Skip to content

build(deps): bump the npm-deps group with 10 updates#6224

Merged
FlowCryptRobot merged 3 commits into
masterfrom
dependabot/npm_and_yarn/npm-deps-786e1c1eac
May 18, 2026
Merged

build(deps): bump the npm-deps group with 10 updates#6224
FlowCryptRobot merged 3 commits into
masterfrom
dependabot/npm_and_yarn/npm-deps-786e1c1eac

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 17, 2026

Bumps the npm-deps group with 10 updates:

Package From To
dompurify 3.4.2 3.4.4
linkify-html 4.3.2 4.3.3
linkifyjs 4.3.2 4.3.3
ava 8.0.0 8.0.1
eslint 10.3.0 10.4.0
lint-staged 17.0.4 17.0.5
puppeteer 24.43.0 25.0.2
stylelint 17.11.0 17.11.1
typescript-eslint 8.59.2 8.59.3
undici-types 8.2.0 8.3.0

Updates dompurify from 3.4.2 to 3.4.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.4

  • Added the selectedcontent element to default allow-list, thanks @​lukewarlow
  • Added the command and commandfor attributes to default allowed-list, thanks @​lukewarlow
  • Added better template scrubbing for IN_PLACE operations, thanks @​DEMON1A
  • Added stronger checks for cross-realm windows, thanks @​DEMON1A & @​fg0x0
  • Updated demo website and made sure it uses the latest from main
  • Updated existing workflows, fuzzer, dependabot, etc., added more tests
  • Bumped several dependencies where possible

DOMPurify 3.4.3

  • Fixed an issue with handling of nested Shadow DOM trees, thanks @​fishjojo1
  • Fixed the template regexes to be more robust against ReDoS attacks, thanks @​aleung27
  • Updated the node iteration code to catch more Shadow DOM related issues
  • Updated Playwright and added Node 26 to test matrix
  • Updated existing workflows, fuzzer, release signing, etc., added more tests
  • Bumped several dependencies where possible
Commits

Updates linkify-html from 4.3.2 to 4.3.3

Release notes

Sourced from linkify-html's releases.

v4.3.3

What's Changed

  • Fix parsing bugs with some special encoded URLs
  • Parsed emails should not include port numbers
  • Exact version requirement for interfaces and plugins to avoid incompatibility issues with older versions of linkify core
  • Support for jQuery 4

Full Changelog: nfrasser/linkifyjs@v4.3.2...v4.3.3

Changelog

Sourced from linkify-html's changelog.

v4.3.3

  • Fix parsing bugs with some special encoded URLs
  • Parsed emails should not include port numbers
  • Exact version requirement for interfaces and plugins to avoid incompatibility issues with older versions of linkify core
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for linkify-html since your current version.


Updates linkifyjs from 4.3.2 to 4.3.3

Release notes

Sourced from linkifyjs's releases.

v4.3.3

What's Changed

  • Fix parsing bugs with some special encoded URLs
  • Parsed emails should not include port numbers
  • Exact version requirement for interfaces and plugins to avoid incompatibility issues with older versions of linkify core
  • Support for jQuery 4

Full Changelog: nfrasser/linkifyjs@v4.3.2...v4.3.3

Changelog

Sourced from linkifyjs's changelog.

v4.3.3

  • Fix parsing bugs with some special encoded URLs
  • Parsed emails should not include port numbers
  • Exact version requirement for interfaces and plugins to avoid incompatibility issues with older versions of linkify core
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for linkifyjs since your current version.


Updates ava from 8.0.0 to 8.0.1

Release notes

Sourced from ava's releases.

v8.0.1

What's Changed

This release officially adds Node.js 26 support, with thanks to @​novemberborn in avajs/ava#3450.

Per our policy, support for Node.js 25 has been removed.

Full Changelog: avajs/ava@v8.0.0...v8.0.1

Commits

Updates eslint from 10.3.0 to 10.4.0

Release notes

Sourced from eslint's releases.

v10.4.0

Features

  • 1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)
  • 450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

  • 544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)
  • 6799431 fix: update dependency @​eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])
  • f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

  • 7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)
  • db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)
  • 9084664 docs: Update README (GitHub Actions Bot)
  • 9cc7387 docs: Update README (GitHub Actions Bot)
  • 3d7b548 docs: Update README (GitHub Actions Bot)
  • 191ec3c docs: Update README (GitHub Actions Bot)

Chores

  • 6616856 chore: upgrade knip to v6 (#20875) (Pixel998)
  • d13b084 ci: ensure auto-created PRs run CI (#20860) (lumir)
  • e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862) (dependabot[bot])
  • d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863) (kuldeep kumar)
  • 24db8cb test: add tests for SuppressionsService.save() (#20802) (kuldeep kumar)
  • 2ef0549 chore: update ecosystem plugins (#20857) (github-actions[bot])
  • a429791 ci: remove eslint-webpack-plugin types integration test (#20668) (Milos Djermanovic)
  • 9e37386 chore: replace recast with range approach in code-sample-minimizer (#20682) (Copilot)
  • 0dd1f9f test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#20845) (Francesco Trotta)
  • 9da3c7b refactor: remove deprecated meta.language and migrate meta.dialects (#20716) (Pixel998)
  • 2099ed1 refactor: add meta.defaultOptions to more rules, enable linting (#20800) (xbinaryx)
  • f1dfbc9 chore: update ecosystem plugins (#20836) (github-actions[bot])
  • c759413 ci: bump pnpm/action-setup from 6.0.3 to 6.0.5 (#20843) (dependabot[bot])
  • 5b817d6 test: add unit tests for lib/shared/ast-utils (#20838) (kuldeep kumar)
  • 1c13ae3 test: add unit tests for lib/shared/severity (#20835) (kuldeep kumar)
Commits

Updates lint-staged from 17.0.4 to 17.0.5

Release notes

Sourced from lint-staged's releases.

v17.0.5

Patch Changes

  • #1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.
Changelog

Sourced from lint-staged's changelog.

17.0.5

Patch Changes

  • #1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.
Commits
  • cbd822e Merge pull request #1793 from lint-staged/changeset-release/main
  • 1911244 chore(changeset): release
  • 7339d7d Merge pull request #1792 from lint-staged/fix-max-arg-length-default
  • 1f67271 fix: default maxArgLength to undefined instead of NaN when parsing cli ...
  • See full diff in compare view

Updates puppeteer from 24.43.0 to 25.0.2

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.0.2

25.0.2 (2026-05-15)

🛠️ Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.1 to 3.0.2

puppeteer: v25.0.2

25.0.2 (2026-05-15)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.1 to 3.0.2
      • puppeteer-core bumped from 25.0.1 to 25.0.2

puppeteer-core: v25.0.1

25.0.1 (2026-05-13)

🛠️ Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.0 to 3.0.1

puppeteer: v25.0.1

25.0.1 (2026-05-13)

... (truncated)

Changelog

Sourced from puppeteer's changelog.

25.0.2 (2026-05-15)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.1 to 3.0.2

🛠️ Fixes

25.0.1 (2026-05-13)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.0 to 3.0.1

🛠️ Fixes

25.0.0 (2026-05-12)

⚠ BREAKING CHANGES

  • remove deprecated Puppeteer.product (#14977)
  • bump min NodeJS to 22 (#14973)
  • return a Promise for executablePath, defaultArgs (#14965)

... (truncated)

Commits

Updates stylelint from 17.11.0 to 17.11.1

Release notes

Sourced from stylelint's releases.

17.11.1

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).
Changelog

Sourced from stylelint's changelog.

17.11.1 - 2026-05-14

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).
Commits
  • e7a3d19 Release 17.11.1 (#9290)
  • 63c5992 Fix node_modules ignore for codeFilename paths containing a dot-prefixed ...
  • 8b05dab Bump postcss from 8.5.13 to 8.5.14 in the postcss group (#9286)
  • 2dbc0f0 Bump eslint from 10.2.1 to 10.3.0 in the eslint group (#9285)
  • 769b772 Bump the stylelint-actions group with 5 updates (#9284)
  • 2e68086 Refactor isPlainObject() to drop is-plain-object dependency (#9280)
  • 3ea54e8 Add Node.js v26 to test matrix on CI (#9279)
  • 884b7eb Bump fast-uri from 3.1.0 to 3.1.2 (#9277)
  • f3cd80c Refactor declaration-block-no-redundant-longhand-properties rule (#9275)
  • dd1e81d Fix declaration-block-no-redundant-longhand-properties range for contiguous...
  • See full diff in compare view

