Bump the frontend group in /Folderly/Frontend with 6 updates by dependabot[bot] · Pull Request #21 · UltiPro/Folderly

dependabot · 2026-10-31T08:13:54Z

Bumps the frontend group in /Folderly/Frontend with 6 updates:

Package	From	To
axios	`1.20.0`	`1.21.0`
@vitest/eslint-plugin	`1.6.27`	`1.6.28`
eslint-plugin-oxlint	`1.89.0`	`1.90.0`
eslint-plugin-vue	`10.11.1`	`10.12.0`
npm-run-all2	`9.0.3`	`9.0.4`
oxlint	`1.89.0`	`1.90.0`

Updates axios from 1.20.0 to 1.21.0

Release notes

Sourced from axios's releases.

v1.21.0 — October 21, 2026

This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.

⚠️ Breaking Changes & Deprecations

Header Defaults: Only plain objects, null-prototype maps, and compatible AxiosHeaders instances are treated as common or method-specific defaults; literal headers such as Link are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example { post: { ...customDefaults } }, or compatible AxiosHeaders. Otherwise, those instances become literal header values, including on requests using other methods. (#11156)

🚀 New Features

Response Timing: Added response.duration, in milliseconds, including on error.response when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing duration value supplied by a custom adapter. (#11214)

UTF-8 Basic Authentication: Added transitional.encodeBasicAuthUsername: true to support Unicode usernames in XHR and Fetch requests. The option defaults to false, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (#11159)

🐛 Bug Fixes

Fetch Compatibility: Restored requests in runtimes such as Cloudflare Workers that reject the implicit cache: 'default', while preserving explicit caller settings. Response-size failures now retain their original ERR_BAD_RESPONSE and request context when runtime wrappers replace the underlying stream error. (#11194, #11179)

Runtime Consistency: Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with ERR_BAD_OPTION_VALUE, and sparse or non-index numeric form fields serialize as keyed objects. With proxy: false, native proxyEnv agents using unsupported pool-management or TLS-session lifecycle overrides now reject with ERR_BAD_OPTION_VALUE; construct those agents without proxyEnv. (#11242)

Header Handling: Preserved headers named __proto__ using safe casing without changing the AxiosHeaders instance prototype. Function matchers in has(), delete(), and clear() now receive the headers instance as this, matching their declared contract. (#11134, #11216)

URL and Data URL Parsing: Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (#11138, #11163, #11294)

Error Diagnostics: Preserved short reconstructed request stacks and appended wrapped error stacks under Caused by: so tooling that reads only error.stack retains the original failure context. (#11132, #11142)

Interceptor Removal: Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (#11139)

Proxy TLS: HTTPS CONNECT tunnels now apply current origin TLS options from an explicit httpsAgent, or from https.globalAgent when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (#11178)

XHR Lifecycle: Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (#11166, #11225)

HTTP/2 Sessions: Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (#11210)

TypeScript Declarations: Exposed the response-default marker as a public type to resolve TS2527 when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (#11125)

🔧 Maintenance & Chores

Configuration Performance: Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (#11208)

Same-Origin Checks: Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (#11174)

Dependencies: Updated follow-redirects to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused dayjs from the docs package, root chalk, and chai from CJS module tests. (#11169, #11188, #11189, #11195, #11212, #11213, #11218, #11220, #11221, #11230, #11234, #11244, #11245, #11266, #11267, #11268, #11269, #11270, #11271, #11272, #11298, #11302, #11303, #11304, #11305, #11306, #11313, #11321, #11322, #11323, #11342)

Documentation: Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (#11228, #11149, #11335)

Contributor Workflow: Consolidated agent instructions in AGENTS.md, standardized PR labels, required prerelease notes and validation evidence, and clarified that npm test requires installed Playwright browsers. (#11238, #11273, #11223, #11284)

Sponsors and Support: Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (#11222, #11249, #11252, #11341)

Proxy Regression Coverage: Added a long dotted request-hostname test for NO_PROXY handling, extending coverage of an existing denial-of-service fix. (#11235)

Release Preparation: Updated package version metadata for 1.21.0. (#11346)

🌟 New Contributors

Welcome to our 24 new contributors. Thank you for helping improve Axios:

@lazerg (#11194)

@QIU-Guanzong (#11228)

@Iams4kura (#11125)

@vjymisal0 (#11179)

@jarrensj (#11238)

@LineGu (#11132)

@luantaraschi (#11134)

@Cyberhet (#11284)

@nyxst4ck (#11138)

... (truncated)

Changelog

Sourced from axios's changelog.

v1.21.0 — October 21, 2026

This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.

⚠️ Breaking Changes & Deprecations

Header Defaults: Only plain objects, null-prototype maps, and compatible AxiosHeaders instances are treated as common or method-specific defaults; literal headers such as Link are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example { post: { ...customDefaults } }, or compatible AxiosHeaders. Otherwise, those instances become literal header values, including on requests using other methods. (#11156)

🚀 New Features

Response Timing: Added response.duration, in milliseconds, including on error.response when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing duration value supplied by a custom adapter. (#11214)

UTF-8 Basic Authentication: Added transitional.encodeBasicAuthUsername: true to support Unicode usernames in XHR and Fetch requests. The option defaults to false, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (#11159)

🐛 Bug Fixes

Fetch Compatibility: Restored requests in runtimes such as Cloudflare Workers that reject the implicit cache: 'default', while preserving explicit caller settings. Response-size failures now retain their original ERR_BAD_RESPONSE and request context when runtime wrappers replace the underlying stream error. (#11194, #11179)

Runtime Consistency: Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with ERR_BAD_OPTION_VALUE, and sparse or non-index numeric form fields serialize as keyed objects. With proxy: false, native proxyEnv agents using unsupported pool-management or TLS-session lifecycle overrides now reject with ERR_BAD_OPTION_VALUE; construct those agents without proxyEnv. (#11242)

Header Handling: Preserved headers named __proto__ using safe casing without changing the AxiosHeaders instance prototype. Function matchers in has(), delete(), and clear() now receive the headers instance as this, matching their declared contract. (#11134, #11216)

URL and Data URL Parsing: Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (#11138, #11163, #11294)

Error Diagnostics: Preserved short reconstructed request stacks and appended wrapped error stacks under Caused by: so tooling that reads only error.stack retains the original failure context. (#11132, #11142)

Interceptor Removal: Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (#11139)

Proxy TLS: HTTPS CONNECT tunnels now apply current origin TLS options from an explicit httpsAgent, or from https.globalAgent when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (#11178)

XHR Lifecycle: Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (#11166, #11225)

HTTP/2 Sessions: Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (#11210)

TypeScript Declarations: Exposed the response-default marker as a public type to resolve TS2527 when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (#11125)

🔧 Maintenance & Chores

Configuration Performance: Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (#11208)

Same-Origin Checks: Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (#11174)

Dependencies: Updated follow-redirects to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused dayjs from the docs package, root chalk, and chai from CJS module tests. (#11169, #11188, #11189, #11195, #11212, #11213, #11218, #11220, #11221, #11230, #11234, #11244, #11245, #11266, #11267, #11268, #11269, #11270, #11271, #11272, #11298, #11302, #11303, #11304, #11305, #11306, #11313, #11321, #11322, #11323, #11342)

Documentation: Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (#11228, #11149, #11335)

Contributor Workflow: Consolidated agent instructions in AGENTS.md, standardized PR labels, required prerelease notes and validation evidence, and clarified that npm test requires installed Playwright browsers. (#11238, #11273, #11223, #11284)

Sponsors and Support: Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (#11222, #11249, #11252, #11341)

Proxy Regression Coverage: Added a long dotted request-hostname test for NO_PROXY handling, extending coverage of an existing denial-of-service fix. (#11235)

Release Preparation: Updated package version metadata for 1.21.0. (#11346)

🌟 New Contributors

Welcome to our 24 new contributors. Thank you for helping improve Axios:

@lazerg (#11194)

@QIU-Guanzong (#11228)

@Iams4kura (#11125)

@vjymisal0 (#11179)

@jarrensj (#11238)

@LineGu (#11132)

@luantaraschi (#11134)

@Cyberhet (#11284)

@nyxst4ck (#11138)

... (truncated)

Commits

aa54a5e docs: remove cancelled sponsors from README (#11369)
e6b79d9 chore(release): prepare release 1.21.0 (#11346)
fceeb10 chore(deps-dev): bump the development_dependencies group with 4 updates (#11342)
7d15df3 docs: refresh sponsor data (#11341)
8d8e844 docs: correct interceptor options and request lifecycle guide (#11335)
326843a test(no-proxy): cover the request-hostname path with a long dotted host (#11235)
e5195ec feat(core): expose request duration on the response (#11214)
8d415e6 fix(headers): bind matcher callbacks to the headers instance (#11216)
b16dd77 fix(xhr): remove progress event listeners on request completion (#11225)
790b2ca chore(deps): bump the github-actions group with 3 updates (#11323)
Additional commits viewable in compare view

Updates @vitest/eslint-plugin from 1.6.27 to 1.6.28

Release notes

Sourced from @vitest/eslint-plugin's releases.

v1.6.28

🐞 Bug Fixes

parse-vitest-fn-call: Recognize member-form hooks like test.aroundAll - by @MFA-G in vitest-dev/eslint-plugin-vitest#959 (8eb69)

prefer-comparison-matcher: Skip non-numeric operands with typecheck - by @RagedPanda in vitest-dev/eslint-plugin-vitest#984 (a6acf)

prefer-describe-function-title: Ignore type-only imports - by @MFA-G in vitest-dev/eslint-plugin-vitest#957 (e2aaa)

prefer-spy-on: Pass an implementation to mockImplementation in the fix - by @RaphaelFakhri in vitest-dev/eslint-plugin-vitest#982 (4c0ae)

unbound-method: Account for optional chaining - by @G-Rath in vitest-dev/eslint-plugin-vitest#975 (743f8)

View changes on GitHub

Commits

c5df105 chore: release v1.6.28
8eb6991 fix(parse-vitest-fn-call): recognize member-form hooks like test.aroundAll ...
e2aaac6 fix(prefer-describe-function-title): ignore type-only imports (#957)
4c0ae5a fix(prefer-spy-on): pass an implementation to mockImplementation in the fix (...
a6acf78 fix(prefer-comparison-matcher): skip non-numeric operands with typecheck (#984)
743f81f fix(unbound-method): account for optional chaining (#975)
8bdb180 docs: typo in prefer-to-contain rule docs (#973)
0bea6e1 refactor(valid-expect): remove unneeded conditions and use optional chaining ...
b3636d8 docs(consistent-test-it): fixed the description of the consistent-test-it opt...
22d672a chore: Update TypeScript version to v6 (#945)
Additional commits viewable in compare view

Updates eslint-plugin-oxlint from 1.89.0 to 1.90.0

Release notes

Sourced from eslint-plugin-oxlint's releases.

v1.90.0

What's Changed

feat: support loading vite plus config for buildFromConfigFile by @Sysix in oxc-project/eslint-plugin-oxlint#808

chore(deps): update npm packages by @renovate[bot] in oxc-project/eslint-plugin-oxlint#811

chore(deps): update dependency @oxc-node/core to v1 by @renovate[bot] in oxc-project/eslint-plugin-oxlint#812

release: v1.90.0 by @oxc-guard[bot] in oxc-project/eslint-plugin-oxlint#813

Full Changelog: oxc-project/eslint-plugin-oxlint@v1.89.0...v1.90.0

Commits

6857443 release: v1.90.0 (#813)
dae68e9 chore(deps): update dependency @oxc-node/core to v1 (#812)
954c79b chore(deps): update npm packages (#811)
b41a301 feat: support loading vite plus config for buildFromConfigFile (#808)
See full diff in compare view

Updates eslint-plugin-vue from 10.11.1 to 10.12.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.12.0

New rules

Added new vue/no-content-outside-block rule (#3119)

Added new vue/no-define-model-default rule (#3146)

Added new vue/no-props-shadow rule (#3118)

New rule options

Added required option to vue/block-lang to report components that omit a required block entirely (#3125)

Added ignoreMixins option to vue/require-explicit-emits rule (#3141)

Fixed false negatives (may result in more lint issues)

Added support for refs detected by type information, such as refs returned from composables, to vue/no-ref-as-operand rule (#3144)

Fixed vue/no-dupe-keys not reporting defineModel() names that collide with a prop, another model, or a <script setup> variable (#3163)

Fixed vue/no-dupe-keys not reporting <script setup> variables that shadow a prop while aliasing a different one, such as const foo = toRef(props, 'bar') (#3124)

Fixed vue/no-multi-spaces not reporting multiple spaces in the tags of some top-level blocks, e.g. <script setup> (#3162)

Fixed vue/no-ref-as-operand and vue/no-ref-object-reactivity-loss to also check refs created with useTemplateRef() (#3154)

Fixed vue/no-unused-properties not reporting unused non-props properties in components that use $props as a whole (e.g. v-bind="$props") (#3161)

Fixed vue/padding-lines-in-component-definition to check every pair of adjacent properties, not only the first, when withinOption or withinEach is not set (#3155)

Fixed vue/require-default-prop, vue/no-boolean-default, vue/no-required-prop-with-default and vue/require-valid-default-prop not handling defaults that are passed to withDefaults() by reference or spread instead of an inline object literal (#3114)

Fixed false positives (may result in fewer lint issues)

Changed vue/singleline-html-element-content-newline and vue/multiline-html-element-content-newline rules to ignore router-link and nuxt-link elements by default (#3165)

Fixed vue/no-undef-properties false positives for properties returned via ...toRefs(reactive({ ... })) from setup() (#3134)

Fixed vue/require-typed-ref false positives when an explicit type annotation already applies to the ref() call (#3123)

Fixed vue/v-if-else-key false positive for components with a bound :key (#3150)

Other changes

Removed Reactivity Transform support from vue/no-ref-object-reactivity-loss, since the Reactivity Transform proposal was dropped from Vue (#3126)

Changed vue/html-self-closing to treat Vue's special <slot> and \<template> elements as components (html.component option) instead of normal HTML elements (#3164)

Changed vue/attributes-order rule to provide a suggestion instead of an autofix when the fix would move a binding across v-bind="object" (#3145)

Improved performance of vue/no-reserved-component-names by no longer rebuilding its reserved name sets for every file (#3147)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.12.0

New rules

Added new vue/no-content-outside-block rule (#3119)

Added new vue/no-define-model-default rule (#3146)

Added new vue/no-props-shadow rule (#3118)

New rule options

Added required option to vue/block-lang to report components that omit a required block entirely (#3125)

Added ignoreMixins option to vue/require-explicit-emits rule (#3141)

Fixed false negatives (may result in more lint issues)

Added support for refs detected by type information, such as refs returned from composables, to vue/no-ref-as-operand rule (#3144)

Fixed vue/no-dupe-keys not reporting defineModel() names that collide with a prop, another model, or a <script setup> variable (#3163)

Fixed vue/no-dupe-keys not reporting <script setup> variables that shadow a prop while aliasing a different one, such as const foo = toRef(props, 'bar') (#3124)

Fixed vue/no-multi-spaces not reporting multiple spaces in the tags of some top-level blocks, e.g. <script setup> (#3162)

Fixed vue/no-ref-as-operand and vue/no-ref-object-reactivity-loss to also check refs created with useTemplateRef() (#3154)

Fixed vue/no-unused-properties not reporting unused non-props properties in components that use $props as a whole (e.g. v-bind="$props") (#3161)

Fixed vue/padding-lines-in-component-definition to check every pair of adjacent properties, not only the first, when withinOption or withinEach is not set (#3155)

Fixed vue/require-default-prop, vue/no-boolean-default, vue/no-required-prop-with-default and vue/require-valid-default-prop not handling defaults that are passed to withDefaults() by reference or spread instead of an inline object literal (#3114)

Fixed false positives (may result in fewer lint issues)

Changed vue/singleline-html-element-content-newline and vue/multiline-html-element-content-newline rules to ignore router-link and nuxt-link elements by default (#3165)

Fixed vue/no-undef-properties false positives for properties returned via ...toRefs(reactive({ ... })) from setup() (#3134)

Fixed vue/require-typed-ref false positives when an explicit type annotation already applies to the ref() call (#3123)

Fixed vue/v-if-else-key false positive for components with a bound :key (#3150)

Other changes

Removed Reactivity Transform support from vue/no-ref-object-reactivity-loss, since the Reactivity Transform proposal was dropped from Vue (#3126)

Changed vue/html-self-closing to treat Vue's special <slot> and \<template> elements as components (html.component option) instead of normal HTML elements (#3164)

Changed vue/attributes-order rule to provide a suggestion instead of an autofix when the fix would move a binding across v-bind="object" (#3145)

Improved performance of vue/no-reserved-component-names by no longer rebuilding its reserved name sets for every file (#3147)

Commits

f2a0cb5 Version Packages (#3153)
9814050 fix(no-dupe-keys): detect defineModel() name collisions (#3163)
1741d59 fix(no-multi-spaces): check tags of all top-level blocks (#3162)
d743582 fix(no-unused-properties): report unused non-props along $props (#3161)
d2a1f76 fix(padding-lines-in-component-definition): check every property pair when `w...
2a7ad86 fix: recognize useTemplateRef() (#3154)
515614e fix(attributes-order): change unsafe autofix to suggestion (#3145)
9175cc5 feat: remove Reactivity Transform support (#3126)
f115fd6 refactor: migrate block-lang to TypeScript (#3209)
30a2a53 refactor: migrate class name and valid-next-tick rules to TypeScript (#3202)
Additional commits viewable in compare view

Updates npm-run-all2 from 9.0.3 to 9.0.4

Release notes

Sourced from npm-run-all2's releases.

v9.0.4

Merged

fix: honor explicit nodeRun options and clarify Node API docs [#255](https://github.com/bcomnes/npm-run-all2/issues/255)

Upgrade: Bump typescript from 6.0.3 to 7.0.2 [#240](https://github.com/bcomnes/npm-run-all2/issues/240)

fix: avoid retaining argument placeholder regex state [#258](https://github.com/bcomnes/npm-run-all2/issues/258)

fix: bump shell-quote to ^1.12.0- #260 [#261](https://github.com/bcomnes/npm-run-all2/issues/261)

Upgrade: Bump neostandard from 0.13.0 to 0.14.1 [#259](https://github.com/bcomnes/npm-run-all2/issues/259)

docs: fix default argument placeholder syntax [#254](https://github.com/bcomnes/npm-run-all2/issues/254)

Group TypeScript Dependabot updates [#263](https://github.com/bcomnes/npm-run-all2/issues/263)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 [#262](https://github.com/bcomnes/npm-run-all2/issues/262)

Upgrade: Bump @voxpelli/tsconfig from 16.2.1 to 17.0.0 [#256](https://github.com/bcomnes/npm-run-all2/issues/256)

Upgrade: Bump codecov/codecov-action from 7.0.0 to 7.1.1 [#252](https://github.com/bcomnes/npm-run-all2/issues/252)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 [#250](https://github.com/bcomnes/npm-run-all2/issues/250)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 [#248](https://github.com/bcomnes/npm-run-all2/issues/248)

Upgrade: Bump installed-check from 10.0.1 to 11.0.0 [#246](https://github.com/bcomnes/npm-run-all2/issues/246)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 [#245](https://github.com/bcomnes/npm-run-all2/issues/245)

Commits

Add Zed and Codex worktree setup 9f54ec7

Rename agent instructions to AGENTS.md b06eac4

Changelog

Sourced from npm-run-all2's changelog.

v9.0.4

Merged

fix: honor explicit nodeRun options and clarify Node API docs [#255](https://github.com/bcomnes/npm-run-all2/issues/255)

Upgrade: Bump typescript from 6.0.3 to 7.0.2 [#240](https://github.com/bcomnes/npm-run-all2/issues/240)

fix: avoid retaining argument placeholder regex state [#258](https://github.com/bcomnes/npm-run-all2/issues/258)

fix: bump shell-quote to ^1.12.0- #260 [#261](https://github.com/bcomnes/npm-run-all2/issues/261)

Upgrade: Bump neostandard from 0.13.0 to 0.14.1 [#259](https://github.com/bcomnes/npm-run-all2/issues/259)

docs: fix default argument placeholder syntax [#254](https://github.com/bcomnes/npm-run-all2/issues/254)

Group TypeScript Dependabot updates [#263](https://github.com/bcomnes/npm-run-all2/issues/263)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 [#262](https://github.com/bcomnes/npm-run-all2/issues/262)

Upgrade: Bump @voxpelli/tsconfig from 16.2.1 to 17.0.0 [#256](https://github.com/bcomnes/npm-run-all2/issues/256)

Upgrade: Bump codecov/codecov-action from 7.0.0 to 7.1.1 [#252](https://github.com/bcomnes/npm-run-all2/issues/252)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 [#250](https://github.com/bcomnes/npm-run-all2/issues/250)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 [#248](https://github.com/bcomnes/npm-run-all2/issues/248)

Upgrade: Bump installed-check from 10.0.1 to 11.0.0 [#246](https://github.com/bcomnes/npm-run-all2/issues/246)

Upgrade: Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 [#245](https://github.com/bcomnes/npm-run-all2/issues/245)

Commits

Add Zed and Codex worktree setup 9f54ec7

Rename agent instructions to AGENTS.md b06eac4

Commits

9ef59bf 9.0.4
8fe157a fix: honor explicit nodeRun options and clarify Node API docs (#255)

Bumps the frontend group in /Folderly/Frontend with 6 updates: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.20.0` | `1.21.0` | | [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.6.27` | `1.6.28` | | [eslint-plugin-oxlint](https://github.com/oxc-project/eslint-plugin-oxlint) | `1.89.0` | `1.90.0` | | [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `10.11.1` | `10.12.0` | | [npm-run-all2](https://github.com/bcomnes/npm-run-all2) | `9.0.3` | `9.0.4` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.89.0` | `1.90.0` | Updates `axios` from 1.20.0 to 1.21.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.20.0...v1.21.0) Updates `@vitest/eslint-plugin` from 1.6.27 to 1.6.28 - [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases) - [Commits](vitest-dev/eslint-plugin-vitest@v1.6.27...v1.6.28) Updates `eslint-plugin-oxlint` from 1.89.0 to 1.90.0 - [Release notes](https://github.com/oxc-project/eslint-plugin-oxlint/releases) - [Commits](oxc-project/eslint-plugin-oxlint@v1.89.0...v1.90.0) Updates `eslint-plugin-vue` from 10.11.1 to 10.12.0 - [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases) - [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md) - [Commits](vuejs/eslint-plugin-vue@v10.11.1...v10.12.0) Updates `npm-run-all2` from 9.0.3 to 9.0.4 - [Release notes](https://github.com/bcomnes/npm-run-all2/releases) - [Changelog](https://github.com/bcomnes/npm-run-all2/blob/master/CHANGELOG.md) - [Commits](bcomnes/npm-run-all2@v9.0.3...v9.0.4) Updates `oxlint` from 1.89.0 to 1.90.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.90.0/npm/oxlint) --- updated-dependencies: - dependency-name: axios dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@vitest/eslint-plugin" dependency-version: 1.6.28 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: eslint-plugin-oxlint dependency-version: 1.90.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: eslint-plugin-vue dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: npm-run-all2 dependency-version: 9.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: oxlint dependency-version: 1.90.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 31, 2026

UltiPro merged commit 7d34c8c into main Nov 1, 2026
5 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/Folderly/Frontend/frontend-20a81d5ead branch November 1, 2026 18:38

Navigation Menu

Repository navigation

Bump the frontend group in /Folderly/Frontend with 6 updates - #21

Bump the frontend group in /Folderly/Frontend with 6 updates#21
UltiPro merged 1 commit into
mainfrom
dependabot/npm_and_yarn/Folderly/Frontend/frontend-20a81d5ead

dependabot Bot commented on behalf of github Oct 31, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 31, 2026

v1.21.0 — October 21, 2026

⚠️ Breaking Changes & Deprecations

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.21.0 — October 21, 2026

⚠️ Breaking Changes & Deprecations

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.6.28

🐞 Bug Fixes

View changes on GitHub

v1.90.0

What's Changed

v10.12.0

New rules

New rule options

Fixed false negatives (may result in more lint issues)

Fixed false positives (may result in fewer lint issues)

Other changes

10.12.0

New rules

New rule options

Fixed false negatives (may result in more lint issues)

Fixed false positives (may result in fewer lint issues)

Other changes

v9.0.4

Merged

Commits

v9.0.4

Merged

Commits

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant