Skip to content

chore(deps): bump brace-expansion, eslint and gts - #328

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-87d146def8
Open

chore(deps): bump brace-expansion, eslint and gts#328
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-87d146def8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion to 5.0.7 and updates ancestor dependencies brace-expansion, eslint and gts. These dependencies need to be updated together.

Updates brace-expansion from 5.0.4 to 5.0.7

Commits

Updates eslint from 8.57.0 to 9.39.5

Release notes

Sourced from eslint's releases.

v9.39.5

Bug Fixes

Documentation

  • 74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
  • eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

v9.39.4

Bug Fixes

  • f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
  • a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
  • 234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
  • b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

  • 4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

  • b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
  • 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
  • 1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

v9.39.3

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

  • 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#20529) (Milos Djermanovic)
  • 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
  • af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

  • 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

... (truncated)

Commits

Updates gts from 5.3.1 to 7.0.0

Release notes

Sourced from gts's releases.

v7.0.0

7.0.0 (2025-12-04)

⚠ BREAKING CHANGES

  • eslint use new config format (plus update deps) (#935)

Features

  • eslint use new config format (plus update deps) (#935) (625836a)

v6.0.2

6.0.2 (2024-10-25)

Bug Fixes

v6.0.1

6.0.1 (2024-10-22)

Bug Fixes

  • Allow typescript v5+ as a peer dependency (#909) (996aaec)

v6.0.0

6.0.0 (2024-10-10)

⚠ BREAKING CHANGES

  • Update '.prettierrc.json' to include trailingComma: "all" to match internal Google config (#822)
  • Update typescript and other dependencies (#902)
  • Set no-floating-promises to error (#901)
  • Set composite: true in tsconfig-google.json (#899)
  • Set stripInternal in tsconfig-google.json (#900)
  • Support Node 18+ (#896)

Features

  • Set composite: true in tsconfig-google.json (#899) (71972dc)
  • Set no-floating-promises to error (#901) (1d28f92)
  • Set stripInternal in tsconfig-google.json (#900) (9b37243)
  • Support Node 18+ (#896) (f011fa3)
  • Update '.prettierrc.json' to include trailingComma: "all" to match internal Google config (#822) (27d0d93)
  • Update typescript and other dependencies (#902) (1c18b3a)

... (truncated)

Changelog

Sourced from gts's changelog.

7.0.0 (2025-12-04)

⚠ BREAKING CHANGES

  • eslint use new config format (plus update deps) (#935)

Features

  • eslint use new config format (plus update deps) (#935) (625836a)

6.0.2 (2024-10-25)

Bug Fixes

6.0.1 (2024-10-22)

Bug Fixes

  • Allow typescript v5+ as a peer dependency (#909) (996aaec)

6.0.0 (2024-10-10)

⚠ BREAKING CHANGES

  • Update '.prettierrc.json' to include trailingComma: "all" to match internal Google config (#822)
  • Update typescript and other dependencies (#902)
  • Set no-floating-promises to error (#901)
  • Set composite: true in tsconfig-google.json (#899)
  • Set stripInternal in tsconfig-google.json (#900)
  • Support Node 18+ (#896)

Features

  • Set composite: true in tsconfig-google.json (#899) (71972dc)
  • Set no-floating-promises to error (#901) (1d28f92)
  • Set stripInternal in tsconfig-google.json (#900) (9b37243)
  • Support Node 18+ (#896) (f011fa3)
  • Update '.prettierrc.json' to include trailingComma: "all" to match internal Google config (#822) (27d0d93)
  • Update typescript and other dependencies (#902) (1c18b3a)

Bug Fixes

  • deps: update dependency eslint to v8.57.1 (#903) (23da8ef)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.7 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [eslint](https://github.com/eslint/eslint) and [gts](https://github.com/google/gts). These dependencies need to be updated together.


Updates `brace-expansion` from 5.0.4 to 5.0.7
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v5.0.4...v5.0.7)

Updates `eslint` from 8.57.0 to 9.39.5
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.0...v9.39.5)

Updates `gts` from 5.3.1 to 7.0.0
- [Release notes](https://github.com/google/gts/releases)
- [Changelog](https://github.com/google/gts/blob/main/CHANGELOG.md)
- [Commits](google/gts@v5.3.1...v7.0.0)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.7
  dependency-type: indirect
- dependency-name: eslint
  dependency-version: 9.39.5
  dependency-type: indirect
- dependency-name: gts
  dependency-version: 7.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants