Skip to content

build(deps): bump the npm-deps group across 1 directory with 11 updates - #6301

Merged
FlowCryptRobot merged 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-deps-3c1cd70947
Sep 28, 2026
Merged

build(deps): bump the npm-deps group across 1 directory with 11 updates#6301
FlowCryptRobot merged 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-deps-3c1cd70947

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 11 updates in the / directory:

Package From To
dompurify 3.4.15 3.4.16
eslint 10.10.0 10.11.0
eslint-plugin-jsdoc 64.5.2 64.5.4
fs-extra 11.4.0 11.4.1
googleapis 181.0.0 182.0.0
openpgp 6.3.1 6.3.2
prettier 3.9.8 3.9.9
puppeteer 25.11.0 25.12.0
typescript-eslint 8.70.0 8.70.1
undici-types 8.10.2 8.11.2
web-ext 10.6.0 10.7.0

Updates dompurify from 3.4.15 to 3.4.16

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible
Commits

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)
Commits
  • 3c0b7c6 10.11.0
  • 321f0a7 Build: changelog update for 10.11.0
  • 520dd77 perf: Implement fast paths in critical areas (#21210)
  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
  • 24310e3 chore: update ecosystem plugins (#21324)
  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
  • Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 64.5.2 to 64.5.4

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v64.5.4

64.5.4 (2026-09-19)

Bug Fixes

  • no-unnecessary-type-assertion: only try typescript if the rule is enabled; fixes #1773 (3c1c209)

v64.5.3

64.5.3 (2026-09-18)

Bug Fixes

Commits
  • 3c1c209 fix(no-unnecessary-type-assertion): only try typescript if the rule is enab...
  • a142875 chore: update jsdoccomment, typescript-eslint/utils, comment-parser, devDeps
  • 2d85fed fix: for @​link targets, check properties within export class declarations; fi...
  • f1f318a chore: update ncurc format
  • See full diff in compare view

Updates fs-extra from 11.4.0 to 11.4.1

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

  • Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)
  • Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)
Commits

Updates googleapis from 181.0.0 to 182.0.0

Commits
  • 9eb464b chore: release main (#4023)
  • 9e3b465 feat: regenerate index files
  • 279af87 fix(youtubereporting): update the API
  • b37c225 fix(youtubeAnalytics): update the API
  • 512e921 fix(youtube): update the API
  • 6cd997a fix(workstations): update the API
  • 62d5f76 fix(workspaceevents): update the API
  • 0d71cd6 feat(workloadmanager): update the API
  • 2c46e13 fix(workflows): update the API
  • c7b8641 fix(workflowexecutions): update the API
  • Additional commits viewable in compare view

Updates openpgp from 6.3.1 to 6.3.2

Release notes

Sourced from openpgp's releases.

v6.3.2

What's Changed

  • Fix encrypting more than 4GB of data using AEAD (#2059)
  • config.maxDecompressedMessageSize: improve unbzip2 memory limit enforcement (openpgpjs/openpgpjs#2064)
  • Fix parsing of four-octet packet lengths of 2**31 and above (#2061)
  • UnparseablePacket: fix discarding of packets following an unparseable secret (sub)key (#2060)
  • Fix reading an empty trailing subpacket in v6 signatures (#2055)
  • Fix calling Message.signDetached directly (#2062)

Full Changelog: openpgpjs/openpgpjs@v6.3.1...v6.3.2

Commits
  • 5f33328 6.3.2
  • c8d0d68 Merge pull request #2059 (with Safari 14 fallback)
  • 38c9ec2 CI: enable on v6 branch
  • 16e32bb Fix parsing of four-octet packet lengths of 2**31 and above (#2061)
  • 20f2b1b Fix calling Message.signDetached directly (#2062)
  • 97d5023 UnparseablePacket: fix discarding of packets following an unparseable secre...
  • 95dbe0b config.maxDecompressedMessageSize: improve unbzip2 memory limit enforcement...
  • 545271c Merge pull request #2055
  • See full diff in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

Updates puppeteer from 25.11.0 to 25.12.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.12.0

25.12.0 (2026-09-23)

🎉 Features

🛠️ Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.2 to 3.2.3

puppeteer: v25.12.0

25.12.0 (2026-09-23)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.2 to 3.2.3
      • puppeteer-core bumped from 25.11.0 to 25.12.0
Commits

Updates typescript-eslint from 8.70.0 to 8.70.1

Release notes

Sourced from typescript-eslint's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

  • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • rule-tester: test the final autofix output instead of the first pass (#12867)
  • scope-manager: merge implicit global definitions (#12809)
  • type-utils: match package specifiers on whole path components (#12838)
  • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
  • typescript-estree: add missing < token opening type arguments (#12821)
  • typescript-estree: require string literal import attribute values (#12894)
  • website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates undici-types from 8.10.2 to 8.11.2

Release notes

Sourced from undici-types's releases.

v8.11.2

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.11.1...v8.11.2

v8.11.1

What's Changed

Full Changelog: nodejs/undici@v8.11.0...v8.11.1

v8.11.0

What's Changed

... (truncated)

Commits

Updates web-ext from 10.6.0 to 10.7.0

Release notes

Sourced from web-ext's releases.

10.7.0

main changes

  • Added: web-ext lint supports Firefox schemas up to Fx157 (included)
  • Fixed: Avoid auto-reload for recently created source directory (#3697)
  • Fixed: Loaded config files with URL characters in their paths (#3825)
  • Fixed: stabilize program tests locale (#3701)

dependencies

  • Updated: dependency @babel/runtime to 8.0.5 (#3848)
  • Updated: dependency addons-linter to 10.13.0 (#3850)
  • Updated: dependency jszip to 3.10.2 (#3842)
  • Updated: dependency open to 11.0.3 (#3853)

dev dependencies

  • Updated: dependency @babel/cli to 8.0.5 (#3845)
  • Updated: dependency @babel/core to 8.0.5 (#3849)
  • Updated: dependency @babel/eslint-parser to 8.0.5 (#3847)
  • Updated: dependency @babel/preset-env to 8.0.5 (#3846)
  • Updated: dependency @babel/register to 8.0.5 (#3844)
  • Updated: dependency @eslint/compat to 2.1.1 (#3831)
  • Updated: dependency @eslint/eslintrc to 3.3.7 (#3827)
  • Updated: dependency adm-zip to 0.6.1 (#3851)
  • Updated: dependency globals to 17.12.0 (#3826)
  • Updated: dependency mocha to 12.0.1 (#3854)
  • Updated: dependency sinon to 22.1.0 (#3786)

others

  • Added: add workflow to create draft releases (#3840)
  • Added: SECURITY.md (#3810)
Commits
  • 3c26c88 10.7.0 (#3856)
  • 2070d69 Remove outdated npm-audit exception (#3855)
  • 901cfe2 chore(deps): bump open from 11.0.2 to 11.0.3 (#3853)
  • 51c968e chore(deps-dev): bump mocha from 12.0.0 to 12.0.1 (#3854)
  • 87c8830 chore(deps): bump adm-zip from 0.6.0 to 0.6.1 (#3851)
  • 615befe chore(deps-dev): bump @​babel/cli from 8.0.4 to 8.0.5 (#3845)
  • b492386 chore(deps-dev): bump @​babel/register from 8.0.1 to 8.0.5 (#3844)
  • 8c2a50e chore(deps-dev): bump @​babel/eslint-parser from 8.0.1 to 8.0.5 (#3847)
  • 7c42ac4 Bump addons-linter to 10.13.0 (#3850)
  • 2df2af8 chore(deps-dev): bump @​babel/preset-env from 8.0.2 to 8.0.5 (#3846)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
puppeteer [>= 21.7.a, < 21.8]
puppeteer [>= 22.0.a, < 22.1]
puppeteer [>= 22.1.a, < 22.2]
puppeteer [>= 22.3.a, < 22.4]
puppeteer [>= 22.5.a, < 22.6]
puppeteer [>= 22.6.a, < 22.7]
puppeteer [>= 22.4.a, < 22.5]
puppeteer [>= 22.2.a, < 22.3]
puppeteer [>= 22.7.a, < 22.8]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 27, 2026
@dependabot
dependabot Bot requested a review from sosnovsky as a code owner September 27, 2026 22:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 27, 2026
FlowCryptRobot
FlowCryptRobot previously approved these changes Sep 27, 2026
View reviewed changes
@FlowCryptRobot
FlowCryptRobot enabled auto-merge (squash) September 27, 2026 22:04
@sosnovsky

sosnovsky commented Sep 28, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
build(deps): bump the npm-deps group across 1 directory with 11 updates
d6baaa8 
Bumps the npm-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.15` | `3.4.16` |
| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `64.5.2` | `64.5.4` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.4.0` | `11.4.1` |
| [googleapis](https://github.com/googleapis/google-api-nodejs-client) | `181.0.0` | `182.0.0` |
| [openpgp](https://github.com/openpgpjs/openpgpjs) | `6.3.1` | `6.3.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `25.11.0` | `25.12.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.70.1` |
| [undici-types](https://github.com/nodejs/undici) | `8.10.2` | `8.11.2` |
| [web-ext](https://github.com/mozilla/web-ext) | `10.6.0` | `10.7.0` |



Updates `dompurify` from 3.4.15 to 3.4.16
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.16)

Updates `eslint` from 10.10.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.10.0...v10.11.0)

Updates `eslint-plugin-jsdoc` from 64.5.2 to 64.5.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v64.5.2...v64.5.4)

Updates `fs-extra` from 11.4.0 to 11.4.1
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.4.0...11.4.1)

Updates `googleapis` from 181.0.0 to 182.0.0
- [Release notes](https://github.com/googleapis/google-api-nodejs-client/releases)
- [Commits](googleapis/google-api-nodejs-client@googleapis-v181.0.0...googleapis-v182.0.0)

Updates `openpgp` from 6.3.1 to 6.3.2
- [Release notes](https://github.com/openpgpjs/openpgpjs/releases)
- [Commits](openpgpjs/openpgpjs@v6.3.1...v6.3.2)

Updates `prettier` from 3.9.8 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.8...3.9.9)

Updates `puppeteer` from 25.11.0 to 25.12.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v25.11.0...puppeteer-v25.12.0)

Updates `typescript-eslint` from 8.70.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

Updates `undici-types` from 8.10.2 to 8.11.2
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.10.2...v8.11.2)

Updates `web-ext` from 10.6.0 to 10.7.0
- [Release notes](https://github.com/mozilla/web-ext/releases)
- [Commits](mozilla/web-ext@10.6.0...10.7.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 64.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: fs-extra
  dependency-version: 11.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: googleapis
  dependency-version: 182.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: openpgp
  dependency-version: 6.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: puppeteer
  dependency-version: 25.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: undici-types
  dependency-version: 8.11.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: web-ext
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the npm-deps group with 11 updates build(deps): bump the npm-deps group across 1 directory with 11 updates Sep 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-deps-3c1cd70947 branch from 7cbd706 to d6baaa8 Compare September 28, 2026 12:14
@FlowCryptRobot
FlowCryptRobot merged commit 2585a8f into master Sep 28, 2026
12 checks passed
@FlowCryptRobot
FlowCryptRobot deleted the dependabot/npm_and_yarn/npm-deps-3c1cd70947 branch September 28, 2026 12:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@FlowCryptRobot FlowCryptRobot FlowCryptRobot approved these changes
@sosnovsky sosnovsky Awaiting requested review from sosnovsky sosnovsky is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sosnovsky @FlowCryptRobot