Skip to content

chore(deps): bump the dependencies group across 1 directory with 4 updates - #119

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-927ab290ef
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-927ab290ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates in the / directory: js-yaml, markdown-it, markdownlint and vitest.

Updates js-yaml from 5.4.3 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

  • Updated argparse to v3.
  • Updated development dependencies.

Fixed

  • Correct percent-encoding of shorthand and verbatim tags.
  • Reject ,, ], and } at the start of block plain scalars, #801.
  • Report the exact position of non-printable characters in errors, #801.
Commits
  • cb62b2d 5.5.0 released
  • 87aed90 Deps bump
  • 3aec511 Fix error positions for non-printable characters, #801
  • 11aa483 Reject flow indicators at the start of block plain scalars, #801
  • 339d8e0 Refactor tag encoder and decoder to match the YAML specification
  • See full diff in compare view

Updates markdown-it from 15.0.2 to 15.0.3

Changelog

Sourced from markdown-it's changelog.

[15.0.3] - 2026-10-16

Changed

  • Updated dependencies.

Fixed

  • Enforce the 999 Unicode code point limit for reference definition labels, partially addressing #1213.
  • Require whitespace before multiline reference titles.

Security

  • Fixed quadratic complexity when parsing multiline reference definitions.
  • Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections.
Commits

Updates markdownlint from 0.41.1 to 0.42.0

Changelog

Sourced from markdownlint's changelog.

0.42.0

  • Improve MD011/MD018/MD020/MD043/MD051/MD055/MD060
  • Add regular expression denial of service protection
  • Add support for reporting issues with front matter
  • Update dependencies
Commits
  • b67636d Update to version 0.42.0.
  • ea3adf2 Update MD043/required-headings to fix an un-idiomatic loop.
  • 5dbfcf2 Address new lint violations introduced by previous commit.
  • 621c662 Bump eslint-plugin-unicorn from 76.0.0 to 77.0.0
  • 858f644 Bump eslint from 10.11.0 to 10.12.0
  • 7bca58b Bump eslint-node-test from 0.4.0 to 1.0.1
  • 2c720f0 Bump eslint-plugin-jsdoc from 65.0.1 to 65.1.0
  • 779415f Bump eslint-plugin-n from 18.4.0 to 18.4.1
  • 7cd55bc Bump eslint-package-json from 1.0.0 to 2.0.0
  • e3e7e5a Update MD043/required-headings to support looping for CHANGELOG scenarios (cl...
  • Additional commits viewable in compare view

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner October 21, 2026 01:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
…dates

Bumps the dependencies group with 4 updates in the / directory: [js-yaml](https://github.com/nodeca/js-yaml), [markdown-it](https://github.com/markdown-it/markdown-it), [markdownlint](https://github.com/DavidAnson/markdownlint) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `js-yaml` from 5.4.3 to 5.5.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.3...5.5.0)

Updates `markdown-it` from 15.0.2 to 15.0.3
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@15.0.2...15.0.3)

Updates `markdownlint` from 0.41.1 to 0.42.0
- [Changelog](https://github.com/DavidAnson/markdownlint/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint@v0.41.1...v0.42.0)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: markdown-it
  dependency-version: 15.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: markdownlint
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the dependencies group with 4 updates chore(deps): bump the dependencies group across 1 directory with 4 updates Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-927ab290ef branch from fe4fac4 to f5b547f Compare October 21, 2026 20:47
Copilot AI requested a review from kendallgassner October 21, 2026 20:48
@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-927ab290ef branch October 21, 2026 20:49
Copilot stopped work on behalf of kendallgassner due to an error October 21, 2026 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants