Skip to content

chore(deps): bump the npm-prod-minor-patch group across 1 directory with 5 updates#283

Merged
justlevine merged 1 commit intodevelopfrom
dependabot/npm_and_yarn/npm-prod-minor-patch-3f5f214ba6
Apr 14, 2026
Merged

chore(deps): bump the npm-prod-minor-patch group across 1 directory with 5 updates#283
justlevine merged 1 commit intodevelopfrom
dependabot/npm_and_yarn/npm-prod-minor-patch-3f5f214ba6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Bumps the npm-prod-minor-patch group with 4 updates in the / directory: @wordpress/style-engine, @wordpress/eslint-plugin, eslint-plugin-jsdoc and fast-xml-parser.

Updates @wordpress/style-engine from 2.42.0 to 2.43.0

Changelog

Sourced from @​wordpress/style-engine's changelog.

2.43.0 (2026-04-01)

Commits
  • 2cea906 chore(release): publish
  • f3bc3b2 Update changelog files
  • f146d62 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • c094feb Update changelog files
  • 78bcaf5 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • 29f3a12 Update changelog files
  • aa5f983 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • See full diff in compare view

Updates @wordpress/eslint-plugin from 24.4.0 to 24.5.0

Changelog

Sourced from @​wordpress/eslint-plugin's changelog.

24.5.0 (2026-04-01)

Commits
  • 2cea906 chore(release): publish
  • f3bc3b2 Update changelog files
  • f146d62 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • c094feb Update changelog files
  • 78bcaf5 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • 29f3a12 Update changelog files
  • aa5f983 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • See full diff in compare view

Updates eslint-plugin-jsdoc from 62.8.1 to 62.9.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v62.9.0

62.9.0 (2026-04-01)

Features

  • update jsdoccomment, devDeps. (8569d0c)
Commits
  • 8569d0c feat: update jsdoccomment, devDeps.
  • 5b668af chore(deps): bump brace-expansion from 1.1.12 to 1.1.13
  • 7d0e91a chore: update comment-parser, jsdoccomment, espree, devDeps.
  • See full diff in compare view

Updates fast-xml-parser from 5.5.9 to 5.5.10

Release notes

Sourced from fast-xml-parser's releases.

performance improvment, increase entity expansion default limit

  • increase default entity explansion limit as many projects demand for that
maxEntitySize: 10000,
maxExpansionDepth: 10000,
maxTotalExpansions: Infinity,
maxExpandedLength: 100000,
maxEntityCount: 1000,
  • performance improvement
    • reduce calls to toString
    • early return when entities are not present
    • prepare rawAttrsForMatcher only if user sets jPath: false

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.9...v5.5.10

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.5.11 / 2026-04-08

  • Performance Improvement
    • integrate ExpressionSet for stopNodes

5.5.10 / 2026-04-03

  • increase default entity explansion limit as many projects demand for that
  • performance improvement
    • reduce calls to toString
    • early return when entities are not present
    • prepare rawAttrsForMatcher only if user sets jPath: false

5.5.9 / 2026-03-23

  • combine typing files

4.5.5 / 2026-03-22

apply fixes from v5 (legacy maintenance branch v4-maintenance)

  • support maxEntityCount
  • support onDangerousProperty
  • support maxNestedTags
  • handle prototype pollution
  • fix incorrect entity name replacement
  • fix incorrect condition for entity expansion

5.5.8 / 2026-03-20

  • pass read only matcher in callback

5.5.7 / 2026-03-19

  • fix: entity expansion limits
  • update strnum package to 2.2.0

5.5.6 / 2026-03-16

  • update builder dependency
  • fix incorrect regex to replace . in entity name
  • fix check for entitiy expansion for lastEntities and html entities too

5.5.5 / 2026-03-13

  • sanitize dangerous tag or attribute name
  • error on critical property name
  • support onDangerousProperty option

5.5.4 / 2026-03-13

  • declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

... (truncated)

Commits

Updates @wordpress/prettier-config from 4.42.0 to 4.43.0

Changelog

Sourced from @​wordpress/prettier-config's changelog.

4.43.0 (2026-04-01)

Commits
  • 2cea906 chore(release): publish
  • f3bc3b2 Update changelog files
  • f146d62 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • c094feb Update changelog files
  • 78bcaf5 Merge changes published in the Gutenberg plugin "release/22.9" branch
  • 29f3a12 Update changelog files
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 5 updates

Bumps the npm-prod-minor-patch group with 4 updates in the / directory: [@wordpress/style-engine](https://github.com/WordPress/gutenberg/tree/HEAD/packages/style-engine), [@wordpress/eslint-plugin](https://github.com/WordPress/gutenberg/tree/HEAD/packages/eslint-plugin), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser).


Updates `@wordpress/style-engine` from 2.42.0 to 2.43.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/style-engine/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/style-engine@2.43.0/packages/style-engine)

Updates `@wordpress/eslint-plugin` from 24.4.0 to 24.5.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/eslint-plugin@24.5.0/packages/eslint-plugin)

Updates `eslint-plugin-jsdoc` from 62.8.1 to 62.9.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.8.1...v62.9.0)

Updates `fast-xml-parser` from 5.5.9 to 5.5.10
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.5.9...v5.5.10)

Updates `@wordpress/prettier-config` from 4.42.0 to 4.43.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/prettier-config/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/prettier-config@4.43.0/packages/prettier-config)

---
updated-dependencies:
- dependency-name: "@wordpress/style-engine"
  dependency-version: 2.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-prod-minor-patch
- dependency-name: "@wordpress/eslint-plugin"
  dependency-version: 24.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-prod-minor-patch
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-prod-minor-patch
- dependency-name: fast-xml-parser
  dependency-version: 5.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-minor-patch
- dependency-name: "@wordpress/prettier-config"
  dependency-version: 4.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-prod-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 13, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Apr 13, 2026

⚠️ No Changeset found

Latest commit: 487c92a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coveralls
Copy link
Copy Markdown

Coverage Report for CI Build 24372467495

Coverage remained the same at 59.571%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 720
Covered Lines: 484
Line Coverage: 67.22%
Relevant Branches: 445
Covered Branches: 210
Branch Coverage: 47.19%
Branches in Coverage %: Yes
Coverage Strength: 6.8 hits per line

💛 - Coveralls

@justlevine justlevine merged commit 8840e0e into develop Apr 14, 2026
18 of 19 checks passed
@justlevine justlevine deleted the dependabot/npm_and_yarn/npm-prod-minor-patch-3f5f214ba6 branch April 14, 2026 06:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants