Skip to content

chore: bump the ci group with 3 updates - #322

Merged
mathieu-benoit merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ci-1caff44e30
Aug 22, 2026
Merged

chore: bump the ci group with 3 updates#322
mathieu-benoit merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ci-1caff44e30

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the ci group with 3 updates: autoprefixer, dprint and toml.

Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

Commits

Updates dprint from 0.55.1 to 0.56.0

Release notes

Sourced from dprint's releases.

0.56.0

Changes

  • feat: prefer plugins on the npm registry (#1215)
  • feat: add path completion hints to CLI args (#1217)
  • feat: support formatting directory args (#1196)
  • feat: format explicit paths outside the working directory (#1204)
  • fix: keep a duplicate plugin's checksum when deduping plugin sources (#1211)
  • fix: don't duplicate a plugin specified in both a config and its extended config (#1043) (#1208)
  • fix: apply implicit node_modules exclude and unanchored patterns in rebased scopes (#1210)
  • fix: resolve literal file and directory args without directory traversal (#1207)
  • fix: handle overflow panic in progress bars (#1223)

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

ArtifactSHA-256 Checksum
dprint-x86_64-apple-darwin.zip466dd67e15fca266f3749008ef5d23ea7a6c657ef8204257dbb8c23636fc9aca
dprint-aarch64-apple-darwin.zip79f5c80a3ddebb4717a89a25a79ec1c50947d4cef141df243757925cb47d32e1
dprint-x86_64-pc-windows-msvc.zipcbcb0c6fdbb72289e895c3857720eb769046d42069973f38655b6aee16c01c73
dprint-x86_64-pc-windows-msvc-installer.exe795de3adb60187bad989b330f8c8ec03c7a4a69509b1a8d47dc3025266e0158a
dprint-aarch64-pc-windows-msvc.zipc4356e5f9e1b6edce345bd2de902384e3a51e46b0b98775db7011f0996b6b230
dprint-x86_64-unknown-linux-gnu.zip49fe9d970cdbe0f742e18187c221a7a1dd985d35d4fa9bf4740f7a261c08d96c
dprint-x86_64-unknown-linux-musl.zipe958bfa3fec5256e72c2e4e028fa5674e43023eaff80d704ca96827af2eba240
dprint-aarch64-unknown-linux-gnu.zipa0dcf153cce38096f43bdde36fdd32cfd11c2227b6a04c2202fa83573fe517a6
dprint-aarch64-unknown-linux-musl.zip2e7d50e342d9d9d85b811635a04f3d49abdf7ec96d5b346cda932a7c4d42a7ab
dprint-riscv64gc-unknown-linux-gnu.zipc888b0e2f559341a62fa666b1609ec957e609bfc146b5ee0ab7898723ebbe231
dprint-loongarch64-unknown-linux-gnu.zipd86a6d3fc063992d152237885f51053748b60361228d851ca6aeaec65d84fb8e
dprint-loongarch64-unknown-linux-musl.zipd781022e4fbfec13688db1dd3d0fb9da964f6f5cf79b31ffcf5196d364f22cf0
dprint-powerpc64le-unknown-linux-gnu.zip935e117e23650a9874b444a7a6445ec7a8d593778e514f34ebea72dd88180599
dprint-powerpc64le-unknown-linux-musl.zip93d03c5f3b615955c9fce64a4867b8aa5959988646bfebd1bfd74b5618a1f2ed
dprint-aarch64-linux-android.zip718707dcd1637d312d2b430ae6313550bac7f21143d9344cd8fd80bf2ec5bf25
dprint-x86_64-linux-android.zip2b09284549bd96dfa2389d85237da15bacbae9076cdec0e849ec3fb50b804923

0.55.2

Changes

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

|Artifact|SHA-256 Checksum|

... (truncated)

Commits

Updates toml from 4.1.2 to 5.0.0

Changelog

Sourced from toml's changelog.

5.0.0 - July 14 2026

  • Breaking: Integers outside JavaScript's safe range (beyond ±Number.MAX_SAFE_INTEGER) now throw a parse error instead of silently returning a rounded value (#28). Opt in to lossless handling of the full 64-bit range with toml.parse(input, { bigint: true }), which returns all integer values as BigInt.
  • Breaking: Integers outside TOML's 64-bit signed integer range now throw a parse error in either mode, as required by the spec. Previously they were silently rounded.

4.3.0 - July 13 2026

  • Add opt-in Temporal support via toml.parse(input, { useTemporal: true }), mapping offset date-times to Temporal.ZonedDateTime and local date-times/dates/times to Temporal.PlainDateTime/PlainDate/PlainTime. An implementation can be supplied via the temporal option on runtimes without a Temporal global. (#69)

4.2.0 - July 13 2026

  • Address security advisory GHSA-82x6-q7mm-w9cf (CVE pending), in which deeply nested arrays or inline tables could overflow the call stack and crash the process with an uncatchable RangeError. Nesting is now bounded (default 500 levels), and input past the limit throws a normal parse error. The limit is configurable via toml.parse(input, { maxDepth }).
Commits
  • ccd8b10 5.0.0
  • 00ac4a6 Update changelog
  • 121e5fa Merge pull request #74 from BinaryMuse/mkt/big-ints
  • 2b6bcb7 Add opt-in BigInt support, throw when parsing out of bounds values
  • 38fb4e6 4.3.0
  • 5222a64 feat: Add opt-in Temporal support for date/time values (#73)
  • 95f79b3 4.2.0
  • b71c439 Merge pull request #72 from BinaryMuse/fix/nesting-depth-dos
  • a2d6dbb Update changelog
  • 967b8b0 fix: bound nesting depth to prevent stack-overflow DoS
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ci group with 3 updates: [autoprefixer](https://github.com/postcss/autoprefixer), [dprint](https://github.com/dprint/dprint) and [toml](https://github.com/BinaryMuse/toml-node).
Updates `autoprefixer` from 10.5.2 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.5.4)
Updates `dprint` from 0.55.1 to 0.56.0
- [Release notes](https://github.com/dprint/dprint/releases)
- [Commits](dprint/dprint@0.55.1...0.56.0)
Updates `toml` from 4.1.2 to 5.0.0
- [Changelog](https://github.com/BinaryMuse/toml-node/blob/master/CHANGELOG.md)
- [Commits](BinaryMuse/toml-node@v4.1.2...v5.0.0)
---
updated-dependencies:
- dependency-name: autoprefixer
dependency-version: 10.5.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ci
- dependency-name: dprint
dependency-version: 0.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: ci
- dependency-name: toml
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: ci
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 22, 2026
@github-actions
github-actionsBot enabled auto-merge (squash) August 22, 2026 16:52
@mathieu-benoit
mathieu-benoit merged commit d104995 into mainAug 22, 2026
4 checks passed
@mathieu-benoit
mathieu-benoit deleted the dependabot/npm_and_yarn/ci-1caff44e30 branch August 22, 2026 17:04
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@mathieu-benoit