build(deps): bump the npm_and_yarn group across 1 directory with 16 updates - #4
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the npm_and_yarn group across 1 directory with 16 updates#4dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the npm_and_yarn group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.5.6` | `2.9.14` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `3.2.6` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.30` | `5.0.52` | | [js-cookie](https://github.com/js-cookie/js-cookie) | `3.0.5` | `3.0.7` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.11.0` | `11.15.0` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `8.3.0` | `8.4.0` | | [swiper](https://github.com/nolimits4web/Swiper) | `11.2.10` | `12.1.2` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.10` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `9.1.3` | `9.1.19` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.3.6` | `6.4.2` | | [yaml](https://github.com/eemeli/yaml) | `2.8.1` | `2.8.3` | Updates `turbo` from 2.5.6 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.5.6...v2.9.14) Updates `vitest` from 3.2.4 to 3.2.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest) Updates `ai` from 5.0.30 to 5.0.52 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/ai@5.0.52/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@5.0.52/packages/ai) Updates `js-cookie` from 3.0.5 to 3.0.7 - [Release notes](https://github.com/js-cookie/js-cookie/releases) - [Commits](js-cookie/js-cookie@v3.0.5...v3.0.7) Updates `mermaid` from 11.11.0 to 11.15.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.11.0...mermaid@11.15.0) Updates `path-to-regexp` from 8.3.0 to 8.4.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v8.3.0...v8.4.0) Updates `swiper` from 11.2.10 to 12.1.2 - [Release notes](https://github.com/nolimits4web/Swiper/releases) - [Changelog](https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md) - [Commits](nolimits4web/swiper@v11.2.10...v12.1.2) Updates `postcss` from 8.5.6 to 8.5.10 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.10) Updates `storybook` from 9.1.3 to 9.1.19 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.19/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v9.1.19/code/core) Updates `vite` from 6.3.6 to 6.4.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.2/packages/vite) Updates `yaml` from 2.8.1 to 2.8.3 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.1...v2.8.3) Updates `body-parser` from 2.2.0 to 2.2.2 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.0...v2.2.2) Updates `dompurify` from 3.2.6 to 3.4.8 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.2.6...3.4.8) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `vega-functions` from 5.18.0 to 5.18.1 - [Release notes](https://github.com/vega/vega/releases) - [Commits](https://github.com/vega/vega/commits) Updates `vega-selections` from 5.6.0 to 5.6.3 - [Release notes](https://github.com/vega/vega/releases) - [Commits](https://github.com/vega/vega/commits) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 3.2.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ai dependency-version: 5.0.52 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-cookie dependency-version: 3.0.7 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: mermaid dependency-version: 11.15.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 8.4.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: swiper dependency-version: 12.1.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.10 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: storybook dependency-version: 9.1.19 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 6.4.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: yaml dependency-version: 2.8.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 2.2.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dompurify dependency-version: 3.4.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vega-functions dependency-version: 5.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vega-selections dependency-version: 5.6.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 11 updates in the / directory:
2.5.62.9.143.2.43.2.65.0.305.0.523.0.53.0.711.11.011.15.08.3.08.4.011.2.1012.1.28.5.68.5.109.1.39.1.196.3.66.4.22.8.12.8.3Updates
turbofrom 2.5.6 to 2.9.14Release notes
Sourced from turbo's releases.
... (truncated)
Commits
fc62fe0publish 2.9.14 to registryfb8c9aechore: Release 2.9.13 (#12803)e8e629dfix: Avoid project-local Yarn during detection (#12801)91c90cbfix: Harden VS Code extension command execution (#12800)84f4508fix: Validate auth callback state (#12802)1779ad7Removed unneeded import form hash creation script in docs (#12799)71f8c90test: Validate lockfiles without dependency downloads (#12789)5fcb960ci: Scope GitHub Actions caches by branch (#12788)4cf9fabci: Usepull_requestfor PR title linting (#12787)859c629fix: Restore docs mobile menu (#12782)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for turbo since your current version.
Updates
vitestfrom 3.2.4 to 3.2.6Release notes
Sourced from vitest's releases.
Commits
b6d56f8chore: release v3.2.616f120dfix: pin last supported vite-node version2cbad0achore: release v3.2.5385a1aefix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...af88b1ffeat(api): addallowWriteandallowExecoptions toapi[backport to v3]...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.
Updates
aifrom 5.0.30 to 5.0.52Changelog
Sourced from ai's changelog.
... (truncated)
Commits
63d5f66Version Packages (#8895)930399bBackport: fix(ai): download files when intermediate file cannot be downloaded...85909a9Backport: chore(ai): update test message (#8875)c56822dBackport: fix(ai): updateuiMessageChunkSchemato satisfy the `UIMessageChu...6bd07dfVersion Packages (#8853)27645bbBackport: ExportparseJsonEventStreamanduiMessageChunkSchemafrom "ai" ...8b7f0d2Version Packages (#8843)9eef198Version Packages (#8831)20bca65Version Packages (#8799)4254096Version Packages (#8753)Updates
js-cookiefrom 3.0.5 to 3.0.7Release notes
Sourced from js-cookie's releases.
Commits
17bacbaCraft v3.0.7 releaseadb823cFix release workflow halting atgit tag5f9e759May remove Git user config from release workflow6ac9211Fix release workflow not able to push commit + tag2278bc5Fix missing package version bumpeb3c40ePrevent cookie attribute injectionf6f157fBump globals from 17.5.0 to 17.6.0f409d02Bump eslint from 10.2.0 to 10.3.0a686883Bump protobufjs in the npm_and_yarn group across 1 directoryc6112d2Bump@protobufjs/utf8in the npm_and_yarn group across 1 directoryMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for js-cookie since your current version.
Updates
mermaidfrom 11.11.0 to 11.15.0Release notes
Sourced from mermaid's releases.
... (truncated)
Commits
41646dfMerge pull request #7739 from aloisklink/ci/fix-release2671f5cdocs: fix v11.15.0 releasef4bf04bMerge pull request #7738 from mermaid-js/changeset-release/masterabfb563Version Packages60b289fRelease Candidate 11.15.0 (#7737)d37c0dbMerge pull request #7730 from aloisklink/fix/fix-edgeLabelRightLeft-changes5ab5a28docs: improve nested namespace changeset18f8b4cfix: revert endEdgeLabelLeft/endEdgeLabelRight change504b2ebMerge pull request #7726 from aloisklink/fix/correct-unnecessary-html-escapes...1502f32fix(wardley): fix unnecessary sanitization of textMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for mermaid since your current version.
Updates
path-to-regexpfrom 8.3.0 to 8.4.0Release notes
Sourced from path-to-regexp's releases.
Commits
34cb4518.4.022a9679Reject large optional route combinations (#424)8881a88Byte optimization (#423)43669acDedupe regex prefixes (#422)4864654Restrict repeated wildcard backtracking (#421)05a5a97Remove dependabot config (#404)5b635cdRemovepackage-lock.json(#407)Updates
swiperfrom 11.2.10 to 12.1.2Release notes
Sourced from swiper's releases.
... (truncated)
Changelog
Sourced from swiper's changelog.
... (truncated)
Commits
2fd88b712.1.2d3e6633fix prototype pollution bypass in extend() util70c48c112.1.13055008fix(a11y): fix focus in virtual mode enabled60b0052fix(core): avoid double-subtracting offsets in centerInsufficientSlides (#8158)6bf76d5fix(types): support boolean as a11y value (#8157)07738a2fix(core): prevent duplicate module initialization in constructor (#8155) (#8...3a1777a12.1.03bc6cfe12.1.045b98d0fix(core): support slidesOffsetBefore and slidesOffsetAfert in cssModeUpdates
postcssfrom 8.5.6 to 8.5.10Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
33b9790Release 8.5.10 version536c79eEscape </style> in CSS output (#2074)afa96b2Update dependencies (#2073)effe88bTypo (#2072)3ee79a2Thread model (#2071)2e0683dCreate incident response docs (#2070)fe88ac2Release 8.5.9 versionc551632Avoid RegExp when we can use simple JS89a6b74Move SECURITY.txt for docs folder to keep GitHub page cleaner6ceb8a4Create SECURITY.mdUpdates
storybookfrom 9.1.3 to 9.1.19Release notes
Sourced from storybook's releases.
Changelog
Sourced from storybook's changelog.
... (truncated)
Commits
20887f1Bump version from "9.1.18" to "9.1.19" [skip ci]66b2d8eFix test31f16c4fix linting62dd25bCore: Require token for websocket connectionsbbe61e3Bump version from "9.1.17" to "9.1.18" [skip ci]d0d5a3dBump version from 9.1.16 to 9.1.17 MANUALLYa06c257filter env vars from .env filesa54a04cBump version from "9.1.15" to "9.1.16" [skip ci]ebd7ff5Merge pull request #32859 from storybookjs/shilman/first-load-new-userda2da6eMerge pull request #32862 from storybookjs/yann/patch-dev-server-presetMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for storybook since your current version.
Updates
vitefrom 6.3.6 to 6.4.2Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
6b3fad0release: v6.4.2ca4da5dfix: avoid path traversal with optimize deps sourcemap handler (#22161)fe28e47fix: apply server.fs check to env transport (#22159) (#22163)5487f4frelease: v6.4.11114b5dfix(dev): trim trailing slash beforeserver.fs.denycheck (#20968) (#20969)f12697crelease: v6.4.0ca6455efeat: allow passing down resolved config to vite's createServer (#20932)0e173d8release: v6.3.7c59a222fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20940)Updates
yamlfrom 2.8.1 to 2.8.3Release notes
Sourced from yaml's releases.
Commits