Skip to content

chore: consolidate dependabot dependency updates#557

Open
ramsessanchez wants to merge 28 commits intomainfrom
consolidate-dependabot-updates
Open

chore: consolidate dependabot dependency updates#557
ramsessanchez wants to merge 28 commits intomainfrom
consolidate-dependabot-updates

Conversation

@ramsessanchez
Copy link
Copy Markdown
Contributor

@ramsessanchez ramsessanchez commented Apr 10, 2026

Summary

Consolidates all 13 open Dependabot PRs into a single PR for easier review and merging.

npm dependency updates

  • @azure/core-auth: 1.10.0 → 1.10.1
  • @vitest/coverage-v8: ^3.0.1 → ^4.0.15
  • @vitest/ui: ^3.0.1 → ^4.0.15
  • vitest: ^3.0.1 → ^4.0.15
  • eslint-plugin-jsdoc: ^54.0.0 → ^62.0.0
  • fs-extra: 11.3.1 → 11.3.2
  • js-yaml: 4.1.0 → 4.1.1
  • @types/node: 24.9.1 → 24.10.1
  • typescript: 5.9.2 → 5.9.3
  • vite: 6.3.5 → 7.1.11
  • glob and transitive deps updated

GitHub Actions updates

  • actions/checkout: v5 → v6
  • actions/setup-node: v5 → v6
  • dependabot/fetch-metadata: 2.4.0 → 2.5.0

Supersedes

Closes #525, closes #528, closes #533, closes #541, closes #543, closes #548, closes #549, closes #550, closes #553, closes #554, closes #555, closes #551, closes #556

dependabot bot and others added 27 commits September 12, 2025 09:12
@dependabot
auto dependabot: bump @azure/core-auth from 1.10.0 to 1.10.1
eed84f5 
Bumps [@azure/core-auth](https://github.com/Azure/azure-sdk-for-js) from 1.10.0 to 1.10.1.
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/core-auth_1.10.0...@azure/core-auth_1.10.1)

---
updated-dependencies:
- dependency-name: "@azure/core-auth"
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump fs-extra from 11.3.1 to 11.3.2
e8b2e12 
Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) from 11.3.1 to 11.3.2.
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.1...11.3.2)

---
updated-dependencies:
- dependency-name: fs-extra
  dependency-version: 11.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump actions/setup-node from 5 to 6
cbad62b 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump vite from 6.3.5 to 7.1.11
941f7c2 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.3.5 to 7.1.11.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.1.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump typescript from 5.9.2 to 5.9.3
5a46493 
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.2 to 5.9.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.9.2...v5.9.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump @types/node from 24.9.1 to 24.10.1
309c3fc 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.9.1 to 24.10.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump js-yaml from 4.1.0 to 4.1.1
dea48e4 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump glob and @vitest/coverage-v8
b531994 
Removes [glob](https://github.com/isaacs/node-glob). It's no longer used after updating ancestor dependency [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8). These dependencies need to be updated together.


Removes `glob`

Updates `@vitest/coverage-v8` from 3.2.4 to 4.0.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.10/packages/coverage-v8)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump actions/checkout from 5 to 6
22abe27 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump the kiota group with 2 updates
a67694d 
Bumps the kiota group with 2 updates: [@microsoft/kiota-authentication-azure](https://github.com/microsoft/kiota-typescript) and [@microsoft/kiota-bundle](https://github.com/microsoft/kiota-typescript).


Updates `@microsoft/kiota-authentication-azure` from 1.0.0-preview.98 to 1.0.0-preview.99
- [Release notes](https://github.com/microsoft/kiota-typescript/releases)
- [Changelog](https://github.com/microsoft/kiota-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/kiota-typescript/compare/@microsoft/kiota-authentication-azure@1.0.0-preview.98...@microsoft/kiota-authentication-azure@1.0.0-preview.99)

Updates `@microsoft/kiota-bundle` from 1.0.0-preview.98 to 1.0.0-preview.99
- [Release notes](https://github.com/microsoft/kiota-typescript/releases)
- [Changelog](https://github.com/microsoft/kiota-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/kiota-typescript/compare/@microsoft/kiota-bundle@1.0.0-preview.98...@microsoft/kiota-bundle@1.0.0-preview.99)

---
updated-dependencies:
- dependency-name: "@microsoft/kiota-authentication-azure"
  dependency-version: 1.0.0-preview.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kiota
- dependency-name: "@microsoft/kiota-bundle"
  dependency-version: 1.0.0-preview.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kiota
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump the vitest group with 3 updates
f6d2920 
Bumps the vitest group with 3 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8), [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@vitest/coverage-v8` from 3.2.4 to 4.0.15
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/coverage-v8)

Updates `@vitest/ui` from 3.2.4 to 4.0.15
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/ui)

Updates `vitest` from 3.2.4 to 4.0.15
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: vitest
- dependency-name: "@vitest/ui"
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: vitest
- dependency-name: vitest
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: vitest
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump dependabot/fetch-metadata from 2.4.0 to 2.5.0
45ff228 
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v2.4.0...v2.5.0)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
auto dependabot: bump the eslint group across 1 directory with 5 updates
e788a57 
Bumps the eslint group with 4 updates in the / directory: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [eslint](https://github.com/eslint/eslint), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier).


Updates `@typescript-eslint/eslint-plugin` from 8.40.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.40.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/parser)

Updates `eslint` from 9.34.0 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.34.0...v9.39.2)

Updates `eslint-plugin-jsdoc` from 54.1.1 to 62.0.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v54.1.1...v62.0.0)

Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.5
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.5)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: eslint
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: eslint
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: eslint
...

Signed-off-by: dependabot[bot] <support@github.com>
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/azure/co…
fb480df 
…re-auth-1.10.1' into consolidate-dependabot-updates
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/fs-extra…
f6605ab 
…-11.3.2' into consolidate-dependabot-updates
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/typescri…
ed806e0 
…pt-5.9.3' into consolidate-dependabot-updates
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/js-yaml-…
767fdb3 
…4.1.1' into consolidate-dependabot-updates
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/types/no…
d02b318 
…de-24.10.1' into consolidate-dependabot-updates
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/vite-7.1…
1a6a702 
….11' into consolidate-dependabot-updates
@ramsessanchez
Merge origin/dependabot/npm_and_yarn/multi-4681aa0b5a (resolve lock c…
67360af 
…onflict)
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/kiota-c0…
ed8d4ae 
…c8aa029d' into consolidate-dependabot-updates
@ramsessanchez
Merge origin/dependabot/npm_and_yarn/vitest-09656b1389 (resolve packa…
1fd273a 
…ge.json conflict)
@ramsessanchez
Merge origin/dependabot/npm_and_yarn/eslint-f011defed1 (resolve confl…
b478b55 
…icts)
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/github_actions/action…
9d2d655 
…s/setup-node-6' into consolidate-dependabot-updates
@ramsessanchez
Merge origin/dependabot/github_actions/actions/checkout-6 (resolve co…
de582f0 
…nflicts)
@ramsessanchez
Merge remote-tracking branch 'origin/dependabot/github_actions/depend…
09a4f2c 
…abot/fetch-metadata-2.5.0' into consolidate-dependabot-updates
@ramsessanchez
chore: regenerate package-lock.json after consolidating dependencies
93b46f1 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@ramsessanchez ramsessanchez requested a review from a team as a code owner April 10, 2026 22:42
@ramsessanchez
fix: use relative import path for Vitest 4.x compatibility
c61d26e 
Vitest 4.x no longer implicitly resolves tsconfig baseUrl path mappings.
Changed bare 'src' import to relative '../../src' in Version test.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@ramsessanchez
Copy link
Copy Markdown
Contributor Author

ramsessanchez commented Apr 11, 2026

CI Failure: Node 18.x incompatibility with Vite 7 / Vitest 4

The \�uild (20.x)\ job is failing because Vite 7 (via Rolldown) requires
ode:util.styleText, which was introduced in Node.js 20.12.0. The \�uild (18.x)\ job will also fail for the same reason.

Node.js 18.x reached End of Life on April 30, 2025 and is no longer receiving security updates. The CI matrix in .github/workflows/build_test_validate.yml\ should be updated to drop 18.x:

\\yaml
node-version: [20.x, 22.x] # Node 18.x reached EOL April 2025
\\

This is a prerequisite for the Vite 7 + Vitest 4 upgrades included in this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ramsessanchez