Skip to content

build(deps): bump the npm_and_yarn group across 4 directories with 3 updates#2497

Merged
tombrunet merged 2 commits intomain-4.xfrom
dependabot/npm_and_yarn/accessibility-checker-extension/npm_and_yarn-bae4e3b95b
Mar 19, 2026
Merged

build(deps): bump the npm_and_yarn group across 4 directories with 3 updates#2497
tombrunet merged 2 commits intomain-4.xfrom
dependabot/npm_and_yarn/accessibility-checker-extension/npm_and_yarn-bae4e3b95b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 19, 2026

Bumps the npm_and_yarn group with 2 updates in the /accessibility-checker-extension directory: flatted and undici.
Bumps the npm_and_yarn group with 1 update in the /cypress-accessibility-checker directory: flatted.
Bumps the npm_and_yarn group with 1 update in the /report-react directory: flatted.
Bumps the npm_and_yarn group with 1 update in the /rule-server directory: file-type.

Updates flatted from 3.4.1 to 3.4.2

Commits

Updates undici from 7.22.0 to 7.24.4

Release notes

Sourced from undici's releases.

v7.24.4

What's Changed

Full Changelog: nodejs/undici@v7.24.3...v7.24.4

v7.24.3

What's Changed

Full Changelog: nodejs/undici@v7.24.2...v7.24.3

v7.24.2

What's Changed

Full Changelog: nodejs/undici@v7.24.1...v7.24.2

v7.24.1

What's Changed

Full Changelog: nodejs/undici@v7.24.0...v7.24.1

v7.24.0

Undici v7.24.0 Security Release Notes

This release addresses multiple security vulnerabilities in Undici.

Upgrade guidance

All users on v7 should upgrade to v7.24.0 or later.

Fixed advisories

... (truncated)

Commits

Updates flatted from 3.3.3 to 3.4.2

Commits

Updates flatted from 3.3.3 to 3.4.2

Commits

Updates file-type from 16.5.4 to 21.3.3

Release notes

Sourced from file-type's releases.

v21.3.3

  • Harden parser c48c90b 135f91b

sindresorhus/file-type@v21.3.2...v21.3.3

v21.3.2

  • Fix ZIP bomb in known-size ZIP probing (GHSA-j47w-4g3g-c36v) a155cd7
  • Fix bound recursive BOM and ID3 detection 370ed91

sindresorhus/file-type@v21.3.1...v21.3.2

v21.3.1


sindresorhus/file-type@v21.3.0...v21.3.1

v21.3.0

  • Add support for Mach-O Universal (aka "Fat") binaries and additional architectures (#779) d223491

sindresorhus/file-type@v21.2.0...v21.3.0

v21.2.0

  • Add support for SPSS data files (#787) 889f638
  • Add support for JMP (#784) 093dba0

sindresorhus/file-type@v21.1.1...v21.2.0

v21.1.1

  • Fix handling of partial Gunzip file (#783) 710e053

sindresorhus/file-type@v21.1.0...v21.1.1

v21.1.0

  • Add support for .tar.gz (gunzipped tarball file) (#763) eda03a7
  • Add support for Windows registry (.reg) files 0db61ec 7d2ddcf
  • Add support for Windows registry hive file (.dat) (#767) f8d62be
  • Fix: Handle partial unzip (#773) 7ad3a90

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…updates

Bumps the npm_and_yarn group with 2 updates in the /accessibility-checker-extension directory: [flatted](https://github.com/WebReflection/flatted) and [undici](https://github.com/nodejs/undici).
Bumps the npm_and_yarn group with 1 update in the /cypress-accessibility-checker directory: [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 1 update in the /report-react directory: [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 1 update in the /rule-server directory: [file-type](https://github.com/sindresorhus/file-type).


Updates `flatted` from 3.4.1 to 3.4.2
- [Commits](WebReflection/flatted@v3.4.1...v3.4.2)

Updates `undici` from 7.22.0 to 7.24.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.22.0...v7.24.4)

Updates `flatted` from 3.3.3 to 3.4.2
- [Commits](WebReflection/flatted@v3.4.1...v3.4.2)

Updates `flatted` from 3.3.3 to 3.4.2
- [Commits](WebReflection/flatted@v3.4.1...v3.4.2)

Updates `file-type` from 16.5.4 to 21.3.3
- [Release notes](https://github.com/sindresorhus/file-type/releases)
- [Commits](sindresorhus/file-type@v16.5.4...v21.3.3)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 7.24.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: file-type
  dependency-version: 21.3.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@tombrunet tombrunet merged commit b66fbe3 into main-4.x Mar 19, 2026
16 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/accessibility-checker-extension/npm_and_yarn-bae4e3b95b branch March 19, 2026 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant