Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 13 updates - #113

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-0b3065ecc2
Open

build(deps): bump the minor-and-patch group across 1 directory with 13 updates#113
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-0b3065ecc2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 13 updates in the / directory:

Package From To
dotenv 18.0.6 18.0.7
nodemailer 10.0.16 10.1.0
puppeteer 25.12.0 25.13.0
@remotion/bundler 4.0.534 4.0.535
@remotion/cli 4.0.534 4.0.535
@remotion/player 4.0.534 4.0.535
@remotion/renderer 4.0.534 4.0.535
@vitest/coverage-v8 5.0.3 5.0.4
marked 18.1.0 18.1.1
remotion 4.0.534 4.0.535
vitest 5.0.3 5.0.4
@atproto/api 0.23.1 0.25.0
viem 2.57.3 2.57.4

Updates dotenv from 18.0.6 to 18.0.7

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)
Commits
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • e411e02 changelog
  • 6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...
  • 9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet
  • c7161c6 fix(cli): honor quiet settings loaded from .env
  • 3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings
  • See full diff in compare view

Updates nodemailer from 10.0.16 to 10.1.0

Release notes

Sourced from nodemailer's releases.

v10.1.0

10.1.0 (2026-10-10)

Behaviour changes

  • Pooled connections are closed after 4 minutes without a message (new idleTimeout pool option, set it to 0 to keep them open). A message whose recipients are rejected no longer closes the pooled connection, it is reset with RSET and reused, and a message is requeued when the server dropped a reused connection before any of it was sent.
  • connectionTimeout covers setting the session up as a whole: the DNS lookup, a proxy handshake, the TCP connection, TLS, the greeting and a STARTTLS upgrade. greetingTimeout still bounds the greeting and the STARTTLS handshake within it.
  • Any 421 reply ends the SMTP session. When the server closes an idle connection, SMTPConnection emits only end, not an ECONNECTION error.
  • A content stream that was already read or destroyed fails the message with ESTREAM instead of producing an empty attachment. Content streams of a message that fails are destroyed.
  • With opportunisticTLS, authentication is skipped on the unencrypted connection after a failed STARTTLS, unless forceAuth is set.
  • The envelope is pipelined (MAIL FROM, RCPT TO and DATA in one batch) when the server announces PIPELINING.
  • Errors carry originalCode (the system error code Nodemailer replaced, such as ECONNREFUSED) and, for ETIMEDOUT, timeoutType.

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)
Changelog

Sourced from nodemailer's changelog.

10.1.0 (2026-10-10)

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)
Commits
  • 0780032 chore(master): release 10.1.0 (#1890)
  • 42b91d9 fix(qp): encode a lone CR or LF in binary quoted-printable parts
  • b9b8c84 test(smtp-pool): fail the clear event test with the pool state instead of han...
  • 4f1a34a test(smtp-connection): keep the scripted server silent after a stalled STARTTLS
  • f90fb04 fix(smtp-connection): drop the connection when DATA is taken after a refused ...
  • bdcd046 fix(smtp-connection): count the wait for the greeting against connectionTimeout
  • 751330a test(smtp-pool): measure the rate limit against a window wider than connecting
  • ec97d8f fix(mime-node): finish an encoded part only after its output was read
  • 24ba2e0 fix(smtp-connection): refuse a second connect() call
  • 91ed683 fix: let the proxy handshake and the SMTP connection share one deadline
  • Additional commits viewable in compare view

Updates puppeteer from 25.12.0 to 25.13.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.13.0

25.13.0 (2026-10-08)

🎉 Features

🛠️ Fixes

  • await browser process termination and run exit hooks after kill (#15522) (a281197)
  • cdp: disconnect the browser when the close callback fails (#15496) (e015f22)
  • cdp: extend emulateMediaFeatures to media features Chrome honors (#15495) (4758830)
  • cdp: settle worker evaluate and close when the script fails to load (#15501) (02c2a3d)
  • connect: preserve browserURL path prefixes (#15435) (8d816de)
  • launcher: remove the temporary profile when Firefox rejects pipes (#15499) (889a6b7)
  • remove injected scripts when clearing custom query handlers (#15507) (909853c)
  • use the shadow host when checking visibility of a text node in a shadow root (#15466) (d08c868)
  • webdriver: close the browser process when the BiDi close command fails (#15469) (9e5fefa)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.3 to 3.2.4

puppeteer: v25.13.0

25.13.0 (2026-10-08)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.3 to 3.2.4
      • puppeteer-core bumped from 25.12.0 to 25.13.0
Commits

Updates @remotion/bundler from 4.0.534 to 4.0.535

Release notes

Sourced from @​remotion/bundler's releases.

v4.0.535

What's Changed

... (truncated)

Commits
  • 0155f8c v4.0.535
  • 8f22797 Merge pull request #12212 from remotion-dev/codex/studio-premount-defaults
  • 4ccd106 Limit timeline item and caption tooltip length
  • 25f5668 Studio: Optimize premount selection subscriptions
  • f59df80 Merge pull request #12183 from saksham10arora-dotcom/docs/fix-issues-link
  • 2833854 Add internal remotion-new-markup skill
  • 602beb6 Merge pull request #12211 from remotion-dev/codex/scroll-sequence-inspector-h...
  • b4f6e09 Docs: Remove Studio default note from v5 migration guide
  • ae447ae Docs: Simplify default premount option description
  • 67293c1 Docs: Explain postmounting and reverse playback
  • Additional commits viewable in compare view

Updates @remotion/cli from 4.0.534 to 4.0.535

Release notes

Sourced from @​remotion/cli's releases.

v4.0.535

What's Changed

... (truncated)

Commits
  • 0155f8c v4.0.535
  • 8f22797 Merge pull request #12212 from remotion-dev/codex/studio-premount-defaults
  • 4ccd106 Limit timeline item and caption tooltip length
  • 25f5668 Studio: Optimize premount selection subscriptions
  • f59df80 Merge pull request #12183 from saksham10arora-dotcom/docs/fix-issues-link
  • 2833854 Add internal remotion-new-markup skill
  • 602beb6 Merge pull request #12211 from remotion-dev/codex/scroll-sequence-inspector-h...
  • b4f6e09 Docs: Remove Studio default note from v5 migration guide
  • ae447ae Docs: Simplify default premount option description
  • 67293c1 Docs: Explain postmounting and reverse playback
  • Additional commits viewable in compare view

Updates @remotion/player from 4.0.534 to 4.0.535

Release notes

Sourced from @​remotion/player's releases.

v4.0.535

What's Changed

@dependabot
build(deps): bump the minor-and-patch group across 1 directory with 1…
70b134d 
…3 updates

Bumps the minor-and-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.7` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.16` | `10.1.0` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `25.12.0` | `25.13.0` |
| [@remotion/bundler](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.535` |
| [@remotion/cli](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.535` |
| [@remotion/player](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.535` |
| [@remotion/renderer](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.535` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.4` |
| [marked](https://github.com/markedjs/marked) | `18.1.0` | `18.1.1` |
| [remotion](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.535` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.4` |
| [@atproto/api](https://github.com/bluesky-social/atproto/tree/HEAD/packages/api) | `0.23.1` | `0.25.0` |
| [viem](https://github.com/wevm/viem) | `2.57.3` | `2.57.4` |



Updates `dotenv` from 18.0.6 to 18.0.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.6...v18.0.7)

Updates `nodemailer` from 10.0.16 to 10.1.0
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.16...v10.1.0)

Updates `puppeteer` from 25.12.0 to 25.13.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v25.12.0...puppeteer-v25.13.0)

Updates `@remotion/bundler` from 4.0.534 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.535)

Updates `@remotion/cli` from 4.0.534 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.535)

Updates `@remotion/player` from 4.0.534 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.535)

Updates `@remotion/renderer` from 4.0.534 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.535)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8)

Updates `marked` from 18.1.0 to 18.1.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.1.0...v18.1.1)

Updates `remotion` from 4.0.534 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.535)

Updates `vitest` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest)

Updates `@atproto/api` from 0.23.1 to 0.25.0
- [Release notes](https://github.com/bluesky-social/atproto/releases)
- [Changelog](https://github.com/bluesky-social/atproto/blob/main/packages/api/CHANGELOG.md)
- [Commits](https://github.com/bluesky-social/atproto/commits/@atproto/api@0.25.0/packages/api)

Updates `viem` from 2.57.3 to 2.57.4
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.57.3...viem@2.57.4)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: puppeteer
  dependency-version: 25.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@remotion/bundler"
  dependency-version: 4.0.535
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@remotion/cli"
  dependency-version: 4.0.535
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@remotion/player"
  dependency-version: 4.0.535
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@remotion/renderer"
  dependency-version: 4.0.535
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: marked
  dependency-version: 18.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: remotion
  dependency-version: 4.0.535
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@atproto/api"
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: viem
  dependency-version: 2.57.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from nirholas as a code owner October 15, 2026 14:36
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nirholas nirholas Awaiting requested review from nirholas nirholas is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants