Bump smol-toml from 1.6.1 to 1.8.0 #16438

Open
dependabot[bot] opened 4:48pm on September 10, 2026 wants to merge 1 commit into microsoft/react-native-windows main from
dependabot/npm_and_yarn/smol-toml-1.8.0

Pull Request Overview

  • Opened on September 10, 2026
  • Status Open
  • Commit count 1 with first commit September 10, 2026

Total Delta

0 Total Diff Delta

Open Days

Open 7 weekdays

Test Delta

0 Diff Delta in Test Files
Breakdown by Phase

How long has this pull request spent in each phase of its lifecycle?

Fraction of total time Business days Phase
 
0.0 days Authoring 1 commit before pull request opened for review
 
0.0 days Awaiting first review
 
6.0 days Revising work with 0 commits in response to 1 review that left 2 comments

Total time for pull request still awaiting merge (longer than repo's target): 6.0 business days

Author avatar

Bump smol-toml from 1.6.1 to 1.8.0

Bumps smol-toml from 1.6.1 to 1.8.0.

Release notes

Sourced from smol-toml's releases.



v1.8.0


What's Changed



Full Changelog: https://github.com/squirrelchat/smol-toml/compare/v1.7.2...v1.8.0


v1.7.2


What's Changed



Full Changelog: https://github.com/squirrelchat/smol-toml/compare/v1.7.1...v1.7.2


v1.7.1


This release includes flagging internal functions as @internal to strip them from the emitted type declarations.


āš ļø Includes a fix for GHSA-7w5x-hrqm-74c2


Full Changelog: https://github.com/squirrelchat/smol-toml/compare/v1.7.0...v1.7.1


v1.7.0


This version slightly changes the behaviour of stringify: integers beyond the safe range are always emitted as float numbers.


String decode logic has been rewritten, it is a bit faster now and uses a single-pass approach instead of a dual-pass approach as it did previously. The code should be a bit smaller too, though I didn't actually measure that.


The package is now published with source-maps, declaration-maps, and a copy of the original TypeScript source files. This will improve your DX if you're like me and like Ctrl+Click'ing things a lot. ;)


What's Changed



New Contributors



Full Changelog: https://github.com/squirrelchat/smol-toml/compare/v1.6.1...v1.7.0


Commits



  • 6d0f477 chore: bump version


  • 97e9713 docs: mention temporal api


  • 7a3068d perf: ubench opt for instanceof Date


  • 7e8c09a feat: stringify temporal


  • 19239d0 chore: bump version


  • 5f55c3a chore: revert sourcemap publishing


  • 5c26f1b chore: update benchmarks


  • 92832d2 refactor: better logic orchestration in structs


  • 2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns


  • e6017c4 ci: use staged publish

  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/react-native-windows/network/alerts).

###### Microsoft Reviewers: Open in CodeFlow

Comments Threads Pending Resolution

ljharb reviewed on September 10, 2026
ljharb left a comment

Copilot wasn't able to review any files in this pull request.

---

šŸ’” Add a `code-review` agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Resolved Comment Threads

No resolved comments have been left on this PR.