chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates#282
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates#282dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…pdates Bumps the npm_and_yarn group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.20.5` | `7.28.5` | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `7.54.0` | `7.120.4` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `10.1.0` | `21.1.1` | | [cookie](https://github.com/jshttp/cookie) | `0.4.2` | `0.7.2` | | [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.4` | | [sha.js](https://github.com/crypto-browserify/sha.js) | `2.4.11` | `2.4.12` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.1.2` | `4.1.4` | | [ws](https://github.com/websockets/ws) | `8.11.0` | `8.17.1` | | [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) | `0.4.23` | `removed` | Updates `@babel/traverse` from 7.20.5 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-traverse) Updates `@sentry/browser` from 7.54.0 to 7.120.4 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.4/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.54.0...7.120.4) Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) Updates `yargs-parser` from 10.1.0 to 21.1.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v10.1.0...yargs-parser-v21.1.1) Updates `cookie` from 0.4.2 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.2...v0.7.2) Updates `form-data` from 4.0.0 to 4.0.4 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.0...v4.0.4) Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `sha.js` from 2.4.11 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.11...v2.4.12) Updates `tough-cookie` from 4.1.2 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.2...v4.1.4) Updates `ws` from 8.11.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.11.0...8.17.1) Removes `xml2js` --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-version: 7.28.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sentry/browser" dependency-version: 7.120.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-version: 21.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-version: 0.7.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-version: 4.1.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.17.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xml2js dependency-version: dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
This was referenced Nov 3, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the / directory:
7.20.57.28.57.54.07.120.41.1.111.1.1210.1.021.1.10.4.20.7.24.0.04.0.42.4.112.4.124.1.24.1.48.11.08.17.10.4.23removedUpdates
@babel/traversefrom 7.20.5 to 7.28.5Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
61647aev7.28.5e579cb0EnablestrictNullChecksfortraverse(#17499)7385eae[Babel 8] Improve scope information collection performance (#17043)26bc651[Babel 8] Better node type definitions forcomputed(#17500)e626523FixJSXIdentifierhandling inisReferencedIdentifier(#17503)19c9126fix: ensure scope.push register in anonymous fn (#17504)35055e3v7.28.4b41f8cdUpdate Jest to v30.1.1 (#17493)22493b6Improve@babel/traversetypings (#17485)18d88b8Improve@babel/coretypings (#17471)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@babel/traversesince your current version.Updates
@sentry/browserfrom 7.54.0 to 7.120.4Release notes
Sourced from
@sentry/browser's releases.Changelog
Sourced from
@sentry/browser's changelog.... (truncated)
Commits
0469cabrelease: 7.120.40077b5bmeta(changelog): Update changelog for 7.120.4 (#17210)125d870Merge branch 'release/7.120.4-alpha.1' into v7a55701frelease: 7.120.4-alpha.1a42e7e7meta(changelog): Update changelog for 7.120.4-alpha.1 (#17205)347da0aci(v7/craft): Remove commit-on-git-repository for deno (#17201)9412e75test(v7/metrics): Delete metrics test (#17202)1852e61meta(changelog): Update changelog for 7.120.4-alpha.0 (#17198)cb499a6fix(v7/cdn): Stop usingObject.assignto be ES5 compatible (#17080)bc8bbb6ci(v7): Bump to ubuntu-24.04 (#17083)Updates
brace-expansionfrom 1.1.11 to 1.1.12Release notes
Sourced from brace-expansion's releases.
Commits
44f33b41.1.12c460dbdpkg: publish on tag 1.xccb8ac6fmtc3c73c8Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)Updates
yargs-parserfrom 10.1.0 to 21.1.1Release notes
Sourced from yargs-parser's releases.
... (truncated)
Changelog
Sourced from yargs-parser's changelog.
... (truncated)
Commits
3aba24cchore(main): release yargs-parser 21.1.1 (#455)d69f9c3fix(typescript): ignore .cts files during publish (#454)90067a0chore(main): release yargs-parser 21.1.0 (#446)d07bcdbfix: node version check now uses process.versions.node (#450)c0c6079chore(deps): update dependency puppeteer to v16 (#451)a89259ffeat: allow the browser build to be imported (#443)c474bc1fix(halt-at-non-option): prevent known args from being parsed when "unknown-o...fd30238chore(deps): update dependency serve to v14 (#449)a072f9achore(deps): update dependency puppeteer to v15 (#444)4f1060bfix: parse options ending with 3+ hyphens (#434)Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.
Updates
cookiefrom 0.4.2 to 0.7.2Release notes
Sourced from cookie's releases.
Commits
d19eaa10.7.2bc38ffdFix object assignment ofhasOwnProperty(#177)cf4658f0.7.16a8b8f5Allow leading dot for domain (#174)58015c0Remove more code and perf wins (#172)ab057d60.7.05f02ca8Migrate history to GitHub releasesa5d591cMigrate history to GitHub releases51968f9Skip isNaN9e7ca51perf(parse): cache length, return early (#144)Maintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
form-datafrom 4.0.0 to 4.0.4Release notes
Sourced from form-data's releases.
... (truncated)
Changelog
Sourced from form-data's changelog.
... (truncated)
Commits
41996f5v4.0.4316c82b[meta] actually ensure the readme backup isn’t published2300ca1[meta] fix readme capitalization811f682[meta] addauto-changelog5e34080[Tests] fix linting errors1d11a76[Tests] handle predict-v8-randomness failures in node < 17 and node > 2358c25d7[Dev Deps] update@ljharb/eslint-config3d17230[Fix] Switch to usingcryptorandom for boundary valuesd8d67dcv4.0.3e6e83cc[meta] remove local commit hooksMaintainer changes
This version was pushed to npm by ljharb, a new releaser for form-data since your current version.
Updates
on-headersfrom 1.0.2 to 1.1.0Release notes
Sourced from on-headers's releases.
Changelog
Sourced from on-headers's changelog.
Commits
4b017af1.1.0b636f2d♻️ refactor header array code3e2c2d4✨ ignore falsy header keys, matching node behavior172eb41✨ support duplicate headersc6e3849🔒️ fix array handling6893518💚 update CI - add newer node versions56a345d✨ add script to update known hashes175ab21👷 add upstream change detection (#31)ce0b2c8ci: apply OSSF Scorecard security best practices (#20)1a38c54fix: useubuntu-latestas ci runner (#19)Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for on-headers since your current version.
Updates
sha.jsfrom 2.4.11 to 2.4.12Changelog
Sourced from sha.js's changelog.
Commits
eb4ea2fv2.4.12d8d77c0[meta] reorder package.jsondf9d521[eslint] fix package.json indentation35aec35[meta] addnpmignored528896[Dev Deps] add missing peer depb46e711[meta] addauto-changelog94ca724[Dev Deps] remove unusedbufferdep2dbe0aa[Dev Deps] update@ljharb/eslint-config73e33ae[Tests] avoid console logsf2a258e[Fix] support multi-byte wide typed arraysMaintainer changes
This version was pushed to npm by ljharb, a new releaser for sha.js since your current version.
Updates
tough-cookiefrom 4.1.2 to 4.1.4Release notes
Sourced from tough-cookie's releases.
Commits
cacbc37Bump version to 4.1.4a48fb3aAdd tests for url validation50e69bfMerge pull request #261 from postmanlabs/fix/url-string-validation1253d58Merge pull request #409 from corvidism/validators-to-string238367eAdd local alias fortoString4ff4d294.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)12d4747Prevent prototype pollution in cookie memstore (#283)f06b72dFix documentation for store.findCookies, missing allowSpecialUseDomain proper...cf6debdFix incorrect string validation for URLMaintainer changes
This version was pushed to npm by ccasey, a new releaser for tough-coo...
Description has been truncated