deps: bump the npm-development group across 1 directory with 18 updates by dependabot[bot] · Pull Request #116 · mnaimfaizy/code-executives

dependabot · 2026-05-29T06:24:48Z

Bumps the npm-development group with 18 updates in the / directory:

Package	From	To
@typescript-eslint/eslint-plugin	`8.59.4`	`8.60.0`
@typescript-eslint/parser	`8.59.4`	`8.60.0`
typescript-eslint	`8.59.4`	`8.60.0`
@babel/code-frame	`7.29.0`	`7.29.7`
@babel/compat-data	`7.29.3`	`7.29.7`
@babel/core	`7.29.0`	`7.29.7`
@babel/helper-plugin-utils	`7.28.6`	`7.29.7`
@babel/plugin-transform-react-jsx-self	`7.27.1`	`7.29.7`
@babel/plugin-transform-react-jsx-source	`7.27.1`	`7.29.7`
ast-v8-to-istanbul	`1.0.0`	`1.0.2`
es-object-atoms	`1.1.1`	`1.1.2`
eslint-module-utils	`2.12.1`	`2.13.0`
hasown	`2.0.3`	`2.0.4`
tinyexec	`1.1.2`	`1.2.2`
tldts	`7.0.30`	`7.4.0`
typed-array-length	`1.0.7`	`1.0.8`
which-typed-array	`1.1.20`	`1.1.21`
ws	`8.20.1`	`8.21.0`

Updates @typescript-eslint/eslint-plugin from 8.59.4 to 8.60.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

playground TS version selector is not working (#12326, #12325)

❤️ Thank You

Evyatar Daud @StyleShit

Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.60.0 (2026-05-25)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

f891c29 chore(release): publish 8.60.0
See full diff in compare view

Updates @typescript-eslint/parser from 8.59.4 to 8.60.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

playground TS version selector is not working (#12326, #12325)

❤️ Thank You

Evyatar Daud @StyleShit

Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.60.0 (2026-05-25)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

f891c29 chore(release): publish 8.60.0
See full diff in compare view

Updates typescript-eslint from 8.59.4 to 8.60.0

Release notes

Sourced from typescript-eslint's releases.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

playground TS version selector is not working (#12326, #12325)

❤️ Thank You

Evyatar Daud @StyleShit

Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.60.0 (2026-05-25)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

f891c29 chore(release): publish 8.60.0
See full diff in compare view

Updates @babel/code-frame from 7.29.0 to 7.29.7

Release notes

Sourced from @babel/code-frame's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
See full diff in compare view

Updates @babel/compat-data from 7.29.3 to 7.29.7

Release notes

Sourced from @babel/compat-data's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

Commits

4fba754 v7.29.7
See full diff in compare view

Updates @babel/core from 7.29.0 to 7.29.7

Release notes

Sourced from @babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
04ea6b2 v7.29.6
99f498a [7.x packport]Improve input source map handling (#18001)
feba0a3 Preserve original identifier names from input sourcemaps (#17992) (#17998)
See full diff in compare view

Updates @babel/helper-plugin-utils from 7.28.6 to 7.29.7

Release notes

Sourced from @babel/helper-plugin-utils's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
See full diff in compare view

Updates @babel/plugin-transform-react-jsx-self from 7.27.1 to 7.29.7

Release notes

Sourced from @babel/plugin-transform-react-jsx-self's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/plugin-transform-react-jsx-self since your current version.

Updates @babel/plugin-transform-react-jsx-source from 7.27.1 to 7.29.7

Release notes

Sourced from @babel/plugin-transform-react-jsx-source's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/plugin-transform-react-jsx-source since your current version.

