chore(deps): bump the production-dependencies group with 2 updates by dependabot[bot] · Pull Request #209 · e18e/cli

dependabot · 2026-04-13T05:45:01Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the production-dependencies group with 2 updates: gunshi and tinyglobby.

Updates gunshi from 0.29.3 to 0.29.4

Release notes

v0.29.4

What's Changed

🐛 Bug Fixes

fix(plugin-completion): wrong interface and example by @kazupon in kazupon/gunshi#506

Full Changelog: kazupon/gunshi@v0.29.3...v0.29.4

Changelog

Sourced from gunshi's changelog.

v0.29.4 (2026-04-09T06:58:18Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

fix(plugin-completion): wrong interface and example by @kazupon in kazupon/gunshi#506

Full Changelog: kazupon/gunshi@v0.29.3...v0.29.4

Commits

1009f72 release: v0.29.4
3d13fca update
See full diff in compare view

Updates tinyglobby from 0.2.15 to 0.2.16

Release notes

Sourced from tinyglobby's releases.

0.2.16

Fixed

Upgraded picomatch to 4.0.4, mitigating any potential exposure to CVE-2026-33671 and CVE-2026-33672

Changed

Overhauled and optimized most internals by @Torathion

Ignore patterns are no longer compiled twice by @webpro

Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem

Changelog

Sourced from tinyglobby's changelog.

0.2.16

Fixed

Upgraded picomatch to 4.0.4, mitigating any potential exposure to CVE-2026-33671 and CVE-2026-33672

Changed

Overhauled and optimized most internals by Torathion

Ignore patterns are no longer compiled twice by webpro

Commits

5779202 release 0.2.16
071954f bump deps once more
e541dde do not import the whole fs module
2381b76 fix root being too broad
0addeb9 chore(deps): update all non-major dependencies (#191)
91ac26c chore(deps): update pnpm/action-setup action to v5 (#192)
c50558e upgrade picomatch (and everything else)
6185175 chore(deps): update dependency picomatch to v4.0.4 [security] (#193)
49c2b93 enable pnpm trustPolicy
bc825c4 chore(deps): update all non-major dependencies (#181)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates: [gunshi](https://github.com/kazupon/gunshi/tree/HEAD/packages/gunshi) and [tinyglobby](https://github.com/SuperchupuDev/tinyglobby). Updates `gunshi` from 0.29.3 to 0.29.4 - [Release notes](https://github.com/kazupon/gunshi/releases) - [Changelog](https://github.com/kazupon/gunshi/blob/main/CHANGELOG.md) - [Commits](https://github.com/kazupon/gunshi/commits/v0.29.4/packages/gunshi) Updates `tinyglobby` from 0.2.15 to 0.2.16 - [Release notes](https://github.com/SuperchupuDev/tinyglobby/releases) - [Changelog](https://github.com/SuperchupuDev/tinyglobby/blob/main/CHANGELOG.md) - [Commits](SuperchupuDev/tinyglobby@0.2.15...0.2.16) --- updated-dependencies: - dependency-name: gunshi dependency-version: 0.29.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tinyglobby dependency-version: 0.2.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-13T05:45:17Z

⚠️ Duplicate Dependencies (found: 20, threshold: 1)

📦 Package	📋 Versions
js-tokens	2 versions @e18e/cli@0.0.1 @vitest/coverage-v8@4.1.2 ast-v8-to-istanbul@1.0.0 js-tokens@10.0.0 @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 @babel/core@7.27.4 @babel/code-frame@7.27.1 js-tokens@4.0.0
semver	3 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-cache-dir@2.1.0 make-dir@2.1.0 semver@5.7.2 @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 @babel/core@7.27.4 @babel/helper-compilation-targets@7.27.2 semver@6.3.1 @e18e/cli@0.0.1 semver@7.7.4
make-dir	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 @babel/register@7.27.1 find-cache-dir@2.1.0 make-dir@2.1.0 @e18e/cli@0.0.1 @vitest/coverage-v8@4.1.2 istanbul-lib-report@3.0.1 make-dir@4.0.0
fast-string-truncated-width	2 versions @e18e/cli@0.0.1 @clack/prompts@1.2.0 @clack/core@1.2.0 fast-wrap-ansi@0.1.6 fast-string-width@1.1.0 fast-string-truncated-width@1.2.1 @e18e/cli@0.0.1 fast-wrap-ansi@0.2.0 fast-string-width@3.0.2 fast-string-truncated-width@3.0.3
fast-string-width	2 versions @e18e/cli@0.0.1 @clack/prompts@1.2.0 @clack/core@1.2.0 fast-wrap-ansi@0.1.6 fast-string-width@1.1.0 @e18e/cli@0.0.1 fast-wrap-ansi@0.2.0 fast-string-width@3.0.2
fast-wrap-ansi	2 versions @e18e/cli@0.0.1 @clack/prompts@1.2.0 @clack/core@1.2.0 fast-wrap-ansi@0.1.6 @e18e/cli@0.0.1 fast-wrap-ansi@0.2.0
eslint-visitor-keys	2 versions @e18e/cli@0.0.1 eslint@10.2.0 @eslint-community/eslint-utils@4.9.1 eslint-visitor-keys@3.4.3 @e18e/cli@0.0.1 eslint@10.2.0 eslint-visitor-keys@5.0.1
balanced-match	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... minimatch@3.1.2 brace-expansion@1.1.12 balanced-match@1.0.2 @e18e/cli@0.0.1 eslint@10.2.0 @eslint/config-array@0.23.4 minimatch@10.2.5 brace-expansion@5.0.5 balanced-match@4.0.4
brace-expansion	3 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 node-dir@0.1.17 minimatch@3.1.2 brace-expansion@1.1.12 @e18e/cli@0.0.1 eslint@10.2.0 minimatch@10.2.4 brace-expansion@5.0.4 @e18e/cli@0.0.1 eslint@10.2.0 @eslint/config-array@0.23.4 minimatch@10.2.5 brace-expansion@5.0.5
minimatch	3 versions @e18e/cli@0.0.1 eslint@10.2.0 minimatch@10.2.4 @e18e/cli@0.0.1 eslint@10.2.0 @eslint/config-array@0.23.4 minimatch@10.2.5 @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 node-dir@0.1.17 minimatch@3.1.2
@humanwhocodes/retry	2 versions @e18e/cli@0.0.1 eslint@10.2.0 @humanfs/node@0.16.6 @humanwhocodes/retry@0.3.1 @e18e/cli@0.0.1 eslint@10.2.0 @humanwhocodes/retry@0.4.3
@octokit/openapi-types	2 versions @e18e/cli@0.0.1 pkg-pr-new@0.0.66 @octokit/action@6.1.0 @octokit/plugin-paginate-rest@9.2.2 @octokit/types@12.6.0 @octokit/openapi-types@20.0.0 @e18e/cli@0.0.1 pkg-pr-new@0.0.66 @octokit/action@6.1.0 @octokit/auth-action@4.1.0 @octokit/types@13.10.0 @octokit/openapi-types@24.2.0
@octokit/types	2 versions @e18e/cli@0.0.1 pkg-pr-new@0.0.66 @octokit/action@6.1.0 @octokit/plugin-paginate-rest@9.2.2 @octokit/types@12.6.0 @e18e/cli@0.0.1 pkg-pr-new@0.0.66 @octokit/action@6.1.0 @octokit/auth-action@4.1.0 @octokit/types@13.10.0
ignore	2 versions @e18e/cli@0.0.1 eslint@10.2.0 ignore@5.3.2 @e18e/cli@0.0.1 typescript-eslint@8.58.0 @typescript-eslint/eslint-plugin@8.58.0 ignore@7.0.5
find-up	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-cache-dir@2.1.0 pkg-dir@3.0.0 find-up@3.0.0 @e18e/cli@0.0.1 eslint@10.2.0 find-up@5.0.0
locate-path	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... pkg-dir@3.0.0 find-up@3.0.0 locate-path@3.0.0 @e18e/cli@0.0.1 eslint@10.2.0 find-up@5.0.0 locate-path@6.0.0
picomatch	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 jscodeshift@0.16.1 micromatch@4.0.8 picomatch@2.3.1 @e18e/cli@0.0.1 tinyglobby@0.2.16 picomatch@4.0.4
p-limit	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... locate-path@3.0.0 p-locate@3.0.0 p-limit@2.3.0 @e18e/cli@0.0.1 eslint@10.2.0 find-up@5.0.0 locate-path@6.0.0 p-locate@5.0.0 p-limit@3.1.0
p-locate	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-up@3.0.0 locate-path@3.0.0 p-locate@3.0.0 @e18e/cli@0.0.1 eslint@10.2.0 find-up@5.0.0 locate-path@6.0.0 p-locate@5.0.0
path-exists	2 versions @e18e/cli@0.0.1 module-replacements-codemods@1.2.1 ... find-up@3.0.0 locate-path@3.0.0 path-exists@3.0.0 @e18e/cli@0.0.1 eslint@10.2.0 find-up@5.0.0 path-exists@4.0.0

💡 To find out what depends on a specific package, run: npm ls example-package

pkg-pr-new · 2026-04-13T05:45:30Z

Open in StackBlitz

npm i https://pkg.pr.new/@e18e/cli@209

commit: 1833eb5

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 13, 2026

43081j merged commit 7ada3e4 into main Apr 13, 2026
6 checks passed

43081j deleted the dependabot/npm_and_yarn/production-dependencies-616680fbcb branch April 13, 2026 08:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-dependencies group with 2 updates#209

chore(deps): bump the production-dependencies group with 2 updates#209
43081j merged 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-616680fbcb

dependabot bot commented on behalf of github Apr 13, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Apr 13, 2026

Uh oh!

pkg-pr-new bot commented Apr 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot bot commented on behalf of github Apr 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.29.4

What's Changed

🐛 Bug Fixes

v0.29.4 (2026-04-09T06:58:18Z)

What's Changed

🐛 Bug Fixes

0.2.16

Fixed

Changed

0.2.16

Fixed

Changed

Uh oh!

github-actions bot commented Apr 13, 2026

⚠️ Duplicate Dependencies (found: 20, threshold: 1)

Uh oh!

pkg-pr-new bot commented Apr 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Apr 13, 2026 •

edited

Loading