chore(deps-dev): bump @ast-grep/cli from 0.43.0 to 0.44.1 by dependabot[bot] · Pull Request #118 · agjs/tsforge

dependabot · 2026-07-17T01:06:21Z

Bumps @ast-grep/cli from 0.43.0 to 0.44.1.

Release notes

Sourced from @ast-grep/cli's releases.

0.44.1

chore(deps): update rust crate napi to v3.10.3 [#2786](https://github.com/ast-grep/ast-grep/issues/2786)

chore(deps): update rust crate napi-derive to v3.5.9 [#2785](https://github.com/ast-grep/ast-grep/issues/2785)

chore(deps): update dependency oxlint to v1.72.0 [#2780](https://github.com/ast-grep/ast-grep/issues/2780)

chore(deps): update rust crate terminal-light to v1.9.0 [#2781](https://github.com/ast-grep/ast-grep/issues/2781)

chore(deps): update rust crate clap_complete to v4.6.7 [#2783](https://github.com/ast-grep/ast-grep/issues/2783)

chore(deps): update rust crate ignore to v0.4.27 [#2784](https://github.com/ast-grep/ast-grep/issues/2784)

fix(cli): bound outline file queue [#2787](https://github.com/ast-grep/ast-grep/issues/2787)

chore(deps): update rust crate clap_complete to v4.6.6 [#2782](https://github.com/ast-grep/ast-grep/issues/2782)

chore(deps): update dependency @ast-grep/napi to v0.44.0 [#2764](https://github.com/ast-grep/ast-grep/issues/2764)

chore(deps): update rust crate tree-sitter to v0.26.10 [#2779](https://github.com/ast-grep/ast-grep/issues/2779)

chore(deps): update dependency web-tree-sitter to v0.26.10 [#2778](https://github.com/ast-grep/ast-grep/issues/2778)

chore(deps): update dependency dprint to v0.55.1 [#2776](https://github.com/ast-grep/ast-grep/issues/2776)

chore(deps): update dependency @napi-rs/cli to v3.7.2 [#2667](https://github.com/ast-grep/ast-grep/issues/2667)

chore(deps): update rust crate napi to v3.9.4 [#2696](https://github.com/ast-grep/ast-grep/issues/2696)

chore(deps): update rust crate napi-derive to v3.5.7 [#2768](https://github.com/ast-grep/ast-grep/issues/2768)

chore(deps): update rust crate anyhow to v1.0.103 [#2774](https://github.com/ast-grep/ast-grep/issues/2774)

feat: load custom language outline rules from config [#2777](https://github.com/ast-grep/ast-grep/issues/2777)

fix(deps): update rust-wasm-bindgen monorepo [#2775](https://github.com/ast-grep/ast-grep/issues/2775)

chore(deps): update actions/cache action to v6 [#2767](https://github.com/ast-grep/ast-grep/issues/2767)

feat: Support *.bazel files in python [#2771](https://github.com/ast-grep/ast-grep/issues/2771)

chore(deps): update oxlint monorepo [#2765](https://github.com/ast-grep/ast-grep/issues/2765)

feat: add outline rules for more builtin languages 07778fb

fix: update pyo3 deps 1713e86

0.44.0

chore: move outline docs and benchmarks out of repo [#2763](https://github.com/ast-grep/ast-grep/issues/2763)

chore(deps): update dependency smol-toml to v1.7.0 [#2762](https://github.com/ast-grep/ast-grep/issues/2762)

Add JavaScript outline rules and stream JSON files [#2761](https://github.com/ast-grep/ast-grep/issues/2761)

fix: reject root multi-metavariable patterns [#2727](https://github.com/ast-grep/ast-grep/issues/2727)

fix: don't leak metavar bindings across siblings in nthChild ofRule [#2677](https://github.com/ast-grep/ast-grep/issues/2677)

fix: extract python from-import modules in outline [#2758](https://github.com/ast-grep/ast-grep/issues/2758)

fix: match go outline types by declaration [#2759](https://github.com/ast-grep/ast-grep/issues/2759)

fix: skip empty files in outline [#2757](https://github.com/ast-grep/ast-grep/issues/2757)

feat: mark duplicate outline names [#2756](https://github.com/ast-grep/ast-grep/issues/2756)

refactor: inline outline member kind lookup [#2755](https://github.com/ast-grep/ast-grep/issues/2755)

refactor: make outline extract return iterator [#2754](https://github.com/ast-grep/ast-grep/issues/2754)

refactor: stream outline extraction items [#2753](https://github.com/ast-grep/ast-grep/issues/2753)

perf: use single traversal for outline extraction [#2751](https://github.com/ast-grep/ast-grep/issues/2751)

perf: cache transform replace regexes [#2750](https://github.com/ast-grep/ast-grep/issues/2750)

fix: don't leak metavar bindings from a negated not rule [#2676](https://github.com/ast-grep/ast-grep/issues/2676)

refactor: fold outline extract options into extractors [#2749](https://github.com/ast-grep/ast-grep/issues/2749)

refactor: split outline extract options and style [#2748](https://github.com/ast-grep/ast-grep/issues/2748)

refactor: map outline cli to core options [#2747](https://github.com/ast-grep/ast-grep/issues/2747)

feat: apply outline extractor options [#2746](https://github.com/ast-grep/ast-grep/issues/2746)

feat: add outline extractor options [#2745](https://github.com/ast-grep/ast-grep/issues/2745)

fix: simplify some code [#2744](https://github.com/ast-grep/ast-grep/issues/2744)

fix: trailing ast-grep-ignore on a multi-line statement suppresses it [#2678](https://github.com/ast-grep/ast-grep/issues/2678)

chore(deps): update actions/checkout action to v7 [#2731](https://github.com/ast-grep/ast-grep/issues/2731)

fix: cover async rust outline rules [#2743](https://github.com/ast-grep/ast-grep/issues/2743)

... (truncated)

Changelog

Sourced from @ast-grep/cli's changelog.

0.44.1

chore(deps): update rust crate napi to v3.10.3 [#2786](https://github.com/ast-grep/ast-grep/issues/2786)

chore(deps): update rust crate napi-derive to v3.5.9 [#2785](https://github.com/ast-grep/ast-grep/issues/2785)

chore(deps): update dependency oxlint to v1.72.0 [#2780](https://github.com/ast-grep/ast-grep/issues/2780)

chore(deps): update rust crate terminal-light to v1.9.0 [#2781](https://github.com/ast-grep/ast-grep/issues/2781)

chore(deps): update rust crate clap_complete to v4.6.7 [#2783](https://github.com/ast-grep/ast-grep/issues/2783)

chore(deps): update rust crate ignore to v0.4.27 [#2784](https://github.com/ast-grep/ast-grep/issues/2784)

fix(cli): bound outline file queue [#2787](https://github.com/ast-grep/ast-grep/issues/2787)

chore(deps): update rust crate clap_complete to v4.6.6 [#2782](https://github.com/ast-grep/ast-grep/issues/2782)

chore(deps): update dependency @ast-grep/napi to v0.44.0 [#2764](https://github.com/ast-grep/ast-grep/issues/2764)

chore(deps): update rust crate tree-sitter to v0.26.10 [#2779](https://github.com/ast-grep/ast-grep/issues/2779)

chore(deps): update dependency web-tree-sitter to v0.26.10 [#2778](https://github.com/ast-grep/ast-grep/issues/2778)

chore(deps): update dependency dprint to v0.55.1 [#2776](https://github.com/ast-grep/ast-grep/issues/2776)

chore(deps): update dependency @napi-rs/cli to v3.7.2 [#2667](https://github.com/ast-grep/ast-grep/issues/2667)

chore(deps): update rust crate napi to v3.9.4 [#2696](https://github.com/ast-grep/ast-grep/issues/2696)

chore(deps): update rust crate napi-derive to v3.5.7 [#2768](https://github.com/ast-grep/ast-grep/issues/2768)

chore(deps): update rust crate anyhow to v1.0.103 [#2774](https://github.com/ast-grep/ast-grep/issues/2774)

feat: load custom language outline rules from config [#2777](https://github.com/ast-grep/ast-grep/issues/2777)

fix(deps): update rust-wasm-bindgen monorepo [#2775](https://github.com/ast-grep/ast-grep/issues/2775)

chore(deps): update actions/cache action to v6 [#2767](https://github.com/ast-grep/ast-grep/issues/2767)

feat: Support *.bazel files in python [#2771](https://github.com/ast-grep/ast-grep/issues/2771)

chore(deps): update oxlint monorepo [#2765](https://github.com/ast-grep/ast-grep/issues/2765)

feat: add outline rules for more builtin languages 07778fb

fix: update pyo3 deps 1713e86

0.44.0

21 June 2026

chore: move outline docs and benchmarks out of repo [#2763](https://github.com/ast-grep/ast-grep/issues/2763)

chore(deps): update dependency smol-toml to v1.7.0 [#2762](https://github.com/ast-grep/ast-grep/issues/2762)

Add JavaScript outline rules and stream JSON files [#2761](https://github.com/ast-grep/ast-grep/issues/2761)

fix: reject root multi-metavariable patterns [#2727](https://github.com/ast-grep/ast-grep/issues/2727)

fix: don't leak metavar bindings across siblings in nthChild ofRule [#2677](https://github.com/ast-grep/ast-grep/issues/2677)

fix: extract python from-import modules in outline [#2758](https://github.com/ast-grep/ast-grep/issues/2758)

fix: match go outline types by declaration [#2759](https://github.com/ast-grep/ast-grep/issues/2759)

fix: skip empty files in outline [#2757](https://github.com/ast-grep/ast-grep/issues/2757)

feat: mark duplicate outline names [#2756](https://github.com/ast-grep/ast-grep/issues/2756)

refactor: inline outline member kind lookup [#2755](https://github.com/ast-grep/ast-grep/issues/2755)

refactor: make outline extract return iterator [#2754](https://github.com/ast-grep/ast-grep/issues/2754)

refactor: stream outline extraction items [#2753](https://github.com/ast-grep/ast-grep/issues/2753)

perf: use single traversal for outline extraction [#2751](https://github.com/ast-grep/ast-grep/issues/2751)

perf: cache transform replace regexes [#2750](https://github.com/ast-grep/ast-grep/issues/2750)

fix: don't leak metavar bindings from a negated not rule [#2676](https://github.com/ast-grep/ast-grep/issues/2676)

refactor: fold outline extract options into extractors [#2749](https://github.com/ast-grep/ast-grep/issues/2749)

refactor: split outline extract options and style [#2748](https://github.com/ast-grep/ast-grep/issues/2748)

refactor: map outline cli to core options [#2747](https://github.com/ast-grep/ast-grep/issues/2747)

feat: apply outline extractor options [#2746](https://github.com/ast-grep/ast-grep/issues/2746)

feat: add outline extractor options [#2745](https://github.com/ast-grep/ast-grep/issues/2745)

... (truncated)

Commits

26f7845 0.44.1
de129f2 chore(deps): update rust crate napi to v3.10.3 (#2786)
6859948 chore(deps): update rust crate napi-derive to v3.5.9 (#2785)
b50dd49 chore(deps): update dependency oxlint to v1.72.0 (#2780)
c16babe chore(deps): update rust crate terminal-light to v1.9.0 (#2781)
6bcb735 chore(deps): update rust crate clap_complete to v4.6.7 (#2783)
0708018 chore(deps): update rust crate ignore to v0.4.27 (#2784)
fe3607e fix(cli): bound outline file queue (#2787)
ba4047f chore(deps): update rust crate clap_complete to v4.6.6 (#2782)
50d1510 chore(deps): update dependency @ast-grep/napi to v0.44.0 (#2764)
Additional commits viewable in compare view

Bumps [@ast-grep/cli](https://github.com/ast-grep/ast-grep) from 0.43.0 to 0.44.1. - [Release notes](https://github.com/ast-grep/ast-grep/releases) - [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md) - [Commits](ast-grep/ast-grep@0.43.0...0.44.1) --- updated-dependencies: - dependency-name: "@ast-grep/cli" dependency-version: 0.44.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): consolidate the 14 open dependabot bumps Single PR superseding the open dependabot PRs: - fast-check 3.23.2 → 4.9.0 (packages/core) — full suite green on v4 (#93/#99) - astro 7.0.9 → 7.1.3 (root + apps/docs) — clears GHSA-4g3v-8h47-v7g6 (#158/#162) - @astrojs/react 5.0.6 → 6.0.1 (#114), @astrojs/sitemap 3.7.2 → 3.7.3 (#116) - astro-mermaid 2.0.1 → 2.1.0 (#119) - tailwindcss + @tailwindcss/vite 4.3.2 → 4.3.3 (#115/#117) - wrangler 4.110.0/4.111.0 → 4.112.0 (#161), @ast-grep/cli 0.43.0 → 0.44.1 (#118) Validated: typecheck + lint + full suite (2820) green. Docs build + osv run by CI. NOTE: the transitive brace-expansion CVE (not a dependabot PR) is separate and may still need an override; GH Actions bumps (#160 checkout, #112 lychee) are workflow YAML, follow-up. * fix(deps): pin brace-expansion to patched 5.0.7 (CVE-2026-13149) New high-severity ReDoS advisory CVE-2026-13149 / GHSA-3jxr-9vmj-r5cp (published ~2026-07-20 21:00) affects brace-expansion <1.1.16 / <2.1.2 / <5.0.7. The lockfile had 1.1.15 and 5.0.6 (transitive via eslint→minimatch/glob — a real runtime dep of the published package, so it is FIXED, not ignored). Override forces all instances to 5.0.7 (patched; API is a single stable expand() fn across majors). typecheck + lint (uses minimatch/glob) + full suite green. * fix(deps): pin js-yaml to patched 4.3.0 (GHSA-52cp-r559-cp3m) The astro/tooling bumps pulled js-yaml 4.2.0 (High ReDoS, GHSA-52cp-r559-cp3m, fixed 4.3.0). Transitive, 4.x only (no 3.x consumers) → override to 4.3.0. osv-scanner local run: 'No issues found', exit 0. typecheck + lint + full suite green.

agjs · 2026-07-20T22:21:41Z

Superseded by #164 (consolidated dependabot bumps), merged to main.

dependabot · 2026-07-20T22:21:44Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/ast-grep/cli-0.44.1 branch from ca91a4a to e98b3c5 Compare July 17, 2026 20:20

agjs closed this Jul 20, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/ast-grep/cli-0.44.1 branch July 20, 2026 22:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump @ast-grep/cli from 0.43.0 to 0.44.1#118

chore(deps-dev): bump @ast-grep/cli from 0.43.0 to 0.44.1#118
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ast-grep/cli-0.44.1

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading

Uh oh!

agjs commented Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.44.1

0.44.0

0.44.1

0.44.0

Uh oh!

agjs commented Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited

Loading