Skip to content

pnpm: bump the dev-dependencies group with 13 updates - #2

Open
dependabot[bot] wants to merge 1 commit into
fork/mainfrom
dependabot/npm_and_yarn/dev-dependencies-0d3a92cfb2
Open

pnpm: bump the dev-dependencies group with 13 updates#2
dependabot[bot] wants to merge 1 commit into
fork/mainfrom
dependabot/npm_and_yarn/dev-dependencies-0d3a92cfb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown

Bumps the dev-dependencies group with 13 updates:

Package From To
@pandacss/dev 1.11.4 1.11.5
@pandacss/node 1.11.4 1.11.5
@pandacss/types 1.11.4 1.11.5
axe-core 4.10.3 4.12.1
eslint 10.6.0 10.8.0
execa 9.6.1 10.0.0
globals 17.7.0 17.8.0
p-limit 7.3.0 7.3.1
postcss 8.5.20 8.5.23
prettier 3.9.5 3.9.6
rollup 4.62.2 4.62.3
svgo 4.0.1 4.0.2
typescript 5.5.2 7.0.2

Updates @pandacss/dev from 1.11.4 to 1.11.5

Release notes

Sourced from @​pandacss/dev's releases.

@​pandacss/dev@​1.11.5

Patch Changes

  • Updated dependencies [0c185d9]
  • Updated dependencies [4ef39c8]
    • @​pandacss/preset-base@​1.11.5
    • @​pandacss/config@​1.11.5
    • @​pandacss/node@​1.11.5
    • @​pandacss/mcp@​1.11.5
    • @​pandacss/postcss@​1.11.5
    • @​pandacss/logger@​1.11.5
    • @​pandacss/preset-panda@​1.11.5
    • @​pandacss/shared@​1.11.5
    • @​pandacss/token-dictionary@​1.11.5
    • @​pandacss/types@​1.11.5
Changelog

Sourced from @​pandacss/dev's changelog.

1.11.5

Patch Changes

  • Updated dependencies [0c185d9]
  • Updated dependencies [4ef39c8]
    • @​pandacss/preset-base@​1.11.5
    • @​pandacss/config@​1.11.5
    • @​pandacss/node@​1.11.5
    • @​pandacss/mcp@​1.11.5
    • @​pandacss/postcss@​1.11.5
    • @​pandacss/logger@​1.11.5
    • @​pandacss/preset-panda@​1.11.5
    • @​pandacss/shared@​1.11.5
    • @​pandacss/token-dictionary@​1.11.5
    • @​pandacss/types@​1.11.5
Commits

Updates @pandacss/node from 1.11.4 to 1.11.5

Release notes

Sourced from @​pandacss/node's releases.

@​pandacss/node@​1.11.5

Patch Changes

  • 4ef39c8: Resolve tsconfig paths from referenced projects when bundling the config file (Vite solution-style setups).
  • Updated dependencies [4ef39c8]
  • Updated dependencies [366ac89]
    • @​pandacss/config@​1.11.5
    • @​pandacss/generator@​1.11.5
    • @​pandacss/parser@​1.11.5
    • @​pandacss/reporter@​1.11.5
    • @​pandacss/core@​1.11.5
    • @​pandacss/logger@​1.11.5
    • @​pandacss/plugin-lightningcss@​1.11.5
    • @​pandacss/plugin-svelte@​1.11.5
    • @​pandacss/plugin-vue@​1.11.5
    • @​pandacss/shared@​1.11.5
    • @​pandacss/token-dictionary@​1.11.5
    • @​pandacss/types@​1.11.5
Changelog

Sourced from @​pandacss/node's changelog.

1.11.5

Patch Changes

  • 4ef39c8: Resolve tsconfig paths from referenced projects when bundling the config file (Vite solution-style setups).
  • Updated dependencies [4ef39c8]
  • Updated dependencies [366ac89]
    • @​pandacss/config@​1.11.5
    • @​pandacss/generator@​1.11.5
    • @​pandacss/parser@​1.11.5
    • @​pandacss/reporter@​1.11.5
    • @​pandacss/core@​1.11.5
    • @​pandacss/logger@​1.11.5
    • @​pandacss/plugin-lightningcss@​1.11.5
    • @​pandacss/plugin-svelte@​1.11.5
    • @​pandacss/plugin-vue@​1.11.5
    • @​pandacss/shared@​1.11.5
    • @​pandacss/token-dictionary@​1.11.5
    • @​pandacss/types@​1.11.5
Commits

Updates @pandacss/types from 1.11.4 to 1.11.5

Changelog

Sourced from @​pandacss/types's changelog.

1.11.5

Commits

Updates axe-core from 4.10.3 to 4.12.1

Release notes

Sourced from axe-core's releases.

Release 4.12.1

Bug FixesThis release does not impact axe results.

  • axe.d.ts: make enabled property of RuleMetadata optional (#5129) (7eb3d2d)

Release 4.12.0

In this release you'll find:

  1. A new aria-tab-name rule that tests role="tab" elements have an accessible name
  2. The landmark-complementary-is-top-level rule is deprecated, as ARIA no longer requires this
  3. Preparations for Element Internal support (behind a feature flag)
  4. Various other bug fixes for target-size, scrollable-region-focusable, and more

This release can see reveal new issues, as well as close out a few existing ones that might have come from false positives or the now deprecated rule.

Features

  • add gather-internals.js external script (#5099) (c61d58b), closes #5080
  • aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#5080) (417b48a), closes #5039 #4259
  • axe.externalAPIs: add public api for setting elementInternal data (#5105) (63bab8f)
  • core: expose normalizeRunOptions (#4998) (b8e6a59)
  • expose axe.resetLocale() to restore the default locale (#5108) (c2b5292), closes #5107
  • getRules: include rule enabled state in returned objects (#5118) (75bf772), closes #5116
  • list,listitem: support element internals role (#5119) (7d9d696)
  • new-rule: check that aria-tab have an accessible name (#5001) (0d4e4e7), closes #4842
  • rules: deprecate landmark-complementary-is-top-level rules (#4992) (9e09139), closes #4950
  • utils: add getElementInternals function (#5077) (1c15f82)

Bug Fixes

  • aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#4974) (c6245e7)
  • aria-conditional-attr: add support for radio (#5100) (8223c98)
  • aria-valid-attr-value: handle multiple aria-errormessage IDs (#4973) (0489e30)
  • aria: prevent getOwnedVirtual from returning duplicate nodes (#4987) (48ca955), closes #4840
  • commons/text: exclude natively hidden elements from aria-labelledby accessible name (#5076) (ea7202c), closes #4704
  • DqElement: avoid calling constructors with cloneNode (#5013) (0281fa1)
  • existing-rule: aria-busy now shows an error message for a use with unallowed children (#5017) (2067b87)
  • helpUrl: ensure axe.configure always updates the help URLs (#5114) (c4f60ff)
  • label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#5096) (3a012a1)
  • locale: ensure all subtags are correctly set (#5112) (13005ed)
  • scrollable-region-focusable: clarify the issue is in safari (#4995) (4ec5211), closes WebKit#190870 WebKit#277290
  • scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#4993) (838707a)
  • target-size: determine offset using clientRects if target is display:inline (#5012) (a4b8091)
  • target-size: ignore position: fixed elements that are offscreen when page is scrolled (#5066) (1229a6e), closes #5065
  • target-size: ignore widgets that are inline with other inline elements (#5000) (a8dd81b)
  • utils/getAncestry: escape node name (#5079) (d1fabaa), closes #5078
  • utils: Add null check to parseCrossOriginStylesheet, closes #5074 (#5075) (f12ef32)
  • utils: update isShadowRoot to use spec-compliant custom element regex (#5059) (edc6ce2), closes #5030

Release 4.11.4

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.12.1 (2026-06-09)

Bug Fixes

  • axe.d.ts: make enabled property of RuleMetadata optional (#5129) (7eb3d2d)

4.12.0 (2026-06-01)

Features

  • add gather-internals.js external script (#5099) (c61d58b), closes #5080
  • aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#5080) (417b48a), closes #5039 #4259
  • axe.externalAPIs: add public api for setting elementInternal data (#5105) (63bab8f)
  • core: expose normalizeRunOptions (#4998) (b8e6a59)
  • expose axe.resetLocale() to restore the default locale (#5108) (c2b5292), closes #5107
  • getRules: include rule enabled state in returned objects (#5118) (75bf772), closes #5116
  • list,listitem: support element internals role (#5119) (7d9d696)
  • new-rule: check that aria-tab have an accessible name (#5001) (0d4e4e7), closes #4842
  • rules: deprecate landmark-complementary-is-top-level rules (#4992) (9e09139), closes #4950
  • utils: add getElementInternals function (#5077) (1c15f82)

Bug Fixes

  • aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#4974) (c6245e7)
  • aria-conditional-attr: add support for radio (#5100) (8223c98)
  • aria-valid-attr-value: handle multiple aria-errormessage IDs (#4973) (0489e30)
  • aria: prevent getOwnedVirtual from returning duplicate nodes (#4987) (48ca955), closes #4840
  • commons/text: exclude natively hidden elements from aria-labelledby accessible name (#5076) (ea7202c), closes #4704
  • DqElement: avoid calling constructors with cloneNode (#5013) (0281fa1)
  • existing-rule: aria-busy now shows an error message for a use with unallowed children (#5017) (2067b87)
  • helpUrl: ensure axe.configure always updates the help URLs (#5114) (c4f60ff)
  • label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#5096) (3a012a1)
  • locale: ensure all subtags are correctly set (#5112) (13005ed)
  • scrollable-region-focusable: clarify the issue is in safari (#4995) (4ec5211), closes WebKit#190870 WebKit#277290
  • scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#4993) (838707a)
  • target-size: determine offset using clientRects if target is display:inline (#5012) (a4b8091)
  • target-size: ignore position: fixed elements that are offscreen when page is scrolled (#5066) (1229a6e), closes #5065
  • target-size: ignore widgets that are inline with other inline elements (#5000) (a8dd81b)
  • utils/getAncestry: escape node name (#5079) (d1fabaa), closes #5078
  • utils: Add null check to parseCrossOriginStylesheet, closes #5074 (#5075) (f12ef32)
  • utils: update isShadowRoot to use spec-compliant custom element regex (#5059) (edc6ce2), closes #5030

4.11.4 (2026-04-23)

Bug Fixes

  • commons/text: exclude natively hidden elements from aria-labelledby accessible name (#5076) (df34adf), closes #4704
  • utils/getAncestry: escape node name (#5079) (6e68d0a), closes #5078

4.11.3 (2026-04-13)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for axe-core since your current version.


Updates eslint from 10.6.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

  • cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
  • f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

Updates execa from 9.6.1 to 10.0.0

Release notes

Sourced from execa's releases.

v10.0.0

Breaking

  • Require Node.js 22. (#1243) 04b4454

  • The subprocess is now a normal promise, instead of a ChildProcess instance augmented with promise methods. All the methods and properties documented by Execa are unchanged. Node.js-specific ChildProcess APIs (such as .on(), .send(), .ref() and .unref()) must now be accessed through the new subprocess.nodeChildProcess property. (#1255) ade74bf

const subprocess = execa('node', ['file.js']);
- subprocess.on('spawn', onSpawn);
+ subprocess.nodeChildProcess.on('spawn', onSpawn);
- await execaCommand('npm run build');
+ await execa`npm run build`;

await execaCommand(commandString);


await execa${parseCommandString(commandString)};
  • Removed the old undocumented stdio: [..., 'ipc'] syntax. Use the ipc: true option instead. (#1245) dcf611c
- await execa('node', ['file.js'], {stdio: ['pipe', 'pipe', 'pipe', 'ipc']});
+ await execa('node', ['file.js'], {ipc: true});
  • When the input or inputFile option is combined with an inherited stdin (for example stdio: 'inherit'), the explicit input is now used, instead of being ignored. To combine multiple inputs, pass an array like stdin: ['inherit', {string: 'input'}]. (#1232) 3ed0544

Improvements

await execa('npm', ['run', 'build'], {killDescendants: true, timeout: 5000});

Bumps the dev-dependencies group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@pandacss/dev](https://github.com/chakra-ui/panda/tree/HEAD/packages/cli) | `1.11.4` | `1.11.5` |
| [@pandacss/node](https://github.com/chakra-ui/panda/tree/HEAD/packages/node) | `1.11.4` | `1.11.5` |
| [@pandacss/types](https://github.com/chakra-ui/panda/tree/HEAD/packages/types) | `1.11.4` | `1.11.5` |
| [axe-core](https://github.com/dequelabs/axe-core) | `4.10.3` | `4.12.1` |
| [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.8.0` |
| [execa](https://github.com/sindresorhus/execa) | `9.6.1` | `10.0.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.8.0` |
| [p-limit](https://github.com/sindresorhus/p-limit) | `7.3.0` | `7.3.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.20` | `8.5.23` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |
| [rollup](https://github.com/rollup/rollup) | `4.62.2` | `4.62.3` |
| [svgo](https://github.com/svg/svgo) | `4.0.1` | `4.0.2` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.5.2` | `7.0.2` |


Updates `@pandacss/dev` from 1.11.4 to 1.11.5
- [Release notes](https://github.com/chakra-ui/panda/releases)
- [Changelog](https://github.com/chakra-ui/panda/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/panda/commits/@pandacss/dev@1.11.5/packages/cli)

Updates `@pandacss/node` from 1.11.4 to 1.11.5
- [Release notes](https://github.com/chakra-ui/panda/releases)
- [Changelog](https://github.com/chakra-ui/panda/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/panda/commits/@pandacss/node@1.11.5/packages/node)

Updates `@pandacss/types` from 1.11.4 to 1.11.5
- [Release notes](https://github.com/chakra-ui/panda/releases)
- [Changelog](https://github.com/chakra-ui/panda/blob/main/packages/types/CHANGELOG.md)
- [Commits](https://github.com/chakra-ui/panda/commits/@pandacss/types@1.11.5/packages/types)

Updates `axe-core` from 4.10.3 to 4.12.1
- [Release notes](https://github.com/dequelabs/axe-core/releases)
- [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core@v4.10.3...v4.12.1)

Updates `eslint` from 10.6.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.6.0...v10.8.0)

Updates `execa` from 9.6.1 to 10.0.0
- [Release notes](https://github.com/sindresorhus/execa/releases)
- [Commits](sindresorhus/execa@v9.6.1...v10.0.0)

Updates `globals` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.8.0)

Updates `p-limit` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/sindresorhus/p-limit/releases)
- [Commits](sindresorhus/p-limit@v7.3.0...v7.3.1)

Updates `postcss` from 8.5.20 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.20...8.5.23)

Updates `prettier` from 3.9.5 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.5...3.9.6)

Updates `rollup` from 4.62.2 to 4.62.3
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.2...v4.62.3)

Updates `svgo` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v4.0.1...v4.0.2)

Updates `typescript` from 5.5.2 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: "@pandacss/dev"
  dependency-version: 1.11.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@pandacss/node"
  dependency-version: 1.11.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@pandacss/types"
  dependency-version: 1.11.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: axe-core
  dependency-version: 4.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: execa
  dependency-version: 10.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: p-limit
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: rollup
  dependency-version: 4.62.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: svgo
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants