build(deps): bump the npm-dependencies group across 1 directory with 15 updates by dependabot[bot] · Pull Request #634 · guacsec/trustify-da-javascript-client

dependabot · 2026-09-10T10:13:07Z

Bumps the npm-dependencies group with 15 updates in the / directory:

Package	From	To
fast-xml-parser	`5.10.1`	`5.11.1`
js-yaml	`4.3.2`	`5.4.1`
p-limit	`7.3.0`	`7.3.2`
smol-toml	`1.7.1`	`1.8.0`
tree-sitter-containerfile	`0.8.1`	`0.9.2`
web-tree-sitter	`0.26.10`	`0.27.0`
yargs	`18.0.0`	`18.1.0`
@types/node	`25.9.4`	`26.5.1`
c8	`11.0.0`	`12.0.0`
eslint	`10.6.0`	`10.10.0`
globals	`17.7.0`	`17.12.0`
mocha	`11.7.6`	`12.0.1`
msw	`2.14.6`	`2.15.0`
sinon	`22.0.0`	`22.1.0`
typescript	`6.0.3`	`7.0.2`

Updates fast-xml-parser from 5.10.1 to 5.11.1

Release notes

Sourced from fast-xml-parser's releases.

v5.11.1

What's Changed

Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#858

Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#856

Bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#854

docs: fix two 404 documentation links by @rajanpanth in NaturalIntelligence/fast-xml-parser#862

New Contributors

@rajanpanth made their first contribution in NaturalIntelligence/fast-xml-parser#862

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.11.0...v5.11.1

v5.11.0

What's Changed

add support for endIndex in node metadata (5.x edition) by @Wain-PC in NaturalIntelligence/fast-xml-parser#850

fix: don't crash on a closing tag with no matching opening tag by @hdimer in NaturalIntelligence/fast-xml-parser#861

New Contributors

@Wain-PC made their first contribution in NaturalIntelligence/fast-xml-parser#850

@hdimer made their first contribution in NaturalIntelligence/fast-xml-parser#861

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.10.1...v5.11.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.11.1 / 2026-08-27

fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]

fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]

fix: DOCTYPE to read SYSTEM/PUBLIC

deps: strnum v2.4.2

5.10.1 / 2026-07-17

fix: multiple DOCTYPE declarations.

deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

upgrade:

xml-naming v0.3.0: cache support

PEM v1.6.2: sibling bug fix

is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

update strnum

*5.9.2 / 2026-06-17

dummy release to test changes in github action

*5.9.1 / 2026-06-17

dummy release to test release from github action

*5.9.0 / 2026-06-15

update strnum to 2.3.0

you can set hex, binary, enotation, infinity, unicode

validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)

This will consider xml-version as well. '1.0' is default

update strnum to 2.3.0

You can set octal and binary parsing which is bydeault off

update fast-xml-builder to 1.2.0

can sanitize tag names if found invalid

fix format output

5.7.3 / 2006-05-05

fix: alwaysCreateTextNode should create text node when attributes are present for self closing node

... (truncated)

Commits

3617550 5.11.1
6021128 update for release
6ddcb65 remove regex from validator
7d60815 docs: fix two 404 documentation links (#862)
4e3857b Bump actions/setup-node from 6.4.0 to 7.0.0 (#854)
fcc62fb Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 (#856)
23a9019 Bump actions/checkout from 7.0.0 to 7.0.1 (#858)
f3c69ae 5.11.0
fdbd072 update for release
c5fcb5b update lock files
Additional commits viewable in compare view

Updates js-yaml from 4.3.2 to 5.4.1

Changelog

Sourced from js-yaml's changelog.

[5.4.1] - 2026-08-26

Changed

Hard-limit merge sequence size to 100.

Security

Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

[breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.

[breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.

Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

Accept a byte order mark at the start of each document in a stream, #791.

Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.

Preserve empty scalar items when converting block sequences to flow style.

Do not apply the 1024-character simple-key limit to flow mapping keys.

Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.

Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

Added completely new documentation.

Exported DUMP_SCHEMA, the default schema used by the dumper.

Added YAMLException.throwAt() for throwing an error at a source position.

Changed

... (truncated)

Commits

e5a3ba0 5.4.1 released
e54dea3 Hard-limit merge sequence size to 100
dfd3a29 Cleanup 6a8e05f, #797
6a8e05f fix: count empty merge sources against maxTotalMergeKeys (#797)
6b4ff5e 5.4.0 released
3b3625e Update changelog
4f25a74 Fix file name
3bd003b Expose new scalar styling API
fbb3e9d Remove regex lookbehind for ES2015 compatibility
d43c185 Fix flowSkipColonSpace by forcing quoteFlowKeys
Additional commits viewable in compare view

Updates p-limit from 7.3.0 to 7.3.2

Release notes

Sourced from p-limit's releases.

v7.3.2

Fix limitFunction queue clearing (#109) f3e7f9b

sindresorhus/p-limit@v7.3.1...v7.3.2

v7.3.1

Fix detached limit.map calls (#108) ef37eb2

sindresorhus/p-limit@v7.3.0...v7.3.1

Commits

783068b 7.3.2
f3e7f9b Fix limitFunction queue clearing (#109)
df47604 7.3.1
ef37eb2 Fix detached limit.map calls (#108)
42599eb Fix typo
9f52583 Fix CI
See full diff in compare view

Updates smol-toml from 1.7.1 to 1.8.0

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

feat: stringify temporal objects by @Gouvernathor and @cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

refactor: improve performance of the parser by @cyyynthia

chore: revert sourcemap publishing by @cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

Commits

6d0f477 chore: bump version
97e9713 docs: mention temporal api
7a3068d perf: ubench opt for instanceof Date
7e8c09a feat: stringify temporal
19239d0 chore: bump version
5f55c3a chore: revert sourcemap publishing
5c26f1b chore: update benchmarks
92832d2 refactor: better logic orchestration in structs
2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
e6017c4 ci: use staged publish
See full diff in compare view

Updates tree-sitter-containerfile from 0.8.1 to 0.9.2

Release notes

Sourced from tree-sitter-containerfile's releases.

v0.9.2

What's Changed

fix(grammar): reject glued instruction keywords (FROMalpine) via scanner word boundary by @tinovyatkin in wharflab/tree-sitter-containerfile#48

Full Changelog: wharflab/tree-sitter-containerfile@v0.9.1...v0.9.2

v0.9.1

Full Changelog: wharflab/tree-sitter-containerfile@v0.9.0...v0.9.1

v0.9.0

What's Changed

Update dependency globals to v17.7.0 by @renovate[bot] in wharflab/tree-sitter-containerfile#42

Update Rust crate tree-sitter to v0.26.10 by @renovate[bot] in wharflab/tree-sitter-containerfile#46

Update dependency tree-sitter-cli to v0.26.10 by @renovate[bot] in wharflab/tree-sitter-containerfile#45

Update dependency eslint to v10.6.0 by @renovate[bot] in wharflab/tree-sitter-containerfile#44

Update dependency node-addon-api to v8.9.0 by @renovate[bot] in wharflab/tree-sitter-containerfile#43

fix(grammar): close 13 syntax gaps (CRLF, quoting, expansions, heredocs, image refs) by @tinovyatkin in wharflab/tree-sitter-containerfile#47

Full Changelog: wharflab/tree-sitter-containerfile@v0.8.1...v0.9.0

Commits

1df9124 chore: v0.9.2
d06c52d fix(grammar): reject glued instruction keywords (FROMalpine) via scanner word...
cfd2634 chore: v0.9.1
39ebc34 fix(grammar): close 13 syntax gaps (CRLF, quoting, expansions, heredocs, imag...
4ff2892 Update dependency node-addon-api to v8.9.0
c7fa574 Update dependency eslint to v10.6.0
8fb1f75 Update dependency tree-sitter-cli to v0.26.10
97bd84f Update Rust crate tree-sitter to v0.26.10
3043b21 Update dependency globals to v17.7.0
See full diff in compare view

Updates web-tree-sitter from 0.26.10 to 0.27.0

Release notes

Sourced from web-tree-sitter's releases.

v0.27.0

What's Changed

feat: start working on v0.27 by @clason in tree-sitter/tree-sitter#5127

docs(cli): include information on generated files by @clason in tree-sitter/tree-sitter#5129

fix(docs): remove conflicting --release cargo flag in contributing.md by @arkriny in tree-sitter/tree-sitter#5132

fix(cli): trailing whitespace after multiline text nodes in CST by @arkriny in tree-sitter/tree-sitter#5133

ci: bump the actions group with 2 updates by @dependabot[bot] in tree-sitter/tree-sitter#5137

fix(cli): correct discrepancy with cst for --no-ranges by @WillLillis in tree-sitter/tree-sitter#5134

ci: bump korthout/backport-action from 3 to 4 in the actions group by @dependabot[bot] in tree-sitter/tree-sitter#5155

build(deps): bump the cargo group with 2 updates by @dependabot[bot] in tree-sitter/tree-sitter#5154

Fix Playground Query by @kevin-hua-kraken in tree-sitter/tree-sitter#5150

fix(cli): cst printing improvements by @arkriny in tree-sitter/tree-sitter#5161

docs(cli): better description of files generated by init by @clason in tree-sitter/tree-sitter#5152

fix(cli): set language in cwd for all usages of highlight command by @WillLillis in tree-sitter/tree-sitter#5180

feat(cli): concurrent builds of the same grammar on different locations on disk by @stackmystack in tree-sitter/tree-sitter#5174

build(deps): bump the cargo group with 2 updates by @dependabot[bot] in tree-sitter/tree-sitter#5184

fix(cli): canonicalize build --output path by @WillLillis in tree-sitter/tree-sitter#5183

feat(cli): make test --update rewrite all corpus files by @arkriny in tree-sitter/tree-sitter#5179

build(deps): update rquickjs to 0.11.0 by @clason in tree-sitter/tree-sitter#5186

fix(cli): increase verbosity of tree-sitter init -u updates by @WillLillis in tree-sitter/tree-sitter#5178

fix(cli): restore test summary output for tree-sitter test by @arkriny in tree-sitter/tree-sitter#5197

feat(wasm): add some common used defs to wasm stdlib by @trim21 in tree-sitter/tree-sitter#5199

fix(wasm): update wasm-stdlib.h by @clason in tree-sitter/tree-sitter#5209

build(deps): bump clap from 4.5.53 to 4.5.54 in the cargo group by @dependabot[bot] in tree-sitter/tree-sitter#5211

Fix python free-threading compatibility by @kevmo314 in tree-sitter/tree-sitter#5212

fix(build): define _BSD_SOURCE by @WillLillis in tree-sitter/tree-sitter#5219

build(deps): bump the cargo group with 3 updates by @dependabot[bot] in tree-sitter/tree-sitter#5227

docs: various updates by @WillLillis in tree-sitter/tree-sitter#5228

fix(docs): appease clippy regarding spacing in README by @WillLillis in tree-sitter/tree-sitter#5236

fix(wasm): regenerate stdlib with wasm-opt by @clason in tree-sitter/tree-sitter#5237

fix: Clarify lifetime parameters; Rust 2018 idioms by @DanikVitek in tree-sitter/tree-sitter#5223

feat: free memory automatically by @theanarkh in tree-sitter/tree-sitter#5225

fix(cli): warn user when nm can't be run to verify the symbols inside the parser being built by @WillLillis in tree-sitter/tree-sitter#5245

feat(ci): ensure wasm-stdlib.h is regenerated when wasm stdlib source files are modified by @WillLillis in tree-sitter/tree-sitter#5229

docs(playground): highlight full row for highlighted nodes by @Tam1SH in tree-sitter/tree-sitter#5207

ci: bump actions/github-script from 7 to 8 in the actions group by @dependabot[bot] in tree-sitter/tree-sitter#5248

build(deps): bump cc from 1.2.52 to 1.2.53 in the cargo group by @dependabot[bot] in tree-sitter/tree-sitter#5247

wasm: give binaryen the wasi-sdk treatment by @WillLillis in tree-sitter/tree-sitter#5241

fix(loader): search correct cache directory for wasi-sdk clang by @WillLillis in tree-sitter/tree-sitter#5251

Fix tree-sitter-ruby crate failing to build to Wasm by @kossnocorp in tree-sitter/tree-sitter#5158

fix(wasm): add iswpunct to stdlib by @clason in tree-sitter/tree-sitter#5130

fix(lib): address strict aliasing violations with Array type by @WillLillis in tree-sitter/tree-sitter#5242

misc Windows fixes by @WillLillis in tree-sitter/tree-sitter#5256

docs: document parser library symbol checks for build command by @WillLillis in tree-sitter/tree-sitter#5258

build(deps): bump the cargo group with 2 updates by @dependabot[bot] in tree-sitter/tree-sitter#5263

fix(wasm): correct several bugs in realloc by @WillLillis in tree-sitter/tree-sitter#5261

fix(ci): add wasm-stdlib.h to cache key by @WillLillis in tree-sitter/tree-sitter#5266

fix(generate): error if a supertype is defined as a terminal by @WillLillis in tree-sitter/tree-sitter#5267

Action overflow by @WillLillis in tree-sitter/tree-sitter#5273

fix(wasm): don't wasm-opt twice by @clason in tree-sitter/tree-sitter#5253

... (truncated)

Commits

8933cb7 docs(web): add WASM version compatibility section
8263917 docs: specify Emscripten version constraints for web binding builds
129d8cd build(deps): bump eslint
0be5f89 fix(web): map Node-only specifiers to false via browser field
95eaaa2 build(deps): bump the npm group across 1 directory with 3 updates
dff1fd8 build(deps): bump esbuild and vite in /lib/binding_web
7be497a fix(web)!: report null when lookahead iterator is not positioned
6ea9a7c build(deps): bump the npm group across 1 directory with 4 updates
fecce45 build(deps): bump @types/node
4deef2d build(deps): bump eslint
Additional commits viewable in compare view

Updates yargs from 18.0.0 to 18.1.0

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

ignore bun when getting bin name (b77831c)

Bug Fixes

lang: 'count' for de locale (#2476) (971e351)

local prototype pollution vulnerability in apply-extends (437f3a4)

locale: add Georgian translation (#2474) (086aeaa)

17.7.3 (2026-06-19)

Bug Fixes

fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)

Commits

8878a89 chore(main): release 18.1.0 (#2475)
db916b4 chore: add workflow_dispatch for release-please (#2564)
4153e0f chore: improve build robustness (#2554)
186d2e6 docs: clarify nargs option-like values (#2551)
c615633 docs: fix various typos in source code (#2525)
7c76d0a docs: fix broken links in api.md (#2549)
37e2e5b chore: fix .wrap() docs (#2493)
547e300 chore: update the easy dependencies (#2552)
e086681 chore(deps): update dependency cross-env to v10 (#2480)
88f548c chore: fix typos (#2492)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.

Updates @types/node from 25.9.4 to 26.5.1

Commits

See full diff in compare view

Updates c8 from 11.0.0 to 12.0.0

Release notes

Sourced from c8's releases.

v12.0.0

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

yargs enforces a stricter range of Node versions ^20.19.0 || ^22.12.0 || >=23

Features

update yargs to 18.x.x (#599) (dc2d6c8)

Changelog

Sourced from c8's changelog.

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

yargs enforces a stricter range of Node versions ^20.19.0 || ^22.12.0 || >=23

Features

update yargs to 18.x.x (#599) (dc2d6c8)

Commits

ae5a0cf chore(main): release 12.0.0 (#600)
dc2d6c8 feat!: update yargs to 18.x.x (#599)
ee2f1cf chore(deps): update dependency @types/node to v24 (#579)
923c238 build: go back to publishing manually
See full diff in compare view

Updates eslint from 10.6.0 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)

c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)

5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)

427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)

9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)

87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)

8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)

9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

2417cad docs: Update README (GitHub Actions Bot)

9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)

8724829 docs: update compat table links (#21263) (fnx)

5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)

1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))

2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])

3c753f1 chore: update eslint (#21289) (renovate[bot])

1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)

08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)

77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])

007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)

0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

v10.9.1

Bug Fixes

1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)

55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)

8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)

684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

... (truncated)

Commits

3f20a57 10.10.0
f4e5284 Build: changelog update for 10.10.0
bb47dc6 fix: update dependency file-entry-cache to v11 (#20801)
427ac0a fix: use format strings in debug calls (#21247)
b3d876b chore: disable npm audit in ecosystem tests (#21306)
9d81532 fix: support __proto__ in /* exported */ comments (#21261)
264b434 feat: add d and v flags to no-unexpected-multiline (#21305)
1696682 ci: restore EMFILE test on Node.js 26 (#21297)
2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296)
87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282)
Additional commits viewable in compare view

Updates globals from 17.7.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

Update globals (2026-09-01) (#353) 50a2119

Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

v17.11.0

Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

Commits

98008c3 17.12.0
50a2119 Update globals (2026-09-01) (#353)
779a11a Add __webpack_layer__ global (#351)
8c59927 17.11.0
61eafbf Add react-native globals (#337)
7bed4af 17.10.0
f468407 Add GM_cookie to Greasemonkey globals (#349)
8e7b935 17.9.0
5a958ed Update globals (2026-08-01) (#348)
36c7659 17.8.0
Additional commits viewable in compare view

Updates mocha from 11.7.6 to 12.0.1

Release notes

Sourced from mocha's releases.

v12.0.1

12.0.1 (2026-09-08)

🩹 Fixes

bump serialize-javascript to ^7.1.1 (#6278) (02558a3)

deps: update dependency find-up to v8 (#5747) (ee11d29)

deps: update dependency is-path-inside to v4 (#5748) (5b27e3a)

deps: update dependency starlight-blog to ^0.29.0 (#6248) (532b82b)

keep unknown config values from becoming test specs (#6244) (15aa7d1)

only reject positional args that are entirely numeric (#6222) (1633779)

reporter: split err.stack at trailing frame block so embedded stacks render once (#5997) (90f48e4)

📚 Documentation

blog: fixup v12 blog (#6258) (6bcbee4)

fix minor API documentation issue (#6241) (683fd10)

publish v12 stable blog (#6249) (d5ad803)

🧹 Chores

auto-add GitHub items to project (#5686) (d24c320)

convert lib/runner.js to ESM (#6260) (123b2d5)

deps: update actions/add-to-project action to v2 (#6276) (00f873b)

deps: update actions/github-script action to v9 (#6277) (49ed525)

deps: update dependency astro to v7.2.9 (#6223) (513bd50)

deps: update dependency eslint to v10.9.1 (#6251) (e28b90c)

deps: update dependency eslint-plu...
Description has been truncated

…15 updates Bumps the npm-dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.10.1` | `5.11.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.2` | `5.4.1` | | [p-limit](https://github.com/sindresorhus/p-limit) | `7.3.0` | `7.3.2` | | [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.1` | `1.8.0` | | [tree-sitter-containerfile](https://github.com/wharflab/tree-sitter-containerfile) | `0.8.1` | `0.9.2` | | [web-tree-sitter](https://github.com/tree-sitter/tree-sitter/tree/HEAD/lib/binding_web) | `0.26.10` | `0.27.0` | | [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.1.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.4` | `26.5.1` | | [c8](https://github.com/bcoe/c8) | `11.0.0` | `12.0.0` | | [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.10.0` | | [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.12.0` | | [mocha](https://github.com/mochajs/mocha) | `11.7.6` | `12.0.1` | | [msw](https://github.com/mswjs/msw) | `2.14.6` | `2.15.0` | | [sinon](https://github.com/sinonjs/sinon) | `22.0.0` | `22.1.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | Updates `fast-xml-parser` from 5.10.1 to 5.11.1 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.10.1...v5.11.1) Updates `js-yaml` from 4.3.2 to 5.4.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.3.2...5.4.1) Updates `p-limit` from 7.3.0 to 7.3.2 - [Release notes](https://github.com/sindresorhus/p-limit/releases) - [Commits](sindresorhus/p-limit@v7.3.0...v7.3.2) Updates `smol-toml` from 1.7.1 to 1.8.0 - [Release notes](https://github.com/squirrelchat/smol-toml/releases) - [Commits](squirrelchat/smol-toml@v1.7.1...v1.8.0) Updates `tree-sitter-containerfile` from 0.8.1 to 0.9.2 - [Release notes](https://github.com/wharflab/tree-sitter-containerfile/releases) - [Commits](wharflab/tree-sitter-containerfile@v0.8.1...v0.9.2) Updates `web-tree-sitter` from 0.26.10 to 0.27.0 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](https://github.com/tree-sitter/tree-sitter/commits/v0.27.0/lib/binding_web) Updates `yargs` from 18.0.0 to 18.1.0 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md) - [Commits](yargs/yargs@v18.0.0...v18.1.0) Updates `@types/node` from 25.9.4 to 26.5.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `c8` from 11.0.0 to 12.0.0 - [Release notes](https://github.com/bcoe/c8/releases) - [Changelog](https://github.com/bcoe/c8/blob/main/CHANGELOG.md) - [Commits](bcoe/c8@v11.0.0...v12.0.0) Updates `eslint` from 10.6.0 to 10.10.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.6.0...v10.10.0) Updates `globals` from 17.7.0 to 17.12.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.7.0...v17.12.0) Updates `mocha` from 11.7.6 to 12.0.1 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v11.7.6...v12.0.1) Updates `msw` from 2.14.6 to 2.15.0 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.14.6...v2.15.0) Updates `sinon` from 22.0.0 to 22.1.0 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md) - [Commits](sinonjs/sinon@v22.0.0...v22.1.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: c8 dependency-version: 12.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: fast-xml-parser dependency-version: 5.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: globals dependency-version: 17.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: js-yaml dependency-version: 5.4.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: mocha dependency-version: 12.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: msw dependency-version: 2.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: p-limit dependency-version: 7.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: sinon dependency-version: 22.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: smol-toml dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tree-sitter-containerfile dependency-version: 0.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: web-tree-sitter dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: yargs dependency-version: 18.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 10, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-9c1954dc8c branch 2 times, most recently from 7eb977c to fc73061 Compare September 15, 2026 08:51

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-9c1954dc8c branch from fc73061 to 245b1f7 Compare September 15, 2026 08:56

Navigation Menu

Uh oh!

build(deps): bump the npm-dependencies group across 1 directory with 15 updates - #634

build(deps): bump the npm-dependencies group across 1 directory with 15 updates#634
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-9c1954dc8c

dependabot Bot commented on behalf of github Sep 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.11.1

What's Changed

New Contributors

v5.11.0

What's Changed

New Contributors

[5.4.1] - 2026-08-26

Changed

Security

[5.4.0] - 2026-08-25

Added

Changed

Fixed

[5.3.0] - 2026-08-14

Added

Changed

v7.3.2

v7.3.1

v1.8.0

What's Changed

v1.7.2

What's Changed

v0.9.2

What's Changed

v0.9.1

v0.9.0

What's Changed

v0.27.0

What's Changed

18.1.0 (2026-07-26)

Features

Bug Fixes

17.7.3 (2026-06-19)

Bug Fixes

16.2.2 (2026-06-19)

Bug Fixes

v12.0.0

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

Features

12.0.0 (2026-07-14)

⚠ BREAKING CHANGES

Features

v10.10.0

Features

Bug Fixes

Documentation

Chores

v10.9.1

Bug Fixes

Documentation

Chores

v10.9.0

Features

Bug Fixes

v17.12.0

v17.11.0

v17.10.0

v17.9.0

v17.8.0

v12.0.1

12.0.1 (2026-09-08)

🩹 Fixes

📚 Documentation

🧹 Chores

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 10, 2026 •

edited

Loading