Skip to content

deps(deps): bump the minor-and-patch group with 3 updates#75

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/minor-and-patch-0c1c9db97b
Jun 22, 2026
Merged

deps(deps): bump the minor-and-patch group with 3 updates#75
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/minor-and-patch-0c1c9db97b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 3 updates: npm-check-updates, @rollup/rollup-win32-x64-msvc and electron.

Updates npm-check-updates from 22.2.3 to 22.2.7

Release notes

Sourced from npm-check-updates's releases.

v22.2.7

What's Changed

Full Changelog: raineorshine/npm-check-updates@v22.2.6...v22.2.7

v22.2.6

What's Changed

... (truncated)

Commits
  • 860e348 22.2.7
  • 9876052 build(deps): downgrade ini from 7.0.0 to 6.0.0 to restore Node 20 support (#1...
  • 2ab080f Move configs out of package.json (#1841)
  • 7040fc3 Merge pull request #1843 from raineorshine/xmr/perf
  • ba8e062 Stop exporting the externally unused getOwnerPerDependency (#1840)
  • e0a953f Remove redundant awaits and enable @​typescript-eslint/await-thenable (#1839)
  • 56b545a Escape package name and reuse escapeRegExp (#1838)
  • 9c0fded Fix CodeQL issues (#1813)
  • 3aca2c5 fix: replace spread-reduce with for-of in getIgnoredUpgradesDueToEnginesNode
  • ee458a4 fix: skip already-visited nodes in isCircularPeer to avoid redundant traversal
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @rollup/rollup-win32-x64-msvc from 4.62.0 to 4.62.2

Release notes

Sourced from @​rollup/rollup-win32-x64-msvc's releases.

v4.62.2

4.62.2

2026-06-19

Bug Fixes

  • Do not add spurious side-effect-free external imports to chunks when using minChunkSize (#6411)

Pull Requests

v4.62.1

4.62.1

2026-06-19

Bug Fixes

  • Preserve multipart file extensions when deconflicting output chunks (#6408)
  • Fix an issue where getLogFilter would match additional logs (#6415)

Pull Requests

Changelog

Sourced from @​rollup/rollup-win32-x64-msvc's changelog.

4.62.2

2026-06-19

Bug Fixes

  • Do not add spurious side-effect-free external imports to chunks when using minChunkSize (#6411)

Pull Requests

4.62.1

2026-06-19

Bug Fixes

  • Preserve multipart file extensions when deconflicting output chunks (#6408)
  • Fix an issue where getLogFilter would match additional logs (#6415)

Pull Requests

Commits
  • 8faa187 4.62.2
  • a38a795 refactor(rust/parser_ast): extract property AstConverter write buffer kind lo...
  • 6cc5c31 Skip side-effect-free external imports when hoisting is disabled (#6411)
  • caacf70 4.62.1
  • d1e8297 Add missing ignore
  • 1ba1fc2 fix: insert conflict numbers before first extension in multi-extension filena...
  • 532bd0a Use import attributes for importing JSON (#6393)
  • 2cd8194 fix: advance value past wildcard prefix before suffix check in getLogFilter (...
  • dfac590 fix(deps): update minor/patch updates (#6418)
  • 1d6db3d chore(deps): update dependency eslint-plugin-unicorn to v66 (#6419)
  • Additional commits viewable in compare view

Updates electron from 42.4.0 to 42.4.1

Release notes

Sourced from electron's releases.

electron v42.4.1

Release Notes for v42.4.1

Fixes

  • Fixed DevTools Network panel missing most requests after navigating when webContents.debugger is attached. #51965 (Also in 43)
  • Fixed safeStorage.isAsyncEncryptionAvailable() incorrectly reporting false shortly after the app ready event, and a crash when calling safeStorage.encryptStringAsync() or safeStorage.decryptStringAsync() before async encryption initialization completed. safeStorage.isAsyncEncryptionAvailable() now returns a Promise as documented. #51924
  • Fixed a bug on Linux where a 1px line appeared at the top of frameless windows if the window and web contents had different background colors. #52005 (Also in 41, 43)
  • Fixed a renderer crash when calling WebAssembly.compileStreaming() or WebAssembly.instantiateStreaming() with nodeIntegration enabled. #51956 (Also in 43)

Other Changes

  • Backported fixes from upstream Chromium, Skia and Dawn. #51942
  • Updated Chromium to 148.0.7778.265. #51979

Documentation

  • Documentation changes: #51927
Commits
  • 76b7ac4 fix: remove 1px line from the top of frameless windows on Linux (#51458) (#52...
  • c9eba2a fix: macOS menu roles missing Tahoe icons (#52013)
  • e46d7ad docs: clarify the way electron is downloaded in faq (#51998)
  • b86fc6a test: fix flaky code cache cleanup on Windows (#52008)
  • aa22b27 chore: bump chromium to 148.0.7778.265 (42-x-y) (#51979)
  • f454e21 fix: devTools network events dropped on RenderFrameHost swap (#51965)
  • 5e6a399 chore: bump chromium to 148.0.7778.257 (42-x-y) (#51938)
  • 8877540 build: bump node-gyp to 12.3.0 (#51968)
  • f34cf62 fix: only set Node's WASM streaming callback when fetch is enabled (#51956)
  • 37cda21 test: use strict mode for TS smoke tests and improve typings (#51952)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 3 updates: [npm-check-updates](https://github.com/raineorshine/npm-check-updates), [@rollup/rollup-win32-x64-msvc](https://github.com/rollup/rollup) and [electron](https://github.com/electron/electron).


Updates `npm-check-updates` from 22.2.3 to 22.2.7
- [Release notes](https://github.com/raineorshine/npm-check-updates/releases)
- [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md)
- [Commits](raineorshine/npm-check-updates@v22.2.3...v22.2.7)

Updates `@rollup/rollup-win32-x64-msvc` from 4.62.0 to 4.62.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.0...v4.62.2)

Updates `electron` from 42.4.0 to 42.4.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.4.0...v42.4.1)

---
updated-dependencies:
- dependency-name: npm-check-updates
  dependency-version: 22.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@rollup/rollup-win32-x64-msvc"
  dependency-version: 4.62.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: electron
  dependency-version: 42.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Dependencies Pull requests that update or fix project dependencies. javascript Pull requests that update javascript code labels Jun 22, 2026
@github-actions
github-actions Bot merged commit e799392 into main Jun 22, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/minor-and-patch-0c1c9db97b branch June 22, 2026 11:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update or fix project dependencies. javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant