chore(deps-dev): bump the dev-dependencies group with 9 updates by dependabot[bot] · Pull Request #154 · uhyo/funstack-router

dependabot · 2026-03-18T17:58:26Z

Bumps the dev-dependencies group with 9 updates:

Package	From	To
oxlint	`1.53.0`	`1.56.0`
turbo	`2.8.16`	`2.8.18`
@vitejs/plugin-react	`5.1.4`	`6.0.1`
vite	`7.3.1`	`8.0.0`
wrangler	`4.72.0`	`4.75.0`
@types/node	`25.4.0`	`25.5.0`
jsdom	`28.1.0`	`29.0.0`
tsdown	`0.21.2`	`0.21.4`
vitest	`4.0.18`	`4.1.0`

Updates oxlint from 1.53.0 to 1.56.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)

2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)

bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)

5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)

7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)

2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)

ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)

6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)

7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)

732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)

a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)

ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)

3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)

ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)

e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)

6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)

85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)

fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)

ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)

dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)

989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)

cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

25d577e language_server: Start tools in parallel (#15500) (Sysix)

3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)

3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)

9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)

3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)

444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)

2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)

a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)

3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)

2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)

57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Commits

5446ebd release(apps): oxlint v1.56.0 && oxfmt v0.41.0 (#20423)
6a26b93 release(apps): oxlint v1.55.0 && oxfmt v0.40.0 (#20293)
f339f10 docs(linter/plugins): promote JS plugins to alpha status (#20281)
bc20217 fix(oxlint,oxfmt): Omit useless | null for Option\<T> field from schema (#...
36e7d29 release(apps): oxlint v1.54.0 && oxfmt v0.39.0 (#20267)
0c7da4f docs(linter): Fix extra closing brace in example config. (#20253)
See full diff in compare view

Updates turbo from 2.8.16 to 2.8.18

Release notes

Sourced from turbo's releases.

Turborepo v2.8.18

What's Changed

create-turbo

fix: Sort uninstalled package managers to bottom of create-turbo selection by @anthonyshew in vercel/turborepo#12353

@turbo/codemod

fix: Stop add-package-names codemod from silently renaming existing packages by @anthonyshew in vercel/turborepo#12332

Examples

fix: Sync yarn lockfile before upgrading turbo in examples updater by @anthonyshew in vercel/turborepo#12286

Changelog

feat: Add turbo query affected CLI shorthand by @anthonyshew in vercel/turborepo#12283

chore: Add turborepo-log crate to improve our logging situation by @anthonyshew in vercel/turborepo#12285

fix: Ensure pkg#task CLI args are always included in filtered packages by @anthonyshew in vercel/turborepo#12287

feat: Wire up turborepo-log with TerminalSink and convert first warning by @anthonyshew in vercel/turborepo#12289

feat: Add git SHA and dirty hash to cache metadata by @mehulkar in vercel/turborepo#12288

feat: Surface cache SCM metadata in Run Summary by @mehulkar in vercel/turborepo#12291

fix: Inline PlopTypes in @turbo/gen to fix implicit any for consumers by @anthonyshew in vercel/turborepo#12292

chore: Disable update notifier for this repo by @anthonyshew in vercel/turborepo#12293

feat: Add TuiSink to route log events into the TUI by @anthonyshew in vercel/turborepo#12294

feat: Publish platform binaries under @turbo/ scoped packages by @anthonyshew in vercel/turborepo#12296

feat: Initialize turborepo-log in turbo watch by @anthonyshew in vercel/turborepo#12298

fix: Resolve git diff warning in fresh repos and make SCM state lazy by @anthonyshew in vercel/turborepo#12300

docs: Add VS Code Jest extension workaround to Jest guide by @anthonyshew in vercel/turborepo#12303

feat: Route user-facing warnings through turborepo-log and suppress tracing stderr in TUI mode by @anthonyshew in vercel/turborepo#12299

fix: Handle parent directory inputs in non-git repos by @anthonyshew in vercel/turborepo#12304

fix: Source cargo env in pre-push hook for Rust toolchain resolution by @anthonyshew in vercel/turborepo#12306

refactor: Convert task-access warnings to turborepo_log by @anthonyshew in vercel/turborepo#12307

chore: Remove internal .vscode directory by @anthonyshew in vercel/turborepo#12309

fix: Expand directory inputs to dir/** in manual SCM and git literal-path optimization by @anthonyshew in vercel/turborepo#12305

fix: Infer monorepo root in LSP instead of trusting editor root_uri by @anthonyshew in vercel/turborepo#12308

fix: Flush stale mouse tracking events from stdin during TUI cleanup by @anthonyshew in vercel/turborepo#12311

refactor: Route run prelude through turborepo_log, add StdoutSink by @anthonyshew in vercel/turborepo#12310

feat: Show richer remote cache status in run prelude by @anthonyshew in vercel/turborepo#12314

chore: Remove deprecated Spaces feature remnants by @anthonyshew in vercel/turborepo#12316

refactor: Route run/watch output through unified TerminalSink by @anthonyshew in vercel/turborepo#12315

refactor: Replace tracing::log:: bridge imports with tracing:: directly by @anthonyshew in vercel/turborepo#12320

refactor: Replace Source::turbo string literals with Subsystem enum by @anthonyshew in vercel/turborepo#12321

fix: Add check:toml to pre-push hook by @anthonyshew in vercel/turborepo#12322

fix: Filter phantom tasks from affectedTasks query results by @anthonyshew in vercel/turborepo#12324

refactor: Route 'no tasks executed' warning through turborepo-log and add task prefix to TerminalSink by @anthonyshew in vercel/turborepo#12326

feat: Allow cyclic package graphs, validate only at task graph level by @anthonyshew in vercel/turborepo#12327

fix: Detect affected tasks with $TURBO_ROOT$ inputs when using affectedUsingTaskInputs by @anthonyshew in vercel/turborepo#12331

feat: Extend LogSink with task output and grouping support by @anthonyshew in vercel/turborepo#12328

fix: Support private GitHub repos in turbo gen workspace --copy by @anthonyshew in vercel/turborepo#12333

feat: Add GroupingLayer for per-task output buffering by @anthonyshew in vercel/turborepo#12334

fix: Hardening for supporting private GitHub repos in turbo gen workspace --copy by @anthonyshew in vercel/turborepo#12336

refactor: Wire GroupingLayer into Visitor and migrate task error/warn to turborepo-log by @anthonyshew in vercel/turborepo#12337

perf: Replace subprocess repo index with in-process gix-index by @anthonyshew in vercel/turborepo#12339

fix: Prevent $TURBO_DEFAULT$ from matching unrelated root files in affected detection by @anthonyshew in vercel/turborepo#12341

... (truncated)

Commits

672b08f publish 2.8.18 to registry
2983db6 release(turborepo): 2.8.18-canary.26 (#12377)
65e4dd9 fix: Preserve package.json key order during turbo prune with pnpm patches (...
595b581 fix: Improve accessibility for docs (#12375)
2144446 fix: Pass TURBO_* env vars through to child processes in Strict Mode (#12372)
efb627c release(turborepo): 2.8.18-canary.25 (#12374)
75c717a fix: Fall back to bundled certificates when system cert store is inaccessible...
ce8b2a7 docs: Fix typo in Turbo 2.7 blog post (#12367)
f37e348 release(turborepo): 2.8.18-canary.24 (#12368)
06ba8e2 fix: Suppress noisy rustls TLS warning on stderr (#12365)
Additional commits viewable in compare view

Updates @vitejs/plugin-react from 5.1.4 to 6.0.1

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})
For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:
 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },


}),


react(),
babel({

 presets: [reactCompilerPreset()]



</tr></table>

... (truncated)

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})
For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:
 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },



</tr></table>

... (truncated)

Commits

1e94c06 release: plugin-react@6.0.1
77c00c0 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1146)
dcc9012 release: plugin-react@6.0.0
3a17886 docs: add a link to the Oxlint rule for component exports alongside the ESLin...
f812135 fix(deps): update all non-major dependencies (#1140)
a0329a0 docs(react): clarify react compiler preset filter (#1137)
704e0d3 release: plugin-react@6.0.0-beta.0
ac16acc feat(react)!: remove babel (#1123)
f01b30c fix(deps): update all non-major dependencies (#1127)
b1014bd chore(react): add changelog for #1124
Additional commits viewable in compare view

Updates vite from 7.3.1 to 8.0.0

Release notes

Sourced from vite's releases.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

v8.0.0-beta.15

Please refer to CHANGELOG.md for details.

v8.0.0-beta.14

Please refer to CHANGELOG.md for details.

v8.0.0-beta.13

Please refer to CHANGELOG.md for details.

v8.0.0-beta.12

Please refer to CHANGELOG.md for details.

v8.0.0-beta.11

Please refer to CHANGELOG.md for details.

v8.0.0-beta.10

Please refer to CHANGELOG.md for details.

v8.0.0-beta.9

Please refer to CHANGELOG.md for details.

v8.0.0-beta.8

Please refer to CHANGELOG.md for details.

v8.0.0-beta.7

Please refer to CHANGELOG.md for details.

v8.0.0-beta.6

Please refer to CHANGELOG.md for details.

v8.0.0-beta.5

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.0 (2026-03-12)

Today, we're thrilled to announce the release of the next Vite major:

Vite 8.0 announcement blog post

Docs (translations: 简体中文, 日本語, Español, Português, 한국어, Deutsch, فارسی)

Migration Guide

⚠ BREAKING CHANGES

remove import.meta.hot.accept resolution fallback (#21382)

update default browser target (#21193)

the epic rolldown-vite merge (#21189)

Features

update rolldown to 1.0.0-rc.9 (#21813) (f05be0e)

warn when vite-tsconfig-paths plugin is detected (#21781) (ada493e)

css: support es2025 build target for lightningcss (#21769) (08906e7)

forward browser console logs and errors to dev server terminal (#20916) (2540ed0)

update rolldown to 1.0.0-rc.8 (#21790) (a0c950e)

export Visitor and ESTree from rolldown/utils (#21664) (45de31e)

update rolldown to 1.0.0-rc.6 (#21714) (37a65f8)

use util.inspect for CLI error display (#21668) (5f425a9)

update rolldown to 1.0.0-rc.5 (#21660) (b3ddbc5)

update rolldown to 1.0.0-rc.4 (#21617) (1ee5c7f)

wasm: add SSR support for .wasm?init (#21102) (216a3b5)

integrate devtools (#21331) (acbf507)

update rolldown to 1.0.0-rc.3 (#21554) (43358e9)

manifest: add assets field for standalone CSS entry points (#21015) (f289b9b)

update rolldown to 1.0.0-rc.2 (#21512) (fa136a9)

bundled-dev: support worker in initial bundle (#21415) (f3d3149)

dev: detect port conflicts on wildcard hosts (#21381) (b0dd5a9)

shortcuts case insensitive (#21224) (7796ade)

update rolldown to 1.0.0-rc.1 (#21463) (ff9dd7f)

warn if envPrefix contains spaces (#21292) (9fcde3c)

update rolldown to 1.0.0-beta.60 (#21408) (c33aa7c)

update rolldown to 1.0.0-beta.59 (#21374) (0037943)

add ignoreOutdatedRequests option to optimizeDeps (#21364) (b2e75aa)

add ios to default esbuild targets (#21342) (daae6e9)

update rolldown to 1.0.0-beta.58 (#21354) (ba40cef)

update rolldown to 1.0.0-beta.57 (#21335) (d5412ef)

css: support es2024 build target for lightningcss (#21294) (bd33b8e)

update rolldown to 1.0.0-beta.56 (#21323) (9847a63)

introduce v2 native plugins and enable it by default (#21268) (42f2ab3)

ssr: avoid errors when rewriting already rewritten stacktrace (#21269) (98d9a33)

update rolldown to 1.0.0-beta.55 (#21300) (2c8db85)

update rolldown to 1.0.0-beta.54 (#21267) (c751172)

... (truncated)

Commits

ea68a88 chore(deps): update rolldown-related dependencies (#20810)
693d255 release: v7.1.7
98a3484 fix(hmr): wait for import.meta.hot.prune callbacks to complete before runni...
9f32b1d fix(hmr): trigger prune event when import is removed from non hmr module (#20...
9f2247c fix(deps): update all non-major dependencies (#20811)
105abe8 fix(glob): handle glob imports from folders starting with dot (#20800)
4c4583c fix(build): fix ssr environment emitAssets: true when `sharedConfigBuild: t...
9bc9d12 fix(client): use CSP nonce when rendering error overlay (#20791)
54377f7 release: v7.1.6
88af2ae fix(deps): update all non-major dependencies (#20773)
Additional commits viewable in compare view

Updates wrangler from 4.72.0 to 4.75.0

Release notes

Sourced from wrangler's releases.

wrangler@4.75.0

Minor Changes

#12492 3b81fc6 Thanks @thomasgauvin! - feat: add wrangler tunnel commands for managing Cloudflare Tunnels

Adds a new set of commands for managing remotely-managed Cloudflare Tunnels directly from Wrangler:

wrangler tunnel create <name> - Create a new Cloudflare Tunnel

wrangler tunnel list - List all tunnels in your account

wrangler tunnel info <tunnel> - Display details about a specific tunnel

wrangler tunnel delete <tunnel> - Delete a tunnel (with confirmation)

wrangler tunnel run <tunnel> - Run a tunnel using cloudflared

wrangler tunnel quick-start <url> - Start a temporary tunnel (Try Cloudflare)

The run and quick-start commands automatically download and manage the cloudflared binary, caching it in ~/.wrangler/cloudflared/. Users are prompted before downloading and warned if their PATH-installed cloudflared is outdated. You can override the binary location with the CLOUDFLARED_PATH environment variable.

All commands are marked as experimental.

Patch Changes

#12927 c9b3184 Thanks @penalosa! - Bump undici from 7.18.2 to 7.24.4

#12875 13df6c7 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260312.1 1.20260316.1

#12935 df0d112 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260316.1 1.20260317.1

#12928 81ee98e Thanks @petebacondarwin! - Migrate chrome-devtools-patches deployment from Cloudflare Pages to Workers + Assets

The DevTools frontend is now deployed as a Cloudflare Workers + Assets project instead of a Cloudflare Pages project. This uses wrangler deploy for production deployments and wrangler versions upload for PR preview deployments.

The inspector proxy origin allowlists in both wrangler and miniflare have been updated to accept connections from the new workers.dev domain patterns, while retaining the legacy pages.dev patterns for backward compatibility.

#12835 c600ce0 Thanks @dario-piotrowicz! - Fix execution freezing on debugger statements when DevTools is not attached

Previously, wrangler always sent Debugger.enable to the runtime on connection, even when DevTools wasn't open. This caused scripts to freeze on debugger statements. Now Debugger.enable is only sent when DevTools is actually attached, and Debugger.disable is sent when DevTools disconnects to stop the runtime from performing debugging work.

#12894 f509d13 Thanks @gpanders! - Simplify description of --json option

... (truncated)

Commits

a671740 Version Packages (#12923)
e25bd0e Update prettier to 3.8.1 (#12939)
df0d112 Bump the workerd-and-workers-types group with 2 updates (#12935)
81ee98e [chrome-devtools-patches] Migrate deployment from Cloudflare Pages to Workers...
3b81fc6 feat(wrangler): add wrangler tunnel (#12492)
13df6c7 Bump the workerd-and-workers-types group with 2 updates (#12875)
0a7fef9 wrangler: reject cross-drive module paths (#11888)
f509d13 Remove superfluous adjective from --json description (#12894)
c600ce0 Fix execution freezing on debugger statements when DevTools is not attached...
2e6b4ab Version Packages (#12876)
Additional commits viewable in compare view

Updates @types/node from 25.4.0 to 25.5.0

Commits

See full diff in compare view

Updates jsdom from 28.1.0 to 29.0.0

Release notes

Sourced from jsdom's releases.

v29.0.0

Breaking changes:

Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.

Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.

Added cssMediaRule.matches and cssSupportsRule.matches getters.

Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.

Added cssKeyframeRule.keyText getter/setter validation.

Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.

Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.

Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.

Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (@thypon)

Fixed a memory leak when stylesheets were removed from the document.

Fixed CSSStyleDeclaration modifications to properly trigger custom element reactions.

Fixed nested @media rule parsing.

Fixed CSSStyleSheet's "disallow modification" flag not being checked in all mutation methods.

Fixed XMLHttpRequest's response getter returning parsed JSON during the LOADING state instead of null.

Fixed getComputedStyle() crashing in XHTML documents when stylesheets contained at-rules such as @page or @font-face.

Fixed a potential hang in synchronous XMLHttpRequest caused by a race condition with the worker thread's idle timeout.

Changelog

Sourced from jsdom's changelog.

29.0.0

Breaking changes:

Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.

Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.

Added cssMediaRule.matches and cssSupportsRule.matches getters.

Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.

Added cssKeyframeRule.keyText getter/setter validation.

Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.

Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.

Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.

Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (thypon)

Fixed a memory leak when stylesheets were removed from the document.

Fixed CSSStyleDeclaration modifications to properly trigger custom element reactions.

Fixed nested @media rule parsing.

Fixed CSSStyleSheet's "disallow modification" flag not being checked in all mutation methods.

Fixed XMLHttpRequest's response getter returning parsed JSON during the LOADING state instead of null.

Fixed getComputedStyle() crashing in XHTML documents when stylesheets contained at-rules such as @page or @font-face.

Fixed a potential hang in synchronous XMLHttpRequest caused by a race condition with the worker thread's idle timeout.

Commits

00522ce Version 29.0.0
a217975 Use undici's request() API for XHR dispatching
f29722d Convert CSSStyleDeclaration to webidl2js
4aaacc6 Merge in cssstyle and replace @acemir/cssom
6c2769a Remove unused http(s)-proxy-agent dependencies
eba96b5 Update domSelector
54f9995 Use --fgrep for npm run test:tuwpt:browser
15e7664 Use stable ports for test:tuwpt:browser
7410bdb Suppress informational WPT output when using the min reporter
c44377e Lazily initialize DOMSelector
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates tsdown from 0.21.2 to 0.21.4

Release notes

Sourced from tsdown's releases.

v0.21.4

   🚀 Features

css: Add CSS modules support - by @sxzz in rolldown/tsdown#834 (2a88a)

   🐞 Bug Fixes

exports: Preserve CRLF line endings in package.json - by @sxzz (a4d4e)

    View changes on GitHub

v0.21.3

   🚀 Features

copy: Add support for watching copy source files - by @schplitt in rolldown/tsdown#721 (7c23a)

   🐞 Bug Fixes

css: Watch inline CSS files in watch mode - by @sxzz (2051a)

exports: Sort inlined dependencies by package name - by @sxzz (0ec71)

publint: Support Yarn v1 - by @sxzz (4a291)

unbundle: Root should be lowest common ancestor of entry files - by @sxzz (f1823)

    View changes on GitHub

Commits

c5d4166 chore: release v0.21.4
a417351 docs: update skills install commands with --skill flag
cd4ce32 refactor(docs): clarify deprecated-but-compatible migration options
Description has been truncated

Bumps the dev-dependencies group with 9 updates: | Package | From | To | | --- | --- | --- | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.53.0` | `1.56.0` | | [turbo](https://github.com/vercel/turborepo) | `2.8.16` | `2.8.18` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.4` | `6.0.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.1` | `8.0.0` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.72.0` | `4.75.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.4.0` | `25.5.0` | | [jsdom](https://github.com/jsdom/jsdom) | `28.1.0` | `29.0.0` | | [tsdown](https://github.com/rolldown/tsdown) | `0.21.2` | `0.21.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.0` | Updates `oxlint` from 1.53.0 to 1.56.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.56.0/npm/oxlint) Updates `turbo` from 2.8.16 to 2.8.18 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.16...v2.8.18) Updates `@vitejs/plugin-react` from 5.1.4 to 6.0.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react) Updates `vite` from 7.3.1 to 8.0.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.0/packages/vite) Updates `wrangler` from 4.72.0 to 4.75.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.75.0/packages/wrangler) Updates `@types/node` from 25.4.0 to 25.5.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `jsdom` from 28.1.0 to 29.0.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/v29.0.0/Changelog.md) - [Commits](jsdom/jsdom@v28.1.0...v29.0.0) Updates `tsdown` from 0.21.2 to 0.21.4 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.21.2...v0.21.4) Updates `vitest` from 4.0.18 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) --- updated-dependencies: - dependency-name: oxlint dependency-version: 1.56.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: turbo dependency-version: 2.8.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: vite dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: wrangler dependency-version: 4.75.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 25.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: jsdom dependency-version: 29.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: tsdown dependency-version: 0.21.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 18, 2026

uhyo merged commit 8811944 into master Mar 19, 2026
1 check passed

uhyo deleted the dependabot/npm_and_yarn/dev-dependencies-f30dc272a7 branch March 19, 2026 04:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the dev-dependencies group with 9 updates#154

chore(deps-dev): bump the dev-dependencies group with 9 updates#154
uhyo merged 1 commit intomasterfrom
dependabot/npm_and_yarn/dev-dependencies-f30dc272a7

dependabot bot commented on behalf of github Mar 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 18, 2026

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

Oxfmt v0.12.0

Turborepo v2.8.18

What's Changed

create-turbo

@​turbo/codemod

Examples

Changelog

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

plugin-react@6.0.0

Remove Babel Related Features (#1123)

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

create-vite@8.0.0

plugin-legacy@8.0.0

v8.0.0

v8.0.0-beta.18

v8.0.0-beta.17

v8.0.0-beta.16

v8.0.0-beta.15

v8.0.0-beta.14

v8.0.0-beta.13

v8.0.0-beta.12

v8.0.0-beta.11

v8.0.0-beta.10

v8.0.0-beta.9

v8.0.0-beta.8

v8.0.0-beta.7

v8.0.0-beta.6

v8.0.0-beta.5

8.0.0 (2026-03-12)

⚠ BREAKING CHANGES

Features

wrangler@4.75.0

Minor Changes

Patch Changes

v29.0.0

29.0.0

v0.21.4

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v0.21.3

🚀 Features

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@turbo/codemod`

Expand `@rolldown/plugin-babel` peer dep range (#1146)

Expand `@rolldown/plugin-babel` peer dep range (#1146)