TCS-3: Bump the minor-and-patch group across 1 directory with 10 updates by dependabot[bot] · Pull Request #29 · aligent/bigcommerce-api

dependabot · 2026-02-01T00:12:15Z

Bumps the minor-and-patch group with 10 updates in the / directory:

Package	From	To
form-data	`4.0.4`	`4.0.5`
@aligent/ts-code-standards	`4.0.2`	`4.2.0`
@types/node	`22.18.13`	`22.19.7`
diff	`8.0.2`	`8.0.3`
eslint	`9.39.0`	`9.39.2`
prettier	`3.6.2`	`3.8.1`
rimraf	`6.1.0`	`6.1.2`
simple-git	`3.29.0`	`3.30.0`
tshy	`3.0.3`	`3.1.0`
typescript-eslint	`8.46.2`	`8.54.0`

Updates form-data from 4.0.4 to 4.0.5

Changelog

Sourced from form-data's changelog.

v4.0.5 - 2025-11-17

Commits

[Tests] Switch to newer v8 prediction library; enable node 24 testing 16e0076

[Dev Deps] update @ljharb/eslint-config, eslint 5822467

[Fix] set Symbol.toStringTag in the proper place 76d0dee

Commits

68ff7dd v4.0.5
5822467 [Dev Deps] update @ljharb/eslint-config, eslint
76d0dee [Fix] set Symbol.toStringTag in the proper place
16e0076 [Tests] Switch to newer v8 prediction library; enable node 24 testing
See full diff in compare view

Updates @aligent/ts-code-standards from 4.0.2 to 4.2.0

Updates @types/node from 22.18.13 to 22.19.7

Commits

See full diff in compare view

Updates diff from 8.0.2 to 8.0.3

Changelog

Sourced from diff's changelog.

8.0.3

#631 - fix support for using an Intl.Segmenter with diffWords. This has been almost completely broken since the feature was added in v6.0.0, since it would outright crash on any text that featured two consecutive newlines between a pair of words (a very common case).

#635 - small tweaks to tokenization behaviour of diffWords when used without an Intl.Segmenter. Specifically, the soft hyphen (U+00AD) is no longer considered to be a word break, and the multiplication and division signs (× and ÷) are now treated as punctuation instead of as letters / word characters.

#641 - the format of file headers in createPatch etc. patches can now be customised somewhat. It now takes a headerOptions option that can be used to disable the file headers entirely, or omit the Index: line and/or the underline. In particular, this was motivated by a request to make jsdiff patches compatible with react-diff-view, which they now are if produced with headerOptions: FILE_HEADERS_ONLY.

#647 and #649 - fix denial-of-service vulnerabilities in parsePatch whereby adversarial input could cause a memory-leaking infinite loop, typically crashing the calling process. Also fixed ReDOS vulnerabilities whereby adversarially-crafted patch headers could take cubic time to parse. Now, parsePatch should reliably take linear time. (Handling of headers that include the line break characters \r, \u2028, or \u2029 in non-trailing positions is also now more reasonable as side effect of the fix.)

Commits

13576bf 8.0.3 release (#652)
1179ccb Ignore .zed (#651)
949d6e2 Add test for the vuln I just fixed (#650)
15a1585 Fix the second denial-of-service vulnerability in parsePatch (#649)
de95cca Fix potentially cubic-time regex in parsePatch (#647)
b9aeede Allow more customisation of file headers in patches (#641)
43c716c Merge pull request #636 from kpdecker/dependabot/npm_and_yarn/node-forge-1.3.2
b8162c7 Bump node-forge from 1.3.1 to 1.3.2
ad6dc17 Fix some bugs in the diffWords regex (and errors & ambiguities in the comment...
3e1774a Fix a comment typo (#633)
Additional commits viewable in compare view

Updates eslint from 9.39.0 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

c43ce24 chore: package.json update for @eslint/js release (Jenkins)

4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

v9.39.1

Bug Fixes

650753e fix: Only pass node to JS lang visitor methods (#20283) (Nicholas C. Zakas)

Documentation

51b51f4 docs: add a section on when to use extends vs cascading (#20268) (Tanuj Kanti)

b44d426 docs: Update README (GitHub Actions Bot)

Chores

92db329 chore: update @eslint/js version to 9.39.1 (#20284) (Francesco Trotta)

c7ebefc chore: package.json update for @eslint/js release (Jenkins)

61778f6 chore: update eslint-config-eslint dependency @eslint/js to ^9.39.0 (#20275) (renovate[bot])

d9ca2fc ci: Add rangeStrategy to eslint group in renovate config (#20266) (唯然)

009e507 test: fix version tests for ESLint v10 (#20274) (Milos Djermanovic)

Commits

9278324 9.39.2
542266a Build: changelog update for 9.39.2
7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394)
c43ce24 chore: package.json update for @eslint/js release
5705833 fix: warn when eslint-env configuration comments are found (#20381)
506f154 build: add .scss files entry to knip (#20391)
4c9858e ci: add v9.x-dev branch (#20382)
e277281 9.39.1
4cdf397 Build: changelog update for 9.39.1
92db329 chore: update @eslint/js version to 9.39.1 (#20284)
Additional commits viewable in compare view

Updates prettier from 3.6.2 to 3.8.1

Release notes

Sourced from prettier's releases.

3.8.1

Include available printers in plugin type declarations (#18706 by @porada)

🔗 Changelog

3.8.0

Support Angular v21.1

diff

🔗 Release note "Prettier 3.8: Support for Angular v21.1"

3.7.4

What's Changed

Fix comment in union type gets duplicated by @fisker in prettier/prettier#18393

Fix unstable comment print in union type by @fisker in prettier/prettier#18395

Avoid quote around LWC interpolations by @kovsu in prettier/prettier#18383

🔗 Changelog

3.7.3

What's Changed

Fix prettier.getFileInfo() change that breaks VSCode extension by @fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

Fix string print when switching quotes by @fisker in prettier/prettier#18351

Preserve quote for embedded HTML attribute values by @kovsu in prettier/prettier#18352

Fix comment in empty type literal by @fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

Fix performance regression in doc printer (#18342 by @fisker)

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.8.1

diff

Include available `printers` in plugin type declarations (#18706 by `@porada`)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";
// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any
// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

3.8.0

diff

🔗 Release Notes

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)

// Input
type Foo = (/** comment */ a | b) | c;
</tr></table>

... (truncated)

Commits

90983f4 Release 3.8.1
57f702f Include available printers in plugin type declarations (#18706)
bece827 Revert change in release script
82a4ab2 Bump Prettier dependency to 3.8.0
5213ee4 Clean changelog_unreleased
f95ad0f Comment out finished steps
b2034e8 Fix release script
5824b15 Release 3.8.0
0433601 Add blog post for v3.8.0 (#18639)
b04d05b Remove lint step from release script (#18415)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.

Updates rimraf from 6.1.0 to 6.1.2

Commits

cd45498 6.1.2
fe9a962 glob@13
30dc9d8 6.1.1
9dffc3e update glob
b6462ea mock platform properly in test/index.ts
668309f ci: update typedoc action
See full diff in compare view

Updates simple-git from 3.29.0 to 3.30.0

Release notes

Sourced from simple-git's releases.

simple-git@3.30.0

Minor Changes

bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

Previously git.status would report the current branch name as No. Thank you to @MaddyGuthridge for identifying this issue.

Changelog

Sourced from simple-git's changelog.

3.30.0

Minor Changes

bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

Previously git.status would report the current branch name as No. Thank you to @MaddyGuthridge for identifying this issue.

Commits

See full diff in compare view

Updates tshy from 3.0.3 to 3.1.0

Changelog

Sourced from tshy's changelog.

3.1

Improve resilience against file locking when removing .tshy-build temp dir on Windows

Use the tsc binary from the project-local typescript dependency, if present. (But still do not require it.)

3.0

Drop support for nodes before 20

2.0

No longer create a source export automatically

Limit custom sourceDialects exports to only those that match the package type. For example, do not export source under a require condition if the package.json is "type": "module".

Treat composite and incremental the same, since composite implies incremental.

1.18

Add sourceDialects

1.17

Add module field if a top-level esm export exists for subpath ".", and tshy.module is not set to false.

1.16

Upgrade to TypeScript 5.5

1.15

Add liveDev option

Add "source" export condition

1.14

Do not fail if sourcemaps are not generated

Support glob patterns in tshy.exports

Add support for TypeScript 5.4

1.13

Take target from tsconfig.json if present, rather than hard-coding in the build.json config.

Find tsc where pnpm hides it.

... (truncated)

Commits

1fe6a7d 3.1.0
f8e595d prefer tsc from local typescript dep, if present
5e2d024 improve removal of build dir on windows
198a948 ci: update typedoc workflow
ef2d7de ci: update node versions
See full diff in compare view

Updates typescript-eslint from 8.46.2 to 8.54.0

Release notes

Sourced from typescript-eslint's releases.

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)

scope-manager: support ScopeManager#addGlobals (#11914)

typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)

eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)

scope-manager: fix catch clause scopes def.name (#11982)

scope-manager: prevent misidentification of "use strict" directives (#11995)

utils: handle missing FlatESLint and LegacyESLint (#11958)

❤️ Thank You

Brad Zacher @bradzacher

fnx @DMartens

Francesco Trotta

Josh Goldberg

MinJae @Ju-MINJAE

Minyeong Kim @minyeong981

overlookmotel

Yuya Yoshioka @YuyaYoshioka

김현수 @Kimsoo0119

You can read about our versioning strategy and releases on our website.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)

utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

Cameron

Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.54.0 (2026-01-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.1 (2026-01-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.0 (2026-01-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.52.0 (2026-01-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.0 (2025-12-15)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

... (truncated)

Commits

d423e57 chore(release): publish 8.54.0
9940e53 chore(release): publish 8.53.1
3021ede chore(release): publish 8.53.0
9ddd571 chore(release): publish 8.52.0
95c7c73 chore: update deps to latest minor/patch (#11921)
e4c57f5 chore(release): publish 8.51.0
d520b88 chore(release): publish 8.50.1
c62e858 chore(release): publish 8.50.0
864595a chore(release): publish 8.49.0
32b7e89 chore(deps): update dependency @vitest/eslint-plugin to v1.5.1 (#11816)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [form-data](https://github.com/form-data/form-data) | `4.0.4` | `4.0.5` | | @aligent/ts-code-standards | `4.0.2` | `4.2.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.18.13` | `22.19.7` | | [diff](https://github.com/kpdecker/jsdiff) | `8.0.2` | `8.0.3` | | [eslint](https://github.com/eslint/eslint) | `9.39.0` | `9.39.2` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.1` | | [rimraf](https://github.com/isaacs/rimraf) | `6.1.0` | `6.1.2` | | [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.29.0` | `3.30.0` | | [tshy](https://github.com/isaacs/tshy) | `3.0.3` | `3.1.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.46.2` | `8.54.0` | Updates `form-data` from 4.0.4 to 4.0.5 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.4...v4.0.5) Updates `@aligent/ts-code-standards` from 4.0.2 to 4.2.0 Updates `@types/node` from 22.18.13 to 22.19.7 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `diff` from 8.0.2 to 8.0.3 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v8.0.2...v8.0.3) Updates `eslint` from 9.39.0 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.0...v9.39.2) Updates `prettier` from 3.6.2 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.8.1) Updates `rimraf` from 6.1.0 to 6.1.2 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v6.1.0...v6.1.2) Updates `simple-git` from 3.29.0 to 3.30.0 - [Release notes](https://github.com/steveukx/git-js/releases) - [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md) - [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.30.0/simple-git) Updates `tshy` from 3.0.3 to 3.1.0 - [Changelog](https://github.com/isaacs/tshy/blob/main/CHANGELOG.md) - [Commits](isaacs/tshy@v3.0.3...v3.1.0) Updates `typescript-eslint` from 8.46.2 to 8.54.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@aligent/ts-code-standards" dependency-version: 4.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 22.19.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: diff dependency-version: 8.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: rimraf dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: simple-git dependency-version: 3.30.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tshy dependency-version: 3.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.54.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 1, 2026

dependabot bot requested a review from a team as a code owner February 1, 2026 00:12

dependabot bot requested a review from pasqualinibruno February 1, 2026 00:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

TCS-3: Bump the minor-and-patch group across 1 directory with 10 updates#29

TCS-3: Bump the minor-and-patch group across 1 directory with 10 updates#29
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-4cd0a810a9

dependabot bot commented on behalf of github Feb 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 1, 2026

v4.0.5 - 2025-11-17

Commits

8.0.3

v9.39.2

Bug Fixes

Build Related

Chores

v9.39.1

Bug Fixes

Documentation

Chores

3.8.1

3.8.0

3.7.4

What's Changed

3.7.3

What's Changed

3.7.2

What's Changed

3.7.1

3.7.0

3.8.1

Include available printers in plugin type declarations (#18706 by @​porada)

3.8.0

3.7.4

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

simple-git@3.30.0

Minor Changes

3.30.0

Minor Changes

3.1

3.0

2.0

1.18

1.17

1.16

1.15

1.14

1.13

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

❤️ Thank You

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

8.54.0 (2026-01-26)

8.53.1 (2026-01-19)

8.53.0 (2026-01-12)

8.52.0 (2026-01-05)

8.51.0 (2025-12-29)

8.50.1 (2025-12-22)

8.50.0 (2025-12-15)

8.49.0 (2025-12-08)

8.48.1 (2025-12-02)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Include available `printers` in plugin type declarations (#18706 by `@porada`)

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)