build(deps): Bump esbuild, @vitest/coverage-v8 and vitest by dependabot[bot] · Pull Request #1 · mongrel-intelligence/cascade

dependabot · 2025-12-30T16:24:30Z

Bumps esbuild to 0.27.2 and updates ancestor dependencies esbuild, @vitest/coverage-v8 and vitest. These dependencies need to be updated together.

Updates esbuild from 0.21.5 to 0.27.2

Release notes

Sourced from esbuild's releases.

v0.27.2
Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by @hybrist.
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:
/* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}
This change was contributed by @BPJEnnova.
Additional minification of switch statements (#4176, #4359)

This release contains additional minification patterns for reducing switch statements. Here is an example:
// Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}
// New output (with --minify)

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

Fix regression with --define and import.meta (#4010, #4012, #4013)

The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

This fix was contributed by @sapphi-red.

0.24.1
Allow es2024 as a target in tsconfig.json (#4004)

TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:
{
  "compilerOptions": {
    "target": "ES2024"
  }
}
As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

This fix was contributed by @billyjanitsch.
Allow automatic semicolon insertion after get/set

This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:
class Foo {
  get
  *x() {}
  set
  *y() {}
}
The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.
Allow quoted property names in --define and --pure (#4008)

The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits

cd83297 publish 0.27.2 to npm
2759721 additional tests for switch with break
fd2b4b3 update release notes
c8d93a7 fix #4357: -webkit- prefix for mask shorthand (#4358)
92ff12c compat table: update @types/node
a35eceb compat table: fix a type error with the new types
f598984 fix make compat-table to install dependencies
f7f6df0 release notes for #4361
6f8ec15 fix: allow subpath imports that start with #/ (#4361)
f7ae61f minify some switch statements to if-else statement
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Updates @vitest/coverage-v8 from 2.1.9 to 4.0.16

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.0.16

   🐞 Bug Fixes

Fix browser mode default testTimeout back to 15 seconds - by @hi-ogawa in vitest-dev/vitest#9167 (da0ad)

Avoid crashing on process.versions stub - by @AriPerkkio in vitest-dev/vitest#9174 (78cfb)

Reject calling suite function inside test - by @hi-ogawa in vitest-dev/vitest#9198 (1a259)

Allow inlining fully dynamic import - by @hi-ogawa in vitest-dev/vitest#9137 (56851)

Fix module graph UI on html reporter with headless browser mode - by @hi-ogawa in vitest-dev/vitest#9219 (60642)

Log deprecated test.poolOptions if it's set - by @sheremet-va in vitest-dev/vitest#9226 (f7f6a)

browser:

Import recordArtifact from the vitest package - by @macarie in vitest-dev/vitest#9186 (01c56)

Fix import.meta.env define - by @hi-ogawa in vitest-dev/vitest#9205 (01a9a)

String formatting bug when including placeholders in console.log - by @michael-debs and @hi-ogawa in vitest-dev/vitest#9030 and vitest-dev/vitest#9131 (84a30)

coverage:

Istanbul untested files source maps are off - by @AriPerkkio in vitest-dev/vitest#9208 (372e8)

experimental:

Export setupEnvironment for custom pools - by @AriPerkkio in vitest-dev/vitest#9187 (5d26b)

    View changes on GitHub

v4.0.15

   🚀 Experimental Features

cache: Add opt-out on a plugin level, fix internal root cache - by @sheremet-va in vitest-dev/vitest#9154 (a68f7)

reporters: Print import duration breakdown - by @sheremet-va in vitest-dev/vitest#9105 (122ff)

   🐞 Bug Fixes

Keep built-in id as is in bun and deno - by @sheremet-va in vitest-dev/vitest#9117 (075ab)

Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true - by @hi-ogawa in vitest-dev/vitest#9121 (fd8bd)

Fix external behavior with deps.optimizer - by @hi-ogawa in vitest-dev/vitest#9125 (4c754)

Very minor typo in "Chrome DevTools Protocol" - by @HowToTestFrontend in vitest-dev/vitest#9146 (20997)

browser: Run toMatchScreenshot only once when used with expect.element - by @macarie in vitest-dev/vitest#9132 (0d2e7)

coverage: Istanbul provider to not break source maps - by @AriPerkkio in vitest-dev/vitest#9040 (e4ca9)

deps: Update dependency tinyexec to v1 - in vitest-dev/vitest#9122 (fd786)

docs: Remove --browser.provider from docs - by @sheremet-va in vitest-dev/vitest#9115 (120b3)

expect: Preserve currentTestName in extended matchers - by @macarie in vitest-dev/vitest#9106 (e4345)

pool: Terminate workers on CTRL+c forceful exits - by @AriPerkkio in vitest-dev/vitest#9140 (d57d8)

reporters: Show project in github reporter - by @sheremet-va in vitest-dev/vitest#9138 (bb65e)

spy: Do not mock overriden method, if parent was automocked - by @sheremet-va in vitest-dev/vitest#9116 (1a246)

web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native" - by @whitphx in vitest-dev/vitest#9118 (deee8)

    View changes on GitHub

v4.0.14

   🚀 Experimental Features

browser: Expose utils.configurePrettyDOM - by @sheremet-va in vitest-dev/vitest#9103 (2cc34)

runner: Add full names to tasks - by @macarie in vitest-dev/vitest#9087 (821aa)

ui: Add tabbed failure view for toMatchScreenshot with comparison slider - by @macarie in vitest-dev/vitest#8813 (c37c2)

... (truncated)

Commits

b46d744 chore: release v4.0.16
eb1abf0 chore: release v4.0.15
9ca74cf chore: release v4.0.14
acc5152 perf: replace debug with obug (#9057)
73b54ce chore: release v4.0.13
5aa84d5 chore: release v4.0.12
c3befb0 chore: release v4.0.11
259a3d1 chore: release v4.0.10
62fab24 chore: release v4.0.9
46bfd09 chore: release v4.0.8
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @vitest/coverage-v8 since your current version.

Updates vitest from 2.1.9 to 4.0.16

Release notes

Sourced from vitest's releases.

v4.0.16

   🐞 Bug Fixes

Fix browser mode default testTimeout back to 15 seconds - by @hi-ogawa in vitest-dev/vitest#9167 (da0ad)

Avoid crashing on process.versions stub - by @AriPerkkio in vitest-dev/vitest#9174 (78cfb)

Reject calling suite function inside test - by @hi-ogawa in vitest-dev/vitest#9198 (1a259)

Allow inlining fully dynamic import - by @hi-ogawa in vitest-dev/vitest#9137 (56851)

Fix module graph UI on html reporter with headless browser mode - by @hi-ogawa in vitest-dev/vitest#9219 (60642)

Log deprecated test.poolOptions if it's set - by @sheremet-va in vitest-dev/vitest#9226 (f7f6a)

browser:

Import recordArtifact from the vitest package - by @macarie in vitest-dev/vitest#9186 (01c56)

Fix import.meta.env define - by @hi-ogawa in vitest-dev/vitest#9205 (01a9a)

String formatting bug when including placeholders in console.log - by @michael-debs and @hi-ogawa in vitest-dev/vitest#9030 and vitest-dev/vitest#9131 (84a30)

coverage:

Istanbul untested files source maps are off - by @AriPerkkio in vitest-dev/vitest#9208 (372e8)

experimental:

Export setupEnvironment for custom pools - by @AriPerkkio in vitest-dev/vitest#9187 (5d26b)

    View changes on GitHub

v4.0.15

   🚀 Experimental Features

cache: Add opt-out on a plugin level, fix internal root cache - by @sheremet-va in vitest-dev/vitest#9154 (a68f7)

reporters: Print import duration breakdown - by @sheremet-va in vitest-dev/vitest#9105 (122ff)

   🐞 Bug Fixes

Keep built-in id as is in bun and deno - by @sheremet-va in vitest-dev/vitest#9117 (075ab)

Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true - by @hi-ogawa in vitest-dev/vitest#9121 (fd8bd)

Fix external behavior with deps.optimizer - by @hi-ogawa in vitest-dev/vitest#9125 (4c754)

Very minor typo in "Chrome DevTools Protocol" - by @HowToTestFrontend in vitest-dev/vitest#9146 (20997)

browser: Run toMatchScreenshot only once when used with expect.element - by @macarie in vitest-dev/vitest#9132 (0d2e7)

coverage: Istanbul provider to not break source maps - by @AriPerkkio in vitest-dev/vitest#9040 (e4ca9)

deps: Update dependency tinyexec to v1 - in vitest-dev/vitest#9122 (fd786)

docs: Remove --browser.provider from docs - by @sheremet-va in vitest-dev/vitest#9115 (120b3)

expect: Preserve currentTestName in extended matchers - by @macarie in vitest-dev/vitest#9106 (e4345)

pool: Terminate workers on CTRL+c forceful exits - by @AriPerkkio in vitest-dev/vitest#9140 (d57d8)

reporters: Show project in github reporter - by @sheremet-va in vitest-dev/vitest#9138 (bb65e)

spy: Do not mock overriden method, if parent was automocked - by @sheremet-va in vitest-dev/vitest#9116 (1a246)

web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native" - by @whitphx in vitest-dev/vitest#9118 (deee8)

    View changes on GitHub

v4.0.14

   🚀 Experimental Features

browser: Expose utils.configurePrettyDOM - by @sheremet-va in vitest-dev/vitest#9103 (2cc34)

runner: Add full names to tasks - by @macarie in vitest-dev/vitest#9087 (821aa)

ui: Add tabbed failure view for toMatchScreenshot with comparison slider - by @macarie in vitest-dev/vitest#8813 (c37c2)

... (truncated)

Commits

b46d744 chore: release v4.0.16
84a3062 fix(browser): string formatting bug when including placeholders in console.lo...
f7f6aa8 fix: log deprecated test.poolOptions if it's set (#9226)
568513c fix: allow inlining fully dynamic import (#9137)
5d26b87 fix(experimental): export setupEnvironment for custom pools (#9187)
f17eb42 refactor: avoid using isFileServingAllowed from Vite (#9160)
78cfbf9 fix: avoid crashing on process.versions stub (#9174)
da0ade2 fix: fix browser mode default testTimeout back to 15 seconds (#9167)
eb1abf0 chore: release v4.0.15
a68f74e feat(cache): add opt-out on a plugin level, fix internal root cache (#9154)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [esbuild](https://github.com/evanw/esbuild) to 0.27.2 and updates ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). These dependencies need to be updated together. Updates `esbuild` from 0.21.5 to 0.27.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.21.5...v0.27.2) Updates `@vitest/coverage-v8` from 2.1.9 to 4.0.16 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/coverage-v8) Updates `vitest` from 2.1.9 to 4.0.16 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/vitest) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.16 dependency-type: direct:development - dependency-name: vitest dependency-version: 4.0.16 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-01T12:38:05Z

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

…tructured envelope, --comment alias) (#1190) * docs(014): spec + plans for cascade-tools agent ergonomics Adds docs/specs/014-cascade-tools-agent-ergonomics.md plus two plans covering shared-infra and create-pr-review adoption. Prompted by prod run 5d993b04-6e05-4ae1-b7de-8c274cf3496b. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * chore(plan-014): lock plan 1 (shared-infra) * feat(cascade-tools): plan 014/1 shared-infra — truthful prompts + envelope Ships the root-cause fix for prod run 5d993b04-6e05-4ae1-b7de-8c274cf3496b plus the shared infrastructure every future gadget inherits: - System-prompt renderer (src/backends/shared/nativeToolPrompts.ts) stops stripping trailing 's' from array param names and claiming '<string> (repeatable)' for every array. Array-of-object params now render as `--<flag> '<json>'` with aliases appended via `|` and a one-line runnable example from the tool definition. - Factory (src/gadgets/shared/cliCommandFactory.ts) gains oclif flag aliases, JSON parsing for array-of-object flags, file-input JSON parsing, `examples` wired into oclif `--help`, and Levenshtein-based 'did you mean' suggestions for mistyped flags (via fastest-levenshtein). - New shared error envelope (src/gadgets/shared/errorEnvelope.ts) — every CLI failure emits `{"success":false,"error":{type,flag?,message,got?, expected?,hint?,example?}}` on stdout plus a one-line prose summary on stderr. All prior `this.error()` / flat `{success:false,error:"<string>"}` call sites migrated. - Contracts widened: ParameterDefinition gains `cliAliases`, FileInput- Alternative gains `parseAs`, ToolManifest parameters carry `items`, `aliases`, `example`. - Manifest generator threads the new fields through. - bin/cascade-tools.js wraps `run()` to swallow oclif ExitError cleanly so the envelope isn't obscured by Node's default stack dump. Plan-1 ACs #1–#17 all delivered. 8438/8438 unit tests passing. Test surface delta: 57 new unit tests across errorEnvelope.test.ts, shared-nativeToolPrompts.test.ts, and factories.test.ts. Seven legacy assertions encoding the pre-014 error surface updated in cli/cli-command- factory, cli/file-input-flags, cli/scm/create-pr-sidecar, cli/scm/create- pr-review-sidecar, backends/claude-code. Plan 2 adopts the pattern on createPRReviewDef — zero shared-file edits — proving the declarative-metadata invariant. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * chore(plan-014): lock plan 2 (createprreview-adopt) * feat(cascade-tools): plan 014/2 createprreview-adopt + spec done Applies the spec-014 declarative-metadata pattern to createPRReviewDef: - --comment alias for --comments (the exact muscle-memory mistake from prod run 5d993b04-6e05-4ae1-b7de-8c274cf3496b). - --comments-file <path> (and - for stdin) JSON-parsed escape hatch for long payloads that don't survive shell quoting. - Two declarative fields on createPRReviewDef.parameters.comments.cliAliases + createPRReviewDef.cli.fileInputAlternatives. Zero edits to shared infrastructure (cliCommandFactory, manifestGenerator, nativeToolPrompts, errorEnvelope) — proves spec 014's single-entrypoint invariant. Per-plan ACs #1, #2, #3, #5, #6, #7, #8, #9, #11, #12 auto-verified (unit tests + build + lint + typecheck). AC #4 (binary-level smoke) tagged [manual] because vitest fork-pool workers fail to capture stdout/stderr from spawned binaries that do top-level await import(); the six scenarios were verified manually against the built binary and the trace is recorded in the plan. AC #10 n/a — integration test path abandoned for the same reason. All plans done. Spec 014 marked .done (docs/specs/014-*.md → .done). CHANGELOG Unreleased updated with a per-plan entry. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 30, 2025

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-3b7ba0192e branch 3 times, most recently from 853b27d to b2f2a7a Compare December 31, 2025 19:20

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-3b7ba0192e branch from b2f2a7a to 600bb5b Compare December 31, 2025 19:38

zbigniewsobiecki closed this Jan 1, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/multi-3b7ba0192e branch January 1, 2026 12:38

zbigniewsobiecki mentioned this pull request Feb 16, 2026

feat: add manual agent triggering and run retry #312

Merged

zbigniewsobiecki mentioned this pull request Apr 16, 2026

feat(006/4): linear migrated — all PM providers now on manifest #1128

Merged

3 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump esbuild, @vitest/coverage-v8 and vitest#1

build(deps): Bump esbuild, @vitest/coverage-v8 and vitest#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-3b7ba0192e

dependabot Bot commented on behalf of github Dec 30, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Dec 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.27.2

Changelog: 2024

0.24.2

0.24.1

v4.0.16

🐞 Bug Fixes

View changes on GitHub

v4.0.15

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.0.14

🚀 Experimental Features

v4.0.16

🐞 Bug Fixes

View changes on GitHub

v4.0.15

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.0.14

🚀 Experimental Features

Uh oh!

dependabot Bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Dec 30, 2025 •

edited

Loading