Skip to content

Bump globals from 17.7.0 to 17.8.0 - #318

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/globals-17.8.0
Open

Bump globals from 17.7.0 to 17.8.0#318
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/globals-17.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps globals from 17.7.0 to 17.8.0.

Release notes

Sourced from globals's releases.

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 27, 2026 04:10
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Jul 27, 2026
@dependabot
dependabot Bot requested a review from tjugdev July 27, 2026 04:10
@fossabot

fossabot Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

✓ Safe to upgrade

I recommend merging this upgrade because it is a purely additive minor version bump to the globals package, which is used exclusively in eslint.config.mjs for ESLint environment configuration. The upgrade introduces additional globals into various browser/worker/Deno scopes and corrects the placement of AsyncDisposableStack into the universal global scope — none of which affect the three specific global sets consumed by this project (globals.browser, globals.node, globals.mocha). No breaking changes, removed APIs, or compatibility issues were detected. The reported runtime version note (package requiring Node 18, project running Node 24) reflects full compatibility — Node 24 satisfies the Node 18+ minimum requirement. This is a safe, low-risk developer tooling update.

What we checked

  • The globals package is imported exclusively in the ESLint configuration file — it has no presence in application source code. [1]
  • globals.browser is spread and all entries are set to "off" — this project explicitly disables browser globals. Additive changes to the browser global set in the new version simply add more disabled entries, with no linting behavior change. [2]
  • globals.node is spread to enable Node.js built-ins as recognized globals. The new version makes no changes to the node global set, so linting behavior for Node.js code is unaffected. [3]
  • globals.mocha is spread to recognize Mocha test globals. The new version makes no changes to the mocha global set, so test file linting is unaffected. [4]
  • Dependency declared as "globals": "^17.8.0" — the caret range confirms this is a minor/patch upgrade path, and the lockfile update is consistent with a non-breaking change. [5]
  • All detected package source changes in this version are additive: new CSS Object Model globals added to audioWorklet, serviceWorker, and dedicatedWorker scopes; AsyncDisposableStack moved to universal global scope; new globals added to Deno scope (Lock, LockManager, NavigatorUAData, nodeBootstrap). None of these scopes are referenced in this project's ESLint config. [6]

Dependency Usage

The globals package is used exclusively within the project's developer tooling layer — specifically in eslint.config.mjs — and has no presence in application source code. It provides predefined global variable sets (globals.browser, globals.node, globals.mocha) to configure ESLint's linting environment, ensuring the linter correctly recognizes built-in globals for Node.js and Mocha test contexts while explicitly disabling browser globals. This is a pure developer experience dependency that enforces code quality standards without impacting any runtime business functionality.

  • The globals package is imported exclusively in the ESLint configuration file — it has no presence in application source code.
    import globals from "globals";
  • globals.browser is spread and all entries are set to "off" — this project explicitly disables browser globals. Additive changes to the browser global set in the new version simply add more disabled entries, with no linting behavior change.
    ...Object.fromEntries(Object.entries(globals.browser).map(([key]) => [key, "off"])),
View 2 more usages
  • globals.node is spread to enable Node.js built-ins as recognized globals. The new version makes no changes to the node global set, so linting behavior for Node.js code is unaffected.
    ...globals.node,
  • globals.mocha is spread to recognize Mocha test globals. The new version makes no changes to the mocha global set, so test file linting is unaffected.
    ...globals.mocha,

Changes

The globals package was updated with a bug fix that moves AsyncDisposableStack from environment-specific scopes to the universal global scope, correcting its availability across all environments. New globals were also added across multiple scopes, including CSS Object Model APIs for audioWorklet, serviceWorker, and dedicatedWorker, plus Lock/LockManager, NavigatorUAData, and nodeBootstrap for Deno.

  • Update globals (2026-07-01) (#347) 7394811 (v17.7.0-17.8.0, release notes)
  • Moved AsyncDisposableStack from environment-specific scopes (audioWorklet, window, worker, nodeWorker, paintWorklet, serviceWorker, sharedNodeBrowser) to universal global scope - now correctly identified as available in all environments (v17.8.0, package source)
  • Added CSS Object Model globals to audioWorklet: CSSImageValue, CSSKeywordValue, CSSMathClamp, CSSMathInvert, CSSMathMax, CSSMathMin, CSSMathNegate, CSSMathProduct, CSSMathSum, CSSMathValue, CSSNumericArray, CSSNumericValue, CSSStyleValue, CSSUnitValue, CSSUnparsedValue, CSSVariableReferenceValue (v17.8.0, package source)
View 8 more changes
  • Added CSS Object Model globals to serviceWorker and dedicatedWorker: CSSImageValue, CSSKeywordValue, CSSMathClamp, CSSMathInvert, CSSMathMax, CSSMathMin, CSSMathNegate, CSSMathProduct, CSSMathSum, CSSMathValue, CSSMatrixComponent, CSSNumericArray, CSSNumericValue, CSSPerspective, CSSRotate, CSSScale, CSSSkew, CSSStyleValue, CSSTransformComponent, CSSTransformValue, CSSTranslate, CSSUnitValue, CSSUnparsedValue, CSSVariableReferenceValue (v17.8.0, package source)
  • Added StylePropertyMapReadOnly to audioWorklet and serviceWorker scopes (v17.8.0, package source)
  • Added HTMLUserMediaElement to window scope (v17.8.0, package source)
  • Added InteractionContentfulPaint to window scope (v17.8.0, package source)
  • Added PerformanceSoftNavigation to window scope (v17.8.0, package source)
  • Added Lock and LockManager to Deno global scope (v17.8.0, package source)
  • Added NavigatorUAData and nodeBootstrap to Deno global scope (v17.8.0, package source)
  • Updated dev dependency puppeteer from ^25.1.0 to ^25.2.1 (v17.8.0, package source)
References (6)

[1]: The globals package is imported exclusively in the ESLint configuration file — it has no presence in application source code.

import globals from "globals";

[2]: globals.browser is spread and all entries are set to "off" — this project explicitly disables browser globals. Additive changes to the browser global set in the new version simply add more disabled entries, with no linting behavior change.

...Object.fromEntries(Object.entries(globals.browser).map(([key]) => [key, "off"])),

[3]: globals.node is spread to enable Node.js built-ins as recognized globals. The new version makes no changes to the node global set, so linting behavior for Node.js code is unaffected.

...globals.node,

[4]: globals.mocha is spread to recognize Mocha test globals. The new version makes no changes to the mocha global set, so test file linting is unaffected.

...globals.mocha,

[5]: Dependency declared as "globals": "^17.8.0" — the caret range confirms this is a minor/patch upgrade path, and the lockfile update is consistent with a non-breaking change.

"globals": "^17.8.0",

[6]: All detected package source changes in this version are additive: new CSS Object Model globals added to audioWorklet, serviceWorker, and dedicatedWorker scopes; AsyncDisposableStack moved to universal global scope; new globals added to Deno scope (Lock, LockManager, NavigatorUAData, nodeBootstrap). None of these scopes are referenced in this project's ESLint config. (source link)


fossabot analyzed this PR using static analysis and dependency research. View this analysis on the web

@fossabot

fossabot Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

fossabot is Thinking

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/globals-17.8.0 branch from 4f984f2 to e68d3ba Compare July 29, 2026 21:01
Bumps [globals](https://github.com/sindresorhus/globals) from 17.7.0 to 17.8.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.8.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/globals-17.8.0 branch from e68d3ba to 66b88fe Compare July 30, 2026 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants