Bump the development-dependencies group with 6 updates by dependabot[bot] · Pull Request #4 · Daziusm/maryl

dependabot · 2026-07-26T03:53:02Z

Bumps the development-dependencies group with 6 updates:

Package	From	To
@types/bcryptjs	`2.4.6`	`3.0.0`
@types/node	`22.20.1`	`26.1.1`
eslint	`9.39.5`	`10.8.0`
eslint-config-next	`15.5.21`	`16.2.12`
prisma	`6.19.3`	`7.9.0`
typescript	`5.9.3`	`7.0.2`

Updates @types/bcryptjs from 2.4.6 to 3.0.0

Commits

See full diff in compare view

Updates @types/node from 22.20.1 to 26.1.1

Commits

See full diff in compare view

Updates eslint from 9.39.5 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)

9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)

e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)

20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)

8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)

b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)

784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)

7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))

92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)

68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)

d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)

eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)

c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)

2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)

eccbe7b test: add error locations to no-class-assign (#21123) (devoil)

e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])

e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])

ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)

044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)

fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)

5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)

9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)

a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)

8dde645 test: add error locations to no-ex-assign (#21102) (devoil)

13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)

a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)

c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)

0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)

3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)

dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)

2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))

5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])

d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)

bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)

f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

749dfed 10.8.0
4bd0d75 Build: changelog update for 10.8.0
4fbf46d test: pin webpack version to 5.108.4 (#21137)
6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
784dfbe docs: Clarify no-eq-null description (#21120)
6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
eccbe7b test: add error locations to no-class-assign (#21123)
2fee9bb feat: export ConfigObject from eslint/config (#21082)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
Additional commits viewable in compare view

Updates eslint-config-next from 15.5.21 to 16.2.12

Release notes

Sourced from eslint-config-next's releases.

v16.2.12

What's Changed

Backport/docs fixes 16.2 - July round by @icyJoseph in vercel/next.js#96031

[Backport] Fixes to support TypeScript 7 by @lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

... (truncated)

Commits

2234717 v16.2.12
9beca08 v16.2.11
9dadfd6 v16.2.10
534d9c1 [16.2.x] Release pipeline updates (#95160)
6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
f37fad9 v16.2.9
6f16804 v16.2.8
411c455 v16.2.7
ee6e79b v16.2.6
766148f v16.2.5
Additional commits viewable in compare view

Updates prisma from 6.19.3 to 7.9.0

Release notes

Sourced from prisma's releases.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
npx prisma@latest init
A safer default around destructive commands (#29684, #29691, #29713)

... (truncated)

Commits

537583c feat(cli): add @bomb.sh/tab completions (#28351)
bf7c40f fix(cli): update Studio to 0.33.0 and suppress aborted response errors (#29720)
9acd8dc feat(cli): install Prisma agent skills during prisma init (#29689)
aef8cb5 fix(cli): remove the migrate-reset tool from the MCP server (#29691)
cdca333 chore(deps): update @prisma/dev to 0.24.14 (#29686)
fda8fbc chore(deps): bump @prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
5723406 fix(cli): route bootstrap telemetry to Prisma Web Properties project (#29473)
8e71aa7 fix(cli): install missing @prisma/client in prisma bootstrap (#29444)
ada077b fix(cli): bootstrap UX — auto-install deps, resumable flow, timeout handling ...
9b0b7f5 feat(cli): add prisma bootstrap command (#29374)
Additional commits viewable in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [@types/bcryptjs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bcryptjs) | `2.4.6` | `3.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `26.1.1` | | [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.8.0` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `15.5.21` | `16.2.12` | | [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `6.19.3` | `7.9.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` | Updates `@types/bcryptjs` from 2.4.6 to 3.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bcryptjs) Updates `@types/node` from 22.20.1 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.39.5 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.5...v10.8.0) Updates `eslint-config-next` from 15.5.21 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.2.12/packages/eslint-config-next) Updates `prisma` from 6.19.3 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/cli) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) --- updated-dependencies: - dependency-name: "@types/bcryptjs" dependency-version: 3.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: eslint-config-next dependency-version: 16.2.12 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: prisma dependency-version: 7.9.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the development-dependencies group with 6 updates - #4

Bump the development-dependencies group with 6 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-0a553c9d06

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.8.0

Features

Bug Fixes

Documentation

Chores

v10.7.0

Features

v16.2.12

What's Changed

v16.2.11

v16.2.10

v16.2.9

v16.2.8

v16.2.7

Core Changes

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

TypeScript 6.0.3

TypeScript 6.0

TypeScript 6.0 Beta

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading