An open index of dependabot pull requests across open source projects.

Bump the packages group with 4 updates

Closed
Number: #306
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: December 03, 2025 at 10:34 PM UTC
(3 months ago)
Updated: December 03, 2025 at 10:34 PM UTC
(3 months ago)
Closed: December 03, 2025 at 10:34 PM UTC
(3 months ago)
Time to Close: less than a minute
Labels:
dependencies javascript
Assignees:
poad
Description:

Bumps the packages group with 4 updates: baseline-browser-mapping, browserslist, caniuse-lite and update-browserslist-db.

Updates baseline-browser-mapping from 2.8.32 to 2.9.0

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.0 - Reduce frequency of data staleness warnings

This version introduces a number of changes to data staleness warnings in response to #105 , #107 and #109

  • Data staleness warnings are now only shown if the getCompatibleVersions() or getAllVersions() functions are called - previously they were shown whenever the module was loaded, which meant many browserslist consumers were seeing the warning despite not targeting Baseline, especially those who were consuming browserslist in a pre-compiled format via next.js.
  • Adds new conditions for these warnings to be displayed which should only warn users for whom data freshness is critical:
    • The feature cut off data must be within the last two months, i.e. widelyAvailableOnDate: today + >2 years and 4 months or newly available in a browserslist query.
    • The module data must be more than 2 months old.
  • Introduces suppression options for these warning via the options objects and environment variables:
    • Adds a new suppressWarnings boolean to the getCompatibleVersions() and getAllVersions()
    • Respects the existing BROWSERSLIST_IGNORE_OLD_DATA environment variable.
    • Respects a new BASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA environment variable.
  • Adds explanatory text to the README for how to avoid such warnings when reproducible builds are a requirement.
  • Change warning text to be package manager agnostic and mention the possibility of pre-compiled data.
Commits

Updates browserslist from 4.28.0 to 4.28.1

Release notes

Sourced from browserslist's releases.

4.28.1

  • Removed Baseline warning since we have it own warning.
Changelog

Sourced from browserslist's changelog.

4.28.1

  • Removed Baseline warning since we have it own warning.

4.48.0

4.27.0

  • Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

4.26.2

  • Fixed baseline-browser-mapping version requirement.

4.26.1

  • Updated Firefox ESR.

4.26.0

4.25.4

4.25.3

4.25.2

  • Fixed Node.js --permission support (by @​broofa).

4.25.1

  • Updated Firefox ESR.

4.25.0

  • Added cover 95% in browserslist-config-mycompany stats query support.

4.24.5

  • Fixed support ESM shared config.
  • Fixed docs (by Alexander Pushkov & マルコメ).

4.24.4

4.24.3

4.24.2

  • Clarify outdated caniuse-lite warning text.

... (truncated)

Commits

Updates caniuse-lite from 1.0.30001757 to 1.0.30001759

Commits

Updates update-browserslist-db from 1.1.4 to 1.2.1

Release notes

Sourced from update-browserslist-db's releases.

1.2.1

  • Fix ERR_PNPM_NO_PACKAGE_IN_DEPENDENCIES error on pnpm with old Browserslist.

1.2.0

  • Add Baseline data updating too.
Changelog

Sourced from update-browserslist-db's changelog.

1.2.1

  • Fix ERR_PNPM_NO_PACKAGE_IN_DEPENDENCIES error on pnpm with old Browserslist.

1.2.0

  • Add Baseline data updating too.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Ecosystem:
npm
Version Change:
4.28.0 → 4.28.1
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.0.30001757 → 1.0.30001759
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.1.4 → 1.2.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
2.8.32 → 2.9.0
Update Type:
Minor
Technical Details
ID: 11728315
UUID: 3692155700
Node ID: PR_kwDOMzbQP86274nM
Host: GitHub
Repository: poad/github-rest-api-executor