Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the dev-dependencies group with 3 updates: @substrate-system/tapout, stylelint and stylelint-config-standard.

Updates @substrate-system/tapout from 0.0.33 to 0.0.34

Changelog

Sourced from @​substrate-system/tapout's changelog.

v0.0.34

Commits

Commits

Updates stylelint from 16.26.1 to 17.0.0

Release notes

Sourced from stylelint's releases.

17.0.0

It contains 14 breaking changes, which we've detailed in the migrating to 17.0.0 guide. Additionally, it adds 3 options to the rules and fixes 9 bugs. We've also released compatible versions of our shared config, Visual Studio Code extension, Node.js Rule Tester and Jest preset.

  • Removed: CommonJS Node.js API (#8859) (@​jeddy3).
  • Removed: output property in the Node.js API returned resolved object (#8878) (@​jeddy3).
  • Removed: support for Node.js less than 20.19.0 (#8867) (@​jeddy3).
  • Removed: GitHub formatter (#8888) (@​jeddy3).
  • Removed: resolveNestedSelectors option from selector-class-pattern (#8931) (@​jeddy3).
  • Removed: checkContextFunctionalPseudoClasses option from selector-max-id (#8913) (@​jeddy3).
  • Changed: default fix mode to strict (#8889) (@​jeddy3).
  • Changed: report to be consistent and predictable in how it handles the provided position arguments (#8217) (@​romainmenke).
  • Changed: selector-max-* syntax rules for standard CSS nesting and modern functional pseudo-classes (#8913) (@​jeddy3).
  • Changed: *-specificity semantic rules for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: no-duplicate-selectors and selector-no-qualifying-type for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: *-list rules to have consistent behaviour for vendor prefixes and case (#8912) (@​jeddy3).
  • Changed: *-no-vendor-prefix rules to have consistent behaviour for their ignore*: [] secondary options (#8924) (@​jeddy3).
  • Changed: declaration-property-max-values rule to have consistent behaviour for vendor prefixes (#8926) (@​jeddy3).
  • Added: except: ["after-block"] to custom-property-empty-line-before (#8921) (@​kovsu).
  • Added: except: ["after-block"] to declaration-empty-line-before (#8910) (@​kovsu).
  • Added: ignoreSelectors: [] to no-duplicate-selectors (#8883) (@​kovsu).
  • Fixed: Windows drive letter casing inconsistencies when matching patterns against file paths (#8941) (@​adalinesimonian).
  • Fixed: CLI help to include TypeScript config files (#8908) (@​kovsu).
  • Fixed: at-rule-descriptor-no-unknown false positives for declarations within feature-value-blocks (#8868) (@​kovsu).
  • Fixed: declaration-block-no-redundant-longhand-properties false negatives for short and long combinations (#8892) (@​nathannewyen).
  • Fixed: media-feature-name-no-unknown false positives for namespaced dollar variables and range context queries (#8890) (@​kovsu).
  • Fixed: nesting-selector-no-missing-scoping-root false positives for CSS-in-JS (#8905) (@​kovsu).
  • Fixed: no-invalid-position-declaration false negatives for embedded blocks (#8907) (@​kovsu).
  • Fixed: selector-no-qualifying-type false negatives for :is/where() (#8940) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for MathML 4 tags (#8874) (@​jeddy3).
Changelog

Sourced from stylelint's changelog.

17.0.0 - 2026-01-15

It contains 14 breaking changes, which we've detailed in the migrating to 17.0.0 guide. Additionally, it adds 3 options to the rules and fixes 9 bugs. We've also released compatible versions of our shared config, Visual Studio Code extension, Node.js Rule Tester and Jest preset.

  • Removed: CommonJS Node.js API (#8859) (@​jeddy3).
  • Removed: output property in the Node.js API returned resolved object (#8878) (@​jeddy3).
  • Removed: support for Node.js less than 20.19.0 (#8867) (@​jeddy3).
  • Removed: GitHub formatter (#8888) (@​jeddy3).
  • Removed: resolveNestedSelectors option from selector-class-pattern (#8931) (@​jeddy3).
  • Removed: checkContextFunctionalPseudoClasses option from selector-max-id (#8913) (@​jeddy3).
  • Changed: default fix mode to strict (#8889) (@​jeddy3).
  • Changed: report to be consistent and predictable in how it handles the provided position arguments (#8217) (@​romainmenke).
  • Changed: selector-max-* syntax rules for standard CSS nesting and modern functional pseudo-classes (#8913) (@​jeddy3).
  • Changed: *-specificity semantic rules for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: no-duplicate-selectors and selector-no-qualifying-type for standard CSS nesting (#8913) (@​jeddy3).
  • Changed: *-list rules to have consistent behaviour for vendor prefixes and case (#8912) (@​jeddy3).
  • Changed: *-no-vendor-prefix rules to have consistent behaviour for their ignore*: [] secondary options (#8924) (@​jeddy3).
  • Changed: declaration-property-max-values rule to have consistent behaviour for vendor prefixes (#8926) (@​jeddy3).
  • Added: except: ["after-block"] to custom-property-empty-line-before (#8921) (@​kovsu).
  • Added: except: ["after-block"] to declaration-empty-line-before (#8910) (@​kovsu).
  • Added: ignoreSelectors: [] to no-duplicate-selectors (#8883) (@​kovsu).
  • Fixed: Windows drive letter casing inconsistencies when matching patterns against file paths (#8941) (@​adalinesimonian).
  • Fixed: CLI help to include TypeScript config files (#8908) (@​kovsu).
  • Fixed: at-rule-descriptor-no-unknown false positives for declarations within feature-value-blocks (#8868) (@​kovsu).
  • Fixed: declaration-block-no-redundant-longhand-properties false negatives for short and long combinations (#8892) (@​nathannewyen).
  • Fixed: media-feature-name-no-unknown false positives for namespaced dollar variables and range context queries (#8890) (@​kovsu).
  • Fixed: nesting-selector-no-missing-scoping-root false positives for CSS-in-JS (#8905) (@​kovsu).
  • Fixed: no-invalid-position-declaration false negatives for embedded blocks (#8907) (@​kovsu).
  • Fixed: selector-no-qualifying-type false negatives for :is/where() (#8940) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for MathML 4 tags (#8874) (@​jeddy3).
Commits

Updates stylelint-config-standard from 39.0.1 to 40.0.0

Release notes

Sourced from stylelint-config-standard's releases.

40.0.0

  • Removed: stylelint less than 17.0.0 from peer dependencies.
  • Removed: support for Node.js less than 20.19.0.
  • Changed: updated to stylelint-config-recommended@18.0.0.
  • Changed: module type to ESM.
Changelog

Sourced from stylelint-config-standard's changelog.

40.0.0

  • Removed: stylelint less than 17.0.0 from peer dependencies.
  • Removed: support for Node.js less than 20.19.0.
  • Changed: updated to stylelint-config-recommended@18.0.0.
  • Changed: module type to ESM.
Commits
  • fbbe7b8 Release 40.0.0 (#386)
  • e6368f9 Prepare 40.0.0 (#381)
  • 481e21c Bump the dev-deps group with 3 updates (#382)
  • 696689d Bump stylelint/.github/.github/workflows/call-release-pr.yml from 0.3.1 to 0....
  • 5d46c0f Bump stylelint/.github/.github/workflows/call-lint.yml from 0.3.1 to 0.5.0 (#...
  • f888c90 Bump stylelint/.github/.github/workflows/call-test.yml from 0.3.1 to 0.5.0 (#...
  • 066dda1 Fix vulnerable dependencies via npm audit fix (#378)
  • b6e6aec Bump js-yaml from 4.1.0 to 4.1.1 (#379)
  • 63bb8dd Bump mdast-util-to-hast from 13.1.0 to 13.2.1 (#380)
  • 0cc790a Bump the dev-deps group with 2 updates (#377)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 3 updates: [@substrate-system/tapout](https://github.com/substrate-system/tapout), [stylelint](https://github.com/stylelint/stylelint) and [stylelint-config-standard](https://github.com/stylelint/stylelint-config-standard).


Updates `@substrate-system/tapout` from 0.0.33 to 0.0.34
- [Changelog](https://github.com/substrate-system/tapout/blob/main/CHANGELOG.md)
- [Commits](substrate-system/tapout@v0.0.33...v0.0.34)

Updates `stylelint` from 16.26.1 to 17.0.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@16.26.1...17.0.0)

Updates `stylelint-config-standard` from 39.0.1 to 40.0.0
- [Release notes](https://github.com/stylelint/stylelint-config-standard/releases)
- [Changelog](https://github.com/stylelint/stylelint-config-standard/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint-config-standard@39.0.1...40.0.0)

---
updated-dependencies:
- dependency-name: "@substrate-system/tapout"
  dependency-version: 0.0.34
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: stylelint
  dependency-version: 17.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: stylelint-config-standard
  dependency-version: 40.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 19, 2026
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​substrate-system/​tapout@​0.0.33 ⏵ 0.0.3469 +1100999580
Updatedstylelint-config-standard@​39.0.1 ⏵ 40.0.010010010091100
Updatedstylelint@​16.26.1 ⏵ 17.0.098 +210010096100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant