GeezerVison is showing github.com — build(deps-dev): bump the npm group across 1 directory with 8 updates by dependabot[bot] · Pull Request #94 · php-forge/debug-core
Conversation
Bumps the npm group with 8 updates in the / directory:
Updates @stryker-mutator/core from 10.0.0 to 10.1.1
Release notes
Sourced from @stryker-mutator/core's releases.
v10.1.1
10.1.1 (2026-10-23)
Due to the below provenance issue in the release process, this is a re-release of v10.1.0.
For more information on the provenance issue, see: sigstore/sigstore-js#1708 and npm/cli#10078
v10.1.0
10.1.0 (2026-10-23)
Bug Fixes
- core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250
- instrumenter: crash when mutating ts non null expression in babel >= 8 (#6221) (e873a24), closes #6185
- vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
- vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)
Features
Changelog
Sourced from @stryker-mutator/core's changelog.
10.1.1 (2026-10-23)
Note: Version bump only for package @stryker-mutator/core
10.1.0 (2026-10-23)
Bug Fixes
- core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250
Features
Commits
9591277 v10.1.1d6148ff v10.1.0c931a93 fix(core): prevent test runners racing to populate shared caches on startup (...7284a4a feat(core): report mutant duration in the mutation report (#6252)8419413 chore(deps): update dependency prettier to v3.9.4 (#6089)aa7f3bb feat(core): cli option for command runner (#6006)201dce8 feat: add opt-in mutation-phase test timing diagnostics with sidecar reporter...61c7a59 chore(deps): update dependency @types/semver to v7.8.0 (#6165)- See full diff in compare view
Updates @stryker-mutator/vitest-runner from 10.0.0 to 10.1.1
Release notes
Sourced from @stryker-mutator/vitest-runner's releases.
v10.1.1
10.1.1 (2026-10-23)
Due to the below provenance issue in the release process, this is a re-release of v10.1.0.
For more information on the provenance issue, see: sigstore/sigstore-js#1708 and npm/cli#10078
v10.1.0
10.1.0 (2026-10-23)
Bug Fixes
- core: prevent test runners racing to populate shared caches on startup (#6251) (c931a93), closes #6250
- instrumenter: crash when mutating ts non null expression in babel >= 8 (#6221) (e873a24), closes #6185
- vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
- vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)
Features
Changelog
Sourced from @stryker-mutator/vitest-runner's changelog.
10.1.1 (2026-10-23)
Note: Version bump only for package @stryker-mutator/vitest-runner
10.1.0 (2026-10-23)
Bug Fixes
- vitest-runner: do not select tests whose name only starts with a filtered name (#6246) (6ad4adb)
- vitest-runner: report mutant collection failures instead of surviving mutants (#6269) (cf5695e)
Features
Commits
9591277 v10.1.1d6148ff v10.1.0cf5695e fix(vitest-runner): report mutant collection failures instead of surviving mu...3073ea2 feat(vitest-runner): support vitest pool options (#6268)6ad4adb fix(vitest-runner): do not select tests whose name only starts with a filtere...10e2cca feat(vitest-runner): support vitest v5 (#6214)7284a4a feat(core): report mutant duration in the mutation report (#6252)d763db3 chore(deps): update dependency vite to v8.3.2 (#6091)8419413 chore(deps): update dependency prettier to v3.9.4 (#6089)201dce8 feat: add opt-in mutation-phase test timing diagnostics with sidecar reporter...- Additional commits viewable in compare view
Updates @vitest/coverage-v8 from 5.0.5 to 5.1.0
Release notes
Sourced from @vitest/coverage-v8's releases.
v5.1.0
🚀 Features
🐞 Bug Fixes
... (truncated)
Commits
Updates eslint from 10.13.0 to 10.14.0
Release notes
Sourced from eslint's releases.
v10.14.0
Features
d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)
Bug Fixes
4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)9155e14 fix: Update @humanfs/node dependency version (#21434) (Nicholas C. Zakas)cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)
Documentation
0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)dab466e docs: Update README (GitHub Actions Bot)97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)7697550 docs: Update README (GitHub Actions Bot)0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)
Chores
0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])449724e chore: update ecosystem plugins (#21420) (ESLint Bot)8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
12cbff4 10.14.06b696e7 Build: changelog update for 10.14.00e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)0f94f47 docs: remove zh-hans from docs language switcher (#21437)dab466e docs: Update README827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)161558a fix: handle LS, PS and empty hashbang comments (#21419)- Additional commits viewable in compare view
Updates jsdom from 30.1.3 to 31.0.0
Release notes
Sourced from jsdom's releases.
v31.0.0
Breaking changes
- Changed the optional canvas and image decoding backend from
canvas to @napi-rs/canvas. Install @napi-rs/canvas v1.0.13 or later in the v1.x series alongside jsdom; installing canvas alone no longer enables this support. The new backend provides prebuilt Skia binaries on supported platforms, and rendering and encoded image bytes can differ. Projects using native canvas objects or custom font registration should follow the canvas migration guidance. Added WebP serialization through canvas.toDataURL() and canvas.toBlob(). Fixed image loading to wait for decoding before firing load, discard obsolete source requests, avoid refetching when dimensions change, and prevent failed images from drawing stale contents. Fixed canvas context and serialization behavior, including unsupported context types, read-only ctx.canvas, image-drawing exceptions, MIME type and quality normalization, and asynchronous null results from canvas.toBlob() for empty canvases or encoding failures. (@Brooooooklyn)
- Changed CSS parsing, selector matching, and computed styles to use a new integrated implementation, with substantially expanded support and faster selector queries and repeated style reads. This includes cascade layers, nesting,
@scope, custom-property substitution and registration through @property and CSS.registerProperty(), typed attr(), conditional if(), shadow-tree styling with :host, ::slotted(), and ::part(), pseudo-element computed styles, and constructable stylesheets with document.adoptedStyleSheets and shadowRoot.adoptedStyleSheets. Fixed numerous cascade, shorthand, serialization, and default-style issues; computed declarations now stay live across DOM and stylesheet changes. CSS serialization and computed values can differ from previous releases.
- Changed HTML and XML parsing to pause at blocking scripts until their required resources are ready. The
JSDOM constructor, JSDOM.fromURL(), and JSDOM.fromFile() can now return partially parsed documents. Wait for DOMContentLoaded for the finished tree, or the window's load event for load-delaying resources, checking document.readyState first in case the event has already fired. XML syntax errors encountered after asynchronous parsing resumes are reported through the virtual console as "xml-parsing" errors.
Other changes
- Added
window.reportError(), which dispatches an error event and reports uncanceled errors to the virtual console. (@sarankumar1325)
- Added
element.ariaBrailleLabel and element.ariaBrailleRoleDescription. (@Kjubikstronk)
- Fixed page-completion
load events to fire only on the window. Use window.addEventListener("load", ...) or window.onload instead of listening on the document.
- Fixed
document.open(), including implicit calls from document.write(), to clear event listeners and handlers from the document, its descendants, and its window when replacing the input stream.
- Fixed
document.write() to process successive writes through the parser's input stream, preserve insertion points across nested scripts, and make completed text immediately visible. Script-created input streams now remain open until document.close().
- Fixed dynamically inserted scripts to respect
script.async = false execution order, use their source text and document from preparation time, and avoid executing after adoption into another document. Scripts parsed through inert fragment APIs no longer execute when subsequently inserted.
- Fixed unrelated images, stylesheets, and frames being delayed behind scripts, and resource completion events firing before nested stylesheet imports finish. Cyclic imports no longer prevent completion, and
<style> elements in shadow trees now fire load events.
- Fixed
window.stop() to cancel pending subresource and XMLHttpRequest requests in descendant frames and suppress completion events for canceled loads, while allowing subsequent requests to proceed.
- Fixed repeated
document.close() calls replaying readiness and load events, and incorrect iframe load events when reopening documents from event handlers.
- Fixed memory leaks where pending request interceptor promises retained closed windows, introduced in v28.0.0.
- Fixed focus remaining on elements that become non-focusable after DOM or style changes. Focus now moves asynchronously to the document's viewport, and
element.blur() can release it immediately.
- Fixed
document.hasFocus() returning false before an element is focused or during focus transitions within the document, including inside frames.
- Fixed
\<template> parsing and template.innerHTML serialization in XML documents, including templates with namespace prefixes. (@b84330808)
- Fixed
rect.toJSON() and performance.toJSON() to create their result objects in the method's realm instead of the host Node.js realm.
Commits
825fa8e 31.0.09f2e49a Add ariaBrailleLabel and ariaBrailleRoleDescription4c0a35e Flush text written with document.write()fce11d3 Switch canvas support to @napi-rs/canvas27614bf Fix document.hasFocus() during focus changes627ade2 Implement asynchronous focus fixup8bd17a2 Implement reportError()5ae66cf Update webidl2js and remove IDL workaroundsce5a100 Align development scripts and CI9cc717f Adopt ESLint config v6 and oxfmt- Additional commits viewable in compare view
Updates stylelint from 17.16.0 to 18.0.0
Release notes
Sourced from stylelint's releases.
18.0.0
It contains 13 breaking changes, which we've detailed in the migrating to 18.0.0 guide. It also adds 4 new rules and fixes 16 bugs.
- Removed: support for end-of-life and older versions of Node.js (#9486) (
@jeddy3).
- Removed: support for CommonJS-style filename-less and extension-less locator paths (#9545) (
@jeddy3).
- Removed: resolution of packages from the global
node_modules directory (#9534) (@jeddy3).
- Removed:
context.fix property (#9505) (@jeddy3).
- Removed:
declaration-block-single-line-max-declarations rule (#9565) (@jeddy3).
- Removed:
*syntax options from declaration-property-value-no-unknown (#9487) (@jeddy3).
- Removed:
ignoreSelectors option from selector-max-specificity (#9579) (@jeddy3).
- Changed: TypeScript config files to be loaded by Node.js's built-in type stripping (#9489) (
@jeddy3).
- Changed: the CLI to parse arguments with
node:util.parseArgs (#9508) (@jeddy3).
- Changed:
globbyOptions to support only a subset of options (#9500) (@jeddy3).
- Changed:
function-no-unknown to use the CSSTree Syntax Reference for known functions and to ignore vendor-prefixed functions (#9574) (@jeddy3).
- Changed: color detection to use new
color option with node:util.styleText (#9529) (@jeddy3).
- Changed: hyperlink detection (#9536) (
@jeddy3).
- Added:
at-charset-rule-no-invalid rule (#9509) (@firefoxic).
- Added:
declaration-property-custom-property-allowed-list rule (#9542) (@jeddy3).
- Added:
value-no-invalid rule (#9507) (@jeddy3).
- Added:
value-type-custom-property-required-list experimental rule (#9572) (@jeddy3).
- Added: stable support for
processors configuration property (#9543) (@jeddy3).
- Added: stable support for
referenceFiles configuration property (#9598) (@jeddy3).
- Added:
result.stylelint.postcss property for plugins (#9594) (@jeddy3).
- Added:
stylelint.version property (#9595) (@ybiquitous).
- Added:
languageOptions.syntax support to function-no-unknown (#9574) (@jeddy3).
- Fixed:
referenceFiles performance (#9573) (@jeddy3).
- Fixed: import and cache performance by replacing
file-entry-cache (#9593) (@jeddy3).
- Fixed: import performance by lazily loading
css-tree (#9580) (@jeddy3).
- Fixed: exit code when all errors in a file are suppressed and other problems are reported (#9528) (
@schreibse).
- Fixed:
--fix for files where the only change is the removal of a byte order mark (#9512) (@firefoxic).
- Fixed:
Config['extends'] type for configuration objects (#9526) (@firefoxic).
- Fixed:
at-rule-descriptor-value-no-unknown false negatives for var() (#9614) (@jeddy3).
- Fixed:
custom-property-{pattern,no-missing-var-function} and *-no-unknown false positives and negatives for @property with a list of names (#9571) (@jeddy3).
- Fixed:
custom-property-no-missing-var-function false negatives for custom properties defined in referenceFiles (#9570) (@jeddy3).
- Fixed:
custom-property-no-missing-var-function false positives for recently introduced properties (#9567) (@jeddy3).
- Fixed:
declaration-block-no-redundant-longhand-properties and declaration-block-no-shorthand-property-overrides false negatives for contain-intrinsic-size (#9550) (@firefoxic).
- Fixed:
declaration-block-no-shorthand-property-overrides false negatives for flow-relative properties overridden by physical shorthands (#9549) (@firefoxic).
- Fixed:
declaration-property-value-no-unknown false negatives for values containing known custom properties (#9537) (@jeddy3).
- Fixed:
declaration-property-value-no-unknown false negatives for values containing registered custom properties (#9566) (@jeddy3).
- Fixed:
declaration-property-value-no-unknown false positives and negatives for files included in a referenceFiles bundle (#9358) (@romainmenke).
- Fixed:
property-layout-mappings false negatives for physical shorthand properties (#9615) (@jeddy3).
18.0.0-next.0
This is a prerelease of our next major. Migration guide.
- Removed: support for end-of-life and older versions of Node.js (#9486) (
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
Important
Review skipped
Bot user detected.
To trigger a single review, invoke the @coderabbitai review command.
 Run configuration
-
- Source mode: Auto
- Repository: Unavailable
- Branch: Unavailable
- File: No configuration file from this repository applied
- Commit: Unavailable
- Layers: Organization UI
- Review profile: ASSERTIVE
- Plan: Advanced
- Run ID:
fb928e18-43fc-4261-9a78-9dd067e2a983
You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.
Use the checkbox below for a quick retry:
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Share
-
|
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Assignees
No one assigned
Milestone
No milestone
Development
Successfully merging this pull request may close these issues.
Uh oh!
There was an error while loading. Please reload this page.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
|