Skip to content

build(deps): bump the minor-and-patch group with 6 updates - #160

Merged
semics-tech merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-4699eb2d82
Nov 2, 2026
Merged

semics-tech merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-4699eb2d82

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 6 updates:

Package From To
eslint 10.13.0 10.14.0
@grpc/grpc-js 1.14.6 1.14.7
@opentelemetry/semantic-conventions 1.43.0 1.44.0
jose 6.2.13 6.2.14
nodemailer 10.2.1 10.3.1
@azure/identity 4.14.0 4.14.1

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates @grpc/grpc-js from 1.14.6 to 1.14.7

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.7

  • Fix a bug causing automatic retries to continue after a call is cancelled (#3102 contributed by @​phyous)
  • Fix a bug causing automatic retries to fail to trigger in some cases (#3111 contributed by @​kahirokunn)
Commits
  • 5e0c170 Merge pull request #3119 from murgatroid99/grpc-js_1.14.7
  • 4fdb028 Merge commit from fork
  • 870fd2b Merge commit from fork
  • d3d1649 Merge pull request #3110 from murgatroid99/grpc-js-xds_authority_validation
  • 387fcf3 grpc-js(-xds): Bump patch version (1.14.x)
  • ea73ef5 Merge pull request #3118 from murgatroid99/grpc-js_refused_stream_fix_1.14_at...
  • a167b2f grpc-js: Preserve HTTP/2 reset codes on write errors
  • 5f932bf Merge pull request #3117 from murgatroid99/grpc-js_retry_cancel_backoff_fix_1.14
  • e7b81e7 fix(grpc-js): stop retry attempts after the call is cancelled
  • 99b5008 grpc-js-xds: Fix bug causing clients to accept resources from the wrong autho...
  • Additional commits viewable in compare view

Updates @opentelemetry/semantic-conventions from 1.43.0 to 1.44.0

Release notes

Sourced from @​opentelemetry/semantic-conventions's releases.

semconv/v1.44.0

1.44.0

🚀 Features

  • feat: update semantic conventions to v1.44.0 #7239
    • Semantic Conventions v1.44.0: changelog | latest docs
    • @opentelemetry/semantic-conventions (stable) changes: none
    • @opentelemetry/semantic-conventions/incubating (unstable) changes: 3 newly deprecated exports, 33 added exports

Unstable changes in v1.44.0

METRIC_CONTAINER_MEMORY_PAGING_FAULTS // container.memory.paging.faults: Replaced by `container.paging.faults`.
METRIC_K8S_NODE_MEMORY_PAGING_FAULTS  // k8s.node.memory.paging.faults: Replaced by `k8s.node.paging.faults`.
METRIC_K8S_POD_MEMORY_PAGING_FAULTS   // k8s.pod.memory.paging.faults: Replaced by `k8s.pod.paging.faults`.
ATTR_BROWSER_WEB_VITAL_DELTA                               // browser.web_vital.delta
ATTR_BROWSER_WEB_VITAL_ID                                  // browser.web_vital.id
ATTR_BROWSER_WEB_VITAL_NAME                                // browser.web_vital.name
  BROWSER_WEB_VITAL_NAME_VALUE_CLS                           // "cls"
  BROWSER_WEB_VITAL_NAME_VALUE_FCP                           // "fcp"
  BROWSER_WEB_VITAL_NAME_VALUE_FID                           // "fid"
  BROWSER_WEB_VITAL_NAME_VALUE_INP                           // "inp"
  BROWSER_WEB_VITAL_NAME_VALUE_LCP                           // "lcp"
  BROWSER_WEB_VITAL_NAME_VALUE_TTFB                          // "ttfb"
ATTR_BROWSER_WEB_VITAL_NAVIGATION_TYPE                     // browser.web_vital.navigation_type
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_BACK_FORWARD       // "back-forward"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_BACK_FORWARD_CACHE // "back-forward-cache"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_NAVIGATE           // "navigate"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_PRERENDER          // "prerender"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_RELOAD             // "reload"
  BROWSER_WEB_VITAL_NAVIGATION_TYPE_VALUE_RESTORE            // "restore"
ATTR_BROWSER_WEB_VITAL_RATING                              // browser.web_vital.rating
  BROWSER_WEB_VITAL_RATING_VALUE_GOOD                        // "good"
  BROWSER_WEB_VITAL_RATING_VALUE_NEEDS_IMPROVEMENT           // "needs-improvement"
  BROWSER_WEB_VITAL_RATING_VALUE_POOR                        // "poor"
ATTR_BROWSER_WEB_VITAL_VALUE                               // browser.web_vital.value
ATTR_MESSAGING_KAFKA_CLUSTER_ID                            // messaging.kafka.cluster.id
</tr></table>

... (truncated)

Commits
  • 70253d9 chore: prepare next release (#7246)
  • 4c7796c chore(deps): update all patch versions (#7128)
  • f2a26a8 chore(deps): update dependency @​bufbuild/buf to v1.75.0 (#7215)
  • 0f27cf1 fix(deps): update dependency body-parser to v2.4.0 [security] (#7240)
  • d49d4d0 feat(semantic-conventions): update semantic conventions to v1.44.0 (#7239)
  • e3ea181 docs: note that CJS apps can need the ESM hook when a dependency is ESM (#7212)
  • d7d2d1b chore(deps): update actions/create-github-app-token action to v3.3.0 (#7214)
  • cd1e328 chore(deps): update dependency eslint-plugin-n to v18.5.0 (#7233)
  • 85ac9d3 chore(deps): update dependency knip to v6.43.0 (#7234)
  • 55f3df3 ci: update W3C harness for Python 3.14 (#7236)
  • Additional commits viewable in compare view

Updates jose from 6.2.13 to 6.2.14

Release notes

Sourced from jose's releases.

v6.2.14

Fixes

  • types: preserve contextual JWT payload inference (0dbf7a0), closes #911
Changelog

Sourced from jose's changelog.

6.2.14 (2026-10-29)

Fixes

  • types: preserve contextual JWT payload inference (0dbf7a0), closes #911
Commits
  • 5a6a5b6 chore(release): 6.2.14
  • b04c907 test: handle JWKS rotation and algorithm migration
  • 4e3292e chore: bump packages
  • 0dbf7a0 fix(types): preserve contextual JWT payload inference
  • 4080772 test: simplify runtime support checks
  • 2cddc59 chore: cleanup after release
  • See full diff in compare view

Updates nodemailer from 10.2.1 to 10.3.1

Release notes

Sourced from nodemailer's releases.

v10.3.1

10.3.1 (2026-10-29)

Bug Fixes

  • apply the otp option in MailComposer too (1d4087f)

v10.3.0

10.3.0 (2026-10-29)

Summary

This release adds support for the OTP-Token header from the IETF draft draft-goto-otp-token, which lets mail clients and browsers offer a one-time passcode for autofill on the site it belongs to. It also fixes how a Content-ID header is encoded.

Who should upgrade

  • Anyone sending one-time passcodes by email who wants them to be machine-readable.
  • Anyone already setting an OTP-Token header through headers: before this release it went out MIME encoded and could not be parsed.
  • Anyone embedding images with a cid that holds a non-ASCII character or a quote.

Highlights

  • New otp message option: otp: { code: '123456', origin: 'https://example.com' } adds OTP-Token: "123456"; origin="https://example.com". The origin is reduced to its canonical form, only https (or http on a loopback host) is accepted, and invalid values fail the send with the new EOTP error code. See Message configuration.
  • A custom OTP-Token header is no longer MIME word encoded. Line breaks and control characters are still removed.
  • OTP-Token is included in the DKIM signature by default.
  • A Content-ID header, from an attachment cid or set through headers, is now encoded as a message id rather than as text, so a cid with a non-ASCII character or a quote keeps matching the cid: URL in the HTML.
  • Groundmail added to the well-known services.

Features

  • add the otp option for the OTP-Token header (7789e15)

Bug Fixes

  • encode a Content-ID header as a message id (#1904) (47f2b25)
Changelog

Sourced from nodemailer's changelog.

10.3.1 (2026-10-29)

Bug Fixes

  • apply the otp option in MailComposer too (1d4087f)

10.3.0 (2026-10-29)

Features

  • add the otp option for the OTP-Token header (7789e15)

Bug Fixes

  • encode a Content-ID header as a message id (#1904) (47f2b25)
Commits
  • 26555d0 Merge pull request #1906 from nodemailer/release-please--branches--master--co...
  • 3e5bb55 chore(master): release 10.3.1
  • 1d4087f fix: apply the otp option in MailComposer too
  • 488ce9c chore(deps): update development dependencies
  • 41eda65 chore(deps): update development dependencies
  • 5de343d chore(master): release 10.3.0 (#1905)
  • 7789e15 feat: add the otp option for the OTP-Token header
  • 47f2b25 fix: encode a Content-ID header as a message id (#1904)
  • a6e7a70 chore(services): add Groundmail (#1903)
  • a0cea19 chore(deps): update development dependencies [skip ci]
  • Additional commits viewable in compare view

Updates @azure/identity from 4.14.0 to 4.14.1

Changelog

Sourced from @​azure/identity's changelog.

4.14.1 (2026-10-29)

Bugs Fixed

  • Restored the fix from 4.13.3 that forwards constructor options from DefaultAzureCredential to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS, including managedIdentityClientId and managedIdentityResourceId. #40547

Other Changes

Commits
  • 56472b9 [Identity] Set 4.14.1 release date to October 29, 2026
  • 8881515 [Identity] Backport 4.13.3 fixes and finalize 4.14.1 changelog
  • 89ef212 [Identity] Backport MSAL Node v7 for 4.14.1
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [eslint](https://github.com/eslint/eslint) | `10.13.0` | `10.14.0` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.6` | `1.14.7` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.43.0` | `1.44.0` |
| [jose](https://github.com/panva/jose) | `6.2.13` | `6.2.14` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.2.1` | `10.3.1` |
| [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) | `4.14.0` | `4.14.1` |


Updates `eslint` from 10.13.0 to 10.14.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.13.0...v10.14.0)

Updates `@grpc/grpc-js` from 1.14.6 to 1.14.7
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.6...@grpc/grpc-js@1.14.7)

Updates `@opentelemetry/semantic-conventions` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.43.0...semconv/v1.44.0)

Updates `jose` from 6.2.13 to 6.2.14
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.13...v6.2.14)

Updates `nodemailer` from 10.2.1 to 10.3.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.2.1...v10.3.1)

Updates `@azure/identity` from 4.14.0 to 4.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/@azure/identity_4.14.1/sdk/identity/identity/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.14.1/sdk/identity/identity)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@azure/identity"
  dependency-version: 4.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from semics-tech as a code owner November 2, 2026 18:10
@semics-tech
semics-tech merged commit d494c1e into main Nov 2, 2026
12 checks passed
@semics-tech
semics-tech deleted the dependabot/npm_and_yarn/minor-and-patch-4699eb2d82 branch November 2, 2026 18:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant