Skip to content

chore(deps): bump @o3co/ts.hocon from 1.1.0 to 1.2.0#36

Merged
y1o1 merged 1 commit into
developfrom
dependabot/npm_and_yarn/o3co/ts.hocon-1.2.0
May 20, 2026
Merged

chore(deps): bump @o3co/ts.hocon from 1.1.0 to 1.2.0#36
y1o1 merged 1 commit into
developfrom
dependabot/npm_and_yarn/o3co/ts.hocon-1.2.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Bumps @o3co/ts.hocon from 1.1.0 to 1.2.0.

Changelog

Sourced from @​o3co/ts.hocon's changelog.

[1.2.0] - 2026-05-18

Notes

  • Substitution and top-level quoted strings continue to accept \uXXXX escapes producing surrogate code units (Java/Lightbend semantics). This intentionally diverges from rs.hocon, which rejects them because Rust's char cannot represent unpaired surrogates. See spec "Surrogate codepoint divergence" note.

Changed

  • BREAKING: Minimum Node.js version raised from 18 to 22 (engines.node is ">=22"). Node 18 reached EOL on 2025-04-30; Node 20 reached EOL on 2026-04-30. npm install on Node ≤ 21 will emit EBADENGINE and refuse to install.
  • BREAKING (S8.6): a = -foo, a = -bar, a = - and other --not-followed-by-digit inputs are now lex errors. Per HOCON.md L270–276, a leading - must begin a number literal (i.e. be followed by a digit). Previously these were silently accepted as unquoted strings ("-foo", "-"). Mitigation: quote the value (a = "-foo"). Note: this is intentionally stricter than Lightbend's reference implementation, which falls back to unquoted on number-parse failure. Digit-leading inputs (e.g. 123abc, 01, 1e+x) are unaffected — ts.hocon's token model has no separate number kind, so the resolved value continues to match Lightbend's value-concat output for the common cases (see docs/spec-compliance.md §S8.6 for the remaining gaps tracked under #73).
  • Substitution body tokenization: ${...} internals are now tokenized at lex time via parseSubstBody. SubstPlaceholder.segments is now Segment[] (each segment carries text, line, col). The opt_subst token kind has been removed — use token.subst.optional instead.
  • Key parser now handles mixed quoted/unquoted paths like a."b.c".d in both key position and substitution paths.

Fixed

  • Escape expansion and whitespace concatenation inside substitution paths now match Lightbend behavior (closes #58). Example: ${"a" "b"} produces a single-segment path with text "a b"; ${"a\nb"} produces a newline in the segment text.
  • parseSubstPath (resolver-level re-parse) removed; substitution segments now flow directly from the lexer without a second parse pass, eliminating a class of subtle position and escape-handling bugs.
Commits
  • a2823ea ci(release): add make testdata step before Test (closes v1.2.0 publish regres...
  • 3920fbf chore(release): v1.2.0
  • 2c79746 fix(s8.6): gate parseSubstBody '-' check on segment start
  • 1d5f6b1 fix(s8.6): reject unquoted '-' not followed by digit (refs #73)
  • 6db2530 fix(s15): numericObjectToArray + accessor + pairwise-fold concat (closes #87)
  • b78ede0 fix(lexer): expand whitespace recognition to HOCON spec set (S6.1/6.2/6.4) (#94)
  • 3f66758 docs: bump documented Node requirement to 22+ (align with engines)
  • 29a5f84 chore: bump CI Node matrix to 22/24/26 and Actions to Node 24 runtime
  • 8a1946c refactor(parser): use TokenKind type for skip() parameter
  • 8107e1d test: address Copilot review on Phase 5 PR #91
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@o3co/ts.hocon](https://github.com/o3co/ts.hocon) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/o3co/ts.hocon/releases)
- [Changelog](https://github.com/o3co/ts.hocon/blob/develop/CHANGELOG.md)
- [Commits](o3co/ts.hocon@v1.1.0...v1.2.0)

---
updated-dependencies:
- dependency-name: "@o3co/ts.hocon"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 19, 2026
@y1o1 y1o1 merged commit 587536d into develop May 20, 2026
1 check passed
@y1o1 y1o1 deleted the dependabot/npm_and_yarn/o3co/ts.hocon-1.2.0 branch May 20, 2026 09:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant