Bump the npm_and_yarn group across 1 directory with 13 updates - #199
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the npm_and_yarn group across 1 directory with 13 updates#199dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm_and_yarn group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `16.2.6` | `16.3.4` | | [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.13` | `4.24.15` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.9.15` | `1.9.16` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.18` | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.1` | `2.3.0` | | [engine.io](https://github.com/socketio/socket.io) | `6.6.4` | `6.6.9` | | [ws](https://github.com/websockets/ws) | `8.17.1` | `8.21.3` | | [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` | | [socket.io-parser](https://github.com/socketio/socket.io) | `4.2.6` | `4.2.7` | | [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` | Updates `next` from 16.2.6 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.6...v16.3.4) Updates `next-auth` from 4.24.13 to 4.24.15 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.13...next-auth@4.24.15) Updates `@grpc/grpc-js` from 1.9.15 to 1.9.16 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.15...@grpc/grpc-js@1.9.16) Updates `brace-expansion` from 1.1.12 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18) Updates `body-parser` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.1...v2.3.0) Updates `engine.io` from 6.6.4 to 6.6.9 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/engine.io@6.6.4...engine.io@6.6.9) Updates `ws` from 8.17.1 to 8.21.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.17.1...8.21.3) Updates `form-data` from 4.0.5 to 4.0.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) Updates `nanoid` from 3.3.11 to 3.3.18 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md) - [Commits](ai/nanoid@3.3.11...3.3.18) Updates `sharp` from 0.34.5 to 0.35.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.4) Updates `socket.io-parser` from 4.2.6 to 4.2.7 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io-parser@4.2.6...socket.io-parser@4.2.7) Updates `uuid` from 8.3.2 to 11.1.1 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/v11.1.1/CHANGELOG.md) - [Commits](uuidjs/uuid@v8.3.2...v11.1.1) Updates `websocket-driver` from 0.7.4 to 0.7.5 - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-driver-node@0.7.4...0.7.5) --- updated-dependencies: - dependency-name: next dependency-version: 16.3.4 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next-auth dependency-version: 4.24.15 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-version: 1.9.16 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 2.3.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io dependency-version: 6.6.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.21.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sharp dependency-version: 0.35.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-version: 4.2.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 11.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the / directory:
16.2.616.3.44.24.134.24.151.9.151.9.161.1.121.1.182.2.12.3.06.6.46.6.98.17.18.21.34.0.54.0.64.2.64.2.70.7.40.7.5Updates
nextfrom 16.2.6 to 16.3.4Release notes
Sourced from next's releases.
... (truncated)
Commits
299180dv16.3.412e173d[16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)5d9022e[backport] Fix unset crossOrigin in Turbopack manifests (#97930)d8f4560[16.3.x] Fix build error when aliasing typescript to@typescript/typescript6...656aebf[16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)f37c1d6[16.3.x] ci: remove pull_request_stats workflow (#97975)a9a1cb7v16.3.3968b9fc[16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows3a15b4a[16.3.x] [next/image]: disable avif image optimization7378b51Backport/docs fixes 16.3 (#97649)Updates
next-authfrom 4.24.13 to 4.24.15Release notes
Sourced from next-auth's releases.
Commits
d857eecchore(release): next-auth@4.24.15 [skip ci]5bca239fix(next-auth): harden getToken parsing and bind OAuth check cookies to provi...db7e27dchore(deps): use uuid ^11.1.1 to keep CommonJS support (#13466)32d874cfix(next-auth): repair red v4 CI (lint + pre-existing test drift) (#13447)fa85858chore: update uuid to v14, remove deprecated types (#13422)2a39465Merge commit from fork19d2febMerge commit from forke9a892achore(release): bump version [skip ci]0497da4fix(providers): add issuer to github (#13412)Maintainer changes
This version was pushed to npm by better-gustavo, a new releaser for next-auth since your current version.
Updates
@grpc/grpc-jsfrom 1.9.15 to 1.9.16Release notes
Sourced from @grpc/grpc-js's releases.
Commits
0acbec3Merge pull request #3057 from murgatroid99/grpc-js_1.9.16dc863baMerge commit from fork5174091Merge commit from fork343ef83grpc-js: Bump version to 1.9.16f7d3eecMake compression error a static stringb6dcfc3Fix crashes when receiving malformed compressed data1cf4bfaFix server crash when handling invalid requests1aec8d8Merge pull request #2992 from murgatroid99/grpc-js_fix_buffer_type_1.9.xb9797cfgrpc-js: Declare buffer type to avoid build errorff204f7Merge pull request #2887 from murgatroid99/grpc-js-xds_preserve_type_state_1.9.xUpdates
brace-expansionfrom 1.1.12 to 1.1.18Release notes
Sourced from brace-expansion's releases.
Commits
758fcd61.1.1827fbeedMerge commit from fork5c57cc21.1.17d757f1dnpm ignore.claudecb4b9e4fix: backport GHSA-mh99-v99m-4gvg (#129)447763a1.1.16d74e630fix: v1 backport for CVE-2026-13149 (#122)2203f4f1.1.150b09384Backport v5.0.6 change to v1 (#111)10c05fc1.1.14Updates
body-parserfrom 2.2.1 to 2.3.0Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
Commits
d0f2ace2.3.0 (#735)7d03f2fchore: updated deps to latest (#733)8024ba7build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)32b4ed4build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)ff0f6b9docs: update outdated reference to MDN docs (#730)14d001arefactor: switch to const/let and enable eslint no-var rule (#729)37f36a2deps: update content-type and type-is (#728)e1c244bbuild(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)e01087fbuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)a7698d3build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)Updates
engine.iofrom 6.6.4 to 6.6.9Release notes
Sourced from engine.io's releases.
... (truncated)
Commits
9dbec81chore(release): engine.io@6.6.93ad4e1fdocs: improve example with PM20e5afeedocs: add example with PM2eab9623docs(eio): correct maxHttpBufferSize default in JSDoc (#5508)c17890cdocs: add documentation about WebTransport20df6aedocs(examples): add client-side load balancing example16d1923ci(publish): enable staged publishingad48a9bdocs(examples): add example with HTTP/2190572drefactor(eio-client): remove XMLHttpRequest from the definition filefad463cdocs(examples): fix duplicate self messages (#5341)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for engine.io since your current version.
Updates
wsfrom 8.17.1 to 8.21.3Release notes
Sourced from ws's releases.
... (truncated)
Commits
c791e70[dist] 8.21.3e97a20e[fix] Reject offers withclient_max_window_bitsbelow config787ebf2[dist] 8.21.2b4d62ebRevert "[ci] Trust Coveralls Homebrew tap"e4bb883[security] Use GitHub PVR as main reporting channel2eb3be0[test] Skip test on Node.js versions where it does not applyae1de54[dist] 8.21.18e9511b[ci] Trust Coveralls Homebrew tapf197ac6[fix] Lower default values ofmaxBufferedChunksandmaxFragments8df8265[ci] Update actions/checkout action to v7Updates
form-datafrom 4.0.5 to 4.0.6Changelog
Sourced from form-data's changelog.
Commits
64190dbv4.0.692ae0eb[Deps] updatehasown,mime-typesf31d21e[Dev Deps] update@ljharb/eslint-config,auto-changelog,tape8dff42c[Fix] escape CR, LF, and"in field names and filenames67b0f65[Dev Deps] updatejs-randomness-predictorUpdates
nanoidfrom 3.3.11 to 3.3.18Release notes
Sourced from nanoid's releases.
Changelog
Sourced from nanoid's changelog.
Commits
9ad9805Release 3.3.18 version55e50a0Update CI actione10f8d4Update index.native.js (#606)73d6716Release 3.3.17 versionf9d13f1Sync 0 size behaviour with PostCSS 59760e11Release 3.3.16 versione835c9bfix(non-secure): clamp negative size to prevent infinite loop (#601)96dd086Update CI actionba0bc3bDo not create latest release for v36819724Release 3.3.15 versionMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.
Updates
sharpfrom 0.34.5 to 0.35.4Release notes
Sourced from sharp's releases.
... (truncated)
Commits
7f1a0a2Release v0.35.4f927818Upgrade to sharp-libvips v1.3.3e802092Prerelease v0.35.4-rc.0e13eb2fCI: Fix wasm32 build (#4589)a82a0b3Upgrade to libvips v8.18.68044fe4Bound resize dimensions to coordinate limit147f859Docs: changelog entries for #4578 #4584ee5bfb8Tests: use yauzl directly rather than via extract-zip wrapper7a77889Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)ea5bef2Improve support for input Streams finishing before output is requested (#4584)Updates
socket.io-parserfrom 4.2.6 to 4.2.7Release notes
Sourced from socket.io-parser's releases.
Commits
4054894chore(release): socket.io-parser@4.2.77c6ef57fix(parser): reject binary packets with zero attachments57f1114fix(parser): honor toJSON() when deconstructing a binary packet (#5518)8d2e4f7docs(security): add CVE-2026-59724 and CVE-2026-59725d2d753frefactor(sio): align client file matching in Node.js HTTP serverdfb5ab3fix(sio): prevent uWebSockets.js from serving missing client filesdcbd961perf(eio): optimize polling request body buffering6bb2e7frefactor(sio): internalize base64id dependencya80711arefactor(eio): internalize base64id dependency8bead0fchore: upgrade to TypeScript 6Updates
uuidfrom 8.3.2 to 11.1.1Release notes
Sourced from uuid's releases.
... (truncated)
Changelog
Sourced from uuid's changelog.
... (truncated)
Commits
7269a96chore(11.x): release 11.1.1 (#949)32389c8fix: backport GHSA-w5hq-g745-h8pq fix2799f71chore: update workflow3d1eba0chore(main): release 11.1.0 (#866)a5231e7feat: update TS types to allowUint8Arraysubtypes forbufferoption (#865)aeabb60docs: docs housecleaning (#864)46ada3cchore(main): release 11.0.5 (#861)24ac2fdfix: add TS unit test, pin to typescript@5.0.4 (#860)e426aaabuild: usenpm packtarball for local examples and testing instead of .loca...050cd5bchore(main): release 11.0.4 (#842)Maintainer changes
This version was pushed to npm by