Skip to content

chore(deps): bump the npm_and_yarn group with 6 updates - #106

Merged
akiojin merged 1 commit into
developfrom
dependabot/npm_and_yarn/develop/npm_and_yarn-e9445f7e75
Mar 11, 2026
Merged

chore(deps): bump the npm_and_yarn group with 6 updates#106
akiojin merged 1 commit into
developfrom
dependabot/npm_and_yarn/develop/npm_and_yarn-e9445f7e75

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 6 updates:

Package From To
@commitlint/cli 20.4.2 20.4.3
@commitlint/config-conventional 20.4.2 20.4.3
@google/gemini-cli 0.31.0 0.32.1
@openai/codex 0.106.0 0.112.0
eslint 10.0.2 10.0.3
markdownlint-cli 0.47.0 0.48.0

Updates @commitlint/cli from 20.4.2 to 20.4.3

Release notes

Sourced from @​commitlint/cli's releases.

v20.4.3

20.4.3 (2026-03-03)

Bug Fixes

Chore etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.4.2...v20.4.3

Changelog

Sourced from @​commitlint/cli's changelog.

20.4.3 (2026-03-03)

Bug Fixes

Commits

Updates @commitlint/config-conventional from 20.4.2 to 20.4.3

Release notes

Sourced from @​commitlint/config-conventional's releases.

v20.4.3

20.4.3 (2026-03-03)

Bug Fixes

Chore etc.

New Contributors

Full Changelog: conventional-changelog/commitlint@v20.4.2...v20.4.3

Changelog

Sourced from @​commitlint/config-conventional's changelog.

20.4.3 (2026-03-03)

Bug Fixes

Commits

Updates @google/gemini-cli from 0.31.0 to 0.32.1

Release notes

Sourced from @​google/gemini-cli's releases.

Release v0.32.1

What's Changed

Full Changelog: google-gemini/gemini-cli@v0.32.0...v0.32.1

Release v0.32.0

What's Changed

... (truncated)

Commits
  • 4d9d0b3 chore(release): v0.32.1
  • e8a57c7 fix(patch): cherry-pick 0659ad1 to release/v0.32.0-pr-21042 to patch version ...
  • 32ab118 chore(release): v0.32.0
  • a7eb7a3 chore(release): v0.32.0-preview.0
  • ba149af fix: merge duplicate imports in a2a-server package (2/4) (#19781)
  • f6533c0 fix: merge duplicate imports in sdk and test-utils packages (1/4) (#19777)
  • 5e3b1fe Enforce import/no-duplicates as error (#19797)
  • 05ef2eb Promote stable tests to CI blocking. (#20581)
  • 966b905 feat(core): enable contiguous parallel admission for Kind.Agent tools (#20583)
  • ca13458 docs: fix spelling typos in installation guide (#20579)
  • Additional commits viewable in compare view

Updates @openai/codex from 0.106.0 to 0.112.0

Release notes

Sourced from @​openai/codex's releases.

0.112.0

New Features

  • Added @plugin mentions so users can reference plugins directly in chat and auto-include their associated MCP/app/skill context. (#13510)
  • Added a new model-selection surface update so the latest model catalog changes are surfaced in the TUI picker flow. (#13617)
  • Merged executable permission profiles into per-turn sandbox policy for zsh-fork skill execution, allowing safer, additive privilege handling for tool runs. (#13496)

Bug Fixes

  • Fixed JS REPL state handling so previously-initialized bindings persist after a failed cell, reducing brittle restarts during iterative sessions. (#13482)
  • Treated SIGTERM like Ctrl-C for graceful app-server websocket shutdown instead of abrupt termination behavior. (#13594)
  • Hardened js_repl image emission to accept only data: URLs, preventing external URL forwarding through emitImage. (#13507)
  • Ensured Linux bubblewrap sandbox runs always unshare the user namespace to keep isolation consistent even for root-owned invocations. (#13624)
  • Improved macOS sandbox network and unix-socket handling in Seatbelt, improving reliability for constrained subprocess environments. (#12702)
  • Surfaced feedback/diagnostics earlier in the workflow so connectivity and diagnostics are visible before later steps. (#13604)

Documentation

  • Clarified js_repl image guidance (emission and encoding semantics), including clearer usage around repeated emitImage calls. (#13639)

Chores

  • Fixed a small codespell warning in the TUI theme picker path. (#13605)

Changelog

Full Changelog: openai/codex@rust-v0.111.0...rust-v0.112.0

0.112.0-alpha.13

Release 0.112.0-alpha.13

0.112.0-alpha.12

Release 0.112.0-alpha.12

0.112.0-alpha.11

Release 0.112.0-alpha.11

0.112.0-alpha.10

Release 0.112.0-alpha.10

... (truncated)

Commits

Updates eslint from 10.0.2 to 10.0.3

Release notes

Sourced from eslint's releases.

v10.0.3

Bug Fixes

  • e511b58 fix: update eslint (#20595) (renovate[bot])
  • f4c9cf9 fix: include variable name in no-useless-assignment message (#20581) (sethamus)
  • ee9ff31 fix: update dependency minimatch to ^10.2.4 (#20562) (Milos Djermanovic)

Documentation

  • 9fc31b0 docs: Update README (GitHub Actions Bot)
  • 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570) (DesselBane)
  • 23b2759 docs: add v10 migration guide link to Use docs index (#20577) (Pixel998)
  • 80259a9 docs: Remove deprecated eslintrc documentation files (#20472) (Copilot)
  • 9b9b4ba docs: fix typo in no-await-in-loop documentation (#20575) (Pixel998)
  • e7d72a7 docs: document TypeScript 5.3 minimum supported version (#20547) (sethamus)

Chores

  • ef8fb92 chore: package.json update for eslint-config-eslint release (Jenkins)
  • e8f2104 chore: updates for v9.39.4 release (Jenkins)
  • 5cd1604 refactor: simplify isCombiningCharacter helper (#20524) (Huáng Jùnliàng)
  • 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586) (Milos Djermanovic)
  • e32df71 chore: update eslint-plugin-eslint-comments, remove legacy-peer-deps (#20576) (Milos Djermanovic)
  • 53ca6ee chore: disable eslint-comments/no-unused-disable rule (#20578) (Milos Djermanovic)
  • e121895 ci: pin Node.js 25.6.1 (#20559) (Milos Djermanovic)
  • efc5aef chore: update tsconfig.json in eslint-config-eslint (#20551) (Francesco Trotta)
Commits
  • bfce7ea 10.0.3
  • d44ced8 Build: changelog update for 10.0.3
  • e511b58 fix: update eslint (#20595)
  • ef8fb92 chore: package.json update for eslint-config-eslint release
  • e8f2104 chore: updates for v9.39.4 release
  • 5cd1604 refactor: simplify isCombiningCharacter helper (#20524)
  • 9fc31b0 docs: Update README
  • 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586)
  • f4c9cf9 fix: include variable name in no-useless-assignment message (#20581)
  • 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570)
  • Additional commits viewable in compare view

Updates markdownlint-cli from 0.47.0 to 0.48.0

Release notes

Sourced from markdownlint-cli's releases.

v0.48.0

  • Update all dependencies via Dependabot
Commits
  • e72a3ca Bump version 0.48.0
  • 02c6132 Delete and recreate package-lock.json via "npm install".
  • 800b47c Bump ava from 6.4.1 to 7.0.0
  • e6eb97c Bump minimatch
  • 61da922 Bump tar from 7.5.7 to 7.5.9
  • 3731696 Bump minimatch from 10.2.0 to 10.2.2
  • d60f5af Bump minimatch from 10.1.2 to 10.2.0
  • 587b174 Bump markdown-it from 14.1.0 to 14.1.1
  • c3bfec9 Bump minimatch from 10.1.1 to 10.1.2
  • 1fba958 Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github

dependabot Bot commented on behalf of github Mar 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/develop/npm_and_yarn-e9445f7e75 branch 3 times, most recently from 82db8d7 to 890d9b7 Compare March 11, 2026 00:09
Bumps the npm_and_yarn group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.4.2` | `20.4.3` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `20.4.2` | `20.4.3` |
| [@google/gemini-cli](https://github.com/google-gemini/gemini-cli) | `0.31.0` | `0.32.1` |
| [@openai/codex](https://github.com/openai/codex/tree/HEAD/codex-cli) | `0.106.0` | `0.112.0` |
| [eslint](https://github.com/eslint/eslint) | `10.0.2` | `10.0.3` |
| [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) | `0.47.0` | `0.48.0` |


Updates `@commitlint/cli` from 20.4.2 to 20.4.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.4.3/@commitlint/cli)

Updates `@commitlint/config-conventional` from 20.4.2 to 20.4.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.4.3/@commitlint/config-conventional)

Updates `@google/gemini-cli` from 0.31.0 to 0.32.1
- [Release notes](https://github.com/google-gemini/gemini-cli/releases)
- [Changelog](https://github.com/google-gemini/gemini-cli/blob/main/docs/releases.md)
- [Commits](google-gemini/gemini-cli@v0.31.0...v0.32.1)

Updates `@openai/codex` from 0.106.0 to 0.112.0
- [Release notes](https://github.com/openai/codex/releases)
- [Commits](https://github.com/openai/codex/commits/rust-v0.112.0/codex-cli)

Updates `eslint` from 10.0.2 to 10.0.3
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.0.2...v10.0.3)

Updates `markdownlint-cli` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases)
- [Commits](igorshubovych/markdownlint-cli@v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-version: 20.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm_and_yarn
- dependency-name: "@commitlint/config-conventional"
  dependency-version: 20.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm_and_yarn
- dependency-name: "@google/gemini-cli"
  dependency-version: 0.32.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm_and_yarn
- dependency-name: "@openai/codex"
  dependency-version: 0.112.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm_and_yarn
- dependency-name: eslint
  dependency-version: 10.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm_and_yarn
- dependency-name: markdownlint-cli
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/develop/npm_and_yarn-e9445f7e75 branch from 890d9b7 to 61465a7 Compare March 11, 2026 00:26
@akiojin
akiojin merged commit 8d8377e into develop Mar 11, 2026
9 of 10 checks passed
@akiojin
akiojin deleted the dependabot/npm_and_yarn/develop/npm_and_yarn-e9445f7e75 branch March 11, 2026 03:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant