Skip to content

fix(deps): bump the npm-group group across 1 directory with 13 updates#119

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-group-1f5857fa0b
Open

fix(deps): bump the npm-group group across 1 directory with 13 updates#119
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-group-1f5857fa0b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026

Bumps the npm-group group with 13 updates in the / directory:

Package From To
@openui5/types 1.146.0 1.148.0
@ui5/cli 4.0.51 4.0.53
axios 1.15.0 1.16.1
fflate 0.8.2 0.8.3
typescript 6.0.2 6.0.3
ui5-tooling-modules 3.35.0 3.35.2
@types/node 25.5.2 25.9.1
@types/qunit 2.19.13 2.19.14
@ui5/linter 1.20.18 1.21.1
@ui5/ts-interface-generator 0.10.5 0.11.0
dotenv 17.4.1 17.4.2
eslint 10.2.0 10.4.0
typescript-eslint 8.58.1 8.59.4

Updates @openui5/types from 1.146.0 to 1.148.0

Updates @ui5/cli from 4.0.51 to 4.0.53

Release notes

Sourced from @​ui5/cli's releases.

v4.0.53

Dependency Updates

  • Bump @​ui5/project from 4.0.15 to 4.0.16 c033bc1

All changes

v4.0.52...v4.0.53

v4.0.52

Dependency Updates

  • Bump @​ui5/builder from 4.1.5 to 4.1.6 af7fd66

    • Changes contained in @​ui5/builder@4.1.6:

      Bug Fixes

      • Bundler: Also detect import.meta as ESM indicator 58013d5
      • Bundler: Skip ESM modules during bundling and log errors d28f63a
      • Bundler: Reduce noise from ESM parse errors bd574bb

All changes

v4.0.51...v4.0.52

Changelog

Sourced from @​ui5/cli's changelog.

[v4.0.53] - 2026-05-13

Dependency Updates

[v4.0.52] - 2026-04-20

Dependency Updates

Commits
  • fc764ac Release 4.0.53
  • c033bc1 [DEPENDENCY] Bump @​ui5/project from 4.0.15 to 4.0.16
  • 2244527 In-range update of npm dependencies
  • 1755e25 In-range update of npm dependencies
  • 59a3d27 In-range update of npm dependencies
  • fbd0a8d [INTERNAL] in-solidarity.yml: Remove config file
  • a0c5b53 In-range update of npm dependencies
  • e54391c Bump actions/setup-node from 6.3.0 to 6.4.0
  • da774d4 Release 4.0.52
  • af7fd66 [DEPENDENCY] Bump @​ui5/builder from 4.1.5 to 4.1.6
  • Additional commits viewable in compare view

Updates axios from 1.15.0 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

... (truncated)

Changelog

Sourced from axios's changelog.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

... (truncated)

Commits
  • 1337d6b chore(release): prepare release 1.16.1 (#10877)
  • 858a790 fix: remove all caches (#10882)
  • 34adfd9 revert: "fix: support URL object as config.url input (#10866)" (#10874)
  • 847d89b fix: support URL object as config.url input (#10866)
  • 4094886 fix(progress): guard malformed XHR upload events (#10868)
  • 44f0c5b chore: change sponsorship link and add Twicsy advertisement (#10869)
  • 64e1095 chore: update PR and issue template to use h2 (#10865)
  • 3e6b4e1 fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...
  • c4453ba fix: add the ability to add additional sponsors to the process sponsors scrip...
  • caa00a9 fix: https data in cleartext to proxy (#10858)
  • Additional commits viewable in compare view

Updates fflate from 0.8.2 to 0.8.3

Release notes

Sourced from fflate's releases.

v0.8.3

  • Fix buffer over-read for Zip64 extra fields
  • Support sync flushes (Z_SYNC_FLUSH in zlib)
    • Allows for immediate decompression of all pushed bytes
    • Enables DEFLATE stream concatenation
  • Fix zip/zipSync when using cross-realm Uint8Array
  • Improve Zip64 support for streamed or undersized archives
  • Update performance estimates in README
  • Fix typings for TypeScript v5.7+
  • Reduce memory consumption after compression stream completion
Changelog

Sourced from fflate's changelog.

0.8.3

  • Fix buffer over-read for Zip64 extra fields
  • Support sync flushes (Z_SYNC_FLUSH in zlib)
    • Allows for immediate decompression of all pushed bytes
    • Enables DEFLATE stream concatenation
  • Fix zip/zipSync when using cross-realm Uint8Array
  • Improve Zip64 support for streamed or undersized archives
  • Update performance estimates in README
  • Fix typings for TypeScript v5.7+
  • Reduce memory consumption after compression stream completion
Commits

Updates typescript from 6.0.2 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • See full diff in compare view

Updates ui5-tooling-modules from 3.35.0 to 3.35.2

Changelog

Sourced from ui5-tooling-modules's changelog.

3.35.2 (2026-05-05)

Bug Fixes

  • ui5-tooling-modules: version dependent interfaces for webc (#1333) (0a72767)

3.35.1 (2026-04-28)

Bug Fixes

  • ui5-tooling-modules: resolve XML namespaces defined inline on elements (#1337) (871a34e)
Commits
  • 6b2b458 chore(release): publish
  • 0a72767 fix(ui5-tooling-modules): version dependent interfaces for webc (#1333)
  • ca72395 chore(release): publish
  • 871a34e fix(ui5-tooling-modules): resolve XML namespaces defined inline on elements (...
  • See full diff in compare view

Updates @types/node from 25.5.2 to 25.9.1

Commits

Updates @types/qunit from 2.19.13 to 2.19.14

Commits

Updates @ui5/linter from 1.20.18 to 1.21.1

Release notes

Sourced from @​ui5/linter's releases.

v1.21.1

1.21.1 (2026-05-13)

Dependencies

  • lockfile: In-range update of npm dependencies (b20b5ca)

v1.21.0

1.21.0 (2026-05-10)

Features

  • Improve UX in case no UI5 linter findings are reported (c9307dd)

Dependencies

  • lockfile: In-range update of npm dependencies (1a7f734)
  • lockfile: In-range update of npm dependencies (3d66155)
  • lockfile: In-range update of npm dependencies (86882ea)
  • lockfile: In-range update of npm dependencies (051b7f3)
  • lockfile: In-range update of npm dependencies (f64934a)
Changelog

Sourced from @​ui5/linter's changelog.

1.21.1 (2026-05-13)

Dependencies

  • lockfile: In-range update of npm dependencies (b20b5ca)

1.21.0 (2026-05-10)

Features

  • Improve UX in case no UI5 linter findings are reported (c9307dd)

Dependencies

  • lockfile: In-range update of npm dependencies (1a7f734)
  • lockfile: In-range update of npm dependencies (3d66155)
  • lockfile: In-range update of npm dependencies (86882ea)
  • lockfile: In-range update of npm dependencies (051b7f3)
  • lockfile: In-range update of npm dependencies (f64934a)
Commits
  • dbfeba1 release: v1.21.1
  • defeb11 ci: Use GitHub environment for publishing workflow
  • b20b5ca deps(lockfile): In-range update of npm dependencies
  • 0959190 release: v1.21.0
  • 1a7f734 deps(lockfile): In-range update of npm dependencies
  • 8917178 test(formatter): Add snapshot test for text formatter with no findings
  • c9307dd feat: Improve UX in case no UI5 linter findings are reported
  • cd1680b build(deps-dev): Upgrade knip from 5.88.1 to 6.7.0 (#1039)
  • 3d66155 deps(lockfile): In-range update of npm dependencies
  • 87090e3 ci(.github/in-solidarity.yml): Remove config file
  • Additional commits viewable in compare view

Updates @ui5/ts-interface-generator from 0.10.5 to 0.11.0

Changelog

Sourced from @​ui5/ts-interface-generator's changelog.

0.11.0 (2026-05-11)

Bug Fixes

  • ts-interface-generator: add explicit types to tsconfigs for TS6 compat (42abf49)

  • chore(dts-generator)!: update TypeScript to 6.0.3 across repo (050d7df)

  • fix(ts-interface-generator)!: properly type getters (#565) (f2502fe), closes #565

BREAKING CHANGES

  • The re-exported ModuleResolutionKind enum no longer includes the deprecated NodeJs value. Consumers using ModuleResolutionKind.NodeJs must switch to Node16. The runCheck CLI now uses Node16 module resolution instead of Node10, which enforces file extensions and respects package.json exports.

Adapt all tsconfigs for TS6 changed defaults:

  • explicit types arrays (TS6 defaults to [])
  • explicit rootDir (TS6 requires it with outDir)
  • explicit strict: false where previously relying on default
  • moduleResolution: "node" → "bundler" in test-packages
  • dedicated tsconfig for API type-check test (TS6 errors on tsc + files
  • tsconfig)
  • code assuming such getters always return non-null values will break with control interfaces generated with the updated @​ui5/ts-interface-generator.
Commits
  • 27ba7b7 chore(release): publish
  • 050d7df chore(dts-generator)!: update TypeScript to 6.0.3 across repo
  • bd70810 chore: update dependencies; adapt
  • f2502fe fix(ts-interface-generator)!: properly type getters (#565)
  • 42abf49 fix(ts-interface-generator): add explicit types to tsconfigs for TS6 compat
  • 34cf886 refactor(ts-interface-generator): remove dead TypeScript version guards
  • 07f6c19 feat(ts-interface-generator)!: prepare for TypeScript 6/7
  • eedcb4f build(deps): update dependencies
  • See full diff in compare view

Updates dotenv from 17.4.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)
Commits

Updates eslint from 10.2.0 to 10.4.0

Release notes

Sourced from eslint's releases.

v10.4.0

Features

  • 1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)
  • 450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

  • 544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)
  • 6799431 fix: update dependency @​eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])
  • f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

  • 7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)
  • db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)
  • 9084664 docs: Update README (GitHub Actions Bot)
  • 9cc7387 docs: Update README (GitHub Actions Bot)
  • 3d7b548 docs: Update README (GitHub Actions Bot)
  • 191ec3c docs: Update README (GitHub Actions Bot)

Chores

  • 6616856 chore: upgrade knip to v6 (#20875) (Pixel998)
  • d13b084 ci: ensure auto-created PRs run CI (#20860) (lumir)
  • e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862) (dependabot[bot])
  • d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863) (kuldeep kumar)
  • 24db8cb test: add tests for SuppressionsService.save() (#20802) (kuldeep kumar)
  • 2ef0549 chore: update ecosystem plugins (#20857) (github-actions[bot])
  • a429791 ci: remove eslint-webpack-plugin types integration test (#20668) (Milos Djermanovic)
  • 9e37386 chore: replace recast with range approach in code-sample-minimizer (#20682) (Copilot)
  • 0dd1f9f test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#20845) (Francesco Trotta)
  • 9da3c7b refactor: remove deprecated meta.language and migrate meta.dialects (#20716) (Pixel998)
  • 2099ed1 refactor: add meta.defaultOptions to more rules, enable linting (#20800) (xbinaryx)
  • f1dfbc9 chore: update ecosystem plugins (#20836) (github-actions[bot])
  • c759413 ci: bump pnpm/action-setup from 6.0.3 to 6.0.5 (#20843) (dependabot[bot])
  • 5b817d6 test: add unit tests for lib/shared/ast-utils (#20838) (kuldeep kumar)
  • 1c13ae3 test: add unit tests for lib/shared/severity (#20835) (kuldeep kumar)

v10.3.0

Features

  • 379571a feat: add suggestions for no-unused-private-class-members (#20773) (sethamus)

Bug Fixes

  • b6ae5cf fix: handle unavailable require cache (#20812) (Simon Podlipsky)
  • 6fb3685 fix: rule suggestions cause continuation in class body (#20787) (Milos Djermanovic)

Documentation

  • 32cc7ab docs: fix typos in docs and comments (#20809) (Tanuj Kanti)
  • 7f47937 docs: Update README (GitHub Actions Bot)

Chores

  • d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826) (Francesco Trotta)
  • 3ffb14e chore: clean up typos in comments and JSDoc (#20821) (Pixel998)

... (truncated)

Commits

Updates typescript-eslint from 8.58.1 to 8.59.4

Release notes

Sourced from typescript-eslint's releases.

v8.59.4

8.59.4 (2026-05-18)

🩹 Fixes

  • eslint-plugin: [no-floating-promises] stack overflow when using recursive types (#12294)
  • project-service: throw error cause in getParsedConfigFileFromTSServer (#12321)
  • typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#12340)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.3

8.59.3 (2026-05-11)

This was a version bump only, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.2

8.59.2 (2026-05-04)

🩹 Fixes

  • eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#12150)
  • eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#12292)
  • rule-tester: add TypeScript as a peer dependency (#12288)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.1

8.59.1 (2026-04-27)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.59.4 (2026-05-18)

🩹 Fixes

  • typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#12340)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.3 (2026-05-11)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.2 (2026-05-04)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.1 (2026-04-27)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.0 (2026-04-20)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.2 (2026-04-13)

🩹 Fixes

... (truncated)

Commits
  • ca6ca14 chore(release): publish 8.59.4
  • 4b927c6 fix(typescript-eslint): export Compatible* types from typescript-eslint to re...
  • 48e13c0 chore(release): publish 8.59.3
  • 44f9625 chore(deps): update vitest monorepo to v4.1.5 (#12307)
  • 2ec35f1 chore(release): publish 8.59.2
  • 5245793 chore(release): publish 8.59.1
  • ea9ae4f chore(release): publish 8.59.0
  • 90c2803 chore(release): publish 8.58.2
  • b3315fd chore: convert import eslint to import js - followup (#12100)
  • be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • `@dependabot show ignore cond...

Description has been truncated

@dependabot
fix(deps): bump the npm-group group across 1 directory with 13 updates
abe7a96 
Bumps the npm-group group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@openui5/types](https://ui5.github.io/typescript) | `1.146.0` | `1.148.0` |
| [@ui5/cli](https://github.com/SAP/ui5-cli) | `4.0.51` | `4.0.53` |
| [axios](https://github.com/axios/axios) | `1.15.0` | `1.16.1` |
| [fflate](https://github.com/101arrowz/fflate) | `0.8.2` | `0.8.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` |
| [ui5-tooling-modules](https://github.com/ui5-community/ui5-ecosystem-showcase/tree/HEAD/packages/ui5-tooling-modules) | `3.35.0` | `3.35.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.9.1` |
| [@types/qunit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qunit) | `2.19.13` | `2.19.14` |
| [@ui5/linter](https://github.com/UI5/linter) | `1.20.18` | `1.21.1` |
| [@ui5/ts-interface-generator](https://github.com/UI5/typescript/tree/HEAD/packages/ts-interface-generator) | `0.10.5` | `0.11.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.1` | `17.4.2` |
| [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.4.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.58.1` | `8.59.4` |



Updates `@openui5/types` from 1.146.0 to 1.148.0

Updates `@ui5/cli` from 4.0.51 to 4.0.53
- [Release notes](https://github.com/SAP/ui5-cli/releases)
- [Changelog](https://github.com/SAP/ui5-cli/blob/v4/CHANGELOG.md)
- [Commits](SAP/ui5-cli@v4.0.51...v4.0.53)

Updates `axios` from 1.15.0 to 1.16.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.15.0...v1.16.1)

Updates `fflate` from 0.8.2 to 0.8.3
- [Release notes](https://github.com/101arrowz/fflate/releases)
- [Changelog](https://github.com/101arrowz/fflate/blob/master/CHANGELOG.md)
- [Commits](101arrowz/fflate@v0.8.2...v0.8.3)

Updates `typescript` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.2...v6.0.3)

Updates `ui5-tooling-modules` from 3.35.0 to 3.35.2
- [Changelog](https://github.com/ui5-community/ui5-ecosystem-showcase/blob/main/packages/ui5-tooling-modules/CHANGELOG.md)
- [Commits](https://github.com/ui5-community/ui5-ecosystem-showcase/commits/ui5-tooling-modules@3.35.2/packages/ui5-tooling-modules)

Updates `@types/node` from 25.5.2 to 25.9.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/qunit` from 2.19.13 to 2.19.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qunit)

Updates `@ui5/linter` from 1.20.18 to 1.21.1
- [Release notes](https://github.com/UI5/linter/releases)
- [Changelog](https://github.com/UI5/linter/blob/main/CHANGELOG.md)
- [Commits](UI5/linter@v1.20.18...v1.21.1)

Updates `@ui5/ts-interface-generator` from 0.10.5 to 0.11.0
- [Changelog](https://github.com/UI5/typescript/blob/main/packages/ts-interface-generator/CHANGELOG.md)
- [Commits](https://github.com/UI5/typescript/commits/@ui5/ts-interface-generator@0.11.0/packages/ts-interface-generator)

Updates `dotenv` from 17.4.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.1...v17.4.2)

Updates `eslint` from 10.2.0 to 10.4.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.2.0...v10.4.0)

Updates `typescript-eslint` from 8.58.1 to 8.59.4
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.4/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@openui5/types"
  dependency-version: 1.148.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-group
- dependency-name: "@ui5/cli"
  dependency-version: 4.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-group
- dependency-name: axios
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-group
- dependency-name: fflate
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-group
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-group
- dependency-name: ui5-tooling-modules
  dependency-version: 3.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-group
- dependency-name: "@types/node"
  dependency-version: 25.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-group
- dependency-name: "@types/qunit"
  dependency-version: 2.19.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-group
- dependency-name: "@ui5/linter"
  dependency-version: 1.21.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-group
- dependency-name: "@ui5/ts-interface-generator"
  dependency-version: 0.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-group
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-group
- dependency-name: eslint
  dependency-version: 10.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-group
- dependency-name: typescript-eslint
  dependency-version: 8.59.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-group
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants