules while the .npmrc only exists at the workspace root is not covered yet.

    Credentials mirrored into the temporary prefix are written with mode 0600 from the start, so the copy is never readable by other users; the prefix itself is created by mkdtemp and is 0700.

  • #78 86ff5e0 Thanks @​i1stG! - Resolve the host manifest and the installed binding from the directory the postinstall runs in. In a pnpm-style layout with hoist=false the binding is a sibling of the host package in the consumer's node_modules, while napi-postinstall can be linked from a tree that cannot see it, so the lookup used to fall through to the nested install and then to a download — which fails in an offline sandbox. In a normal npm, yarn or pnpm install the cwd is the package that needs the binding, so nothing changes for them.

New Contributors

Full Changelog: un-ts/napi-postinstall@v0.3.5...v0.3.6

v0.3.5

Patch Changes

  • #63 7ef37fe Thanks @​JounQin! - Support WASI packages that do not declare the WASI binding in optionalDependencies.

    The fallback now checks napi.targets as well, matching napi's policy of keeping the WASI fallback out of optionalDependencies when it is not the only target.

Changelog

Sourced from napi-postinstall's changelog.

0.3.7

Patch Changes

  • #81 0a96d2a Thanks @​JounQin! - Copy the installed binding binary to the loader's local path so the runtime fallback still works when Node has cached the failed package lookup.

  • #79 0f3601d Thanks @​JounQin! - Add a napi-patch bin for injecting the all-platform runtime fallback into generated napi-rs loaders. It inserts the all-platform fallback before the loader's final if (!nativeBinding) check, with no WebContainer-only guard. The API accepts an entry, package name and extra text to append; nested entries such as napi/index.js are supported. The inserted fallback is guarded by SKIP_<PACKAGE>_FALLBACK; scoped names are encoded as SKIP_SCOPE_PACKAGE_FALLBACK. A loader that already ran the fallback gives up instead of starting another nested install.

0.3.6

Patch Changes

  • #73 d95190c Thanks @​JounQin! - Support WASI targets listed in napi.targets when the WASI binding is not declared in optionalDependencies, matching the fallback behavior.

  • #70 6527bce Thanks @​JounQin! - Avoid EBADDEVENGINES when the caller declares a different devEngines.packageManager by running the fallback npm install with the temporary directory as its prefix.

  • #75 b4ee025 Thanks @​JounQin! - Use the locally installed CLI for the runtime fallback instead of invoking npx/pnpm/yarn, and expose the CLI as napi-postinstall/cli. This also removes the package-manager and Deno detection from the fallback.

  • #76 a94c0db Thanks @​JounQin! - Respect the project's .npmrc when a missing platform binding has to be installed by the nested npm fallback. Custom registries configured with registry and _authToken now work instead of falling back to the public registry. The nested install runs from the project directory, so relative values in that file such as cafile, certfile and cache keep pointing at the project.

    The registry used by the JS API is resolved from the same config as well, including @scope:registry. It stays there when the configured registry answers: neither the manifest lookup nor the tarball download falls back to the public registry, since a public manifest could otherwise decide which package is resolved next. When npm itself cannot be queried at all (no npm on the machine, or an unreadable project .npmrc), the lookup returns the public default rather than failing, and says so in the log.

    Known limitations:

    • A cross-device move copies the tree, and Node below 16.15 ignores verbatimSymlinks, so symlinks inside it (such as node_modules/.bin for a WASI install) are resolved against the source that is then removed. Node 16.7-16.14 failed that move outright before, so nothing regresses, but the links can break there.
    • The project directory is the one npm reports for the install, or the directory that owns the node_modules the package was installed into. Workspace roots are not derived, so an install that lands in a member's node_modules while the .npmrc only exists at the workspace root is not covered yet.

    Credentials mirrored into the temporary prefix are written with mode 0600 from the start, so the copy is never readable by other users; the prefix itself is created by mkdtemp and is 0700.

  • #78 86ff5e0 Thanks @​i1stG! - Resolve the host manifest and the installed binding from the directory the postinstall runs in. In a pnpm-style layout with hoist=false the binding is a sibling of the host package in the consumer's node_modules, while napi-postinstall can be linked from a tree that cannot see it, so the lookup used to fall through to the nested install and then to a download — which fails in an offline sandbox. In a normal npm, yarn or pnpm install the cwd is the package that needs the binding, so nothing changes for them.

0.3.5

Patch Changes

  • #63 7ef37fe Thanks @​JounQin! - Support WASI packages that do not declare the WASI binding in optionalDependencies.

    The fallback now checks napi.targets as well, matching napi's policy of keeping the WASI fallback out of optionalDependencies when it is not the only target.

Commits
  • ce51eb8 chore: release napi-postinstall (#82)
  • 0f3601d feat: add napi-patch for the all-platform runtime fallback (#79)
  • 0a96d2a fix: copy the binding binary for the current load (#81)
  • 0f46790 chore: release napi-postinstall (#71)
  • 86ff5e0 fix: resolve the host package from the directory the postinstall runs in (#78)
  • a94c0db fix: respect the project npmrc in the npm fallback (#76)
  • b4ee025 fix: invoke the local CLI from the runtime fallback (#75)
  • d95190c fix: support WASI targets in checkAndPreparePackage (#73)
  • 6527bce fix: avoid EBADDEVENGINES in npm fallback (#70)
  • 0115658 chore(deps): update (#58)
  • Additional commits viewable in compare view

Updates postcss from 8.5.29 to 8.5.32

Release notes

Sourced from postcss's releases.

8.5.32

  • Fixed Input#origin() without opts.from (by @​wleeaf).
  • Fixed final-word lookup without source offsets (by @​Don-Yin).
  • Fixed explicit start in Warning#toString() (by @​Don-Yin).
  • Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).

8.5.31

8.5.30

  • Fix broken map on </style> escaping (by @​Rufflet).
Changelog

Sourced from postcss's changelog.

8.5.32

@dependabot
Bump the dev-dependencies group across 1 directory with 16 updates
41d91d4 
Bumps the dev-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@wordpress/browserslist-config](https://github.com/WordPress/gutenberg/tree/HEAD/packages/browserslist-config) | `6.57.0` | `7.0.0` |
| [@wordpress/eslint-plugin](https://github.com/WordPress/gutenberg/tree/HEAD/packages/eslint-plugin) | `27.1.0` | `28.0.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [@asamuzakjp/css-color](https://github.com/asamuzaK/cssColor) | `7.1.3` | `7.1.9` |
| [@babel/helper-string-parser](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-string-parser) | `7.29.7` | `7.29.11` |
| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.9` | `7.29.11` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.6.27` | `1.6.28` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.28` | `2.11.34` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.29.3` | `4.29.5` |
| [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001816` | `1.0.30001819` |
| [napi-postinstall](https://github.com/un-ts/napi-postinstall) | `0.3.4` | `0.3.7` |
| [postcss](https://github.com/postcss/postcss) | `8.5.29` | `8.5.32` |
| [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) | `7.1.6` | `7.1.7` |
| [tldts](https://github.com/remusao/tldts) | `7.4.16` | `7.4.19` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.2` | `8.72.1` |
| [whatwg-url](https://github.com/jsdom/whatwg-url) | `17.2.0` | `17.3.0` |



Updates `@wordpress/browserslist-config` from 6.57.0 to 7.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/browserslist-config/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/browserslist-config@7.0.0/packages/browserslist-config)

Updates `@wordpress/eslint-plugin` from 27.1.0 to 28.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/eslint-plugin@28.0.0/packages/eslint-plugin)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `@asamuzakjp/css-color` from 7.1.3 to 7.1.9
- [Release notes](https://github.com/asamuzaK/cssColor/releases)
- [Commits](asamuzaK/cssColor@v7.1.3...v7.1.9)

Updates `@babel/helper-string-parser` from 7.29.7 to 7.29.11
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.11/packages/babel-helper-string-parser)

Updates `@babel/parser` from 7.29.9 to 7.29.11
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.11/packages/babel-parser)

Updates `@vitest/eslint-plugin` from 1.6.27 to 1.6.28
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.6.27...v1.6.28)

Updates `baseline-browser-mapping` from 2.11.28 to 2.11.34
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.11.28...v2.11.34)

Updates `browserslist` from 4.29.3 to 4.29.5
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.29.3...4.29.5)

Updates `caniuse-lite` from 1.0.30001816 to 1.0.30001819
- [Commits](browserslist/caniuse-lite@1.0.30001816...1.0.30001819)

Updates `napi-postinstall` from 0.3.4 to 0.3.7
- [Release notes](https://github.com/un-ts/napi-postinstall/releases)
- [Changelog](https://github.com/un-ts/napi-postinstall/blob/main/CHANGELOG.md)
- [Commits](un-ts/napi-postinstall@v0.3.4...v0.3.7)

Updates `postcss` from 8.5.29 to 8.5.32
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.29...8.5.32)

Updates `postcss-selector-parser` from 7.1.6 to 7.1.7
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@7.1.6...7.1.7)

Updates `tldts` from 7.4.16 to 7.4.19
- [Release notes](https://github.com/remusao/tldts/releases)
- [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md)
- [Commits](remusao/tldts@v7.4.16...v7.4.19)

Updates `typescript-eslint` from 8.71.2 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `whatwg-url` from 17.2.0 to 17.3.0
- [Release notes](https://github.com/jsdom/whatwg-url/releases)
- [Commits](jsdom/whatwg-url@v17.2.0...v17.3.0)

---
updated-dependencies:
- dependency-name: "@wordpress/browserslist-config"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/eslint-plugin"
  dependency-version: 28.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@asamuzakjp/css-color"
  dependency-version: 7.1.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@babel/helper-string-parser"
  dependency-version: 7.29.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@babel/parser"
  dependency-version: 7.29.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.28
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.34
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: browserslist
  dependency-version: 4.29.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001819
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: napi-postinstall
  dependency-version: 0.3.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: postcss
  dependency-version: 8.5.32
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tldts
  dependency-version: 7.4.19
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: whatwg-url
  dependency-version: 17.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: javascript. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

Thanks for contributing to EngineScript Site Exporter!

Before we review:

  • Have you tested your changes with WordPress 7.0+?
  • Are your changes compatible with PHP 8.3+?
  • Have you followed WordPress coding standards?
  • Did you update the CHANGELOG.md if needed?

Security Reminder
This plugin creates site export archives, so please ensure:

  • All user input is properly sanitized
  • All output is properly escaped
  • No security vulnerabilities are introduced

We'll review your PR soon.

@codacy-production

codacy-production Bot commented Oct 28, 2026

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@PDowney
PDowney merged commit 549dc4e into main Oct 28, 2026
26 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-063115c892 branch October 28, 2026 05:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

automated dependencies maintenance

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@PDowney