chore(deps): bump the production-dependencies group with 2 updates by dependabot[bot] · Pull Request #219 · e18e/cli

dependabot · 2026-05-11T06:26:02Z

Bumps the production-dependencies group with 2 updates: publint and semver.

Updates publint from 0.3.18 to 0.3.20

Release notes

publint@0.3.20

Patch Changes

Suggest adding engines.node when it is missing from detected Node.js packages (#226)

Loosen "breaking change" wording in lint messages (7bb3f4f)

publint@0.3.19

Patch Changes

Add NESTED_PACKAGE_JSON_FIELD_IGNORED to warn when published nested package.json files define "exports" or "imports", which Node.js ignores outside the package root. (#224)

Fix internal browser directory traversal logic (#224)

Changelog

Sourced from publint's changelog.

0.3.20

Patch Changes

Suggest adding engines.node when it is missing from detected Node.js packages (#226)

Loosen "breaking change" wording in lint messages (7bb3f4f)

0.3.19

Patch Changes

Add NESTED_PACKAGE_JSON_FIELD_IGNORED to warn when published nested package.json files define "exports" or "imports", which Node.js ignores outside the package root. (#224)

Fix internal browser directory traversal logic (#224)

Commits

05278fa Release packages (#227)
7bb3f4f Loosen breaking change wording
d92247a Suggest adding engines.node when missing (#226)
351d9ed Fix flaky windows CI
2412a19 Release packages (#225)
e2a3030 Warn nested package.json exports (#224)
a52bfc3 Disable color for CLI snapshot
9324624 Add simple CLI tests
4f906ab Update dependencies
06ea223 Update dependencies
See full diff in compare view

Updates semver from 7.7.4 to 7.8.0

Release notes

Sourced from semver's releases.

v7.8.0

7.8.0 (2026-05-08)

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)

37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)

937bc2c #860 template-oss-apply@5.0.0 (@owlstronaut)

6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

Changelog

Sourced from semver's changelog.

7.8.0 (2026-05-08)

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)

37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)

937bc2c #860 template-oss-apply@5.0.0 (@owlstronaut)

6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

Commits

efa4be6 chore: release 7.8.0 (#847)
9542e09 chore: template-oss-apply
937bc2c chore: template-oss-apply@5.0.0
3905343 fix: Warn when defaulting to --inc=patch in CLI
0d0a0a2 feat: Add truncate function (#855)
c368af6 docs: fix typos in documentation (#853)
6946fef chore: bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852)
37776c3 docs: fix BNF grammar to distinguish prerelease from build identifiers (#846)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates: [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) and [semver](https://github.com/npm/node-semver). Updates `publint` from 0.3.18 to 0.3.20 - [Release notes](https://github.com/publint/publint/releases) - [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md) - [Commits](https://github.com/publint/publint/commits/publint@0.3.20/packages/publint) Updates `semver` from 7.7.4 to 7.8.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.4...v7.8.0) --- updated-dependencies: - dependency-name: publint dependency-version: 0.3.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: semver dependency-version: 7.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-11T06:26:30Z

⚠️ Duplicate Dependencies (found: 26, threshold: 1)

📦 Package	📋 Versions
@ast-grep/napi	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5
@ast-grep/napi-darwin-arm64	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-darwin-arm64@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-darwin-arm64@0.40.5
@ast-grep/napi-darwin-x64	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-darwin-x64@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-darwin-x64@0.40.5
@ast-grep/napi-linux-arm64-gnu	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-linux-arm64-gnu@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-linux-arm64-gnu@0.40.5
@ast-grep/napi-linux-arm64-musl	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-linux-arm64-musl@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-linux-arm64-musl@0.40.5
@ast-grep/napi-linux-x64-gnu	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-linux-x64-gnu@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-linux-x64-gnu@0.40.5
@ast-grep/napi-linux-x64-musl	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-linux-x64-musl@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-linux-x64-musl@0.40.5
@ast-grep/napi-win32-arm64-msvc	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-win32-arm64-msvc@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-win32-arm64-msvc@0.40.5
@ast-grep/napi-win32-ia32-msvc	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-win32-ia32-msvc@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-win32-ia32-msvc@0.40.5
@ast-grep/napi-win32-x64-msvc	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 @ast-grep/napi@0.25.7 @ast-grep/napi-win32-x64-msvc@0.25.7 @e18e/cli@0.0.1 @e18e/web-features-codemods@0.2.0 @ast-grep/napi@0.40.5 @ast-grep/napi-win32-x64-msvc@0.40.5
js-tokens	2 versions @e18e/cli@0.0.1 @vitest/coverage-v8@4.1.5 ast-v8-to-istanbul@1.0.0 js-tokens@10.0.0 @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 @babel/core@7.27.4 @babel/code-frame@7.27.1 js-tokens@4.0.0
semver	3 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-cache-dir@2.1.0 make-dir@2.1.0 semver@5.7.2 @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 @babel/core@7.27.4 @babel/helper-compilation-targets@7.27.2 semver@6.3.1 @e18e/cli@0.0.1 semver@7.8.0
make-dir	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 @babel/register@7.27.1 find-cache-dir@2.1.0 make-dir@2.1.0 @e18e/cli@0.0.1 @vitest/coverage-v8@4.1.5 istanbul-lib-report@3.0.1 make-dir@4.0.0
eslint-visitor-keys	2 versions @e18e/cli@0.0.1 eslint@10.3.0 @eslint-community/eslint-utils@4.9.1 eslint-visitor-keys@3.4.3 @e18e/cli@0.0.1 eslint@10.3.0 eslint-visitor-keys@5.0.1
balanced-match	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... minimatch@3.1.2 brace-expansion@1.1.12 balanced-match@1.0.2 @e18e/cli@0.0.1 eslint@10.3.0 @eslint/config-array@0.23.5 minimatch@10.2.5 brace-expansion@5.0.5 balanced-match@4.0.4
brace-expansion	3 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 node-dir@0.1.17 minimatch@3.1.2 brace-expansion@1.1.12 @e18e/cli@0.0.1 eslint@10.3.0 minimatch@10.2.4 brace-expansion@5.0.4 @e18e/cli@0.0.1 eslint@10.3.0 @eslint/config-array@0.23.5 minimatch@10.2.5 brace-expansion@5.0.5
minimatch	3 versions @e18e/cli@0.0.1 eslint@10.3.0 minimatch@10.2.4 @e18e/cli@0.0.1 eslint@10.3.0 @eslint/config-array@0.23.5 minimatch@10.2.5 @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 node-dir@0.1.17 minimatch@3.1.2
@humanwhocodes/retry	2 versions @e18e/cli@0.0.1 eslint@10.3.0 @humanfs/node@0.16.6 @humanwhocodes/retry@0.3.1 @e18e/cli@0.0.1 eslint@10.3.0 @humanwhocodes/retry@0.4.3
undici	2 versions @e18e/cli@0.0.1 pkg-pr-new@0.0.70 @actions/core@3.0.1 @actions/http-client@4.0.1 undici@6.25.0 @e18e/cli@0.0.1 pkg-pr-new@0.0.70 @octokit/action@8.0.4 undici@7.25.0
ignore	2 versions @e18e/cli@0.0.1 eslint@10.3.0 ignore@5.3.2 @e18e/cli@0.0.1 pkg-pr-new@0.0.70 ignore@7.0.5
find-up	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-cache-dir@2.1.0 pkg-dir@3.0.0 find-up@3.0.0 @e18e/cli@0.0.1 eslint@10.3.0 find-up@5.0.0
locate-path	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... pkg-dir@3.0.0 find-up@3.0.0 locate-path@3.0.0 @e18e/cli@0.0.1 eslint@10.3.0 find-up@5.0.0 locate-path@6.0.0
picomatch	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 micromatch@4.0.8 picomatch@2.3.1 @e18e/cli@0.0.1 tinyglobby@0.2.16 picomatch@4.0.4
p-limit	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... locate-path@3.0.0 p-locate@3.0.0 p-limit@2.3.0 @e18e/cli@0.0.1 eslint@10.3.0 find-up@5.0.0 locate-path@6.0.0 p-locate@5.0.0 p-limit@3.1.0
p-locate	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-up@3.0.0 locate-path@3.0.0 p-locate@3.0.0 @e18e/cli@0.0.1 eslint@10.3.0 find-up@5.0.0 locate-path@6.0.0 p-locate@5.0.0
path-exists	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-up@3.0.0 locate-path@3.0.0 path-exists@3.0.0 @e18e/cli@0.0.1 eslint@10.3.0 find-up@5.0.0 path-exists@4.0.0

💡 To find out what depends on a specific package, run: npm ls example-package

pkg-pr-new · 2026-05-11T06:26:32Z

Open in StackBlitz

npm i https://pkg.pr.new/@e18e/cli@219

commit: b9c514c

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 11, 2026

gameroman approved these changes May 11, 2026

View reviewed changes

dreyfus92 approved these changes May 11, 2026

View reviewed changes

dreyfus92 merged commit 0a23469 into main May 11, 2026
6 checks passed

dreyfus92 deleted the dependabot/npm_and_yarn/production-dependencies-7eb062bfde branch May 11, 2026 07:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-dependencies group with 2 updates#219

chore(deps): bump the production-dependencies group with 2 updates#219
dreyfus92 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-7eb062bfde

dependabot Bot commented on behalf of github May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

pkg-pr-new Bot commented May 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 11, 2026

publint@0.3.20

Patch Changes

publint@0.3.19

Patch Changes

0.3.20

Patch Changes

0.3.19

Patch Changes

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

Uh oh!

github-actions Bot commented May 11, 2026

⚠️ Duplicate Dependencies (found: 26, threshold: 1)

Uh oh!

pkg-pr-new Bot commented May 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants