Update npm-run-all2 8.0.4 → 9.0.3 (major)

[depfu]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ npm-run-all2 (8.0.4 → 9.0.3) · Repo · Changelog

Release Notes

9.0.3

Merged

• Upgrade: Bump ansi-styles from 6.2.3 to 7.0.0 #244
• Upgrade: Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 #243
• Upgrade: Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 #242
• Upgrade: Bump actions/setup-node from 6 to 7 #241
• chore: update schema version in .knip.jsonc to v6 #237
• Upgrade: Bump @types/node from 25.9.4 to 26.0.0 #239
• Upgrade: Bump actions/checkout from 6 to 7 #238

Commits

• Harden GitHub Actions workflows 7f5fca6
• Remove obsolete shell-quote types d970668

9.0.2

Merged

• fix: update Node.js version requirements #232
• Upgrade: Bump codecov/codecov-action from 6 to 7 #233
• fix: bump shell-quote to ^1.8.4 #236
• Upgrade: Bump pidtree from 0.6.1 to 1.0.0 #234

9.0.1

Merged

• fix: update help.js to include --node-run option details #230

9.0.0

Breaking changes

• ESM only
• engines.node: "^22.22.2 || ^24.15.0 || >=26.0.0",
• Empty glob patters no longer throw an error #226
• Fully type checked with published types

New features

• node --run mode: #225
• More colors: #222

Merged

• Add more colors based on terminal capabilities #222
• Upgrade: Bump releasearoni from 0.1.14 to 0.2.0 #227
• Breaking change: Glob patterns that match no tasks now succeed silently #226
• Add -x / --node-run flag to bypass the package manager #225
• Remove redundant build call from prepublishOnly #224
• Whitelist files to include in npm package #199
• Fix jsdoc types and use tsc for type safety checks #220
• Upgrade: Bump codecov/codecov-action from 5 to 6 #215
• Update SECURITY.md with new reporting process #201
• Upgrade: Bump actions/checkout from 5 to 6 #200
• Upgrade: Bump actions/setup-node from 5 to 6 #196
• Upgrade: Bump github/codeql-action from 3 to 4 #195
• Upgrade: Bump actions/setup-node from 4 to 5 #192
• Upgrade: Bump actions/checkout from 4 to 5 #191
• chore: fix typo in test #185
• refactor: use optional chain for better readability #184

Fixed

• Breaking change: Glob patterns that match no tasks now succeed silently (#226) #149
• Add -x / --node-run flag to use node --run instead of the package manager #155
• docs: clarify glob pattern execution order guarantee #167

Commits

• Add node-run smoke tests f4ac667
• Implement releasaroni for the release process 6a2baff
• Use shared publishing action b6a39a6

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[fatadel]

Needs node upgrade.