deps: bump the minor-and-patch group across 3 directories with 7 updates by dependabot[bot] · Pull Request #450 · SecureAuthCorp/ciam-quickstart-samples

dependabot · 2026-10-01T20:35:32Z

Bumps the minor-and-patch group with 6 updates in the /samples/node/login-auth-code directory:

Package	From	To
dotenv	`18.0.2`	`18.0.4`
@types/node	`26.6.2`	`26.6.3`
prettier	`3.9.8`	`3.9.9`
supertest	`7.2.2`	`7.3.0`
vite	`8.3.0`	`8.3.1`
vitest	`5.0.1`	`5.0.2`

Bumps the minor-and-patch group with 7 updates in the /samples/node/saml-sp-login directory:

Package	From	To
dotenv	`18.0.2`	`18.0.4`
@types/node	`26.6.2`	`26.6.3`
prettier	`3.9.8`	`3.9.9`
supertest	`7.2.2`	`7.3.0`
vite	`8.3.0`	`8.3.1`
vitest	`5.0.1`	`5.0.2`
@node-saml/passport-saml	`5.1.0`	`5.1.1`

Bumps the minor-and-patch group with 6 updates in the /samples/node/token-refresh directory:

Package	From	To
dotenv	`18.0.2`	`18.0.4`
@types/node	`26.6.2`	`26.6.3`
prettier	`3.9.8`	`3.9.9`
supertest	`7.2.2`	`7.3.0`
vite	`8.3.0`	`8.3.1`
vitest	`5.0.1`	`5.0.2`

Updates dotenv from 18.0.2 to 18.0.4

Changelog

Sourced from dotenv's changelog.

18.0.4 (2026-09-25)

Changed

import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

Commits

86804c0 18.0.4
2403db5 changelog
75b775e npm audit
7e1750c Merge pull request #1064 from motdotla/dependabot/npm_and_yarn/ip-address-10.7.2
a6ade63 Merge pull request #1063 from motdotla/import
288b0d7 patch test
00da912 Bump ip-address from 10.2.0 to 10.7.2
e6b5816 import 'dotenv/config' should still be defaulting to quiet
3646ac5 Merge pull request #1061 from motdotla/fast
83fc961 report dotenv vs native vs dotenv.fast
Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.3

Commits

See full diff in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
See full diff in compare view

Updates supertest from 7.2.2 to 7.3.0

Release notes

Sourced from supertest's releases.

v7.3.0

fix: stabilize ephemeral server requests and assertions 71dc5fb

Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd8535d99 3b5ba5c

Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2.3.2 c3419b2

Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1 7e409db

Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expansion-1.1.21 b55a7f9

Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslist-4.29.0 7a5deaa

Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8 a75f6ee

Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2 c2cb33e

Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind 7fb34e7

chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 c357584

chore(deps-dev): bump browserslist from 4.25.1 to 4.29.0 2a01b57

chore(deps-dev): bump fast-uri from 3.0.6 to 3.1.8 343394d

chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.21 6b203e9

Merge pull request #881 from forwardemail/dependabot/npm_and_yarn/qs-6.14.2 d40ca7e

fix: match ephemeral server address family b6f5995

chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 81766ca

chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 985ac7c

chore(deps): bump minimatch 58baa5f

chore(deps): bump qs from 6.14.1 to 6.14.2 c406e82

forwardemail/supertest@v7.2.2...v7.3.0

Commits

a3f5cb8 7.3.0
71dc5fb fix: stabilize ephemeral server requests and assertions
3b5ba5c Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd85...
c3419b2 Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2...
7e409db Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1
b55a7f9 Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expan...
7a5deaa Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslis...
a75f6ee Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8
c2cb33e Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2
7fb34e7 Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind
Additional commits viewable in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Commits

39ddf7c release: v8.3.1 (#23573)
f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
e8990c4 fix(deps): update all non-major dependencies (#23537)
af7cdf6 refactor: replace find with some (#23554)
39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
9abd99b refactor: remove duplicate configurations (#23532)
Additional commits viewable in compare view

Updates vitest from 5.0.1 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

ui:

Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

View changes on GitHub

Commits

428e2e5 chore: release v5.0.2 (#11357)
0b79231 fix: bind process in case global is overwritten (#11343)
597df56 docs: correct stale config defaults (#11354)
ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
1a57929 docs(browser): fix locators.exact default (#11338)
5b95efb fix(reporter): agent to respect --silent (#11271)
f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
Additional commits viewable in compare view

Updates dotenv from 18.0.2 to 18.0.4

Changelog

Sourced from dotenv's changelog.

18.0.4 (2026-09-25)

Changed

import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

Patch DOTENV_QUIET setting when inside .env file (#1059)

Commits

86804c0 18.0.4
2403db5 changelog
75b775e npm audit
7e1750c Merge pull request #1064 from motdotla/dependabot/npm_and_yarn/ip-address-10.7.2
a6ade63 Merge pull request #1063 from motdotla/import
288b0d7 patch test
00da912 Bump ip-address from 10.2.0 to 10.7.2
e6b5816 import 'dotenv/config' should still be defaulting to quiet
3646ac5 Merge pull request #1061 from motdotla/fast
83fc961 report dotenv vs native vs dotenv.fast
Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.3

Commits

See full diff in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
See full diff in compare view

Updates supertest from 7.2.2 to 7.3.0

Release notes

Sourced from supertest's releases.

v7.3.0

fix: stabilize ephemeral server requests and assertions 71dc5fb

Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd8535d99 3b5ba5c

Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2.3.2 c3419b2

Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1 7e409db

Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expansion-1.1.21 b55a7f9

Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslist-4.29.0 7a5deaa

Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8 a75f6ee

Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2 c2cb33e

Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind 7fb34e7

chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 c357584

chore(deps-dev): bump browserslist from 4.25.1 to 4.29.0 2a01b57

chore(deps-dev): bump fast-uri from 3.0.6 to 3.1.8 343394d

chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.21 6b203e9

Merge pull request #881 from forwardemail/dependabot/npm_and_yarn/qs-6.14.2 d40ca7e

fix: match ephemeral server address family b6f5995

chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 81766ca

chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 985ac7c

chore(deps): bump minimatch 58baa5f

chore(deps): bump qs from 6.14.1 to 6.14.2 c406e82

forwardemail/supertest@v7.2.2...v7.3.0

Commits

a3f5cb8 7.3.0
71dc5fb fix: stabilize ephemeral server requests and assertions
3b5ba5c Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd85...
c3419b2 Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2...
7e409db Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1
b55a7f9 Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expan...
7a5deaa Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslis...
a75f6ee Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8
c2cb33e Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2
7fb34e7 Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind
Additional commits viewable in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Commits

39ddf7c release: v8.3.1 (#23573)
f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
e8990c4 fix(deps): update all non-major dependencies (#23537)
af7cdf6 refactor: replace find with some (#23554)
39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
9abd99b refactor: remove duplicate configurations (#23532)
Additional commits viewable in compare view

Updates vitest from 5.0.1 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

ui:

Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

View changes on GitHub

Commits

428e2e5 chore: release v5.0.2 (#11357)
0b79231 fix: bind process in case global is overwritten (#11343)
597df56 docs: correct stale config defaults (#11354)
ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
1a57929 docs(browser): fix locators.exact default (#11338)
5b95efb fix(reporter): agent to respect --silent (#11271)
f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
Additional commits viewable in compare view

Updates @node-saml/passport-saml from 5.1.0 to 5.1.1

Release notes

Sourced from @node-saml/passport-saml's releases.

v5.1.1

Prefix package.json repository URL with git+ (ec417f7f)

Modernize and correct the README examples (#992) (00d72d36)

Update README sponsors and badges (#990) (fd528d71)

Update CI actions and test on current Node LTS versions (#989) (c614392b)

Update dependencies within their current majors (#987) (bd2ff592)

Document how RelayState flows through login and logout (#986) (0a0b2a4d)

Bump actions/checkout from 3 to 4 (#903) (eb1a6e2e)

Update documentation for Express v5 (#967) (96235361)

Changelog

Sourced from @node-saml/passport-saml's changelog.

5.1.1 (2026-09-28)

🔗 Dependencies

[github_actions] Update CI actions and test on current Node LTS versions #989

Update dependencies within their current majors #987

[github_actions] [stale] Bump actions/checkout from 3 to 4 #903

📚 Documentation

Modernize and correct the README examples #992

Update README sponsors and badges #990

Document how RelayState flows through login and logout #986

🙈 Other

Update documentation for Express v5 #967

Commits

291073e Release 5.1.1
ec417f7 Prefix package.json repository URL with git+
00d72d3 Modernize and correct the README examples (#992)
fd528d7 Update README sponsors and badges (#990)
c614392 Update CI actions and test on current Node LTS versions (#989)
bd2... Description has been truncated

Bumps the minor-and-patch group with 6 updates in the /samples/node/login-auth-code directory: | Package | From | To | | --- | --- | --- | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.2` | `18.0.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.3` | | [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` | | [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.2` | Bumps the minor-and-patch group with 7 updates in the /samples/node/saml-sp-login directory: | Package | From | To | | --- | --- | --- | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.2` | `18.0.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.3` | | [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` | | [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.2` | | [@node-saml/passport-saml](https://github.com/node-saml/passport-saml) | `5.1.0` | `5.1.1` | Bumps the minor-and-patch group with 6 updates in the /samples/node/token-refresh directory: | Package | From | To | | --- | --- | --- | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.2` | `18.0.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.3` | | [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` | | [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.2` | Updates `dotenv` from 18.0.2 to 18.0.4 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.2...v18.0.4) Updates `@types/node` from 26.6.2 to 26.6.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) Updates `supertest` from 7.2.2 to 7.3.0 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v7.2.2...v7.3.0) Updates `vite` from 8.3.0 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) Updates `vitest` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) Updates `dotenv` from 18.0.2 to 18.0.4 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.2...v18.0.4) Updates `@types/node` from 26.6.2 to 26.6.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) Updates `supertest` from 7.2.2 to 7.3.0 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v7.2.2...v7.3.0) Updates `vite` from 8.3.0 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) Updates `vitest` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) Updates `@node-saml/passport-saml` from 5.1.0 to 5.1.1 - [Release notes](https://github.com/node-saml/passport-saml/releases) - [Changelog](https://github.com/node-saml/passport-saml/blob/master/CHANGELOG.md) - [Commits](node-saml/passport-saml@v5.1.0...v5.1.1) Updates `dotenv` from 18.0.2 to 18.0.4 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.2...v18.0.4) Updates `@types/node` from 26.6.2 to 26.6.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) Updates `supertest` from 7.2.2 to 7.3.0 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v7.2.2...v7.3.0) Updates `vite` from 8.3.0 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) Updates `vitest` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) --- updated-dependencies: - dependency-name: dotenv dependency-version: 18.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: supertest dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 5.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dotenv dependency-version: 18.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: supertest dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 5.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@node-saml/passport-saml" dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: dotenv dependency-version: 18.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: supertest dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 5.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026

dependabot Bot requested a review from ksroda-sa as a code owner October 1, 2026 20:35

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026

svcdevopsgit2-sa approved these changes Oct 1, 2026

View reviewed changes

svcdevopsgit2-sa enabled auto-merge (squash) October 1, 2026 20:35

chore: regenerate snippets for dependency bump

0d1e0b8

svcdevopsgit2-sa approved these changes Oct 1, 2026

View reviewed changes

svcdevopsgit2-sa requested a review from a team as a code owner October 1, 2026 20:35

Navigation Menu

deps: bump the minor-and-patch group across 3 directories with 7 updates - #450

deps: bump the minor-and-patch group across 3 directories with 7 updates#450
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/samples/node/login-auth-code/minor-and-patch-b0e68c917f

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

18.0.4 (2026-09-25)

Changed

18.0.3 (2026-09-22)

Changed

3.9.9

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

v7.3.0

v8.3.1

Bug Fixes

Miscellaneous Chores

Code Refactoring

8.3.1 (2026-09-24)

Bug Fixes

Miscellaneous Chores

Code Refactoring

v5.0.2

🐞 Bug Fixes

View changes on GitHub

18.0.4 (2026-09-25)

Changed

18.0.3 (2026-09-22)

Changed

3.9.9

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

v7.3.0

v8.3.1

Bug Fixes

Miscellaneous Chores

Code Refactoring

8.3.1 (2026-09-24)

Bug Fixes

Miscellaneous Chores

Code Refactoring

v5.0.2

🐞 Bug Fixes

View changes on GitHub

v5.1.1

5.1.1 (2026-09-28)

🔗 Dependencies

📚 Documentation

🙈 Other

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)