Updates ast-v8-to-istanbul from 1.0.0 to 1.0.2

Release notes

Sourced from ast-v8-to-istanbul's releases.

v1.0.2

What's Changed

ci: staged publish by @AriPerkkio in AriPerkkio/ast-v8-to-istanbul#164

build: reduce build size by @AriPerkkio in AriPerkkio/ast-v8-to-istanbul#160

Full Changelog: AriPerkkio/ast-v8-to-istanbul@v1.0.1...v1.0.2

Commits

6c71e86 1.0.2
506030f ci: staged publish (#164)
140e6e2 1.0.1
901e18f chore(deps): update all non-major npm dependencies (#163)
8c14c38 chore(deps): update all non-major npm dependencies (#161)
344ef15 build: reduce build size (#160)
718419e chore(deps): update pnpm to v11 (#158)
38024ed chore(deps): update all non-major npm dependencies (#157)
ecf2e24 ci: drop node 20 (#159)
843e7ea chore(deps): update all non-major npm dependencies (#156)
Additional commits viewable in compare view

Updates es-object-atoms from 1.1.1 to 1.1.2

Changelog

Sourced from es-object-atoms's changelog.

v1.1.2 - 2026-05-22

Commits

[Dev Deps] update @ljharb/eslint-config, @ljharb/tsconfig, auto-changelog, eslint, npmignore 41e3d94

[types] improve isObject type 758edc2

Commits

9e62644 v1.1.2
41e3d94 [Dev Deps] update @ljharb/eslint-config, @ljharb/tsconfig, `auto-changelo...
758edc2 [types] improve isObject type
See full diff in compare view

Updates eslint-module-utils from 2.12.1 to 2.13.0

Changelog

Sourced from eslint-module-utils's changelog.

v2.13.0 - 2026-05-27

Added

pass moduleSystem through resolve for exports-aware resolution

Commits

e6f5c13 No relative parent imports rule (#1093)
82f67e6 bump utils to v2.2.0
ab44320 changelog notes
6933fa4 no-cycle: initial docs + maxDepth option
864dbcf no-cycle: explicit CJS/AMD tests
f7c48b5 no-cycle: real rule! first draft, perf is likely atrocious
8778d7c Fixes #1023 - Load exceptions in user resolvers are not reported
34e4b95 typescript: Always include comments when parsing
006ddeb Merge remote-tracking branch 'refs/remotes/benmosher/master'
dac23a1 eslint-module-utils: v2.1.1 (bumping to re-publish to npm)
Additional commits viewable in compare view

Updates hasown from 2.0.3 to 2.0.4

Changelog

Sourced from hasown's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Commits

See full diff in compare view

Updates tinyexec from 1.1.2 to 1.2.2

Release notes

Sourced from tinyexec's releases.

1.2.2

What's Changed

fix: correct shebang regex by @43081j in tinylibs/tinyexec#134

Full Changelog: tinylibs/tinyexec@1.2.1...1.2.2

1.2.1

What's Changed

test: add async throw tests by @43081j in tinylibs/tinyexec#133

Full Changelog: tinylibs/tinyexec@1.2.0...1.2.1

1.2.0

What's Changed

refactor: inline parse by @hyperz111 in tinylibs/tinyexec#100

chore: check types on lint by @43081j in tinylibs/tinyexec#119

test: add more normalize tests by @43081j in tinylibs/tinyexec#120

build: update tsdown config and dependencies by @hyperz111 in tinylibs/tinyexec#121

chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot[bot] in tinylibs/tinyexec#122

chore(deps-dev): bump the development-dependencies group with 6 updates by @dependabot[bot] in tinylibs/tinyexec#123

chore: set workflow permissions by @43081j in tinylibs/tinyexec#124

feat: add nodePath flag by @43081j in tinylibs/tinyexec#125

test: tidy up env tests by @43081j in tinylibs/tinyexec#126

chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in tinylibs/tinyexec#128

chore(deps): bump the github-actions group with 2 updates by @dependabot[bot] in tinylibs/tinyexec#127

chore: setup funding / publish env by @43081j in tinylibs/tinyexec#129

chore: enable staged publishes by @43081j in tinylibs/tinyexec#130

New Contributors

@hyperz111 made their first contribution in tinylibs/tinyexec#100

Full Changelog: tinylibs/tinyexec@1.1.2...1.2.0

Commits

65ef525 fix: correct shebang regex (#134)
6d499f2 test: add async throw tests (#133)
3bafedb chore: enable staged publishes (#130)
a6b7a92 chore: setup funding / publish env (#129)
264dc21 chore(deps): bump the github-actions group with 2 updates (#127)
482f3ab chore(deps-dev): bump the development-dependencies group with 4 updates (#128)
bd5599e test: tidy up env tests (#126)
ac2d3b3 feat: add nodePath flag (#125)
5ae7f87 chore: set workflow permissions (#124)
4ebc0aa chore(deps-dev): bump the development-dependencies group with 6 updates (#123)
Additional commits viewable in compare view

Updates tldts from 7.0.30 to 7.4.0

Release notes

Sourced from tldts's releases.

v7.4.0

🚀 New Feature

tldts-experimental, tldts-icann, tldts-tests, tldts

feat: add getFullDomain to return the full hostname incl. subdomain (#2322) #2592 (@remusao)

Authors: 1

Rémi (@remusao)

v7.3.1

🐛 Bug Fix

tldts-core, tldts-tests

fix: reject hostname labels that begin with a hyphen (#2395) #2591 (@remusao)

Authors: 1

Rémi (@remusao)

v7.3.0

🏃‍♀️ Performance

tldts-core, tldts-tests

perf(core): validate hostname inline during extraction to drop a redundant scan #2590 (@remusao)

Authors: 1

Rémi (@remusao)

v7.2.1

💅 Polish

tldts-core, tldts-tests

fix: extract unbracketed IPv6 hostnames instead of mangling them #2589 (@remusao)

Authors: 1

Rémi (@remusao)

v7.2.0

🚀 New Feature

tldts-core, tldts-icann, tldts-tests, tldts

feat: add opt-in IANA special-use domain detection #2588 (@remusao)

Authors: 1

Rémi (@remusao)

... (truncated)

Changelog

Sourced from tldts's changelog.

v7.4.0 (Mon May 25 2026)

🚀 New Feature

tldts-experimental, tldts-icann, tldts-tests, tldts

feat: add getFullDomain to return the full hostname incl. subdomain (#2322) #2592 (@remusao)

Authors: 1

Rémi (@remusao)

v7.3.1 (Mon May 25 2026)

🐛 Bug Fix

tldts-core, tldts-tests

fix: reject hostname labels that begin with a hyphen (#2395) #2591 (@remusao)

Authors: 1

Rémi (@remusao)

v7.3.0 (Mon May 25 2026)

🏃‍♀️ Performance

tldts-core, tldts-tests

perf(core): validate hostname inline during extraction to drop a redundant scan #2590 (@remusao)

Authors: 1

Rémi (@remusao)

v7.2.1 (Mon May 25 2026)

💅 Polish

tldts-core, tldts-tests

fix: extract unbracketed IPv6 hostnames instead of mangling them #2589 (@remusao)

Authors: 1

Rémi (@remusao)

... (truncated)

Commits

7ff853a Bump version to: v7.4.0 [skip ci]
e4666de Update CHANGELOG.md [skip ci]
592f1ab feat: add getFullDomain to return the full hostname incl. subdomain (#2322) (...
265cece Bump version to: v7.3.1 [skip ci]
caeb33e Update CHANGELOG.md [skip ci]
bed4daf fix: reject hostname labels that begin with a hyphen (#2395) (#2591)
dd9b930 Bump version to: v7.3.0 [skip ci]
27daa15 Update CHANGELOG.md [skip ci]
d9b5776 perf(core): validate hostname inline during extraction to drop a redundant sc...
89c8a3d Bump version to: v7.2.1 [skip ci]
Additional commits viewable in compare view

Updates typed-array-length from 1.0.7 to 1.0.8

Changelog

Sourced from typed-array-length's changelog.

v1.0.8 - 2026-05-28

Commits

[Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config 24ae7de

[Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @ljharb/tsconfig, @types/tape, eslint, make-generator-function, npmignore, object-inspect 157fbce

[types] improve types 9580efa

[Deps] update call-bind, for-each, is-typed-array, possible-typed-array-names, reflect.getprototypeof 0b6c478

[Deps] update call-bind, gopd, is-typed-array, reflect.getprototypeof 25825a3

[Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint ee0f33d

[Dev Deps] update @arethetypeswrong/cli, @ljharb/tsconfig, @types/tape 075f435

[Dev Deps] update eslint a16cdcc

Commits

a010b13 v1.0.8
0b6c478 [Deps] update call-bind, for-each, is-typed-array, `possible-typed-arra...
ee0f33d [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint
a16cdcc [Dev Deps] update eslint
24ae7de [Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config
157fbce [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `@ljharb/...
9580efa [types] improve types
25825a3 [Deps] update call-bind, gopd, is-typed-array, reflect.getprototypeof
075f435 [Dev Deps] update @arethetypeswrong/cli, @ljharb/tsconfig, @types/tape
See full diff in compare view

Updates which-typed-array from 1.1.20 to 1.1.21

Changelog

Sourced from which-typed-array's changelog.

v1.1.21 - 2026-05-26

Commits

[types] add Float16Array b3dac9f

[Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config 2dd9b04

[Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint b46f6a2

[Tests] pin fflate to 0.8.2 06eb54e

[Dev Deps] update eslint 2181d61

[Deps] update call-bind ca58bca

Commits

6fd1962 v1.1.21
06eb54e [Tests] pin fflate to 0.8.2
b3dac9f [types] add Float16Array
ca58bca [Deps] update call-bind
b46f6a2 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint
2181d61 [Dev Deps] update eslint
2dd9b04 [Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config
See full diff in compare view

Updates ws from 8.20.1 to 8.21.0

Release notes

Sourced from ws's releases.

8.21.0

Features

Introduced the maxBufferedChunks and maxFragments options (2b2abd45).

Bug fixes

Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).

A high volume of tiny fragments and data chunks could be sent by a peer, using modest network traffic, to crash a ws server or client due to OOM.

import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer({ port: 0 }, function () {
const data = Buffer.alloc(1);
const options = { fin: false };
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port});
ws.on('open', function () {
(function send() {
ws.send(data, options, function (err) {
if (err) return;
send();
});
})();
});
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(client close - code: ${code} reason: ${reason.toString()});
});
});
wss.on('connection', function (ws) {
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(server close - code: ${code} reason: ${reason.toString()});
});
});

The vulnerability was responsibly d...

Description has been truncated

Bumps the npm-development group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.59.4` | `8.60.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.59.4` | `8.60.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.4` | `8.60.0` | | [@babel/code-frame](https://github.com/babel/babel/tree/HEAD/packages/babel-code-frame) | `7.29.0` | `7.29.7` | | [@babel/compat-data](https://github.com/babel/babel/tree/HEAD/packages/babel-compat-data) | `7.29.3` | `7.29.7` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` | | [@babel/helper-plugin-utils](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-plugin-utils) | `7.28.6` | `7.29.7` | | [@babel/plugin-transform-react-jsx-self](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-self) | `7.27.1` | `7.29.7` | | [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) | `7.27.1` | `7.29.7` | | [ast-v8-to-istanbul](https://github.com/AriPerkkio/ast-v8-to-istanbul) | `1.0.0` | `1.0.2` | | [es-object-atoms](https://github.com/ljharb/es-object-atoms) | `1.1.1` | `1.1.2` | | [eslint-module-utils](https://github.com/import-js/eslint-plugin-import/tree/HEAD/utils) | `2.12.1` | `2.13.0` | | [hasown](https://github.com/inspect-js/hasOwn) | `2.0.3` | `2.0.4` | | [tinyexec](https://github.com/tinylibs/tinyexec) | `1.1.2` | `1.2.2` | | [tldts](https://github.com/remusao/tldts) | `7.0.30` | `7.4.0` | | [typed-array-length](https://github.com/inspect-js/typed-array-length) | `1.0.7` | `1.0.8` | | [which-typed-array](https://github.com/inspect-js/which-typed-array) | `1.1.20` | `1.1.21` | | [ws](https://github.com/websockets/ws) | `8.20.1` | `8.21.0` | Updates `@typescript-eslint/eslint-plugin` from 8.59.4 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.59.4 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/parser) Updates `typescript-eslint` from 8.59.4 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/typescript-eslint) Updates `@babel/code-frame` from 7.29.0 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-code-frame) Updates `@babel/compat-data` from 7.29.3 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-compat-data) Updates `@babel/core` from 7.29.0 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core) Updates `@babel/helper-plugin-utils` from 7.28.6 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-helper-plugin-utils) Updates `@babel/plugin-transform-react-jsx-self` from 7.27.1 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-self) Updates `@babel/plugin-transform-react-jsx-source` from 7.27.1 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source) Updates `ast-v8-to-istanbul` from 1.0.0 to 1.0.2 - [Release notes](https://github.com/AriPerkkio/ast-v8-to-istanbul/releases) - [Commits](AriPerkkio/ast-v8-to-istanbul@v1.0.0...v1.0.2) Updates `es-object-atoms` from 1.1.1 to 1.1.2 - [Changelog](https://github.com/es-shims/es-object-atoms/blob/main/CHANGELOG.md) - [Commits](es-shims/es-object-atoms@v1.1.1...v1.1.2) Updates `eslint-module-utils` from 2.12.1 to 2.13.0 - [Release notes](https://github.com/import-js/eslint-plugin-import/releases) - [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/utils/CHANGELOG.md) - [Commits](https://github.com/import-js/eslint-plugin-import/commits/v2.13.0/utils) Updates `hasown` from 2.0.3 to 2.0.4 - [Changelog](https://github.com/inspect-js/hasOwn/blob/main/CHANGELOG.md) - [Commits](https://github.com/inspect-js/hasOwn/commits) Updates `tinyexec` from 1.1.2 to 1.2.2 - [Release notes](https://github.com/tinylibs/tinyexec/releases) - [Commits](tinylibs/tinyexec@1.1.2...1.2.2) Updates `tldts` from 7.0.30 to 7.4.0 - [Release notes](https://github.com/remusao/tldts/releases) - [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md) - [Commits](remusao/tldts@v7.0.30...v7.4.0) Updates `typed-array-length` from 1.0.7 to 1.0.8 - [Changelog](https://github.com/inspect-js/typed-array-length/blob/main/CHANGELOG.md) - [Commits](inspect-js/typed-array-length@v1.0.7...v1.0.8) Updates `which-typed-array` from 1.1.20 to 1.1.21 - [Changelog](https://github.com/inspect-js/which-typed-array/blob/main/CHANGELOG.md) - [Commits](inspect-js/which-typed-array@v1.1.20...v1.1.21) Updates `ws` from 8.20.1 to 8.21.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.20.1...8.21.0) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@typescript-eslint/parser" dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@babel/code-frame" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@babel/compat-data" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@babel/core" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@babel/helper-plugin-utils" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@babel/plugin-transform-react-jsx-self" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@babel/plugin-transform-react-jsx-source" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: ast-v8-to-istanbul dependency-version: 1.0.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: es-object-atoms dependency-version: 1.1.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint-module-utils dependency-version: 2.13.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: hasown dependency-version: 2.0.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: tinyexec dependency-version: 1.2.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: tldts dependency-version: 7.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typed-array-length dependency-version: 1.0.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: which-typed-array dependency-version: 1.1.21 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: ws dependency-version: 8.21.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Dependencies label May 29, 2026

dependabot Bot requested a review from mnaimfaizy as a code owner May 29, 2026 06:24

dependabot Bot added security Security dependencies Dependencies labels May 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the npm-development group across 1 directory with 18 updates#116

deps: bump the npm-development group across 1 directory with 18 updates#116
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-development-960ae1e3e3

dependabot Bot commented on behalf of github May 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 29, 2026

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

🩹 Fixes

❤️ Thank You

8.60.0 (2026-05-25)

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

🩹 Fixes

❤️ Thank You

8.60.0 (2026-05-25)

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

🩹 Fixes

❤️ Thank You

8.60.0 (2026-05-25)

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix