[dependabot]

Bumps the npm group with 3 updates: @11ty/eleventy, eslint and js-yaml.

Updates @11ty/eleventy from 3.1.6 to 3.1.7

Release notes

Sourced from @​11ty/eleventy's releases.

Eleventy v3.1.7: Maintenance Release

• Upgrades liquidjs dependency from 10.27 to 10.30.
• Fixes braces npm audit 11ty/buildawesome#4397 also fixed in Dev Server v2.1.2 11ty/dev-server#160
  • This involves some internal chokidar fixes (used by --serve or --watch). If you see EMFILE errors on very large projects please file issues!
• Internals: aliases dependencies for nunjucks to @11ty/nunjucks@3.3.0 (see 11ty/nunjucks#27) and gray-matter to @11ty/gray-matter@1.0.0. Application code that uses nunjucks or gray-matter will continue to work as expected.

	v3.1.6	v3.1.7	Change	% Change
Third-party dependencies	121	100	−21	−17.4%
Total installed dependencies	132	113	−19	−14.4%
Install size on disk	22.3 MB	20.5 MB	−1.8 MB	−8.1%

Milestone: https://github.com/11ty/buildawesome/milestone/53?closed=1 Full Changelog: 11ty/buildawesome@v3.1.6...v3.1.7

Commits

• e8eb70e v3.1.7
• 91754b6 Fix in front matter test for Windows
• dc7a643 Workaround for @11ty/gray-matter change in v1.0.0 to orig property
• 18f17c6 Alias gray-matter to our maintained fork
• cecb0a3 v3.1.7
• 5e9c8ce Use @11ty/nunjucks for chokidar reasons. Fixes #4397 for real
• 7c4c8a0 v3.1.7
• 304ebab Test was flaky
• 414a102 v3.1.7
• 18acc8a Updates release workflow on v3.x
• Additional commits viewable in compare view

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

Commits

• 4637f98 10.13.0
• 96df05c Build: changelog update for 10.13.0
• 4783a68 docs: Update README
• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
• 317fcb3 chore: update ecosystem plugins (#21409)
• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
• 43f0ac9 docs: clarify parameter description in getText (#21287)
• a39d9fb feat: add globalThis to no-obj-calls (#21382)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
• Additional commits viewable in compare view

Updates js-yaml from 5.4.3 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

• Updated argparse to v3.
• Updated development dependencies.

Fixed

• Correct percent-encoding of shorthand and verbatim tags.
• Reject ,, ], and } at the start of block plain scalars, #801.
• Report the exact position of non-printable characters in errors, #801.

Commits

• cb62b2d 5.5.0 released
• 87aed90 Deps bump
• 3aec511 Fix error positions for non-printable characters, #801
• 11aa483 Reject flow indicators at the start of block plain scalars, #801
• 339d8e0 Refactor tag encoder and decoder to match the YAML specification
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions