ReviewOS

also looking at this

stacks/dtsx

chore(deps): update all non-major dependencies

#3086
Open github-actions[bot] wants to merge buddy-bot/update-non-major-updates into main
5 files +229 -352
8 days ago

This PR contains the following updates:

Package Updates Summary

TypeCount
📦 NPM Packages13
Total13

📦 npm Dependencies

npm

13 packages will be updated

PackageChangeAgeAdoptionPassingConfidence
@stacksjs/bunpress (source)0.1.4 -> 0.2.31ageadoptionpassingconfidence
@types/bun (source)1.3.13 -> 1.4.4ageadoptionpassingconfidence
buddy-bot (source)0.9.19 -> 0.10.5ageadoptionpassingconfidence
esbuild (source)0.27.7 -> 0.28.2ageadoptionpassingconfidence
oxc-parser (source)0.121.0 -> 0.156.0ageadoptionpassingconfidence
oxc-transform (source)0.121.0 -> 0.156.0ageadoptionpassingconfidence
webpack (source)5.106.2 -> 5.112.2ageadoptionpassingconfidence
@stacksjs/bumpx (source)0.2.6 -> 0.2.30ageadoptionpassingconfidence
@stacksjs/gitlint (source)0.1.5 -> 0.1.8ageadoptionpassingconfidence
@stacksjs/logsmith (source)0.2.1 -> 0.2.14ageadoptionpassingconfidence
bun-git-hooks (source)0.3.1 -> 0.3.3ageadoptionpassingconfidence
bunfig (source)0.15.11 -> 0.15.21ageadoptionpassingconfidence
pickier (source)0.1.28 -> 0.1.81ageadoptionpassingconfidence

Release Notes

stacksjs/bunpress (@stacksjs/bunpress)

0.1.4 -> 0.2.31

v0.2.31

Compare Source

Released by github-actions[bot] on 10/30/2026

v0.2.30

Compare Source

Released by github-actions[bot] on 10/29/2026

v0.2.29

Compare Source

Released by github-actions[bot] on 10/26/2026

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.13 -> 1.4.4

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

stacksjs/buddy-bot (buddy-bot)

0.9.19 -> 0.10.5

v0.10.5

Compare Source

Compare changes

⚡ Performance Improvements

🔧 Chores

Contributors

Released by github-actions[bot] on 8/19/2026

v0.9.27

Compare Source

Released by github-actions[bot] on 8/8/2026

v0.9.26

Compare Source

Released by github-actions[bot] on 8/8/2026

evanw/esbuild (esbuild)

0.27.7 -> 0.28.2

v0.28.2

Compare Source

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
    import Alias = Base.SomeType;
  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
    .a .b {
      & .b:not(& .c) {
        color: red;
      }
    }
    
    /* Old output (with --minify) */
    .a .b{.b:not(& .c){color:red}}
    
    /* New output (with --minify) */
    .a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but no...

[View full release notes]

Released by github-actions[bot] on 8/8/2026

v0.28.1

Compare Source

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to [dellalibera](https://github.com/dellalibera) for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if ...

[View full release notes]

Released by github-actions[bot] on 6/11/2026

v0.28.0

Compare Source

  • Add support for with { type: 'text' } imports (#4435)

    The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

    import string from './example.txt' with { type: 'text' }
    console.log(string)
  • Add integrity checks to fallback download path (#4343)

    Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the re...

[View full release notes]

Released by github-actions[bot] on 4/2/2026

oxc-project/oxc (oxc-parser)

0.121.0 -> 0.156.0

oxlint_v1.90.0

Compare Source

🚀 Features

  • cf34678 oxlint: Export Oxlintrc type (#28132) (Sysix)
  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

🐛 Bug Fixes

  • 7f3c908 linter/eslint/array-callback-return: Check callbacks passed with extra arguments (#28133) (sarankumar)
  • 53be530 linter: Filter by type aware rules when looking up tsgolint rule severity (#28138) (NavpreetSSidhu)
  • e0f8937 react-compiler: Compile a try whose catch is unreachable instead of panicking (#28066) (Dunqing)
  • f5b625f linter/eslint/no-useless-concat: See through parenthesized expressions (#27984) (Rahul Kashyap)
  • 4629bb2 linter/jest/no-conditional-expect: Check function expression callbacks (#28055) (camc314)
  • 5c84098 semantic,linter: Report names with lone surrogates in enum...

[View full release notes]

Released by github-actions[bot] on 10/27/2026

oxfmt_v0.75.0

Compare Source

🐛 Bug Fixes

  • 5042019 formatter: Keep fill layout for array with comment after [ (#28170) (leaysgur)
  • 9d37ff6 formatter: Use position-based comment checks for concise arrays (#28169) (leaysgur)
  • 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#28103) (vidigoat)
  • 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#28168) (leaysgur)
  • a5314a1 formatter: Keep ; before in and instanceof class members (#28166) (leaysgur)
  • 3a56e7c formatter: Keep closing HTML comments at the start of a line (#28064) (Cameron)
  • 23d23d6 formatter_markdown: Honor range ignore inside directives (#28164) (leaysgur)
  • 5f1fd3d formatter: Measure width heuristics by display width (#28098) (leaysgur)
  • a5a52cf formatter: Keep parens around private in expressions (#28096) (leaysgur)
  • 999496e formatter: Measure a short key by its display width (#28026) (vidigoat)
  • 7e9aa44 formatter: Keep parens ar...

[View full release notes]

Released by github-actions[bot] on 10/27/2026

crates_v0.156.0

Compare Source

💥 BREAKING CHANGES

  • cf8296f ecmascript: [BREAKING] Fold surrogate strings with JSStr constants (#27098) (Dunqing)

🚀 Features

  • dd6cb2b minifier: Fold out-of-bounds string indices to void 0 (#28004) (Dunqing)

🐛 Bug Fixes

  • f4dac9e semantic: Separate hoisted vars from block type bindings (#27936) (limadog9)
  • 9ec6617 minifier: Keep brackets on negative and non-finite numeric keys (#27855) (Yunus Ozen)
  • 520a26e minifier: Keep the default in shorthand assignment targets (#28183) (waltu)
  • def47b8 react-compiler: Keep manual memoization as written when its dependencies can't be honoured (#28101) (Dunqing)
  • 704d8cf transformer_plugins: Keep the bare inject when references to it remain (#26965) (Bharadwaj Pendyala)
  • 6d7b372 minifier: Handle sequence exprs when folding if to expr statement (#27939) (Armano)
  • e3eca41 runtime: Align async iterator throw with Babel (#28059) (camc314)
  • af0258d parser: Parse source imports named type (#28062) (cam...

[View full release notes]

Released by github-actions[bot] on 10/27/2026

oxc-project/oxc (oxc-transform)

0.121.0 -> 0.156.0

oxlint_v1.90.0

Compare Source

🚀 Features

  • cf34678 oxlint: Export Oxlintrc type (#28132) (Sysix)
  • 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
  • d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
  • 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

🐛 Bug Fixes

  • 7f3c908 linter/eslint/array-callback-return: Check callbacks passed with extra arguments (#28133) (sarankumar)
  • 53be530 linter: Filter by type aware rules when looking up tsgolint rule severity (#28138) (NavpreetSSidhu)
  • e0f8937 react-compiler: Compile a try whose catch is unreachable instead of panicking (#28066) (Dunqing)
  • f5b625f linter/eslint/no-useless-concat: See through parenthesized expressions (#27984) (Rahul Kashyap)
  • 4629bb2 linter/jest/no-conditional-expect: Check function expression callbacks (#28055) (camc314)
  • 5c84098 semantic,linter: Report names with lone surrogates in enum...

[View full release notes]

Released by github-actions[bot] on 10/27/2026

oxfmt_v0.75.0

Compare Source

🐛 Bug Fixes

  • 5042019 formatter: Keep fill layout for array with comment after [ (#28170) (leaysgur)
  • 9d37ff6 formatter: Use position-based comment checks for concise arrays (#28169) (leaysgur)
  • 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#28103) (vidigoat)
  • 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#28168) (leaysgur)
  • a5314a1 formatter: Keep ; before in and instanceof class members (#28166) (leaysgur)
  • 3a56e7c formatter: Keep closing HTML comments at the start of a line (#28064) (Cameron)
  • 23d23d6 formatter_markdown: Honor range ignore inside directives (#28164) (leaysgur)
  • 5f1fd3d formatter: Measure width heuristics by display width (#28098) (leaysgur)
  • a5a52cf formatter: Keep parens around private in expressions (#28096) (leaysgur)
  • 999496e formatter: Measure a short key by its display width (#28026) (vidigoat)
  • 7e9aa44 formatter: Keep parens ar...

[View full release notes]

Released by github-actions[bot] on 10/27/2026

crates_v0.156.0

Compare Source

💥 BREAKING CHANGES

  • cf8296f ecmascript: [BREAKING] Fold surrogate strings with JSStr constants (#27098) (Dunqing)

🚀 Features

  • dd6cb2b minifier: Fold out-of-bounds string indices to void 0 (#28004) (Dunqing)

🐛 Bug Fixes

  • f4dac9e semantic: Separate hoisted vars from block type bindings (#27936) (limadog9)
  • 9ec6617 minifier: Keep brackets on negative and non-finite numeric keys (#27855) (Yunus Ozen)
  • 520a26e minifier: Keep the default in shorthand assignment targets (#28183) (waltu)
  • def47b8 react-compiler: Keep manual memoization as written when its dependencies can't be honoured (#28101) (Dunqing)
  • 704d8cf transformer_plugins: Keep the bare inject when references to it remain (#26965) (Bharadwaj Pendyala)
  • 6d7b372 minifier: Handle sequence exprs when folding if to expr statement (#27939) (Armano)
  • e3eca41 runtime: Align async iterator throw with Babel (#28059) (camc314)
  • af0258d parser: Parse source imports named type (#28062) (cam...

[View full release notes]

Released by github-actions[bot] on 10/27/2026

webpack/webpack (webpack)

5.106.2 -> 5.112.2

v5.112.2

Compare Source

Patch Changes

Released by github-actions[bot] on 10/23/2026

v5.112.1

Compare Source

Patch Changes

[View full release notes]

Released by github-actions[bot] on 10/22/2026

v5.112.0

Compare Source

Minor Changes

[View full release notes]

Released by github-actions[bot] on 10/15/2026

stacksjs/bumpx (@stacksjs/bumpx)

0.2.6 -> 0.2.30

v0.2.30

Compare Source

Released by github-actions[bot] on 10/29/2026

v0.2.9

Compare Source

Released by github-actions[bot] on 7/22/2026

v0.2.8

Compare Source

Released by github-actions[bot] on 7/22/2026

stacksjs/gitlint (@stacksjs/gitlint)

0.1.5 -> 0.1.8

v0.1.8

Compare Source

Released by github-actions[bot] on 8/19/2026

v0.1.7

Compare Source

Released by github-actions[bot] on 7/22/2026

v0.x.x

Compare Source

Released by github-actions[bot] on 5/8/2026

stacksjs/logsmith (@stacksjs/logsmith)

0.2.1 -> 0.2.14

v0.2.14

Compare Source

Compare changes

🐛 Bug Fixes

🧹 Chores

📄 Miscellaneous

Contributors

Released by github-actions[bot] on 10/8/2026

v0.2.13

Compare Source

Compare changes

🐛 Bug Fixes

🧹 Chores

Contributors

Released by github-actions[bot] on 10/7/2026

v0.2.12

Compare Source

Released by github-actions[bot] on 10/3/2026

stacksjs/bun-git-hooks (bun-git-hooks)

0.3.1 -> 0.3.3

v0.3.3

Compare Source

Released by github-actions[bot] on 8/19/2026

v0.3.2

Compare Source

Released by github-actions[bot] on 5/14/2026

stacksjs/bunfig (bunfig)

0.15.11 -> 0.15.21

v0.15.21

Compare Source

Released by github-actions[bot] on 10/18/2026

v0.15.20

Compare Source

Released by github-actions[bot] on 10/18/2026

v0.15.19

Compare Source

Released by github-actions[bot] on 8/19/2026

pickier/pickier (pickier)

0.1.28 -> 0.1.81

v0.1.81

Compare Source

Released by github-actions[bot] on 10/29/2026

v0.1.80

Compare Source

Released by github-actions[bot] on 10/29/2026

v0.1.79

Compare Source

Released by github-actions[bot] on 10/29/2026


📊 Package Statistics

  • @stacksjs/bunpress: 86,421 weekly downloads
  • @types/bun: 24,836,845 weekly downloads
  • buddy-bot: 29,567 weekly downloads
  • esbuild: 397,493,252 weekly downloads
  • oxc-parser: 88,346,152 weekly downloads
  • oxc-transform: 8,382,271 weekly downloads
  • webpack: 76,441,971 weekly downloads
  • @stacksjs/bumpx: 72,407 weekly downloads
  • @stacksjs/gitlint: 39,946 weekly downloads
  • @stacksjs/logsmith: 66,502 weekly downloads
  • bun-git-hooks: 48,233 weekly downloads
  • bunfig: 104,488 weekly downloads
  • pickier: 72,008 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

5 changed files on the files tab, with 0 review threads.

Sign in to comment on this pull request.