Skip to content

chore(deps): bump the js-npm group in /crates/bashkit-js with 2 updates - #2322

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/crates/bashkit-js/js-npm-9040fccdb7
Closed

chore(deps): bump the js-npm group in /crates/bashkit-js with 2 updates#2322
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/crates/bashkit-js/js-npm-9040fccdb7

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the js-npm group in /crates/bashkit-js with 2 updates: ava and oxlint.

Updates ava from 6.4.1 to 8.0.1

Release notes

Sourced from ava's releases.

v8.0.1

What's Changed

This release officially adds Node.js 26 support, with thanks to @​novemberborn in avajs/ava#3450.

Per our policy, support for Node.js 25 has been removed.

Full Changelog: avajs/ava@v8.0.0...v8.0.1

v8.0.0

Breaking Changes

AVA now expects Node.js 22.20, 24.12 or newer.

Internally AVA is now fully ESM. This is possible now that Node.js supports loading ES modules using require() calls and simplifies AVA's types and internals.

If you use AVA from a CommonJS project you'll have to update your imports:

-const test = require('ava');+const {default: test} = require('ava');

We expect an increasing number of projects to be ESM only. As per the above, CommonJS is still supported, but we don't expect cjs extensions to be used. The default file extensions are now js and mjs. Specify extensions: ['cjs', 'js', 'mjs'] for AVA to run test files with the cjs extension.

All test files (and those loaded through AVA's require config) are now loaded via import(). Use customization hooks for transpilation. The object form of the extensions configuration is no longer supported.

If you use AVA with @​ava/typescript you must upgrade that package to v7.

New Features

There's two new test modifiers courtesy of@​sindresorhus: test.skipIf() to skip a test based on a runtime condition. test.runIf() is the inverse: the test only runs when the condition is true.

test.skipIf(process.platform==='win32')('not on Windows',t=>{t.pass();});test.runIf(process.platform==='linux')('Linux only',t=>{t.pass();});

These work with other modifiers like .serial and .failing:

test.serial.skipIf(process.platform==='win32')('serial, not on Windows',t=>{t.pass();});</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ava since your current version.


Updates oxlint from 1.78.0 to 1.79.0

Changelog

Sourced from oxlint's changelog.

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

  • 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

  • 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
  • aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
  • 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
  • beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
  • 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
  • 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
  • 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)
Commits
  • 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
  • 228e8e0 fix(linter): resolve inactive React compiler rules (#25830)
  • aa49d86 fix(linter): allow spread rule options in config types (#25675)
  • 8922381 refactor(linter): remove inactive react config rule (#25740)
  • 8c4552d feat(linter)!: split react/react-compiler into per-category rules (#25500)
  • 36f8451 fix(linter/eslint/no-eval): align indirect default with ESLint (#25656)
  • beb724d fix(linter/eslint/no-unused-vars): report bare underscore parameters (#25663)
  • 4004c10 fix(linter/eslint/no-irregular-whitespace): check comments by default (#25660)
  • 285820e fix(linter/no-large-snapshots): precompile and document allowed snapshot matc...
  • 4df5835 fix(linter): allow capitalized built-in calls (#25516)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the js-npm group in /crates/bashkit-js with 2 updates
3e8cf4c
Bumps the js-npm group in /crates/bashkit-js with 2 updates: [ava](https://github.com/avajs/ava) and [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint).
Updates `ava` from 6.4.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v6.4.1...v8.0.1)
Updates `oxlint` from 1.78.0 to 1.79.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.79.0/npm/oxlint)
---
updated-dependencies:
- dependency-name: ava
dependency-version: 8.0.1
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: js-npm
- dependency-name: oxlint
dependency-version: 1.79.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: js-npm
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript labels Aug 21, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pagesBot commented Aug 21, 2026•
edited
Loading

Copy link
Copy Markdown

Deploying with Cloudflare Workers Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

StatusNameLatest CommitPreview URLUpdated (UTC)
✅ Deployment successful!
View logs		bashkit3e8cf4cCommit Preview URL

Branch Preview URL		Aug 21 2026, 10:22 PM

@chaliychaliy mentioned this pull request Aug 22, 2026
Merged
2 tasks
@chaliyClaude

chaliy commented Aug 22, 2026

Copy link
Copy Markdown
Contributor

Superseded by #2339, which carries the same ava 8.0.1 + oxlint 1.79.0 bump plus the breaking-change fixups this PR could not make on its own:

  • ava.extensions converted to the array form (ava 8 removed the object form — the cause of the ✘ The extensions option must be an array failure here).
  • The two ava-hosted CI steps gated to Node 22+, since ava 8 requires Node 22.20+.
  • The random-fs interop spec renamed to .mts so it loads as ESM under ava 8's ESM-only worker.

Closing in favour of #2339.

Generated by Claude Code

@chaliychaliy closed this Aug 22, 2026
@dependabot@github

dependabotBot commented on behalf of githubAug 22, 2026

Copy link
Copy Markdown
ContributorAuthor

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabotBot deleted the dependabot/npm_and_yarn/crates/bashkit-js/js-npm-9040fccdb7 branch August 22, 2026 00:43
chaliy added a commit that referenced this pull request Aug 22, 2026
@chaliy
chore(deps): bump ava to 8.0.1 and oxlint to 1.79.0 in bashkit-js (#2339
fe1b5f3
)
## What changed
Takes the grouped `js-npm` Dependabot update (`ava` 6.4.1 → 8.0.1,
`oxlint` 1.78.0 → 1.79.0) and adds the fixups the bot could not make on
its own.
- `ava.extensions` moves from the object form to the array form — ava 8
removed the object form.
- The two ava-hosted CI steps (`pnpm test`, `pnpm run test:interop`) now
run on Node 22+ only. ava 8 requires Node 22.20+.
- The random-fs interop spec becomes `interop.spec.mts` so it loads as
ESM.
No runtime or published-package change: `ava` and `oxlint` are both
devDependencies.
## Why
Dependabot opened #2322 for this group, but the `ava` bump is a breaking
major and the PR fails CI as-is:
```
✘ The extensions option must be an array
ELIFECYCLE Test failed.
```
Two further breakages surface only after that one is fixed:
1. ava 8 requires Node 22.20+, so the `node 20` matrix job cannot run it
at all.
2. ava 8 loads every test file through `import()`.
`test-fixtures/random-fs/` has its own `package.json` with no `"type":
"module"`, so `interop.spec.ts` resolved as CommonJS and ava's now
ESM-only worker failed to initialise:
```
AssertionError [ERR_ASSERTION]: The expression evaluated to a falsy value:
assert.ok(refs.runnerChain)
at .../ava@8.0.1/node_modules/ava/lib/worker/main.js:11:21
at Module._compile (node:internal/modules/cjs/loader:1705:14)
```
Renaming to `.mts` makes the file ESM regardless of the nearest
`package.json`, and leaves the napi-generated CommonJS `index.js` alone
— the spec already reaches it through `createRequire`.
**Node 20 stays in the JS matrix.** The package still declares `engines:
node >= 18`, and node 20 continues to run the runtime-compat tests and
all six examples, which exercise the shipped binding. Only the dev-time
test runner moves forward.
## Before / After
Before (Dependabot #2322, node 20/22/24/latest all red):
```
> @everruns/bashkit@0.16.0 test
> ava
✘ The extensions option must be an array
ELIFECYCLE Test failed. See above for more details.
```
After, on Node 22.22.2:
```
$ pnpm test
569 tests passed
$ pnpm run test:interop
√ downstream random filesystem external mounts into bash
1 test passed
$ pnpm exec tsc --noEmit -p tsconfig.check.json
(clean)
$ pnpm run lint
(3 pre-existing warnings, unchanged)
```
`pnpm install --frozen-lockfile` applies the `supertap@3.0.1` patch
unchanged — ava 8 still resolves that exact version.
## Risk
- Low
- Node 20 no longer runs the ava suites. Runtime-compat tests and the
examples still cover node 20, so a node-20 regression in the shipped
binding is still caught; a node-20-only regression in behaviour covered
*solely* by the ava suite would not be.
- `tsconfig.check.json` now globs `test-fixtures/**/*.spec.mts`;
verified with `tsc --listFiles` that the renamed spec is still
type-checked.
## Checklist
- [x] Tests added or updated
- [x] Backward compatibility considered
Closes#2322.
---
_Generated by [Claude
Code](https://claude.ai/code/session_01GbhUV1eSeVM2DcwzPfZooS)_
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavascript

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chaliy