Skip to content

build(deps-dev): bump vite-plugin-dts from 5.1.1 to 5.1.2 - #229

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/vite-plugin-dts-5.1.2
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/vite-plugin-dts-5.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps vite-plugin-dts from 5.1.1 to 5.1.2.

Changelog

Sourced from vite-plugin-dts's changelog.

5.1.2 (2026-10-03)

Bug Fixes

  • bump @​microsoft/api-extractor to fix security vulnerabilities (#462) (ee2acd5)
  • preserve declaration graph across module formats (#491) (9c6d284)
  • preserve native declaration extensions (6dd5eda), closes #495
Commits
  • 02bd787 release(vite-plugin-dts): v5.1.2
  • 4468e9b ci: stabilize Windows declaration and watch tests
  • 6dd5eda fix: preserve native declaration extensions
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Oct 8, 2026
Bumps [vite-plugin-dts](https://github.com/qmhc/unplugin-dts/tree/HEAD/packages/vite-plugin-dts) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/qmhc/unplugin-dts/releases)
- [Changelog](https://github.com/qmhc/unplugin-dts/blob/main/packages/vite-plugin-dts/CHANGELOG.md)
- [Commits](https://github.com/qmhc/unplugin-dts/commits/vite-plugin-dts@5.1.2/packages/vite-plugin-dts)

---
updated-dependencies:
- dependency-name: vite-plugin-dts
  dependency-version: 5.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev/vite-plugin-dts-5.1.2 branch from 46a4a7a to f467579 Compare October 15, 2026 07:20
kalwalt added a commit that referenced this pull request Oct 15, 2026
#242)

Supersede the open Dependabot PRs with one lockfile regeneration (npm 11):
- vite ^8.3.4 (#239), vite-plugin-dts ^5.1.2 (#229), prettier ~3.9.10 (#238)
- transitive: brace-expansion 5.0.12 (#241), markdown-it 14.3.2 (#240),
  source-map-js 1.2.2 -- `npm audit` goes from 3 findings (2 high, 1
  moderate, all dev-only) to 0.

TypeScript stays on 6.0.x: typedoc 0.28.20, the latest, declares
`typescript` peer support only up to 6.0.x, so 7.x would fail to install
and break `npm run docs`. dependabot.yml now ignores typescript major
updates, with the reason and when to drop the entry, so no PR is opened
that cannot pass. GitHub Actions are already on their latest majors.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@kalwalt

kalwalt commented Oct 15, 2026

Copy link
Copy Markdown
Member

Superseded by #242, which upgraded this dependency together with the other open bumps in a single npm 11 lockfile regeneration (merged into dev).

@kalwalt kalwalt closed this Oct 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev/vite-plugin-dts-5.1.2 branch October 15, 2026 12:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant