deps(deps): bump the weekly-minor-patch group across 1 directory with 6 updates - #1863
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
… 6 updates Bumps the weekly-minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.0` | `5.4.1` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.1` | `11.17.2` | | [openai](https://github.com/openai/openai-node) | `7.4.0` | `7.10.0` | | [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.0` | | [webpack](https://github.com/webpack/webpack) | `5.109.2` | `5.110.3` | | [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.19` | `2.11.21` | Updates `js-yaml` from 5.4.0 to 5.4.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.4.0...5.4.1) Updates `mermaid` from 11.17.1 to 11.17.2 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.1...mermaid@11.17.2) Updates `openai` from 7.4.0 to 7.10.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v7.4.0...v7.10.0) Updates `qs` from 6.15.3 to 6.16.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.3...v6.16.0) Updates `webpack` from 5.109.2 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.109.2...v5.110.3) Updates `baseline-browser-mapping` from 2.11.19 to 2.11.21 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.11.19...v2.11.21) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-minor-patch - dependency-name: mermaid dependency-version: 11.17.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-minor-patch - dependency-name: openai dependency-version: 7.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-minor-patch - dependency-name: qs dependency-version: 6.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-minor-patch - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: weekly-minor-patch - dependency-name: baseline-browser-mapping dependency-version: 2.11.21 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: weekly-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/master/weekly-minor-patch-7746dea0fc
branch
September 14, 2026 03:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the weekly-minor-patch group with 6 updates in the / directory:
5.4.05.4.111.17.111.17.27.4.07.10.06.15.36.16.05.109.25.110.32.11.192.11.21Updates
js-yamlfrom 5.4.0 to 5.4.1Changelog
Sourced from js-yaml's changelog.
Commits
e5a3ba05.4.1 releasede54dea3Hard-limit merge sequence size to 100dfd3a29Cleanup 6a8e05f, #7976a8e05ffix: count empty merge sources against maxTotalMergeKeys (#797)Updates
mermaidfrom 11.17.1 to 11.17.2Release notes
Sourced from mermaid's releases.
Commits
dcb694dVersion Packages (#8130)178d7c7fix: restore edgePaths class on the edge group (#8125)Updates
openaifrom 7.4.0 to 7.10.0Release notes
Sourced from openai's releases.
... (truncated)
Changelog
Sourced from openai's changelog.
... (truncated)
Commits
c22b09brelease: 7.10.0 (#2575)94ecdc4feat(api): add gpt-6-astra and related features (#2582)e6a7468docs: add canonical SDK security model (#2566)3cf755erelease: 7.9.0 (#2510)4908505feat(api): update usage APIs and documentation (#2565)82c5b2dchore: raise custom-code budget to 4,000 lines (#2562)a408e0bchore(deps-dev): bump browserslist to 4.28.7 across ecosystem tests (#2554)15dc890fix: restore monthly Node version review (#2553)eea2292fix: support Jest 28 CommonJS package imports (#2511)0a4fb1bfix(api): prevent Responses WebSockets from following redirects (#2513)Updates
qsfrom 6.15.3 to 6.16.0Changelog
Sourced from qs's changelog.
Commits
bb9379ev6.16.062fd254[Fix] stringify: serialize Date values when a filter is provided8859c37[Fix]parse: enforcearrayLimiton comma groups under[]=when `throwOn...8079adc[Tests]parse: remove a test that pinned[]=comma groups escaping `array...d56f48c[Fix]parse: flatten a collection appended to an overflowed arraye83d321[Fix]utils:isBuffer: do not invoke a non-callableconstructor.isBuffer7e87a07[Dev Deps] update@ljharb/eslint-config,eslint9a76af2[Dev Deps] updateeslint,evalmd3a890d4[Dev Deps] updateeslint,evalmdb433a9b[Fix]stringify: do not letallowEmptyArraysskip cycle detection (or dro...Updates
webpackfrom 5.109.2 to 5.110.3Release notes
Sourced from webpack's releases.
... (truncated)
Changelog
Sourced from webpack's changelog.
... (truncated)
Commits
a2d7b9cchore(release): new release (#21868)d6e86c0test(test262): assert two more errors webpack reports at build time (#21906)6a963fefix: keep require() into a concatenation substituted and unmangled (#21905)e1eb099fix: concatenatedrequire()inrequire.ensurecallback or computed reques...8d1ab53chore: escape literal NUL bytes in Compilation.js (#21904)5e6c4d7fix(defer): evaluate async dependencies where the deferred import sits (#21902)7ea4fa3fix: handle audited correctness edge cases (#21901)c50713cfix: keep code generation data per result instead of per NormalModule (#21900)ebd3be4docs: document the post-minor stabilization week and out-of-band releases (#2...80be700fix(config): keep the resolved optimization.minimize a boolean (#21886)Updates
baseline-browser-mappingfrom 2.11.19 to 2.11.21Commits
0e5ed80Patch to 2.11.21 because browser or feature data changed11da0b6Browser or feature data changed69fcc81Updating static siteb964de0Patch to 2.11.20 because browser or feature data changed723099fBrowser or feature data changedf44163dUpdating static siteDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsNote
Medium Risk
Lockfile-only bumps, but webpack, openai, and qs touch build output and runtime HTTP/query behavior; smoke-test
build/startand any OpenAI integration.Overview
Updates
package-lock.jsononly for the weekly Dependabot group:js-yaml5.4.0→5.4.1 (merge-key CPU limits),mermaid11.17.1→11.17.2 (SVGedgePathsstyling fix),openai7.4.0→7.10.0 (new API types/features and SDK fixes),qs6.15.3→6.16.0 (parse/stringify behavior fixes),webpack5.109.2→5.110.3 (ESM/CJS bundling and minify config fixes), andbaseline-browser-mapping2.11.19→2.11.21 (browser data).The lockfile also picks up transitive churn from webpack:
minimizer-webpack-plugin5.6.1→5.9.0 (new optional minifiers, nested terser), drops a standaloneeslint-scopetree from the lockfile, and nestsqs6.15.3 underwebpack-dev-serverwhile the root resolves 6.16.0.Reviewed by Cursor Bugbot for commit e57e377. Bugbot is set up for automated code reviews on this repo. Configure here.