chore: Bump the "dependencies" group with 3 updates across multiple ecosystems by dependabot[bot] · Pull Request #64 · OrcaCD/docs

dependabot · 2026-07-19T06:07:05Z

Bumps the dependencies group with 1 update: pnpm/pnpm.

Updates pnpm/pnpm from 11.10.0 to 11.13.0

Bumps the dependencies group with 5 updates:

Package	From	To
github/codeql-action/init	`4.37.0`	`4.37.1`
github/codeql-action/analyze	`4.37.0`	`4.37.1`
actions/attest	`4.1.1`	`4.2.0`
actions/setup-node	`6.4.0`	`7.0.0`
zizmorcore/zizmor-action	`0.5.7`	`0.6.0`

Updates github/codeql-action/init from 4.37.0 to 4.37.1

Release notes

Sourced from github/codeql-action/init's releases.

v4.37.1

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956

Update default CodeQL bundle version to 2.26.1. #4019

Changelog

Sourced from github/codeql-action/init's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.37.1 - 16 Jul 2026

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956

Update default CodeQL bundle version to 2.26.1. #4019

4.37.0 - 08 Jul 2026

Update default CodeQL bundle version to 2.26.0. #3995

In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

4.36.3 - 01 Jul 2026

No user facing changes.

4.36.2 - 04 Jun 2026

Cache CodeQL CLI version information across Actions steps. #3943

Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937

Update default CodeQL bundle version to 2.25.6. #3948

4.36.1 - 02 Jun 2026

No user facing changes.

4.36.0 - 22 May 2026

Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894

Add support for SHA-256 Git object IDs. #3893

Update default CodeQL bundle version to 2.25.5. #3926

4.35.5 - 15 May 2026

We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #3899

For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #3791

If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #3892

Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #3880

4.35.4 - 07 May 2026

Update default CodeQL bundle version to 2.25.4. #3881

4.35.3 - 01 May 2026

... (truncated)

Commits

7188fc3 Merge pull request #4020 from github/update-v4.37.1-9e7c07009
c8b5f69 Update changelog for v4.37.1
9e7c070 Merge pull request #4014 from github/mbg/explicit-remote-prefix
3492b7e Change REMOTE_PATH_PREFIX to remote=
3654baa Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix
2d682ac Merge pull request #4017 from github/dependabot/github_actions/dot-github/wor...
23f6a50 Merge pull request #4009 from github/mbg/action-state/additions
1ee3c75 Merge pull request #4018 from github/dependabot/github_actions/dot-github/wor...
e053684 Merge pull request #4015 from github/dependabot/npm_and_yarn/npm-minor-fd2e83...
6803c56 Merge pull request #4019 from github/update-bundle/codeql-bundle-v2.26.1
Additional commits viewable in compare view

Updates github/codeql-action/analyze from 4.37.0 to 4.37.1

Release notes

Sourced from github/codeql-action/analyze's releases.

v4.37.1

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956

Update default CodeQL bundle version to 2.26.1. #4019

Changelog

Sourced from github/codeql-action/analyze's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.37.1 - 16 Jul 2026

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956

Update default CodeQL bundle version to 2.26.1. #4019

4.37.0 - 08 Jul 2026

Update default CodeQL bundle version to 2.26.0. #3995

In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

4.36.3 - 01 Jul 2026

No user facing changes.

4.36.2 - 04 Jun 2026

Cache CodeQL CLI version information across Actions steps. #3943

Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937

Update default CodeQL bundle version to 2.25.6. #3948

4.36.1 - 02 Jun 2026

No user facing changes.

4.36.0 - 22 May 2026

Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894

Add support for SHA-256 Git object IDs. #3893

Update default CodeQL bundle version to 2.25.5. #3926

4.35.5 - 15 May 2026

We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #3899

For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #3791

If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #3892

Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #3880

4.35.4 - 07 May 2026

Update default CodeQL bundle version to 2.25.4. #3881

4.35.3 - 01 May 2026

... (truncated)

Commits

7188fc3 Merge pull request #4020 from github/update-v4.37.1-9e7c07009
c8b5f69 Update changelog for v4.37.1
9e7c070 Merge pull request #4014 from github/mbg/explicit-remote-prefix
3492b7e Change REMOTE_PATH_PREFIX to remote=
3654baa Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix
2d682ac Merge pull request #4017 from github/dependabot/github_actions/dot-github/wor...
23f6a50 Merge pull request #4009 from github/mbg/action-state/additions
1ee3c75 Merge pull request #4018 from github/dependabot/github_actions/dot-github/wor...
e053684 Merge pull request #4015 from github/dependabot/npm_and_yarn/npm-minor-fd2e83...
6803c56 Merge pull request #4019 from github/update-bundle/codeql-bundle-v2.26.1
Additional commits viewable in compare view

Updates actions/attest from 4.1.1 to 4.2.0

Release notes

Sourced from actions/attest's releases.

v4.2.0

What's Changed

fix: split checksums on any line ending so LF files parse on Windows by @bdehamer in actions/attest#443

Bump @actions/glob from 0.6.1 to 0.7.0 in the npm-production group across 1 directory by @dependabot[bot] in actions/attest#435

Bump csv-parse from 6.2.1 to 7.0.1 by @dependabot[bot] in actions/attest#437

Read subjects from GITHUB_ARTIFACTS_LIST by @bdehamer in actions/attest#447

Support SHA-2 subject digests by @bdehamer in actions/attest#446

Full Changelog: actions/attest@v4.1.1...v4.2.0

Commits

f7c74d2 feat: support SHA-2 subject digests (#446)
88633d1 Bump js-yaml from 4.2.0 to 5.2.1 (#452)
5dff824 Bump the actions-minor group with 3 updates (#453)
e67e539 Bump the npm-development group across 1 directory with 2 updates (#448)
95f6155 Bump @types/node from 25.9.2 to 26.1.1 (#449)
b644c72 Read subjects from GITHUB_ARTIFACTS_LIST (#447)
7d3af28 Bump csv-parse from 6.2.1 to 7.0.1 (#437)
52cbb4d Bump @actions/glob from 0.6.1 to 0.7.0 in the npm-production group across 1 d...
a5ce33e ci: download rebuilt dist/ artifact outside the checkout workspace (#445)
4c65731 ci: auto-rebuild dist/ for Dependabot production bumps (#444)
Additional commits viewable in compare view

Updates actions/setup-node from 6.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in actions/setup-node#1577

Migrate to ESM and upgrade dependencies by @gowridurgad in actions/setup-node#1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in actions/setup-node#1558

Only use mirrorToken in getManifest if it's provided by @deiga in actions/setup-node#1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in actions/setup-node#1536

docs: Update restore-only cache documentation by @priya-kinthali in actions/setup-node#1550

docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in actions/setup-node#1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-node#1569

New Contributors

@chiranjib-swain made their first contribution in actions/setup-node#1536

@deiga made their first contribution in actions/setup-node#1548

@jasongin made their first contribution in actions/setup-node#1569

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in actions/setup-node#1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits

8207627 Migrate to ESM and upgrade dependencies (#1574)
04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
30eb73b Resolve high-severity audit issues
4e1a87a Update dist
360237f Strict equality
4f8aac5 Bump @actions/cache to 5.1.0, log cache write denied
f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.5.7 to 0.6.0

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.0

zizmor 1.27.0 is now the default version used by the action.

What's Changed

Fold Docker image pull output into a collapsed Actions log group by @woodruffw with @Copilot in zizmorcore/zizmor-action#132

Readme: document missing inputs by @staabm in zizmorcore/zizmor-action#130

ci: block version sync workflow on forks by @shaanmajid in zizmorcore/zizmor-action#129

Sync zizmor versions by @github-actions[bot] in zizmorcore/zizmor-action#137

Add collect input by @woodruffw in zizmorcore/zizmor-action#139

New Contributors

@woodruffw with @Copilot made their first contribution in zizmorcore/zizmor-action#132

@staabm made their first contribution in zizmorcore/zizmor-action#130

@shaanmajid made their first contribution in zizmorcore/zizmor-action#129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

Commits

6599ee8 Add collect input (#139)
bec05c8 Sync zizmor versions (#137)
cf59549 Add issue templates (#135)
f72bf17 chore(deps): bump github/codeql-action/upload-sarif (#134)
b2a6fac ci: block version sync workflow on forks (#129)
2d88f44 Readme: document missing inputs (#130)
d81e276 Fold Docker image pull output into a collapsed Actions log group (#132)
8c13c53 chore(deps): bump the github-actions group with 2 updates (#133)
2f8e9c6 README: bump versions (#128)
See full diff in compare view

Bumps the dependencies group with 10 updates:

Package	From	To
@tanstack/react-router	`1.170.17`	`1.170.18`
@tanstack/react-start	`1.168.27`	`1.168.28`
@tanstack/start-static-server-functions	`1.167.18`	`1.167.19`
fumadocs-core	`16.11.1`	`16.11.5`
fumadocs-mdx	`15.1.0`	`15.2.0`
fumadocs-ui	`16.11.1`	`16.11.5`
lucide-react	`1.23.0`	`1.24.0`
lucide-static	`1.23.0`	`1.24.0`
oxfmt	`0.58.0`	`0.59.0`
oxlint	`1.73.0`	`1.74.0`

Updates @tanstack/react-router from 1.170.17 to 1.170.18

Release notes

Sourced from @tanstack/react-router's releases.

@tanstack/react-router@1.170.18

Patch Changes

Updated dependencies [e2dd204]:

@tanstack/router-core@1.171.15

Changelog

Sourced from @tanstack/react-router's changelog.

1.170.18

Patch Changes

Updated dependencies [e2dd204]:

@tanstack/router-core@1.171.15

Commits

58c005f ci: Version Packages (#7811)
See full diff in compare view

Updates @tanstack/react-start from 1.168.27 to 1.168.28

Release notes

Sourced from @tanstack/react-start's releases.

@tanstack/react-start@1.168.28

Patch Changes

Updated dependencies []:

@tanstack/react-router@1.170.18

@tanstack/react-start-client@1.168.16

@tanstack/react-start-rsc@0.1.27

@tanstack/react-start-server@1.167.22

@tanstack/start-client-core@1.170.14

@tanstack/start-plugin-core@1.171.20

@tanstack/start-server-core@1.169.17

Changelog

Sourced from @tanstack/react-start's changelog.

1.168.28

Patch Changes

Updated dependencies []:

@tanstack/react-router@1.170.18

@tanstack/react-start-client@1.168.16

@tanstack/react-start-rsc@0.1.27

@tanstack/react-start-server@1.167.22

@tanstack/start-client-core@1.170.14

@tanstack/start-plugin-core@1.171.20

@tanstack/start-server-core@1.169.17

Commits

58c005f ci: Version Packages (#7811)
See full diff in compare view

Updates @tanstack/start-static-server-functions from 1.167.18 to 1.167.19

Release notes

Sourced from @tanstack/start-static-server-functions's releases.

@tanstack/start-static-server-functions@1.167.19

Patch Changes

Updated dependencies []:

@tanstack/start-client-core@1.170.14

@tanstack/react-start@1.168.28

@tanstack/solid-start@1.168.28

Changelog

Sourced from @tanstack/start-static-server-functions's changelog.

1.167.19

Patch Changes

Updated dependencies []:

@tanstack/start-client-core@1.170.14

@tanstack/react-start@1.168.28

@tanstack/solid-start@1.168.28

Commits

58c005f ci: Version Packages (#7811)
See full diff in compare view

Updates fumadocs-core from 16.11.1 to 16.11.5

Commits

52af6cf Merge pull request #3416 from fuma-nama/tegami/version-packages
efc9d18 chore(mdx): bake passthroughs into runtime module
368a92e feat(mdx): macro collection-level last modified time
13dfdbc feat(mdx): no longer require include for macros
6362332 test macro API on vite
126a74d fix(ui): fix accessibility of sidebar components
430254c fix(mdx): fix file check
1862822 feat(mdx): redesign macro infrastructure
d3710a9 fix(openapi): fix invalid generated request
ba78b01 fix(ui): correct prop types
Additional commits viewable in compare view

Updates fumadocs-mdx from 15.1.0 to 15.2.0

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.2.0

Support Macro API

Use fumadocs-mdx/macro to define collections, and enable the macro-style API from bundler plugin (e.g. createMDX) using the include option.

fumadocs-mdx@15.1.1

Migrate from js-yaml to yaml

Commits

52af6cf Merge pull request #3416 from fuma-nama/tegami/version-packages
efc9d18 chore(mdx): bake passthroughs into runtime module
368a92e feat(mdx): macro collection-level last modified time
13dfdbc feat(mdx): no longer require include for macros
6362332 test macro API on vite
126a74d fix(ui): fix accessibility of sidebar components
430254c fix(mdx): fix file check
1862822 feat(mdx): redesign macro infrastructure
d3710a9 fix(openapi): fix invalid generated request
ba78b01 fix(ui): correct prop types
Additional commits viewable in compare view

Updates fumadocs-ui from 16.11.1 to 16.11.5

Commits

52af6cf Merge pull request #3416 from fuma-nama/tegami/version-packages
efc9d18 chore(mdx): bake passthroughs into runtime module
368a92e feat(mdx): macro collection-level last modified time
13dfdbc feat(mdx): no longer require include for macros
6362332 test macro API on vite
126a74d fix(ui): fix accessibility of sidebar components
430254c fix(mdx): fix file check
1862822 feat(mdx): redesign macro infrastructure
d3710a9 fix(openapi): fix invalid generated request
ba78b01 fix(ui): correct prop types
Additional commits viewable in compare view

Updates lucide-react from 1.23.0 to 1.24.0

Release notes

Sourced from lucide-react's releases.

Version 1.24.0

What's Changed

fix(scripts): fix typo in renameIcon.function.mts by @karsa-mistmere in lucide-icons/lucide#4514

chore(icons): remove toBeRemovedInVersion metadata and make it optional in schema by @ericfennis with @Copilot in lucide-icons/lucide#4513

feat(site): Add merch link by @ericfennis in lucide-icons/lucide#4524

fix(packages/angular): move child rendering logic to template from effect by @karsa-mistmere in lucide-icons/lucide#4519

docs(site): list @gyeonghokim/lucide-lit as third-party package by @GyeongHoKim in lucide-icons/lucide#4421

fix(icons): changed option icon by @jamiemlaw in lucide-icons/lucide#4326

fix(lucide-react-native): restore the icons entry point in the JS bundles by @pvinis in lucide-icons/lucide#4528

fix(vue): support kebab-case icon-node prop on Icon component by @Sagargupta16 in lucide-icons/lucide#4512

fix(lucide-react-native): Add icon exports property to the package.json file by @ericfennis in lucide-icons/lucide#4522

fix(icons): centered the dot icon by @cnlancehu in lucide-icons/lucide#4492

feat(icons): added circle-euro-sign icon by @Guido3000 in lucide-icons/lucide#4353

feat(icons): added server-plus icon by @Turboman3000 in lucide-icons/lucide#4232

New Contributors

@ericfennis with @Copilot made their first contribution in lucide-icons/lucide#4513

@GyeongHoKim made their first contribution in lucide-icons/lucide#4421

@pvinis made their first contribution in lucide-icons/lucide#4528

@Sagargupta16 made their first contribution in lucide-icons/lucide#4512

@Guido3000 made their first contribution in lucide-icons/lucide#4353

@Turboman3000 made their first contribution in lucide-icons/lucide#4232

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Commits

See full diff in compare view

Updates lucide-static from 1.23.0 to 1.24.0

Release notes

Sourced from lucide-static's releases.

Version 1.24.0

What's Changed

fix(scripts): fix typo in renameIcon.function.mts by @karsa-mistmere in lucide-icons/lucide#4514

chore(icons): remove toBeRemovedInVersion metadata and make it optional in schema by @ericfennis with @Copilot in lucide-icons/lucide#4513

feat(site): Add merch link by @ericfennis in lucide-icons/lucide#4524

fix(packages/angular): move child rendering logic to template from effect by @karsa-mistmere in lucide-icons/lucide#4519

docs(site): list @gyeonghokim/lucide-lit as third-party package by @GyeongHoKim in lucide-icons/lucide#4421

fix(icons): changed option icon by @jamiemlaw in lucide-icons/lucide#4326

fix(lucide-react-native): restore the icons entry point in the JS bundles by @pvinis in lucide-icons/lucide#4528

fix(vue): support kebab-case icon-node prop on Icon component by @Sagargupta16 in lucide-icons/lucide#4512

fix(lucide-react-native): Add icon exports property to the package.json file by @ericfennis in lucide-icons/lucide#4522

fix(icons): centered the dot icon by @cnlancehu in lucide-icons/lucide#4492

feat(icons): added circle-euro-sign icon by @Guido3000 in lucide-icons/lucide#4353

feat(icons): added server-plus icon by @Turboman3000 in lucide-icons/lucide#4232

New Contributors

@ericfennis with @Copilot made their first contribution in lucide-icons/lucide#4513

@GyeongHoKim made their first contribution in lucide-icons/lucide#4421

@pvinis made their first contribution in lucide-icons/lucide#4528

@Sagargupta16 made their first contribution in lucide-icons/lucide#4512

@Guido3000 made their first contribution in lucide-icons/lucide#4353

@Turboman3000 made their first contribution in lucide-icons/lucide#4232

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Commits

b5b5d95 feat(icons): added server-plus icon (#4232)
7b589f2 feat(icons): added circle-euro-sign icon (#4353)
2d36863 feat(icons): center the dot icon (#4492)
7291cbc fix(lucide-react-native): Add icon exports property to the package.json file ...
4c663b9 fix(vue): support kebab-case icon-node prop on Icon component (#4512)
63369b1 fix(lucide-react-native): restore the icons entry point in the JS bundles (#4...
f07465f Updated icons/option.svg (#4326)
60d583c docs(site): list @gyeonghokim/lucide-lit as third-party package (#4421)
5828ecb fix(packages/angular): move child rendering logic to template from effect (#4...
031b226 Add merch link (#4524)
Additional commits viewable in compare view

Updates oxfmt from 0.58.0 to 0.59.0

Changelog

Sourced from oxfmt's changelog.

[0.59.0] - 2026-07-13

🐛 Bug Fixes

415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)

[0.55.0] - 2026-06-15

🚀 Features

9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

[0.54.0] - 2026-06-08

📚 Documentation

dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)

f88961a oxfmt: Annotate each config option with supported languages (#22953) (leaysgur)

[0.52.0] - 2026-05-26

🚀 Features

16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#22454) (leaysgur)

[0.50.0] - 2026-05-15

🐛 Bug Fixes

43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

[0.49.0] - 2026-05-11

🚀 Features

6e8e818 oxfmt: Experimental .svelte support (#21700) (leaysgur)

[0.45.0] - 2026-04-13

🐛 Bug Fixes

50c389b oxfmt: Support .editorconfig quote_type (#20989) (leaysgur)

[0.44.0] - 2026-04-06

🐛 Bug Fixes

dd2df87 npm: Export package.json for oxlint and oxfmt (#20784) (kazuya kawaguchi)

4216380 oxfmt: Support .editorconfig tab_width fallback (#20988) (leaysgur)

... (truncated)

Commits

2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
415fe1e fix(oxfmt): error on ignorePatterns that cannot match files outside the confi...
See full diff in compare view

Updates oxlint from 1.73.0 to 1.74.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)

2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)

bc731ff...
Description has been truncated

Bumps the dependencies group with 1 update: pnpm/pnpm. Updates `pnpm/pnpm` from 11.10.0 to 11.13.0 chore: Bump the dependencies group with 5 updates Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.0` | `4.37.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.0` | `4.37.1` | | [actions/attest](https://github.com/actions/attest) | `4.1.1` | `4.2.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.7` | `0.6.0` | Updates `github/codeql-action/init` from 4.37.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@99df26d...7188fc3) Updates `github/codeql-action/analyze` from 4.37.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@99df26d...7188fc3) Updates `actions/attest` from 4.1.1 to 4.2.0 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](actions/attest@a1948c3...f7c74d2) Updates `actions/setup-node` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@48b55a0...8207627) Updates `zizmorcore/zizmor-action` from 0.5.7 to 0.6.0 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@192e21d...6599ee8) chore: Bump the dependencies group with 10 updates Bumps the dependencies group with 10 updates: | Package | From | To | | --- | --- | --- | | [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.17` | `1.170.18` | | [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start) | `1.168.27` | `1.168.28` | | [@tanstack/start-static-server-functions](https://github.com/TanStack/router/tree/HEAD/packages/start-static-server-functions) | `1.167.18` | `1.167.19` | | [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.11.1` | `16.11.5` | | [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.1.0` | `15.2.0` | | [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.11.1` | `16.11.5` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.23.0` | `1.24.0` | | [lucide-static](https://github.com/lucide-icons/lucide) | `1.23.0` | `1.24.0` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.58.0` | `0.59.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.73.0` | `1.74.0` | Updates `@tanstack/react-router` from 1.170.17 to 1.170.18 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.18/packages/react-router) Updates `@tanstack/react-start` from 1.168.27 to 1.168.28 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-start@1.168.28/packages/react-start) Updates `@tanstack/start-static-server-functions` from 1.167.18 to 1.167.19 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/start-static-server-functions/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/start-static-server-functions@1.167.19/packages/start-static-server-functions) Updates `fumadocs-core` from 16.11.1 to 16.11.5 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.1...fumadocs@16.11.5) Updates `fumadocs-mdx` from 15.1.0 to 15.2.0 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.1.0...fumadocs-mdx@15.2.0) Updates `fumadocs-ui` from 16.11.1 to 16.11.5 - [Release notes](https://github.com/fuma-nama/fumadocs/releases) - [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.1...fumadocs@16.11.5) Updates `lucide-react` from 1.23.0 to 1.24.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.24.0/packages/lucide-react) Updates `lucide-static` from 1.23.0 to 1.24.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](lucide-icons/lucide@1.23.0...1.24.0) Updates `oxfmt` from 0.58.0 to 0.59.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.59.0/npm/oxfmt) Updates `oxlint` from 1.73.0 to 1.74.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.74.0/npm/oxlint) --- updated-dependencies: - dependency-name: pnpm/pnpm dependency-version: 11.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github/codeql-action/init dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/analyze dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@tanstack/react-router" dependency-version: 1.170.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@tanstack/react-start" dependency-version: 1.168.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@tanstack/start-static-server-functions" dependency-version: 1.167.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: fumadocs-core dependency-version: 16.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: fumadocs-mdx dependency-version: 15.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: fumadocs-ui dependency-version: 16.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: lucide-react dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: lucide-static dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: oxfmt dependency-version: 0.59.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: oxlint dependency-version: 1.74.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies docker Pull requests that update docker code labels Jul 19, 2026

alex289 approved these changes Jul 19, 2026

View reviewed changes

alex289 merged commit 8cd087b into main Jul 19, 2026
6 checks passed

alex289 deleted the dependabot/dependencies-4e9a173e35 branch July 19, 2026 08:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: Bump the "dependencies" group with 3 updates across multiple ecosystems#64

chore: Bump the "dependencies" group with 3 updates across multiple ecosystems#64
alex289 merged 1 commit into
mainfrom
dependabot/dependencies-4e9a173e35

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026

v4.37.1

CodeQL Action Changelog

[UNRELEASED]

4.37.1 - 16 Jul 2026

4.37.0 - 08 Jul 2026

4.36.3 - 01 Jul 2026

4.36.2 - 04 Jun 2026

4.36.1 - 02 Jun 2026

4.36.0 - 22 May 2026

4.35.5 - 15 May 2026

4.35.4 - 07 May 2026

4.35.3 - 01 May 2026

v4.37.1

CodeQL Action Changelog

[UNRELEASED]

4.37.1 - 16 Jul 2026

4.37.0 - 08 Jul 2026

4.36.3 - 01 Jul 2026

4.36.2 - 04 Jun 2026

4.36.1 - 02 Jun 2026

4.36.0 - 22 May 2026

4.35.5 - 15 May 2026

4.35.4 - 07 May 2026

4.35.3 - 01 May 2026

v4.2.0

What's Changed

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

v6.5.0

What's Changed

v0.6.0

What's Changed

New Contributors

@​tanstack/react-router@​1.170.18

Patch Changes

1.170.18

Patch Changes

@​tanstack/react-start@​1.168.28

Patch Changes

1.168.28

Patch Changes

@​tanstack/start-static-server-functions@​1.167.19

Patch Changes

1.167.19

Patch Changes

fumadocs-mdx@15.2.0

Support Macro API

fumadocs-mdx@15.1.1

Migrate from js-yaml to yaml

Version 1.24.0

What's Changed

New Contributors

Version 1.24.0

What's Changed

New Contributors

[0.59.0] - 2026-07-13

🐛 Bug Fixes

[0.55.0] - 2026-06-15

🚀 Features

[0.54.0] - 2026-06-08

📚 Documentation

[0.52.0] - 2026-05-26

🚀 Features

[0.50.0] - 2026-05-15

🐛 Bug Fixes

[0.49.0] - 2026-05-11

🚀 Features

[0.45.0] - 2026-04-13

🐛 Bug Fixes

[0.44.0] - 2026-04-06

🐛 Bug Fixes

oxlint v1.27.0 && oxfmt v0.12.0

`@tanstack/react-router@1`.170.18

`@tanstack/react-start@1`.168.28

`@tanstack/start-static-server-functions@1`.167.19

Migrate from `js-yaml` to `yaml`