Skip to content

Bump acorn from 8.15.0 to 8.18.0 - #3013

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/acorn-8.18.0
Closed

Bump acorn from 8.15.0 to 8.18.0#3013
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/acorn-8.18.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps acorn from 8.15.0 to 8.18.0.

Commits
  • d788421 Mark version 8.18.0
  • b61cb9a Add startLocation option
  • c8d515c Don't compute curLine when locations are off
  • a7bd3cd Reject an unparenthesized arrow function as the left operand of **
  • b7c31b6 Fix mistake in previous patch
  • 5c4af50 Avoid scanning from start of document in loose parser's resetTo
  • 5b9d16c Mark version 8.17.0
  • 449f9fa Make linter happy
  • 9e1bced Add a strict option to turn on strict mode for scripts
  • 8a47812 Convert stack overflow errors to SyntaxError instances
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade acorn from 8.15.0 to 8.18.0 to pick up spec-compliance fixes, new options, and minor performance improvements. Notable behavior changes: unparenthesized arrow functions as the left operand of ** are now rejected, and stack overflows surface as SyntaxError.

  • Build-only change (updates in package.json and yarn.lock); defaults unchanged and no migration required.
  • New options available if needed: strict (enable strict mode for scripts) and startLocation.
  • If any parsing depended on accepting (x => x)**2, add parentheses to the arrow function or operand.

Written for commit 59ae9d5. Summary will update on new commits.

Review in cubic

Bumps [acorn](https://github.com/acornjs/acorn) from 8.15.0 to 8.18.0.
- [Commits](acornjs/acorn@8.15.0...8.18.0)

---
updated-dependencies:
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 21, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@netlify

netlify Bot commented Aug 21, 2026

Copy link
Copy Markdown

Deploy Preview for netdata-docusaurus ready!

Name Link
🔨 Latest commit 59ae9d5
🔍 Latest deploy log https://app.netlify.com/projects/netdata-docusaurus/deploys/6a88ae2ea1a5730008dc3031
😎 Deploy Preview https://deploy-preview-3013--netdata-docusaurus.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@ktsaou

ktsaou commented Aug 21, 2026

Copy link
Copy Markdown
Member

Superseded by #3021, which consolidates this compatible JavaScript parser update with the related build dependencies that share its validation surface.

@ktsaou ktsaou closed this Aug 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/acorn-8.18.0 branch August 21, 2026 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants