An open index of dependabot pull requests across open source projects.

deps: bump the all-dependencies group with 6 updates

Merged
Number: #180
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: May 12, 2025 at 03:29 AM UTC
(7 months ago)
Updated: May 12, 2025 at 03:29 AM UTC
(7 months ago)
Merged: May 12, 2025 at 03:29 AM UTC
(7 months ago)
by github-actions[bot]
Time to Close: less than a minute
Labels:
dependencies
Description:

Bumps the all-dependencies group with 6 updates:

Package From To
@whatwg-node/fetch 0.10.6 0.10.7
@whatwg-node/node-fetch 0.7.18 0.7.19
@whatwg-node/promise-helpers 1.3.1 1.3.2
@whatwg-node/server 0.10.5 0.10.6
eventsource 3.0.6 3.0.7
http-cache-semantics 4.1.1 4.2.0

Updates @whatwg-node/fetch from 0.10.6 to 0.10.7

Changelog

Sourced from @​whatwg-node/fetch's changelog.

0.10.7

Patch Changes

  • #2383 9527e8f Thanks @​ardatan! - Some implementations like compression npm package do not implement response.write(data, callback) signature, but whatwg-node/server waits for it to finish the response stream. Then it causes the response stream hangs when the compression package takes the stream over when the response data is larger than its threshold.

    It is actually a bug in compression package; expressjs/compression#46 But since it is a common mistake, we prefer to workaround this on our end.

    Now after calling response.write, it no longer uses callback but first it checks the result;

    if it is true, it means stream is drained and we can call response.end immediately. else if it is false, it means the stream is not drained yet, so we can wait for the drain event to call response.end.

  • Updated dependencies [9527e8f]:

    • @​whatwg-node/node-fetch@​0.7.19
Commits

Updates @whatwg-node/node-fetch from 0.7.18 to 0.7.19

Changelog

Sourced from @​whatwg-node/node-fetch's changelog.

0.7.19

Patch Changes

  • #2383 9527e8f Thanks @​ardatan! - Some implementations like compression npm package do not implement response.write(data, callback) signature, but whatwg-node/server waits for it to finish the response stream. Then it causes the response stream hangs when the compression package takes the stream over when the response data is larger than its threshold.

    It is actually a bug in compression package; expressjs/compression#46 But since it is a common mistake, we prefer to workaround this on our end.

    Now after calling response.write, it no longer uses callback but first it checks the result;

    if it is true, it means stream is drained and we can call response.end immediately. else if it is false, it means the stream is not drained yet, so we can wait for the drain event to call response.end.

  • Updated dependencies [d86b4f3]:

    • @​whatwg-node/promise-helpers@​1.3.2
Commits

Updates @whatwg-node/promise-helpers from 1.3.1 to 1.3.2

Changelog

Sourced from @​whatwg-node/promise-helpers's changelog.

1.3.2

Patch Changes

Commits

Updates @whatwg-node/server from 0.10.5 to 0.10.6

Changelog

Sourced from @​whatwg-node/server's changelog.

0.10.6

Patch Changes

  • #2383 9527e8f Thanks @​ardatan! - Some implementations like compression npm package do not implement response.write(data, callback) signature, but whatwg-node/server waits for it to finish the response stream. Then it causes the response stream hangs when the compression package takes the stream over when the response data is larger than its threshold.

    It is actually a bug in compression package; expressjs/compression#46 But since it is a common mistake, we prefer to workaround this on our end.

    Now after calling response.write, it no longer uses callback but first it checks the result;

    if it is true, it means stream is drained and we can call response.end immediately. else if it is false, it means the stream is not drained yet, so we can wait for the drain event to call response.end.

  • Updated dependencies [d86b4f3, 9527e8f]:

    • @​whatwg-node/promise-helpers@​1.3.2
    • @​whatwg-node/fetch@​0.10.7
Commits
  • 65780bc Upcoming Release Changes (#2406)
  • 9527e8f fix(server): do not wait for response.write for response.end (#2383)
  • 0ee2bbf fix(deps): update all non-major dependencies (#2401)
  • 9bdd082 fix(deps): update dependency @​types/node to v22.15.15 (#2398)
  • 5e8daec fix(deps): update all non-major dependencies (#2391)
  • a48382f fix(deps): update all non-major dependencies (#2385)
  • 85b11ad chore(deps): update dependency koa to v3 (#2353)
  • e11b324 fix(deps): update dependency @​types/node to v22.15.3 (#2355)
  • 90709cf fix(deps): update all non-major dependencies (#2351)
  • 73e515c fix(deps): update all non-major dependencies (#2350)
  • Additional commits viewable in compare view

Updates eventsource from 3.0.6 to 3.0.7

Release notes

Sourced from eventsource's releases.

v3.0.7

3.0.7 (2025-05-09)

Bug Fixes

  • mark fetch init properties required in typings (1282872)

This release is also available on:

Changelog

Sourced from eventsource's changelog.

3.0.7 (2025-05-09)

Bug Fixes

  • mark fetch init properties required in typings (1282872)
Commits
  • 270e7f2 chore(release): 3.0.7 [skip ci]
  • 1282872 fix: mark fetch init properties required in typings
  • See full diff in compare view

Updates http-cache-semantics from 4.1.1 to 4.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
1
Additions:
+33
Deletions:
-33
Package Dependencies
Package:
eventsource
Ecosystem:
npm
Version Change:
3.0.6 → 3.0.7
Update Type:
Patch
Ecosystem:
npm
Version Change:
0.10.5 → 0.10.6
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.1.1 → 4.2.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.7.18 → 0.7.19
Update Type:
Patch
Ecosystem:
npm
Version Change:
0.10.6 → 0.10.7
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.3.1 → 1.3.2
Update Type:
Patch
Technical Details
ID: 951943
UUID: 2512576541
Node ID: PR_kwDONiXIMs6VwuAd
Host: GitHub
Repository: mattfsourcecode/node-graphql-code-test
Merge State: Unknown