Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps knip from 5.63.1 to 5.64.0.

Release notes

Sourced from knip's releases.

Release 5.64.0

  • Fix formatting (900068149a5612cb6d084d46a3ff31b94c49b284)
  • Add env-cmd Support (#1254) (21d6b5183ad10b3296cdb9c8f21a8f2d01bb36e9) - thanks @​joealden!
  • Re-gen sponsorships chart (185c6389226216548c5691acbac38dda3bf07dfd)
  • fix: handle only string modules in dependency resolution (#1263) (a54021b6e5904fe6a6e87614728b841fe6931858) - thanks @​wattanx!
  • fix: bun ci (#1267) (3d1c3c5b91f440ade9f1069dd41f402e50645c6c) - thanks @​Zamiell!
  • Filter out invalid binaries (resolves #1264) (6f306111e4571418546da2aaf40d9b533940dd28)
  • Work types for good ol' ts 5.0.4 (9913ee755014285036a12ceed65371eb47a321eb)
  • Add @​Datadog-OSS sponsor (a61d9fef9b3ea9c163c6408b1b38495417aeb1da)
  • feat: GitHub actions reporter (#1231) (0a234504fd626f9f0a59aa377301fa46639539c1) - thanks @​cylewaitforit!
  • Add pos to unlisted deps issue type (5b54dae614d1b0719046405241d80e390ab9f4ba)
  • Improve import specifier sanitizer (resolves #1257) (087a98e028994d3e19bfcfd88b7b6231855de781)
  • Cover more cases for symbol refs finder (resolves #1273) (3d76e51e59eceeb528ef6e20ca5e3a1bfff2a841)
  • Fix package name of rslib enabler (#1272) (432bdccb9aa3c8c7d8c0114f6614a651d959e56d) - thanks @​nyarthan!
  • Pass parsed CLI args to config-as-a-function (b0814c9d454ccd060aeda693398d1707ef678fc4)
  • Ignore !-suffixed deps/bins only in production mode (resolves #1253) (06d4df84e7fe2735fce8bc1b1b12e78016e38ebb)
  • Update docs (0d8fd135b46855f6d606783e6c256cceeccf9acf)
  • Auto-format (f54a7bd2cd74354f51fb46ae978b3e5db8759fd7)
  • Find accessed identifiers for dynamic imports (resolves #1155, resolves #1230) (ec0be7e3b222da5b6ddb34baad9d2591f0f479cb)
  • Update oxc-resolver and a few more (dev) deps (96c822a40855c21152f81a1599458850b4f6c2dc)
  • Optimize getAccessedIdentifiers (8fb95019030533909c970bdb204b4779c19eaf5d)
  • fix: enable pnpm plugin on root config & lockfile (#1275) (6e339cadc079b0e144c2036134154c696e8b31c0) - thanks @​nyarthan!
  • Remove ancient past sponsors (e9e6e911d87cf550df87647f5a9b949d32faa27f)
  • Remove default binaries values in plugins (aac28c491ead836231e7487a8ebea056d0cf16cc)
  • Remove default containingFilePath value in angular plugin (92089275df7752a830c171d8d1d4cb39b0a83565)
  • Add isRootOnly to pnpm plugin (fe99f594ac79c2bb3590091651300062b690a12b)
  • Move/extend docs to write plugin (497bddb5479a53d59baaa078225343a621eaa317)
  • feat: add time & unzip to ignored binaries (#1276) (4f8d9df599ffaba171e2535ffe61153f4ce1089a) - thanks @​nyarthan!
  • Add Rstest Plugin (#1277) (5b7d92f101153294708a3d1afe8d2c4d61595116) - thanks @​nyarthan!
  • Edit docs (847ccf168776f2cb6c9b5108a208ea8eae12799f)
  • feat: add plugin for bumpp (#1278) (136a14bc4ff4138389a831afc62f5406f66223a5) - thanks @​nyarthan!
  • Support input resolver from args in plugins (resolve #1274) (19dd367764fa078fb9c93bb0a715492ff0581098)
  • Edit docs (77d683e2b75b44c7fd5fc47b59621398b86028ea)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) from 5.63.1 to 5.64.0.
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Changelog](https://github.com/webpro-nl/knip/blob/main/packages/knip/.release-it.json)
- [Commits](https://github.com/webpro-nl/knip/commits/5.64.0/packages/knip)

---
updated-dependencies:
- dependency-name: knip
  dependency-version: 5.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedknip@​5.63.1 ⏵ 5.64.0100 +2100100 +8100 +6100

View full report

@socket-security-staging
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedknip@​5.63.1 ⏵ 5.64.099 +110093 +195 +2100

View full report

@jdalton jdalton closed this Oct 1, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 1, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/knip-5.64.0 branch October 1, 2025 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants