chore(deps)(deps-dev): bump the dev-dependencies group with 4 updates

[dependabot]

Bumps the dev-dependencies group with 4 updates: @types/react, cspell, vitest and wrangler.

Updates @types/react from 19.2.8 to 19.2.9

Commits

• See full diff in compare view

Updates cspell from 9.6.0 to 9.6.1

Release notes

Sourced from cspell's releases.

v9.6.1

Fixes

fix: Move performance monitoring into its own package (#8431)

Pull request overview

This PR extracts performance monitoring functionality from multiple packages into a new dedicated package @cspell/cspell-performance-monitor. The new package provides a centralized, conditionally-enabled performance measurement system using the standard Performance API.

Changes:

• Created a new @cspell/cspell-performance-monitor package with improved performance measurement functions that can be conditionally enabled/disabled
• Migrated and removed duplicate performance measurement code from cspell-lib, cspell-dictionary, and cspell-trie-lib packages
• Updated performance measurement calls to use the new disposable pattern (using _ = measurePerf()) that leverages TypeScript's explicit resource management

---

fix: Add NotifyEmitter (#8423)

Pull request overview

This pull request adds a new NotifyEmitter class to provide a reusable event notification system based on the Disposable pattern. The PR refactors the RPC server test to use this new event emitter pattern instead of a custom AsyncMessageQueue implementation, resulting in cleaner and more maintainable code.

Changes:

• Introduces NotifyEmitter class with NotifyEvent pattern for event handling with automatic cleanup via Symbol.dispose
• Adds helper functions notifyEventToPromise and notifyEventOnce for working with notify events
• Creates MessagePortEvents wrapper class to adapt MessagePort events to the NotifyEmitter pattern
• Refactors server.test.ts to use the new event system, removing the custom AsyncMessageQueue implementation
• Adds result?: unknown field to RPCResponse interface for more consistent type handling
• Exports new notify-related types and functions through the public API

---

refactor: Adjust RPC interface to use a config (#8420)

Pull request overview

Refactors the RPC client/server APIs (and cspell RPC wrappers) to accept a single configuration object, and updates worker integration and tests accordingly.

... (truncated)

Changelog

Sourced from cspell's changelog.

v9.6.1 (2026-01-25)

Fixes

fix: Move performance monitoring into its own package (#8431)

Pull request overview

This PR extracts performance monitoring functionality from multiple packages into a new dedicated package @cspell/cspell-performance-monitor. The new package provides a centralized, conditionally-enabled performance measurement system using the standard Performance API.

Changes:

• Created a new @cspell/cspell-performance-monitor package with improved performance measurement functions that can be conditionally enabled/disabled
• Migrated and removed duplicate performance measurement code from cspell-lib, cspell-dictionary, and cspell-trie-lib packages
• Updated performance measurement calls to use the new disposable pattern (using _ = measurePerf()) that leverages TypeScript's explicit resource management

---

fix: Add NotifyEmitter (#8423)

Pull request overview

This pull request adds a new NotifyEmitter class to provide a reusable event notification system based on the Disposable pattern. The PR refactors the RPC server test to use this new event emitter pattern instead of a custom AsyncMessageQueue implementation, resulting in cleaner and more maintainable code.

Changes:

• Introduces NotifyEmitter class with NotifyEvent pattern for event handling with automatic cleanup via Symbol.dispose
• Adds helper functions notifyEventToPromise and notifyEventOnce for working with notify events
• Creates MessagePortEvents wrapper class to adapt MessagePort events to the NotifyEmitter pattern
• Refactors server.test.ts to use the new event system, removing the custom AsyncMessageQueue implementation
• Adds result?: unknown field to RPCResponse interface for more consistent type handling
• Exports new notify-related types and functions through the public API

---

refactor: Adjust RPC interface to use a config (#8420)

... (truncated)

Commits

• 666fb79 v9.6.1
• f8dd04f chore: Prepare Release v9.6.1 (auto-deploy) (#8359)
• 3027639 fix: Workflow Bot -- Update Dictionaries (main) (#8433)
• 003d043 fix: Move performance monitoring into its own package (#8431)
• d639a82 refactor: Adjust RPC interface to use a config (#8420)
• d6df82f refactor: Refactor CLI to make it easier to spell check files in parallel (#8...
• ae820e3 refactor: Refactor settings a bit (#8385)
• fd9da28 fix: report errors in spelling result. (#8381)
• baf6109 refactor: Clean Up CSpell Worker (#8372)
• 1fb26dc fix: Add CSpellRPCServer and CSpellRPCClient classes (#8366)
• Additional commits viewable in compare view

Updates vitest from 4.0.17 to 4.0.18

Release notes

Sourced from vitest's releases.

v4.0.18

   🚀 Experimental Features

• experimental: Add onModuleRunner hook to worker.init  -  by @​sheremet-va in vitest-dev/vitest#9286 (ea837)

   🐞 Bug Fixes

• Use meta.url in createRequire  -  by @​sheremet-va in vitest-dev/vitest#9441 (e0572)
• browser: Hide injected data-testid attributes  -  by @​sheremet-va in vitest-dev/vitest#9503 (f8989)
• ui: Process artifact attachments when generating HTML reporter  -  by @​macarie in vitest-dev/vitest#9472 (22543)

    View changes on GitHub

Commits

• 4d3e3c6 chore: release v4.0.18
• ea837de feat(experimental): add onModuleRunner hook to worker.init (#9286)
• e057281 fix: use meta.url in createRequire (#9441)
• See full diff in compare view

Updates wrangler from 4.59.2 to 4.60.0

Release notes

Sourced from wrangler's releases.

wrangler@4.60.0

Minor Changes

• #11113 bba0968 Thanks @​AmirSa12! - Add wrangler complete command for shell completion scripts (bash, zsh, powershell)

  Usage:

  # Bash
  wrangler complete bash >> ~/.bashrc
  Zsh
  wrangler complete zsh >> ~/.zshrc
  Fish
  wrangler complete fish >> ~/.config/fish/completions/wrangler.fish
  PowerShell
  wrangler complete powershell > $PROFILE

  • Uses @bomb.sh/tab library for cross-shell compatibility
  • Completions are dynamically generated from experimental_getWranglerCommands() API

• #11893 f9e8a45 Thanks @​NuroDev! - wrangler types now generates per-environment TypeScript interfaces when named environments exist in your configuration.

  When your configuration has named environments (an env object), wrangler types now generates both:

  • Per-environment interfaces (e.g., StagingEnv, ProductionEnv) containing only the bindings explicitly declared in each environment, plus inherited secrets
  • An aggregated Env interface with all bindings from all environments (top-level + named environments), where:
    • Bindings present in all environments are required
    • Bindings not present in all environments are optional
    • Secrets are always required (since they're inherited everywhere)
    • Conflicting binding types across environments produce union types (e.g., KVNamespace | R2Bucket)

  However, if your config does not contain any environments, or you manually specify an environment via --env, wrangler types will continue to generate a single interface as before.

  Example:

  Given the following wrangler.jsonc:

  {
  	"name": "my-worker",
  	"kv_namespaces": [
  		{
  			"binding": "SHARED_KV",
  			"id": "abc123",
  		},
  	],

... (truncated)

Commits

• fb0e101 Version Packages (#12021)
• 1375577 fix: typo'd arg name for d1 insights --time-period (#12039)
• bba0968 feat(wrangler/cli): add @bomb.sh/tab completions (#11113)
• f9e8a45 Generate types for all bindings across all environments (#11893)
• 614bbd7 Add support for increased Pages max asset limit in the pages validate… (#12030)
• ae108f0 feat(unenv-preset): Remove the experimental flag from _stream_wrap, … (#12024)
• c3407ad Fix wrangler setup not automatically selecting the workers as the target ...
• 788bf78 chore(deps): bump the workerd-and-workers-types group with 2 updates (#11993)
• 0c7e1f4 Version Packages (#11937)
• 75386b1 Always pass a valid redirect_uri callback parameter (localhost:8976) to C...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Assignees

The following users could not be added as assignees: aicodingstack/maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Preview deployment

Status	URL
Ready	https://pr-82-aicodingstack.pr-preview.workers.dev

Commit: ea5778e
Updated: 2026-01-26T13:10:28.293Z