An open index of dependabot pull requests across open source projects.

chore(deps-dev): bump wait-on from 7.2.0 to 9.0.4

Closed
Number: #539
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 5
Created: March 26, 2026 at 03:43 AM UTC
(3 months ago)
Updated: May 02, 2026 at 04:26 AM UTC
(about 2 months ago)
Closed: May 02, 2026 at 04:26 AM UTC
(about 2 months ago)
Time to Close: about 1 month
Labels:
type: dependencies stale
Description:

Bumps wait-on from 7.2.0 to 9.0.4.

Release notes

Sourced from wait-on's releases.

v9.0.4

Updated patch dependencies including axios and lodash

v9.0.3

Update to jsdoc. Thanks @​westonruter

Minor dependencies updated: eslint, mocha, axios

v9.0.2

Replaced unmaintained expect-legacy package with chai. Thanks @​bdkopen

v9.0.1

Update minor deps:

  • axios
  • eslint

v9.0.0

Updating major version to align with removal of unspported versions of Node.js

wait-on will continue to support the active and maintained releases listed at https://nodejs.org/en/about/previous-releases which currently is 20, 22, 24.

There are no other breaking changes other than changing the versions of Node.js that are supported.

v8.0.5

Update minor deps including axios@1.12.1 and joi@18

v8.0.4

Update dependencies including axios@1.11.0 which also updated form-data@4.0.4

v8.0.3

  • update minor deps
    • axios@1.8.2 fixes CVE-2024-39338
  • update eslint to v9

v8.0.2

Dependency updates:

  • axios@1.7.9
  • eslint-plugin-import@2.31.0
  • cross-spawn - npm audit fix

v8.0.0 - breaking change for http unix socket use

Updated for security vulnerabilities with axios@1.7.4 and braces.

Breaking change in using latest axios with a unix socket URL

As part of the axios update, the syntax for using a socket with an http URL in axios has changed so you must specify the protocol and server

For example:

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Package:
wait-on
Ecosystem:
npm
Version Change:
7.2.0 → 9.0.4
Update Type:
Major
Technical Details
ID: 15602956
UUID: 4140262063
Node ID: PR_kwDOG5lbN87NkOTz
Host: GitHub
Repository: OpenFunction/functions-framework-nodejs