Skip to content

chore: bump the ci group with 3 updates - #340

Merged
mathieu-benoit merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ci-e1d55d486d
Oct 20, 2026
Merged

mathieu-benoit merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ci-e1d55d486d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the ci group with 3 updates: dprint, postcss and toml.

Updates dprint from 0.62.0 to 0.63.0

Release notes

Sourced from dprint's releases.

0.63.0

Changes

  • feat: add dprint install command (#1339)
  • fix(BREAKING): use a dash as the range separator in --lines (ex. 10-20) (#1341)
  • perf: reduce allocations when formatting and resolving files (#1354)
  • fix: inherit the ancestor config in a main config with "inherit": true (#1340)
  • fix: do not exit the editor service when the config fails to resolve on a format request (#1342)
  • fix: include lengths when hashing configuration for incremental formatting (#1343)
  • fix: respond to format requests the editor service cancels on a config change (#1344)
  • fix: clamp the format range to the text in the editor service (#1345)
  • fix: exit the editor service instead of panicking when its output is closed (#1346)
  • fix: keep the editor service responding while the config is resolved (#1347)
  • fix: provide plugins the file path with the shebang's extension for files matched by a shebang (#1349)
  • fix: say when a plugin was already installed in dprint install (#1350)
  • fix: support --plugins with dprint install (#1351)
  • fix: warn instead of erroring when there is no config file to inherit from (#1353)

Install

Run dprint upgrade or see https://dprint.dev/install/

Verification

These artifacts have build provenance attestations. Verify a download with the GitHub CLI:

gh attestation verify dprint-x86_64-unknown-linux-gnu.zip --repo dprint/dprint

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip 17081627eea67c016ba665379d8e721fd8aeaf13348f8757a605d0a9aad66260
dprint-aarch64-apple-darwin.zip 5c0a4a695f9a17754eec0039f28435aedb61e1e1a6b5f448eb098a64e039c857
dprint-x86_64-pc-windows-msvc.zip a9f6d1146bd2a01585f845086df248297d0e958ede700557c13a5b49ec11f552
dprint-x86_64-pc-windows-msvc-installer.exe 6c0e33e01296348fbe8a466b9a0c8589b903dd3979efa53baf9669d4bb14781f
dprint-aarch64-pc-windows-msvc.zip 913ceec8446d297d33f74c37dbddec0e5292b9a9da99bc7328bdd0c3144c7b9e
dprint-x86_64-unknown-linux-gnu.zip f58b5d7c13ccd613cfa264f1ae82d4e5db1373f8fe20462bc1126051d111b0ce
dprint-x86_64-unknown-linux-musl.zip 8914a940bdf4b9ba438de9ccfb4317105a8501eaf9d5593784c9f41387243475
dprint-aarch64-unknown-linux-gnu.zip 8dfbf17fc4be97020e51bd47e1370acdb019301295ed539840016671cab33e89
dprint-aarch64-unknown-linux-musl.zip 26df4a1534db02bb1c1f614e91f02fcee786357de80094a1fd5dcce27dec803e
dprint-riscv64gc-unknown-linux-gnu.zip 269538ef77dcbfe1f07d780063484f002d9656d8fb1e8d9a33aae6e4b77b6d75
dprint-riscv64gc-unknown-linux-musl.zip 716667cd8668436bf6d797eedd33bc38ef65db049e62a6c1ddfc5d05e7505528
dprint-s390x-unknown-linux-gnu.zip a477aad936498eec8b7298084137eed8a21274b16c804454e89b4b30c210adf1
dprint-loongarch64-unknown-linux-gnu.zip 9af469e2b6e0af97944675c611b4d6b23902d8ee2000049f920fa928fb230d16
dprint-loongarch64-unknown-linux-musl.zip 7ff2c5c9fcbf0b7abf189557bd8538c487083eb304ab16f444c439ee6b307a83

... (truncated)

Commits
  • 11d0040 0.63.0
  • 076b20f fix: warn instead of erroring when there is no config file to inherit from (#...
  • 9e8d3ef perf: reduce allocations when formatting and resolving files (#1354)
  • 9464b82 fix: support --plugins with dprint install (#1351)
  • 7f081f4 fix: say when a plugin was already installed in dprint install (#1350)
  • e97aa16 fix: provide plugins the file path with the shebang's extension for files mat...
  • c710330 fix: keep the editor service responding while the config is resolved (#1347)
  • 0252cdf fix: exit the editor service instead of panicking when its output is closed (...
  • fd7a36d fix: clamp the format range to the text in the editor service (#1345)
  • dc1604c fix: respond to format requests the editor service cancels on a config change...
  • Additional commits viewable in compare view

Updates postcss from 8.5.29 to 8.5.30

Release notes

Sourced from postcss's releases.

8.5.30

  • Fix broken map on </style> escaping (by @​Rufflet).
Changelog

Sourced from postcss's changelog.

8.5.30

  • Fix broken map on </style> escaping (by @​Rufflet).
Commits

Updates toml from 5.0.0 to 5.0.1

Changelog

Sourced from toml's changelog.

5.0.1 - October 12 2026

  • Address four security advisories, each reachable by parsing untrusted input:
    • GHSA-h895-cgqg-jf52, in which a crafted document could still write to Object.prototype. Two distinct key paths could render to the same bookkeeping string, letting an array-of-tables header clear the guard on an unrelated key, after which a dotted key could descend through a date value into its prototype chain. The compiler now records how each table was defined on the table itself rather than in string-keyed sets, so paths cannot collide and key paths can only descend through tables the compiler created.
    • GHSA-9j65-hcg3-gc64, in which dotted keys, table headers, and inline-table keys with many segments took quadratic time to resolve.
    • GHSA-4qx8-w7c3-pj3p, in which every array-of-tables header rescanned all paths defined so far, so documents with many such headers took quadratic time.
    • GHSA-9qmh-m7c6-f92p, in which integer literals were converted to BigInt before any size check, so a multi-megabyte literal consumed super-linear CPU time before being rejected. Literals with more digits than any 64-bit integer are now rejected before conversion.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ci group with 3 updates: [dprint](https://github.com/dprint/dprint), [postcss](https://github.com/postcss/postcss) and [toml](https://github.com/BinaryMuse/toml-node).


Updates `dprint` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/dprint/dprint/releases)
- [Commits](dprint/dprint@0.62.0...0.63.0)

Updates `postcss` from 8.5.29 to 8.5.30
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.29...8.5.30)

Updates `toml` from 5.0.0 to 5.0.1
- [Changelog](https://github.com/BinaryMuse/toml-node/blob/master/CHANGELOG.md)
- [Commits](BinaryMuse/toml-node@v5.0.0...v5.0.1)

---
updated-dependencies:
- dependency-name: dprint
  dependency-version: 0.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: postcss
  dependency-version: 8.5.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: toml
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 20, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 20, 2026 21:04
@mathieu-benoit
mathieu-benoit merged commit 6739079 into main Oct 20, 2026
4 checks passed
@mathieu-benoit
mathieu-benoit deleted the dependabot/npm_and_yarn/ci-e1d55d486d branch October 20, 2026 21:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant