Bump the npm-dependencies group across 1 directory with 3 updates by dependabot[bot] · Pull Request #383 · NextCommunity/NextCommunity.github.io

dependabot · 2026-03-26T10:26:24Z

Bumps the npm-dependencies group with 3 updates in the / directory: @11ty/eleventy, enhanced-resolve and tailwindcss.

Updates @11ty/eleventy from 3.1.2 to 3.1.5

Release notes

Sourced from @11ty/eleventy's releases.

Eleventy v3.1.5: Dependable Dependencies

No Eleventy core code changes, this release is for minor version dependency updates on 3.x only

Fixes npm audit report for minimatch: #4239 via @11ty/recursive-copy@4.0.4

Upgrade liquidjs from 10.21 to 10.25

Freezes moo dependency #4240

Removes dev dependency rimraf

Small improvements to HTML Relative Passthrough Copy tests

Full Changelog: 11ty/eleventy@v3.1.2...v3.1.5

Eleventy v3.1.4

⚠️ This immutable release failed to publish. Please use the identical Eleventy v3.1.5 instead!

Eleventy v3.1.3

⚠️ This immutable release failed to publish. Please use the identical Eleventy v3.1.5 instead!

Commits

c8cae12 v3.1.5
08f0ef0 Release script changes from main
52bcacb v3.1.4
a3ea614 Fix release script
b3a1fd2 v3.1.3 Coverage
b811903 More test ignores for Node 24
9d540d8 v3.1.3
116f6e2 Upgrade dependencies. Fixes #4239 Fixes #4240
21322ea Removes rimraf dev dependency
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @11ty/eleventy since your current version.

Updates enhanced-resolve from 5.20.0 to 5.20.1

Release notes

Sourced from enhanced-resolve's releases.

v5.20.1

Patch Changes

Optimize TsconfigPathsPlugin and fix extends resolution bugs. (by @alexander-akait in #492)

Improve resolver cache hit rate. (by @alexander-akait in #492)

Changelog

Sourced from enhanced-resolve's changelog.

5.20.1

Patch Changes

Optimize TsconfigPathsPlugin and fix extends resolution bugs. (by @alexander-akait in #492)

Improve resolver cache hit rate. (by @alexander-akait in #492)

Commits

ebc67d3 chore(release): new release (#493)
ab7e9b5 chore: fix cspell
363dbba ci: fix logic
14d16bd ci: trusted publishers (#492)
00eb94f ci: add node@25 (#491)
b7f67c1 chore(deps-dev): bump tooling from v1.24.4 to v1.25.0 (#489)
2b1f47c chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 in the ...
3c2484f ci: dependabot automerge (#486)
22d1cb6 ci: use lock versions (#485)
1ec26f2 chore(deps): update (#484)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for enhanced-resolve since your current version.

Updates tailwindcss from 4.2.1 to 4.2.2

Release notes

Sourced from tailwindcss's releases.

v4.2.2

Added

Support Vite 8 in @tailwindcss/vite (#19790)

Fixed

Don't crash when candidates contain prototype properties like row-constructor (#19725)

Canonicalize calc(var(--spacing)*…) expressions into --spacing(…) (#19769)

Fix crash in canonicalization step when handling utilities containing @property at-rules (e.g. shadow-sm border) (#19727)

Skip full reload for server only modules scanned by client CSS when using @tailwindcss/vite (#19745)

Improve canonicalization for bare values exceeding default spacing scale suggestions (e.g. w-1234 h-1234 → size-1234) (#19809)

Fix canonicalization resulting in empty list (e.g. w-5 h-5 size-5 → '' instead of size-5) (#19812)

Changelog

Sourced from tailwindcss's changelog.

[4.2.2] - 2026-03-18

Fixed

Don't crash when candidates contain prototype properties like row-constructor (#19725)

Canonicalize calc(var(--spacing)*…) expressions into --spacing(…) (#19769)

Fix crash in canonicalization step when handling utilities containing @property at-rules (e.g. shadow-sm border) (#19727)

Skip full reload for server only modules scanned by client CSS when using @tailwindcss/vite (#19745)

Add support for Vite 8 in @tailwindcss/vite (#19790)

Improve canonicalization for bare values exceeding default spacing scale suggestions (e.g. w-1234 h-1234 → size-1234) (#19809)

Fix canonicalization resulting in empty list (e.g. w-5 h-5 size-5 → '' instead of size-5) (#19812)

Resolve tsconfig paths to allow for @import '@/path/to/file'; when using @tailwindcss/vite (#19803)

Commits

d596b0c 4.2.2 (#19821)
2228a57 Bump Lightning CSS (#19771)
f302fce Fix canonicalization resulting in empty list (#19812)
bb2f170 Improve canonicalization for bare values exceeding default spacing scale sugg...
faa5e88 Cleanup inconsistencies related to (regex) escapes (#19804)
d5717f2 run prettier
51aa9d7 fix(canonicalize): handle utilities with empty property maps in collapse (#19...
c586bd6 Canonicalize calc(var(--spacing)*…) expressions into --spacing(…) (#19769)
9ded4a2 Guard object lookups against inherited prototype properties (#19725)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

socket-security · 2026-03-26T10:26:41Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
tailwindcss@4.2.1 ⏵ 4.2.2	⁺¹	⁺¹
@11ty/eleventy@3.1.2 ⏵ 3.1.5	⁺¹		⁺⁵
enhanced-resolve@5.20.0 ⏵ 5.20.1

View full report

deepsource-io · 2026-03-26T10:27:03Z

DeepSource Code Review

We reviewed changes in 5b6c580...91429b9 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade	Security Reliability Complexity Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Mar 26, 2026 10:54a.m.	Review ↗
Secrets		Mar 26, 2026 10:54a.m.	Review ↗

jbampton · 2026-03-26T10:53:39Z

@dependabot rebase

Bumps the npm-dependencies group with 3 updates in the / directory: [@11ty/eleventy](https://github.com/11ty/eleventy), [enhanced-resolve](https://github.com/webpack/enhanced-resolve) and [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss). Updates `@11ty/eleventy` from 3.1.2 to 3.1.5 - [Release notes](https://github.com/11ty/eleventy/releases) - [Changelog](https://github.com/11ty/eleventy/blob/main/docs/release-instructions.md) - [Commits](11ty/eleventy@v3.1.2...v3.1.5) Updates `enhanced-resolve` from 5.20.0 to 5.20.1 - [Release notes](https://github.com/webpack/enhanced-resolve/releases) - [Changelog](https://github.com/webpack/enhanced-resolve/blob/main/CHANGELOG.md) - [Commits](webpack/enhanced-resolve@v5.20.0...v5.20.1) Updates `tailwindcss` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.2/packages/tailwindcss) --- updated-dependencies: - dependency-name: "@11ty/eleventy" dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: enhanced-resolve dependency-version: 5.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: tailwindcss dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript labels Mar 26, 2026

dependabot bot requested a review from jbampton as a code owner March 26, 2026 10:26

dependabot bot added dependencies Pull requests that update a dependency file javascript labels Mar 26, 2026

BaseMax approved these changes Mar 26, 2026

View reviewed changes

jbampton self-assigned this Mar 26, 2026

jbampton added this to Next Mar 26, 2026

jbampton added this to the Hackfest milestone Mar 26, 2026

github-project-automation bot moved this to In progress in Next Mar 26, 2026

jbampton moved this from In progress to Review in progress in Next Mar 26, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-707b3b67b0 branch from cefc5af to 91429b9 Compare March 26, 2026 10:54

BaseMax approved these changes Mar 26, 2026

View reviewed changes

jbampton approved these changes Mar 26, 2026

View reviewed changes

github-project-automation bot moved this from Review in progress to Reviewer approved in Next Mar 26, 2026

jbampton merged commit b609797 into main Mar 26, 2026
5 of 7 checks passed

jbampton deleted the dependabot/npm_and_yarn/npm-dependencies-707b3b67b0 branch March 26, 2026 11:01

github-project-automation bot moved this from Reviewer approved to Done in Next Mar 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm-dependencies group across 1 directory with 3 updates#383

Bump the npm-dependencies group across 1 directory with 3 updates#383
jbampton merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-dependencies-707b3b67b0

dependabot bot commented on behalf of github Mar 26, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 26, 2026 •

edited

Loading

Uh oh!

deepsource-io bot commented Mar 26, 2026 •

edited

Loading

Uh oh!

jbampton commented Mar 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Eleventy v3.1.5: Dependable Dependencies

Eleventy v3.1.4

Eleventy v3.1.3

v5.20.1

Patch Changes

5.20.1

Patch Changes

v4.2.2

Added

Fixed

[4.2.2] - 2026-03-18

Fixed

Uh oh!

socket-security bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

deepsource-io bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DeepSource Code Review

PR Report Card

Code Review Summary

Uh oh!

jbampton commented Mar 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Mar 26, 2026 •

edited

Loading

socket-security bot commented Mar 26, 2026 •

edited

Loading

deepsource-io bot commented Mar 26, 2026 •

edited

Loading