Bump the all-npm group across 1 directory with 15 updates - #411
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the all-npm group across 1 directory with 15 updates#411dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Member
|
I really don't think grouping together bumps of all npm dependencies is a good idea. Maybe only minor and patch ones, at least if we can hope they follow semver, but otherwise a single breaking change out of a pool of 15 makes these PRs unmergeable |
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/all-npm-8aa644da88
branch
3 times, most recently
from
September 2, 2026 00:08
7f1c8f7 to
a6636ac
Compare
Bumps the all-npm group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.11.1` | `3.0.1` | | [@actions/exec](https://github.com/actions/toolkit/tree/HEAD/packages/exec) | `1.1.1` | `3.0.0` | | [@actions/io](https://github.com/actions/toolkit/tree/HEAD/packages/io) | `1.1.3` | `3.0.2` | | [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) | `2.0.2` | `4.0.0` | | [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.8.5` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` | | [toml](https://github.com/BinaryMuse/toml-node) | `4.2.0` | `5.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.0` | `26.4.0` | | [@vercel/ncc](https://github.com/vercel/ncc) | `0.38.4` | `0.45.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.4.2` | | [nock](https://github.com/nock/nock) | `14.0.10` | `14.0.17` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.6` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.6` | `29.4.12` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | Updates `@actions/core` from 1.11.1 to 3.0.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) Updates `@actions/exec` from 1.1.1 to 3.0.0 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/exec/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/exec) Updates `@actions/io` from 1.1.3 to 3.0.2 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/io/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/io) Updates `@actions/tool-cache` from 2.0.2 to 4.0.0 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/tool-cache) Updates `semver` from 7.7.3 to 7.8.5 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.3...v7.8.5) Updates `@types/semver` from 7.7.1 to 7.8.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `toml` from 4.2.0 to 5.0.0 - [Changelog](https://github.com/BinaryMuse/toml-node/blob/master/CHANGELOG.md) - [Commits](BinaryMuse/toml-node@v4.2.0...v5.0.0) Updates `@types/node` from 25.2.0 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/semver` from 7.7.1 to 7.8.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `@vercel/ncc` from 0.38.4 to 0.45.0 - [Release notes](https://github.com/vercel/ncc/releases) - [Commits](vercel/ncc@0.38.4...0.45.0) Updates `jest` from 30.2.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `jest-circus` from 30.2.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest-circus) Updates `nock` from 14.0.10 to 14.0.17 - [Release notes](https://github.com/nock/nock/releases) - [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md) - [Commits](nock/nock@v14.0.10...v14.0.17) Updates `prettier` from 3.8.1 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.9.6) Updates `ts-jest` from 29.4.6 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.6...v29.4.12) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) --- updated-dependencies: - dependency-name: "@actions/core" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm - dependency-name: "@actions/exec" dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm - dependency-name: "@actions/io" dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm - dependency-name: "@actions/tool-cache" dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm - dependency-name: "@types/node" dependency-version: 26.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm - dependency-name: "@types/semver" dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: "@types/semver" dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: "@vercel/ncc" dependency-version: 0.45.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: jest-circus dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: nock dependency-version: 14.0.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: semver dependency-version: 7.8.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm - dependency-name: toml dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-npm - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/all-npm-8aa644da88
branch
from
September 4, 2026 00:30
a6636ac to
2767c9c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-npm group with 14 updates in the / directory:
1.11.13.0.11.1.13.0.01.1.33.0.22.0.24.0.07.7.37.8.57.7.17.8.04.2.05.0.025.2.026.4.00.38.40.45.030.2.030.4.214.0.1014.0.173.8.13.9.629.4.629.4.125.9.37.0.2Updates
@actions/corefrom 1.11.1 to 3.0.1Changelog
Sourced from @actions/core's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@actions/coresince your current version.Updates
@actions/execfrom 1.1.1 to 3.0.0Changelog
Sourced from @actions/exec's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@actions/execsince your current version.Updates
@actions/iofrom 1.1.3 to 3.0.2Changelog
Sourced from @actions/io's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@actions/iosince your current version.Updates
@actions/tool-cachefrom 2.0.2 to 4.0.0Changelog
Sourced from @actions/tool-cache's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@actions/tool-cachesince your current version.Updates
semverfrom 7.7.3 to 7.8.5Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
Commits
6e05b76chore: release 7.8.5 (#879)9c8692afix: include prereleases in tilde range lower bound with includePrerelease (#...8640bd6chore: release 7.8.4 (#875)e583226fix: reject numeric segments after x-ranges6b77aa8chore: release 7.8.3 (#873)3485ddachore: bump@npmcli/eslint-configfrom 6.0.1 to 7.0.0 (#866)046da7ffix: align caret includePrerelease lower bounds (#872)efafcf8chore: release 7.8.2 (#871)bea6028fix: increment dotted prerelease identifiers (#870)7641608chore: release 7.8.1 (#868)Updates
@types/semverfrom 7.7.1 to 7.8.0Commits
Updates
tomlfrom 4.2.0 to 5.0.0Changelog
Sourced from toml's changelog.
Commits
ccd8b105.0.000ac4a6Update changelog121e5faMerge pull request #74 from BinaryMuse/mkt/big-ints2b6bcb7Add opt-in BigInt support, throw when parsing out of bounds values38fb4e64.3.05222a64feat: Add opt-in Temporal support for date/time values (#73)95f79b34.2.0Updates
@types/nodefrom 25.2.0 to 26.4.0Commits
Updates
@types/semverfrom 7.7.1 to 7.8.0Commits
Updates
@vercel/nccfrom 0.38.4 to 0.45.0Release notes
Sourced from @vercel/ncc's releases.
Commits
cb1f1f0feat: update@vercel/webpack-asset-relocator-loaderto 1.10.3 (#1342)cfec24echore(deps): Bump actions/setup-python from 6 to 7 (#1338)b037995chore(deps): Bump actions/setup-node from 6 to 7 (#1339)063c592chore(deps): Bump actions/checkout from 6 to 7 (#1335)8f0aefdfix: preserve runtime createRequire in ESM builds (#1334)b9c6310chore: Update vm2 to latest version (3.11.5) (#1333)88be21fchore(deps): Bump actions/checkout from 5 to 6 (#1300)5ea625efeat: read permissions pr.yml (#1323)a1ff315feat: remove npm devDependency (#1332)9e077abfeat: add publishConfig to package.json (#1331)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@vercel/nccsince your current version.Updates
jestfrom 30.2.0 to 30.4.2Release notes
Sourced from jest's releases.
... (truncated)
Changelog
Sourced from jest's changelog.
... (truncated)
Commits
746f2a0v30.4.2b3b4a09v30.4.15cbb21ev30.4.0db7141afix: allowcollectCoverageandcoverageProviderin project config (#16132)efb59c2v30.3.096c53d3feat(jest-config): adddefineConfigandmergeConfigfunctions (#15844)Updates
jest-circusfrom 30.2.0 to 30.4.2Release notes
Sourced from jest-circus's releases.
... (truncated)
Changelog
Sourced from jest-circus's changelog.
... (truncated)
Commits
746f2a0v30.4.2b3b4a09v30.4.15cbb21ev30.4.06886816chore: enable node protocol in imports (#16077)7a1588efeat: addisErrorhelper (#16076)572dbaefix(jest-circus): preserve Error.cause in JSON failureMessages (#15949) (#15967)f39945afix(jest-circus): prevent crash when asyncError is undefined for non-Error th...dcd3c79Add--collect-onlyflag to list tests without running them (#16006)efb59c2v30.3.0Updates
nockfrom 14.0.10 to 14.0.17Release notes
Sourced from nock's releases.