Skip to content

chore(deps): consolidate all open Dependabot updates - #435

Closed
sjcjoosten wants to merge 6 commits into
mainfrom
chore/dependabot-consolidation
Closed

chore(deps): consolidate all open Dependabot updates#435
sjcjoosten wants to merge 6 commits into
mainfrom
chore/dependabot-consolidation

Conversation

@sjcjoosten

Copy link
Copy Markdown

Consolidates all 5 open Dependabot PRs into a single branch so CI runs once and reviewers have one thing to approve.

Included updates

PR Package Change
#420 Frontend group (6 packages) various patch/minor bumps
#411 websocket-driver 0.7.4 → 0.7.5
#426 actions/setup-node 6 → 7
#425 docker/login-action 3 → 4.4.0
#387 dependabot/fetch-metadata 2 → 3

Files changed

  • frontend/package.json + frontend/package-lock.json — npm bumps
  • .github/workflows/build-push-to-docker-hub.yml — docker/login-action
  • .github/workflows/dependabot-auto-merge.yml — dependabot/fetch-metadata
  • .github/workflows/frontend-tests.yml — actions/setup-node
  • .github/workflows/release.yml — actions/setup-node + docker/login-action

Closes #420, closes #411, closes #426, closes #425, closes #387

dependabot Bot and others added 6 commits August 5, 2026 06:45
Bumps the frontend group with 6 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.47.0` | `0.56.0` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.0` | `2.11.6` |
| [cypress](https://github.com/cypress-io/cypress) | `15.11.0` | `15.19.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.12` | `0.28.1` |
| [eslint-plugin-storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/eslint-plugin) | `0.8.0` | `0.12.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.4.5` | `5.9.3` |



Updates `monaco-editor` from 0.47.0 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.47.0...v0.56.0)

Updates `baseline-browser-mapping` from 2.10.0 to 2.11.6
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.10.0...v2.11.6)

Updates `cypress` from 15.11.0 to 15.19.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.11.0...v15.19.0)

Updates `esbuild` from 0.25.12 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](evanw/esbuild@v0.25.12...v0.28.1)

Updates `eslint-plugin-storybook` from 0.8.0 to 0.12.0
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.v1-5.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v0.12.0/code/lib/eslint-plugin)

Updates `typescript` from 5.4.5 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.4.5...v5.9.3)

---
updated-dependencies:
- dependency-name: baseline-browser-mapping
  dependency-version: 2.10.43
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend
- dependency-name: cypress
  dependency-version: 15.18.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: eslint-plugin-storybook
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: monaco-editor
  dependency-version: 0.55.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5.
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.7.4...0.7.5)

---
updated-dependencies:
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v3...v4.4.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2 to 3.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v2...v3)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@sonarqubecloud

sonarqubecloud Bot commented Aug 6, 2026

Copy link
Copy Markdown

@sjcjoosten sjcjoosten closed this Aug 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant