build(deps): bump the npm_and_yarn group across 1 directory with 8 updates #273

dependabot · 2026-01-01T19:27:42Z

Bumps the npm_and_yarn group with 5 updates in the / directory:

Package	From	To
qs	`6.14.0`	`6.14.1`
nuxt	`3.17.4`	`3.19.0`
js-yaml	`3.14.1`	`3.14.2`
node-forge	`1.3.1`	`1.3.3`
tar-fs	`2.1.2`	`2.1.4`

Updates qs from 6.14.0 to 6.14.1

Changelog

Sourced from qs's changelog.

6.14.1

[Fix] ensure arrayLength applies to [] notation as well

[Fix] parse: when a custom decoder returns null for a key, ignore that key

[Refactor] parse: extract key segment splitting helper

[meta] add threat model

[actions] add workflow permissions

[Tests] stringify: increase coverage

[Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect

Commits

3fa11a5 v6.14.1
a626704 [Dev Deps] update npmignore
3086902 [Fix] ensure arrayLength applies to [] notation as well
fc7930e [Dev Deps] update eslint, @ljharb/eslint-config
0b06aac [Dev Deps] update @ljharb/eslint-config
64951f6 [Refactor] parse: extract key segment splitting helper
e1bd259 [Dev Deps] update @ljharb/eslint-config
f4b3d39 [eslint] add eslint 9 optional peer dep
6e94d95 [Dev Deps] update eslint, @ljharb/eslint-config, npmignore
973dc3c [actions] add workflow permissions
Additional commits viewable in compare view

Updates nuxt from 3.17.4 to 3.19.0

Release notes

Sourced from nuxt's releases.

v3.19.0

👀 Highlights

Please see the release notes for Nuxt v4.1 for full details on the features and fixes in Nuxt v3.19.

✅ Upgrading

As usual, our recommendation for upgrading is to run:
npx nuxt upgrade --dedupe
This will refresh your lockfile and pull in all the latest dependencies that Nuxt relies on, especially from the unjs ecosystem.

👉 Changelog

compare changes

🚀 Enhancements

kit: Add ignore option to resolveFiles (#32858)

kit: Add onInstall and onUpgrade module hooks (#32397)

nuxt,vite: Add experimental support for rolldown-vite (#31812)

nuxt: Extract defineRouteRules to page rules property (#32897)

nuxt,vite: Use importmap to increase chunk stability (#33075)

nuxt: Lazy hydration macros without auto-imports (#33037)

kit,nuxt,schema: Allow modules to specify dependencies (#33063)

kit,nuxt: Add getLayerDirectories util and refactor to use it (#33098)

🔥 Performance

nuxt: Clear inline route rules cache when pages change (#32877)

nuxt: Stop watching app manifest once a change has been detected (#32880)

🩹 Fixes

nuxt: Handle satisfies in page augmentation (#32902)

nuxt: Type response in useFetch hooks (#32891)

nuxt: Add TS parenthesis and as expression for page meta extraction (#32914)

nuxt: Use correct unit thresholds for relative time (#32893)

nuxt: Handle uncached current build manifests (#32913)

kit: Resolve directories in resolvePath and normalize file extensions (#32857)

schema,vite: Bump requestTimeout + allow configuration (#32874)

nuxt: Deep merge extracted route meta (#32887)

nuxt: Do not expose app components until fully resolved (#32993)

kit: Only exclude node_modules/ if no custom srcDir (#32987)

nuxt: Compare final matched routes when syncing route object (#32899)

nuxt: Make vue server warnings much less verbose in dev mode (#33018)

schema: Allow disabling cssnano/autoprefixer postcss plugins (#33016)

kit: Ensure local layers are prioritised alphabetically (#33030)

kit,nuxt: Expose global types to vue compiler (#33026)

nuxt: Support config type inference for defineNuxtModule().with() (#33081)

nuxt: Search for colliding names in route children (31a9282c2)

nuxt: Delete nuxtApp._runningTransition on resolve (#33025)

nuxt: Add validation for nuxt island reviver key (#33069)

... (truncated)

Commits

8956505 v3.19.0
9a3b445 test: update test for app creation
ae8b0d2 fix(kit): prioritise local layers over extended layers
2fd3bc2 feat(kit,nuxt): add getLayerDirectories util and refactor to use it (#33098)
6cc79dd feat(kit,nuxt,schema): allow modules to specify dependencies (#33063)
78153ba fix(nuxt): add validation for nuxt island reviver key (#33069)
f4e38b7 fix(nuxt): delete nuxtApp._runningTransition on resolve (#33025)
31a9282 fix(nuxt): search for colliding names in route children
10fd012 refactor(kit,nuxt,ui-templates,vite): address deprecations + improve regexp p...
04dda84 feat(nuxt): lazy hydration macros without auto-imports (#33037)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nuxt since your current version.

Updates @nuxt/devtools from 2.4.1 to 2.7.0

Release notes

Sourced from @nuxt/devtools's releases.

v2.7.0

   🐞 Bug Fixes

devtools: Use vite plugin for env-specific config - by @danielroe in nuxt/devtools#899 (0c258)

    View changes on GitHub

v2.6.5

   🐞 Bug Fixes

Ensure path resolve is safe - by @antfu (1fabb)

    View changes on GitHub

v2.6.4

   🐞 Bug Fixes

Using textContent instead of innerHtml for auth pagechore: update lock - by @antfu (7cadb)

    View changes on GitHub

v2.6.3

No significant changes

    View changes on GitHub

v2.6.2

   🐞 Bug Fixes

Panel dragging issue, close #874, close #871, close #873 - by @antfu in nuxt/devtools#874, nuxt/devtools#871 and nuxt/devtools#873 (619de)

    View changes on GitHub

v2.6.1

   🐞 Bug Fixes

deps: Do not depend on @nuxt/schema - by @danielroe in nuxt/devtools#872 (62443)

    View changes on GitHub

v2.6.0

   🚀 Features

Update deps - by @antfu (eef2c)

   🐞 Bug Fixes

Timing labels wrapping - by @DallasHoff in nuxt/devtools#866 (fd01e)

    View changes on GitHub

... (truncated)

Changelog

Sourced from @nuxt/devtools's changelog.

2.7.0 (2025-10-26)

Bug Fixes

devtools: use vite plugin for env-specific config (#899) (0c258d4)

2.6.5 (2025-09-20)

Bug Fixes

ensure path resolve is safe (1fabb49)

2.6.4 (2025-09-19)

Bug Fixes

using textContent instead of innerHtml for auth pagechore: update lock (7cadbbe)

2.6.3 (2025-08-22)

2.6.2 (2025-07-02)

Bug Fixes

panel dragging issue, close #874, close #871, close #873 (619de37)

2.6.1 (2025-07-01)

Bug Fixes

deps: do not depend on @nuxt/schema (#872) (62443ec)

2.6.0 (2025-06-29)

... (truncated)

Commits

e62257b chore: release v2.7.0
d80924b chore: update deps
0c258d4 fix(devtools): use vite plugin for env-specific config (#899)
2cd1e2c chore: release v2.6.5
191eb3f refactor: unified all error messages
1fabb49 fix: ensure path resolve is safe
39a0677 chore: release v2.6.4
7cadbbe fix: using textContent instead of innerHtml for auth pagechore: update lock
27f80d0 chore: release v2.6.3
d602a81 chore: release v2.6.2
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @nuxt/devtools since your current version.

Updates devalue from 5.1.1 to 5.6.1

Release notes

Sourced from devalue's releases.

v5.6.1

Patch Changes

2161d44: fix: add hasOwn check before calling reviver

v5.6.0

Minor Changes

a3d09d4: feat: expose DevalueError for instanceof checks in catch clauses

a3d09d4: feat: add value and root properties in DevalueError instances

v5.5.0

Minor Changes

828fa1c: Enable support for custom reducer/reviver for "function" values

v5.4.2

Patch Changes

5c26c0d: fix: allow custom revivers to revive things serialized by builtin reducers

v5.4.1

Patch Changes

ca3c7b6: chore: Remove impossible void type from replacer's uneval

v5.4.0

Minor Changes

9306d09: feat: pass uneval to replacer, for handling nested custom types

Patch Changes

b617c7c: perf: shrink uneval output with null-proto objects

v5.3.2

Patch Changes

0623a47: fix: disallow array method access when parsing

0623a47: fix: disallow __proto__ properties on objects

v5.3.1

Patch Changes

ae904c5: fix: correctly differentiate between +0 and -0

v5.3.0

Minor Changes

2896e7b: feat: support Temporal

... (truncated)

Changelog

Sourced from devalue's changelog.

5.6.1

Patch Changes

2161d44: fix: add hasOwn check before calling reviver

5.6.0

Minor Changes

a3d09d4: feat: expose DevalueError for instanceof checks in catch clauses

a3d09d4: feat: add value and root properties in DevalueError instances

5.5.0

Minor Changes

828fa1c: Enable support for custom reducer/reviver for "function" values

5.4.2

Patch Changes

5c26c0d: fix: allow custom revivers to revive things serialized by builtin reducers

5.4.1

Patch Changes

ca3c7b6: chore: Remove impossible void type from replacer's uneval

5.4.0

Minor Changes

9306d09: feat: pass uneval to replacer, for handling nested custom types

Patch Changes

b617c7c: perf: shrink uneval output with null-proto objects

5.3.2

Patch Changes

0623a47: fix: disallow array method access when parsing

0623a47: fix: disallow __proto__ properties on objects

5.3.1

... (truncated)

Commits

5e07a67 Version Packages (#129)
aa09604 Bump js-yaml from 3.14.1 to 3.14.2 (#125)
2161d44 fix: add hasOwn check before calling reviver (#128)
83de81d Version Packages (#127)
a3d09d4 Add value and root properties in DevalueError instances (#126)
f4b37f3 Version Packages (#124)
828fa1c Enable support for custom reducer/reviver for "function" values (#123)
6f4eb8b Version Packages (#119)
5c26c0d fix: allow custom revivers to revive things serialized by buitin reducers (#118)
8b0c28d Version Packages (#117)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for devalue since your current version.

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

Types are now exported as yaml.types.XXX.

Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

Check migration guide to see details for all breaking changes.

Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.

Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.

yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.

yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.

!!binary now always mapped to Uint8Array on load.

Reduced nesting of /lib folder.

Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).

dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.

Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.

Code snippet created in exceptions now contains multiple lines with line numbers.

dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.

dump() with skipInvalid=true now serializes invalid items in collections as null.

Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.

Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

Added .mjs (es modules) support.

Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.

Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

9963d36 3.14.2 released
10d3c8e dist rebuild
5278870 fix prototype pollution in merge (<<) (#731)
See full diff in compare view

Updates node-forge from 1.3.1 to 1.3.3

Changelog

Sourced from node-forge's changelog.

1.3.3 - 2025-12-02

Fixed

[pkcs12] Make digestAlgorithm parameters optional to fix PKCS#12/PFX issues introduced in 1.3.2.

1.3.2 - 2025-11-25

Security

HIGH: ASN.1 Validator Desynchronization

An Interpretation Conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.

Reported by Hunter Wodzenski.

CVE ID: CVE-2025-12816

GHSA ID: GHSA-5gfm-wpxj-wjgq

HIGH: ASN.1 Unbounded Recursion

An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs.

Reported by Hunter Wodzenski.

CVE ID: CVE-2025-66031

GHSA ID: GHSA-554w-wpv2-vw27

MODERATE: ASN.1 OID Integer Truncation

An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions.

Reported by Hunter Wodzenski.

CVE ID: CVE-2025-66030

GHSA ID: GHSA-65ch-62r8-g69g

Fixed

[asn1] Fix for vulnerability identified by CVE-2025-12816 PKCS#12 MAC verification bypass due to missing macData enforcement and improper asn1.validate routine.

[asn1] Add fromDer() max recursion depth check.

Add a asn1.maxDepth global configurable maximum depth of 256.

Add a asn1.fromDer() per-call maxDepth option.

NOTE: The default maximum is assumed to be higher than needed for valid data. If this assumption is false then this could be a breaking change. Please file an issue if there are use cases that need a higher maximum.

NOTE: The per-call maxDepth parameter has not been exposed up through all of the API stack due to the complexities involved. Please file an issue if there are use cases that require this instead of changing the default

... (truncated)

Commits

1cea0af Release 1.3.3.
5265989 Update changelog.
e4f3961 Fix changelog for release.
503979b Update changelog.
c3b3b32 Make digestAlgorithm parameters optional
6f70043 Update CVE details.
f547b0d Start 1.3.3-0.
235ad3e Release 1.3.2.
2598244 Update changelog.
0032dd0 Fix typos.
Additional commits viewable in compare view

Updates tar-fs from 2.1.2 to 2.1.4

Commits

f421a23 2.1.4
c412fa1 refactor to same pattern as v3
4b7e868 2.1.3
266194b hardlink tweak from main
See full diff in compare view

Updates vite from 6.3.5 to 7.3.0

Release notes

Sourced from vite's releases.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.1

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.3.0 (2025-12-15)

Features

deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

plugin shortcut support (#21211) (721f163)

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

config: handle shebang properly (#21158) (df5a30d)

deps: update all non-major dependencies (#21146) (a3cd262)

deps: update all non-major dependencies (#21175) (72e398a)

fix external: true merging (#21164) (5ef557a)

shortcuts not rebound after server restart (#21166) (3765f7b)

Performance Improvements

deps: replace debug with obug (#21137) (203a551)

Documentation

clarify manifest.json imports field is JS chunks only (#21136) (46d3077)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21174) (74559c9)

7.2.4 (2025-11-20)

Bug Fixes

revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

7.2.3 (2025-11-20)

Bug Fixes

allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)

deps: update all non-major dependencies (#21096) (6a34ac3)

deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

deps: replace debug with obug (#21107) (acfe939)

Miscellaneous Chores

... (truncated)

Commits

acf7e05 release: v7.3.0
cff26ec feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)
317b3b2 release: v7.2.7
721f163 fix: plugin shortcut support (#21211)
bda5dbb release: v7.2.6
3aa7527 release: v7.2.5
72e398a fix(deps): update all non-major dependencies (#21175)
3765f7b fix: shortcuts not rebound after server restart (#21166)
5ef557a fix: fix external: true merging (#21164)
74559c9 chore(deps): update rolldown-related dependencies (#21174)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates Bumps the npm_and_yarn group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [qs](https://github.com/ljharb/qs) | `6.14.0` | `6.14.1` | | [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `3.17.4` | `3.19.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.3` | | [tar-fs](https://github.com/mafintosh/tar-fs) | `2.1.2` | `2.1.4` | Updates `qs` from 6.14.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.0...v6.14.1) Updates `nuxt` from 3.17.4 to 3.19.0 - [Release notes](https://github.com/nuxt/nuxt/releases) - [Commits](https://github.com/nuxt/nuxt/commits/v3.19.0/packages/nuxt) Updates `@nuxt/devtools` from 2.4.1 to 2.7.0 - [Release notes](https://github.com/nuxt/devtools/releases) - [Changelog](https://github.com/nuxt/devtools/blob/main/CHANGELOG.md) - [Commits](https://github.com/nuxt/devtools/commits/v2.7.0/packages/devtools) Updates `devalue` from 5.1.1 to 5.6.1 - [Release notes](https://github.com/sveltejs/devalue/releases) - [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md) - [Commits](sveltejs/devalue@v5.1.1...v5.6.1) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `node-forge` from 1.3.1 to 1.3.3 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.3) Updates `tar-fs` from 2.1.2 to 2.1.4 - [Commits](mafintosh/tar-fs@v2.1.2...v2.1.4) Updates `vite` from 6.3.5 to 7.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nuxt dependency-version: 3.19.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@nuxt/devtools" dependency-version: 2.7.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: devalue dependency-version: 5.6.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar-fs dependency-version: 2.1.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates #273

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates #273

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates #273

Are you sure you want to change the base?

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates #273

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 1, 2026

6.14.1

v3.19.0

👀 Highlights

✅ Upgrading

👉 Changelog

🚀 Enhancements

🔥 Performance

🩹 Fixes

v2.7.0

🐞 Bug Fixes

View changes on GitHub

v2.6.5

🐞 Bug Fixes

View changes on GitHub

v2.6.4

🐞 Bug Fixes

View changes on GitHub

v2.6.3

View changes on GitHub

v2.6.2

🐞 Bug Fixes

View changes on GitHub

v2.6.1

🐞 Bug Fixes

View changes on GitHub

v2.6.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

2.7.0 (2025-10-26)

Bug Fixes

2.6.5 (2025-09-20)

Bug Fixes

2.6.4 (2025-09-19)

Bug Fixes

2.6.3 (2025-08-22)

2.6.2 (2025-07-02)

Bug Fixes

2.6.1 (2025-07-01)

Bug Fixes

2.6.0 (2025-06-29)

v5.6.1

Patch Changes

v5.6.0

Minor Changes

v5.5.0

Minor Changes

v5.4.2

Patch Changes

v5.4.1

Patch Changes

v5.4.0

Minor Changes

Patch Changes

v5.3.2

Patch Changes

v5.3.1

Patch Changes

v5.3.0

Minor Changes

5.6.1

Patch Changes

5.6.0

Minor Changes

5.5.0

Minor Changes

5.4.2

Patch Changes

5.4.1

Patch Changes

5.4.0

Minor Changes

Patch Changes

5.3.2