Skip to content

chore(deps-dev): bump the dev-dependencies-patch group with 2 updates - #950

Merged
yeojz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-patch-909c9fde06
Nov 4, 2026
Merged

yeojz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-patch-909c9fde06

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies-patch group with 2 updates: turbo and tinybench.

Updates turbo from 2.11.7 to 2.11.10

Release notes

Sourced from turbo's releases.

Turborepo v2.11.10

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.9...v2.11.10

Turborepo v2.11.9

What's Changed

Changelog

... (truncated)

Commits
  • e521641 publish 2.11.10 to registry
  • aaf5a3a fix: Distrust compromised eMudhra intermediate certificates (#14876)
  • 9816503 fix: Exit quietly when turbo ls output is piped to a closed reader (#14868)
  • af866e5 feat: Enable WebMCP for Turborepo docs (#14828)
  • b42cc68 chore: Remove CODEOWNERS file (#14810)
  • 921155f fix: Restore cached symlinks when outputs are already on disk (#14807)
  • 9330903 docs: Generate the sitemap from Geistdocs sources (#14865)
  • 6048038 fix: Keep task env vars in the hash when globalEnv excludes inferred vars (#1...
  • 57ecce3 fix: Parse pnpm 8 single-project lockfiles (#14806)
  • d926d6a fix: Match package configuration files and directory inputs in task-level aff...
  • Additional commits viewable in compare view

Updates tinybench from 6.2.0 to 6.2.2

Release notes

Sourced from tinybench's releases.

v6.2.2

   🐞 Bug Fixes

    View changes on GitHub

v6.2.1

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • fb4fd79 chore: release v6.2.2
  • 0bba26c chore(deps): lock file maintenance (#694)
  • 7e14282 ci: tighten bundle size limit to 6 kB
  • 93c5fdc fix: remove concurrency abort listeners after runs (#699)
  • dbe9ce1 chore(deps): update all non-major dependencies (#698)
  • 02ed115 chore(deps): update all non-major dependencies (#697)
  • 325098c chore(deps): update all non-major dependencies (#695)
  • 3840a7d chore: ignore hidden local mise files
  • ad89e8f chore: ignore environment-specific local mise files
  • 2659dc0 chore: replace Volta with mise (#696)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies-patch group with 2 updates: [turbo](https://github.com/vercel/turborepo) and [tinybench](https://github.com/tinylibs/tinybench).


Updates `turbo` from 2.11.7 to 2.11.10
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.11.7...v2.11.10)

Updates `tinybench` from 6.2.0 to 6.2.2
- [Release notes](https://github.com/tinylibs/tinybench/releases)
- [Commits](tinylibs/tinybench@v6.2.0...v6.2.2)

---
updated-dependencies:
- dependency-name: turbo
  dependency-version: 2.11.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-patch
- dependency-name: tinybench
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedturbo@​2.11.7 ⏵ 2.11.10100 +110085 +197100
Updatedtinybench@​6.2.0 ⏵ 6.2.210010010095100

View full report

@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

Coverage Report

Status Category Percentage Covered / Total
🟢 Lines 100% (🎯 100%) 1669 / 1669
🟢 Statements 100% (🎯 100%) 1684 / 1684
🟢 Functions 100% (🎯 100%) 365 / 365
🟢 Branches 100% (🎯 100%) 902 / 902
File CoverageNo changed files found.
Generated in workflow #702 for commit e52d6de by the Vitest Coverage Report Action

@codecov

codecov Bot commented Nov 1, 2026 •

Copy link
Copy Markdown

Bundle Report

Bundle size has no change ✅

@codecov

codecov Bot commented Nov 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (a404733) to head (e52d6de).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #950   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           60        60           
  Lines         2141      2141           
  Branches       471       471           
=========================================
  Hits          2141      2141           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@yeojz
yeojz merged commit ad764c3 into main Nov 4, 2026
17 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-patch-909c9fde06 branch November 4, 2026 11:23

This branch was successfully deployed

1 active deployment
test — e52d6de6 Deployed Nov 1, 2026 by dependabot[bot] via All Checks Passed #702
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant