An open index of dependabot pull requests across open source projects.

Bump the npm group in /tests/infra with 2 updates

Closed
Number: #2589
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 3
Created: August 20, 2025 at 02:19 AM UTC
(24 days ago)
Updated: August 20, 2025 at 04:21 AM UTC
(24 days ago)
Closed: August 20, 2025 at 04:21 AM UTC
(24 days ago)
Time to Close: about 2 hours
Labels:
dependencies javascript
Assignees:
poad
Description:

Bumps the npm group in /tests/infra with 2 updates: pnpm and vite.

Updates pnpm from 10.14.0 to 10.15.0

Release notes

Sourced from pnpm's releases.

pnpm 10.15

Minor Changes

  • Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.
  • Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780.
  • pnpm config get now prints an INI string for an object value #9797.
  • pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
  • pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

  • Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835.
  • When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #9775.
  • When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862.
  • The standalone exe version of pnpm works with glibc 2.26 again #9734.
  • Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #9823.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.15.0

Minor Changes

  • Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.
  • Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780.
  • pnpm config get now prints an INI string for an object value #9797.
  • pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
  • pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

  • Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835.
  • When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #9775.
  • When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862.
  • The standalone exe version of pnpm works with glibc 2.26 again #9734.
  • Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #9823.
Commits

Updates vite from 7.1.2 to 7.1.3

Release notes

Sourced from vite's releases.

v7.1.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.3 (2025-08-19)

Features

  • cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)
  • generate code frame for parse errors thrown by terser (#20642) (a9ba017)
  • support long lines in generateCodeFrame (#20640) (1559577)

Bug Fixes

  • deps: update all non-major dependencies (#20634) (4851cab)
  • optimizer: incorrect incompatible error (#20439) (446fe83)
  • support multiline new URL(..., import.meta.url) expressions (#20644) (9ccf142)

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+14
Deletions:
-14
Package Dependencies
Package:
vite
Ecosystem:
npm
Version Change:
7.1.2 → 7.1.3
Update Type:
Patch
Path:
/tests/infra
Package:
pnpm
Ecosystem:
npm
Version Change:
10.14.0 → 10.15.0
Update Type:
Minor
Path:
/tests/infra
Technical Details
ID: 5393952
UUID: 2758206726
Node ID: PR_kwDOGTdXYs6kZuUG
Host: GitHub
Repository: poad/csv2dynamodb
Mergeable: Yes
Merge State: Unstable
Rebaseable: Yes