Skip to content

chore: bump the ci group with 3 updates - #322

Merged
mathieu-benoit merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ci-1caff44e30
Aug 22, 2026
Merged

chore: bump the ci group with 3 updates#322
mathieu-benoit merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ci-1caff44e30

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the ci group with 3 updates: autoprefixer, dprint and toml.

Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

Commits

Updates dprint from 0.55.1 to 0.56.0

Release notes

Sourced from dprint's releases.

0.56.0

Changes

  • feat: prefer plugins on the npm registry (#1215)
  • feat: add path completion hints to CLI args (#1217)
  • feat: support formatting directory args (#1196)
  • feat: format explicit paths outside the working directory (#1204)
  • fix: keep a duplicate plugin's checksum when deduping plugin sources (#1211)
  • fix: don't duplicate a plugin specified in both a config and its extended config (#1043) (#1208)
  • fix: apply implicit node_modules exclude and unanchored patterns in rebased scopes (#1210)
  • fix: resolve literal file and directory args without directory traversal (#1207)
  • fix: handle overflow panic in progress bars (#1223)

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip 466dd67e15fca266f3749008ef5d23ea7a6c657ef8204257dbb8c23636fc9aca
dprint-aarch64-apple-darwin.zip 79f5c80a3ddebb4717a89a25a79ec1c50947d4cef141df243757925cb47d32e1
dprint-x86_64-pc-windows-msvc.zip cbcb0c6fdbb72289e895c3857720eb769046d42069973f38655b6aee16c01c73
dprint-x86_64-pc-windows-msvc-installer.exe 795de3adb60187bad989b330f8c8ec03c7a4a69509b1a8d47dc3025266e0158a
dprint-aarch64-pc-windows-msvc.zip c4356e5f9e1b6edce345bd2de902384e3a51e46b0b98775db7011f0996b6b230
dprint-x86_64-unknown-linux-gnu.zip 49fe9d970cdbe0f742e18187c221a7a1dd985d35d4fa9bf4740f7a261c08d96c
dprint-x86_64-unknown-linux-musl.zip e958bfa3fec5256e72c2e4e028fa5674e43023eaff80d704ca96827af2eba240
dprint-aarch64-unknown-linux-gnu.zip a0dcf153cce38096f43bdde36fdd32cfd11c2227b6a04c2202fa83573fe517a6
dprint-aarch64-unknown-linux-musl.zip 2e7d50e342d9d9d85b811635a04f3d49abdf7ec96d5b346cda932a7c4d42a7ab
dprint-riscv64gc-unknown-linux-gnu.zip c888b0e2f559341a62fa666b1609ec957e609bfc146b5ee0ab7898723ebbe231
dprint-loongarch64-unknown-linux-gnu.zip d86a6d3fc063992d152237885f51053748b60361228d851ca6aeaec65d84fb8e
dprint-loongarch64-unknown-linux-musl.zip d781022e4fbfec13688db1dd3d0fb9da964f6f5cf79b31ffcf5196d364f22cf0
dprint-powerpc64le-unknown-linux-gnu.zip 935e117e23650a9874b444a7a6445ec7a8d593778e514f34ebea72dd88180599
dprint-powerpc64le-unknown-linux-musl.zip 93d03c5f3b615955c9fce64a4867b8aa5959988646bfebd1bfd74b5618a1f2ed
dprint-aarch64-linux-android.zip 718707dcd1637d312d2b430ae6313550bac7f21143d9344cd8fd80bf2ec5bf25
dprint-x86_64-linux-android.zip 2b09284549bd96dfa2389d85237da15bacbae9076cdec0e849ec3fb50b804923

0.55.2

Changes

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

|Artifact|SHA-256 Checksum|

... (truncated)

Commits

Updates toml from 4.1.2 to 5.0.0

Changelog

Sourced from toml's changelog.

5.0.0 - July 14 2026

  • Breaking: Integers outside JavaScript's safe range (beyond ±Number.MAX_SAFE_INTEGER) now throw a parse error instead of silently returning a rounded value (#28). Opt in to lossless handling of the full 64-bit range with toml.parse(input, { bigint: true }), which returns all integer values as BigInt.
  • Breaking: Integers outside TOML's 64-bit signed integer range now throw a parse error in either mode, as required by the spec. Previously they were silently rounded.

4.3.0 - July 13 2026

  • Add opt-in Temporal support via toml.parse(input, { useTemporal: true }), mapping offset date-times to Temporal.ZonedDateTime and local date-times/dates/times to Temporal.PlainDateTime/PlainDate/PlainTime. An implementation can be supplied via the temporal option on runtimes without a Temporal global. (#69)

4.2.0 - July 13 2026

  • Address security advisory GHSA-82x6-q7mm-w9cf (CVE pending), in which deeply nested arrays or inline tables could overflow the call stack and crash the process with an uncatchable RangeError. Nesting is now bounded (default 500 levels), and input past the limit throws a normal parse error. The limit is configurable via toml.parse(input, { maxDepth }).
Commits
  • ccd8b10 5.0.0
  • 00ac4a6 Update changelog
  • 121e5fa Merge pull request #74 from BinaryMuse/mkt/big-ints
  • 2b6bcb7 Add opt-in BigInt support, throw when parsing out of bounds values
  • 38fb4e6 4.3.0
  • 5222a64 feat: Add opt-in Temporal support for date/time values (#73)
  • 95f79b3 4.2.0
  • b71c439 Merge pull request #72 from BinaryMuse/fix/nesting-depth-dos
  • a2d6dbb Update changelog
  • 967b8b0 fix: bound nesting depth to prevent stack-overflow DoS
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ci group with 3 updates: [autoprefixer](https://github.com/postcss/autoprefixer), [dprint](https://github.com/dprint/dprint) and [toml](https://github.com/BinaryMuse/toml-node).


Updates `autoprefixer` from 10.5.2 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.5.4)

Updates `dprint` from 0.55.1 to 0.56.0
- [Release notes](https://github.com/dprint/dprint/releases)
- [Commits](dprint/dprint@0.55.1...0.56.0)

Updates `toml` from 4.1.2 to 5.0.0
- [Changelog](https://github.com/BinaryMuse/toml-node/blob/master/CHANGELOG.md)
- [Commits](BinaryMuse/toml-node@v4.1.2...v5.0.0)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: dprint
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: toml
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 22, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 22, 2026 16:52
@mathieu-benoit
mathieu-benoit merged commit d104995 into main Aug 22, 2026
4 checks passed
@mathieu-benoit
mathieu-benoit deleted the dependabot/npm_and_yarn/ci-1caff44e30 branch August 22, 2026 17:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant