Skip to content

Bump the npm group across 1 directory with 10 updates - #61

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/themes/develop/develop/npm-a5400f93c9
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/themes/develop/develop/npm-a5400f93c9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 10 updates in the /themes/develop directory:

Package From To
@ablogcms/pdf 3.2.29 3.2.35
@ablogcms/validator 3.2.32 3.2.35
alpinejs 3.16.3 3.17.2
query-string 9.5.0 9.5.1
smartphoto 2.1.8 2.1.17
browserslist 4.28.8 4.28.9
eslint 10.9.1 10.10.0
globals 17.11.0 17.12.0
stylelint 17.14.1 17.15.0
vite 8.2.2 8.3.0

Updates @ablogcms/pdf from 3.2.29 to 3.2.35

Commits

Updates @ablogcms/validator from 3.2.32 to 3.2.35

Commits

Updates alpinejs from 3.16.3 to 3.17.2

Release notes

Sourced from alpinejs's releases.

v3.17.2

What's Changed

Full Changelog: alpinejs/alpine@v3.17.1...v3.17.2

v3.17.1

What's Changed

New Contributors

Full Changelog: alpinejs/alpine@v3.17.0...v3.17.1

v3.17.0

What's Changed

New Contributors

Full Changelog: alpinejs/alpine@v3.16.3...v3.17.0

Commits

Updates query-string from 9.5.0 to 9.5.1

Release notes

Sourced from query-string's releases.

v9.5.1

  • Fix stringifyUrl() dropping a leading # in the fragment identifier and throwing on some absolute URLs 47b5b30

sindresorhus/query-string@v9.5.0...v9.5.1

Commits
  • 7fd8133 9.5.1
  • 47b5b30 Fix stringifyUrl() dropping a leading # in the fragment identifier and th...
  • See full diff in compare view

Updates smartphoto from 2.1.8 to 2.1.17

Release notes

Sourced from smartphoto's releases.

v2.1.17

Full Changelog: appleple/SmartPhoto@v2.1.16...v2.1.17

v2.1.16

Full Changelog: appleple/SmartPhoto@v2.1.15...v2.1.16

v2.1.15

Full Changelog: appleple/SmartPhoto@v2.1.14...v2.1.15

v2.1.14

Full Changelog: appleple/SmartPhoto@v2.1.13...v2.1.14

v2.1.13

Full Changelog: appleple/SmartPhoto@v2.1.12...v2.1.13

v2.1.12

Full Changelog: appleple/SmartPhoto@v2.1.11...v2.1.12

v2.1.11

Full Changelog: appleple/SmartPhoto@v2.1.10...v2.1.11

v2.1.10

What's Changed

Full Changelog: appleple/SmartPhoto@v2.1.9...v2.1.10

v2.1.9

Full Changelog: appleple/SmartPhoto@v2.1.8...v2.1.9

Commits
  • 293a833 chore(release): v2.1.17
  • f32a200 fix: 横向き回転時に写真がサムネイル一覧へ重なって見える不具合を修正
  • ed090ce chore(release): v2.1.16
  • c046f9f test: カバレッジを100%に引き上げ、防御的分岐と不安定テストを固定
  • acfc7f0 feat: ピンチ操作を業界標準(PhotoSwipe / iOS 写真)の仕様に刷新
  • b82203a chore(release): v2.1.15
  • b868d11 feat: 既定の animationSpeed を 450ms から 300ms へ短縮
  • 7f81cdd fix: ズーム中のパンで拡大が勝手に解除・跳ね戻りする不具合を修正
  • 8085451 chore(release): v2.1.14
  • 4e654f9 fix: 送り直後の逆送りが範囲外 index に飛びスライドが壊れる競合を修正
  • Additional commits viewable in compare view

Updates browserslist from 4.28.8 to 4.28.9

Release notes

Sourced from browserslist's releases.

4.28.9

Changelog

Sourced from browserslist's changelog.

4.28.9

Commits

Updates eslint from 10.9.1 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
  • 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])
  • 3c753f1 chore: update eslint (#21289) (renovate[bot])
  • 1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)
  • 08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)
  • 77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])
  • 007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)
  • 0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)
Commits

Updates globals from 17.11.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

  • Update globals (2026-09-01) (#353) 50a2119
  • Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

Commits

Updates stylelint from 17.14.1 to 17.15.0

Release notes

Sourced from stylelint's releases.

17.15.0

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

  • Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
  • Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
  • Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
  • Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
  • Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).
Changelog

Sourced from stylelint's changelog.

17.15.0 - 2026-09-04

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

  • Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
  • Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
  • Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
  • Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
  • Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).
Commits
  • 0547bff Release 17.15.0 (#9484)
  • ac19a3c Fix custom-property-no-missing-var-function false positives for anchor posi...
  • 23947ae Bump @​humanfs/node from 0.16.6 to 0.16.8 (#9480)
  • 53c74f7 Bump fast-uri from 3.1.5 to 3.1.7 (#9481)
  • 26856e6 Bump the jest group across 1 directory with 2 updates (#9476)
  • b90ecd8 Bump browserslist from 4.28.4 to 4.28.8 (#9479)
  • 70072c0 Add ignoreFunctions: [] to color-named and color-no-hex (#9463)
  • f0ac642 Bump postcss-import from 16.1.1 to 16.2.0 in the postcss group (#9477)
  • fc8db57 Bump globby from 16.2.3 to 16.2.4 (#9478)
  • aec96b0 Bump @​csstools/css-syntax-patches-for-csstree from 1.1.8 to 1.1.9 in the csst...
  • Additional commits viewable in compare view

Updates vite from 8.2.2 to 8.3.0

Release notes

Sourced from vite's releases.

create-vite@8.3.0

Please refer to CHANGELOG.md for details.

v8.3.0

Features

  • build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)

Bug Fixes

  • handle CRLF line endings in code frame positions (#23219) (9913672)
  • only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)

Performance Improvements

  • proxy: pre-compile context matchers at server creation (#23263) (8abf700)

v8.3.0-beta.1

Features

Bug Fixes

  • build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
  • bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
  • deps: update all non-major dependencies (#23445) (fc7c104)
  • html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
  • resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
  • shortcuts extend error (#23447) (4ec58d1)

Miscellaneous Chores

v8.3.0-beta.0

Features

  • accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
  • add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
  • add top-level tsconfig option (#23310) (93164c3)
  • add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
  • cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
  • config: warn on named imports from JSON modules (#23378) (472385e)
  • css: minify style tag (#23183) (8156684)
  • searched params attached to workers are now preserved (#22280) (517b97f)
  • support subpath imports in dynamic import statements (#23185) (b78e2f1)
  • use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
  • use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.0 (2026-09-10)

Features

  • build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)
  • devtools: enable dev server integration (#23333) (68aeb8a)
  • accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
  • add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
  • add top-level tsconfig option (#23310) (93164c3)
  • add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
  • cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
  • config: warn on named imports from JSON modules (#23378) (472385e)
  • css: minify style tag (#23183) (8156684)
  • searched params attached to workers are now preserved (#22280) (517b97f)
  • support subpath imports in dynamic import statements (#23185) (b78e2f1)
  • use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
  • use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)
  • worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

  • handle CRLF line endings in code frame positions (#23219) (9913672)
  • only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)
  • build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
  • bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
  • deps: update all non-major dependencies (#23445) (fc7c104)
  • html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
  • resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
  • shortcuts extend error (#23447) (4ec58d1)
  • config: close bundles when generation fails (#23256) (6bacc95)
  • css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)
  • deps: update all non-major dependencies (#23337) (d550815)
  • deps: update all non-major dependencies (#23404) (238ad81)
  • deps: update rolldown-related dependencies (#23338) (76e8082)
  • deps: update rolldown-related dependencies (#23405) (b882566)
  • dev: run closeBundle after buildEnd failure (#23165) (8cb872e)
  • hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)
  • utils: handle dot in srcset density descriptor (#23346) (b50e1b4)
  • utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

  • proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 10 updates in the /themes/develop directory:

| Package | From | To |
| --- | --- | --- |
| [@ablogcms/pdf](https://bitbucket.org/appleple/ablogcms/src/default/packages/frontend/pdf) | `3.2.29` | `3.2.35` |
| [@ablogcms/validator](https://bitbucket.org/appleple/ablogcms/src/default/packages/frontend/validator) | `3.2.32` | `3.2.35` |
| [alpinejs](https://github.com/alpinejs/alpine/tree/HEAD/packages/alpinejs) | `3.16.3` | `3.17.2` |
| [query-string](https://github.com/sindresorhus/query-string) | `9.5.0` | `9.5.1` |
| [smartphoto](https://github.com/appleple/SmartPhoto) | `2.1.8` | `2.1.17` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.8` | `4.28.9` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.10.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.12.0` |
| [stylelint](https://github.com/stylelint/stylelint) | `17.14.1` | `17.15.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` |



Updates `@ablogcms/pdf` from 3.2.29 to 3.2.35
- [Commits](https://bitbucket.org/appleple/ablogcms/commits)

Updates `@ablogcms/validator` from 3.2.32 to 3.2.35
- [Commits](https://bitbucket.org/appleple/ablogcms/commits)

Updates `alpinejs` from 3.16.3 to 3.17.2
- [Release notes](https://github.com/alpinejs/alpine/releases)
- [Commits](https://github.com/alpinejs/alpine/commits/v3.17.2/packages/alpinejs)

Updates `query-string` from 9.5.0 to 9.5.1
- [Release notes](https://github.com/sindresorhus/query-string/releases)
- [Commits](sindresorhus/query-string@v9.5.0...v9.5.1)

Updates `smartphoto` from 2.1.8 to 2.1.17
- [Release notes](https://github.com/appleple/SmartPhoto/releases)
- [Commits](appleple/SmartPhoto@v2.1.8...v2.1.17)

Updates `browserslist` from 4.28.8 to 4.28.9
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.8...4.28.9)

Updates `eslint` from 10.9.1 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.10.0)

Updates `globals` from 17.11.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.11.0...v17.12.0)

Updates `stylelint` from 17.14.1 to 17.15.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.14.1...17.15.0)

Updates `vite` from 8.2.2 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@ablogcms/pdf"
  dependency-version: 3.2.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@ablogcms/validator"
  dependency-version: 3.2.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: alpinejs
  dependency-version: 3.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: query-string
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: smartphoto
  dependency-version: 2.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: browserslist
  dependency-version: 4.28.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: stylelint
  dependency-version: 17.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 15, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 15, 2026 02:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants