Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates - #104

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-b4951b607c
Open

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates#104
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-b4951b607c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 7 updates in the / directory:

Package From To
@dotenvx/dotenvx 2.0.0 2.22.0
asana 3.1.12 3.2.0
open 11.0.0 11.0.2
@types/bun 1.3.14 1.4.0
emulate 0.8.0 0.10.0
eslint 10.6.0 10.9.1
turbo 2.10.2 2.10.12

Updates @dotenvx/dotenvx from 2.0.0 to 2.22.0

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v2.22.0

see CHANGELOG

v2.21.0

see CHANGELOG

v2.20.1

see CHANGELOG

v2.20.0

see CHANGELOG

v2.19.2

see CHANGELOG

v2.19.1

see CHANGELOG

v2.19.0

see CHANGELOG

v2.18.1

see CHANGELOG

v2.18.0

see CHANGELOG

v2.17.4

see CHANGELOG

v2.17.3

see CHANGELOG

v2.17.2

see CHANGELOG

v2.17.1

see CHANGELOG

v2.17.0

see CHANGELOG

v2.16.1

see CHANGELOG

v2.16.0

see CHANGELOG

v2.15.1

see CHANGELOG

... (truncated)

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

2.22.0 (2026-08-27)

Added

  • Install verified binaries directly from GitHub Releases (#956)

Changed

  • Fall back to ~/.local/bin when /usr/local/bin is not writable (#955)

2.21.0 (2026-08-10)

Added

  • Add dotenvx enc and dotenvx dec shorthands for encrypt and decrypt (#943)
  • Add convenient dx alias for shorter dx run --, dx enc, etc (#944)

Changed

  • Patch typescript types for path (#942)

2.20.1 (2026-08-07)

Changed

  • Handle accent marks for ext precommit (#936)

2.20.0 (2026-08-07)

Added

  • Add dotenvx del command for deleting a key from a .env file (#939)

Changed

  • Exempt .env.vault from precommit/prebuild sealed checks (vault-format ciphertext is already safe to commit)

2.19.1 (2026-07-29)

Changed

  • User can click enter to open up approval url for convenience (#934)

2.19.0 (2026-07-27)

Added

  • Add dotenvx armor open to open armored key details in browser (#930)

2.18.1 (2026-07-26)

... (truncated)

Commits

Updates asana from 3.1.12 to 3.2.0

Release notes

Sourced from asana's releases.

v3.2.0

New:

  • Custom types: asana_created_type_identifier field, custom_type filter on tasks/projects/portfolios, workspace-level GET /custom_types listing
  • Subtask project/custom-field inheritance
  • Timesheet approval submissions: Sunday-start weeks supported
  • New Custom RBAC permission flags (create_goal, create_project, create_portfolio, etc.)
  • data_retention_policy added to audit log actor enum

Fixed docs (no behavior change):

  • GET /portfolios/{gid}/items response documented as Project|Portfolio union (was Project only)
  • Time tracking 402 errors documented per access tier
Commits

Updates open from 11.0.0 to 11.0.2

Release notes

Sourced from open's releases.

v11.0.2

  • Update dependencies 6f006ad

sindresorhus/open@v11.0.1...v11.0.2

v11.0.1

  • Fix WSL failure when the working directory is unreachable from Windows 6ac3fe4

sindresorhus/open@v11.0.0...v11.0.1

Commits

Updates @types/bun from 1.3.14 to 1.4.0

Commits

Updates emulate from 0.8.0 to 0.10.0

Release notes

Sourced from emulate's releases.

v0.10.0

0.10.0

New Features

  • Expanded GitHub repository APIs add stateful contents, README, commits, comparisons, raw file downloads, Git Data shapes, branch isolation, and commit-producing file writes (#191)
  • Generated GitHub App keys let createEmulator generate RSA private keys for GitHub Apps that omit private_key, expose generated material through generatedSecrets, and preserve it across resets (#200)

Bug Fixes

  • Fixed Stripe webhook signatures to send Stripe-compatible Stripe-Signature headers over the raw request body (#198)
  • Fixed GitHub App JWT verification for documented PKCS#1 keys and PKCS#8 keys by deriving public key material before verification (#199)

Contributors

Changelog

Sourced from emulate's changelog.

0.10.0

New Features

  • Expanded GitHub repository APIs add stateful contents, README, commits, comparisons, raw file downloads, Git Data shapes, branch isolation, and commit-producing file writes (#191)
  • Generated GitHub App keys let createEmulator generate RSA private keys for GitHub Apps that omit private_key, expose generated material through generatedSecrets, and preserve it across resets (#200)

Bug Fixes

  • Fixed Stripe webhook signatures to send Stripe-compatible Stripe-Signature headers over the raw request body (#198)
  • Fixed GitHub App JWT verification for documented PKCS#1 keys and PKCS#8 keys by deriving public key material before verification (#199)

Contributors

0.9.0

New Features

  • Nuxt emulator adapter — new @emulators/adapter-nuxt package for embedding emulators in Nuxt apps, with Nuxt server route handling, persistence, response rewriting, and Nitro tracing support (#188)
  • Nuxt embedded example — added examples/nuxt-embedded demonstrating same-origin OAuth flows (GitHub + Google), a catch-all emulate server route, and cookie-based sessions (#188)

Improvements

  • Nuxt docs and agent guidance — documented Nuxt setup across the README, docs site, and agent skills (#188)

Contributors

Commits

Updates eslint from 10.6.0 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

  • 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

  • ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

  • 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
  • 87f66f4 docs: Update README (GitHub Actions Bot)
  • 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
  • f3993b0 docs: Update README (GitHub Actions Bot)
  • ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
  • 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
  • 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
  • 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

  • 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
  • 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
  • dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
  • f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
  • 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

  • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
  • 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
  • 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
  • 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
  • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

  • 7d0cbf8 docs: Update README (GitHub Actions Bot)
  • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
  • 678c90b docs: Update README (GitHub Actions Bot)
  • 8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

Updates turbo from 2.10.2 to 2.10.12

Release notes

Sourced from turbo's releases.

Turborepo v2.10.12

What's Changed

Changelog

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates seven dependencies to their latest minor and patch versions in package.json and bun.lock. No source changes; behavior shifts only if the new package versions affect runtime.

Notable updates

  • @dotenvx/dotenvx jumps from 2.0.0 to 2.22.0, which rewrites its dependency tree and adds a dx CLI alias plus new commands.
  • open fixes a WSL failure when the working directory is unreachable from Windows.
  • emulate adds expanded GitHub repository APIs and fixes Stripe webhook signatures.

Written for commit f407990. Summary will update on new commits.

… updates

Bumps the minor-and-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `2.0.0` | `2.22.0` |
| [asana](https://github.com/Asana/node-asana) | `3.1.12` | `3.2.0` |
| [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.2` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.14` | `1.4.0` |
| [emulate](https://github.com/vercel-labs/emulate/tree/HEAD/packages/emulate) | `0.8.0` | `0.10.0` |
| [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.9.1` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.2` | `2.10.12` |



Updates `@dotenvx/dotenvx` from 2.0.0 to 2.22.0
- [Release notes](https://github.com/dotenvx/dotenvx/releases)
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md)
- [Commits](dotenvx/dotenvx@v2.0.0...v2.22.0)

Updates `asana` from 3.1.12 to 3.2.0
- [Release notes](https://github.com/Asana/node-asana/releases)
- [Commits](Asana/node-asana@v3.1.12...v3.2.0)

Updates `open` from 11.0.0 to 11.0.2
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v11.0.0...v11.0.2)

Updates `@types/bun` from 1.3.14 to 1.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `emulate` from 0.8.0 to 0.10.0
- [Release notes](https://github.com/vercel-labs/emulate/releases)
- [Changelog](https://github.com/vercel-labs/emulate/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel-labs/emulate/commits/v0.10.0/packages/emulate)

Updates `eslint` from 10.6.0 to 10.9.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.6.0...v10.9.1)

Updates `turbo` from 2.10.2 to 2.10.12
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.2...v2.10.12)

---
updated-dependencies:
- dependency-name: "@dotenvx/dotenvx"
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: asana
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: open
  dependency-version: 11.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/bun"
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: emulate
  dependency-version: 0.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: turbo
  dependency-version: 2.10.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@vercel

vercel Bot commented Sep 3, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
asana Ready Ready Preview Sep 3, 2026 5:50am UTC

Request Review

@greptile-apps

greptile-apps Bot commented Sep 3, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@sonarqubecloud

sonarqubecloud Bot commented Sep 3, 2026

Copy link
Copy Markdown

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​bun@​1.3.14 ⏵ 1.4.01001004890100
Updatedturbo@​2.10.2 ⏵ 2.10.12100 +11008596 -1100
Addedopen@​11.0.29910010086100
Updatedasana@​3.1.12 ⏵ 3.2.0100 +1100100 +192 +4100
Updatedemulate@​0.8.0 ⏵ 0.10.095 +20100100 +193100
Updated@​dotenvx/​dotenvx@​2.0.0 ⏵ 2.22.09310010096100
Updatedeslint@​10.6.0 ⏵ 10.9.197 +110010096100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants