deps(engine): bump the utilities group across 1 directory with 4 updates by dependabot[bot] · Pull Request #206 · underpostnet/engine

dependabot · 2026-10-19T08:08:31Z

Bumps the utilities group with 4 updates in the / directory: dotenv, marked, nodemailer and shelljs.

Updates dotenv from 18.0.7 to 18.0.8

Changelog

Sourced from dotenv's changelog.

18.0.8 (2026-10-14)

Changed

Fast parser should strip appended extra quotes (#1073)

Type detail improvement (#1074)

Commits

e2fe95e 18.0.8
7aa712a type detail improvement
53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
0b4843a changelog
55855ab Merge pull request #1073 from xiehuanyi/fix/unicode-unquoting-parity
f757811 fix(types): allow undefined values in populate output
fde5db2 Keep fast-parser unquoting consistent at Unicode line boundaries
See full diff in compare view

Updates marked from 18.1.0 to 18.1.1

Release notes

Sourced from marked's releases.

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

cli: honor an explicitly empty string input (#4113) (ec3a4e5)

end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)

keep a backslash in a code span from hiding emphasis (#4117) (6a57018)

keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112

let indented and type 3-5 html blocks interrupt a paragraph (#4124) (eaa1fff)

make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120

match pre, script, style and textarea as whole tag names (#4114) (0db74cb)

preserve enclosing link state after parsing images (#4123) (cc07bb9)

respect tab stops in list continuation indentation (#4119) (4bd2528)

Performance Improvements

avoid repeated raw string copies in nested lists (#4082) (7e8754d)

Commits

cdbdc01 chore(release): 18.1.1 [skip ci]
2134976 docs: add AGENTS.md (#4125)
699a969 chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4133)
6a57018 fix: keep a backslash in a code span from hiding emphasis (#4117)
eaa1fff fix: let indented and type 3-5 html blocks interrupt a paragraph (#4124)
7e8754d perf: avoid repeated raw string copies in nested lists (#4082)
cc07bb9 fix: preserve enclosing link state after parsing images (#4123)
627d9ae fix: make walkTokens linear by appending values in place (#4121)
4bd2528 fix: respect tab stops in list continuation indentation (#4119)
9e64a6a fix: end blockquote before a lazy line after a heading, hr or html block (#4115)
Additional commits viewable in compare view

Updates nodemailer from 10.1.0 to 10.1.1

Release notes

Sourced from nodemailer's releases.

v10.1.1

10.1.1 (2026-10-14)

Bug Fixes

fetch: strip credentials on any cross-origin redirect (a15360c)

Changelog

Sourced from nodemailer's changelog.

10.1.1 (2026-10-14)

Bug Fixes

fetch: strip credentials on any cross-origin redirect (a15360c)

Commits

9396cca chore(master): release 10.1.1 (#1893)
65d7498 chore(deps): bump dev dependencies
647ee44 test(smtp-connection): pin connectionTimeout across all resolved addresses
a15360c fix(fetch): strip credentials on any cross-origin redirect
c8671c4 Updated SECURITY.md formatting
be6fe72 testing VUlnerability firm
7bdaa77 chore: Updated Security Policy
See full diff in compare view

Updates shelljs from 0.8.5 to 0.10.0

Release notes

Sourced from shelljs's releases.

v0.10.0

What's Changed

chore: update deps by @nfischer in shelljs/shelljs#1201

chore: rename master -> main by @nfischer in shelljs/shelljs#1203

refactor: avoid dependency cycle by @nfischer in shelljs/shelljs#1204

Enforce single quotes by @abluescarab in shelljs/shelljs#1207

chore: update deps by @nfischer in shelljs/shelljs#1209

refactor: use require instead of import by @nfischer in shelljs/shelljs#1212

refactor: use promises for utils.runScript by @nfischer in shelljs/shelljs#1211

refactor: use expectations for t.throws by @nfischer in shelljs/shelljs#1213

refactor: prefer promises over test.cb by @nfischer in shelljs/shelljs#1214

refactor: allow es6 language features by @nfischer in shelljs/shelljs#1215

refactor: use es6 class syntax for CommandError by @nfischer in shelljs/shelljs#1217

chore: update ava by @nfischer in shelljs/shelljs#1218

fix: cmd is compatible with node 22.10 by @nfischer in shelljs/shelljs#1219

refactor: explicit handling for execa errors by @nfischer in shelljs/shelljs#1220

Add -B, -A, and -C options to grep by @abluescarab in shelljs/shelljs#1206

refactor: change how internal errors are handled by @nfischer in shelljs/shelljs#1222

Deprecate the shjs binary by @nfischer in shelljs/shelljs#1225

bump execa dependency version by @y-nk in shelljs/shelljs#1216

New Contributors

@abluescarab made their first contribution in shelljs/shelljs#1207

@y-nk made their first contribution in shelljs/shelljs#1216

Full Changelog: shelljs/shelljs@v0.9.2...v0.10.0

v0.9.2

What's Changed

test: add tests for shelljs glob expansion by @nfischer in shelljs/shelljs#1198

chore: remove unused env var by @nfischer in shelljs/shelljs#1199

fix: add package.json to exports list by @nfischer in shelljs/shelljs#1200

Full Changelog: shelljs/shelljs@v0.9.1...v0.9.2

v0.9.1

What's Changed

fix: add global.js and plugin.js to exports list by @nfischer in shelljs/shelljs#1196

Full Changelog: shelljs/shelljs@v0.9.0...v0.9.1

v0.9.0

What's Changed

fix: Exit 1 with empty string if no match by @wyardley in shelljs/shelljs#901

feat(cp): support update flag when recursing by @joshi-sh in shelljs/shelljs#889

ci: change language to node_js and remove obsolete scripts by @DanielRuf in shelljs/shelljs#910

chore: remove gitter integration by @nfischer in shelljs/shelljs#907

chore(npm): remove lockfile by @nfischer in shelljs/shelljs#911

... (truncated)

Changelog

Sourced from shelljs's changelog.

Change Log

Commits

4580c00 0.10.0
9a06336 Deprecate the shjs binary
3b03c85 chore: remove accidental audit dep
33db514 Regenerate package-lock.json with npm 9.2.0
6577d54 Merge branch 'y-nk-main'
e48e919 bump execa (#1216)
67a26e2 refactor: change how internal errors are handled
bfd06fa Add -B, -A, and -C options to grep (#1206)
3149e09 refactor: explicit handling for execa errors
75d26de fix: cmd is compatible with node 22.10
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the utilities group with 4 updates in the / directory: [dotenv](https://github.com/motdotla/dotenv), [marked](https://github.com/markedjs/marked), [nodemailer](https://github.com/nodemailer/nodemailer) and [shelljs](https://github.com/shelljs/shelljs). Updates `dotenv` from 18.0.7 to 18.0.8 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.7...v18.0.8) Updates `marked` from 18.1.0 to 18.1.1 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.1.0...v18.1.1) Updates `nodemailer` from 10.1.0 to 10.1.1 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v10.1.0...v10.1.1) Updates `shelljs` from 0.8.5 to 0.10.0 - [Release notes](https://github.com/shelljs/shelljs/releases) - [Changelog](https://github.com/shelljs/shelljs/blob/main/CHANGELOG.md) - [Commits](shelljs/shelljs@v0.8.5...v0.10.0) --- updated-dependencies: - dependency-name: dotenv dependency-version: 18.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: utilities - dependency-name: marked dependency-version: 18.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: utilities - dependency-name: nodemailer dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: utilities - dependency-name: shelljs dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: utilities ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-19T08:08:34Z

Labels

The following labels could not be found: dependencies, engine. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

socket-security · 2026-10-19T08:09:02Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
marked@18.1.0 ⏵ 18.1.1	⁺¹	⁺¹
shelljs@0.8.5 ⏵ 0.10.0	^-5	⁺¹
nodemailer@10.1.0 ⏵ 10.1.1	⁺¹	⁺¹	⁺¹
dotenv@18.0.8

View full report

Navigation Menu

Repository navigation

deps(engine): bump the utilities group across 1 directory with 4 updates - #206

deps(engine): bump the utilities group across 1 directory with 4 updates#206
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/utilities-609ee3ce47

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

socket-security Bot commented Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

18.0.8 (2026-10-14)

Changed

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

Performance Improvements

v10.1.1

10.1.1 (2026-10-14)

Bug Fixes

10.1.1 (2026-10-14)

Bug Fixes

v0.10.0

What's Changed

New Contributors

v0.9.2

What's Changed

v0.9.1

What's Changed

v0.9.0

What's Changed

Change Log

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Labels

Uh oh!

socket-security Bot commented Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants