Skip to content

chore(deps-dev): bump the dev-dependencies group with 4 updates#83

Merged
mattcosta7 merged 1 commit intomainfrom
dependabot/npm_and_yarn/dev-dependencies-3befc11563
Mar 5, 2026
Merged

chore(deps-dev): bump the dev-dependencies group with 4 updates#83
mattcosta7 merged 1 commit intomainfrom
dependabot/npm_and_yarn/dev-dependencies-3befc11563

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 5, 2026

Bumps the dev-dependencies group with 4 updates: @changesets/changelog-github, @changesets/cli, portless and tsdown.

Updates @changesets/changelog-github from 0.5.2 to 0.6.0

Release notes

Sourced from @​changesets/changelog-github's releases.

@​changesets/changelog-github@​0.6.0

Minor Changes

Patch Changes

Commits
  • 3ab4d89 Version Packages (#1817)
  • 1772598 Fix changelog entry insertion when no package title is present in the `CHANGE...
  • 6df3a5e Allow versioned private packages to depend on skipped packages without requir...
  • 2a73025 Fix confusing 'Question-2' prompt label when using external editor (#1857)
  • 667fe5a Support ESM for custom changelog and commit options (#1774)
  • e462d89 Add scopes automatically in the GitHub new token link in the printed error me...
  • 503fcaa Support absolute paths in status output flag (#1776)
  • d4b8ad8 Improve error messages when fetching from GitHub api (#1781)
  • ece0376 Improve baseBranch docs (#1778)
  • 0e8e01e Allow Changesets to be executed from non-root directories (#1806)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​changesets/changelog-github since your current version.


Updates @changesets/cli from 2.29.8 to 2.30.0

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.30.0

Minor Changes

  • #1840 057cca2 Thanks @​wotan-allfather! - Add --since flag to add command

    The add command now supports a --since flag that allows you to specify which branch, tag, or git ref to use when detecting changed packages. This is useful for gitflow workflows where you have multiple target branches and the baseBranch config option doesn't cover all use cases.

    Example: changeset add --since=develop

    If not provided, the command falls back to the baseBranch value in your .changeset/config.json.

  • #1845 2b4a66a Thanks @​Andarist! - Delegate OTP prompting to the package manager instead of handling it in-process. This allows Changesets to use the package manager's native web auth support.

  • #1774 667fe5a Thanks @​bluwy! - Support importing custom commit option ES module. Previously, it used require() which only worked for CJS modules, however now it uses import() which supports both CJS and ES modules.

  • #1839 73b1809 Thanks @​leochiu-a! - Add a --message (-m) flag to changeset add (and default changeset) so the changeset summary can be provided from the command line. When --message is present, the summary prompt is skipped while the final confirmation step is kept.

  • #1806 0e8e01e Thanks @​luisadame! - Changeset CLI can now be run from the nested directories in the project, where the .changeset directory has to be found in one of the parent directories

Patch Changes

  • #1849 9dc3230 Thanks @​Andarist! - Compute the terminal's size lazily to avoid spurious stderr output in non-interactive mode

  • #1857 2a73025 Thanks @​mixelburg! - Fix confusing prompt labels when entering changeset summary after external editor fallback

  • #1842 6df3a5e Thanks @​RodrigoHamuy! - Allow private packages to depend on skipped packages without requiring them to also be skipped. Private packages are not published to npm, so it is safe for them to have dependencies on ignored or unversioned packages.

  • #1776 503fcaa Thanks @​bluwy! - Support absolute paths in changeset status --output <path>

  • Updated dependencies [667fe5a, 1772598, b6f4c74, 6df3a5e, 6df3a5e, 27fd8f4]:

    • @​changesets/apply-release-plan@​7.1.0
    • @​changesets/config@​3.1.3
    • @​changesets/get-release-plan@​4.0.15
    • @​changesets/read@​0.6.7
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​changesets/cli since your current version.


Updates portless from 0.4.2 to 0.5.2

Release notes

Sourced from portless's releases.

v0.5.2

Documentation

  • Add git worktree documentation to README, docs site, and agent skill
  • portless run automatically detects linked git worktrees and prefixes the URL with the branch name (e.g. fix-ui.myapp.localhost) so each worktree gets a unique URL with no config changes
  • Updated npm README with worktree section

Install / Upgrade

npm install -g portless@0.5.2

v0.5.1

Bug Fixes

  • npm README: Copy root README.md into the package at publish time so it appears on npmjs.com
  • homepage: Point npm homepage to https://port1355.dev instead of the GitHub repo

v0.5.0

Features

  • portless run subcommand: Automatically infer the project name from package.json, git root, or directory name instead of specifying it manually. (#55)
  • portless alias command: Register routes for services not spawned by portless (e.g. Docker containers with published ports). Aliases persist across stale-route cleanup. (#73)
  • PORTLESS_URL env var: Child processes now receive PORTLESS_URL containing the public .localhost URL (e.g. http://myapp.localhost:1355) so apps can self-reference their own URL. (#56)
  • --app-port flag: Specify a fixed port for the app instead of automatic assignment. Also configurable via PORTLESS_APP_PORT env var. Useful when integrating with tools that provide their own port. (#72)
  • Wildcard subdomain routing: Subdomains now match registered hostnames (e.g. tenant.myapp.localhost matches myapp.localhost). Exact matches take priority over wildcard matches. (#71)
  • /etc/hosts sync: Automatically sync .localhost hostnames to /etc/hosts for environments where .localhost does not resolve to 127.0.0.1 by default. (#74)
  • Multi-distro Linux CA trust: portless trust now supports Arch, Fedora/RHEL/CentOS, and openSUSE in addition to Debian/Ubuntu. Falls back to command probing when /etc/os-release detection fails. (#45)
  • Expo and React Native support: Auto-inject --port and --host flags for expo start and react-native start. (#42)
  • Branded error and status pages: The proxy now renders styled HTML pages for 404, 502, 508, and other status codes instead of plain text. (#70)

Bug Fixes

  • Stream errors: Handle proxy stream errors gracefully to prevent unhandled exceptions from crashing the proxy. (#57)

Install / Upgrade

npm install -g portless@0.5.0
Changelog

Sourced from portless's changelog.

0.5.2

Documentation

  • Add git worktree documentation to README, docs site, and agent skill. portless run automatically detects linked worktrees and prefixes the URL with the branch name (e.g. fix-ui.myapp.localhost).
  • Document worktree support in 0.5.0 changelog entry.

0.5.1

Bug Fixes

  • npm README: Copy root README.md into the package at publish time so it appears on npmjs.com.
  • homepage: Point npm homepage to https://port1355.dev.

0.5.0

Features

  • portless run subcommand: Automatically infer the project name from package.json, git root, or directory name instead of specifying it manually. In git worktrees, the branch name is prepended as a subdomain prefix (e.g. fix-ui.myapp.localhost) so each worktree gets a unique URL with no config changes. (#55, #68)
  • portless alias command: Register routes for services not spawned by portless (e.g. Docker containers with published ports). Aliases persist across stale-route cleanup. (#73)
  • PORTLESS_URL env var: Child processes now receive PORTLESS_URL containing the public .localhost URL (e.g. http://myapp.localhost:1355) so apps can self-reference their own URL. (#56)
  • --app-port flag: Specify a fixed port for the app instead of automatic assignment. Also configurable via PORTLESS_APP_PORT env var. Useful when integrating with tools that provide their own port. (#72)
  • wildcard subdomain routing: Subdomains now match registered hostnames (e.g. tenant.myapp.localhost matches myapp.localhost). Exact matches take priority over wildcard matches. (#71)
  • /etc/hosts sync: Automatically sync .localhost hostnames to /etc/hosts for environments where .localhost does not resolve to 127.0.0.1 by default. (#74)
  • multi-distro Linux CA trust: portless trust now supports Arch, Fedora/RHEL/CentOS, and openSUSE in addition to Debian/Ubuntu. Falls back to command probing when /etc/os-release detection fails. (#45)
  • Expo and React Native support: Auto-inject --port and --host flags for expo start and react-native start. (#42)
  • branded error and status pages: The proxy now renders styled HTML pages for 404, 502, 508, and other status codes instead of plain text. (#70)

Bug Fixes

  • stream errors: Handle proxy stream errors gracefully to prevent unhandled exceptions from crashing the proxy. (#57)
Commits

Updates tsdown from 0.20.3 to 0.21.0

Release notes

Sourced from tsdown's releases.

v0.21.0 - Notable Changes

Breaking Changes

Dependency options renamed to deps namespace

The dependency-related options have been moved under a new deps namespace with clearer names:

  • external -> deps.neverBundle
  • noExternal -> deps.alwaysBundle
  • inlineOnly -> deps.onlyAllowBundle
  • skipNodeModulesBundle -> deps.skipNodeModulesBundle

Before:

export default defineConfig({
  external: ['vue'],
  noExternal: ['lodash'],
})

After:

export default defineConfig({
  deps: {
    neverBundle: ['vue'],
    alwaysBundle: ['lodash'],
  },
})

The old options still work but are deprecated and will emit warnings.

failOnWarn default changed from 'ci-only' to false

If you relied on the previous behavior where warnings would fail the build in CI environments, you now need to explicitly set failOnWarn: true or failOnWarn: 'ci-only' in your config.

Node.js < 22.18.0 deprecated

tsdown now emits a deprecation warning when running on Node.js versions below 22.18.0. Plan to upgrade your Node.js version accordingly.

New Features

Experimental Node.js SEA executable bundling (exe)

tsdown can now bundle your TypeScript project into a standalone executable using Node.js Single Executable Applications (SEA). A new @tsdown/exe package provides cross-platform executable building support. See the exe documentation for details.

export default defineConfig({
  exe: true, // or { useCodeCache: true, useSnapshot: true }
</tr></table> 

... (truncated)

Commits
  • 5145496 chore: release v0.21.0
  • c5db6dc refactor(exe): improve nodeVersion type
  • ce7abe9 feat(exe): support latest and latest-lts for nodeVersion
  • 944e92a feat: support bundling .node files by default
  • 1183ad3 fix(css): remove empty js chunks (#799)
  • 0aae946 chore: upgrade rolldown
  • 9440739 chore: release v0.21.0-beta.5
  • d8a1f5c fix: resolve css files in node_modules (#795)
  • 0173c6e feat(exe)!: require Node >=25.7 and default format to esm (#798)
  • 288a5f0 feat(css): default css.transformer to lightningcss (#797)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 4 updates: [@changesets/changelog-github](https://github.com/changesets/changesets), [@changesets/cli](https://github.com/changesets/changesets), [portless](https://github.com/vercel-labs/portless) and [tsdown](https://github.com/rolldown/tsdown).


Updates `@changesets/changelog-github` from 0.5.2 to 0.6.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/read@0.5.2...@changesets/changelog-github@0.6.0)

Updates `@changesets/cli` from 2.29.8 to 2.30.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.30.0)

Updates `portless` from 0.4.2 to 0.5.2
- [Release notes](https://github.com/vercel-labs/portless/releases)
- [Changelog](https://github.com/vercel-labs/portless/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/portless@v0.4.2...v0.5.2)

Updates `tsdown` from 0.20.3 to 0.21.0
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.20.3...v0.21.0)

---
updated-dependencies:
- dependency-name: "@changesets/changelog-github"
  dependency-version: 0.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 2.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: portless
  dependency-version: 0.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: tsdown
  dependency-version: 0.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 5, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 5, 2026 20:40
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 5, 2026
@mattcosta7 mattcosta7 self-assigned this Mar 5, 2026
@mattcosta7 mattcosta7 enabled auto-merge March 5, 2026 21:40
@mattcosta7 mattcosta7 added this pull request to the merge queue Mar 5, 2026
Merged via the queue into main with commit c39b8b3 Mar 5, 2026
22 of 27 checks passed
@mattcosta7 mattcosta7 deleted the dependabot/npm_and_yarn/dev-dependencies-3befc11563 branch March 5, 2026 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code skip changeset

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant