Skip to content

Bump the all group across 1 directory with 8 updates#3043

Merged
francinelucca merged 2 commits intomainfrom
dependabot/npm_and_yarn/all-f62384f88e
Apr 24, 2026
Merged

Bump the all group across 1 directory with 8 updates#3043
francinelucca merged 2 commits intomainfrom
dependabot/npm_and_yarn/all-f62384f88e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026 •
edited
Loading

Bumps the all group with 8 updates in the / directory:

Package From To
@changesets/cli 2.30.0 2.31.0
@primer/primitives 11.6.0 11.7.0
autoprefixer 10.4.27 10.5.0
eslint 10.2.0 10.2.1
filesize 11.0.15 11.0.16
postcss 8.5.9 8.5.10
prettier 3.8.2 3.8.3
stylelint 17.6.0 17.8.0

Updates @changesets/cli from 2.30.0 to 2.31.0

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.0

Minor Changes

  • #1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

  • #1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

  • d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

  • #1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

  • #1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

  • #1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

  • Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

    • @​changesets/assemble-release-plan@​6.0.10
    • @​changesets/get-dependents-graph@​2.1.4
    • @​changesets/apply-release-plan@​7.1.1
    • @​changesets/get-release-plan@​4.0.16
    • @​changesets/config@​3.1.4
Commits
  • 9cce6db Version Packages (#1897)
  • d2121dc Fix npm auth for path-based registries during publish by preserving configure...
  • 036fdd4 Fix several changeset version issues with workspace protocol dependencies (...
  • 5c4731f Gracefully handle stale npm info data leading to duplicate publish attempts...
  • 96ca062 Error on unsupported flags for individual CLI commands (#1889)
  • 42943b7 fix(cli): respond to --help on all subcommands (#1873)
  • f61e716 Improved detection for published state of prerelease-only packages without ...
  • See full diff in compare view

Updates @primer/primitives from 11.6.0 to 11.7.0

Release notes

Sourced from @​primer/primitives's releases.

v11.7.0

Minor Changes

  • #1349 4bedeb1 Thanks @​lukasoppermann! - Remove redundant lineBoxHeight tokens

    The following tokens have been removed:

    • text-display-lineBoxHeight - Duplicated text-display-lineHeight value
    • control-xsmall-lineBoxHeight
    • control-small-lineBoxHeight
    • control-medium-lineBoxHeight
    • control-large-lineBoxHeight
    • control-xlarge-lineBoxHeight

    These tokens were inconsistently defined (typography used unitless multipliers while controls used absolute dimensions) and were not providing clear value. The control sizing formula (size = lineBoxHeight + 2 × paddingBlock) can be derived from existing size and paddingBlock tokens. Breaking changes have been mitigated on the platform.

Patch Changes

  • #1344 cb7c706 Thanks @​lukasoppermann! - Consolidate focus outline tokens into src/tokens/component/focus.json5 with consistent kebab-case naming (focus-outline-color, focus-outline-width, focus-outline-offset). Deprecated aliases for the old names are included for backward compatibility.

    Route focus dimension tokens (--focus-outline-width, --focus-outline-offset, --outline-focus-offset, --outline-focus-width) to css/functional/size/border.css instead of theme CSS files, since these values are static and don't vary by theme.

  • #1345 35d9a90 Thanks @​lukasoppermann! - Remove shadow.floating.legacy. Reduce shadow.floating.small light mode border alpha from 0.5 to 0.25.

  • #1346 7728903 Thanks @​copilot-swe-agent! - Update light-high-contrast fgColor tokens to custom hex values between scale levels 5 and 6

    Improves visual differentiation between status colors (open/closed/done) in the light high-contrast theme. The three affected tokens (fgColor.success, fgColor.danger, fgColor.done) previously resolved to base color scale level 6, making them too dark and visually indistinct. No single scale step satisfies both the 7:1 contrast minimum and chromatic distinction, so custom hex values interpolated between levels 5 and 6 are used instead, following the precedent set by dark high-contrast theme overrides.

Changelog

Sourced from @​primer/primitives's changelog.

11.7.0

Minor Changes

  • #1349 4bedeb1 Thanks @​lukasoppermann! - Remove redundant lineBoxHeight tokens

    The following tokens have been removed:

    • text-display-lineBoxHeight - Duplicated text-display-lineHeight value
    • control-xsmall-lineBoxHeight
    • control-small-lineBoxHeight
    • control-medium-lineBoxHeight
    • control-large-lineBoxHeight
    • control-xlarge-lineBoxHeight

    These tokens were inconsistently defined (typography used unitless multipliers while controls used absolute dimensions) and were not providing clear value. The control sizing formula (size = lineBoxHeight + 2 × paddingBlock) can be derived from existing size and paddingBlock tokens. Breaking changes have been mitigated on the platform.

Patch Changes

  • #1344 cb7c706 Thanks @​lukasoppermann! - Consolidate focus outline tokens into src/tokens/component/focus.json5 with consistent kebab-case naming (focus-outline-color, focus-outline-width, focus-outline-offset). Deprecated aliases for the old names are included for backward compatibility.

    Route focus dimension tokens (--focus-outline-width, --focus-outline-offset, --outline-focus-offset, --outline-focus-width) to css/functional/size/border.css instead of theme CSS files, since these values are static and don't vary by theme.

  • #1345 35d9a90 Thanks @​lukasoppermann! - Remove shadow.floating.legacy. Reduce shadow.floating.small light mode border alpha from 0.5 to 0.25.

  • #1346 7728903 Thanks @​copilot-swe-agent! - Update light-high-contrast fgColor tokens to custom hex values between scale levels 5 and 6

    Improves visual differentiation between status colors (open/closed/done) in the light high-contrast theme. The three affected tokens (fgColor.success, fgColor.danger, fgColor.done) previously resolved to base color scale level 6, making them too dark and visually indistinct. No single scale step satisfies both the 7:1 contrast minimum and chromatic distinction, so custom hex values interpolated between levels 5 and 6 are used instead, following the precedent set by dark high-contrast theme overrides.

Commits
  • c19e78d Version Packages (#1348)
  • cb7c706 Refactor: consolidate focus outline tokens into component file (#1344)
  • 4bedeb1 Remove redundant lineBoxHeight tokens (#1349)
  • 7728903 Update light-high-contrast fgColor tokens to custom hex values between scale ...
  • 35d9a90 Deprecate shadow-floating-legacy and reduce floating-small border alpha (#1345)
  • 92fbba4 Bump vite from 7.1.11 to 7.3.2 (#1343)
  • e7af848 Bump lodash from 4.17.23 to 4.18.1 in /docs/storybook (#1342)
  • e36be8f Bump defu from 6.1.4 to 6.1.6 in /docs/storybook (#1341)
  • 526012e Bump handlebars from 4.7.8 to 4.7.9 in /docs/storybook (#1339)
  • 843d641 Bump picomatch (#1337)
  • Additional commits viewable in compare view

Updates autoprefixer from 10.4.27 to 10.5.0

Release notes

Sourced from autoprefixer's releases.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Changelog

Sourced from autoprefixer's changelog.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Commits

Updates eslint from 10.2.0 to 10.2.1

Release notes

Sourced from eslint's releases.

v10.2.1

Bug Fixes

  • 14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)
  • 84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)
  • af764af fix: clarify language and processor validation errors (#20729) (Pixel998)
  • e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

  • ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)
  • 57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)
  • c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)
  • 1418d52 docs: Update README (GitHub Actions Bot)
  • 39771e6 docs: Update README (GitHub Actions Bot)
  • 71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)
  • 22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)
  • 8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

  • 7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])
  • fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])
  • 7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)
  • 4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])
  • 51080eb test: processor service (#20731) (kuldeep kumar)
  • e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)
  • 4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)
  • 066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)
Commits

Updates filesize from 11.0.15 to 11.0.16

Changelog

Sourced from filesize's changelog.

11.0.16

Commits

Updates postcss from 8.5.9 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Commits

Updates prettier from 3.8.2 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

Commits

Updates stylelint from 17.6.0 to 17.8.0

Release notes

Sourced from stylelint's releases.

17.8.0

It adds 3 new rules and 1 configuration property.

17.7.0

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

Changelog

Sourced from stylelint's changelog.

17.8.0 - 2026-04-15

It adds 3 new rules and 1 configuration property.

17.7.0 - 2026-04-12

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group across 1 directory with 8 updates
6267dd4 
Bumps the all group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.30.0` | `2.31.0` |
| [@primer/primitives](https://github.com/primer/primitives) | `11.6.0` | `11.7.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.5.0` |
| [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.2.1` |
| [filesize](https://github.com/avoidwork/filesize.js) | `11.0.15` | `11.0.16` |
| [postcss](https://github.com/postcss/postcss) | `8.5.9` | `8.5.10` |
| [prettier](https://github.com/prettier/prettier) | `3.8.2` | `3.8.3` |
| [stylelint](https://github.com/stylelint/stylelint) | `17.6.0` | `17.8.0` |



Updates `@changesets/cli` from 2.30.0 to 2.31.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.30.0...@changesets/cli@2.31.0)

Updates `@primer/primitives` from 11.6.0 to 11.7.0
- [Release notes](https://github.com/primer/primitives/releases)
- [Changelog](https://github.com/primer/primitives/blob/main/CHANGELOG.md)
- [Commits](primer/primitives@v11.6.0...v11.7.0)

Updates `autoprefixer` from 10.4.27 to 10.5.0
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.27...10.5.0)

Updates `eslint` from 10.2.0 to 10.2.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.2.0...v10.2.1)

Updates `filesize` from 11.0.15 to 11.0.16
- [Changelog](https://github.com/avoidwork/filesize.js/blob/master/CHANGELOG.md)
- [Commits](avoidwork/filesize.js@11.0.15...11.0.16)

Updates `postcss` from 8.5.9 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.9...8.5.10)

Updates `prettier` from 3.8.2 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.2...3.8.3)

Updates `stylelint` from 17.6.0 to 17.8.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.6.0...17.8.0)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@primer/primitives"
  dependency-version: 11.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: autoprefixer
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: eslint
  dependency-version: 10.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: filesize
  dependency-version: 11.0.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: stylelint
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 20, 2026
@dependabot dependabot Bot requested review from a team as code owners April 20, 2026 05:47
@dependabot dependabot Bot requested a review from joshfarrant April 20, 2026 05:47
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 20, 2026
@dependabot dependabot Bot requested a review from francinelucca April 20, 2026 05:48
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Apr 20, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Apr 20, 2026 •
edited
Loading

⚠️ No Changeset found

Latest commit: a707842

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot temporarily deployed to Storybook Preview April 20, 2026 05:50 Inactive
@francinelucca
Copy link
Copy Markdown
Member

francinelucca commented Apr 24, 2026

@copilot add a rule ignore for all the failing styles in the stylelint check

@francinelucca
Add stylelint-disable-next-line comments for primer/box-shadow rule f…
a707842 
…ailures

Agent-Logs-Url: https://github.com/primer/css/sessions/f347e8ce-bba6-48ff-833e-60e8891d2a40

Co-authored-by: francinelucca <40550942+francinelucca@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 24, 2026

@copilot add a rule ignore for all the failing styles in the stylelint check

Added // stylelint-disable-next-line primer/box-shadow comments to all 7 failing lines in src/select-menu/select-menu.scss and src/toasts/toasts.scss. These failures are caused by the removal of the shadow.floating.legacy token in @primer/primitives 11.7.0. Stylelint now passes cleanly. (commit a707842)

@github-actions github-actions Bot temporarily deployed to Storybook Preview April 24, 2026 13:44 Inactive
@francinelucca francinelucca merged commit 1f9746c into main Apr 24, 2026
17 checks passed
@francinelucca francinelucca deleted the dependabot/npm_and_yarn/all-f62384f88e branch April 24, 2026 13:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@francinelucca francinelucca francinelucca approved these changes

@joshfarrant joshfarrant Awaiting requested review from joshfarrant joshfarrant is a code owner automatically assigned from primer/design-reviewers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code skip changeset

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@francinelucca