Bump the major group across 1 directory with 2 updates #1405

dependabot · 2025-05-11T02:11:00Z

Bumps the major group with 2 updates in the / directory: zustand and lint-staged.

Updates zustand from 4.5.5 to 5.0.4

Release notes

v5.0.4

This fixes module resolution issue for React Native users.

What's Changed

refactor(traditional): remove duplicated ExtractState type declaration by @shinhyogeun in pmndrs/zustand#2982

fix(package): react-native condition by @dai-shi in pmndrs/zustand#3087

New Contributors

@zbeyens made their first contribution in pmndrs/zustand#2958

@samirhembrom made their first contribution in pmndrs/zustand#2963

@alimertcakar made their first contribution in pmndrs/zustand#2980

@sidahmedabdelillah made their first contribution in pmndrs/zustand#2978

@Sunjae95 made their first contribution in pmndrs/zustand#2994

@chervyakovru made their first contribution in pmndrs/zustand#3001

@andriyor made their first contribution in pmndrs/zustand#3002

@theperfectpunk made their first contribution in pmndrs/zustand#2998

@locothedev made their first contribution in pmndrs/zustand#3004

@paulschoen made their first contribution in pmndrs/zustand#3008

@mooalot made their first contribution in pmndrs/zustand#3011

@rn0614 made their first contribution in pmndrs/zustand#3037

@dngur9801 made their first contribution in pmndrs/zustand#3042

@Shashikantyadavv made their first contribution in pmndrs/zustand#3045

@mtilda made their first contribution in pmndrs/zustand#3053

@jroitgrund made their first contribution in pmndrs/zustand#2995

@oduntane made their first contribution in pmndrs/zustand#3080

@B1u3B01t made their first contribution in pmndrs/zustand#3082

@vikpe made their first contribution in pmndrs/zustand#3094

@wy-luke made their first contribution in pmndrs/zustand#3100

@shinhyogeun made their first contribution in pmndrs/zustand#2982

Full Changelog: pmndrs/zustand@v5.0.3...v5.0.4

v5.0.3

ExtractState is a type util to extract state type from store type.

What's Changed

feat(types): Make ExtractState public by @vorant94 in pmndrs/zustand#2935

fix(build): alias entries in rollup config by @dai-shi in pmndrs/zustand#2942

New Contributors

@atticoos made their first contribution in pmndrs/zustand#2883

@sukvvon made their first contribution in pmndrs/zustand#2890

@Wxh16144 made their first contribution in pmndrs/zustand#2891

@leweyse made their first contribution in pmndrs/zustand#2913

@dmaskasky made their first contribution in pmndrs/zustand#2936

@HoberMin made their first contribution in pmndrs/zustand#2938

Full Changelog: pmndrs/zustand@v5.0.2...v5.0.3

v5.0.2

... (truncated)

Commits

312a707 5.0.4
2a53f2e chore(deps): update dev dependencies (#3104)
850777b react-native condition for CJS (#3087)
c72ac92 remove duplicated type declaration (#2982)
48985a4 docs: general docs improvements (#3102)
bd58db0 docs: fix the usage error of setPosition (#3100)
6767394 docs: Prefer const to let (auto generating selectors) (#3094)
4d3a017 fix: handle hardware acceleration disabled scenario in demo site (#3082)
21fc1b1 docs: update createWithEqualityFn and useStoreWithEqualityFn docs (#3084)
473cfbf ci(.github/workflows): rename 'cr' to 'preview-release' (#3069)
Additional commits viewable in compare view

Updates lint-staged from 15.5.1 to 16.0.0

Release notes

Sourced from lint-staged's releases.

v16.0.0

Major Changes
#1546 158d15c Thanks @iiroj! - Processes are spawned using nano-spawn instead of execa. If you are using Node.js scripts as tasks, you might need to explicitly run them with node, especially when using Windows:
{
  "*.js": "node my-js-linter.js"
}
#1546 158d15c Thanks @iiroj! - The --shell flag has been removed and lint-staged no longer supports evaluating commands directly via a shell. To migrate existing commands, you can create a shell script and invoke it instead. Lint-staged will pass matched staged files as a list of arguments, accessible via "$@":
# my-script.sh
#!/bin/bash
echo "Staged files: $@"
and
{ "*.js": "my-script.sh" }
If you were using the shell option to avoid passing filenames to tasks, for example bash -c 'tsc --noEmit', use the function syntax instead:
export default { '*.ts': () => 'tsc --noEmit' }
#1546 158d15c Thanks @iiroj! - Validation for deprecated advanced configuration has been removed. The advanced configuration was removed in lint-staged version 9 and until now validation has failed if advanced configuration options were detected. Going forward the entire configuration will be treated with the same logic and if these advanced options are still present, they might be treated as valid globs for staged files instead.

#1546 158d15c Thanks @iiroj! - The lowest supported Node.js version is 20.18. Please upgrade your Node.js version.
Minor Changes
#1401 27110ef Thanks @RohitLuthra19! - Added support for directly running functions on staged files. To configure a function task, use an object with a title and the task itself:
export default {
  '*.js': {
    title: 'My task',
    task: async (files) => {
      console.log('Staged JS files:', files)
    },
  },
}

... (truncated)

Changelog

Sourced from lint-staged's changelog.

16.0.0

Major Changes
#1546 158d15c Thanks @iiroj! - Processes are spawned using nano-spawn instead of execa. If you are using Node.js scripts as tasks, you might need to explicitly run them with node, especially when using Windows:
{
  "*.js": "node my-js-linter.js"
}
#1546 158d15c Thanks @iiroj! - The --shell flag has been removed and lint-staged no longer supports evaluating commands directly via a shell. To migrate existing commands, you can create a shell script and invoke it instead. Lint-staged will pass matched staged files as a list of arguments, accessible via "$@":
# my-script.sh
#!/bin/bash
echo "Staged files: $@"
and
{ "*.js": "my-script.sh" }
If you were using the shell option to avoid passing filenames to tasks, for example bash -c 'tsc --noEmit', use the function syntax instead:
export default { '*.ts': () => 'tsc --noEmit' }
#1546 158d15c Thanks @iiroj! - Validation for deprecated advanced configuration has been removed. The advanced configuration was removed in lint-staged version 9 and until now validation has failed if advanced configuration options were detected. Going forward the entire configuration will be treated with the same logic and if these advanced options are still present, they might be treated as valid globs for staged files instead.

#1546 158d15c Thanks @iiroj! - The lowest supported Node.js version is 20.18. Please upgrade your Node.js version.
Minor Changes
#1401 27110ef Thanks @RohitLuthra19! - Added support for directly running functions on staged files. To configure a function task, use an object with a title and the task itself:
export default {
  '*.js': {
    title: 'My task',
    task: async (files) => {
      console.log('Staged JS files:', files)
    },
  },
}

... (truncated)

Commits

dad5490 chore(changeset): release
1c19e82 build(deps): update dependencies and require Node.js 20.18
08cf8f5 docs: update README.md and bump nano-spawn as major change
276dcc8 refactor: simplify config validation
d4b7cac test: update tests
0ee9ab8 fix: update TypeScript type definitions
12525b2 refactor: rename functions
541c353 refactor: separate "make cmd tasks" and "make function tasks"
27110ef feat: added support for custom configuration
52366f9 ci: update Node.js versions used in CI
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

socket-security · 2025-05-11T02:11:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Maintenance
listr2@8.3.2 ⏵ 8.3.3
yaml@2.7.1 ⏵ 2.8.0	⁺¹
lint-staged@15.5.1 ⏵ 16.0.0		^-2
nano-spawn@1.0.2
zustand@4.5.5 ⏵ 5.0.5	⁺¹

View full report

Bumps the major group with 2 updates in the / directory: [zustand](https://github.com/pmndrs/zustand) and [lint-staged](https://github.com/lint-staged/lint-staged). Updates `zustand` from 4.5.5 to 5.0.4 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v4.5.5...v5.0.4) Updates `lint-staged` from 15.5.1 to 16.0.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v15.5.1...v16.0.0) --- updated-dependencies: - dependency-name: zustand dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major - dependency-name: lint-staged dependency-version: 16.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 11, 2025

github-project-automation bot added this to DevX May 11, 2025

dependabot bot added the javascript Pull requests that update Javascript code label May 11, 2025

github-project-automation bot moved this to Backlog (Not Ready) in DevX May 11, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/major-8be61a98af branch 2 times, most recently from fb641ad to 79a16e7 Compare May 21, 2025 19:53

dependabot bot force-pushed the dependabot/npm_and_yarn/major-8be61a98af branch from 79a16e7 to 9c13d48 Compare May 25, 2025 02:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the major group across 1 directory with 2 updates #1405

Bump the major group across 1 directory with 2 updates #1405

Uh oh!

dependabot bot commented on behalf of github May 11, 2025 •

edited

Loading

Uh oh!

socket-security bot commented May 11, 2025 •

edited

Loading

Uh oh!

Uh oh!

Bump the major group across 1 directory with 2 updates #1405

Are you sure you want to change the base?

Bump the major group across 1 directory with 2 updates #1405

Uh oh!

Conversation

dependabot bot commented on behalf of github May 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.4

What's Changed

New Contributors

v5.0.3

What's Changed

New Contributors

v5.0.2

v16.0.0

Major Changes

Minor Changes

16.0.0

Major Changes

Minor Changes

Uh oh!

socket-security bot commented May 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

dependabot bot commented on behalf of github May 11, 2025 •

edited

Loading

socket-security bot commented May 11, 2025 •

edited

Loading