Skip to content

chore(deps)(deps-dev): bump the development-dependencies group with 10 updates#880

Merged
hotlong merged 1 commit intomainfrom
dependabot/npm_and_yarn/development-dependencies-c57245c607
Mar 9, 2026
Merged

chore(deps)(deps-dev): bump the development-dependencies group with 10 updates#880
hotlong merged 1 commit intomainfrom
dependabot/npm_and_yarn/development-dependencies-c57245c607

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the development-dependencies group with 10 updates:

Package From To
@changesets/cli 2.29.8 2.30.0
@types/node 25.3.3 25.3.5
turbo 2.8.12 2.8.14
@oclif/plugin-plugins 5.4.56 5.4.58
fastify 5.7.4 5.8.2
@nestjs/common 11.1.14 11.1.16
@nestjs/core 11.1.14 11.1.16
h3 1.15.5 1.15.6
postcss 8.5.6 8.5.8
happy-dom 20.7.0 20.8.3

Updates @changesets/cli from 2.29.8 to 2.30.0

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.30.0

Minor Changes

  • #1840 057cca2 Thanks @​wotan-allfather! - Add --since flag to add command

    The add command now supports a --since flag that allows you to specify which branch, tag, or git ref to use when detecting changed packages. This is useful for gitflow workflows where you have multiple target branches and the baseBranch config option doesn't cover all use cases.

    Example: changeset add --since=develop

    If not provided, the command falls back to the baseBranch value in your .changeset/config.json.

  • #1845 2b4a66a Thanks @​Andarist! - Delegate OTP prompting to the package manager instead of handling it in-process. This allows Changesets to use the package manager's native web auth support.

  • #1774 667fe5a Thanks @​bluwy! - Support importing custom commit option ES module. Previously, it used require() which only worked for CJS modules, however now it uses import() which supports both CJS and ES modules.

  • #1839 73b1809 Thanks @​leochiu-a! - Add a --message (-m) flag to changeset add (and default changeset) so the changeset summary can be provided from the command line. When --message is present, the summary prompt is skipped while the final confirmation step is kept.

  • #1806 0e8e01e Thanks @​luisadame! - Changeset CLI can now be run from the nested directories in the project, where the .changeset directory has to be found in one of the parent directories

Patch Changes

  • #1849 9dc3230 Thanks @​Andarist! - Compute the terminal's size lazily to avoid spurious stderr output in non-interactive mode

  • #1857 2a73025 Thanks @​mixelburg! - Fix confusing prompt labels when entering changeset summary after external editor fallback

  • #1842 6df3a5e Thanks @​RodrigoHamuy! - Allow private packages to depend on skipped packages without requiring them to also be skipped. Private packages are not published to npm, so it is safe for them to have dependencies on ignored or unversioned packages.

  • #1776 503fcaa Thanks @​bluwy! - Support absolute paths in changeset status --output <path>

  • Updated dependencies [667fe5a, 1772598, b6f4c74, 6df3a5e, 6df3a5e, 27fd8f4]:

    • @​changesets/apply-release-plan@​7.1.0
    • @​changesets/config@​3.1.3
    • @​changesets/get-release-plan@​4.0.15
    • @​changesets/read@​0.6.7
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​changesets/cli since your current version.


Updates @types/node from 25.3.3 to 25.3.5

Commits

Updates turbo from 2.8.12 to 2.8.14

Release notes

Sourced from turbo's releases.

Turborepo v2.8.14-canary.9

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.8.14-canary.8...v2.8.14-canary.9

Turborepo v2.8.14-canary.5

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.8.14-canary.4...v2.8.14-canary.5

Turborepo v2.8.14-canary.4

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.8.14-canary.3...v2.8.14-canary.4

Turborepo v2.8.14-canary.3

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.8.14-canary.2...v2.8.14-canary.3

Turborepo v2.8.14-canary.2

... (truncated)

Commits
  • c8fe2c1 publish 2.8.14 to registry
  • 27e8e67 release(turborepo): 2.8.14-canary.9 (#12173)
  • 0efbe30 test: Add regression tests and OutputWatcher trait to prepare for daemon re...
  • 6fbd5bb test: Add comprehensive path traversal tests for cache archive (#12169)
  • c456ad3 ci: Remove redundant rust_check job from lint workflow (#12168)
  • ebe5e87 docs: Remove bespoke AI prompts from documentation pages (#12167)
  • 716d886 feat: Include version, platform, and CPU count in Chrome trace profiles (#12166)
  • 7acfdc4 refactor: Extract turborepo-query-api trait crate for compile-time decoupli...
  • 14dd839 perf: Defer lockfile await until after internal dependency resolution (#12164)
  • 6923c52 perf: Fire-and-forget telemetry and analytics HTTP flushes on shutdown (#12162)
  • Additional commits viewable in compare view

Updates @oclif/plugin-plugins from 5.4.56 to 5.4.58

Release notes

Sourced from @​oclif/plugin-plugins's releases.

5.4.58

Bug Fixes

  • add validation check for JIT plugin versions (d1139dd)

5.4.57

Bug Fixes

Changelog

Sourced from @​oclif/plugin-plugins's changelog.

5.4.58 (2026-03-06)

Bug Fixes

  • add validation check for JIT plugin versions (d1139dd)

5.4.57 (2026-03-04)

Bug Fixes

Commits
  • 777d4f1 chore(release): 5.4.58 [skip ci]
  • 6ea42ab Merge pull request #1287 from bailey-coding/patch-1
  • ac5bee6 Merge pull request #1290 from oclif/mm/fix/repository-prefix-devcenter-links
  • 02a0cae adding repositoryPrefix so CLI command doc links point to this plugin’s repo ...
  • d1139dd fix: add validation check for JIT plugin versions
  • df1243b chore(release): 5.4.57 [skip ci]
  • e4e52c5 Merge pull request #1288 from oclif/d/W-21178947
  • 95b072f chore: updating mocha dependency @​W-21178947@
  • 28ac927 fix: corrected stubbing errors in tests @​W-21178947@
  • fe31ecb Merge pull request #1285 from oclif/ew/slack-webhook-secret
  • Additional commits viewable in compare view

Updates fastify from 5.7.4 to 5.8.2

Release notes

Sourced from fastify's releases.

v5.8.2

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.8.1...v5.8.2

v5.8.1

⚠️ Security Release

Fixes "Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation": GHSA-573f-x89g-hqp9.

CVE-2026-3419

Full Changelog: fastify/fastify@v5.8.0...v5.8.1

v5.8.0

What's Changed

... (truncated)

Commits
  • 375e136 Bumped v5.8.2
  • 25a70ff docs: add @​glidemq/fastify to community plugins list (#6560)
  • 4a5304f docs(guides): update codemod links (#6479)
  • c9bcde4 docs: added note on handling of invalid URLs in setNotFoundHandler (#5661)
  • 3b0f769 fix: anchor keyValuePairsReg to prevent quadratic backtracking (#6558)
  • e4474cf docs: add fastify-svelte-view to Ecosystem list (#6453)
  • deaeb40 docs(ecosystem): add fastify-file-router (#6441)
  • 0d3b560 docs: document body validation with custom content type parsers (#6556)
  • cdcc4de Revert "chore: upgrade borp to v1.0.0 (#6510)" (#6564)
  • b61c362 docs(ecosystem): add @​yeliex/fastify-problem-details (#6546)
  • Additional commits viewable in compare view

Updates @nestjs/common from 11.1.14 to 11.1.16

Release notes

Sourced from @​nestjs/common's releases.

v11.1.16 (2026-03-05)

Bug fixes

  • microservices

Dependencies

Committers: 2

v11.1.15

What's Changed

New Contributors

Full Changelog: nestjs/nest@v11.1.14...v11.1.15

Commits

Updates @nestjs/core from 11.1.14 to 11.1.16

Release notes

Sourced from @​nestjs/core's releases.

v11.1.16 (2026-03-05)

Bug fixes

  • microservices

Dependencies

Committers: 2

v11.1.15

What's Changed

New Contributors

Full Changelog: nestjs/nest@v11.1.14...v11.1.15

Commits
  • 315e698 chore(release): publish v11.1.16 release
  • c9268ff Merge pull request #16493 from shahnoormujawar/fix/unknown-dependencies-messa...
  • 6add3d6 chore(release): publish v11.1.15 release
  • e5fc974 fix(core): refine unknown dependencies message token display
  • See full diff in compare view

Updates h3 from 1.15.5 to 1.15.6

Release notes

Sourced from h3's releases.

v1.15.6

compare changes

🩹 Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)
  • static: Prevent path traversal via percent-encoded dot segments (6465e1b)
Changelog

Sourced from h3's changelog.

v1.15.6

compare changes

🩹 Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)
  • static: Prevent path traversal via percent-encoded dot segments (6465e1b)

🏡 Chore

❤️ Contributors

Commits
  • 829daf1 chore(release): v1.15.6
  • 65da0e4 chore: update deps
  • 6465e1b fix(static): prevent path traversal via percent-encoded dot segments
  • 840ac5c fix(sse): sanitize newlines in event stream fields to prevent SSE injection
  • See full diff in compare view

Updates postcss from 8.5.6 to 8.5.8

Release notes

Sourced from postcss's releases.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits

Updates happy-dom from 20.7.0 to 20.8.3

Release notes

Sourced from happy-dom's releases.

v20.8.3

👷‍♂️ Patch fixes

  • Throw error if event is not of type Event in EventTarget.dispatchEvent() - By @​capricorn86 in task #2054

v20.8.2

👷‍♂️ Patch fixes

  • Resets Event.cancelBubble and Event.defaultPrevented when calling Event.initEvent() - By @​capricorn86 in task #2090

v20.8.1

👷‍♂️ Patch fixes

v20.8.0

🎨 Features

  • Adds support for setPointerCapture, hasPointerCapture, and releasePointerCapture to Element - By @​coffeeandwork in task #1733

v20.7.2

👷‍♂️ Patch fixes

  • Properly decode CSS escape sequences in attribute selector values - By @​silverwind

v20.7.1

👷‍♂️ Patch fixes

  • Fixes issue related to parsing direct descendants (>) and universal (*) query selectors - By @​Cherry in task #2078
Commits
  • 5998eea fix: #2054 Throw error if event is not of type Event in dispatchEvent (#2092)
  • 7a11238 fix: #2090 Resets cancelBubble and defaultPrevented when calling initEvent ...
  • 7d27984 fix: #1422 Make inert attribute block focus interactions (#2083)
  • 53e4ec9 feat: #1733 Adds support for setPointerCapture, hasPointerCapture, and rele...
  • 1c73c3f fix: Properly decode CSS escape sequences in attribute selector values (#2080)
  • 7fa06b3 fix: #2078 Fixes direct descendants > and universal * query selectors (#2079)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 9, 2026
@vercel
Copy link

vercel bot commented Mar 9, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
objectstack-play Ready Ready Preview, Comment Mar 9, 2026 5:04am
spec Ready Ready Preview, Comment Mar 9, 2026 5:04am

Request Review

…0 updates

Bumps the development-dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.29.8` | `2.30.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.3.5` |
| [turbo](https://github.com/vercel/turborepo) | `2.8.12` | `2.8.14` |
| [@oclif/plugin-plugins](https://github.com/oclif/plugin-plugins) | `5.4.56` | `5.4.58` |
| [fastify](https://github.com/fastify/fastify) | `5.7.4` | `5.8.2` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.14` | `11.1.16` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.14` | `11.1.16` |
| [h3](https://github.com/h3js/h3) | `1.15.5` | `1.15.6` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.7.0` | `20.8.3` |


Updates `@changesets/cli` from 2.29.8 to 2.30.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.30.0)

Updates `@types/node` from 25.3.3 to 25.3.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `turbo` from 2.8.12 to 2.8.14
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.8.12...v2.8.14)

Updates `@oclif/plugin-plugins` from 5.4.56 to 5.4.58
- [Release notes](https://github.com/oclif/plugin-plugins/releases)
- [Changelog](https://github.com/oclif/plugin-plugins/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-plugins@5.4.56...5.4.58)

Updates `fastify` from 5.7.4 to 5.8.2
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.7.4...v5.8.2)

Updates `@nestjs/common` from 11.1.14 to 11.1.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.16/packages/common)

Updates `@nestjs/core` from 11.1.14 to 11.1.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.16/packages/core)

Updates `h3` from 1.15.5 to 1.15.6
- [Release notes](https://github.com/h3js/h3/releases)
- [Changelog](https://github.com/h3js/h3/blob/v1.15.6/CHANGELOG.md)
- [Commits](h3js/h3@v1.15.5...v1.15.6)

Updates `postcss` from 8.5.6 to 8.5.8
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.8)

Updates `happy-dom` from 20.7.0 to 20.8.3
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.7.0...v20.8.3)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: turbo
  dependency-version: 2.8.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@oclif/plugin-plugins"
  dependency-version: 5.4.58
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: fastify
  dependency-version: 5.8.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: h3
  dependency-version: 1.15.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: postcss
  dependency-version: 8.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: happy-dom
  dependency-version: 20.8.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/development-dependencies-c57245c607 branch from 566c675 to bfd3b97 Compare March 9, 2026 04:54
@hotlong hotlong merged commit 338126b into main Mar 9, 2026
13 of 14 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/development-dependencies-c57245c607 branch March 9, 2026 06:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation javascript Pull requests that update javascript code size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant