Skip to content

chore(deps): bump the production-dependencies group with 7 updates - #102

Merged
jeandet merged 1 commit into
v4from
dependabot/npm_and_yarn/production-dependencies-7bd50e09c5
Jul 27, 2026
Merged

chore(deps): bump the production-dependencies group with 7 updates#102
jeandet merged 1 commit into
v4from
dependabot/npm_and_yarn/production-dependencies-7bd50e09c5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 7 updates:

Package From To
chalk 5.6.2 6.0.0
js-yaml 5.2.1 5.2.2
rehype-pretty-code 0.14.4 0.14.5
remark-smartypants 3.0.2 3.0.3
satori 0.28.0 0.29.0
yargs 18.0.0 18.1.0
prettier 3.9.5 3.9.6

Updates chalk from 5.6.2 to 6.0.0

Release notes

Sourced from chalk's releases.

v6.0.0

Breaking

  • Require Node.js 22 8a94e0e

Improvements

  • Add underline styles and underline colors (#689) 4c304dd
  • Improve performance 5729845 fa5cff2

Fixes

  • Treat a numeric FORCE_COLOR as an exact level (#688) e912931
  • Downsample ansi256() and bgAnsi256() to 16 colors at level 1 (#687) ff549c5

chalk/chalk@v5.6.2...v6.0.0

Commits

Updates js-yaml from 5.2.1 to 5.2.2

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.
Commits
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
  • See full diff in compare view

Updates rehype-pretty-code from 0.14.4 to 0.14.5

Release notes

Sourced from rehype-pretty-code's releases.

rehype-pretty-code@0.14.5

Patch Changes

  • fix: detect showLineNumbers wherever it appears in the meta string, not only before the highlight annotations, while ignoring the word when it is part of a character highlight such as /foo showLineNumbers bar/ (#204)
  • fix: stop character-highlight ranges leaking across patterns, so an id-only annotation like /foo/#a no longer makes a later pattern inherit the previous pattern's range, and a range-ignored occurrence no longer consumes the whole token it lives in (#169)

Range-excluded occurrences are counted without changing the token tree, so unhighlighted markup remains intact.

Partial highlights contained within a transformer-generated element preserve that surrounding semantic element instead of cloning it.

Changelog

Sourced from rehype-pretty-code's changelog.

0.14.5

Patch Changes

  • fix: detect showLineNumbers wherever it appears in the meta string, not only before the highlight annotations, while ignoring the word when it is part of a character highlight such as /foo showLineNumbers bar/ (#204)
  • fix: stop character-highlight ranges leaking across patterns, so an id-only annotation like /foo/#a no longer makes a later pattern inherit the previous pattern's range, and a range-ignored occurrence no longer consumes the whole token it lives in (#169)

Range-excluded occurrences are counted without changing the token tree, so unhighlighted markup remains intact.

Partial highlights contained within a transformer-generated element preserve that surrounding semantic element instead of cloning it.

Commits

Updates remark-smartypants from 3.0.2 to 3.0.3

Release notes

Sourced from remark-smartypants's releases.

v3.0.3

Commits
  • a7a3039 3.0.3
  • db3ec68 Approve builds
  • 77a4987 Merge pull request #103 from geraschenko/open-quotes
  • a05bb81 Fix quote direction at the start of headings and table cells
  • 9d26679 Merge pull request #97 from silvenon/dependabot/npm_and_yarn/rollup-4.59.0
  • 3beb89a Bump rollup from 4.56.0 to 4.59.0
  • 4f0ae47 Merge pull request #96 from silvenon/dependabot/npm_and_yarn/vitest-1.6.1
  • b6cab69 Bump vitest from 1.5.0 to 1.6.1
  • 807fc1e Merge pull request #95 from silvenon/dependabot/npm_and_yarn/lodash-4.17.23
  • 2b3abec Bump lodash from 4.17.21 to 4.17.23
  • Additional commits viewable in compare view

Updates satori from 0.28.0 to 0.29.0

Release notes

Sourced from satori's releases.

0.29.0

0.29.0 (2026-07-23)

Features

0.28.2

0.28.2 (2026-07-21)

Bug Fixes

0.28.1

0.28.1 (2026-07-20)

Bug Fixes

  • render text matching Object.prototype property names as glyphs (#761) (504b4c9)
Commits

Updates yargs from 18.0.0 to 18.1.0

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

  • ignore bun when getting bin name (b77831c)

Bug Fixes

  • lang: 'count' for de locale (#2476) (971e351)
  • local prototype pollution vulnerability in apply-extends (437f3a4)
  • locale: add Georgian translation (#2474) (086aeaa)

17.7.3 (2026-06-19)

Bug Fixes

  • fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

  • fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)
Commits
Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.


Updates prettier from 3.9.5 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [chalk](https://github.com/chalk/chalk) | `5.6.2` | `6.0.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.1` | `5.2.2` |
| [rehype-pretty-code](https://github.com/rehype-pretty/rehype-pretty-code/tree/HEAD/packages/core) | `0.14.4` | `0.14.5` |
| [remark-smartypants](https://github.com/silvenon/remark-smartypants) | `3.0.2` | `3.0.3` |
| [satori](https://github.com/vercel/satori) | `0.28.0` | `0.29.0` |
| [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.1.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |


Updates `chalk` from 5.6.2 to 6.0.0
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v5.6.2...v6.0.0)

Updates `js-yaml` from 5.2.1 to 5.2.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.2.2)

Updates `rehype-pretty-code` from 0.14.4 to 0.14.5
- [Release notes](https://github.com/rehype-pretty/rehype-pretty-code/releases)
- [Changelog](https://github.com/rehype-pretty/rehype-pretty-code/blob/master/packages/core/CHANGELOG.md)
- [Commits](https://github.com/rehype-pretty/rehype-pretty-code/commits/rehype-pretty-code@0.14.5/packages/core)

Updates `remark-smartypants` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/silvenon/remark-smartypants/releases)
- [Commits](silvenon/remark-smartypants@v3.0.2...v3.0.3)

Updates `satori` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.28.0...0.29.0)

Updates `yargs` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.1.0)

Updates `prettier` from 3.9.5 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.5...3.9.6)

---
updated-dependencies:
- dependency-name: chalk
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: rehype-pretty-code
  dependency-version: 0.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: remark-smartypants
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: satori
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@jeandet
jeandet merged commit 7505c44 into v4 Jul 27, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-7bd50e09c5 branch July 27, 2026 08:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant