Skip to content

chore(deps): bump brace-expansion, eslint, typescript-eslint and zwave-js - #72

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-4ec76c6d21
Closed

chore(deps): bump brace-expansion, eslint, typescript-eslint and zwave-js#72
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-4ec76c6d21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion to 5.0.8 and updates ancestor dependencies brace-expansion, eslint, typescript-eslint and zwave-js. These dependencies need to be updated together.

Updates brace-expansion from 2.0.2 to 5.0.8

Release notes

Sourced from brace-expansion's releases.

v4.0.1

  • fmt 5a5cc17
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

juliangruber/brace-expansion@v4.0.0...v4.0.1

v4.0.0

  • feat: use string replaces instead of splits (#64) 278132b
  • fmt dd72a59
  • add tea.yaml 70e4c1b

juliangruber/brace-expansion@v3.0.0...v4.0.0

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

v3.0.1

  • pkg: publish on tag 3.x 3059c07
  • fmt 8229e6f
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

juliangruber/brace-expansion@v3.0.0...v3.0.1

v3.0.0

  • Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
  • added jsdoc (#55) 68c0e37
  • node 16 is EOL 9e781e9
  • add standard 3494c4d
  • use const and let (#57) dd5a4cb
  • docs 6dad209
  • remove test e3dd8ae
  • ci: update node versions d23ede9
  • docs: add @​lanodan to contributors 1eb3fa4
  • docs 1e7c9cd
  • switch from tape to test module (#60) 2520537
  • Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
  • Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
  • docs: add back ci badge 8ee5626
  • Add github actions, remove travis. Closes #52 (#53) 5c8756a
  • CI: Drop unused sudo: false Travis directive (#50) 05978a7

juliangruber/brace-expansion@v2.0.1...v3.0.0

v2.1.1

  • Backport v5.0.6 change to v2 (#109) c3a817c

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates eslint from 9.39.4 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

  • cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
  • f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

Updates typescript-eslint from 8.41.0 to 8.65.0

Release notes

Sourced from typescript-eslint's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
  • typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

  • support parsing import defer (#12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for typescript-eslint since your current version.


Updates zwave-js from 15.22.4 to 15.26.0

Release notes

Sourced from zwave-js's releases.

Release v15.26.0

Features

  • Added support for proprietary controller commands on Aeotec and Z-Wave.me controllers (#8949)
  • Ongoing interviews are now paused during inclusion, security bootstrapping and exclusion. This should greatly improve the reliability when adding multiple devices at once. (#8951)

Bugfixes

  • Added a work around for some locks incorrectly reporting 0 steps remaining immediately after starting credential learning (#8976)
  • Increased timeouts for bulk-deleting users/credentials, which can take significantly longer than 1 second on some locks (#8978)
  • Fixed several issues that could lead to stale credentials being cached (#8977, #8966)

Config file changes

  • Add UltraPro 800 Series On/Off Switch (#8973)
  • Add UltraPro 800 Series dimmer (#8972)
  • Add GR-105N device configuration (#8960)
  • Add Nexa ZPR-111 parameters (#8495)
  • Correct and clean up all Fibaro device files (#8955)
  • Fix broken link to Honeywell T6 Pro manual (#8970)

Changes under the hood

  • The development MCP server is now able to search for config parameters semantically, allowing AI agents to spot similar parameters and matching templates (#8958, #8974)

Release v15.25.3

Bugfixes

  • Added missing exports for AssociationGroupInfo, UserCode and EndpointCapability types (#8933)
  • Correct Irrigation CC nominalCurrent metadata and low flow error label (#8932)
  • Fixed an incorrect assertion in the Window Covering CC setValue API (#8931)

Config file changes

  • Correct Schneider Electric SQR44102 state-after-power-failure values (#8944)
  • Override supported thermostat modes for Fibaro FGT-001 (#8921)

Changes under the hood

  • Parallelize integration tests, avoid unnecessary timeouts (#8935)
  • Our documentation for CC-specific APIs now includes related types, and types are now turned into links to their definition and previewed on hover (#8936)

Release v15.25.2

Bugfixes

  • When sending S2 encapsulated commands with delivery verification, receiving a command with the next expected sequence number is now treated as a delivery verification instead of continuing to wait for a potential NonceReport (#8906)
  • Fixes an issue where cached User Code CC values could get out of sync by using the unified Access Control API on devices supporting Supervision (#8927)
  • When devices are not known to the firmware update service, this information is now cached instead of causing repeated checks (#8926)
  • On slow devices, Z-Wave JS now distinguishes between actuator and non-actuator command classes when deciding whether a value should be updated optimistically (#8911)

Config file changes

  • Correct value size for Zooz ZEN78, params 13/14 (#8904)
  • Add Fortune Brands YRD4X0-F-ZW4 (#8892)
  • Add fingerprint for Leviton VRCZ4-1LX (#8907)

Changes under the hood

  • Migrate device interviews to the task scheduler (#8923)
  • Migrate NVM backup/restore and OTW updates to the task scheduler (#8925)

... (truncated)

Changelog

Sourced from zwave-js's changelog.

15.26.0 (2026-07-17)

Features

  • Added support for proprietary controller commands on Aeotec and Z-Wave.me controllers (#8949)
  • Ongoing interviews are now paused during inclusion, security bootstrapping and exclusion. This should greatly improve the reliability when adding multiple devices at once. (#8951)

Bugfixes

  • Added a work around for some locks incorrectly reporting 0 steps remaining immediately after starting credential learning (#8976)
  • Increased timeouts for bulk-deleting users/credentials, which can take significantly longer than 1 second on some locks (#8978)
  • Fixed several issues that could lead to stale credentials being cached (#8977, #8966)

Config file changes

  • Add UltraPro 800 Series On/Off Switch (#8973)
  • Add UltraPro 800 Series dimmer (#8972)
  • Add GR-105N device configuration (#8960)
  • Add Nexa ZPR-111 parameters (#8495)
  • Correct and clean up all Fibaro device files (#8955)
  • Fix broken link to Honeywell T6 Pro manual (#8970)

Changes under the hood

  • The development MCP server is now able to search for config parameters semantically, allowing AI agents to spot similar parameters and matching templates (#8958, #8974)

15.25.3 (2026-07-09)

Bugfixes

  • Added missing exports for AssociationGroupInfo, UserCode and EndpointCapability types (#8933)
  • Correct Irrigation CC nominalCurrent metadata and low flow error label (#8932)
  • Fixed an incorrect assertion in the Window Covering CC setValue API (#8931)

Config file changes

  • Correct Schneider Electric SQR44102 state-after-power-failure values (#8944)
  • Override supported thermostat modes for Fibaro FGT-001 (#8921)

Changes under the hood

  • Parallelize integration tests, avoid unnecessary timeouts (#8935)
  • Our documentation for CC-specific APIs now includes related types, and types are now turned into links to their definition and previewed on hover (#8936)

15.25.2 (2026-07-03)

Bugfixes

  • When sending S2 encapsulated commands with delivery verification, receiving a command with the next expected sequence number is now treated as a delivery verification instead of continuing to wait for a potential NonceReport (#8906)
  • Fixes an issue where cached User Code CC values could get out of sync by using the unified Access Control API on devices supporting Supervision (#8927)
  • When devices are not known to the firmware update service, this information is now cached instead of causing repeated checks (#8926)
  • On slow devices, Z-Wave JS now distinguishes between actuator and non-actuator command classes when deciding whether a value should be updated optimistically (#8911)

Config file changes

  • Correct value size for Zooz ZEN78, params 13/14 (#8904)
  • Add Fortune Brands YRD4X0-F-ZW4 (#8892)
  • Add fingerprint for Leviton VRCZ4-1LX (#8907)

Changes under the hood

  • Migrate device interviews to the task scheduler (#8923)
  • Migrate NVM backup/restore and OTW updates to the task scheduler (#8925)

... (truncated)

Commits
  • e5bc0da chore: release v15.26.0
  • 160d7a5 chore: update changelog
  • 4b75f1a fix(cc): increase timeouts for bulk-deleting users/credentials (#8978)
  • ece9711 fix(cc): purge deleted users and credentials from cache in persistValues (#...
  • cb7697c fix(bot): harden automated support answers (#8975)
  • 068a20e fix: work around credential learn status with incorrect steps remaining (#8976)
  • 50aaa26 fix(mcp): skip optional ONNX GPU download (#8974)
  • 1658562 feat(config): add UltraPro 800 Series On/Off Switch (#8973)
  • 3fa904c feat(config): add UltraPro 800 Series dimmer (#8972)
  • 8c6e487 docs: nudge AI to use zwave-dev MCP tools for config authoring (#8971)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…e-js

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.8 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [eslint](https://github.com/eslint/eslint), [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) and [zwave-js](https://github.com/zwave-js/zwave-js). These dependencies need to be updated together.


Updates `brace-expansion` from 2.0.2 to 5.0.8
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v2.0.2...v5.0.8)

Updates `eslint` from 9.39.4 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.8.0)

Updates `typescript-eslint` from 8.41.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint)

Updates `zwave-js` from 15.22.4 to 15.26.0
- [Release notes](https://github.com/zwave-js/zwave-js/releases)
- [Changelog](https://github.com/zwave-js/zwave-js/blob/master/CHANGELOG.md)
- [Commits](zwave-js/zwave-js@v15.22.4...v15.26.0)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.8
  dependency-type: indirect
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
- dependency-name: typescript-eslint
  dependency-version: 8.65.0
  dependency-type: direct:development
- dependency-name: zwave-js
  dependency-version: 15.26.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #74.

@dependabot dependabot Bot closed this Jul 30, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-4ec76c6d21 branch July 30, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants