chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates#78
Merged
andrew-fleming merged 1 commit intoMay 15, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
…dates Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.2` | `2.1.0` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.0.1` | `10.2.0` | | [minimatch](https://github.com/isaacs/minimatch) | `9.0.5` | `9.0.9` | | [picomatch](https://github.com/micromatch/picomatch) | `4.0.3` | `4.0.4` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.14` | | [rollup](https://github.com/rollup/rollup) | `4.52.5` | `4.60.3` | | [tar](https://github.com/isaacs/node-tar) | `7.5.3` | `7.5.14` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.12` | `7.3.3` | Updates `brace-expansion` from 2.0.2 to 2.1.0 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v2.0.2...v2.1.0) Updates `ip-address` from 10.0.1 to 10.2.0 - [Commits](https://github.com/beaugunderson/ip-address/commits) Updates `minimatch` from 9.0.5 to 9.0.9 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v9.0.5...v9.0.9) Updates `picomatch` from 4.0.3 to 4.0.4 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@4.0.3...4.0.4) Updates `postcss` from 8.5.6 to 8.5.14 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.14) Updates `rollup` from 4.52.5 to 4.60.3 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.52.5...v4.60.3) Updates `tar` from 7.5.3 to 7.5.14 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.3...v7.5.14) Updates `vite` from 7.1.12 to 7.3.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.3/packages/vite) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 2.1.0 dependency-type: indirect - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect - dependency-name: minimatch dependency-version: 9.0.9 dependency-type: indirect - dependency-name: picomatch dependency-version: 4.0.4 dependency-type: indirect - dependency-name: postcss dependency-version: 8.5.14 dependency-type: indirect - dependency-name: rollup dependency-version: 4.60.3 dependency-type: indirect - dependency-name: tar dependency-version: 7.5.14 dependency-type: indirect - dependency-name: vite dependency-version: 7.3.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm_and_yarn-569fcad7f7
branch
from
7bb5d29 to
e19f4ff
Compare
andrew-fleming
approved these changes
May 15, 2026
andrew-fleming
deleted the
dependabot/npm_and_yarn/npm_and_yarn-569fcad7f7
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 8 updates in the / directory:
2.0.22.1.010.0.110.2.09.0.59.0.94.0.34.0.48.5.68.5.144.52.54.60.37.5.37.5.147.1.127.3.3Updates
brace-expansionfrom 2.0.2 to 2.1.0Commits
1ee4a902.1.0b0302acAdd opt-in { max } mitigation to v2 legacy line (#100)73b54592.0.3311ac0dBackport fix for GHSA-f886-m6hf-6m8v to v2 (#96)Updates
ip-addressfrom 10.0.1 to 10.2.0Commits
Updates
minimatchfrom 9.0.5 to 9.0.9Commits
8a10e479.0.9c6f1806brace-expansion@2446cfa39.0.88fa151adocs: add warning about ReDoS71b78a2fix partial matching of globstar patterns2de496f9.0.70d4616dlimit nested extglob recursion, flatten extglobs7117ef39.0.62418458update deps, do not checkin dist1d1f531update depsUpdates
picomatchfrom 4.0.3 to 4.0.4Release notes
Sourced from picomatch's releases.
Commits
e5474fcPublish 4.0.44516eb5Merge commit from fork5eceecdMerge commit from fork0db7dd7Run benchmark again against latest minimatch version (#161)9500377docs: clarify what brace expansion syntax is and isn't supported (#134)2661f23fix typo in globstars.js test name (#138)1798b07docs: fixmakeReexample (#143)9d76bc5chore: undocument removed options (#146)e4d718bRemove unused time-require (#160)38dffebchore(deps): pin dependencies (#158)Updates
postcssfrom 8.5.6 to 8.5.14Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
3ec1394Release 8.5.14 versionf2bb827Update dependenciesd75953dMerge pull request #2084 from 43081j/raw-raws-rawing68bd213fix: always callrawto retrieve raw valuesaf58cf1Release 8.5.13 versionf227dbdTemporary ignore pnpm 11 configd3abd40Update dependenciesdd06c3eRevert stringifier changes because of the conflict with postcss-scssae889c8Try to fix CIe0093e4Move to pnpm 11Updates
rollupfrom 4.52.5 to 4.60.3Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
b47bdab4.60.315c5f33Add again some unneeded dev dependencies, to make some builds succeed12195dcfix: do not rename nested "exports" bindings that do not conflict (#6360)b74aa39Migrate instructions to AGENTS.mdaa5a377fix(deps): update minor/patch updates (#6365)197e68bchore(deps): update msys2/setup-msys2 digest to e989830 (#6364)cded70afix(deps): update swc monorepo (major) (#6366)bb2b8a5docs: add missing backticks inplugin-development(#6368)20af1c4chore(deps): lock file maintenance (#6367)a6be82b4.60.2Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
tarfrom 7.5.3 to 7.5.14Commits
6244eb37.5.149704d8cstricter protection against hardlinks preempting their targets700734fupdate workflows and depsd6611ae7.5.13119c401fix(extract): prevent raced symlink writes outside cwd2a294d37.5.1201082a4fix: reject top promise on floating addFilesAsync rejectionsdd1c36alinting35a1ffedoc: more clarity in security warningbf776f67.5.11Maintainer changes
This version was pushed to npm by isaacs, a new releaser for tar since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
vitefrom 7.1.12 to 7.3.3Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
ca31424release: v7.3.35ab51c0fix: avoid destructure lowering for newer safari (#22346)cc383e0release: v7.3.209d8c90fix: avoid path traversal with optimize deps sourcemap handler (#22161)f8103ccfix: checkserver.fsafter stripping query as well (#22160)19db0f2fix: backport #22159, apply server.fs check to env transport (#22162)95e8923release: v7.3.19d39d37feat: addignoreOutdatedRequestsoption tooptimizeDeps(#21364)acf7e05release: v7.3.0cff26ecfeat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)