Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the all-node-dependencies group with 7 updates

Closed
Number: #80
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: May 26, 2025 at 02:39 AM UTC
(6 months ago)
Updated: June 02, 2025 at 02:19 AM UTC
(6 months ago)
Closed: June 02, 2025 at 02:19 AM UTC
(6 months ago)
Time to Close: 7 days
Labels:
dependencies javascript
Description:

Bumps the all-node-dependencies group with 7 updates:

Package From To
@grafana/data 12.0.0 12.0.1
@grafana/runtime 12.0.0 12.0.1
@grafana/ui 12.0.0 12.0.1
@stylistic/eslint-plugin-ts 4.2.0 4.4.0
@swc/core 1.11.24 1.11.29
react-router-dom 7.6.0 7.6.1
rollup 4.41.0 4.41.1

Updates @grafana/data from 12.0.0 to 12.0.1

Release notes

Sourced from @​grafana/data's releases.

12.0.1

Download page What's new highlights

Features and enhancements

Bug fixes

Changelog

Sourced from @​grafana/data's changelog.

12.0.1 (2025-05-22)

Features and enhancements

Bug fixes

11.6.2 (2025-05-22)

Features and enhancements

  • Chore: Bump Go version to 1.24.3 #105103, @​macabu
  • Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.4-git to v2.5.0 #105443, @​macabu
  • Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12 #105369, @​macabu
  • Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 #105251, @​macabu

Bug fixes

11.5.5 (2025-05-22)

... (truncated)

Commits

Updates @grafana/runtime from 12.0.0 to 12.0.1

Release notes

Sourced from @​grafana/runtime's releases.

12.0.1

Download page What's new highlights

Features and enhancements

Bug fixes

Changelog

Sourced from @​grafana/runtime's changelog.

12.0.1 (2025-05-22)

Features and enhancements

Bug fixes

11.6.2 (2025-05-22)

Features and enhancements

  • Chore: Bump Go version to 1.24.3 #105103, @​macabu
  • Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.4-git to v2.5.0 #105443, @​macabu
  • Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12 #105369, @​macabu
  • Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 #105251, @​macabu

Bug fixes

11.5.5 (2025-05-22)

... (truncated)

Commits

Updates @grafana/ui from 12.0.0 to 12.0.1

Release notes

Sourced from @​grafana/ui's releases.

12.0.1

Download page What's new highlights

Features and enhancements

Bug fixes

Changelog

Sourced from @​grafana/ui's changelog.

12.0.1 (2025-05-22)

Features and enhancements

Bug fixes

11.6.2 (2025-05-22)

Features and enhancements

  • Chore: Bump Go version to 1.24.3 #105103, @​macabu
  • Dependencies: Bump github.com/blevesearch/bleve/v2 from v2.4.4-git to v2.5.0 #105443, @​macabu
  • Dependencies: Bump github.com/openfga/openfga from v1.8.6 to v1.8.12 #105369, @​macabu
  • Dependencies: Unpin and bump github.com/getkin/kin-openapi from v0.126.0 to v0.132.0 #105251, @​macabu

Bug fixes

11.5.5 (2025-05-22)

... (truncated)

Commits
  • 076b525 [release-12.0.1] TableNG: Fix filtering bug (#105693)
  • 5906e2f [release-12.0.1] TableNG: Filter and sort sub tables (#105043)
  • 6f806cb [release-12.0.1] TableNG: Align sparkline value correctly (#105013)
  • 9357bda [release-12.0.1] TableNG: Always use correct original row index (#104962)
  • 6db7f10 [release-12.0.1] TableNG: Fix sparkline sorting + column key config (#104955)
  • 2e4020a [release 12.0.1] TableNG: Use correct row index for background colour calcula...
  • 5f3107c [Release 12.0.1] TableNG: Fix interpolation for actions (#104577) (#104799)
  • 835516f [release-12.0.1] DataLinks: Long link title wrapping (#104383)
  • 44cfb7c Chore: Update version in release-12.0.1 branch (#104061)
  • See full diff in compare view

Updates @stylistic/eslint-plugin-ts from 4.2.0 to 4.4.0

Release notes

Sourced from @​stylistic/eslint-plugin-ts's releases.

v4.4.0

4.4.0 (2025-05-24)

Features

  • deprecate sub packages and emit warnings (#793) (48503aa)

v4.3.0

4.3.0 (2025-05-24)

Features

  • configs: add new severity option for all rules (#733) (#736) (c553a9c)
  • jsx-sort-props: support custom reservedFirst and reservedLast (#744) (fb17e96)

Bug Fixes

  • eslint-plugin: only export interfaces in index (#763) (93a4eb1)
  • handle new AST change on TSImportType (8f31461)
  • indent: handle ChainExpression and AwaitExpression when offsetTernaryExpressionsOffsetCallExpressions (#751) (a1af663)
  • indent: wrong PropertyDefinition value offset when ts type have multiple line (#774) (140e18f)
  • no-extra-parens: do not break specific ReturnStatement (#738) (a375a92)

Documentation

Chores

... (truncated)

Changelog

Sourced from @​stylistic/eslint-plugin-ts's changelog.

4.4.0 (2025-05-24)

Features

  • deprecate sub packages and emit warnings (#793) (48503aa)

4.3.0 (2025-05-24)

Features

  • configs: add new severity option for all rules (#733) (#736) (c553a9c)
  • jsx-sort-props: support custom reservedFirst and reservedLast (#744) (fb17e96)

Bug Fixes

  • eslint-plugin: only export interfaces in index (#763) (93a4eb1)
  • handle new AST change on TSImportType (8f31461)
  • indent: handle ChainExpression and AwaitExpression when offsetTernaryExpressionsOffsetCallExpressions (#751) (a1af663)
  • indent: wrong PropertyDefinition value offset when ts type have multiple line (#774) (140e18f)
  • no-extra-parens: do not break specific ReturnStatement (#738) (a375a92)

Documentation

Chores

... (truncated)

Commits

Updates @swc/core from 1.11.24 to 1.11.29

Changelog

Sourced from @​swc/core's changelog.

[1.11.29] - 2025-05-21

Bug Fixes

  • (@​swc/types) Add transform.nativeClassProperties (#10418) (f3af44c)

  • (@​swc/types) Add resolveFully to BaseModuleConfig (#10426) (164cbaa)

  • (ci) Remove wasmer override (425eeb9)

  • (es/compat) Properly handle rest assignment in for-in/of head (#10489) (b9c0446)

  • (es/jest) Hoisting vars with names starting with mock (#10410) (a29eb29)

  • (es/jest) Revert #10410 (#10452) (bc756f8)

  • (es/minifier) Properly handle object shorthand syntax during compression (#10467) (bae4940)

  • (es/module) Handle __proto__ export name (#10420) (1b94c7a)

  • (es/optimization) Support decimal numbers in jsonify (#10424) (affdec2)

  • (es/react-compiler) Mark function components declared as a var interesting (#10437) (5eac076)

  • (es/renamer) Fix (broken) identifier preserving API (#10474) (06c64cf)

  • (ts/fast-dts) Emit readonly for Object getter prop (#10492) (6c03e20)

  • (ts/fast-dts) Align object getter/setter emit behavior with TypeScript (#10502) (78c754e)

Features

  • (common) Allow using build_sourcemap with multiple SourceMap (#10438) (2a07c8a)

... (truncated)

Commits
  • 8facaa9 chore: Publish 1.11.29 with swc_core v26.0.1
  • cf3096f chore: Update changelog
  • 24a69f2 chore: Publish 1.11.29-nightly-20250521.1 with swc_core v26.0.1
  • 9e372a5 chore: Publish crates with swc_core v26.0.1
  • de51be1 refactor(ecma/transform): cleanup rename analyzer (#10500)
  • 78c754e fix(ts/fast-dts): Align object getter/setter emit behavior with TypeScript (#...
  • f01d859 chore(ci): Fix ring build on aarch64 linux gnu (#10497)
  • 0f5d9c1 refactor(es/renamer): Inline get_unresolved (#10493)
  • 6c03e20 fix(ts/fast-dts): Emit readonly for Object getter prop (#10492)
  • d2468f1 chore: Drop unused crates (#10494)
  • Additional commits viewable in compare view

Updates react-router-dom from 7.6.0 to 7.6.1

Release notes

Sourced from react-router-dom's releases.

react-router-dom-v5-compat@6.4.0-pre.15

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.15
    • react-router-dom@6.4.0-pre.15

react-router-dom-v5-compat@6.4.0-pre.11

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.11
    • react-router-dom@6.4.0-pre.11

react-router-dom-v5-compat@6.4.0-pre.10

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.10
    • react-router-dom@6.4.0-pre.10

react-router-dom-v5-compat@6.4.0-pre.9

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.9
    • react-router-dom@6.4.0-pre.9

react-router-dom-v5-compat@6.4.0-pre.8

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.8
    • react-router-dom@6.4.0-pre.8
Changelog

Sourced from react-router-dom's changelog.

7.6.1

Patch Changes

  • Updated dependencies:
    • react-router@7.6.1
Commits

Updates rollup from 4.41.0 to 4.41.1

Release notes

Sourced from rollup's releases.

v4.41.1

4.41.1

2025-05-24

Bug Fixes

  • If a plugin calls this.resolve with skipSelf: true, subsequent calls when handling this by the same plugin with same parameters will return null to avoid infinite recursions (#5945)

Pull Requests

Changelog

Sourced from rollup's changelog.

4.41.1

2025-05-24

Bug Fixes

  • If a plugin calls this.resolve with skipSelf: true, subsequent calls when handling this by the same plugin with same parameters will return null to avoid infinite recursions (#5945)

Pull Requests

Commits
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+228
Deletions:
-228
Package Dependencies
Package:
 react-router-dom
Ecosystem:
npm
Version Change:
7.6.0 → 7.6.1
Update Type:
Patch
Package:
rollup
Ecosystem:
npm
Version Change:
4.41.0 → 4.41.1
Update Type:
Patch
Package:
@swc/core
Ecosystem:
npm
Version Change:
1.11.24 → 1.11.29
Update Type:
Patch
Package:
@stylistic/eslint-plugin-ts
Ecosystem:
npm
Version Change:
4.2.0 → 4.4.0
Update Type:
Minor
Package:
@grafana/data
Ecosystem:
npm
Version Change:
12.0.0 → 12.0.1
Update Type:
Patch
Package:
@grafana/runtime
Ecosystem:
npm
Version Change:
12.0.0 → 12.0.1
Update Type:
Patch
Package:
@grafana/ui
Ecosystem:
npm
Version Change:
12.0.0 → 12.0.1
Update Type:
Patch
Security Advisories
Grafana's datasource proxy API allows authorization checks to be bypassed
GHSA-9j65-rv5x-4vrf CVE-2025-3454 MODERATE
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauth...
Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin
GHSA-q53q-gxq9-mgrj CVE-2025-4123 HIGH
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a fronten...
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 1124245
UUID: 2542858745
Node ID: PR_kwDOIZBN9M6XkPH5
Host: GitHub
Repository: grafana/grafana-async-query-data-js
Mergeable: Yes
Merge State: Clean