Skip to content

Bump the npm_and_yarn group across 1 directory with 23 updates#1

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-96f431b954
Open

Bump the npm_and_yarn group across 1 directory with 23 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-96f431b954

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Nov 15, 2025

Bumps the npm_and_yarn group with 15 updates in the / directory:

Package From To
electron-updater 5.0.5 6.3.0
parse-url 6.0.5 8.1.0
electron 13.6.9 39.2.0
postcss 8.4.14 8.5.6
vite 3.0.2 7.2.2
webpack 5.73.0 5.102.1
app-builder-lib 22.14.13 26.0.12
brace-expansion 1.1.11 1.1.12
braces 3.0.2 3.0.3
cross-spawn 6.0.5 6.0.6
loader-utils 2.0.2 2.0.4
micromatch 4.0.5 4.0.8
tar-fs 2.1.1 2.1.4
word-wrap 1.2.3 1.2.5
ws 7.5.9 7.5.10

Updates electron-updater from 5.0.5 to 6.3.0

Release notes

Sourced from electron-updater's releases.

electron-updater@6.3.0

Minor Changes

Patch Changes

electron-updater@6.3.0-alpha.8

Patch Changes

electron-updater@6.3.0-alpha.7

Patch Changes

electron-updater@6.3.0-alpha.6

Patch Changes

electron-updater@6.3.0-alpha.5

Patch Changes

... (truncated)

Changelog

Sourced from electron-updater's changelog.

6.3.0

Minor Changes

Patch Changes

6.3.0-alpha.8

Patch Changes

6.3.0-alpha.7

Patch Changes

6.3.0-alpha.6

Patch Changes

... (truncated)

Commits
  • bfe4ecc chore(deploy): Release v25.0.0 (electron-updater@6.3.0) (#8337)
  • 1320c0e chore(deploy): Release v25.0.0-alpha.13 (electron-updater@6.3.0-alpha.8) (alp...
  • fa3275c chore(deps): update dependency typescript to v5.5.3 (#8323)
  • 35a0784 fix(rpm-updater): stop uninstalling app before update (#8311)
  • dd145d6 chore(deploy): Release v25.0.0-alpha.12 (electron-updater@6.3.0-alpha.7) (alp...
  • 2b80b01 chore(deploy): Release v25.0.0-alpha.11 (electron-updater@6.3.0-alpha.6) (alp...
  • ac2e6a2 fix: verify LiteralPath of update file during windows signature verification ...
  • 5e924c2 chore(deploy): Release v25.0.0-alpha.10 (electron-updater@6.3.0-alpha.5) (alp...
  • 29f6504 chore(deploy): Release v25.0.0-alpha.9 (alpha) (#8241)
  • 48c5953 fix(docs): update autoupdate docs noting that channels work with Github (#8...
  • Additional commits viewable in compare view

Updates parse-url from 6.0.5 to 8.1.0

Release notes

Sourced from parse-url's releases.

8.1.0

parse-url@8.1.0

  • fix: cjs to load normalize-url /cc #58
  • fix: Include index.d.ts in package.json /cc #63
  • feat: support custom SSH username /cc #60
  • feat: improve regex pattern /cc #59

Thanks to @​privatenumber and @​briancoit for their contributions! 🍰

8.0.0

parse-url 8.0.0

Breaking Changes

  • The resource property will not contain the port, but the host one will.
  • Throw an error if the input is invalid. Hence, file paths like /home/path/to/dir will only be valid if the file:// protocol is added (file://home/path/to/dir)
  • Throw an error if the input length exceeds the maximum length (parse.MAX_URL_LENGTH), by default 2048.

Fixes

Other changes

7.0.2

Add the url in the error object, fixes #14

7.0.1

📝 docs

7.0.0

parse-url 7.0.0

⭐ This is a major release of parse-url! ⭐

Breaking changes

  • If the input url has a trailing slash, the trailing slash will be added in the pathname too.
  • The port field is a string. By default empty.
  • Added the password field (default: "")
  • The resource may contain the port in it (e.g. resource: "domain.com:4200").

Features

  • Faster
  • More secure
  • Cleaner codebase
Commits
  • 4412976 Updated docs
  • ac17353 Merge branch 'patch-1' of github.com:briancoit/parse-url into new-version
  • 778a0a5 Merge branch 'support-custom-user' of github.com:privatenumber/parse-url into...
  • 0baab4f Merge branch 'improve-regex' of github.com:privatenumber/parse-url into new-v...
  • d1a4395 Merge branch 'fix-cjs' of github.com:privatenumber/parse-url into new-version
  • 9cacf38 ⬆️ 8.1.0 🎉
  • 9a78bd8 Merge pull request #61 from privatenumber/move-funding-yml
  • 1883136 Include index.d.ts in package
  • 92f899b chore: move FUNDING.yml out of workflows
  • 9500430 feat: support custom user in ssh url
  • Additional commits viewable in compare view

Updates electron from 13.6.9 to 39.2.0

Release notes

Sourced from electron's releases.

electron v39.2.0

Release Notes for v39.2.0

Features

  • Added app.isHardwareAccelerationEnabled(). #48680 (Also in 37, 38)
  • Added bypassCustomProtocolHandlers option to net.request. #48882 (Also in 38, 40)
  • Automatically focus DevTools when element is inspected or breakpoint is triggered. #48702 (Also in 37, 38)
  • Enables resetting accent color to follow system accent settings if a previous color has been set via window.setAccentColor(null). #48852 (Also in 38)
  • Updated nativeImage.createFromNamedImage to support SF Symbol names. #48773 (Also in 40)

Fixes

  • Fixed crash on windows when UTF-8 is in path. #48944 (Also in 38, 40)
  • Reenable V8 trap handlers for wasm in browser and utility process, improves runtime execution of wasm. #48837 (Also in 40)
  • Restored window's canHide property. #48901 (Also in 37, 38)
  • Windows: Calling window.setFocusable(true) will no longer cause a window to lose focus. #48928 (Also in 40)

Other Changes

  • Updated Chromium to 142.0.7444.162. #48899

electron v39.1.2

Release Notes for v39.1.2

Fixes

  • Corrected the appearance of tiled windows on GNOME (when frame: true), and removed resize handles from tiled edges. #48834 (Also in 38, 40)
  • Fix: ESM-from-CJS import when CJK characters are in path. #48873
  • Fixed oom crash when optimizing certain wasm functions involving large phi nodes. #48815 (Also in 38, 40)
  • Fixed the issue where the parent window remained interactive after the modal window was opened. #48865 (Also in 40)

Other Changes

  • Updated Chromium to 142.0.7444.134. #48818

Documentation

  • Documentation changes: #48842

Unknown

  • Fixed an issue that menu items on macOS could not be disabled under all circumstances. #48830 (Also in 38, 40)

electron v39.1.1

Release Notes for v39.1.1

Fixes

  • Fixed an application crash when clicking or hovering over the native MacOS "Window" menu. Reverts #48598. #48800 (Also in 40)
  • Fixed draw smoothing round corner issue. #48781 (Also in 40)

electron v39.1.0

Release Notes for v39.1.0

... (truncated)

Changelog

Sourced from electron's changelog.

Breaking Changes

Breaking changes will be documented here, and deprecation warnings added to JS code where possible, at least one major version before the change is made.

Types of Breaking Changes

This document uses the following convention to categorize breaking changes:

  • API Changed: An API was changed in such a way that code that has not been updated is guaranteed to throw an exception.
  • Behavior Changed: The behavior of Electron has changed, but not in such a way that an exception will necessarily be thrown.
  • Default Changed: Code depending on the old default may break, not necessarily throwing an exception. The old behavior can be restored by explicitly specifying the value.
  • Deprecated: An API was marked as deprecated. The API will continue to function, but will emit a deprecation warning, and will be removed in a future release.
  • Removed: An API or feature was removed, and is no longer supported by Electron.

Planned Breaking API Changes (40.0)

Deprecated: clipboard API access from renderer processes

Using the clipboard API directly in the renderer process is deprecated. If you want to call this API from a renderer process, place the API call in your preload script and expose it using the contextBridge API.

Behavior Changed: MacOS dSYM files now compressed with tar.xz

Debug symbols for MacOS (dSYM) now use xz compression in order to handle larger file sizes. dsym.zip files are now dsym.tar.xz files. End users using debug symbols may need to update their zip utilities.

Planned Breaking API Changes (39.0)

Deprecated: --host-rules command line switch

Chromium is deprecating the --host-rules switch.

You should use --host-resolver-rules instead.

Behavior Changed: window.open popups are always resizable

Per current WHATWG spec, the window.open API will now always create a resizable popup window.

To restore previous behavior:

webContents.setWindowOpenHandler((details) => {
  return {
    action: 'allow',
    overrideBrowserWindowOptions: {
      resizable: details.features.includes('resizable=yes')
    }
  }
})
</tr></table> 

... (truncated)

Commits
  • ab85f2c chore: cherry-pick 4cf9311 from v8 (#48951)
  • 1936243 fix: crash on windows when UTF-8 is in path (#48944)
  • e7e052f docs: fix docs for app.isHardwareAccelerationEnabled() (#48945)
  • 349a9b6 docs: explain how to load SF Symbols with nativeImage (#48939)
  • b5f19ce feat: add bypassCustomProtocolHandlers option to net.request (#48882)
  • bb930b8 feat: add app.isHardwareAccelerationEnabled() (#48680)
  • e962bc3 docs: clarify meaning of string value for menu item icon (#48938)
  • 895cf00 fix: Windows: Calling window.setFocusable(true) will no longer cause a windo...
  • bc1ca72 docs: fix v40 stable release date (#48920)
  • a9a4c77 chore: bump chromium to 142.0.7444.162 (39-x-y) (#48899)
  • Additional commits viewable in compare view

Updates postcss from 8.4.14 to 8.5.6

Release notes

Sourced from postcss's releases.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

  • Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

8.4.48

  • Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

  • Removed debug code.

8.4.46

  • Fixed Cannot read properties of undefined (reading 'before').

8.4.45

  • Removed unnecessary fix which could lead to infinite loop.

8.4.44

  • Another way to fix markClean is not a function error.

8.4.43

  • Fixed markClean is not a function error.

8.4.42

  • Fixed CSS syntax error on long minified files (by @​varpstar).

8.4.41

... (truncated)

Commits

Updates vite from 3.0.2 to 7.2.2

Release notes

Sourced from vite's releases.

v7.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.1

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

v7.1.7

Please refer to CHANGELOG.md for details.

v7.1.6

Please refer to CHANGELOG.md for details.

v7.1.5

Please refer to CHANGELOG.md for details.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.2.2 (2025-11-07)

Bug Fixes

7.2.1 (2025-11-06)

Bug Fixes

Code Refactoring

  • build: rename indexOfMatchInSlice to findPreloadMarker (#21054) (f83264f)

7.2.0 (2025-11-05)

Bug Fixes

  • css: fallback to sass when sass-embedded platform binary is missing (#21002) (b1fd616)
  • module-runner: make getBuiltins response JSON serializable (#21029) (ad5b3bf)
  • types: add undefined to optional properties for exactOptionalProperties type compatibility (#21040) (2833c55)

Miscellaneous Chores

7.2.0-beta.1 (2025-10-29)

Bug Fixes

  • increase stream reset rate limit for HTTP2 (#21024) (4f44f22)
  • optimizer: externalize virtual modules for html like files (#21001) (e5af352)

Documentation

  • clarify the values are escaped automatically (#21017) (246df13)

Code Refactoring

7.2.0-beta.0 (2025-10-28)

Features

  • add import.meta.resolve support for ESM config (bundle config loader) (#20962) (f86789a)
  • add perEnvironmentWatchChangeDuringDev (#20996) (a5e98e6)
  • add vite client connect events (#20978) (543d87c)
  • build: emit license (#18546) (b42c3fb)
  • dev: support HTTP2 even if proxy feature is used (#20869) (fc21af7)
  • lib: enable minification but keep pure annotations for es output with terser (#20522) (df997d0)
  • optimizer: add rush lockfile support (#20833) (718ca2d)
  • utils: support multiple certificates in resolveServerUrls (#20707) (24513e5)

... (truncated)

Commits
  • 572aaca release: v7.2.2
  • 728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
  • a532e68 release: v7.2.1
  • 82d2d6c fix(worker): some worker asset was missing (#21074)
  • f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
  • 8293de0 release: v7.2.0
  • 2833c55 fix(types): add undefined to optional properties for exactOptionalProperties ...
  • e3a6a83 chore(deps): update rolldown-related dependencies (#21047)
  • b1fd616 fix(css): fallback to sass when sass-embedded platform binary is missing (#21...
  • ad5b3bf fix(module-runner): make getBuiltins response JSON serializable (#21029)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.


Updates webpack from 5.73.0 to 5.102.1

Release notes

Sourced from webpack's releases.

v5.102.1

Fixes

  • Supported extends with env for browserslist
  • Supported JSONP fragment format for web workers.
  • Fixed dynamic import support in workers using browserslist.
  • Fixed default defer import mangling.
  • Fixed default import of commonjs externals for SystemJS format.
  • Fixed context modules to the same file with different import attributes.
  • Fixed typescript types.
  • Improved import.meta warning messages to be more clear when used directly.
  • [CSS] Fixed CC_UPPER_U parsing (E -> U) in tokenizer.

v5.102.0

Features

  • Added static analyze for dynamic imports
  • Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at example)
  • Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at example)
  • Added the snapshot.contextModule to configure snapshots options for context modules
  • Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at example)
  • The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)
  • The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)
  • Added function matcher support in rule options

Fixes

  • Fixed conflicts caused by multiple concatenate modules
  • Ignore import failure during HMR update with ES modules output
  • Keep render module order consistent
  • Prevent inlining modules that have this exports
  • Removed unused timeout attribute of script tag
  • Supported UMD chunk format to work in web workers
  • Improved CommonJs bundle to ES module library
  • Use es-lexer for mjs files for build dependencies
  • Fixed support __non_webpack_require__ for ES modules
  • Properly handle external modules for CSS
  • AssetsByChunkName included assets from chunk.auxiliaryFiles
  • Use createRequire only when output is ES module and target is node
  • Typescript types

Performance Improvements

  • Avoid extra calls for snapshot
  • A avoid extra jobs for build dependencies
  • Move import attributes to own dependencies

v5.101.3

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.


Updates @babel/helpers from 7.18.9 to 7.28.4

Release notes

Sourced from @​babel/helpers's releases.

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

📝 Documentation

🏠 Internal

🔬 Output optimization

Bumps the npm_and_yarn group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) | `5.0.5` | `6.3.0` |
| [parse-url](https://github.com/IonicaBizau/parse-url) | `6.0.5` | `8.1.0` |
| [electron](https://github.com/electron/electron) | `13.6.9` | `39.2.0` |
| [postcss](https://github.com/postcss/postcss) | `8.4.14` | `8.5.6` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `3.0.2` | `7.2.2` |
| [webpack](https://github.com/webpack/webpack) | `5.73.0` | `5.102.1` |
| [app-builder-lib](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/app-builder-lib) | `22.14.13` | `26.0.12` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `6.0.5` | `6.0.6` |
| [loader-utils](https://github.com/webpack/loader-utils) | `2.0.2` | `2.0.4` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |
| [tar-fs](https://github.com/mafintosh/tar-fs) | `2.1.1` | `2.1.4` |
| [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` |
| [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` |



Updates `electron-updater` from 5.0.5 to 6.3.0
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `parse-url` from 6.0.5 to 8.1.0
- [Release notes](https://github.com/IonicaBizau/parse-url/releases)
- [Commits](IonicaBizau/parse-url@6.0.5...8.1.0)

Updates `electron` from 13.6.9 to 39.2.0
- [Release notes](https://github.com/electron/electron/releases)
- [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md)
- [Commits](electron/electron@v13.6.9...v39.2.0)

Updates `postcss` from 8.4.14 to 8.5.6
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.14...8.5.6)

Updates `vite` from 3.0.2 to 7.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.2.2/packages/vite)

Updates `webpack` from 5.73.0 to 5.102.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.73.0...v5.102.1)

Updates `@babel/helpers` from 7.18.9 to 7.28.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.4/packages/babel-helpers)

Updates `@babel/traverse` from 7.18.9 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-traverse)

Updates `app-builder-lib` from 22.14.13 to 26.0.12
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/app-builder-lib/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/v26.0.12/packages/app-builder-lib)

Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cross-spawn` from 6.0.5 to 6.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6)

Updates `ejs` from 3.1.8 to 3.1.10
- [Release notes](https://github.com/mde/ejs/releases)
- [Commits](mde/ejs@v3.1.8...v3.1.10)

Updates `esbuild` from 0.14.49 to 0.25.12
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2022.md)
- [Commits](evanw/esbuild@v0.14.49...v0.25.12)

Updates `form-data` from 4.0.0 to 4.0.4
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.0...v4.0.4)

Updates `json5` from 2.2.1 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.2.1...v2.2.3)

Updates `loader-utils` from 2.0.2 to 2.0.4
- [Release notes](https://github.com/webpack/loader-utils/releases)
- [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md)
- [Commits](webpack/loader-utils@v2.0.2...v2.0.4)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `parse-path` from 4.0.4 to 7.1.0
- [Release notes](https://github.com/IonicaBizau/parse-path/releases)
- [Commits](IonicaBizau/parse-path@4.0.4...7.1.0)

Updates `rollup` from 2.77.0 to 4.53.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md)
- [Commits](rollup/rollup@v2.77.0...v4.53.2)

Updates `tar-fs` from 2.1.1 to 2.1.4
- [Commits](mafintosh/tar-fs@v2.1.1...v2.1.4)

Updates `word-wrap` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.9...7.5.10)

---
updated-dependencies:
- dependency-name: electron-updater
  dependency-version: 6.3.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: parse-url
  dependency-version: 8.1.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron
  dependency-version: 39.2.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.2.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-version: 5.102.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/helpers"
  dependency-version: 7.28.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-version: 7.28.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: app-builder-lib
  dependency-version: 26.0.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-version: 6.0.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ejs
  dependency-version: 3.1.10
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.25.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: json5
  dependency-version: 2.2.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: loader-utils
  dependency-version: 2.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-version: 4.0.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: parse-path
  dependency-version: 7.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-version: 4.53.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar-fs
  dependency-version: 2.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: word-wrap
  dependency-version: 1.2.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-version: 7.5.10
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 15, 2025
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Nov 15, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants