Skip to content

build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates - #486

Merged
VickyXAI merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-7f3e3d4789
Oct 20, 2026
Merged

build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates#486
VickyXAI merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-7f3e3d4789

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 7 updates in the / directory:

Package From To
eslint 10.8.1 10.13.0
openclaw 2026.7.2-beta.7 2026.10.4
prettier 3.9.6 3.9.10
tsup 8.5.1 9.0.0
tsx 4.23.11 4.23.15
typescript-eslint 8.66.0 8.71.2
vitest 4.1.10 5.0.5

Updates eslint from 10.8.1 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

Updates openclaw from 2026.7.2-beta.7 to 2026.10.4

Release notes

Sourced from openclaw's releases.

openclaw 2026.10.4

2026.10.4

Highlights

  • The Gateway keeps running after the computer sleeps or the system clock jumps, instead of restarting itself because its ownership heartbeat looked stale. (#170790) Thanks @​AnvinaLI, @​sgh6688, @​waynegault, and @​RomneyDa.
  • Gateway shutdown and restart no longer hang on a stalled transcript worker or in-flight session lifecycle events. (#170493, #170555) Thanks @​Oldrich333.
  • Tlon group DMs no longer treat other participants as the owner, closing an owner-impersonation path. (#165801) Thanks @​eleqtrizit.
  • Headless browser pages keep responding to clicks while a site waits for a passkey. (#170857) Thanks @​trukhinyuri.
  • Manual /compact settles the active run before compacting instead of aborting it and dropping the pending request. (#166163) Thanks @​holny and @​alexph-dev.

Changes

  • Stability patch for 2026.10.3 with no new features or configuration changes. Thanks @​RomneyDa.

Fixes

  • Gateway: stays responsive during long reply-tagged streams, and long replies that quote tool-call XML no longer re-parse Markdown on every token. (#166782, #171573) Thanks @​boeingchoco.
  • Gateway: blocked durable context-engine turns are logged once instead of on every run. (#167595) Thanks @​jalehman.
  • Control UI: delayed application heartbeats no longer force a reconnect. (#171253)
  • Gateway: recover state ownership after sleep and wall-clock changes, and allow openclaw gateway restart from verified external macOS terminals. (#170790, #170354) Thanks @​AnvinaLI, @​sgh6688, @​waynegault, and @​RomneyDa.
  • Gateway: bound transcript-worker shutdown waits and wait for session lifecycle publication during shutdown. (#170493, #170555) Thanks @​Oldrich333.
  • Gateway: start enabled standalone plugin files with the Gateway, and keep worker heap limits enforced when the managed service sets a process-wide heap flag. (#171330, #166581) Thanks @​holgergruenhagen, @​valkyriweb, @​xydigitLybnnnn, @​goslingmanagment, @​waynegault, and @​obviyus.
  • Agents: launched plugin turns no longer fail with writer-claim errors, and Claude CLI sessions no longer fork history across message routes. (#170077, #167241) Thanks @​cmatrx0.
  • Agents: manual compaction settles the active run instead of aborting it. (#166163) Thanks @​holny and @​alexph-dev.
  • OpenAI: tool turns for reasoning models on api.openai.com Completions routes no longer fail with a 400. (#166182) Thanks @​obviyus and @​AsTutoAI.
  • Updates: agent databases are no longer flagged as changed during snapshot capture, the success summary stops repeating settled plugin data/settings upgrades as pending, and metadata inventory keeps running under progress-output backpressure. (#170351, #170413, #168493) Thanks @​DonnieFi, @​RomneyDa, and @​vincentkoc.
  • Updates: slow host admission no longer holds the database writer and disrupts Gateway work, progress keeps reporting through temporary Doctor maintenance, snapshot failures get an accurate headline and recovery advice, and Linux updates can clean up abandoned runtime directories under protected systemd user managers. (#171493, #171454, #171457, #171488, #170783, #166335) Thanks @​RomneyDa, @​DonnieFi, and @​vincentkoc.
  • Updates: candidate validation no longer amplifies private SQLite snapshots on live installs, older drivers stop reading candidate-migrated state and stale restart verdicts clear, and optional cron inspection or snapshot cleanup failures no longer stall updates. (#167451, #170130, #170754) Thanks @​angeliti999 and @​RomneyDa.
  • Updates: openclaw update repair turns no longer time out before running tools on slower hosts; nested authority checks reuse the current state snapshot instead of copying the database again. (#166847)
  • Doctor: updates no longer refuse unreferenced retired OAuth sidecars, and offline state repair works for app-owned Gateways. (#165420, #170768) Thanks @​obviyus and @​RomneyDa.
  • Tailscale: an interrupted start stops its serve process, local access stays available when the tailnet denies Serve, and Doctor checks configured Tailscale startup prerequisites. (#167514, #171509, #166947) Thanks @​pandysp and @​RomneyDa.
  • macOS: app recovery keeps compatible newer Gateways instead of downgrading them, and repair accepts a verified LaunchAgent bootstrap that is already in progress. (#170766, #170740) Thanks @​RomneyDa.
  • Sessions: equivalent POSIX path aliases such as /tmp and /private/tmp no longer restart channels. (#166462) Thanks @​ericcaiwx-star.
  • MCP: OAuth login completes when the authorization server registers loopback redirect URIs without a port. (#170876) Thanks @​9fw2pq8sgb-art.
  • Browser: headless pages accept clicks while a site waits for a passkey. (#170857) Thanks @​trukhinyuri.
  • Control UI: updated chats recover through the serving document. (#168941)
  • Tlon: never treat group DM authors as the owner. (#165801) Thanks @​eleqtrizit.
  • Telegram: polling workers resolve in both source and package builds. (#154286) Thanks @​xydt-juyaohui and @​markfietje.
  • Discord: agent consults keep working after voice changes. (#171029) Thanks @​ericcaiwx-star and @​brainmonger.
  • Feishu: config hot-reload no longer orphans conversation bindings. (#169226) Thanks @​ruel225, @​junniar, and @​obviyus.
  • IRC: long non-ASCII replies are no longer lost when the server relays them. (#159730) Thanks @​rodricksz4h5.
  • Release: plugin npm publish tolerates repeated artifact pagination entries, Linux builds trigger after automatic requests with hosted-runner credentials, and ratchet checks read large Git baselines. (#171044, #167087, #167237, #164743) Thanks @​RomneyDa and @​shakkernerd.

Complete contribution record

This audited record covers the complete v2026.10.3..d58dd3ceef67f10eab31d93387d2c90866b3ec93 history: 61 in-range PRs + 0 retained seed-only PRs = 61 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Pull requests

... (truncated)

Changelog

Sourced from openclaw's changelog.

Changelog

Release notes: https://docs.openclaw.ai/releases

Each release has its complete changelog below. Audited contribution records are retained separately when available.

... (truncated)

Commits
  • 383c124 docs(changelog): refresh 2026.10.4 notes
  • d58dd3c test(qa-lab): keep repeated-request recovery inside a heartbeat window
  • 75a86cc fix(ci): retry FRV job listings with smaller pages after GitHub 5xx (#171952)
  • 48048d8 docs(changelog): refresh 2026.10.4 notes
  • 0ed1fcc test(qa-lab): clarify node_exec live arguments and report cases that never st...
  • cc67c72 chore: clarify node command history test failures (#172038)
  • bd81bb4 test(workers): wait for publication and admission closure (#168922)
  • 5d94e3c test(watch): publish atomic edits in the overflow fixture
  • baa8ce3 test: stabilize release timing boundaries (#166218)
  • d9da91e docs(changelog): refresh 2026.10.4 notes
  • Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • cdd17f2 Release 3.9.9
  • dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
  • f9be58f Git blame ignore 3.9.8
  • 88470cb Bump Prettier dependency to 3.9.8
  • 9559cab Clean changelog_unreleased
  • 4fc8ee8 Update dependents count
  • Additional commits viewable in compare view

Updates tsup from 8.5.1 to 9.0.0

Release notes

Sourced from tsup's releases.

v9.0.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 198479b chore: release v9.0.0
  • 3079ea3 feat(type): expose the Plugin type (#1264)
  • 13f68eb ci: enable npm stage publishing
  • 380e94e test: fix failing tests
  • b601adf chore: merge test lockfile into the root as a pnpm workspace
  • 00139a4 chore: cleanup lockfile
  • 6cec950 chore: build tsup with its own source via tsx
  • 6705d39 chore: upgrade deps, replace source-map with source-map-js
  • a2c0810 feat: upgrade esbuild & chokidar
  • 980525e fix: remove baseUrl in tsconfig (#1390)
  • Additional commits viewable in compare view

Updates tsx from 4.23.11 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

  • exclude bare builtins from namespace inheritance (38e1588)
  • expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
  • make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

  • restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

Commits
  • ca66105 test: fix drive-less file URLs in ESM resolver fixtures
  • 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
  • 38e1588 fix: exclude bare builtins from namespace inheritance
  • 562c434 fix: make namespaced register() overloads portable for declaration emit
  • edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
  • 70e7828 test: upgrade tinyspy for disposable API
  • 9ed2022 ci: avoid duplicate release notifications
  • 872e77f refactor: use disposables for cleanup
  • 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
  • 28e1f12 fix(cache): bound shared transform cache memory (#835)
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.66.0 to 8.71.2

Release notes

Sourced from typescript-eslint's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
  • type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

  • eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
  • eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
  • eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
  • eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
  • eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
  • eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
  • project-service: throttle cleanup when opening files (#12934)
  • type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

🩹 Fixes

  • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

... (truncated)

Commits
  • 7488d68 chore(release): publish 8.71.2
  • d57b8da chore(release): publish 8.71.1
  • 8695664 chore(release): publish 8.71.0
  • 23d38ce chore(release): publish 8.70.1
  • eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
  • 8c80531 chore: fix typos in comments and docs (#12846)
  • b6b86a1 chore: migrate to nx 23.2.0 (#12843)
  • 7ee7608 chore(release): publish 8.70.0
  • 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
  • 9a6e546 chore(release): publish 8.69.0
  • Additional commits viewable in compare view

Updates vitest from 4.1.10 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@coderabbitai

coderabbitai Bot commented Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: BlockRunAI/ClawRouter/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 706e75ef-3e69-4867-8afb-6af98e2a3f33

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@VickyXAI VickyXAI mentioned this pull request Oct 20, 2026
Merged
VickyXAI added a commit that referenced this pull request Oct 20, 2026
@VickyXAI
ci: run CI and publish on Node 24 (#488)
35fb714 
openclaw 2026.10+ (the devDependency Dependabot #486 bumps to) refuses to
install below Node 24.16, so npm ci fails on the Node 22 runners and every
check goes red before a test runs. Move the lint, build/test and publish jobs
to Node 24, plus the Docker images that install openclaw@latest (the scanner
image among them). engines stays >=22: openclaw is dev-only, and
Dockerfile.install-test and the pinned openclaw-2026.5 image still cover a
Node 22 user install.

Co-authored-by: 1bcMax <viewitter@gmail.com>
@VickyXAI

VickyXAI commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot changed the title build(deps-dev): bump the dev-dependencies group with 7 updates build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-7f3e3d4789 branch from 1618df6 to c6aacd0 Compare October 20, 2026 05:02
@VickyXAI VickyXAI mentioned this pull request Oct 20, 2026
Merged
VickyXAI added a commit that referenced this pull request Oct 20, 2026
@VickyXAI
test(scanner): find OpenClaw's scanner in .mjs chunks (#490)
42e3702 
openclaw 2026.10.x moved its dist chunks from .js to .mjs, so the scanner
test (which only matched scanner-*.js) found nothing and failed with
"scanner chunk not found" on Dependabot #486. Accept both extensions.
Verified locally against openclaw 2026.10.4 and the current pin: 2 passed.

Co-authored-by: 1bcMax <viewitter@gmail.com>
@VickyXAI

VickyXAI commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
build(deps-dev): bump the dev-dependencies group across 1 directory w…
0ef619b 
…ith 7 updates

Bumps the dev-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.13.0` |
| [openclaw](https://github.com/openclaw/openclaw) | `2026.7.2-beta.7` | `2026.10.4` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |
| [tsup](https://github.com/egoist/tsup) | `8.5.1` | `9.0.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.11` | `4.23.15` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.66.0` | `8.71.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.5` |



Updates `eslint` from 10.8.1 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.1...v10.13.0)

Updates `openclaw` from 2026.7.2-beta.7 to 2026.10.4
- [Release notes](https://github.com/openclaw/openclaw/releases)
- [Changelog](https://github.com/openclaw/openclaw/blob/main/CHANGELOG.md)
- [Commits](openclaw/openclaw@v2026.7.2-beta.7...v2026.10.4)

Updates `prettier` from 3.9.6 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.10)

Updates `tsup` from 8.5.1 to 9.0.0
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.5.1...v9.0.0)

Updates `tsx` from 4.23.11 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.11...v4.23.15)

Updates `typescript-eslint` from 8.66.0 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

Updates `vitest` from 4.1.10 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: openclaw
  dependency-version: 2026.10.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tsup
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-7f3e3d4789 branch from c6aacd0 to 0ef619b Compare October 20, 2026 05:14
VickyXAI
VickyXAI approved these changes Oct 20, 2026
View reviewed changes

@VickyXAI VickyXAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All checks are green on Node 24 (#488) with the scanner test fix (#490). tsup 9 builds a dist/ that is the same size, to the byte, as tsup 8's (index.js 10,491,650 and cli.js 10,760,490), and smoke-dist passes. This is dev-only and changes nothing for users.

@VickyXAI
VickyXAI merged commit 13b6d30 into main Oct 20, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-7f3e3d4789 branch October 20, 2026 15:34
VickyXAI pushed a commit that referenced this pull request Oct 20, 2026
release: v0.12.294 — DeepSeek V4.1 Flash, live catalog sync, Node 24 CI
cdbc091 
DeepSeek V4.1 Flash added; free v4-flash pins follow the free default (#487).
Catalog synced to the live gateway: six chat models, grok-imagine-video-1.5,
retired ids follow the gateway redirect (#485). CI and publish on Node 24
(#488), scanner test reads .mjs chunks (#490), tsup 9 / vitest 5 (#486).
dist/ rebuilt.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@VickyXAI VickyXAI VickyXAI approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@VickyXAI