build(deps-dev): bump the development group with 8 updates by dependabot[bot] · Pull Request #44 · taostat/auth-gateway

dependabot · 2026-07-02T05:28:47Z

Bumps the development group with 8 updates:

Package	From	To
@types/node	`25.3.4`	`26.1.0`
esbuild	`0.27.3`	`0.28.1`
jest	`30.2.0`	`30.4.2`
oxlint	`1.47.0`	`1.72.0`
prettier	`3.8.1`	`3.9.4`
ts-jest	`29.4.6`	`29.4.11`
tsx	`4.21.0`	`4.22.4`
typescript	`5.9.3`	`6.0.3`

Updates @types/node from 25.3.4 to 26.1.0

Commits

See full diff in compare view

Updates esbuild from 0.27.3 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1
Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

Thanks to @dellalibera for reporting this issue.

Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

Thanks to @sondt99 for reporting this issue.
Avoid inlining using and await using declarations (#4482)

Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:
// Original code
{
  using x = new Resource()
  x.activate()
}
// Old output (with --minify)
new Resource().activate();
// New output (with --minify)
{using e=new Resource;e.activate()}
Fix module evaluation when an error is thrown (#4461, #4467)

If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.
Fix some edge cases around the new operator (#4477)

Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:
// Original code
new (foo()`bar`)()
new (foo()?.bar)()
// Old output
new foo()bar();
new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.1
Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

Thanks to @dellalibera for reporting this issue.

Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

Thanks to @sondt99 for reporting this issue.
Avoid inlining using and await using declarations (#4482)

Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:
// Original code
{
  using x = new Resource()
  x.activate()
}
// Old output (with --minify)
new Resource().activate();
// New output (with --minify)
{using e=new Resource;e.activate()}
Fix module evaluation when an error is thrown (#4461, #4467)

If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.
Fix some edge cases around the new operator (#4477)

Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:
// Original code
new (foo()`bar`)()
new (foo()?.bar)()
// Old output
new foo()bar();
new (foo())?.bar();

... (truncated)

Commits

bb9db84 publish 0.28.1 to npm
9ff053e security: add integrity checks to the Deno API
0a9bf21 enforce non-negative size in gzip parser
e2a1a71 security: forbid \\ in local dev server requests
83a2cbf fix #4482: don't inline using declarations
308ad74 fix #4471: renaming of nested var declarations
f013f5f fix some typos
aafd6e4 chore: fix some minor issues in comments (#4462)
15300c3 follow up: cjs evaluation fixes
1bda0c3 fix #4461, fix #4467: esm evaluation fixes
Additional commits viewable in compare view

Updates jest from 30.2.0 to 30.4.2

Release notes

Sourced from jest's releases.

v30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Full Changelog: jestjs/jest@v30.4.1...v30.4.2

v30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

Full Changelog: jestjs/jest@v30.4.0...v30.4.1

v30.4.0

Big release! 😀

Main feature is a rewrite of our custom runtime in preparation for stabilisation of native support of ESM. As part of that work require(esm) module is now supported on Node 24.9+ (still requires --experimental-vm-modules like before).

In addition we now support fake timers for the recently released Temporal API in Node v26.

React 19 is also supported properly in pretty-format, meaning snapshots of React components now work like they should.

Due to all the changes, there might be regressions that snuck in. Please report them!

Full list of changes below

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

... (truncated)

Changelog

Sourced from jest's changelog.

30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

30.4.0

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

[pretty-format] Support React 19 (#16123)

Fixes

[expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)

[@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)

[fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)

[jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)

[jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#16003)

[jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#15967)

[jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#15961)

[jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#16132)

[jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#16132)

[jest-environment-node] Fix --localstorage-file warning on Node 25+ (#16086)

[jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#16137)

... (truncated)

Commits

746f2a0 v30.4.2
b3b4a09 v30.4.1
5cbb21e v30.4.0
db7141a fix: allow collectCoverage and coverageProvider in project config (#16132)
efb59c2 v30.3.0
96c53d3 feat(jest-config): add defineConfig and mergeConfig functions (#15844)
See full diff in compare view

Updates oxlint from 1.47.0 to 1.72.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)

2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)

bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)

5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)

7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)

2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)

ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)

6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)

7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)

732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)

a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)

ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)

3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)

ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)

e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)

6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)

85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)

fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)

ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)

dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)

989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)

cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

25d577e language_server: Start tools in parallel (#15500) (Sysix)

3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)

3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)

9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)

3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)

444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)

2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)

a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)

3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)

2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)

57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.72.0] - 2026-06-29

🚀 Features

1c8f50c linter: Add schema for eslint/no-restricted-import (#23642) (Sysix)

🐛 Bug Fixes

742be36 refactor/node/handle-callback-err: Reject invalid regex config (#23740) (camc314)

[1.71.0] - 2026-06-22

🚀 Features

0dc2405 linter: Add schema for eslint/no-restricted-properties (#23619) (Sysix)

b638d0e linter: Add schema for node/callback-return (#23615) (Sysix)

eb8bedc linter: Add schema for import/extensions (#23557) (WaterWhisperer)

46f3625 linter: Implement node/no-sync rule (#23589) (fujitani sora)

b01739a linter: Add schema for unicorn/numeric-separators-style (#23554) (Mikhail Baev)

68afd2a linter/node: Implement no-mixed-requires rule (#23539) (fujitani sora)

a421215 linter: Add schema for eslint/prefer-destructuring (#23410) (WaterWhisperer)

84438be linter/jsdoc: Added missing options to require-param-description (#23416) (kapobajza)

51910df linter/jsdoc: Add missing options to require-param-type rule (#23418) (kapobajza)

e90925f linter/unicorn: Implement prefer-number-coercion rule (#23497) (Shekhu☺️)

dd1c866 linter/vue: Implement no-async-in-computed-properties rule (#23493) (bab)

b02444e linter: Add schema for react/jsx-no-script-url (#23475) (WaterWhisperer)

a8dce46 linter/unicorn: Implement max-nested-calls rule (#23461) (arieleli01212)

🐛 Bug Fixes

a303c23 linter/jsx-a11y: Align anchor-is-valid config with upstream (#23446) (camc314)

📚 Documentation

b50bf4d linter: Remove manually written options doc for eslint/arrow-body-style (#23490) (Mikhail Baev)

[1.70.0] - 2026-06-15

🚀 Features

2e8bda4 linter/vue: Implement no-dupe-keys rule (#23350) (bab)

1490a0a linter/react: Implement react-compiler rule (#23202) (Boshen)

dd560ae linter/unicorn: Implement no-array-fill-with-reference-type rule (#23397) (Mikhail Baev)

af36c2f linter: Add schema for react/jsx-curly-brace-presence (#23400) (WaterWhisperer)

47d34a3 linter: Add schema for react/jsx-handler-names (#23393) (WaterWhisperer)

f4250d0 linter: Add schema for unicorn/import-style (#23386) (WaterWhisperer)

30c74ce linter: Add schema for jsx_a11y/no-noninteractive-element-to-interactive-role (#23384) (Sysix)

cfbe8dc linter: Add schema for jsx_a11y/no-interactive-element-to-noninteractive-role (#23382) (WaterWhisperer)

d15b7ff linter: Add schema for typescript/no-restricted-types (#23381) (WaterWhisperer)

028a811 linter: Add schema for jsx-a11y/media-has-caption (#23377) (Sysix)

... (truncated)

Commits

5306f24 release(apps): oxlint v1.72.0 && oxfmt v0.57.0 (#23935)
742be36 fix(refactor/node/handle-callback-err): reject invalid regex config (#23740)
1c8f50c feat(linter): add schema for eslint/no-restricted-import (#23642)
c4be770 release(apps): oxlint v1.71.0 && oxfmt v0.56.0 (#23707)
0dc2405 feat(linter): add schema for eslint/no-restricted-properties (#23619)
b638d0e feat(linter): add schema for node/callback-return (#23615)
6d355ab refactor(linter): remove number_as_object_schema helper (#23614)
eb8bedc feat(linter): add schema for import/extensions (#23557)
46f3625 feat(linter): implement node/no-sync rule (#23589)
953c7b3 refactor(linter): make unicorn/numeric-separators-style options u32 (#23558)
Additional commits viewable in compare view

Updates prettier from 3.8.1 to 3.9.4

Release notes

Sourced from prettier's releases.

3.9.4

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @fisker)

🔗 Changelog

3.9.3

Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @seiyab)

TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @evoactivity)

🔗 Changelog

3.9.1

CLI: Fix ignored file has been cached incorrectly (#19483 by @kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

Fix Flow variance annotation print (#19022 by @marcoww6)

🔗 Changelog

3.8.4

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @byplayer)

🔗 Changelog

3.8.3

SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @kovsu)

🔗 Changelog

3.8.2

Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.4

diff

Angular: Format `@content(name)` -> `@content (name)` to align with other block syntax (#19499 by `@fisker`)

<!-- Input -->
<FancyButton [label]="title">
  @content (icon) {
    <span>Icon!</span>
  }
  @content (description) {
    <span>Description text</span>
  }
  <span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.3 -->
<FancyButton [label]="title">
@content(icon) {
<span>Icon!</span>
}
@content(description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.4 -->
<FancyButton [label]="title">
@content (icon) {
<span>Icon!</span>
}
@content (description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by `@seiyab`)

</tr></table>

... (truncated)

Commits

b693cb2 Release 3.9.4
2e92ac0 Angular: Format @content(name) -> @content (name) to align with other blo...
abed2c2 Bump Prettier dependency to 3.9.3
6cfbc00 Clean changelog_unreleased
3732e1d Release 3.9.3
a74a7b0 Allow decorators to be used with declare on class fields (#19492)
bd9e11a Correct text identification in liquid syntax (#19489)
269eee3 Bump Prettier dependency to 3.9.1
ec7ccd1 Clean changelog_unreleased
c47654c Release 3.9.1
Additional commits viewable in compare view

Updates ts-jest from 29.4.6 to 29.4.11

Release notes

Sourced from ts-jest's releases.

v29.4.11

Please refer to CHANGELOG.md for details.

v29.4.10

Please refer to CHANGELOG.md for details.

v29.4.9

Please refer to CHANGELOG.md for details.

v29.4.8

No release notes provided.

v29.4.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.11 (2026-05-21)

Bug Fixes

preserve Bundler on the CJS path under TypeScript >= 6 (3941818), closes #4198

29.4.10 (2026-05-18)

Bug Fixes

pass resolutionMode to ts.resolveModuleName for hybrid module support (b557a85)

rebuild Program when consecutive compiles need different module kinds (a82a2b3), closes #4774

respect tsconfig moduleResolution instead of forcing Node10 (1bffffc)

transformer: transpile mjs files from node_modules for CJS mode (96d025d)

transformer: use a consistent comparator in hoist-jest sortStatements (8a8fd2f)

29.4.9 (2026-04-01)

Bug Fixes

use correct registry for npm OIDC trusted publishing (f8a9cc9)

29.4.8 (2026-04-01)

Bug Fixes

wrong published assets

29.4.7 (2026-04-01)

Features

support TypeScript v6 (eda517d)

Commits

bff2d64 chore(release): 29.4.11
3941818 fix: preserve Bundler on the CJS path under TypeScript >= 6
efb3c2f build(deps): bump webpack-dev-server from 5.2.2 to 5.2.4 in /website
4e46fad ci: refactor release workflow
96b3ac0 chore(release): 29.4.10
e98ec64 build(deps): update github/codeql-action digest to 458d36d
21ac58f build(deps): update jest packages
0fdc96d build(deps): update dependency semver to ^7.8.0
4b95551 build(deps): update dependency jest-environment-jsdom to ^30.4.1 (#5311)
7b88447 build(deps): update eslint packages to ^8.59.3 (#5310)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ts-jest since your current version.

Updates tsx from 4.21.0 to 4.22.4

Release notes

Sourced from tsx's releases.

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

This release is also available on:

npm package (@latest dist-tag)

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

decode typed loader source (dce02fc)

preserve entrypoint with TypeScript preload hooks (68f72f3)

This release is also available on:

npm package (@latest dist-tag)

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

preserve CJS JSON require in ESM hooks (35b700b)

preserve named exports from CommonJS TypeScript (11de737)

support module.exports require(esm) interop (cf8f199)

This release is also available on:

npm package (@latest dist-tag)

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

resolve tsconfig path aliases containing a colon (#780) (6979f28)

This release is also available on:

npm package (@latest dist-tag)

... (truncated)

Commits

1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803)
dce02fc fix: decode typed loader source
68f72f3 fix: preserve entrypoint with TypeScript preload hooks
69455cf test: cover package exports for ambiguous ESM reexports
35b700b fix: preserve CJS JSON require in ESM hooks
ef807db chore: update testing dependencies
3917090 test: document compatibility test taxonomy
de8113f refactor: centralize Node capability facts
c1f62db test: consolidate tsconfig path edge coverage
4e08174 test: consolidate loader hook coverage
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Updates typescript from 5.9.3 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

050880c Bump version to 6.0.3 and LKG
eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
607a22a Bump version to 6.0.2 and LKG
9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
e175b69 Bump version to 6.0.1-rc and LKG
af4caac Update LKG
8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the s...

Description has been truncated

Bumps the development group with 8 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.4` | `26.1.0` | | [esbuild](https://github.com/evanw/esbuild) | `0.27.3` | `0.28.1` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.4.2` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.47.0` | `1.72.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.4` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.6` | `29.4.11` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.4` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | Updates `@types/node` from 25.3.4 to 26.1.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `esbuild` from 0.27.3 to 0.28.1 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.27.3...v0.28.1) Updates `jest` from 30.2.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `oxlint` from 1.47.0 to 1.72.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.72.0/npm/oxlint) Updates `prettier` from 3.8.1 to 3.9.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.9.4) Updates `ts-jest` from 29.4.6 to 29.4.11 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.6...v29.4.11) Updates `tsx` from 4.21.0 to 4.22.4 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.22.4) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development - dependency-name: esbuild dependency-version: 0.28.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: oxlint dependency-version: 1.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: prettier dependency-version: 3.9.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: ts-jest dependency-version: 29.4.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: tsx dependency-version: 4.22.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 2, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the development group with 8 updates#44

build(deps-dev): bump the development group with 8 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-c9f316ee3f

dependabot Bot commented on behalf of github Jul 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 2, 2026

v0.28.1

0.28.1

v30.4.2

Fixes

v30.4.1

Features

Fixes

v30.4.0

Features

30.4.2

Fixes

30.4.1

Features

Fixes

30.4.0

Features

Fixes

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

Oxfmt v0.12.0

[1.72.0] - 2026-06-29

🚀 Features

🐛 Bug Fixes

[1.71.0] - 2026-06-22

🚀 Features

🐛 Bug Fixes

📚 Documentation

[1.70.0] - 2026-06-15

🚀 Features

3.9.4

3.9.3

3.9.1

3.9.0

3.8.5

3.8.4

3.8.3

3.8.2

3.9.4

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

3.9.3

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

v29.4.11

v29.4.10

v29.4.9

v29.4.8

v29.4.7

29.4.11 (2026-05-21)

Bug Fixes

29.4.10 (2026-05-18)

Bug Fixes

29.4.9 (2026-04-01)

Bug Fixes

29.4.8 (2026-04-01)

Bug Fixes

29.4.7 (2026-04-01)

Features

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

TypeScript 6.0.3

TypeScript 6.0

TypeScript 6.0 Beta

Uh oh!

Reviewers

Angular: Format `@content(name)` -> `@content (name)` to align with other block syntax (#19499 by `@fisker`)

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by `@seiyab`)