Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 10 updates - #80

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-f573d00d7f
Open

chore(deps): bump the production-dependencies group across 1 directory with 10 updates#80
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-f573d00d7f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
axios 1.17.0 1.18.1
discord.js 14.26.4 14.27.0
jose 6.2.3 6.2.4
lru-cache 11.5.1 11.5.2
nanoid 5.1.11 5.1.16
pyright 1.1.410 1.1.411
vscode-languageserver-protocol 3.18.0 3.18.2
ws 8.21.0 8.21.1
yaml-language-server 1.23.0 1.24.0

Updates axios from 1.17.0 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

  • AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)
  • Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)
  • Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)
  • AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

  • Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

  • Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Commits
  • a209bfb chore(release): prepare release 1.18.1 (#11027)
  • fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
  • 40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
  • a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
  • cf1306a docs: add Deno to install instructions (#11023)
  • b32880a fix: incorrect use of error (#11021)
  • 1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
  • 30499d6 fix: various runtime crashes and type definition mismatches (#10959)
  • 20ce9c4 fix(http): defer env proxy handling to Node (#10942)
  • e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
  • Additional commits viewable in compare view

Updates discord.js from 14.26.4 to 14.27.0

Release notes

Sourced from discord.js's releases.

14.27.0

Bug Fixes

Documentation

Features

Refactor

Typings

  • WebhookMessageCreateOptions: Omit sharedClientTheme (b816b79)
  • Message: Specify rawData arg type (#11123) (c4531d4)
  • UserManager: Fix send() return type to Promise<Message> (#11337) (07c4127)

14.26.5

Bug Fixes

Changelog

Sourced from discord.js's changelog.

14.27.0 - (2026-07-15)

Bug Fixes

Documentation

Features

Refactor

Typings

  • WebhookMessageCreateOptions: Omit sharedClientTheme (b816b79)
  • Message: Specify rawData arg type (#11123) (c4531d4)
  • UserManager: Fix send() return type to Promise<Message> (#11337) (07c4127)

14.26.5 - (2026-07-10)

Bug Fixes

Commits

Updates jose from 6.2.3 to 6.2.4

Release notes

Sourced from jose's releases.

v6.2.4

Documentation

  • update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

Refactor

  • normalize JWK export members from runtime quirks (386a3eb)
Changelog

Sourced from jose's changelog.

6.2.4 (2026-07-21)

Documentation

  • update README.md and SECURITY.md to reflect passed EOL dates (2a84032)

Refactor

  • normalize JWK export members from runtime quirks (386a3eb)
Commits
  • 3ced677 chore(release): 6.2.4
  • 9725456 chore: bump packages
  • 386a3eb refactor: normalize JWK export members from runtime quirks
  • f86dbef chore: bump packages
  • 990c670 test: update electron expectations
  • 0bbe2d0 chore: fix broken links for undici
  • 294c40c test: update electron expectations
  • a378068 chore(deps): bump the actions group with 2 updates
  • b299ce2 chore(deps-dev): bump undici
  • f261d84 chore(deps-dev): bump tar in the npm_and_yarn group across 1 directory
  • Additional commits viewable in compare view

Updates lru-cache from 11.5.1 to 11.5.2

Commits

Updates nanoid from 5.1.11 to 5.1.16

Release notes

Sourced from nanoid's releases.

5.1.16

5.1.15

  • Fixed random pool corruption on big ID sizes.

5.1.14

  • Fixed npm package size regression.

5.1.13

  • Fixed npm package size regression.

5.1.12

  • Moved to npm Provenance and Staged Publishing.
Changelog

Sourced from nanoid's changelog.

5.1.16

5.1.15

  • Fixed random pool corruption on big ID sizes.

5.1.14

  • Fixed npm package size regression.

5.1.13

  • Fixed npm package size regression.

5.1.12

  • Moved to npm Provenance and Staged Publishing.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.


Updates pyright from 1.1.410 to 1.1.411

Release notes

Sourced from pyright's releases.

Published 1.1.411

Changes:

  • 9a9205fc32a2685767f38f348f5d9232701d4b0b fix Agentless jobs error in release (#11524)
  • c9315a27b70339fb8e2124cd60c6227630668896 Bump version to 1.1.411 (#11523)
  • a147f88b1e107c5fb826b12c38d6bc9475febccb Pull Pylance with Pyright 1.1.410 (#11522)
  • 1baa49b8155b205d84b8512d80b47f11338cd3ab Update typeshed to 289e5d3568961c8bcd33d01eef5b7ec5e1ad33ad (#11521)
  • 4ba562ba3d2e79840b4dd25569aa9a29434a1351 Fix reachability for generic context managers with bool exit (#11488) [ #11483 ]
  • e1d48565144c380ec728c20639305a19b538f2e3 Evaluate truthiness of literals in static boolean expressions (#11520)
  • ceb0d206bac3bed223fac6e4e5c577423721efff Fix generic NamedTuple match narrowing for bounded type vars (#11489) [ #11487 ]
  • 9e036b2b04082e3f0f10e9a79b10ddc9cea95eb8 Fix NewType identity comparisons with base literals (#11491) [ #11463 ]
  • 11f5588478c780337dadb7571eb65c2f0cc87aa4 Handle symlinked files in partial stubs (#11516)
  • f33512225b886780eea4c81e4d0708337caa892f fix(dataClasses): recognize KW_ONLY separator with any variable name (#11486)
  • 03d38cb8cb7d2bd77c6252cd6e51e7d6f159ebc9 Allow Callable class attributes to be overridden by instance methods (#11490) [ #11475 ]
  • de5220a32dc46997d0d7940633cdcf963e443a77 Pull Pylance with Pyright 1.1.410 (#11506)
  • f744c78031c28bdac270609c963540764867c289 Avoid unnecessary workspace configuration request (#11480)
  • 0e4c12448b01abff7907e6309e8b49193ff5c02b Update pipeline template reference to use Official.Publish.yml (#11466)
  • 92235e059ebe7805df8dd9cbc0a82cc7a3e4b1f2 Publish version 1.1.410 (#11461)

This list of changes was auto generated.

Commits

Updates undici from 6.26.0 to 6.28.0

Release notes

Sourced from undici's releases.

v6.28.0

Full Changelog: nodejs/undici@v6.27.0...v6.28.0

v6.27.0

⚠️ Security Release

This release line addresses 4 security advisories.

Action required: Upgrade to undici 6.27.0 or later.

npm install undici@^6.27.0

Note on patched version: the v6 fixes shipped in v6.27.0, not 6.26.0 — v6.26.0 contains only the chunked-EOF fix (#5308) and the version bump, none of the security fixes below.

The v6 line is not affected by the SOCKS5 advisories (GHSA-vmh5-mc38-953g, GHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6), or the 8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).

Summary

Advisory CVE Severity (CVSS) Fixed in Fix commit
GHSA-vxpw-j846-p89q CVE-2026-12151 High (7.5) 6.27.0 b7f252e7
GHSA-p88m-4jfj-68fv CVE-2026-9679 Moderate (5.9) 6.27.0 25efa447
GHSA-g8m3-5g58-fq7m CVE-2026-11525 Low (3.7) 6.27.0 25efa447
GHSA-35p6-xmwp-9g52 CVE-2026-6733 Low (3.7) 6.27.0 f4c31d60

High severity

WebSocket DoS via fragment count bypass — CVE-2026-12151

GHSA-vxpw-j846-p89q · CWE-400, CWE-770 Fix: b7f252e7 Backport WebSocket maxPayloadSize fixes (#5423, backported to v6 in #5428)

A malicious WebSocket server can stream a large number of small or empty continuation frames. Undici enforced a limit on cumulative payload size but did not limit the number of fragments per message, leading to unbounded memory growth and denial of service. All releases from 6.17.0 onward are affected.

  • Affected: applications using new WebSocket(...) or WebSocketStream against untrusted endpoints.
  • Workaround: none — upgrade is required.

... (truncated)

Commits
  • 01a912e Bumped v6.28.0 (#5591)
  • 481ecfc Use Node 22 and npm 11 to release
  • 740a0b7 fix: validate blob body content type
  • 2698e49 fix: validate coerced header values for CRLF (#5579)
  • 4fd5a0c test(retry): correct broken content-range fixtures in retry-handler.js
  • cba3a52 fix(retry): reject partial content length mismatch
  • af74840 fix: harden cookie domain, path, and unparsed attribute validation
  • 551138c Bumped v6.27.0 (#5431)
  • b7f252e Backport WebSocket maxPayloadSize fixes to v7.x (#5423) (#5428)
  • 25efa44 fix(cookies): preserve values and parse SameSite strictly
  • Additional commits viewable in compare view

Updates vscode-languageserver-protocol from 3.18.0 to 3.18.2

Release notes

Sourced from vscode-languageserver-protocol's releases.

release/protocol/3.18.2

No release notes provided.

release/protocol/3.18.1

Changes:

  • #1796: Make TextDocumentContentFeature a supported capability
  • #1795: textDocumentContent capability/feature is still behind a proposed gate even though in 3.18 it's not flagged as proposed anymore
  • #1794: Fix partial result type for textDocument/diagnostic request
  • #1792: Update @​vscode/test-electron to version 3.0.0
  • #1791: Refine notification assertions in delayOpenNotifications tests
  • #1790: Update inline value documentation and clean up dependencies
  • #1788: Update dependency versions in lock files
  • #1787: Merge 3.18 release into main
  • #1786: Shorten test dir path

This list of changes was auto generated.

Commits

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • a2f4e7c [fix] Count empty fragments toward the limit (#2329)
  • e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
  • 4ea355d [doc] Document 32-bit signed integer coercion for option values
  • 2120f4c [example] Remove uuid dependency
  • 4c534a6 [security] Add latest vulnerability to SECURITY.md
  • See full diff in compare view

Updates yaml-language-server from 1.23.0 to 1.24.0

Changelog

Sourced from yaml-language-server's changelog.

1.24.0

  • Feat: Add support for declaring a schema using an inline $schema property. See #964.
  • Feat: Add support for the yaml.disableSchemaDetection setting to disable automatic schema association for matching files. See #1140 and vscode-yaml#245.
  • Feat: Add support for disabling schema validation via modeline. See #446.
  • Feat: Automatically disable schema detection for dbt, Docker Compose, GitHub Actions, and Azure Pipelines files when the corresponding extension is installed. See vscode-yaml#1251 and vscode-yaml#1261.
  • Feat: Add a selectable "No JSON Schema" option to the schema picker. See vscode-yaml#991.
  • Feat: Support selecting multiple schemas in the schema picker. See vscode-yaml#983.
  • Feat: Support return types for yaml.customTags. See vscode-yaml#867.
  • Feat: Add the yaml.kubernetesVersion setting. See #211.
  • Fix: False "Matches multiple schemas when only one must validate" error when using direct Kubernetes standalone-strict/all.json schema URLs. See vscode-yaml#1180.
  • Fix: Stack overflow in YAML Language Server when trying to open the schema picker for a file with multiple schemas. See vscode-yaml#1249.
  • Fix: Ignore schema modeline comments after YAML content, allowing $schema properties to be commented out normally. See vscode-yaml#1260.
  • Fix: Missing schemas from SchemaStore. See vscode-yaml#1130.
  • Fix: Arrays with default and required values are not rendered correctly. See vscode-yaml#1187.
  • Fix: Autocomplete suggestions from conditional if schema branches. See #1266.
  • Fix: Broken indentation after pressing Enter in nested mappings. See vscode-yaml#1226 and #1258.
  • Fix: Allow schema to still validate even if Ajv fails. See #1269.
  • Fix: textDocument/codeLens request hangs on the first file opened. See #501.
  • Fix: Prepare for the transition to ES modules by removing the vscode-json-languageservice dependency. See #1069 and #1014.
  • Fix: GitHub issue forms schema not detected despite correct directory and naming. See vscode-yaml#1258.
  • Fix: Correct the default values of yaml.extension.recommendations and yaml.hoverSchemaSource. See vscode-yaml#1247.
  • Fix: Cannot Load content for: schema.json Unknown schema: file. See #948.
  • Fix: Imported jsonc-parser isn't listed as dependencies. See #1264.
  • Fix: Correct the vscode-languageserver-types version to prevent incompatible TypeScript types. See #1270.
  • Fix: yaml/get/all/jsonSchemas returns schema association declared with inline $schema. See #1290.
  • Fix: Status bar updates when editing inline $schema in YAML files. See vscode-yaml#1263.
  • Chore: Upgrade to ESLint 10 and enforce consistent type imports. See #1281 and #1282.
  • Chore: Upgrade to TypeScript 6. See #1275.

Thanks to Nicholas Bollweg, Heather Lapointe, Remco Haszing, Aidan Feldman, and Rafał Chłodnicki for your contributions.

Commits
  • 95ef21b CHANGELOG for 1.24.0
  • 968ce73 Update README.md (#1289)
  • c78770a fix: getSchemas should return inline $schema
  • 416ede2 fix: ignore modeline schema comment after yaml content
  • e569ce2 remove require from yamlSchemaService
  • 0c725ad Sarif ignore suppressed ESLint violations
  • ea4e668 Remove vscode-json-languageservice dependency (#1285)

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
b394891 
…y with 10 updates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.17.0` | `1.18.1` |
| [discord.js](https://github.com/discordjs/discord.js/tree/HEAD/packages/discord.js) | `14.26.4` | `14.27.0` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.4` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.5.1` | `11.5.2` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.11` | `5.1.16` |
| [pyright](https://github.com/Microsoft/pyright/tree/HEAD/packages/pyright) | `1.1.410` | `1.1.411` |
| [vscode-languageserver-protocol](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/protocol) | `3.18.0` | `3.18.2` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.1` |
| [yaml-language-server](https://github.com/redhat-developer/yaml-language-server) | `1.23.0` | `1.24.0` |



Updates `axios` from 1.17.0 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.17.0...v1.18.1)

Updates `discord.js` from 14.26.4 to 14.27.0
- [Release notes](https://github.com/discordjs/discord.js/releases)
- [Changelog](https://github.com/discordjs/discord.js/blob/14.27.0/packages/discord.js/CHANGELOG.md)
- [Commits](https://github.com/discordjs/discord.js/commits/14.27.0/packages/discord.js)

Updates `jose` from 6.2.3 to 6.2.4
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.4)

Updates `lru-cache` from 11.5.1 to 11.5.2
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-lru-cache@v11.5.1...v11.5.2)

Updates `nanoid` from 5.1.11 to 5.1.16
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.11...5.1.16)

Updates `pyright` from 1.1.410 to 1.1.411
- [Release notes](https://github.com/Microsoft/pyright/releases)
- [Commits](https://github.com/Microsoft/pyright/commits/1.1.411/packages/pyright)

Updates `undici` from 6.26.0 to 6.28.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.26.0...v6.28.0)

Updates `vscode-languageserver-protocol` from 3.18.0 to 3.18.2
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/protocol/3.18.2/protocol)

Updates `ws` from 8.21.0 to 8.21.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.1)

Updates `yaml-language-server` from 1.23.0 to 1.24.0
- [Changelog](https://github.com/redhat-developer/yaml-language-server/blob/main/CHANGELOG.md)
- [Commits](redhat-developer/yaml-language-server@1.23.0...1.24.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: discord.js
  dependency-version: 14.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: jose
  dependency-version: 6.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lru-cache
  dependency-version: 11.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 5.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: pyright
  dependency-version: 1.1.411
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: vscode-languageserver-protocol
  dependency-version: 3.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: yaml-language-server
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants