Skip to content

Bump the minor-updates group across 1 directory with 11 updates - #330

Open
dependabot[bot] wants to merge 1 commit into
testfrom
dependabot-npm_and_yarn-test-minor-updates-d05532bb1f
Open

Bump the minor-updates group across 1 directory with 11 updates#330
dependabot[bot] wants to merge 1 commit into
testfrom
dependabot-npm_and_yarn-test-minor-updates-d05532bb1f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-updates group with 11 updates in the / directory:

Package From To
@json2csv/plainjs 7.0.6 7.0.7
@natlibfi/marc-record 10.0.1 10.0.2
@natlibfi/marc-record-serializers 11.0.1 11.0.3
@natlibfi/melinda-backend-commons 3.0.5 3.0.6
@natlibfi/sru-client 7.0.1 7.0.2
body-parser 2.2.2 2.3.0
mysql2 3.19.0 3.23.2
@redocly/cli 2.34.0 2.41.2
dotenv 17.3.1 17.4.2
mariadb 3.5.2 3.5.3
nock 14.0.11 14.0.16

Updates @json2csv/plainjs from 7.0.6 to 7.0.7

Changelog

Sourced from @​json2csv/plainjs's changelog.

7.0.7 (2025-01-26)

Bug Fixes

  • fix incorrect docs about transformers actions (150cef3)
  • infinite loop in flatten (e81cd60)
Commits
  • a39217c chore: fix pipeline to new npm auth method
  • 4075e3b chore: update TypeScript to 7
  • c97c3a5 chore(deps): update @​types/node, commander, esbuild & typescript
  • 1f8d928 chore: add pre-commit and pre-push hooks with husky
  • 04a0aa4 chore: update CDN bundle
  • d04fe09 chore: add sideEffects: false for better tree-shaking
  • c8d2b52 chore: update homepage URLs to HTTPS
  • c2ccfc7 chore: fix typos in test descriptions
  • 8cddbc7 chore: update TypeScript target from es6 to es2020
  • 9fe847e chore: add clean scripts to all packages
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​json2csv/plainjs since your current version.


Updates @natlibfi/marc-record from 10.0.1 to 10.0.2

Release notes

Sourced from @​natlibfi/marc-record's releases.

v10.0.2

What's Changed

Full Changelog: NatLibFi/marc-record-js@v10.0.1...v10.0.2

Commits

Updates @natlibfi/marc-record-serializers from 11.0.1 to 11.0.3

Release notes

Sourced from @​natlibfi/marc-record-serializers's releases.

v11.0.3

What's Changed

Full Changelog: NatLibFi/marc-record-serializers@v11.0.1...v11.0.3

Commits

Updates @natlibfi/melinda-backend-commons from 3.0.5 to 3.0.6

Commits

Updates @natlibfi/sru-client from 7.0.1 to 7.0.2

Commits

Updates body-parser from 2.2.2 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

Updates mysql2 from 3.19.0 to 3.23.2

Release notes

Sourced from mysql2's releases.

v3.23.2

3.23.2 (2026-07-27)

Bug Fixes

  • correct connectAttributes typo in ChangeUser packet (#4423) (f64ce07), closes #2140
  • don't leave a failed execute as the active command (#4425) (fbd64b6)

v3.23.1

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)

v3.23.0

3.23.0 (2026-07-13)

Features

  • return unsafe integers inside JSON columns as exact strings with supportBigNumbers (#4388) (a26ff14)
  • sql-escaper: add Temporal support when escaping values (#4392) (6b933f6)
  • support MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (#4373) (5034e57)

v3.22.6

3.22.6 (2026-07-07)

Bug Fixes

  • sql-escaper: resolve multi statement and expand object regressions (#4380) (1b927a9)

v3.22.5

3.22.5 (2026-06-06)

Bug Fixes

  • keep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (#4327) (2af33a1)

v3.22.4

3.22.4 (2026-05-24)

Bug Fixes

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.23.2 (2026-07-27)

Bug Fixes

  • correct connectAttributes typo in ChangeUser packet (#4423) (f64ce07), closes #2140
  • don't leave a failed execute as the active command (#4425) (fbd64b6)

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)

3.23.0 (2026-07-13)

Features

  • return unsafe integers inside JSON columns as exact strings with supportBigNumbers (#4388) (a26ff14)
  • sql-escaper: add Temporal support when escaping values (#4392) (6b933f6)
  • support MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (#4373) (5034e57)

3.22.6 (2026-07-07)

Bug Fixes

  • sql-escaper: resolve multi statement and expand object regressions (#4380) (1b927a9)

3.22.5 (2026-06-06)

Bug Fixes

  • keep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (#4327) (2af33a1)

3.22.4 (2026-05-26)

Bug Fixes

3.22.3 (2026-04-24)

Bug Fixes

... (truncated)

Commits
  • a987302 chore(master): release 3.23.2 (#4424)
  • 6c0cbc6 build(deps): bump postcss from 8.5.15 to 8.5.23 in /website (#4437)
  • 2aec892 build(deps): bump lucide-react from 1.26.0 to 1.27.0 in /website (#4436)
  • 4f7a589 build(deps): bump sass from 1.101.7 to 1.102.0 in /website (#4435)
  • 992adc5 build(deps): bump lucide-react from 1.25.0 to 1.26.0 in /website (#4431)
  • 26c956b build(deps): bump sass from 1.101.6 to 1.101.7 in /website (#4432)
  • e6a1cf7 build(deps): bump sass from 1.101.3 to 1.101.6 in /website (#4427)
  • 3f240ce build(deps): bump fast-uri from 3.1.2 to 3.1.4 in /website (#4422)
  • 28ad315 build(deps): bump immutable from 5.1.5 to 5.1.9 in /website (#4421)
  • 67821f8 build(deps): bump svgo from 3.3.3 to 3.3.4 in /website (#4420)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mysql2 since your current version.


Updates @redocly/cli from 2.34.0 to 2.41.2

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.41.2

Patch Changes

  • Updated js-yaml from 5.2.1 to 5.2.2 to resolve a vulnerability in YAML parsing.

  • Added support for the Arazzo spec-compliant workflow reference form $sourceDescriptions.<name>.<workflowId> in dependsOn, step workflowId, and success/failure action workflowId.

    Unresolvable workflow references fail only the affected workflow with a clear error message, and no longer abort the whole run or pass unnoticed.

  • Updated @​redocly/openapi-core to v2.41.2.

  • Updated @​redocly/respect-core to v2.41.2.

@​redocly/cli@​2.41.1

Patch Changes

  • Fixed an issue where the drift command's schema-consistency rule reported false-positive findings for oneOf schemas with a discriminator. Payloads are validated only against the branch selected by the discriminator value instead of every oneOf branch. Schemas whose discriminator does not meet Ajv's structural requirements keep the previous behavior.
  • Extended the drift command's built-in undocumented-header ignore list with x-amz-, x-amzn- and x-github- prefixes, and the x-hub-signature / x-hub-signature-256 webhook signature headers.

@​redocly/cli@​2.41.0

Minor Changes

  • Added a new built-in rule security-scopes-defined that requires every scope used in a security requirement to be defined in the corresponding OAuth2 security scheme. The rule supports OpenAPI 2.0/3.x and AsyncAPI 2.6/3.0, suggests the closest defined scope for typos, and has an opt-in requireScopes option that requires OAuth2 security requirements to list at least one scope.

Patch Changes

  • Fixed an issue in respect where the execution of parent workflow's steps didn't halt after a step that referenced another workflow had failed.
  • Fixed an issue where the cursor AI provider of the generate-spec command sent only the instructions to the model and the operation to refine never reached it.
  • Updated @​redocly/openapi-core to v2.41.0.
  • Updated @​redocly/respect-core to v2.41.0.

@​redocly/cli@​2.40.0

Minor Changes

  • Added an --ignore-headers option to the experimental drift and proxy commands. It takes a comma-separated list of header names to skip in undocumented-header checks, and a trailing * matches by prefix (for example x-consumer-*). Use it to silence headers a gateway or proxy adds that are not part of the API contract.
  • Added an experimental generate-spec command that infers an OpenAPI description from recorded HTTP traffic.

Patch Changes

  • Fixed the drift command's schema-consistency rule reporting false-positive "Undocumented query parameter" findings for deepObject-style query parameters. Traffic keys like namespace[id]=...&namespace[name]=... are now matched to the documented namespace parameter, and the reconstructed object is validated against the parameter schema.

  • Fixed an issue where the drift command's schema-consistency rule reported false-positive request findings for exchanges the server rejected with a 4xx client error. For example: missing required parameter, missing required body, request-body schema mismatch. A 4xx response means the server never accepted the request.

... (truncated)

Commits
  • 3016d43 chore: 🔖 release new versions (#2978)
  • 324c0f6 chore: bump js-yaml to 5.2.2 and refresh lockfile (#2982)
  • 737ff01 chore(cli): add production env to usage data (#2976)
  • bd82fc6 fix(respect): workflow references format (#2969)
  • b15dae2 chore: 🔖 release new versions (#2975)
  • 6da4e28 fix: validate discriminated oneOf schemas against only the branch selected by...
  • fba67bd chore: fix snapshot release (#2974)
  • e5ecde4 docs: add Redocly CLI usage skill for AI agents (#2972)
  • 75fd772 docs: revise the cookbook catalog (#2971)
  • d1ad2a8 chore: detect graphql specification in collectSpecData (#2970)
  • Additional commits viewable in compare view

Updates dotenv from 17.3.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)
Commits

Updates mariadb from 3.5.2 to 3.5.3

Release notes

Sourced from mariadb's releases.

MariaDB Connector/Node.js 3.5.3

3.5.3 (Jun1 2026)

Full Changelog

Notable changes

  • Minimum supported Node.js version is now 20 (was 18; Node 18 went EOL in April 2025)
  • CONJS-346: Add RowsWithMeta<T> and WithMeta<T> helper types for typing query() / execute() result shapes — RowsWithMeta<T> for the default rows-array-with-meta shape, WithMeta<T> for the metaAsArray: true tuple form (types-only, no runtime change)

Issues Fixed

  • CONJS-354: Reject a server-initiated LOAD DATA LOCAL INFILE request when permitLocalInfile is disabled (report by tharavel)
  • CONJS-353: PAM (dialog) authentication now requires a secure connection (TLS or a local unix socket), since it transmits the password in clear text (report by fg0x0)
  • CONJS-351: Use constant-time comparison when validating the server certificate fingerprint token, preventing a timing side-channel that could leak the token to a man-in-the-middle
  • CONJS-350: Fixed possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charset (report by fg0x0)
  • CONJS-344: Restore dual ESM/CJS support after the 3.5 ESM migration (#346):
    • TypeScript types now compile under moduleResolution: "Node16" / "NodeNext" / "Bundler" — fixes TS2846 / TS2834 reported in 3.5.1 and 3.5.2
    • Ship paired .d.cts declarations for the require condition
    • Ship a real CJS bundle in dist/ so require('mariadb') works on Node 20+ without --experimental-require-module or ExperimentalWarning
    • Restore the default ESM export, so import mariadb from 'mariadb' works again (matches 3.4.x behavior)
Changelog

Sourced from mariadb's changelog.

3.5.3 (Jun1 2026)

Full Changelog

Notable changes

  • Minimum supported Node.js version is now 20 (was 18; Node 18 went EOL in April 2025)
  • CONJS-346: Add RowsWithMeta<T> and WithMeta<T> helper types for typing query() / execute() result shapes — RowsWithMeta<T> for the default rows-array-with-meta shape, WithMeta<T> for the metaAsArray: true tuple form (types-only, no runtime change)

Issues Fixed

  • CONJS-354: Reject a server-initiated LOAD DATA LOCAL INFILE request when permitLocalInfile is disabled (report by tharavel)
  • CONJS-353: PAM (dialog) authentication now requires a secure connection (TLS or a local unix socket), since it transmits the password in clear text (report by fg0x0)
  • CONJS-351: Use constant-time comparison when validating the server certificate fingerprint token, preventing a timing side-channel that could leak the token to a man-in-the-middle
  • CONJS-350: Fixed possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charset (report by fg0x0)
  • CONJS-344: Restore dual ESM/CJS support after the 3.5 ESM migration (#346):
    • TypeScript types now compile under moduleResolution: "Node16" / "NodeNext" / "Bundler" — fixes TS2846 / TS2834 reported in 3.5.1 and 3.5.2
    • Ship paired .d.cts declarations for the require condition
    • Ship a real CJS bundle in dist/ so require('mariadb') works on Node 20+ without --experimental-require-module or ExperimentalWarning
    • Restore the default ESM export, so import mariadb from 'mariadb' works again (matches 3.4.x behavior)

3.4.6 (Jun 2026)

Full Changelog

Issues Fixed

  • CONJS-331: Corrected parsec authentication plugin handling
  • CONJS-350: Fixed possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charset (report by fg0x0)
  • CONJS-349: Fixed cleartext password disclosure to a man-in-the-middle when relying on certificate fingerprint validation (self-signed trust mode)
  • CONJS-351: Use constant-time comparison when validating the server certificate fingerprint token, preventing a timing side-channel that could leak the token to a man-in-the-middle
  • CONJS-353: PAM (dialog) authentication now requires a secure connection (TLS or a local unix socket), since it transmits the password in clear text (report by fg0x0)
  • CONJS-354: Reject a server-initiated LOAD DATA LOCAL INFILE request when permitLocalInfile is disabled (report by tharavel)
  • Refuse sending the password in clear (mysql_clear_password) over an unencrypted connection

3.3.3 (Jun 2026)

Full Changelog

Issues Fixed

  • CONJS-350: Fixed possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charset (report by fg0x0)
  • CONJS-349: Fixed cleartext password disclosure to a man-in-the-middle when relying on certificate fingerprint validation (self-signed trust mode)
  • CONJS-351: Use constant-time comparison when validating the server certificate fingerprint token, preventing a timing side-channel that could leak the token to a man-in-the-middle
  • CONJS-353: PAM (dialog) authentication now requires a secure connection (TLS or a local unix socket), since it transmits the password in clear text (report by fg0x0)
  • CONJS-354: Reject a server-initiated LOAD DATA LOCAL INFILE request when permitLocalInfile is disabled (report by tharavel)
  • Refuse sending the password in clear (mysql_clear_password) over an unencrypted connection

3.2.4 (Jun 2026)

Full Changelog

Issues Fixed

  • CONJS-350: Fixed possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charset (report by fg0x0)
  • CONJS-353: PAM (dialog) authentication now requires a secure connection (TLS or a local unix socket), since it transmits the password in clear text (report by fg0x0)

... (truncated)

Commits
  • 14e0f16 [misc] Update CHANGELOG.md to include recent security fixes for PAM authentic...
  • cd00457 Merge branch 'develop'
  • f34b785 [misc] test stability: poll debug log until flushed instead of fixed wait
  • 2df7c26 [CONJS-354] Reject server-initiated LOAD DATA LOCAL INFILE when permitLocalIn...
  • 7d6e44a [misc] Cap the length of server-sent numeric strings before BigInt parsing, p...
  • 53b3042 [CONJS-353] PAM (dialog) authentication now requires a secure connection (TLS...
  • 41eec7f [CONJS-351] Implement constant-time comparison in validateFingerPrint to prev...
  • aa50c50 Update CHANGELOG.md for version 3.4.6, 3.3.3 and 3.2.4, adding fixed issues a...
  • 6c10db5 [misc] test stability correction
  • 5d5293a [misc] Refuse mysql_clear_password over an insecure connection
  • Additional commits viewable in compare view

Updates nock from 14.0.11 to 14.0.16

Release notes

Sourced from nock's releases.

v14.0.16

14.0.16 (2026-06-26)

Bug Fixes

  • guard against AbortSignal-aborted requests in response handler (#2977) (2d68e8a), closes #2949

v14.0.15

14.0.15 (2026-05-07)

Bug Fixes

  • Revert "fix(backport): apply body delay before the response end" (#2973) (de5450c), closes #2969

v14.0.14

14.0.14 (2026-04-30)

Bug Fixes

  • backport: apply body delay before the response end (#2969) (215cd2a)

v14.0.13

14.0.13 (2026-04-20)

Bug Fixes

  • types: align Definition with runtime; add rawHeaders, drop headers (#2955) (07fbfab)

v14.0.12

14.0.12 (2026-04-05)

Bug Fixes

  • prevent crash when query params have conflicting dot-notation keys (#2958) (7ea9933)
Commits
  • 2d68e8a fix: guard against AbortSignal-aborted requests in response handler (#2977)
  • de5450c fix: Revert "fix(backport): apply body delay before the response end" (#2973)
  • 215cd2a fix(backport): apply body delay before the response end (#2969)
  • 07fbfab fix(types): align Definition with runtime; add rawHeaders, drop headers (#2955)
  • fe2c3ea chore(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#2961)
  • ee49b4f chore(deps-dev): bump flatted from 3.2.5 to 3.4.2
  • 11bf183 chore(deps-dev): bump undici from 6.23.0 to 6.24.1 (#2954)
  • 6b80154 chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#2960)
  • 4cbf6cc chore(deps): bump tar and npm (#2952)
  • 7ea9933 fix: prevent crash when query params have conflicting dot-notation keys (#2958)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-updates group across 1 directory with 11 updates
1cceea3 
Bumps the minor-updates group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@json2csv/plainjs](https://github.com/juanjoDiaz/json2csv) | `7.0.6` | `7.0.7` |
| [@natlibfi/marc-record](https://github.com/NatLibFi/marc-record-js) | `10.0.1` | `10.0.2` |
| [@natlibfi/marc-record-serializers](https://github.com/NatLibFi/marc-record-serializers) | `11.0.1` | `11.0.3` |
| [@natlibfi/melinda-backend-commons](https://github.com/NatLibFi/melinda-backend-commons-js) | `3.0.5` | `3.0.6` |
| [@natlibfi/sru-client](https://github.com/NatLibFi/sru-client-js) | `7.0.1` | `7.0.2` |
| [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` |
| [mysql2](https://github.com/sidorares/node-mysql2) | `3.19.0` | `3.23.2` |
| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.34.0` | `2.41.2` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` |
| [mariadb](https://github.com/mariadb-corporation/mariadb-connector-nodejs) | `3.5.2` | `3.5.3` |
| [nock](https://github.com/nock/nock) | `14.0.11` | `14.0.16` |



Updates `@json2csv/plainjs` from 7.0.6 to 7.0.7
- [Release notes](https://github.com/juanjoDiaz/json2csv/releases)
- [Changelog](https://github.com/juanjoDiaz/json2csv/blob/main/CHANGELOG.md)
- [Commits](juanjoDiaz/json2csv@v7.0.6...v7.0.7)

Updates `@natlibfi/marc-record` from 10.0.1 to 10.0.2
- [Release notes](https://github.com/NatLibFi/marc-record-js/releases)
- [Commits](NatLibFi/marc-record-js@v10.0.1...v10.0.2)

Updates `@natlibfi/marc-record-serializers` from 11.0.1 to 11.0.3
- [Release notes](https://github.com/NatLibFi/marc-record-serializers/releases)
- [Commits](NatLibFi/marc-record-serializers@v11.0.1...v11.0.3)

Updates `@natlibfi/melinda-backend-commons` from 3.0.5 to 3.0.6
- [Release notes](https://github.com/NatLibFi/melinda-backend-commons-js/releases)
- [Commits](NatLibFi/melinda-backend-commons-js@v3.0.5...v3.0.6)

Updates `@natlibfi/sru-client` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/NatLibFi/sru-client-js/releases)
- [Commits](NatLibFi/sru-client-js@v7.0.1...v7.0.2)

Updates `body-parser` from 2.2.2 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

Updates `mysql2` from 3.19.0 to 3.23.2
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.19.0...v3.23.2)

Updates `@redocly/cli` from 2.34.0 to 2.41.2
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.34.0...@redocly/cli@2.41.2)

Updates `dotenv` from 17.3.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.3.1...v17.4.2)

Updates `mariadb` from 3.5.2 to 3.5.3
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-nodejs/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-nodejs@3.5.2...3.5.3)

Updates `nock` from 14.0.11 to 14.0.16
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.11...v14.0.16)

---
updated-dependencies:
- dependency-name: "@json2csv/plainjs"
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: "@natlibfi/marc-record"
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: "@natlibfi/marc-record-serializers"
  dependency-version: 11.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: "@natlibfi/melinda-backend-commons"
  dependency-version: 3.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: "@natlibfi/sru-client"
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: mysql2
  dependency-version: 3.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@redocly/cli"
  dependency-version: 2.41.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: mariadb
  dependency-version: 3.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: nock
  dependency-version: 14.0.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 1, 2026 17:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants