Bump the npm group with 5 updates

Merged

Number: #2479
Type: Pull Request
State: Merged

Author:

dependabot[bot]
Association: Contributor
Comments: 0

Created: September 19, 2025 at 09:13 AM UTC
(10 months ago)

Updated: September 19, 2025 at 09:13 AM UTC
(10 months ago)

Merged: September 19, 2025 at 09:13 AM UTC
(10 months ago)
by github-actions[bot]

Time to Close: less than a minute

Labels:
dependencies javascript

Assignees:
poad

Description:

Bumps the npm group with 5 updates:

Package	From	To
@vercel/ncc	`0.38.3`	`0.38.4`
baseline-browser-mapping	`2.8.5`	`2.8.6`
electron-to-chromium	`1.5.221`	`1.5.222`
rollup	`4.50.2`	`4.51.0`
tinyspy	`4.0.3`	`4.0.4`

Updates @vercel/ncc from 0.38.3 to 0.38.4

Release notes

Sourced from @vercel/ncc's releases.

0.38.4

0.38.4 (2025-09-18)

Bug Fixes

cjs-build: enable evaluating import.meta in cjs build (#1236) (e72d34d), closes vercel/ncc#897 #1019

Commits

e72d34d fix(cjs-build): enable evaluating import.meta in cjs build (#1236)
186af2b chore(deps): Bump amannn/action-semantic-pull-request from 5.5.3 to 6.1.1 (#1...
162c7d4 chore(deps): Bump actions/checkout from 4 to 5 (#1283)
24734b5 chore(deps): Bump cipher-base from 1.0.4 to 1.0.6 (#1280)
7bf44d5 chore(deps): Bump sha.js from 2.4.11 to 2.4.12 (#1281)
50f1851 chore(deps): Bump tmp from 0.2.3 to 0.2.4 (#1278)
d797f1b chore(deps-dev): Bump koa from 2.16.1 to 3.0.1 (#1272)
9bdbd47 chore(deps): Bump pbkdf2 from 3.1.2 to 3.1.3 (#1266)
cbfd660 chore(deps-dev): bump test deps for aws-sdk (#1263)
d17397f chore(deps-dev): Bump axios from 1.7.7 to 1.8.2 (#1262)
Additional commits viewable in compare view

Updates baseline-browser-mapping from 2.8.5 to 2.8.6

Commits

ece0447 Patch to 2.8.6 because browser or feature data changed
0f29244 Browser or feature data changed
2b1770f Updating static site
See full diff in compare view

Updates electron-to-chromium from 1.5.221 to 1.5.222

Commits

c48d6aa 1.5.222
3ed4b5e generate new version
See full diff in compare view

Updates rollup from 4.50.2 to 4.51.0

Release notes

Sourced from rollup's releases.

v4.51.0

4.51.0

2025-09-19

Features

Support ROLLUP_FILE_URL_OBJ placeholder to inject file URLs into the generated code (#6108)

Bug Fixes

Improve OpenHarmony build to work in more situations (#6115)

Pull Requests

#6108: feat: support ROLLUP_FILE_URL_OBJ for URL object instead of string (@guybedford, @lukastaegert)

#6112: Disable Cargo cache for Android (@lukastaegert)

#6113: fix(deps): update rust crate swc_compiler_base to v35 (@renovate[bot])

#6114: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6115: Disable local_dynamic_tls for OpenHarmony (@hqzing)

#6116: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6117: chore(deps): lock file maintenance (@renovate[bot])

Changelog

Sourced from rollup's changelog.

4.51.0

2025-09-19

Features

Support ROLLUP_FILE_URL_OBJ placeholder to inject file URLs into the generated code (#6108)

Bug Fixes

Improve OpenHarmony build to work in more situations (#6115)

Pull Requests

#6108: feat: support ROLLUP_FILE_URL_OBJ for URL object instead of string (@guybedford, @lukastaegert)

#6112: Disable Cargo cache for Android (@lukastaegert)

#6113: fix(deps): update rust crate swc_compiler_base to v35 (@renovate[bot])

#6114: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6115: Disable local_dynamic_tls for OpenHarmony (@hqzing)

#6116: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6117: chore(deps): lock file maintenance (@renovate[bot])

Commits

1748736 4.51.0
e518bde chore(deps): lock file maintenance (#6117)
9265955 Disable local_dynamic_tls for OpenHarmony (#6115)
0b8e19d fix(deps): update rust crate swc_compiler_base to v35 (#6113)
b14f803 chore(deps): lock file maintenance minor/patch updates (#6116)
259c7ad chore(deps): lock file maintenance minor/patch updates (#6114)
7471074 feat: support ROLLUP_FILE_URL_OBJ for URL object instead of string (#6108)
1088fb5 Disable Cargo cache for Android (#6112)
See full diff in compare view

Updates tinyspy from 4.0.3 to 4.0.4

Commits

1068d5b chore: release v4.0.4
7610a52 fix: add permissions
82deb48 build: fix environment name
3b81bb6 chore: release v4.0.4
eccec64 build: add publish workflow
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for tinyspy since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Pull Request Statistics

Commits:
1

Files Changed:
2

Additions:
+106

Deletions:
-106

Package Dependencies

Package:
rollup

Ecosystem:
npm

Version Change:
4.50.2 → 4.51.0

Update Type:
Minor

Package:
electron-to-chromium

Ecosystem:
npm

Version Change:
1.5.221 → 1.5.222

Update Type:
Patch

Package:
@vercel/ncc

Ecosystem:
npm

Version Change:
0.38.3 → 0.38.4

Update Type:
Patch

Package:
tinyspy

Ecosystem:
npm

Version Change:
4.0.3 → 4.0.4

Update Type:
Patch

Package:
baseline-browser-mapping

Ecosystem:
npm

Version Change:
2.8.5 → 2.8.6

Update Type:
Patch

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`8023002`
UUID:	`2843139537`
Node ID:	`PR_kwDOE3aIh86pdt3R`
Host:	GitHub
Repository:	poad/github-pull-requester
Merge State:	Unknown

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Dependabot

Bump the npm group with 5 updates

0.38.4

0.38.4 (2025-09-18)

Bug Fixes

v4.51.0

4.51.0

Features

Bug Fixes

Pull Requests

4.51.0

Features

Bug Fixes

Pull Requests

Pull Request Statistics

Package Dependencies

Actions

Technical Details