Bump the npm_and_yarn group across 1 directory with 20 updates #55
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependabot
bot
added
dependencies
Reviewer's Guide by SourceryThis pull request updates multiple npm dependencies in package.json and package-lock.json to their latest versions. This includes updates to @octokit/request-error, cookie-parser, express, http-proxy-middleware, next, lint-staged, tsx, @babel/runtime, @octokit/request, axios, nanoid, and undici. Sequence diagram for lint-staged execution flowsequenceDiagram
participant User
participant Git
participant lint-staged
participant Tasks
User->>Git: git commit
Git->>lint-staged: pre-commit hook
lint-staged->>Tasks: Run configured tasks
alt Tasks modify staged files
Tasks-->>Git: add changes
end
Tasks-->>lint-staged: Task results
lint-staged->>Git: Allow or prevent commit
Git->>User: Commit completed or aborted
Updated class diagram for package.json dependenciesclassDiagram
class PackageJson {
- "@octokit/request-error": string
- "cookie-parser": string
- "express": string
- "http-proxy-middleware": string
- "next": string
- "lint-staged": string
- "tsx": string
- "@babel/runtime": string
- "@octokit/request": string
- "axios": string
- "nanoid": string
- "undici": string
}
PackageJson : contains updated dependency versions
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/npm_and_yarn-4fae721435
branch
from
6558abe to
1d1c7ab
Compare
Bumps the npm_and_yarn group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@octokit/request-error](https://github.com/octokit/request-error.js) | `5.0.1` | `5.1.1` | | [cookie-parser](https://github.com/expressjs/cookie-parser) | `1.4.6` | `1.4.7` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.6` | `2.0.7` | | [next](https://github.com/vercel/next.js) | `14.0.4` | `14.2.21` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `15.0.2` | `15.5.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.7.0` | `4.19.3` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.23.2` | `7.26.10` | | [@octokit/request](https://github.com/octokit/request.js) | `8.1.4` | `8.4.1` | | [axios](https://github.com/axios/axios) | `1.6.2` | `1.8.3` | | [nanoid](https://github.com/ai/nanoid) | `3.3.6` | `3.3.9` | | [undici](https://github.com/nodejs/undici) | `5.28.3` | `5.28.5` | Updates `@octokit/request-error` from 5.0.1 to 5.1.1 - [Release notes](https://github.com/octokit/request-error.js/releases) - [Commits](octokit/request-error.js@v5.0.1...v5.1.1) Updates `cookie-parser` from 1.4.6 to 1.4.7 - [Release notes](https://github.com/expressjs/cookie-parser/releases) - [Changelog](https://github.com/expressjs/cookie-parser/blob/master/HISTORY.md) - [Commits](expressjs/cookie-parser@1.4.6...1.4.7) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `http-proxy-middleware` from 2.0.6 to 2.0.7 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.7/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.7) Updates `next` from 14.0.4 to 14.2.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v14.0.4...v14.2.21) Updates `lint-staged` from 15.0.2 to 15.5.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v15.0.2...v15.5.0) Updates `tsx` from 4.7.0 to 4.19.3 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.7.0...v4.19.3) Updates `@babel/runtime` from 7.23.2 to 7.26.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime) Updates `@octokit/request` from 8.1.4 to 8.4.1 - [Release notes](https://github.com/octokit/request.js/releases) - [Commits](octokit/request.js@v8.1.4...v8.4.1) Updates `axios` from 1.6.2 to 1.8.3 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.6.2...v1.8.3) Updates `body-parser` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.1...1.20.3) Updates `cookie` from 0.4.1 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.1...v0.7.1) Updates `esbuild` from 0.19.11 to 0.25.1 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md) - [Commits](evanw/esbuild@v0.19.11...v0.25.1) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `follow-redirects` from 1.15.4 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.4...v1.15.9) Updates `nanoid` from 3.3.6 to 3.3.9 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.9) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `undici` from 5.28.3 to 5.28.5 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.5) --- updated-dependencies: - dependency-name: "@octokit/request-error" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: cookie-parser dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lint-staged dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: tsx dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@octokit/request" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: esbuild dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/npm_and_yarn-4fae721435
branch
from
1d1c7ab to
55643a2
Compare
Graysonbarton
approved these changes
May 5, 2025
Collaborator
Graysonbarton
left a comment
Graysonbarton
left a comment
There was a problem hiding this comment.
Signed-off-by: Grayson Barton [email protected]
Graysonbarton
approved these changes
Aug 28, 2025
Collaborator
Graysonbarton
left a comment
Graysonbarton
left a comment
There was a problem hiding this comment.
Signed-off-by: Grayson Barton [email protected]
Graysonbarton
approved these changes
Aug 28, 2025
Graysonbarton
approved these changes
Oct 26, 2025
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 12 updates in the / directory:
5.0.15.1.11.4.61.4.74.18.24.21.22.0.62.0.714.0.414.2.2115.0.215.5.04.7.04.19.37.23.27.26.108.1.48.4.11.6.21.8.33.3.63.3.95.28.35.28.5Updates
@octokit/request-errorfrom 5.0.1 to 5.1.1Release notes
Sourced from
@octokit/request-error's releases.Commits
b51ed27test: ReDos regex vulnerability, reported by@dayshift12a14f0fix: ReDos regex vulnerability, reported by@dayshift3af20bdfix: upgrade@octokit/typesto v1394147e8feat(security): Add provenance (#416)Updates
cookie-parserfrom 1.4.6 to 1.4.7Release notes
Sourced from cookie-parser's releases.
Changelog
Sourced from cookie-parser's changelog.
Commits
5d61e1e1.4.7ccf1f54deps: [email protected] (#116)429cfd4ci: Use GITHUB_OUTPUT envvar instead of set-output command (#100)ca4c97eci: fix errors in ci pipeline for node 8 and 9 (#104)97bdf39ci: add support for OSSF scorecard reporting (#103)e5862bdbuild: [email protected]f0688d2build: [email protected]44ec541build: [email protected]695435adeps: [email protected]f66e7e1build: [email protected]Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for cookie-parser since your current version.
Updates
expressfrom 4.18.2 to 4.21.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
1faf2284.21.22e0fb64deps: bump [email protected] (#6209)59fc270deps: [email protected] (#5956)51fc39cdocs: add funding (#6065)8e229f94.21.1a024c8afix(deps): [email protected]7e562c64.21.01bcde96fix(deps): [email protected] (#5946)7d36477fix(deps): [email protected] (#5951)40d2d8ffix(deps): [email protected]Maintainer changes
This version was pushed to npm by jonchurch, a new releaser for express since your current version.
Updates
http-proxy-middlewarefrom 2.0.6 to 2.0.7Release notes
Sourced from http-proxy-middleware's releases.
Changelog
Sourced from http-proxy-middleware's changelog.
Commits
1e92339ci(github-actions): fix npm tag90afb7cchore(package): v2.0.70b4274efix(filter): handle errors1bd6dd5ci(github actions): add publish.ymlUpdates
nextfrom 14.0.4 to 14.2.21Commits
2655f6ev14.2.218803d2bBackport (v14): Upgrade React from 14898b6a9 to 178c267a4e (#74115)6e35243chore(docs): add missingsearch: ''onremotePatterns(#73925) (#73927)54919d2chore(docs): update version history ofnext/image(#73926)049a690Backport: Fixunstable_allowDynamicwhen used with pnpm (#73765)663fa9cFix SWC and React versions for14-2-1branch (#73791)ed78a4av14.2.20530421d[backport] Fix/dedupe fetch clone (#73532)cbc62adv14.2.1992280dc[backport] Update max tag items limit in docs (#73445)Updates
lint-stagedfrom 15.0.2 to 15.5.0Release notes
Sourced from lint-staged's releases.
... (truncated)
Changelog
Sourced from lint-staged's changelog.
... (truncated)
Commits
7e6abe4chore(changeset): release0ebfa69build(deps): update dependencies630af5ffeat: do not reset to original state when preventing empty commit7b8be70chore: update default branch references from "master" to "main"362a78ddocs: add workaround for tsc ignoring tsconfig.json issue to README FAQ (#1523)e013823fix: "node_modules" typo in eslint.config.js67019eetest: add integration test to ensure unmodified merged files are not linted (...366f8bdrefactor: move TypeScript types to "index.d.ts" file85ea6a4docs: adjust readme regarding monorepo setupe53f950chore(changeset): releaseUpdates
tsxfrom 4.7.0 to 4.19.3Release notes
Sourced from tsx's releases.
... (truncated)
Commits
e04e6c6fix: upgradeesbuildto~0.25.0to address vuln report (#698)28a3e7ddocs: update links tonpx(#680)38b7135docs: add carbon ads7c47074fix: generate sourcesContent when Node.js debugger is enabled (#670)315d5f4docs(watch): document--includeflag375e39atest: refactor enforce-timeout524cb77docs(cjs): add compilation caveats7f8a051chore(deps): update dependency node to v20.18.0 (#660)97e8de0chore: upgrade pnpm95d2b0fchore: remove commit hooksUpdates
@babel/runtimefrom 7.23.2 to 7.26.10Release notes
Sourced from
@babel/runtime's releases.... (truncated)
Changelog
Sourced from
@babel/runtime's changelog.... (truncated)
Commits
e1ce99dv7.26.10d5952e8Fix processing of replacement pattern with named capture groups (#17173)64bca7bv7.26.92d95140v7.26.763d3038v7.26.0b07957ev7.25.9af91759fix: Accidentally publishing useless files (#16917)2533cfbv7.25.769d65f1[babel 8] Require Node.js^18.20.0 || ^20.17.0 || >=22.8.0(#16800)2f72b97v7.25.6Updates
@octokit/requestfrom 8.1.4 to 8.4.1Release notes
Sourced from
@octokit/request's releases.... (truncated)
Commits
356411efix: ReDos regex vulnerability, reported by@DayShift(#741)abc4955feat: re-addredirectrequest option (#636)4e7127cfix: upgrade@octokit/endpoint2e67925feat(security): Add provenance (#685)6822e8bfix: upgrade@octokit/typesdbfeab2feat: add documentation link in error message (#667)c013de4docs: fix spelling errors (#671)3d22c38chore(deps): update dependency prettier to v3.2.5984ec17chore(deps): update dependency esbuild to ^0.20.02a9cf78ci(action): update peter-evans/create-or-update-comment action to v4Updates
axiosfrom 1.6.2 to 1.8.3Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.