Skip to content

build(deps): bump the npm_and_yarn group across 1 directory with 3 updates - #569

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-3898b843af
Open

build(deps): bump the npm_and_yarn group across 1 directory with 3 updates#569
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-3898b843af

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 3 updates in the / directory: browserslist, fflate and nanoid.

Updates browserslist from 4.28.4 to 4.28.9

Release notes

Sourced from browserslist's releases.

4.28.9

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

4.28.6

4.28.5

Changelog

Sourced from browserslist's changelog.

4.28.9

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

4.28.6

4.28.5

Commits

Updates fflate from 0.6.10 to 0.6.11

Changelog

Sourced from fflate's changelog.

0.8.3

  • Fix buffer over-read for Zip64 extra fields
  • Support sync flushes (Z_SYNC_FLUSH in zlib)
    • Allows for immediate decompression of all pushed bytes
    • Enables DEFLATE stream concatenation
  • Fix zip/zipSync when using cross-realm Uint8Array
  • Improve Zip64 support for streamed or undersized archives
  • Update performance estimates in README
  • Fix typings for TypeScript v5.7+
  • Reduce memory consumption after compression stream completion

0.8.2

  • Fixed broken UMD build
  • Fixed edge-case causing skipped data during streaming compression
  • Fixed bug in GZIP streaming on member boundary
  • Improved streaming performance on inconsistent chunk sizes
  • Improved unzip performance on undercompressed archives
  • Added flushing support into streaming API
  • Added backpressure support into async streaming API
    • Use new ondrain handler and queuedSize

0.8.1

  • Fixed reallocating on pre-supplied buffer in inflateSync and unzlibSync
  • Minor documentation fixes

0.8.0

  • BREAKING: synchronous decompression functions now take an options object rather than an output buffer as a second parameter
    • inflateSync(compressed, outBuf) is now inflateSync(compressed, { out: outBuf })
  • Support dictionaries in compression and decompression
  • Support multi-member files in GZIP streaming decompression
  • Dramatically improved streaming performance
  • Fixed missing error on certain malformed GZIP files

0.7.3

  • Fix folder creation for certain operating system
    • Create 0-length "files" for each directory specified with "object" syntax"
    • Support empty folders
    • Add options for folders
  • Fix minification in SWC
    • Remove instanceof, no-whitespace assumptions in async functions

0.7.2

  • Fixed TypeScript typing for errors when using strictNullChecks
  • Fixed failure to compress files above 64kB with { level: 0 }
  • Fixed AMD module definition in UMD build

0.7.1

  • Removed requirement for setTimeout
  • Added support for unzip file filters (thanks to @​manucorporat: #67)
  • Fixed streaming gunzip and unzlib bug causing corruption

0.7.0

  • Improved errors
    • Now errors are error objects instead of strings
    • Check the error code to apply custom logic based on error type
  • Made async operations always call callbacks asynchronously
  • Fixed bug that caused errors to not appear in asynchronous operations in browsers
Commits

Updates nanoid from 3.3.16 to 3.3.18

Release notes

Sourced from nanoid's releases.

3.3.18

3.3.17

  • Fixed infinite loop on zero size.
Changelog

Sourced from nanoid's changelog.

3.3.18

3.3.17

  • Fixed infinite loop on zero size.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates

Bumps the npm_and_yarn group with 3 updates in the / directory: [browserslist](https://github.com/browserslist/browserslist), [fflate](https://github.com/101arrowz/fflate) and [nanoid](https://github.com/ai/nanoid).


Updates `browserslist` from 4.28.4 to 4.28.9
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.4...4.28.9)

Updates `fflate` from 0.6.10 to 0.6.11
- [Release notes](https://github.com/101arrowz/fflate/releases)
- [Changelog](https://github.com/101arrowz/fflate/blob/master/CHANGELOG.md)
- [Commits](https://github.com/101arrowz/fflate/commits)

Updates `nanoid` from 3.3.16 to 3.3.18
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.16...3.3.18)

---
updated-dependencies:
- dependency-name: browserslist
  dependency-version: 4.28.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fflate
  dependency-version: 0.6.11
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-version: 3.3.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@dependabot
dependabot Bot requested a review from dadadave80 as a code owner September 4, 2026 20:20
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@vercel

vercel Bot commented Sep 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
heliobond Error Error Sep 4, 2026 8:21pm UTC

@sshdopey

sshdopey commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Thanks for your contribution! ❤️ It looks like this PR isn't linked to an issue yet. Please add Fixes #123 (or Closes #123) to the PR description, or link it via the Development sidebar on the right. Once linked, I'll automatically re-review and merge if the changes show effort toward the issue. No stress — we'll help fix things up if needed!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant