GeezerVison is showing github.com — build(deps-dev): bump the npm group across 1 directory with 3 updates by dependabot[bot] · Pull Request #553 · NativeScript/ios
Conversation
dependabot
Bot
commented
on behalf of
github
Nov 11, 2026
•
edited
Loading
Uh oh!
There was an error while loading. Please reload this page.
Bumps the npm group with 3 updates in the / directory: esbuild, eslint and globals.
Updates esbuild from 0.28.1 to 0.28.2
Release notes
Sourced from esbuild's releases.
v0.28.2
-
Fix tree shaking bug due to TypeScript import alias (#4507)
This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:
import Base from './dep.js';
import Alias = Base.SomeType;
-
Fix CSS minification bug involving & (#4497)
This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:
/* Original code */
.a .b {
& .b:not(& .c) {
color: red;
}
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}
This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.
-
Avoid overwriting input files without --allow-overwrite (#4484)
For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.
This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.
-
Fix incorrect code generated when using top-level await (#4498)
Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.
-
Fix a minification bug with lowered logical assignment operators (#4508)
This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:
// Original code
function foo() {
let x
bar(x ||= {})
... (truncated)
Changelog
Sourced from esbuild's changelog.
0.28.2
-
Fix tree shaking bug due to TypeScript import alias (#4507)
This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:
import Base from './dep.js';
import Alias = Base.SomeType;
-
Fix CSS minification bug involving & (#4497)
This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:
/* Original code */
.a .b {
& .b:not(& .c) {
color: red;
}
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}
This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.
-
Avoid overwriting input files without --allow-overwrite (#4484)
For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.
This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.
-
Fix incorrect code generated when using top-level await (#4498)
Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.
-
Fix a minification bug with lowered logical assignment operators (#4508)
This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:
// Original code
function foo() {
let x
... (truncated)
Commits
609683d publish 0.28.2 to npm
11b1fe4 add to release notes
ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
04627b6 fix #4498: async TLA checks need a worklist
5c15177 disable gopls in the go folder
fc2ee9b css: adjust parser to allow --foo: {...}
209db54 release notes for css nesting bugfix
c625d31 fix #4497: preserve nested ampersands during minification (#4500)
34474e2 better isolation of current part in js parser
07f6e8c fix #4507: import assignment tree-shaking bug
- Additional commits viewable in compare view
Updates eslint from 10.8.0 to 10.14.0
Release notes
Sourced from eslint's releases.
v10.14.0
Features
d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)
Bug Fixes
4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
9155e14 fix: Update @humanfs/node dependency version (#21434) (Nicholas C. Zakas)
cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)
Documentation
0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
dab466e docs: Update README (GitHub Actions Bot)
97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
7697550 docs: Update README (GitHub Actions Bot)
0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)
Chores
0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
v10.13.0
Features
48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)
Bug Fixes
87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)
Documentation
4783a68 docs: Update README (GitHub Actions Bot)
43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)
Chores
b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
47b7063 chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])
... (truncated)
Commits
12cbff4 10.14.0
6b696e7 Build: changelog update for 10.14.0
0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
0f94f47 docs: remove zh-hans from docs language switcher (#21437)
dab466e docs: Update README
827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
161558a fix: handle LS, PS and empty hashbang comments (#21419)
- Additional commits viewable in compare view
Updates globals from 17.8.0 to 17.14.0
Release notes
Sourced from globals's releases.
v17.14.0
- Update globals (2026-11-01) (#355) 7abfb5d
sindresorhus/globals@v17.13.0...v17.14.0
v17.13.0
- Update globals (2026-10-01) (#354) b007369
sindresorhus/globals@v17.12.0...v17.13.0
v17.12.0
- Update globals (2026-09-01) (#353) 50a2119
- Add
__webpack_layer__ global (#351) 779a11a
sindresorhus/globals@v17.11.0...v17.12.0
v17.11.0
- Add
react-native globals (#337) 61eafbf
sindresorhus/globals@v17.10.0...v17.11.0
v17.10.0
- Add
GM_cookie to Greasemonkey globals (#349) f468407
sindresorhus/globals@v17.9.0...v17.10.0
v17.9.0
- Update globals (2026-08-01) (#348) 5a958ed
sindresorhus/globals@v17.8.0...v17.9.0
Commits
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
coderabbitai
Bot
commented
Nov 11, 2026
•
edited
Loading
Uh oh!
There was an error while loading. Please reload this page.
Important
Review skipped
Bot user detected.
To trigger a single review, invoke the @coderabbitai review command.
Run configuration
-
- Source mode: Auto
- Repository: Unavailable
- Branch: Unavailable
- File: No configuration file from this repository applied
- Commit: Unavailable
- Layers: Repository UI
- Review profile: CHILL
- Plan: Advanced
- Run ID:
00b683ba-1020-4029-a5dd-e4275937e2ed
You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.
Use the checkbox below for a quick retry:
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Share
-
|
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
This branch has not been deployed
No deployments
Uh oh!
There was an error while loading. Please reload this page.
Assignees
No one assigned
Milestone
No milestone
Development
Successfully merging this pull request may close these issues.
Uh oh!
There was an error while loading. Please reload this page.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.