build(deps): bump the npm-minor-patch group in /web with 14 updates - #7367
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the npm-minor-patch group in /web with 14 updates#7367dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm-minor-patch group in /web with 14 updates: | Package | From | To | | --- | --- | --- | | [@types/dagre](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dagre) | `0.7.53` | `0.7.54` | | [dayjs](https://github.com/iamkun/dayjs) | `1.11.19` | `1.11.23` | | [github-markdown-css](https://github.com/sindresorhus/github-markdown-css) | `5.8.1` | `5.9.0` | | [react-cookie](https://github.com/ItsBenCodes/cookies) | `8.0.1` | `8.1.2` | | [react-draggable](https://github.com/react-grid-layout/react-draggable) | `4.5.0` | `4.7.1` | | [@types/loadable__component](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/loadable__component) | `5.13.1` | `5.13.10` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `17.0.3` | `17.0.10` | | [@types/react-syntax-highlighter](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-syntax-highlighter) | `15.5.1` | `15.5.13` | | [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.5` | | [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.16.1` | `29.16.6` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.4.0` | `5.5.6` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.5.0` | `5.6.8` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.11` | `29.4.12` | | [webpack](https://github.com/webpack/webpack) | `5.94.0` | `5.110.3` | Updates `@types/dagre` from 0.7.53 to 0.7.54 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dagre) Updates `dayjs` from 1.11.19 to 1.11.23 - [Release notes](https://github.com/iamkun/dayjs/releases) - [Changelog](https://github.com/iamkun/dayjs/blob/v1.11.23/CHANGELOG.md) - [Commits](iamkun/dayjs@v1.11.19...v1.11.23) Updates `github-markdown-css` from 5.8.1 to 5.9.0 - [Release notes](https://github.com/sindresorhus/github-markdown-css/releases) - [Commits](sindresorhus/github-markdown-css@v5.8.1...v5.9.0) Updates `react-cookie` from 8.0.1 to 8.1.2 - [Release notes](https://github.com/ItsBenCodes/cookies/releases) - [Commits](ItsBenCodes/cookies@v8.0.1...v8.1.2) Updates `react-draggable` from 4.5.0 to 4.7.1 - [Release notes](https://github.com/react-grid-layout/react-draggable/releases) - [Changelog](https://github.com/react-grid-layout/react-draggable/blob/master/CHANGELOG.md) - [Commits](react-grid-layout/react-draggable@v4.5.0...v4.7.1) Updates `@types/loadable__component` from 5.13.1 to 5.13.10 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/loadable__component) Updates `@types/react` from 17.0.3 to 17.0.10 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-syntax-highlighter` from 15.5.1 to 15.5.13 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-syntax-highlighter) Updates `css-loader` from 7.1.2 to 7.1.5 - [Release notes](https://github.com/webpack/css-loader/releases) - [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md) - [Commits](webpack/css-loader@v7.1.2...v7.1.5) Updates `eslint-plugin-jest` from 29.16.1 to 29.16.6 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](jest-community/eslint-plugin-jest@v29.16.1...v29.16.6) Updates `eslint-plugin-prettier` from 5.4.0 to 5.5.6 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.4.0...v5.5.6) Updates `html-webpack-plugin` from 5.5.0 to 5.6.8 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v5.5.0...v5.6.8) Updates `ts-jest` from 29.4.11 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.11...v29.4.12) Updates `webpack` from 5.94.0 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.94.0...v5.110.3) --- updated-dependencies: - dependency-name: "@types/dagre" dependency-version: 0.7.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: dayjs dependency-version: 1.11.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: github-markdown-css dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react-cookie dependency-version: 8.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react-draggable dependency-version: 4.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/loadable__component" dependency-version: 5.13.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@types/react" dependency-version: 17.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@types/react-syntax-highlighter" dependency-version: 15.5.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: css-loader dependency-version: 7.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: eslint-plugin-jest dependency-version: 29.16.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: eslint-plugin-prettier dependency-version: 5.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: html-webpack-plugin dependency-version: 5.6.8 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
✅ Deploy Preview for pipecd-site canceled.
|
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The changes are limited to dependency version bumps plus a consistent lockfile update, and no concrete issues were found in the updated manifests.
Pull request overview
This PR updates the PipeCD web frontend’s npm dependencies (minor/patch-level within their respective major versions) and refreshes yarn.lock accordingly, keeping the /web toolchain and runtime libraries current.
Changes:
- Bump several TypeScript type packages and runtime deps (e.g.,
dayjs,react-cookie,react-draggable,github-markdown-css). - Update build/lint/test toolchain packages (notably
webpack,html-webpack-plugin,css-loader,eslint-plugin-*,ts-jest). - Regenerate
web/yarn.lockto reflect the new dependency graph and transitive updates.
File summaries
| File | Description |
|---|---|
web/package.json |
Updates direct dependency/version ranges for the web app toolchain and runtime packages. |
web/yarn.lock |
Updates resolved versions/integrity entries and transitive dependencies to match the new package.json ranges. |
Review details
- Files reviewed: 1/2 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
mohammedfirdouss
enabled auto-merge (squash)
September 10, 2026 13:47
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-minor-patch group in /web with 14 updates:
0.7.530.7.541.11.191.11.235.8.15.9.08.0.18.1.24.5.04.7.15.13.15.13.1017.0.317.0.1015.5.115.5.137.1.27.1.529.16.129.16.65.4.05.5.65.5.05.6.829.4.1129.4.125.94.05.110.3Updates
@types/dagrefrom 0.7.53 to 0.7.54Commits
Updates
dayjsfrom 1.11.19 to 1.11.23Release notes
Sourced from dayjs's releases.
Changelog
Sourced from dayjs's changelog.
Commits
4549b8dchore(release): 1.11.23 [skip ci]2a3785ffix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...dad46e6fix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...ae3a550chore(release): 1.11.22 [skip ci]accfc67D2M (#3177)e27ee80fix(plugin): timezone compute instance .tz() offset without host DST (#3174)98364bcchore: update docf6a1556chore: update doc6609c5echore: update doca25f01echore(release): 1.11.21 [skip ci]Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for dayjs since your current version.
Updates
github-markdown-cssfrom 5.8.1 to 5.9.0Release notes
Sourced from github-markdown-css's releases.
Commits
265b22a5.9.05f70cceAdd CSS files for all GitHub themes3a4131bAdd example of footnotesbedb4b7Add hint to avoid browser quirks mode (#117)Updates
react-cookiefrom 8.0.1 to 8.1.2Release notes
Sourced from react-cookie's releases.
... (truncated)
Commits
54f246eBump to v8.1.2 (#959)837ce22chore: remove renovate config (#958)2a2ae32chore: add commit and validate skills (#957)55852b5chore: upgrade dependencies (#956)c7e5c38chore: migrate from yarn to npm (#955)0506588ci: streamline release process (#954)c8db2b2fix: use git+https format for repository URLs in package.json (#953)e31a47bfix: use ReturnType<typeof setInterval> and globalThis to avoid Node type dep...65a3247Bump to v8.1.1 (#951)69b7223fix: patch dependency vulnerabilities (#950)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react-cookie since your current version.
Updates
react-draggablefrom 4.5.0 to 4.7.1Changelog
Sourced from react-draggable's changelog.
Commits
bcbaa8ebuild: make the release flow refuse to publish a bad state2a2bfc0test(build): fail the build on an unguardedprocessreference (#806)0c95645release v4.7.124a8fb3Merge PR #809: fix partial/undefined props under React 18 TypeScript980374bfix: guard process access so browser bundles do not crash (#810)08c5d57Update yarn lockfile6b587caFix handling of partial / undefined props in React 18 TypeScripta0b6e21release v4.7.04551b5dci: dedup redundant tsc compilation in build/CI5611b11feat: add nonce prop for CSP-compliant user-select style injection (#808)Updates
@types/loadable__componentfrom 5.13.1 to 5.13.10Commits
Updates
@types/reactfrom 17.0.3 to 17.0.10Commits
Updates
@types/react-syntax-highlighterfrom 15.5.1 to 15.5.13Commits
Updates
css-loaderfrom 7.1.2 to 7.1.5Release notes
Sourced from css-loader's releases.
Changelog
Sourced from css-loader's changelog.
Commits
be04ec2chore(release): 7.1.5405bddedocs: deprecate css-loader in favor of webpack's built-in CSS support (#1683)bd20834fix: strip BOM before processing with postcss (#1684)488cdb1chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#1663)fd4cb47chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#1659)4bf84fadocs: clarify style-loader usage in Getting Started (#1656)d7441e5chore(deps): bump immutable from 5.1.3 to 5.1.5 (#1654)ca53a77chore(deps): bump minimatch (#1653)5b795afchore(release): 7.1.4aeddefefix: update peer dependency for@rspack/corev2 (#1652)Updates
eslint-plugin-jestfrom 29.16.1 to 29.16.6Release notes
Sourced from eslint-plugin-jest's releases.
Changelog
Sourced from eslint-plugin-jest's changelog.
Commits
94076f0chore(release): 29.16.6 [skip ci]58e487ffix(prefer-to-have-been-called): don't crash on matcher without an argument (...3629019fix(prefer-to-have-length): don't crash onexpectchain without a value (#2...197f341refactor(valid-expect): use optional chaining (#2015)6e6e9a2chore(deps): update ghcr.io/danger/danger-js docker digest to 6b75ca3 (#2005)b1c0328chore(release): 29.16.5 [skip ci]d848f70fix(no-export): handle literal property accessors (#2011)fc5657crefactor: usereplaceTextin fixers when possible (#2012)6156650chore(release): 29.16.4 [skip ci]14b559afix(no-export): handle nested assignment chains (#2009)Updates
eslint-plugin-prettierfrom 5.4.0 to 5.5.6Release notes
Sourced from eslint-plugin-prettier's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-prettier's changelog.
Commits
4f33ea5chore: release eslint-plugin-prettier (#792)4745b54ci: declare workflow-level contents: read on 2 workflows (#790)b5c96a3chore: bump all (dev)Dependencies (#791)e867680chore(deps): update all dependencies (#766)e8e2f7fchore: testing eslint v10 (#779)ca076d9chore: update dev dependencies (#780)42e6369build(deps): Bump the actions group with 2 updates (#778)53ff214Remove empty NPM_TOKEN from release.ymle2c154achore: release eslint-plugin-prettier (#773)6795c1abuild(deps): Bump the actions group across 1 directory with 2 updates (#774)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-prettier since your current version.
Updates
html-webpack-pluginfrom 5.5.0 to 5.6.8Changelog
Sourced from html-webpack-plugin's changelog.
... (truncated)
Commits
cf9c701chore(release): 5.6.88057b14fix: extend@rspack/corepeer dependency range (#1893)fdef1b4chore(release): 5.6.7c862830fix: provide module/exports in VM sandbox for Node.js 25+ compatibility (#1889)0d1ff98refactor: remove lodash usage where possible (#1888)723ed41chore(release): 5.6.6a8e563bfix: compatibility with handlebars-loader (#1882)9a39db8chore(release): 5.6.5a25aa2efix: localStorage exception in Node 25+ (#1880)6ef547achore(release): 5.6.4Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
ts-jestfrom 29.4.11 to 29.4.12Release notes
Sourced from ts-jest's releases.
Changelog
Sourced from ts-jest's changelog.
Commits
3f05625chore(release): 29.4.12df28b27docs: clarify TypeScript version prerequisitesc8a614adocs: mention TypeScript 7 setup in README06c79d4fix: address TypeScript 7 review feedbackf107460docs: explain TypeScript 7 compatibility setup3388227test(e2e): add TypeScript compatibility matrix891dc73fix(compiler): support TypeScript 7 compatibility aliaseseb135ebbuild(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 in /examplesd5d80a3ci: pin google osv scan action at v2.3.5