build(deps): bump the npm_and_yarn group across 1 directory with 10 updates - #17
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the npm_and_yarn group across 1 directory with 10 updates#17dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.1.11` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.13` | `1.1.18` | | [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) | `0.16.6` | `0.16.8` | | [undici](https://github.com/nodejs/undici) | `6.24.1` | `6.28.1` | | [undici](https://github.com/nodejs/undici) | `7.24.2` | `7.29.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.3.2` | Updates `sharp` from 0.34.5 to 0.35.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.4) Updates `vitest` from 3.2.4 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) Updates `brace-expansion` from 1.1.13 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.13...v1.1.18) Updates `@humanfs/node` from 0.16.6 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `undici` from 6.24.1 to 6.28.1 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.24.1...v6.28.1) Updates `undici` from 7.24.2 to 7.29.1 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.24.1...v6.28.1) Updates `js-yaml` from 4.1.1 to 4.3.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.1...4.3.2) Updates `nanoid` from 3.3.11 to 3.3.18 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md) - [Commits](ai/nanoid@3.3.11...3.3.18) Updates `postcss` from 8.5.6 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.28) Updates `picomatch` from 4.0.3 to 4.0.7 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@4.0.3...4.0.7) Updates `vite` from 7.3.2 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.4 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 6.28.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 7.29.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.28 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 4.0.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 8.2.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This was referenced Sep 9, 2026
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 6 updates in the / directory:
0.34.50.35.43.2.44.1.111.1.131.1.180.16.60.16.86.24.16.28.17.24.27.29.14.1.14.3.2Updates
sharpfrom 0.34.5 to 0.35.4Release notes
Sourced from sharp's releases.
... (truncated)
Commits
7f1a0a2Release v0.35.4f927818Upgrade to sharp-libvips v1.3.3e802092Prerelease v0.35.4-rc.0e13eb2fCI: Fix wasm32 build (#4589)a82a0b3Upgrade to libvips v8.18.68044fe4Bound resize dimensions to coordinate limit147f859Docs: changelog entries for #4578 #4584ee5bfb8Tests: use yauzl directly rather than via extract-zip wrapper7a77889Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)ea5bef2Improve support for input Streams finishing before output is requested (#4584)Updates
vitestfrom 3.2.4 to 4.1.11Release notes
Sourced from vitest's releases.
... (truncated)
Commits
9bd8d46chore: release v4.1.11 (#10995)9851dbcfix(browser): trigger playwright/chromium gc on lower disk availability [back...db616d2chore: release v4.1.10 (#10718)bae52b5fix(vm): fix external module resolve error with deps optimizer query for enco...a7a61e7chore: release v4.1.9 (#10598)934b0f5fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...7fb2965fix(browser): wait for orchestrator readiness before resolving browser sessio...a518019fix: fiximportOriginalwith optimizer and query import [backport to v4] (#...e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.
Updates
brace-expansionfrom 1.1.13 to 1.1.18Release notes
Sourced from brace-expansion's releases.
Commits
758fcd61.1.1827fbeedMerge commit from fork5c57cc21.1.17d757f1dnpm ignore.claudecb4b9e4fix: backport GHSA-mh99-v99m-4gvg (#129)447763a1.1.16d74e630fix: v1 backport for CVE-2026-13149 (#122)2203f4f1.1.150b09384Backport v5.0.6 change to v1 (#111)10c05fc1.1.14Updates
@humanfs/nodefrom 0.16.6 to 0.16.8Release notes
Sourced from @humanfs/node's releases.
Changelog
Sourced from @humanfs/node's changelog.
Commits
e96070echore: release main (#146)22bbaa4Merge commit from fork956ce7afix: Include type dependencies at runtime257b7b5chore: release main (#142)f691b60fix: Add directory to package.json7b81d9achore(deps): Upgrading retry dependency in node package. (#140)Updates
undicifrom 6.24.1 to 6.28.1Release notes
Sourced from undici's releases.
... (truncated)
Commits
ffc8aa0Bumped v6.28.1 (#5773)3866a3bperf(h1): drop idle-socket timer floor with a ref'd setImmediate (#5707) (#5770)ce31bc8fix(retry): validate resumed response framing2af0faffix(websocket): reject unrequested subprotocols07c60d9fix(websocket): destroy inflater after decompression limitbd90fffperf: reduce EventSourceStream parser allocations (#5032) (#5647)01a912eBumped v6.28.0 (#5591)481ecfcUse Node 22 and npm 11 to release740a0b7fix: validate blob body content type2698e49fix: validate coerced header values for CRLF (#5579)Updates
undicifrom 7.24.2 to 7.29.1Release notes
Sourced from undici's releases.
... (truncated)
Commits
ffc8aa0Bumped v6.28.1 (#5773)3866a3bperf(h1): drop idle-socket timer floor with a ref'd setImmediate (#5707) (#5770)ce31bc8fix(retry): validate resumed response framing2af0faffix(websocket): reject unrequested subprotocols07c60d9fix(websocket): destroy inflater after decompression limitbd90fffperf: reduce EventSourceStream parser allocations (#5032) (#5647)01a912eBumped v6.28.0 (#5591)481ecfcUse Node 22 and npm 11 to release740a0b7fix: validate blob body content type2698e49fix: validate coerced header values for CRLF (#5579)Updates
js-yamlfrom 4.1.1 to 4.3.2Changelog
Sourced from js-yaml's changelog.
... (truncated)
Commits
79ca68d4.3.2 releasedd90b661Backport merge limits from v5.4.186e91b84.3.1 releasedc3cc4b0Backport quadratic complexity fix for !!omap33d05b54.3.0 released663bfabDrop demo publish, to not override new v5 one.1cb8c7bAdd v4-legacy tag for publish02f27afRestore umd builds back to es58be84edFix es5 compatibility59423c6ReplacemaxMergeSeqLengthoption withmaxTotalMergeKeys(more robust). Ba...Updates
nanoidfrom 3.3.11 to 3.3.18Release notes
Sourced from nanoid's releases.
Changelog
Sourced from nanoid's changelog.
Commits
9ad9805Release 3.3.18 version55e50a0Update CI actione10f8d4Update index.native.js (#606)73d6716Release 3.3.17 versionf9d13f1Sync 0 size behaviour with PostCSS 59760e11Release 3.3.16 versione835c9bfix(non-secure): clamp negative size to prevent infinite loop (#601)96dd086Update CI actionba0bc3bDo not create latest release for v36819724Release 3.3.15 versionMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.
Updates
postcssfrom 8.5.6 to 8.5.28Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
e544bffRelease 8.5.28 versionf8fc252Typo5039fd7Add missed release notesae40ca4Release 8.5.27 version62b1626Fix linter1dba938Update dependencies3e82edcKeep non-annotation comments when the processor has no plugins (#2150)6d23bc3Fix link508e997Add GitHub Sponsors linke993739Add CodeRabbit sponsor (#2145)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.
Updates
picomatchfrom 4.0.3 to 4.0.7Release notes
Sourced from picomatch's releases.
Changelog
Sourced from picomatch's changelog.
Commits
6bb40674.0.7fdfb155Merge pull request #198 from micromatch/issue-14238c6b7a4.0.6ada9d3fMerge pull request #199 from micromatch/issue-589b74f6fMerge pull request #197 from micromatch/issue-62f201165fix: return complete pattern parts from scane279bd7fix: handle terminal globstars in parenthesized patterns5f5819dfix: scan full pattern when tokens are requested4f41a8e4.0.502cfc1bUpdate .verb.md and run verb to generate README documentationUpdates
vitefrom 7.3.2 to 8.2.2Release notes
Sourced from vite's releases.