Bump the "frontend" group with 2 updates across multiple ecosystems

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the frontend group in /web with 31 updates:

Package	From	To
apexcharts	3.49.0	5.10.1
codemirror	5.65.20	6.0.2
diff	8.0.2	8.0.3
lodash	4.17.21	4.17.23
@types/lodash	4.17.20	4.17.24
react	19.2.0	19.2.4
@types/react	19.2.2	19.2.14
react-apexcharts	1.8.0	2.1.0
react-codemirror2	8.0.2	9.0.1
react-dom	19.2.0	19.2.4
@types/react-dom	19.2.2	19.2.3
react-icons	5.5.0	5.6.0
react-router-dom	7.9.5	7.13.1
react-syntax-highlighter	16.1.0	16.1.1
rehype-github-alerts	4.1.1	4.2.0
semver	7.7.3	7.7.4
yaml	2.8.1	2.8.2
@eslint/js	9.39.1	10.0.1
@testing-library/react	16.3.0	16.3.2
@types/node	24.10.0	25.3.5
@vitejs/plugin-react	5.1.0	5.1.4
@vitest/coverage-v8	4.0.7	4.0.18
eslint	9.39.1	10.0.2
eslint-plugin-prettier	5.5.4	5.5.5
globals	16.5.0	17.4.0
jsdom	27.1.0	28.1.0
prettier	3.6.2	3.8.1
sass	1.93.3	1.97.3
typescript-eslint	8.46.3	8.56.1
vite	7.2.1	7.3.1
vitest	4.0.7	4.0.18

Updates apexcharts from 3.49.0 to 5.10.1

Release notes

Sourced from apexcharts's releases.

💎 Version 5.10.1

Bug Fixes

Chart Registry Survives Duplicate Module Instances

Problem: When a bundler (Vite, webpack, etc.) accidentally creates two separate copies of the ApexCharts module - for example when mixing CJS and ESM imports, or when optimizeDeps is not configured - ApexCharts.use() would write to one module's registry while the chart renderer read from another. The chart type was effectively never registered, causing a runtime error.

Fix: The chart type registry is now stored on globalThis.__apexcharts_registry__ instead of a module-local variable. All module instances share a single registry on the global object, so registration is never silently lost regardless of how many module copies the bundler created.

This is a defense-in-depth fix. For best results, configure your bundler to deduplicate ApexCharts (Vite: add apexcharts to optimizeDeps.include). The globalThis registry ensures the library degrades gracefully even when deduplication is not configured.

💎 Version 5.10.0

New Features

Per-Type Modular Entry Points

Every public chart type now has its own dedicated entry point matching the chart.type string you already use in config. Previously, users needed to know the internal grouping (e.g. apexcharts/heatmap for treemap charts); now you import by the exact type name.

New entry points:

Import	Chart type(s) registered
apexcharts/line	line
apexcharts/area	area
apexcharts/scatter	scatter
apexcharts/bubble	bubble
apexcharts/rangeArea	rangeArea
apexcharts/bar	bar
apexcharts/column	bar (column mode)
apexcharts/rangeBar	rangeBar
apexcharts/candlestick	candlestick
apexcharts/boxPlot	boxPlot
apexcharts/pie	pie
apexcharts/donut	donut
apexcharts/polarArea	polarArea
apexcharts/radialBar	radialBar
apexcharts/radar	radar
apexcharts/heatmap	heatmap
apexcharts/treemap	treemap (new standalone entry)

Example:

import ApexCharts from 'apexcharts/core'
import 'apexcharts/scatter'    // instead of 'apexcharts/line'
import 'apexcharts/donut'      // instead of 'apexcharts/pie'
import 'apexcharts/treemap'    // instead of 'apexcharts/heatmap'
import 'apexcharts/features/legend'
</tr></table> 

... (truncated)

Commits

• 08a42b8 release: 5.10.1
• 0ef2b48 fix: use globalThis for chart registry to survive duplicate module instances
• b225a37 release: 5.10.0
• b90a06d feat: add per-type modular entry points for all chart types
• b9ddfbb release: 5.9.0
• 996d7d7 release: 5.8.2-beta.1
• f3ab069 feat: add color-blind mode support & tree-shaking sub-entry deduplication
• da7f4ef build: 5.8.1
• 32c46b1 release: 5.8.1
• 3fb8ca2 fix #5177; tree-shaking link in README
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates codemirror from 5.65.20 to 6.0.2

Changelog

Sourced from codemirror's changelog.

6.0.2 (2025-06-19)

Bug fixes

Make sure to include a .d.cts file to make TypeScript happy.

6.0.1 (2022-06-30)

Bug fixes

Work around limitations in tree-shaking software that prevented basicSetup from being removed when unused.

6.0.0 (2022-06-08)

Breaking changes

Change the package name from @codemirror/example-setup to just codemirror.

The package no longer exports EditorState (since that is no longer necessary to set up a basic editor).

New features

The new minimalSetup export provides a minimal set of editor extensions.

0.20.0 (2022-04-20)

Breaking changes

Update dependencies to 0.20.0

0.19.3 (2022-03-30)

New features

Add the extension that shows a crosshair cursor when Alt is held down to the basic setup.

0.19.1 (2021-12-13)

New features

The basic setup now includes the dropCursor extension.

0.19.0 (2021-08-11)

Breaking changes

Update dependencies to 0.19.0

0.18.2 (2021-05-25)

Bug fixes

... (truncated)

Commits

• See full diff in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates diff from 8.0.2 to 8.0.3

Changelog

Sourced from diff's changelog.

8.0.3

• #631 - fix support for using an Intl.Segmenter with diffWords. This has been almost completely broken since the feature was added in v6.0.0, since it would outright crash on any text that featured two consecutive newlines between a pair of words (a very common case).
• #635 - small tweaks to tokenization behaviour of diffWords when used without an Intl.Segmenter. Specifically, the soft hyphen (U+00AD) is no longer considered to be a word break, and the multiplication and division signs (× and ÷) are now treated as punctuation instead of as letters / word characters.
• #641 - the format of file headers in createPatch etc. patches can now be customised somewhat. It now takes a headerOptions option that can be used to disable the file headers entirely, or omit the Index: line and/or the underline. In particular, this was motivated by a request to make jsdiff patches compatible with react-diff-view, which they now are if produced with headerOptions: FILE_HEADERS_ONLY.
• #647 and #649 - fix denial-of-service vulnerabilities in parsePatch whereby adversarial input could cause a memory-leaking infinite loop, typically crashing the calling process. Also fixed ReDOS vulnerabilities whereby adversarially-crafted patch headers could take cubic time to parse. Now, parsePatch should reliably take linear time. (Handling of headers that include the line break characters \r, \u2028, or \u2029 in non-trailing positions is also now more reasonable as side effect of the fix.)

Commits

• 13576bf 8.0.3 release (#652)
• 1179ccb Ignore .zed (#651)
• 949d6e2 Add test for the vuln I just fixed (#650)
• 15a1585 Fix the second denial-of-service vulnerability in parsePatch (#649)
• de95cca Fix potentially cubic-time regex in parsePatch (#647)
• b9aeede Allow more customisation of file headers in patches (#641)
• 43c716c Merge pull request #636 from kpdecker/dependabot/npm_and_yarn/node-forge-1.3.2
• b8162c7 Bump node-forge from 1.3.1 to 1.3.2
• ad6dc17 Fix some bugs in the diffWords regex (and errors & ambiguities in the comment...
• 3e1774a Fix a comment typo (#633)
• Additional commits viewable in compare view

Updates lodash from 4.17.21 to 4.17.23

Commits

• dec55b7 Bump main to v4.17.23 (#6088)
• 19c9251 fix: setCacheHas JSDoc return type should be boolean (#6071)
• b5e6729 jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)
• edadd45 Prevent prototype pollution on baseUnset function
• 4879a7a doc: fix autoLink function, conversion of source links (#6056)
• 9648f69 chore: remove yarn.lock file (#6053)
• dfa407d ci: remove legacy configuration files (#6052)
• 156e196 feat: add renovate setup (#6039)
• 933e106 ci: add pipeline for Bun (#6023)
• 072a807 docs: update links related to Open JS Foundation (#5968)
• Additional commits viewable in compare view

Updates @types/lodash from 4.17.20 to 4.17.24

Commits

• See full diff in compare view

Updates react from 19.2.0 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Commits

• 90ab3f8 Version 19.2.4
• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• 053df4e Version 19.2.1
• See full diff in compare view

Updates @types/react from 19.2.2 to 19.2.14

Commits

• See full diff in compare view

Updates react-apexcharts from 1.8.0 to 2.1.0

Release notes

Sourced from react-apexcharts's releases.

React ApexCharts v2.0.1

Patch Release: SSR Example & Minor Fixes

This patch release adds a comprehensive SSR example project to help developers integrate React ApexCharts with Next.js and other SSR frameworks.

---

New SSR Example Project

Added a complete Next.js App Router example demonstrating SSR capabilities:

• Location: example-ssr/
• Framework: Next.js 15+ with TypeScript
• Features:
  • Server-side chart rendering with react-apexcharts/server
  • Client-side hydration with react-apexcharts/hydrate
  • Server data fetching examples
  • Multiple chart types and configurations
  • Best practices for SSR integration

🐛 Bug Fixes

• Improved type definitions consistency

React ApexCharts v2.0.0

Major Release: Server-Side Rendering (SSR) Support

This release introduces first-class support for Server-Side Rendering, making React ApexCharts fully compatible with Next.js App Router, React Server Components, and other modern SSR frameworks.

---

New Features

Server-Side Rendering (SSR) Support

React ApexCharts now provides dedicated components and exports for seamless SSR integration:

New Export: react-apexcharts/server

Server-side component for rendering static chart markup without client-side JavaScript:

// app/page.tsx (Server Component)
import Chart from 'react-apexcharts/server'
export default function Page() {
return <Chart type="line" series={...} options={...} />
}

New Export: react-apexcharts/hydrate

... (truncated)

Commits

• See full diff in compare view

Updates react-codemirror2 from 8.0.2 to 9.0.1

Release notes

Sourced from react-codemirror2's releases.

9.0.1

What's Changed

• fix(issue-324): Re-hydrate the controlled component by @​fras2560 in scniro/react-codemirror2#326

9.0.0

Bumps peer dep for React to v19. It ... seems to work?

Caveats:

• Still pinned to CodeMirror 5, even though CodeMirror 6 is out now. I haven't had time (nor any real motivation) to investigate what changes are required there. PRs welcome.
• The entire build process is is still CommonJS-based, and a lot of the new tooling (especially the Vite-based stuff) works better with or expects ESM, so you'll need to work around that.

Fixes scniro/react-codemirror2#319

Commits

• 4956ac5 Version bump
• 97c51fa Merge pull request #326 from fras2560/master
• 05eadaf fix(issue-324): Re-hydrate the controlled component
• 7e74820 Bump to v9: Allow React 19
• 3aade35 Version bump
• See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Commits

• 90ab3f8 Version 19.2.4
• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• 053df4e Version 19.2.1
• See full diff in compare view

Updates @types/react-dom from 19.2.2 to 19.2.3

Commits

• See full diff in compare view

Updates react-icons from 5.5.0 to 5.6.0

Release notes

Sourced from react-icons's releases.

v5.6.0

What's Changed

• Bump prismjs from 1.29.0 to 1.30.0 by @​dependabot[bot] in react-icons/react-icons#1033
• Bump @​babel/helpers from 7.23.2 to 7.26.10 by @​dependabot[bot] in react-icons/react-icons#1036
• Bump http-proxy-middleware from 2.0.7 to 2.0.9 by @​dependabot[bot] in react-icons/react-icons#1041
• Bump form-data from 3.0.1 to 3.0.4 by @​dependabot[bot] in react-icons/react-icons#1058
• Bump vite from 5.4.14 to 5.4.20 by @​dependabot[bot] in react-icons/react-icons#1071
• upgrade packages by @​kamijin-fanta in react-icons/react-icons#1075
• Bump tar from 6.2.0 to 6.2.1 by @​dependabot[bot] in react-icons/react-icons#1078
• Bump vite from 6.3.6 to 6.4.1 by @​dependabot[bot] in react-icons/react-icons#1081
• Bump tmp from 0.2.3 to 0.2.5 by @​dependabot[bot] in react-icons/react-icons#1077
• Bump glob from 11.0.3 to 11.1.0 by @​dependabot[bot] in react-icons/react-icons#1089
• Bump @​babel/runtime from 7.23.2 to 7.28.4 by @​dependabot[bot] in react-icons/react-icons#1073
• Bump node-forge from 1.3.1 to 1.3.2 by @​dependabot[bot] in react-icons/react-icons#1092
• Bump mdast-util-to-hast from 13.0.2 to 13.2.1 by @​dependabot[bot] in react-icons/react-icons#1094
• Bump undici from 7.16.0 to 7.18.2 by @​dependabot[bot] in react-icons/react-icons#1103
• Bump devalue from 5.3.2 to 5.6.2 by @​dependabot[bot] in react-icons/react-icons#1104
• Bump h3 from 1.15.4 to 1.15.5 by @​dependabot[bot] in react-icons/react-icons#1105
• Bump diff from 5.2.0 to 5.2.2 by @​dependabot[bot] in react-icons/react-icons#1107
• Bump webpack from 5.94.0 to 5.104.1 by @​dependabot[bot] in react-icons/react-icons#1110
• Bump jsonpath from 1.1.1 to 1.2.1 by @​dependabot[bot] in react-icons/react-icons#1113
• Bump devalue from 5.6.2 to 5.6.3 by @​dependabot[bot] in react-icons/react-icons#1115
• Bump astro from 5.14.1 to 5.15.9 by @​dependabot[bot] in react-icons/react-icons#1091
• Bump ajv from 6.12.6 to 6.14.0 by @​dependabot[bot] in react-icons/react-icons#1116

Full Changelog: react-icons/react-icons@v5.5.0...v5.6.0

Icon Library	License	Version	Count
Circum Icons	MPL-2.0 license	1.0.0	288
Font Awesome 5	CC BY 4.0 License	5.15.4-3-gafecf2a	1612
Font Awesome 6	CC BY 4.0 License	6.7.2-1-g840c215	2060
Ionicons 4	MIT	4.6.3	696
Ionicons 5	MIT	5.5.4	1332
Material Design icons	Apache License Version 2.0	4.0.0-142-gbb04090f93	4341
Typicons	CC BY-SA 3.0	2.1.2	336
Github Octicons icons	MIT	18.3.0	264
Feather	MIT	4.29.2	287
Lucide	ISC	0.462.0	1541
Game Icons	CC BY 3.0	12920d6565588f0512542a3cb0cdfd36a497f910	4040
Weather Icons	SIL OFL 1.1	2.0.12	219
Devicons	MIT	1.8.0	192
Ant Design Icons	MIT	4.4.2	831
Bootstrap Icons	MIT	1.13.1	2754
Remix Icon	Apache License Version 2.0	4.6.0	3058
Flat Color Icons	MIT	1.0.2	329
Grommet-Icons	Apache License Version 2.0	4.14.0	637
Heroicons	MIT	1.0.6	460
Heroicons 2	MIT	2.2.0	972

... (truncated)

Commits

• 6501a41 v5.6.0
• 387e780 update icons
• fb057e7 5.5.1-snapshot.0
• 6f74755 update eslint
• 73c281f Bump ajv from 6.12.6 to 6.14.0 (#1116)
• 3f2b264 Bump astro from 5.14.1 to 5.15.9 (#1091)
• 04adc76 Bump devalue from 5.6.2 to 5.6.3 (#1115)
• 44a5e85 Bump jsonpath from 1.1.1 to 1.2.1 (#1113)
• e2c1d6c Bump webpack from 5.94.0 to 5.104.1 (#1110)
• f3dca02 Bump diff from 5.2.0 to 5.2.2 (#1107)
• Additional commits viewable in compare view

Updates react-router-dom from 7.9.5 to 7.13.1

Changelog

Sourced from react-router-dom's changelog.

7.13.1

Patch Changes

• Updated dependencies:
  • react-router@7.13.1

7.13.0

Patch Changes

• Updated dependencies:
  • react-router@7.13.0

7.12.0

Patch Changes

• Updated dependencies:
  • react-router@7.12.0

7.11.0

Patch Changes

• Updated dependencies:
  • react-router@7.11.0

7.10.1

Patch Changes

• Updated dependencies:
  • react-router@7.10.1

7.10.0

Patch Changes

• Updated dependencies:
  • react-router@7.10.0

7.9.6

Patch Changes

• Updated dependencies:
  • react-router@7.9.6

Commits

• aa3f078 chore: Update version for release (#14829)
• 3207a5c chore: Update version for release (pre) (#14814)
• 5557ba3 chore: Update version for release (#14749)
• 62c6e0e chore: Update version for release (pre) (#14738)
• 26653a6 chore: Update version for release (#14712)
• 7ac2346 chore: Update version for release (pre) (#14709)
• b34a9cd chore: Update version for release (#14668)
• 48b1be4 chore: Update version for release (pre) (#14662)
• ff50507 Update monorepo internal React deps (#14639)
• c257ee1 feat(rsc): add support for custom entry files in RSC Framework Mode (#14643)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-router-dom since your current version.

Updates react-syntax-highlighter from 16.1.0 to 16.1.1

Release notes

Sourced from react-syntax-highlighter's releases.

v16.1.1

What's Changed

• Updated installation section in README.md by @​quntamant in react-syntax-highlighter/react-syntax-highlighter#633
• fix: ESM missing .js by @​JulesGuesnon in react-syntax-highlighter/react-syntax-highlighter#627
• Fix: grammar in README.md by @​WuMingDao in react-syntax-highlighter/react-syntax-highlighter#622

New Contributors

• @​quntamant made their first contribution in react-syntax-highlighter/react-syntax-highlighter#633
• @​JulesGuesnon made their first contribution in react-syntax-highlighter/react-syntax-highlighter#627
• @​WuMingDao made their first contribution in react-syntax-highlighter/react-syntax-highlighter#622

Full Changelog: react-syntax-highlighter/react-syntax-highlighter@v16.1.0...v16.1.1

Commits

• ecac533 new package lock
• 4957908 version bump
• 5853a48 Fix: grammar in README.md (#622)
• fc5d7b7 fix: Added a babel plugin to auto add the js exts for esm (#627)
• d2b43e0 Updated installation section in README.md (#633)
• See full diff in compare view

Updates rehype-github-alerts from 4.1.1 to 4.2.0

Release notes

Sourced from rehype-github-alerts's releases.

v4.2.0

What's Changed

• updated types, the change allows using the options (to disable legacy mode) without having to pass alerts (meaning internally the package will use the default alerts)

New Contributors

• @​frozenbonito made their first contribution in chrisweb/rehype-github-alerts#23

Full Changelog: chrisweb/rehype-github-alerts@4.1.1...4.2.0

4.2.0-beta.0

• first beta 4.2.0 release to test ts interface change (4.2.0-beta.0 on npm)

this is not a breaking change

What's Changed

• this change allows using the options (to disable legacy mode) without having to pass alerts (meaning internally the package will use the default alerts)

New Contributors

• @​frozenbonito made their first contribution in chrisweb/rehype-github-alerts#23

Full Changelog: chrisweb/rehype-github-alerts@4.1.1...4.2.0-beta.0

Commits

• 3fa7c40 Merge pull request #25 from chrisweb/beta
• 0d7014e 4.2.0
• 385ea00 improve test coverage by adding new test cases for code that could not be te...
• f4f3322 dependencies update
• 51a14ae build: prepare 4.2.0-beta.0
• 99dd7c5 the initial code was working well, I just have a personal preference for a an...
• 7f071c4 Merge branch 'beta' of https://github.com/chrisweb/rehype-github-alerts into ...
• 756376f Merge pull request #23 from frozenbonito/make-ioptions-alerts-optional
• 72db783 fix deprecated config option
• c51ee4d update dependencies
• Additional commits viewable in compare view

Updates semver from 7.7.3 to 7.7.4

Release notes

Sourced from semver's releases.

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

• a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@​mldangelo)

Documentation

• 1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@​mldangelo)

Dependencies

• 120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

• 44d7130 #824 bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@​dependabot[bot])
• 7073576 #820 reorder parameters in invalid-versions.js test (#820) (@​reggi)
• 5816d4c #829 bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@​dependabot[bot], @​npm-cli-bot)

Changelog

Sourced from semver's changelog.

7.7.4 (2026-01-16)

Bug Fixes

• a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@​mldangelo)

Documentation

• 1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@​mldangelo)

Dependencies

• 120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

• 44d7130 #824 bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@​dependabot[bot])
• 7073576 #820 reorder parameters in invalid-versions.js test (#820) (@​reggi)
• 5816d4c #829 bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@​dependabot[bot], @​npm-cli-bot)

Commits

• 5993c2e chore: release 7.7.4 (#839)
• 120968b deps: @​npmcli/template-oss@​4.29.0 (#840)
• a29faa5 fix(cli): pass options to semver.valid() for loose version validation (#835)
• 1d28d5e docs: fix typos and update -n CLI option documentation (#836)
• 5816d4c chore: bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829)
• ab9e28a chore: bump @​npmcli/template-oss from 4.27.1 to 4.28.0 (#827)
• 44d7130 chore: bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824)
• 7073576 chore: reorder parameters in invalid-versions.js test (#820)
• 16a35f5 chore: bump @​npmcli/template-oss from 4.26.0 to 4.27.1 (#823)
• 3a3459d chore: bump @​npmcli/template-oss from 4.25.1 to 4.26.0 (#818)
• See full diff in compare view

Updates yaml from 2.8.1 to 2.8.2

Release notes

Sourced from yaml's releases.

v2.8.2

• Serialize -0 as -0 (#638)
• Do not double newlines for empty map values (#642)

Commits

• 086fa6b 2.8.2
• 95f01e9 chore: Add funding to package.json
• 152e204 style: Apply updated Prettier rules & satisfy updated ESLint
• 3f3378c chore: Drop unused dependency cross-env
• f0b9af7 chore: Update to @​rollup/plugin-replace v6
• e3cafc7 chore: Update to eslint-config-prettier v10
• 553c1b5 chore: Refresh lockfile
• 70a8db3 fix: Do not double newlines for empty map values (#642)
• 92821f2 ci: Limit action permissions to minimum r...

  Description has been truncated