build(deps-dev): bump the npm-minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #701 · microsoft/vscode-isort

dependabot · 2026-07-17T19:43:25Z

Bumps the npm-minor-patch group with 6 updates in the / directory:

Package	From	To
@eslint/js	`9.39.4`	`9.39.5`
fs-extra	`11.3.5`	`11.3.6`
prettier	`3.8.4`	`3.9.5`
ts-loader	`9.6.1`	`9.6.2`
typescript-eslint	`8.61.1`	`8.64.0`
webpack	`5.107.2`	`5.108.4`

Updates @eslint/js from 9.39.4 to 9.39.5

Release notes

Sourced from @eslint/js's releases.

v9.39.5

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)

eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)

202117b chore: package.json update for @eslint/js release (Jenkins)

d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)

7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)

daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)

daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)

116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

Commits

202117b chore: package.json update for @eslint/js release
See full diff in compare view

Updates fs-extra from 11.3.5 to 11.3.6

Changelog

Sourced from fs-extra's changelog.

11.3.6 / 2026-06-29

Fix handling of symlinked destination ancestors in copy/move methods (#1071, #1073)

Docs typo fixed (#1074)

Commits

62a4e72 11.3.6
01c0ca6 Fix copy/move recursing into source through a symlinked dest ancestor (#1073)
7268250 docs: fix typo in README.md (seperate → separately) (#1074)
2fd7b6c chore: Add Node 26 to the test matrix (#1072)
See full diff in compare view

Updates prettier from 3.8.4 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

3.9.4

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @fisker)

🔗 Changelog

3.9.3

Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @seiyab)

TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @evoactivity)

🔗 Changelog

3.9.1

CLI: Fix ignored file has been cached incorrectly (#19483 by @kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

Fix Flow variance annotation print (#19022 by @marcoww6)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text

999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text

999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text
Markdown: Avoid corrupting empty link with title (#19487 by @andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

[link](https://github.com/prettier/prettier/blob/main/<> "title")

[link](https://github.com/prettier/prettier/blob/main/ "title")

</tr></table>

... (truncated)

Commits

b6c7d18 Release 3.9.5
cd54ccc Avoid corrupting empty Markdown link with title (#19487)
2bb67ce Preserving comments' placement property (#19567)
91bcac8 Add more tests for comment-only object type (#19587)
cbee737 Remove space in empty object type (#19583)
6394c73 Align empty module declaration with TS (#19568)
a4e6f7a Prevent the addition of space in type() with + (#19516)
3d063b5 Ignore dangling comments when checking type parameter comments (#19572)
908503e Handle dangling comments in SwitchStatement (#19581)
943a475 Angular: Support expression for exhaustive typechecking (#19571)
Additional commits viewable in compare view

Updates ts-loader from 9.6.1 to 9.6.2

Release notes

Sourced from ts-loader's releases.

v9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

Changelog

Sourced from ts-loader's changelog.

9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

Commits

b347bb7 chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micro...
See full diff in compare view

Updates typescript-eslint from 8.61.1 to 8.64.0

Release notes

Sourced from typescript-eslint's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

support parsing import defer (#12513)

eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)

typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)

eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)

scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

Evyatar Daud @StyleShit

Kristjan @KristjanTammekivi

Michael Naumov @mnaoumov

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

8.62.1 (2026-06-29)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

414d9ab chore(release): publish 8.64.0
290cf6c chore(release): publish 8.63.0
3ea32f4 chore(release): publish 8.62.1
54e2857 chore(release): publish 8.62.0
81e4c26 feat: remove redundant package.json "files" (#12444)
See full diff in compare view

Updates webpack from 5.107.2 to 5.108.4

Release notes

Sourced from webpack's releases.

v5.108.4

Patch Changes

Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @alexander-akait in #21324)

Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @alexander-akait in #21324)

Resolve HTML asset URLs against the document <base href>. (by @alexander-akait in #21329)

Add HTML integration tests: generateError output, ignored src, null-char parse. (by @aryanraj45 in #21328)

Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @alexander-akait in #21332)

Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @alexander-akait in #21323)

Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @alexander-akait in #21331)

Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @hai-x in #21326)

Default output.globalObject to globalThis for universal targets. (by @alexander-akait in #21314)

Pass through new URL(...) directory references instead of resolving them. (by @alexander-akait in #21312)

v5.108.3

Patch Changes

Speed up CSS parsing and reduce CSS AST node memory. (by @alexander-akait in #21285)

Fix HMR codegen crash for harmony accept with unresolved imports. (by @xiaoxiaojx in #21302)

Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @alexander-akait in #21303)

v5.108.2

Patch Changes

Fix lazy barrel deferral of ungrouped side-effect imports. (by @hai-x in #21291)

Respect the node: prefix for node.js core modules used as externals. (by @alexander-akait in #21286)

v5.108.1

Patch Changes

Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @xiaoxiaojx in #21280)

Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @alexander-akait in #21269)

v5.108.0

Minor Changes

Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @alexander-akait in #21218)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.108.4

Patch Changes

Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @alexander-akait in #21324)

Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @alexander-akait in #21324)

Resolve HTML asset URLs against the document <base href>. (by @alexander-akait in #21329)

Add HTML integration tests: generateError output, ignored src, null-char parse. (by @aryanraj45 in #21328)

Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @alexander-akait in #21332)

Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @alexander-akait in #21323)

Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @alexander-akait in #21331)

Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @hai-x in #21326)

Default output.globalObject to globalThis for universal targets. (by @alexander-akait in #21314)

Pass through new URL(...) directory references instead of resolving them. (by @alexander-akait in #21312)

5.108.3

Patch Changes

Speed up CSS parsing and reduce CSS AST node memory. (by @alexander-akait in #21285)

Fix HMR codegen crash for harmony accept with unresolved imports. (by @xiaoxiaojx in #21302)

Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @alexander-akait in #21303)

5.108.2

Patch Changes

Fix lazy barrel deferral of ungrouped side-effect imports. (by @hai-x in #21291)

Respect the node: prefix for node.js core modules used as externals. (by @alexander-akait in #21286)

5.108.1

Patch Changes

Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @xiaoxiaojx in #21280)

Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @alexander-akait in #21269)

... (truncated)

Commits

bb9ccfd chore(release): new release (#21319)
7639066 fix: invalidate provided-exports cache with lazy barrel (#21326)
ae28c54 perf: reduce CPU and memory overhead of the HTML and CSS pipelines (#21332)
e6fb547 perf: re-encode the HTML AST as struct-of-arrays behind a path-based visitor ...
5ce1c22 fix(html): resolve asset URLs against <base href> (#21329)
0e43c4a test(html): cover generateError, ignored-source, and null-character parse pat...
cebd793 refactor: build export-presence guards from a lazy boolean formula (#21320)
c2628cf fix: don't resolve new URL() directory references as modules (#21312)
00d8b2f perf: speed up non-CSS-Modules CSS parsing by skipping unused AST work (#21324)
f7a3f6d perf: reduce HTML parser memory and CPU with parser-level skip options (#21323)
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@eslint/js	[>= 10.a, < 11]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 6 updates Bumps the npm-minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `9.39.5` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.5` | `11.3.6` | | [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.5` | | [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.6.1` | `9.6.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.1` | `8.64.0` | | [webpack](https://github.com/webpack/webpack) | `5.107.2` | `5.108.4` | Updates `@eslint/js` from 9.39.4 to 9.39.5 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.5/packages/js) Updates `fs-extra` from 11.3.5 to 11.3.6 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.5...11.3.6) Updates `prettier` from 3.8.4 to 3.9.5 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.4...3.9.5) Updates `ts-loader` from 9.6.1 to 9.6.2 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.6.1...v9.6.2) Updates `typescript-eslint` from 8.61.1 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/typescript-eslint) Updates `webpack` from 5.107.2 to 5.108.4 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.107.2...v5.108.4) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.39.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: fs-extra dependency-version: 11.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: prettier dependency-version: 3.9.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: ts-loader dependency-version: 9.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: typescript-eslint dependency-version: 8.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: webpack dependency-version: 5.108.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added debt Code quality issues dependencies Pull requests that update a dependency file no-changelog don't include this item in release notes. labels Jul 17, 2026

github-actions Bot enabled auto-merge (squash) July 17, 2026 19:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the npm-minor-patch group across 1 directory with 6 updates#701

build(deps-dev): bump the npm-minor-patch group across 1 directory with 6 updates#701
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-22d3007d42

dependabot Bot commented on behalf of github Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 17, 2026

v9.39.5

Bug Fixes

Documentation

Chores

11.3.6 / 2026-06-29

3.9.5

3.9.4

3.9.3

3.9.1

3.9.0

3.8.5

3.9.5

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

v9.6.2

9.6.2

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.62.1

8.62.1 (2026-06-29)

8.64.0 (2026-07-13)

8.63.0 (2026-07-06)

8.62.1 (2026-06-29)

8.62.0 (2026-06-22)

🚀 Features

❤️ Thank You

v5.108.4

Patch Changes

v5.108.3

Patch Changes

v5.108.2

Patch Changes

v5.108.1

Patch Changes

v5.108.0

Minor Changes

5.108.4

Patch Changes

5.108.3

Patch Changes

5.108.2

Patch Changes

5.108.1

Patch Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Markdown: Cap ordered list mark at 999,999,999 (#19351 by `@tats-u`)

Markdown: Avoid corrupting empty link with title (#19487 by `@andersk`)