Skip to content

chore(deps): Bump the npm-dependencies group with 11 updates - #684

Merged
Jason Johnston (jasonjoh) merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-68dd25586e
Oct 29, 2026
Merged

chore(deps): Bump the npm-dependencies group with 11 updates#684
Jason Johnston (jasonjoh) merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-68dd25586e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 11 updates:

Package From To
@azure/msal-node 3.6.4 7.1.1
dotenv 17.2.1 18.0.9
express 4.21.2 4.22.3
express-session 1.18.2 1.19.0
jwks-rsa 3.2.0 4.1.0
mocha 11.7.1 12.0.3
morgan 1.10.1 1.12.1
pug 3.0.3 3.0.4
socket.io 4.8.1 4.8.4
sqlite3 5.1.7 6.0.1
prettier 3.6.2 3.9.10

Updates @azure/msal-node from 3.6.4 to 7.1.1

Release notes

Sourced from @​azure/msal-node's releases.

@​azure/msal-node v7.1.1

7.1.1

Wed, 21 Oct 2026 18:37:17 GMT

Patches

  • Bump @​azure/msal-common to v16.14.3 (beachball)

@​azure/msal-node v7.1.0

7.1.0

Tue, 13 Oct 2026 22:26:37 GMT

Minor changes

  • Sanitize authorization code payloads and reject unsupported instance-aware inputs for confidential clients. #8901 (hemoral@microsoft.com)

@​azure/msal-node v7.0.2

7.0.2

Tue, 13 Oct 2026 19:04:36 GMT

Patches

  • Sanitize authorization code payloads and reject unsupported instance-aware inputs for confidential clients. #8901 (rginsburg@microsoft.com)

@​azure/msal-node v7.0.1

7.0.1

Fri, 02 Oct 2026 19:03:42 GMT

Patches

  • Bump @​azure/msal-common to v16.14.2 (beachball)

@​azure/msal-node v7.0.0

7.0.0

Wed, 23 Sep 2026 15:49:44 GMT

Major changes

  • Remove responseMode from acquireTokenInteractive and require form_post for browser-loopback authentication #8852 (joarroyo@microsoft.com)

Minor changes

... (truncated)

Commits
  • 16a4714 Fix web silent-request deduplication for refresh policies and extra parameter...
  • bd8b2cd Fallback from EAR to auth code flow in Safari (#8903)
  • a9a1221 Native Auth V2 entry and validation fixes (#8898)
  • 8bd17ff chore: update basic-ftp to patched 6.2.2 (#8915)
  • 4d1e6f9 build(deps): bump dorny/paths-filter from 3.0.4 to 4.0.3 (#8841)
  • 46ac334 chore: update handlebars and proxy-addr to fix security vulnerabilities (#8913)
  • ac3f4c7 build(deps): bump actions/setup-node from 6.5.0 to 7.1.0 (#8840)
  • b3c2d53 Post-release PR (#8910)
  • e70b750 Add NAA bridge type to performance telemetry (#8864)
  • c797825 build(deps): bump actions/checkout from 6.1.0 to 7.0.1 (#8676)
  • Additional commits viewable in compare view

Updates dotenv from 17.2.1 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

  • Permit DOTENV_PATH being empty string with the CLI (#1076)

18.0.8 (2026-10-14)

Changed

  • Fast parser should strip appended extra quotes (#1073)
  • Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

  • Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

  • Fix missing typescript module declaration (#1068)
  • Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

  • import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

  • Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

  • Patch additional edge cases for the fast parser (#1056)

... (truncated)

Commits
  • 8d1ab85 18.0.9
  • 59a40ce changelog
  • 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
  • bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
  • 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
  • 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
  • e2fe95e 18.0.8
  • 7aa712a type detail improvement
  • 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
  • 0b4843a changelog
  • Additional commits viewable in compare view

Updates express from 4.21.2 to 4.22.3

Release notes

Sourced from express's releases.

v4.22.2

What's Changed

  • fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
    • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
  • deps: qs@~6.15.1
  • deps: body-parser@~1.20.5

New Contributors

Full Changelog: expressjs/express@v4.22.1...v4.22.2

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.3

  • Allow conditional revalidation for QUERY requests
    • req.fresh now includes QUERY in the freshness check, so QUERY responses can return 304 when a validator matches
  • deps: qs@~6.16.0

4.22.2

  • fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
    • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
  • deps: qs@~6.15.1
  • deps: body-parser@~1.20.5

4.22.1

  • Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
    • The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

4.22.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express since your current version.


Updates express-session from 1.18.2 to 1.19.0

Release notes

Sourced from express-session's releases.

v1.19.0

What's Changed

Main Changes

  • Add dynamic cookie options support Cookie options can now be dynamic, allowing for more flexible and context-aware configuration based on each request. This feature enables programmatic modification of cookie attributes like secure, httpOnly, sameSite, maxAge, domain, and path based on session or request conditions.

    var app = express()
app.use(session({
  secret: 'keyboard cat',
  resave: false,
  saveUninitialized: true,
  cookie: function (req) {
    var match = req.url.match(/^\/([^/]+)/);
    return {
      path: match ? '/' + match[1] : '/',
      httpOnly: true,
      secure: req.secure || false,
      maxAge: 60000
    }
  }
}))

  • Add sameSite 'auto' support for automatic SameSite attribute configuration Added sameSite: 'auto' option for cookie configuration that automatically sets SameSite=None for HTTPS and SameSite=Lax for HTTP connections, simplifying cookie handling across different environments.

  • deps: use tilde notation for dependencies

PRs

New Contributors

... (truncated)

Changelog

Sourced from express-session's changelog.

1.19.0 / 2026-01-22

  • Add dynamic cookie options support
  • Add sameSite 'auto' support for automatic SameSite attribute configuration
  • deps: use tilde notation for dependencies
Commits
  • c10b2a3 1.19.0 (#1107)
  • 2673736 feat: add support to dynamic cookie options (#1027)
  • 73e0193 Add sameSite 'auto' support to match secure 'auto' pattern (#1087)
  • 264b6a0 deps: use tilde notation for dependencies (#1096)
  • 6d69f09 chore: remove history.md from being packaged on publish (#1097)
  • 00b8a5f refactor: remove unused sess parameter from generateSessionId function (#...
  • 2cd6561 build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 (#1082)
  • 1307f30 build(deps): bump actions/checkout from 4.2.2 to 6.0.0 (#1088)
  • 0e7a438 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#1089)
  • a095a9a build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#1090)
  • Additional commits viewable in compare view

Updates jwks-rsa from 3.2.0 to 4.1.0

Release notes

Sourced from jwks-rsa's releases.

v4.1.0

Added

  • feat: add cacheMaxAgeFallback and onStaleCacheFallback for graceful JWKS degradation during outages #502 (cschetan77)

v4.0.1

Changed

v4.0.0

⚠️ BREAKING CHANGES

v3.2.2

Fixed

  • fix: jwksUri should be optional when custom fetcher is provided #477 (cschetan77)

v3.2.1

Added

Fixed

  • fix: Migrate to WHATWG URL API from node's core url #465 (cschetan77)
  • fix: Moving @​types/express to dev and re generating package lock #464 (cschetan77)
Changelog

Sourced from jwks-rsa's changelog.

v4.1.0 (2026-06-19)

Full Changelog

Added

  • feat: add cacheMaxAgeFallback and onStaleCacheFallback for graceful JWKS degradation during outages #502 (cschetan77)

v4.0.1 (2026-03-02)

Full Changelog

Changed

v4.0.0 (2026-02-27)

Full Changelog

⚠️ BREAKING CHANGES

  • Drops support for Node 14, 16, and 18. The minimum supported Node versions are now 20.19.0, 22.12.0, and 23.0.0.
  • Drops support for the ES256K algorithm (secp256k1 curve). Keys using ES256K will be ignored. Users must transition to a supported curve (e.g., ES256/P-256) or handle legacy keys externally.
  • Relies on Node's native require(esm) support - Loading ECMAScript modules using require(). Non-standard module runtimes such as Jest (uses vm.Script) that do not support this feature may fail while loading ESM. See #493 for details.
  • feat: upgrade jose dependency to v6 #486 (cschetan77)
  • chore: upgrade minimum Node.js runtime to 20.19.0 #485 (cschetan77)

v3.2.2 (2026-01-23)

Full Changelog

Fixed

  • fix: jwksUri should be optional when custom fetcher is provided #477 (cschetan77)

v3.2.1 (2026-01-15)

Full Changelog

Added

Fixed

  • fix: Migrate to WHATWG URL API from node's core url #465 (cschetan77)
  • fix: Moving @​types/express to dev and re generating package lock #464 (cschetan77)
Commits
  • 9f8bbdb Release v4.1.0 (#509)
  • 1489926 feat: add cacheMaxAgeFallback and onStaleCacheFallback for graceful JWKS degr...
  • 588ab0b chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#504)
  • 1fcdae1 chore(security): uses pinned versions of actions (#505)
  • 61b26e7 chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#503)
  • bb75ac4 chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1
  • b7202c7 chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#499)
  • ab29051 chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0
  • 24ac427 docs: add breaking-change note for require(esm) and Jest (#494)
  • a7e3c9a chore: remove package-lock (#495)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jwks-rsa since your current version.


Updates mocha from 11.7.1 to 12.0.3

Release notes

Sourced from mocha's releases.

v12.0.3

12.0.3 (2026-10-01)

🩹 Fixes

  • keep watching when the last test file is removed (#6355) (921c161)
  • show require() error on unsupported directory import (#6354) (a68344f)
  • support --X one-char aliases (#6391) (1227939)

📚 Documentation

🧹 Chores

v12.0.2

12.0.2 (2026-09-17)

🩹 Fixes

  • fail nested tests on beforeEach failure (#6292) (a75b43b)
  • give CLI reporter-option precedence over config file (#6331) (571110f)
  • propagate spec file path on parallel worker death (#6268) (55a544a)
  • use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342) (a652ff5)
  • watch existing dirs so first run starts armed (#6263) (f5c8aca)

📚 Documentation

🧹 Chores

  • add "stale branch" workflow (#6315) (ad17f9f)
  • add dependency conflict detection workflow (#6246) (ef0ae32)
  • add folder for reproducing issues (#6330) (6728030)
  • add stale triage reminder for unreviewed issues (#6314) (ee35133)
  • auto-remove "waiting for author" label on author activity (#6213) (dbd4322)
  • convert file-unloader to ESM (#6294) (dc73f4c)
  • deps: update dependency @​playwright/test to v1.63.0 (#6299) (931baa5)
  • deps: update dependency eslint to v10.10.0 (#6296) (3cb22d1)

... (truncated)

Changelog

Sourced from mocha's changelog.

12.0.3 (2026-10-01)

🩹 Fixes

  • keep watching when the last test file is removed (#6355) (921c161)
  • show require() error on unsupported directory import (#6354) (a68344f)
  • support --X one-char aliases (#6391) (1227939)

📚 Documentation

🧹 Chores

12.0.2 (2026-09-17)

🩹 Fixes

  • fail nested tests on beforeEach failure (#6292) (a75b43b)
  • give CLI reporter-option precedence over config file (#6331) (571110f)
  • propagate spec file path on parallel worker death (#6268) (55a544a)
  • use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342) (a652ff5)
  • watch existing dirs so first run starts armed (#6263) (f5c8aca)

📚 Documentation

🧹 Chores

  • add "stale branch" workflow (#6315) (ad17f9f)
  • add dependency conflict detection workflow (#6246) (ef0ae32)
  • add folder for reproducing issues (#6330) (6728030)
  • add stale triage reminder for unreviewed issues (#6314) (ee35133)
  • auto-remove "waiting for author" label on author activity (#6213) (dbd4322)
  • convert file-unloader to ESM (#6294) (dc73f4c)
  • deps: update dependency @​playwright/test to v1.63.0 (#6299) (931baa5)
  • deps: update dependency eslint to v10.10.0 (#6296) (3cb22d1)
  • deps: update dependency knip to v6.35.0 (#6324) (a2416af)
  • deps: update octoguide/bot action to v0.23.0 (#6304) (bbe5a27)

... (truncated)

Commits
  • 51a0cc5 chore(main): release 12.0.3 (#6353)
  • 1227939 fix: support --X one-char aliases (#6391)
  • bb2e69a docs: refresh help output, fix stale links (#6357)
  • 921c161 fix: keep watching when the last test file is removed (#6355)
  • 3382fdd test: add --import=tsx integration test (#6356)
  • a68344f fix: show require() error on unsupported directory import (#6354)
  • d59467a test: touch a new file without stamping it afterwards (#6349)
  • 70db1c7 chore(main): release 12.0.2 (#6300)
  • 571110f fix: give CLI reporter-option precedence over config file (#6331)
  • a652ff5 fix: use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#6342)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mocha since your current version.


Updates morgan from 1.10.1 to 1.12.1

Release notes

Sourced from morgan's releases.

1.12.1

Important

What's Changed

New Contributors

Full Changelog: expressjs/morgan@1.12.0...1.12.1

1.12.0

What's Changed

New Contributors

Full Changelog: expressjs/morgan@1.11.0...1.12.0

1.11.0

What's Changed

Security Fix:

New Contributors

... (truncated)

Changelog

Sourced from morgan's changelog.

1.12.1

1.12.0

  • Security fix for CVE-2026-15603(GHSA-jxfw-x594-9x9m)
  • Allow format functions to return objects for streams in objectMode
  • Respect the NO_COLOR environment variable in the dev format

1.11.0

  • add :pid token

Security Fix:

Commits
  • b1272e7 1.12.1 (#386)
  • 4b695ed fix: escape double quotes in log fields
  • 0f74eca build(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.9 (#384)
  • e399e3c build(deps): bump github/codeql-action/init from 4.37.4 to 4.37.9 (#383)
  • 1e86b34 build(deps): bump github/codeql-action/autobuild from 4.37.4 to 4.37.9 (#382)
  • 87c0afd build(deps): bump github/codeql-action/upload-sarif to 4.37.9 (#381)
  • 286b000 test: run CI on Windows and macOS (#379)
  • 5a5902a docs: fix typos across documentation (#378)
  • 063f084 1.12.0 (#376)
  • fbf9383 fix: escape all token values in log output
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for morgan since your current version.


Updates pug from 3.0.3 to 3.0.4

Release notes

Sourced from pug's releases.

pug-code-gen@3.0.4

Bug Fixes

  • Ensure doctype option is properly validated (#3468)

pug@3.0.4

Bug Fixes

  • Update pug-code-gen to ensure doctype option is properly validated (#3468)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pug since your current version.

...

Description has been truncated

@dependabot
chore(deps): Bump the npm-dependencies group with 11 updates
07a7c6f 
Bumps the npm-dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `3.6.4` | `7.1.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.1` | `18.0.9` |
| [express](https://github.com/expressjs/express) | `4.21.2` | `4.22.3` |
| [express-session](https://github.com/expressjs/session) | `1.18.2` | `1.19.0` |
| [jwks-rsa](https://github.com/auth0/node-jwks-rsa) | `3.2.0` | `4.1.0` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.1` | `12.0.3` |
| [morgan](https://github.com/expressjs/morgan) | `1.10.1` | `1.12.1` |
| [pug](https://github.com/pugjs/pug) | `3.0.3` | `3.0.4` |
| [socket.io](https://github.com/socketio/socket.io) | `4.8.1` | `4.8.4` |
| [sqlite3](https://github.com/TryGhost/node-sqlite3) | `5.1.7` | `6.0.1` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.10` |


Updates `@azure/msal-node` from 3.6.4 to 7.1.1
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v3.6.4...msal-node-v7.1.1)

Updates `dotenv` from 17.2.1 to 18.0.9
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.1...v18.0.9)

Updates `express` from 4.21.2 to 4.22.3
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.3/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.3)

Updates `express-session` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/expressjs/session/releases)
- [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md)
- [Commits](expressjs/session@v1.18.2...v1.19.0)

Updates `jwks-rsa` from 3.2.0 to 4.1.0
- [Release notes](https://github.com/auth0/node-jwks-rsa/releases)
- [Changelog](https://github.com/auth0/node-jwks-rsa/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jwks-rsa@v3.2.0...v4.1.0)

Updates `mocha` from 11.7.1 to 12.0.3
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.1...v12.0.3)

Updates `morgan` from 1.10.1 to 1.12.1
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.10.1...1.12.1)

Updates `pug` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/pugjs/pug/releases)
- [Commits](https://github.com/pugjs/pug/compare/pug@3.0.3...pug@3.0.4)

Updates `socket.io` from 4.8.1 to 4.8.4
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/socket.io@4.8.1...socket.io@4.8.4)

Updates `sqlite3` from 5.1.7 to 6.0.1
- [Release notes](https://github.com/TryGhost/node-sqlite3/releases)
- [Commits](TryGhost/node-sqlite3@v5.1.7...v6.0.1)

Updates `prettier` from 3.6.2 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.9.10)

---
updated-dependencies:
- dependency-name: "@azure/msal-node"
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: express
  dependency-version: 4.22.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: express-session
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: jwks-rsa
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: mocha
  dependency-version: 12.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: morgan
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: pug
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: socket.io
  dependency-version: 4.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: sqlite3
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 29, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 29, 2026 20:17
This was referenced Oct 29, 2026
Closed
Closed
Closed
Closed
Closed
@jasonjoh
Jason Johnston (jasonjoh) merged commit 3caeebc into main Oct 29, 2026
7 checks passed
@jasonjoh
Jason Johnston (jasonjoh) deleted the dependabot/npm_and_yarn/npm-dependencies-68dd25586e branch October 29, 2026 20:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jasonjoh Jason Johnston (jasonjoh) jasonjoh approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jasonjoh