Updates typescript-eslint from 8.59.2 to 8.59.3

Release notes

Sourced from typescript-eslint's releases.

v8.59.3

8.59.3 (2026-05-11)

This was a version bump only, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.59.3 (2026-05-11)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates undici-types from 8.2.0 to 8.3.0

Release notes

Sourced from undici-types's releases.

v8.3.0

What's Changed

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
ava [>= 6.0.a, < 6.1]
puppeteer [>= 21.7.a, < 21.8]
puppeteer [>= 22.0.a, < 22.1]
puppeteer [>= 22.1.a, < 22.2]
puppeteer [>= 22.3.a, < 22.4]
puppeteer [>= 22.5.a, < 22.6]
puppeteer [>= 22.6.a, < 22.7]
puppeteer [>= 22.4.a, < 22.5]
puppeteer [>= 22.2.a, < 22.3]
puppeteer [>= 22.7.a, < 22.8]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the npm-deps group with 10 updates
864d271 
Bumps the npm-deps group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.2` | `3.4.4` |
| [linkify-html](https://github.com/nfrasser/linkifyjs/tree/HEAD/packages/linkify-html) | `4.3.2` | `4.3.3` |
| [linkifyjs](https://github.com/nfrasser/linkifyjs/tree/HEAD/packages/linkifyjs) | `4.3.2` | `4.3.3` |
| [ava](https://github.com/avajs/ava) | `8.0.0` | `8.0.1` |
| [eslint](https://github.com/eslint/eslint) | `10.3.0` | `10.4.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.4` | `17.0.5` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.43.0` | `25.0.2` |
| [stylelint](https://github.com/stylelint/stylelint) | `17.11.0` | `17.11.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.2` | `8.59.3` |
| [undici-types](https://github.com/nodejs/undici) | `8.2.0` | `8.3.0` |


Updates `dompurify` from 3.4.2 to 3.4.4
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.2...3.4.4)

Updates `linkify-html` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/nfrasser/linkifyjs/releases)
- [Changelog](https://github.com/nfrasser/linkifyjs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nfrasser/linkifyjs/commits/v4.3.3/packages/linkify-html)

Updates `linkifyjs` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/nfrasser/linkifyjs/releases)
- [Changelog](https://github.com/nfrasser/linkifyjs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nfrasser/linkifyjs/commits/v4.3.3/packages/linkifyjs)

Updates `ava` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v8.0.0...v8.0.1)

Updates `eslint` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.3.0...v10.4.0)

Updates `lint-staged` from 17.0.4 to 17.0.5
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.0.4...v17.0.5)

Updates `puppeteer` from 24.43.0 to 25.0.2
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.43.0...puppeteer-v25.0.2)

Updates `stylelint` from 17.11.0 to 17.11.1
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.11.0...17.11.1)

Updates `typescript-eslint` from 8.59.2 to 8.59.3
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.3/packages/typescript-eslint)

Updates `undici-types` from 8.2.0 to 8.3.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.2.0...v8.3.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: linkify-html
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: linkifyjs
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: eslint
  dependency-version: 10.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: lint-staged
  dependency-version: 17.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: puppeteer
  dependency-version: 25.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: stylelint
  dependency-version: 17.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: typescript-eslint
  dependency-version: 8.59.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: undici-types
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 17, 2026
@dependabot dependabot Bot requested a review from sosnovsky as a code owner May 17, 2026 22:04
@FlowCryptRobot FlowCryptRobot enabled auto-merge (squash) May 17, 2026 22:04
FlowCryptRobot
FlowCryptRobot previously approved these changes May 17, 2026
View reviewed changes
@FlowCryptRobot FlowCryptRobot merged commit 2d667a9 into master May 18, 2026
12 checks passed
@FlowCryptRobot FlowCryptRobot deleted the dependabot/npm_and_yarn/npm-deps-786e1c1eac branch May 18, 2026 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sosnovsky sosnovsky sosnovsky approved these changes

@FlowCryptRobot FlowCryptRobot FlowCryptRobot left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sosnovsky @FlowCryptRobot