Skip to content

Bump the minor_versions group across 1 directory with 41 updates#7457

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor_versions-e2fd84e6a3
Open

Bump the minor_versions group across 1 directory with 41 updates#7457
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor_versions-e2fd84e6a3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026 •
edited
Loading

Bumps the minor_versions group with 41 updates in the / directory:

Package From To
@typescript-eslint/parser 8.56.1 8.60.0
graphql 16.10.0 16.14.0
liquidjs 10.26.0 10.27.0
pathe 1.1.1 1.1.2
zod 3.24.4 3.25.76
@oclif/core 4.5.3 4.11.4
@shopify/theme-check-node 3.25.0 3.26.0
h3 1.15.9 1.15.11
prettier 3.8.1 3.8.3
ws 8.18.0 8.21.0
@ast-grep/napi 0.33.0 0.43.0
@apidevtools/json-schema-ref-parser 11.7.3 11.9.3
@bugsnag/js 8.6.0 8.9.0
@opentelemetry/api 1.9.0 1.9.1
@opentelemetry/core 1.30.0 1.30.1
@opentelemetry/exporter-metrics-otlp-http 0.57.0 0.218.0
@opentelemetry/resources 1.30.0 1.30.1
@opentelemetry/sdk-metrics 1.30.0 1.30.1
ajv 8.18.0 8.20.0
chalk 5.4.1 5.6.2
dotenv 16.4.7 16.6.1
form-data 4.0.4 4.0.5
is-executable 2.0.1 2.0.2
is-wsl 3.1.0 3.1.1
jose 5.9.6 5.10.0
lodash 4.17.23 4.18.1
macaddress 0.5.3 0.5.4
minimatch 9.0.8 9.0.9
semver 7.6.3 7.8.1
stacktracey 2.1.8 2.2.0
strip-ansi 7.1.0 7.2.0
supports-hyperlinks 3.1.0 3.2.0
@typescript-eslint/eslint-plugin 8.56.1 8.60.0
eslint-config-prettier 10.1.5 10.1.8
eslint-plugin-prettier 5.5.1 5.5.5
eslint-plugin-tsdoc 0.4.0 0.5.2
eslint-plugin-unused-imports 4.1.4 4.4.1
@vitest/eslint-plugin 1.1.44 1.6.18
globals 16.2.0 16.5.0
@shopify/theme-language-server-node 2.21.0 2.21.2
yaml 2.8.3 2.9.0

Updates @typescript-eslint/parser from 8.56.1 to 8.60.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

  • rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

  • playground TS version selector is not working (#12326, #12325)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.4

8.59.4 (2026-05-18)

🩹 Fixes

  • eslint-plugin: [no-floating-promises] stack overflow when using recursive types (#12294)
  • project-service: throw error cause in getParsedConfigFileFromTSServer (#12321)
  • typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#12340)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.3

8.59.3 (2026-05-11)

This was a version bump only, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.2

8.59.2 (2026-05-04)

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.60.0 (2026-05-25)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.4 (2026-05-18)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.3 (2026-05-11)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.2 (2026-05-04)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.1 (2026-04-27)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.0 (2026-04-20)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.2 (2026-04-13)

... (truncated)

Commits
  • f891c29 chore(release): publish 8.60.0
  • ca6ca14 chore(release): publish 8.59.4
  • 48e13c0 chore(release): publish 8.59.3
  • 44f9625 chore(deps): update vitest monorepo to v4.1.5 (#12307)
  • 2ec35f1 chore(release): publish 8.59.2
  • 5245793 chore(release): publish 8.59.1
  • ea9ae4f chore(release): publish 8.59.0
  • 90c2803 chore(release): publish 8.58.2
  • be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
  • 5311ed3 chore(release): publish 8.58.1
  • Additional commits viewable in compare view

Updates graphql from 16.10.0 to 16.14.0

Release notes

Sourced from graphql's releases.

v16.14.0 (2026-05-03)

New Feature 🚀

  • #4317 Allow configuration of the ofType introspection depth (@​Nols1000)
  • #4521 Add experimental support for directives on directive definitions (@​BoD)

Bug Fix 🐞

Docs 📝

Committers: 4

v16.13.2 (2026-03-24)

Docs 📝

Polish 💅

  • #4631 Use Object.create(null) over {} to avoid prototype issues - v16 (@​benjie)

Internal 🏠

Committers: 2

v16.13.1 (2026-03-04)

First 16.x.x release with trusted publishing and provenance, see: https://docs.npmjs.com/trusted-publishers for additional information.

Docs 📝

Internal 🏠

Committers: 2

16.13.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql since your current version.


Updates liquidjs from 10.26.0 to 10.27.0

Release notes

Sourced from liquidjs's releases.

v10.27.0

10.27.0 (2026-05-15)

Features

  • context: null-prototype scope frames via createScope (#899) (47d3f1b)
Changelog

Sourced from liquidjs's changelog.

10.27.0 (2026-05-15)

Features

  • context: null-prototype scope frames via createScope (#899) (47d3f1b)
Commits

Updates pathe from 1.1.1 to 1.1.2

Release notes

Sourced from pathe's releases.

v1.1.2

compare changes

🩹 Fixes

  • Trim root folder / when calculating relative paths (#142)
  • Check process.cwd before calling it (#147)
  • Uppercase windows drive letters (#151)
  • resolveAlias: Handle aliases ending with trailing slash (#155)
  • relative: Handle different windows drive letters (#158)

❤️ Contributors

Changelog

Sourced from pathe's changelog.

v1.1.2

compare changes

🩹 Fixes

  • Trim root folder / when calculating relative paths (#142)
  • Check process.cwd before calling it (#147)
  • Uppercase windows drive letters (#151)
  • resolveAlias: Handle aliases ending with trailing slash (#155)
  • relative: Handle different windows drive letters (#158)

🏡 Chore

❤️ Contributors

Commits
  • faa2b11 fix(relative): handle different windows drive letters (#158)
  • 2fa8aaa fix(resolveAlias): handle aliases ending with trailing slash (#155)
  • dffa918 chore: use changelogen for release
  • b310408 chore: update lockfile
  • cbd6095 fix: uppercase windows drive letters (#151)
  • 04a0aee chore(deps): update all non-major dependencies (#157)
  • c9029e2 chore(deps): update all non-major dependencies (#156)
  • ac826eb chore(deps): update all non-major dependencies (#153)
  • 66ef08f chore(deps): update all non-major dependencies (#152)
  • 0bb67d4 fix: check process.cwd before calling it (#147)
  • Additional commits viewable in compare view

Updates zod from 3.24.4 to 3.25.76

Release notes

Sourced from zod's releases.

v3.25.76

Commits:

  • 91c9ca6385bef38278605294498af06c89b9aa68 fix: cleanup _idmap of $ZodRegistry (#4837)
  • 9cce1c5779aea32d00226a931a7f67d3e2529d58 docs: fix typo in flattenError example on error-formatting page (#4819) (#4833)
  • a3560aeb6c3a8675a932601be79cfae897eec9d9 v3.25.76 (#4838)
  • 50606616c0d291caf3210a7521da51271b918333 Release 3.25.76
  • 7baee4e17f86f4017e09e12b0acdee36a5b1c087 Update index.mdx (#4831)

v3.25.75

Commits:

  • c5f349b6c4e76f879eba9fd350dd79950fcb02f9 Fix z.undefined() behavior in toJSONSchema

v3.25.74

Commits:

  • ae0dbe1f79b2421f6d91ec0796295763436b26e2 Partial record
  • 39c5f71c92b9c4c39fc0a59b9375204fa140eaf0 3.25.74

v3.25.73

Commits:

  • 1021d3c230d41d600698a6d98b9db86c19f56904 v3.25.73 (#4822)

v3.25.72

Commits:

  • 4a4dac7cfb787162eeb79165d39bbb4830d4a6de Warn about id uniqueness check on Metadata page (#4782)
  • 7a5838dc0da967e15a217bf5abdd81f725da46c4 feat(locale): Add Esperanto (eo) locale (#4743)
  • 36fe14e1472f2a7cd71415841be8832fc4e9acc5 Fix optionality of schemas (#4769)
  • 20c8c4b67b508d653012808f69c43c7cfe5b39e3 Fix re-export bug
  • 8b0df10c8757a5fbd75bd65128ae183d764b3304 3.25.72

v3.25.71

Commits:

  • 66a0f34bfc746acddbfb68426b8b1b3f1d3d1727 Move source to /src (#4808)
  • 2a15f44606fd66335c6ebc1f91d702bb6bc95693 3.25.71

v3.25.70

Commits:

  • bd81c7cfaa03f61365d1c708c7e0f1cac54ea9ca Add ecosystem listing to homepage
  • 1ddb9719564e644722852193930a09d54f720443 Add Mobb to sponsors
  • 30ba440859f5b9184817f578626ff85d484aec27 Clean up ecosystem.mdx
  • 0ef1b85b5923a1a06a2afab47dbad249d105a997 Add svelte-jsonschema-form to form integrations (#4784)
  • 14715f147363e88e73190bb6ddbdf008914f0b19 docs: fix Lambda spelling (#4804)
  • f6da030188ea30defc025bbc672e5a81fbe93078 Add back src (#4806)
  • 364200a67c9f74ef252dbfa65ea93aab8fb15c06 Revert "Add back src (#4806)"

... (truncated)

Commits

Updates @oclif/core from 4.5.3 to 4.11.4

Release notes

Sourced from @​oclif/core's releases.

4.11.4

Bug Fixes

  • deps: bump semver from 7.8.0 to 7.8.1 (65e054c)

4.11.3

Bug Fixes

  • updating tinyglobby dependency [skip-validate-pr] (1dc29ff)

4.11.2

Bug Fixes

  • deps: bump semver from 7.7.4 to 7.8.0 (1471fe3)

4.11.1

Bug Fixes

  • deps: bump ip-address from 10.1.0 to 10.2.0 (e36a6d8)

4.11.0

Bug Fixes

Features

4.10.6

Bug Fixes

  • deps: bump postcss from 8.4.31 to 8.5.10 (9b29ad4)

4.10.5

Bug Fixes

  • deps: bump minimatch from 10.2.4 to 10.2.5 (45ff39a)

4.10.4

Bug Fixes

  • deps: bump lodash from 4.17.21 to 4.18.1 (7db542d)

... (truncated)

Changelog

Sourced from @​oclif/core's changelog.

4.11.4 (2026-05-23)

Bug Fixes

  • deps: bump semver from 7.8.0 to 7.8.1 (65e054c)

4.11.3 (2026-05-15)

Bug Fixes

  • updating tinyglobby dependency [skip-validate-pr] (1dc29ff)

4.11.2 (2026-05-09)

Bug Fixes

  • deps: bump semver from 7.7.4 to 7.8.0 (1471fe3)

4.11.1 (2026-05-07)

Bug Fixes

  • deps: bump ip-address from 10.1.0 to 10.2.0 (e36a6d8)

4.11.0 (2026-04-30)

Bug Fixes

Features

... (truncated)

Commits
  • d55138e chore(release): 4.11.4 [skip ci]
  • ef99bf7 Merge pull request #1604 from oclif/dependabot-npm_and_yarn-semver-7.8.1
  • 65e054c fix(deps): bump semver from 7.8.0 to 7.8.1
  • 09e6926 Merge pull request #1602 from oclif/dependabot-npm_and_yarn-oclif-plugin-plug...
  • 6b029a8 chore(dev-deps): bump @​oclif/plugin-plugins from 5.4.68 to 5.4.69
  • bd28ff2 Merge pull request #1598 from oclif/dependabot-npm_and_yarn-oclif-plugin-help...
  • 37cb4d8 Merge pull request #1599 from oclif/dependabot-npm_and_yarn-oclif-plugin-plug...
  • a240a45 chore(dev-deps): bump @​oclif/plugin-plugins from 5.4.65 to 5.4.68
  • ae42b32 chore(dev-deps): bump @​oclif/plugin-help from 6.2.47 to 6.2.48
  • 101c033 chore(release): 4.11.3 [skip ci]
  • Additional commits viewable in compare view

Updates @shopify/theme-check-node from 3.25.0 to 3.26.0

Release notes

Sourced from @​shopify/theme-check-node's releases.

@​shopify/theme-check-node@​3.26.0

Patch Changes

  • Updated dependencies
  • Updated dependencies [892683dc]
  • Updated dependencies [e330f115]
    • @​shopify/theme-graph@​0.2.6
    • @​shopify/theme-check-common@​3.26.0
    • @​shopify/theme-check-docs-updater@​3.26.0

@​shopify/theme-check-node@​3.25.1

Patch Changes

  • 5f098a2d: Temporarily remove ValidScopedCSSClass from the recommended config. The check causes severe save lag in VS Code on larger themes (see #1179) because it re-parses every {% stylesheet %} tag in the theme on every save. It remains available as an opt-in check. Will be re-enabled once the performance issue is resolved.
  • 54e1418b: Fix VSCode extension failing to resolve custom check packages from node_modules (e.g. extends: '@acme/theme-check-extension/recommended.yml'). The extension server is webpack-bundled, so require.resolve was being handled by webpack instead of Node.js, returning a module ID rather than a file path. Now uses createRequire from node:module to get real Node.js resolution.
  • Updated dependencies
  • Updated dependencies [5f098a2d]
    • @​shopify/theme-graph@​0.2.5
    • @​shopify/theme-check-common@​3.25.1
    • @​shopify/theme-check-docs-updater@​3.25.1
Changelog

Sourced from @​shopify/theme-check-node's changelog.

3.26.0

Patch Changes

  • Updated dependencies
  • Updated dependencies [892683dc]
  • Updated dependencies [e330f115]
    • @​shopify/theme-graph@​0.2.6
    • @​shopify/theme-check-common@​3.26.0
    • @​shopify/theme-check-docs-updater@​3.26.0

3.25.1

Patch Changes

  • 5f098a2d: Temporarily remove ValidScopedCSSClass from the recommended config. The check causes severe save lag in VS Code on larger themes (see #1179) because it re-parses every {% stylesheet %} tag in the theme on every save. It remains available as an opt-in check. Will be re-enabled once the performance issue is resolved.
  • 54e1418b: Fix VSCode extension failing to resolve custom check packages from node_modules (e.g. extends: '@acme/theme-check-extension/recommended.yml'). The extension server is webpack-bundled, so require.resolve was being handled by webpack instead of Node.js, returning a module ID rather than a file path. Now uses createRequire from node:module to get real Node.js resolution.
  • Updated dependencies
  • Updated dependencies [5f098a2d]
    • @​shopify/theme-graph@​0.2.5
    • @​shopify/theme-check-common@​3.25.1
    • @​shopify/theme-check-docs-updater@​3.25.1
Commits
  • 7c0ee19 Theme Tools Release — 2026-04-23 (#1187)
  • 892683d perf: cache ValidScopedCSSClass extraction on document model (#1181)
  • e330f11 feat: add DeprecatedFontsOnSettingsData check for config/settings_data.json (...
  • ac5393c Theme Tools Release — 2026-04-17 (#1178)
  • 5f098a2 fix: remove ValidScopedCSSClass from recommended config (#1180)
  • 54e1418 fix: use createRequire for node_modules resolution in VSCode extension (#1171)
  • See full diff in compare view

Updates h3 from 1.15.9 to 1.15.11

Release notes

Sourced from h3's releases.

v1.15.11

compare changes

🏡 Chore

v1.15.10

compare changes

🩹 Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

❤️ Contributors

Changelog

Sourced from h3's changelog.

v1.15.11

compare changes

🏡 Chore

❤️ Contributors

v1.15.10

compare changes

🩹 Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

🏡 Chore

❤️ Contributors

Commits

Updates prettier from 3.8.1 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

3.8.2

  • Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@​switch (foo) {
@​case (1) {}
@​default never;
}

arrow function and instanceof expressions.

</tr></table>

... (truncated)

Commits

Updates ws from 8.18.0 to 8.21.0

Release notes

Sourced from ws's releases.

8.21.0

Features

  • Introduced the maxBufferedChunks and maxFragments options (2b2abd45).

Bug fixes

  • Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).

A high volume of tiny fragments and data chunks could be sent by a peer, using modest network traffic, to crash a ws server or client due to OOM.

import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer({ port: 0 }, function () {
const data = Buffer.alloc(1);
const options = { fin: false };
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port});
ws.on('open', function () {
(function send() {
ws.send(data, options, function (err) {
if (err) return;
send();
});
})();
});
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(client close - code: ${code} reason: ${reason.toString()});
});
});
wss.on('connection', function (ws) {
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(server close - code: ${code} reason: ${reason.toString()});
});
});

The vulnerability was responsibly disclosed and fixed by Nadav Magier.

In vulnerable versions, the issue can be mitigated by lowering the value of the maxPayload option if possible.

8.20.1

... (truncated)

Commits
  • bca91ad [dist] 8.21.0
  • 2b2abd4 [security] Limit retained message parts
  • 78eabe2 [security] Add latest vulnerability to SECURITY.md
  • 5d9b316 [dist] 8.20.1
  • c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
  • ce2a3d6 [ci] Test on node 26
  • 58e45b8 [ci] Do not test on node 25
  • 5f26c24 [ci] Run the lint step on node 24
  • 8439255 [dist] 8.20.0
  • d3503c1 [minor] Export the PerMessageDeflate class and header utils
  • Additional commits viewable in compare view

Updates @ast-grep/napi from 0.33.0 to 0.43.0

Release notes

Sourced from @​ast-grep/napi's releases.

0.43.0

0.42.3

0.42.2

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 4, 2026
@dependabot dependabot Bot requested review from a team as code owners May 4, 2026 08:38
@github-actions github-actions Bot added devtools-gardener Post the issue or PR to Slack for the gardener no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users. labels May 4, 2026
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-e2fd84e6a3 branch 2 times, most recently from 7ef4858 to fbd9325 Compare May 7, 2026 11:24
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-e2fd84e6a3 branch from fbd9325 to 9027017 Compare May 12, 2026 22:58
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-e2fd84e6a3 branch 4 times, most recently from 1d65009 to 869cee1 Compare May 26, 2026 23:58
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-e2fd84e6a3 branch from 869cee1 to 41ce1fa Compare May 27, 2026 08:57
@dependabot
Bump the minor_versions group across 1 directory with 41 updates
b7706ed 
Bumps the minor_versions group with 41 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.60.0` |
| [graphql](https://github.com/graphql/graphql-js) | `16.10.0` | `16.14.0` |
| [liquidjs](https://github.com/harttle/liquidjs) | `10.26.0` | `10.27.0` |
| [pathe](https://github.com/unjs/pathe) | `1.1.1` | `1.1.2` |
| [zod](https://github.com/colinhacks/zod) | `3.24.4` | `3.25.76` |
| [@oclif/core](https://github.com/oclif/core) | `4.5.3` | `4.11.4` |
| [@shopify/theme-check-node](https://github.com/Shopify/theme-tools/tree/HEAD/packages/theme-check-node) | `3.25.0` | `3.26.0` |
| [h3](https://github.com/h3js/h3) | `1.15.9` | `1.15.11` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |
| [ws](https://github.com/websockets/ws) | `8.18.0` | `8.21.0` |
| [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.33.0` | `0.43.0` |
| [@apidevtools/json-schema-ref-parser](https://github.com/APIDevTools/json-schema-ref-parser) | `11.7.3` | `11.9.3` |
| [@bugsnag/js](https://github.com/bugsnag/bugsnag-js) | `8.6.0` | `8.9.0` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` |
| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `1.30.0` | `1.30.1` |
| [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.57.0` | `0.218.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.30.0` | `1.30.1` |
| [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `1.30.0` | `1.30.1` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [chalk](https://github.com/chalk/chalk) | `5.4.1` | `5.6.2` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.7` | `16.6.1` |
| [form-data](https://github.com/form-data/form-data) | `4.0.4` | `4.0.5` |
| [is-executable](https://github.com/sindresorhus/is-executable) | `2.0.1` | `2.0.2` |
| [is-wsl](https://github.com/sindresorhus/is-wsl) | `3.1.0` | `3.1.1` |
| [jose](https://github.com/panva/jose) | `5.9.6` | `5.10.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` |
| [macaddress](https://github.com/scravy/node-macaddress) | `0.5.3` | `0.5.4` |
| [minimatch](https://github.com/isaacs/minimatch) | `9.0.8` | `9.0.9` |
| [semver](https://github.com/npm/node-semver) | `7.6.3` | `7.8.1` |
| [stacktracey](https://github.com/xpl/stacktracey) | `2.1.8` | `2.2.0` |
| [strip-ansi](https://github.com/chalk/strip-ansi) | `7.1.0` | `7.2.0` |
| [supports-hyperlinks](https://github.com/chalk/supports-hyperlinks) | `3.1.0` | `3.2.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.1` | `8.60.0` |
| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.1.5` | `10.1.8` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.1` | `5.5.5` |
| [eslint-plugin-tsdoc](https://github.com/microsoft/tsdoc/tree/HEAD/eslint-plugin) | `0.4.0` | `0.5.2` |
| [eslint-plugin-unused-imports](https://github.com/sweepline/eslint-plugin-unused-imports) | `4.1.4` | `4.4.1` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.1.44` | `1.6.18` |
| [globals](https://github.com/sindresorhus/globals) | `16.2.0` | `16.5.0` |
| [@shopify/theme-language-server-node](https://github.com/Shopify/theme-tools/tree/HEAD/packages/theme-language-server-node) | `2.21.0` | `2.21.2` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` |



Updates `@typescript-eslint/parser` from 8.56.1 to 8.60.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/parser)

Updates `graphql` from 16.10.0 to 16.14.0
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.10.0...v16.14.0)

Updates `liquidjs` from 10.26.0 to 10.27.0
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.26.0...v10.27.0)

Updates `pathe` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/unjs/pathe/releases)
- [Changelog](https://github.com/unjs/pathe/blob/main/CHANGELOG.md)
- [Commits](unjs/pathe@v1.1.1...v1.1.2)

Updates `zod` from 3.24.4 to 3.25.76
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.24.4...v3.25.76)

Updates `@oclif/core` from 4.5.3 to 4.11.4
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.5.3...4.11.4)

Updates `@shopify/theme-check-node` from 3.25.0 to 3.26.0
- [Release notes](https://github.com/Shopify/theme-tools/releases)
- [Changelog](https://github.com/Shopify/theme-tools/blob/main/packages/theme-check-node/CHANGELOG.md)
- [Commits](https://github.com/Shopify/theme-tools/commits/@shopify/theme-check-node@3.26.0/packages/theme-check-node)

Updates `h3` from 1.15.9 to 1.15.11
- [Release notes](https://github.com/h3js/h3/releases)
- [Changelog](https://github.com/h3js/h3/blob/v1.15.11/CHANGELOG.md)
- [Commits](h3js/h3@v1.15.9...v1.15.11)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.3)

Updates `ws` from 8.18.0 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.18.0...8.21.0)

Updates `@ast-grep/napi` from 0.33.0 to 0.43.0
- [Release notes](https://github.com/ast-grep/ast-grep/releases)
- [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md)
- [Commits](ast-grep/ast-grep@0.33.0...0.43.0)

Updates `@apidevtools/json-schema-ref-parser` from 11.7.3 to 11.9.3
- [Release notes](https://github.com/APIDevTools/json-schema-ref-parser/releases)
- [Commits](APIDevTools/json-schema-ref-parser@v11.7.3...v11.9.3)

Updates `@bugsnag/js` from 8.6.0 to 8.9.0
- [Release notes](https://github.com/bugsnag/bugsnag-js/releases)
- [Changelog](https://github.com/bugsnag/bugsnag-js/blob/next/CHANGELOG.md)
- [Commits](bugsnag/bugsnag-js@v8.6.0...v8.9.0)

Updates `@opentelemetry/api` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1)

Updates `@opentelemetry/core` from 1.30.0 to 1.30.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v1.30.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.30.0...v1.30.1)

Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.57.0 to 0.218.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.57.0...experimental/v0.218.0)

Updates `@opentelemetry/resources` from 1.30.0 to 1.30.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v1.30.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.30.0...v1.30.1)

Updates `@opentelemetry/sdk-metrics` from 1.30.0 to 1.30.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/v1.30.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.30.0...v1.30.1)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `chalk` from 5.4.1 to 5.6.2
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v5.4.1...v5.6.2)

Updates `dotenv` from 16.4.7 to 16.6.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.7...v16.6.1)

Updates `form-data` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.4...v4.0.5)

Updates `is-executable` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/sindresorhus/is-executable/releases)
- [Commits](sindresorhus/is-executable@v2.0.1...v2.0.2)

Updates `is-wsl` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/sindresorhus/is-wsl/releases)
- [Commits](sindresorhus/is-wsl@v3.1.0...v3.1.1)

Updates `jose` from 5.9.6 to 5.10.0
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v5.9.6...v5.10.0)

Updates `lodash` from 4.17.23 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

Updates `macaddress` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/scravy/node-macaddress/releases)
- [Commits](scravy/node-macaddress@0.5.3...0.5.4)

Updates `minimatch` from 9.0.8 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v9.0.8...v9.0.9)

Updates `semver` from 7.6.3 to 7.8.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.6.3...v7.8.1)

Updates `stacktracey` from 2.1.8 to 2.2.0
- [Changelog](https://github.com/xpl/stacktracey/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xpl/stacktracey/commits)

Updates `strip-ansi` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/chalk/strip-ansi/releases)
- [Commits](chalk/strip-ansi@v7.1.0...v7.2.0)

Updates `supports-hyperlinks` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/chalk/supports-hyperlinks/releases)
- [Commits](chalk/supports-hyperlinks@v3.1.0...v3.2.0)

Updates `@typescript-eslint/eslint-plugin` from 8.56.1 to 8.60.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/eslint-plugin)

Updates `eslint-config-prettier` from 10.1.5 to 10.1.8
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-config-prettier@v10.1.5...v10.1.8)

Updates `eslint-plugin-prettier` from 5.5.1 to 5.5.5
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.1...v5.5.5)

Updates `eslint-plugin-tsdoc` from 0.4.0 to 0.5.2
- [Changelog](https://github.com/microsoft/tsdoc/blob/main/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/microsoft/tsdoc/commits/eslint-plugin-tsdoc_v0.5.2/eslint-plugin)

Updates `eslint-plugin-unused-imports` from 4.1.4 to 4.4.1
- [Release notes](https://github.com/sweepline/eslint-plugin-unused-imports/releases)
- [Commits](sweepline/eslint-plugin-unused-imports@v4.1.4...v4.4.1)

Updates `@vitest/eslint-plugin` from 1.1.44 to 1.6.18
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.1.44...v1.6.18)

Updates `globals` from 16.2.0 to 16.5.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v16.2.0...v16.5.0)

Updates `@shopify/theme-language-server-node` from 2.21.0 to 2.21.2
- [Release notes](https://github.com/Shopify/theme-tools/releases)
- [Changelog](https://github.com/Shopify/theme-tools/blob/main/packages/theme-language-server-node/CHANGELOG.md)
- [Commits](https://github.com/Shopify/theme-tools/commits/@shopify/theme-language-server-node@2.21.2/packages/theme-language-server-node)

Updates `yaml` from 2.8.3 to 2.9.0
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.3...v2.9.0)

---
updated-dependencies:
- dependency-name: "@apidevtools/json-schema-ref-parser"
  dependency-version: 11.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@ast-grep/napi"
  dependency-version: 0.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@bugsnag/js"
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@oclif/core"
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/core"
  dependency-version: 1.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/exporter-metrics-otlp-http"
  dependency-version: 0.216.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/resources"
  dependency-version: 1.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: "@opentelemetry/sdk-metrics"
  dependency-version: 1.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: "@shopify/theme-check-node"
  dependency-version: 3.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@shopify/theme-language-server-node"
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.59.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.59.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.16
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: chalk
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: dotenv
  dependency-version: 16.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: eslint-config-prettier
  dependency-version: 10.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: eslint-plugin-tsdoc
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: eslint-plugin-unused-imports
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: form-data
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: globals
  dependency-version: 16.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: graphql
  dependency-version: 16.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: h3
  dependency-version: 1.15.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: is-executable
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: is-wsl
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: jose
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: liquidjs
  dependency-version: 10.25.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: macaddress
  dependency-version: 0.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: pathe
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: semver
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: stacktracey
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: strip-ansi
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: supports-hyperlinks
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: ws
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
- dependency-name: yaml
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor_versions
- dependency-name: zod
  dependency-version: 3.25.76
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor_versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-minor_versions-e2fd84e6a3 branch from 41ce1fa to b7706ed Compare May 27, 2026 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file devtools-gardener Post the issue or PR to Slack for the gardener no-changelog This PR doesn't include a changeset entry. Is an internal only change not relevant to end users.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants