Bump the all-npm-dependencies group across 1 directory with 4 updates - #5253
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the all-npm-dependencies group with 3 updates in the /src/Core.Assets directory: [@microsoft/fast-element](https://github.com/Microsoft/fast/tree/HEAD/packages/fast-element), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [typescript](https://github.com/microsoft/TypeScript). Updates `@microsoft/fast-element` from 1.14.0 to 2.10.5 - [Release notes](https://github.com/Microsoft/fast/releases) - [Changelog](https://github.com/microsoft/fast/blob/main/packages/fast-element/CHANGELOG.md) - [Commits](https://github.com/Microsoft/fast/commits/@microsoft/fast-element_v2.10.5/packages/fast-element) Updates `@typescript-eslint/eslint-plugin` from 8.68.0 to 8.69.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.68.0 to 8.69.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/parser) Updates `typescript` from 5.9.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v7.0.2) --- updated-dependencies: - dependency-name: "@microsoft/fast-element" dependency-version: 2.10.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.69.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.69.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
🟡 Changes recommended
The updated versions introduce dependency/peer-dependency incompatibilities (notably TypeScript 7 vs @typescript-eslint/* peer ranges, and mixed FAST major versions), which are likely to cause install/lint/build issues.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Pull request overview
This PR updates the NPM dependency set used by src/Core.Assets (the asset build/package used by the Fluent UI Blazor repo), primarily bumping FAST and TypeScript/ESLint tooling versions.
Changes:
- Bumps
@microsoft/fast-elementfrom1.14.0to2.10.5 - Bumps
@typescript-eslint/eslint-pluginto^8.69.0andtypescriptto^7.0.2 - Regenerates
package-lock.jsonto reflect the updated dependency graph
File summaries
| File | Description |
|---|---|
| src/Core.Assets/package.json | Updates declared devDependency versions for FAST + TypeScript/ESLint tooling. |
| src/Core.Assets/package-lock.json | Updates the resolved dependency tree and metadata for the bumped packages. |
Review details
Files not reviewed (1)
- src/Core.Assets/package-lock.json: Generated file
- Files reviewed: 1/2 changed files
- Comments generated: 3
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| "peerDependencies": { | ||
| "@typescript-eslint/parser": "^8.68.0", | ||
| "@typescript-eslint/parser": "^8.69.0", | ||
| "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0", | ||
| "typescript": ">=4.8.4 <6.1.0" | ||
| } |
| "@microsoft/fast-element": "2.10.5", | ||
| "@microsoft/fast-foundation": "2.50.0", |
| "@microsoft/fast-foundation": "2.50.0", | ||
| "@typescript-eslint/eslint-plugin": "^8.68.0", | ||
| "@typescript-eslint/eslint-plugin": "^8.69.0", | ||
| "@typescript-eslint/parser": "^8.68.0", |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Bumps the all-npm-dependencies group with 3 updates in the /src/Core.Assets directory: @microsoft/fast-element, @typescript-eslint/eslint-plugin and typescript.
Updates
@microsoft/fast-elementfrom 1.14.0 to 2.10.5Release notes
Sourced from @microsoft/fast-element's releases.
Changelog
Sourced from @microsoft/fast-element's changelog.
... (truncated)
Commits
1edc12achore: release packages (#7614)165d5b2fix: deprecate compose APIs (#7602)ecb12a7applying package updates13916c1feat(examples): unified todo apps with SSR, MobX, and E2E suite (#7424)aad6f54applying package updates7d933fbchore: bump packages after failed publish (#7505)aa76170docs: update the documentation for agents and move relevant code docs into a ...7dc34b1chore: migrate typescript compiltation to typescript/native-preview (#7501)9f575ebfeat: replace rollup-plugin-filesize with esbuild export size reporting (#7473)2674a2bapplying package updatesUpdates
@typescript-eslint/eslint-pluginfrom 8.68.0 to 8.69.0Release notes
Sourced from @typescript-eslint/eslint-plugin's releases.
Changelog
Sourced from @typescript-eslint/eslint-plugin's changelog.
Commits
9a6e546chore(release): publish 8.69.0513638efix(eslint-plugin): [no-meaningless-void-operator] report void on non-call ex...1dba4c5chore(eslint-plugin): fixeslint-plugin/require-test-error-positionsreport...a2fccaefix(eslint-plugin): [unified-signatures] compare type parameters by constrain...a23069dtest(eslint-plugin): [no-mixed-enums] add error positions (#12779)3f0dffdfix(eslint-plugin): [no-mixed-enums] use scope analysis instead of type check...e18fea8test(eslint-plugin): [no-floating-promises] reactivate skippednode:testsp...324515ctest(eslint-plugin): [no-unnecessary-condition] add tests for optional chains...2a387f1feat(eslint-plugin): [no-misused-promises] add flagUnions option for checkCon...Updates
@typescript-eslint/parserfrom 8.68.0 to 8.69.0Release notes
Sourced from @typescript-eslint/parser's releases.
Changelog
Sourced from @typescript-eslint/parser's changelog.
Commits
9a6e546chore(release): publish 8.69.0Updates
typescriptfrom 5.9.3 to 7.0.2Release notes
Sourced from typescript's releases.
Commits
1e4744dMerge branch 'main' into ts7-releasea5a219cmicrosoft/typescript-go#4558ecfe30dUpdate status localization5de25b5Hide executable name in TypeScript statusd7ce74aShow bundled TypeScript version for packaged servers29be66aCorrect TS 7 release version to 7.0.2ed2bd1bMerge branch 'main' into ts7-release8873075Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...9427131Set up stable / nightly extension split, other prep (microsoft/typescript-go#...d4eaca5microsoft/typescript-go#4549Most Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions