Skip to content

Bump the npm group with 4 updates - #33

Merged
pepelsbey merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-d041cf6576
Oct 21, 2026
Merged

Bump the npm group with 4 updates#33
pepelsbey merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-d041cf6576

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 4 updates: @11ty/eleventy, eslint, html-minifier-next and js-yaml.

Updates @11ty/eleventy from 3.1.6 to 3.1.7

Release notes

Sourced from @​11ty/eleventy's releases.

Eleventy v3.1.7: Maintenance Release

  • Upgrades liquidjs dependency from 10.27 to 10.30.
  • Fixes braces npm audit 11ty/buildawesome#4397 also fixed in Dev Server v2.1.2 11ty/dev-server#160
    • This involves some internal chokidar fixes (used by --serve or --watch). If you see EMFILE errors on very large projects please file issues!
  • Internals: aliases dependencies for nunjucks to @11ty/nunjucks@3.3.0 (see 11ty/nunjucks#27) and gray-matter to @11ty/gray-matter@1.0.0. Application code that uses nunjucks or gray-matter will continue to work as expected.
v3.1.6 v3.1.7 Change % Change
Third-party dependencies 121 100 −21 −17.4%
Total installed dependencies 132 113 −19 −14.4%
Install size on disk 22.3 MB 20.5 MB −1.8 MB −8.1%

Milestone: https://github.com/11ty/buildawesome/milestone/53?closed=1 Full Changelog: 11ty/buildawesome@v3.1.6...v3.1.7

Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates html-minifier-next from 8.10.7 to 8.11.0

Changelog

Sourced from html-minifier-next's changelog.

[8.11.0] - 2026-10-17

Fixed

  • Fixed decodeEntities decoding carriage return references (e.g., &[#13](https://github.com/j9t/html-minifier-next/issues/13);) into raw carriage returns (which HTML reads as line feeds), changing the text (e.g., in pre or in attribute values)
  • Fixed minifySVG leaving SVG unminified (or failing under continueOnMinifyError: false) where it uses xlink: attributes without declaring the XLink namespace, which HTML needs not

Added

  • Added selfCloseForeignElements, which writes empty SVG and MathML elements as self-closing (e.g., <path d="…"></path> as <path d="…"/>); included by the comprehensive preset
  • Added the removal of namespace declarations HTML reads anyway to removeRedundantAttributes (e.g., xmlns="http://www.w3.org/2000/svg" and xmlns:xlink="http://www.w3.org/1999/xlink" on inline SVG, or xmlns="http://www.w3.org/1999/xhtml" on html), also after SVGO under minifySVG; SVG taken from the page via outerHTML then lacks them, which XMLSerializer adds back
  • Added SVG default values to removeRedundantAttributes, leaving alone presentation attributes (which inherit) and gradients, patterns, and filters referring to another (which take what they do not set from it)
  • Added several additional default values to be handled with removeRedundantAttributes

Changed

  • CRLF and CR line breaks are now written as line feeds, as HTML reads them, except in markup within htmlmin:ignore and in custom fragments with whitespace padding them

[8.10.8] - 2026-10-12

Changed

  • Improved the backtest and working-tree benchmark scripts, with more tests
  • Tidied up code comments, now limited to 100 characters via ESLint

Removed

  • Removed a parser workaround for a long-fixed Firefox regex bug
  • Removed commitlint, which only checked commit message lengths
Commits

Updates js-yaml from 5.4.3 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

  • Updated argparse to v3.
  • Updated development dependencies.

Fixed

  • Correct percent-encoding of shorthand and verbatim tags.
  • Reject ,, ], and } at the start of block plain scalars, #801.
  • Report the exact position of non-printable characters in errors, #801.
Commits
  • cb62b2d 5.5.0 released
  • 87aed90 Deps bump
  • 3aec511 Fix error positions for non-printable characters, #801
  • 11aa483 Reject flow indicators at the start of block plain scalars, #801
  • 339d8e0 Refactor tag encoder and decoder to match the YAML specification
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm group with 4 updates
76e8e91 
Bumps the npm group with 4 updates: [@11ty/eleventy](https://github.com/11ty/buildawesome), [eslint](https://github.com/eslint/eslint), [html-minifier-next](https://github.com/j9t/html-minifier-next) and [js-yaml](https://github.com/nodeca/js-yaml).


Updates `@11ty/eleventy` from 3.1.6 to 3.1.7
- [Release notes](https://github.com/11ty/buildawesome/releases)
- [Changelog](https://github.com/11ty/buildawesome/blob/main/docs/release-instructions.md)
- [Commits](11ty/buildawesome@v3.1.6...v3.1.7)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `html-minifier-next` from 8.10.7 to 8.11.0
- [Changelog](https://github.com/j9t/html-minifier-next/blob/main/CHANGELOG.md)
- [Commits](https://github.com/j9t/html-minifier-next/commits)

Updates `js-yaml` from 5.4.3 to 5.5.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.3...5.5.0)

---
updated-dependencies:
- dependency-name: "@11ty/eleventy"
  dependency-version: 3.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: html-minifier-next
  dependency-version: 8.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: js-yaml
  dependency-version: 5.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@pepelsbey
pepelsbey merged commit b06aef4 into main Oct 21, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-d041cf6576 branch October 21, 2026 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@pepelsbey