Bump the workspace-deps group with 6 updates by dependabot[bot] · Pull Request #176 · e18e/framework-tracker

dependabot · 2026-03-27T13:28:26Z

Bumps the workspace-deps group with 6 updates:

Package	From	To
eslint	`10.0.3`	`10.1.0`
typescript	`5.9.3`	`6.0.2`
typescript-eslint	`8.57.1`	`8.57.2`
astro	`6.0.7`	`6.1.1`
react-router	`7.13.1`	`7.13.2`
next	`16.2.0`	`16.2.1`

Updates eslint from 10.0.3 to 10.1.0

Release notes

Sourced from eslint's releases.

v10.1.0

Features

ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)

0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)

e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)

58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)

7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)

035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)

e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)

7f10d84 docs: Update README (GitHub Actions Bot)

aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)

a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)

1f42bd7 chore: update prettier to 3.8.1 (#20651) (루밀LuMir)

c0a6f4a chore: update dependency @eslint/json to ^1.2.0 (#20652) (renovate[bot])

cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])

2ce4635 chore: update dependency @eslint/json to v1 (#20649) (renovate[bot])

f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])

dbb4c95 chore: remove trunk (#20478) (sethamus)

c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)

c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])

07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)

079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)

5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)

f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])

Commits

8351ec7 10.1.0
3270bc1 Build: changelog update for 10.1.0
a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584)
1f42bd7 chore: update prettier to 3.8.1 (#20651)
c0a6f4a chore: update dependency @eslint/json to ^1.2.0 (#20652)
cc43f79 chore: update dependency c8 to v11 (#20650)
2ce4635 chore: update dependency @eslint/json to v1 (#20649)
f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646)
dbb4c95 chore: remove trunk (#20478)
ff4382b feat: apply fix for no-var in TSModuleBlock (#20638)
Additional commits viewable in compare view

Updates typescript from 5.9.3 to 6.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

607a22a Bump version to 6.0.2 and LKG
9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
e175b69 Bump version to 6.0.1-rc and LKG
af4caac Update LKG
8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
206ed1a Deprecate assert in import() (#63172)
e688ac8 Update dependencies (#63156)
29b300d Bump the github-actions group across 1 directory with 2 updates (#63205)
0c2c7a3 DOM update (#63183)
Additional commits viewable in compare view

Updates typescript-eslint from 8.57.1 to 8.57.2

Release notes

Sourced from typescript-eslint's releases.

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)

eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)

eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)

eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)

typescript-estree: skip createIsolatedProgram fallback for projectService (#12066, #12065)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

Konv Suu

mdm317

Newton Yuan @NewtonYuan

RyoheiYamamoto

SungHyun627 @SungHyun627

Tamashoo @Tamashoo

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.57.2 (2026-03-23)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

be4d54d chore(release): publish 8.57.2
See full diff in compare view

Updates astro from 6.0.7 to 6.1.1

Release notes

Sourced from astro's releases.

astro@6.1.1

Patch Changes

#16105 23d60de Thanks @matthewp! - Fix dev toolbar audit crash when encountering the image ARIA role

#16089 999c875 Thanks @martrapp! - Fixes an issue with the client router where Vue's :deep() notation was ignored in dev mode.

astro@6.1.0

Minor Changes
#15804 a5e7232 Thanks @merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().
#15455 babf57f Thanks @AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.
{
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}
#15340 10a1a5a Thanks @trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.
// astro.config.mjs
export default defineConfig({
  markdown: {
    smartypants: {
      backticks: 'all',
      dashes: 'oldschool',
      ellipses: 'unspaced',
      openingQuotes: { double: '«', single: '‹' },
      closingQuotes: { double: '»', single: '›' },
      quotes: false,
    },

... (truncated)

Changelog

Sourced from astro's changelog.

6.1.1

Patch Changes

#16105 23d60de Thanks @matthewp! - Fix dev toolbar audit crash when encountering the image ARIA role

#16089 999c875 Thanks @martrapp! - Fixes an issue with the client router where Vue's :deep() notation was ignored in dev mode.

6.1.0

Minor Changes
#15804 a5e7232 Thanks @merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().
#15455 babf57f Thanks @AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.
{
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}
#15340 10a1a5a Thanks @trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.
// astro.config.mjs
export default defineConfig({
  markdown: {
    smartypants: {
      backticks: 'all',
      dashes: 'oldschool',
      ellipses: 'unspaced',
      openingQuotes: { double: '«', single: '‹' },
      closingQuotes: { double: '»', single: '›' },

... (truncated)

Commits

f649ae0 [ci] release (#16108)
10c3a47 [ci] format
999c875 fix(transitions): auto-persist styles with data-vite-dev-id (#16089)
23d60de fix(dev-toolbar): normalize aria-query role aliases to prevent audit crash (#...
88fcc98 fix integrations links across docs (#16098)
4a6ff2a [ci] release (#16020)
b9e96da fix(deps): update dependency vitest to v4 (#15372)
4fad14a test: strengthen the tests of rendering utilities (#16086)
f74465a fix(hmr): handle middleware changes during dev (#16054)
fa5bcde refactor(test): move params encoding to unit tests (#16056)
Additional commits viewable in compare view

Updates react-router from 7.13.1 to 7.13.2

Release notes

Sourced from react-router's releases.

v7.13.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132

Changelog

Sourced from react-router's changelog.

7.13.2

Patch Changes
Fix clientLoader.hydrate when an ancestor route is also hydrating a clientLoader (#14835)

Fix type error when passing Framework Mode route components using Route.ComponentProps to createRoutesStub (#14892)

Fix percent encoding in relative path navigation (#14786)
Add future.unstable_passThroughRequests flag (#14775)

By default, React Router normalizes the request.url passed to your loader, action, and middleware functions by removing React Router's internal implementation details (.data suffixes, index + _routes query params).

Enabling this flag removes that normalization and passes the raw HTTP request instance to your handlers. This provides a few benefits:

Reduces server-side overhead by eliminating multiple new Request() calls on the critical path

Allows you to distinguish document from data requests in your handlers base don the presence of a .data suffix (useful for observability purposes)

If you were previously relying on the normalization of request.url, you can switch to use the new sibling unstable_url parameter which contains a URL instance representing the normalized location:
// ❌ Before: you could assume there was no `.data` suffix in `request.url`
export async function loader({ request }: Route.LoaderArgs) {
  let url = new URL(request.url);
  if (url.pathname === "/path") {
    // This check will fail with the flag enabled because the `.data` suffix will
    // exist on data requests
  }
}
// ✅ After: use unstable_url for normalized routing logic and request.url
// for raw routing logic
export async function loader({ request, unstable_url }: Route.LoaderArgs) {
if (unstable_url.pathname === "/path") {
// This will always have the .data suffix stripped
}
// And now you can distinguish between document versus data requests
let isDataRequest = new URL(request.url).pathname.endsWith(".data");
}
Internal refactor to consolidate framework-agnostic/React-specific route type layers - no public API changes (#14765)

Sync protocol validation to rsc flows (#14882)

Add a new unstable_url: URL parameter to route handler methods (loader, action, middleware, etc.) representing the normalized URL the application is navigating to or fetching, with React Router implementation details removed (.datasuffix, index/_routes query params) (#14775)

This is being added alongside the new future.unstable_passthroughRequests future flag so that users still have a way to access the normalized URL when that flag is enabled and non-normalized request's are being passed to your handlers. When adopting this flag, you will only need to start leveraging this new parameter if you are relying on the normalization of request.url in your application code.

... (truncated)

Commits

aadb56f chore: Update version for release (#14908)
c68a9b3 chore: Update version for release (pre) (#14893)
8c3c7ce fix: allow Framework Mode route components to be passed to createRoutesStub (...
1cd923e chore: format
830d3ba Fix percent encoding in relative path navigation (#14786)
8646d39 Align redirect protocol validation in RSC flows (#14882)
7d21b1c Add additional unit test - hydrate fallback rendering for SPA middleware w/o ...
8a10826 docs: fix typo in useNavigate documentation (#14848)
bda5bb7 Fix typo in comment (#14844)
bbe4a73 chore: format
Additional commits viewable in compare view

Updates next from 16.2.0 to 16.2.1

Release notes

Sourced from next's releases.

v16.2.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

docs: post release amends (#91715)

docs: fix broken Activity Patterns demo link in preserving UI state guide (#91698)

Fix adapter outputs for dynamic metadata routes (#91680)

Turbopack: fix webpack loader runner layer (#91727)

Fix server actions in standalone mode with cacheComponents (#91711)

turbo-persistence: remove Unmergeable mmap advice (#91713)

Fix layout segment optimization: move app-page imports to server-utility transition (#91701)

Turbopack: lazy require metadata and handle TLA (#91705)

[turbopack] Respect {eval:true} in worker_threads constructors (#91666)

Credits

Huge thanks to @icyJoseph, @abhishekmardiya, @ijjk, @mischnic, @unstubbable, @sokra, and @lukesandberg for helping!

v16.2.1-canary.10

Misc Changes

turbo-tasks-backend: assert non-transient task_ids in track_modification: #91924

fix(turbopack): preserve resolveExtensions priority in read_matches fast path: #91856

turbopack: Remove Vc::resolve(), migrate all callsites to Vc::to_resolved(): #91725

turbo-tasks: add hashed cell mode for hash-based change detection without cell data: #91576

test(typed-routes): fix flaky tests by increasing retry timeout: #91923

test(app-basepath): increase waitForElementByCss timeout for hard-nav test: #91920

test(interoperability): increase waitForElementByCss timeout for cross-router navigations: #91918

Credits

Huge thanks to @sokra for helping!

v16.2.1-canary.9

Core Changes

[Segment Bundling] Bundle static prefetches based on size: #91439

Credits

Huge thanks to @acdlite for helping!

v16.2.1-canary.8

Core Changes

Perf: Skip turning Set into Array: #91383

Perf: Move chunkloading instrumentation to separate function: #91382

Perf: Use headers object directly in checkIsOnDemandRevalidate: #91381

Use charCodeAt for normalizePathTrailingSlash: #91380

... (truncated)

Commits

ed7d2ce v16.2.1
3e37bb4 docs: post release amends (#91715)
a15ec6e docs: fix broken Activity Patterns demo link in preserving UI state guide (#9...
600cd2f Fix adapter outputs for dynamic metadata routes (#91680)
27886d3 Turbopack: fix webpack loader runner layer (#91727)
88fc430 Fix server actions in standalone mode with cacheComponents (#91711)
37aed86 turbo-persistence: remove Unmergeable mmap advice (#91713)
d6195ec Fix layout segment optimization: move app-page imports to server-utility tran...
6cb97d6 Turbopack: lazy require metadata and handle TLA (#91705)
e6b101a [turbopack] Respect {eval:true} in worker_threads constructors (#91666)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the workspace-deps group with 6 updates: | Package | From | To | | --- | --- | --- | | [eslint](https://github.com/eslint/eslint) | `10.0.3` | `10.1.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.57.1` | `8.57.2` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.0.7` | `6.1.1` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.13.1` | `7.13.2` | | [next](https://github.com/vercel/next.js) | `16.2.0` | `16.2.1` | Updates `eslint` from 10.0.3 to 10.1.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.0.3...v10.1.0) Updates `typescript` from 5.9.3 to 6.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.2) Updates `typescript-eslint` from 8.57.1 to 8.57.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/typescript-eslint) Updates `astro` from 6.0.7 to 6.1.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.1/packages/astro) Updates `react-router` from 7.13.1 to 7.13.2 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.13.2/packages/react-router) Updates `next` from 16.2.0 to 16.2.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.0...v16.2.1) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: workspace-deps - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: workspace-deps - dependency-name: typescript-eslint dependency-version: 8.57.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: workspace-deps - dependency-name: astro dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: workspace-deps - dependency-name: react-router dependency-version: 7.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: workspace-deps - dependency-name: next dependency-version: 16.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: workspace-deps ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-03-27T13:28:27Z

Deploying framework-tracker with Cloudflare Pages

Latest commit:	`db3840b`
Status:	✅ Deploy successful!
Preview URL:	https://6ef75723.framework-tracker.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-work-6big.framework-tracker.pages.dev

View logs

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 27, 2026

dependabot bot requested review from 43081j and AlexanderKaran as code owners March 27, 2026 13:28

chore: disable unchecked side effect imports

db3840b

43081j force-pushed the dependabot/npm_and_yarn/workspace-deps-00fa1bf1f1 branch from e1f7702 to db3840b Compare March 27, 2026 17:44

43081j merged commit 89a9189 into main Mar 27, 2026
3 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/workspace-deps-00fa1bf1f1 branch March 27, 2026 18:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the workspace-deps group with 6 updates#176

Bump the workspace-deps group with 6 updates#176
43081j merged 2 commits intomainfrom
dependabot/npm_and_yarn/workspace-deps-00fa1bf1f1

dependabot bot commented on behalf of github Mar 27, 2026

Uh oh!

cloudflare-workers-and-pages bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 27, 2026

v10.1.0

Features

Bug Fixes

Documentation

Chores

TypeScript 6.0

TypeScript 6.0 Beta

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

❤️ Thank You

8.57.2 (2026-03-23)

astro@6.1.1

Patch Changes

astro@6.1.0

Minor Changes

6.1.1

Patch Changes

6.1.0

Minor Changes

v7.13.2

7.13.2

Patch Changes

v16.2.1

Core Changes

Credits

v16.2.1-canary.10

Misc Changes

Credits

v16.2.1-canary.9

Core Changes

Credits

v16.2.1-canary.8

Core Changes

Uh oh!

cloudflare-workers-and-pages bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying framework-tracker with Cloudflare Pages

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

cloudflare-workers-and-pages bot commented Mar 27, 2026 •

edited

Loading