Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the npm group with 6 updates

Open
Number: #299
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 18, 2025 at 10:14 PM UTC
(14 days ago)
Updated: September 18, 2025 at 10:14 PM UTC
(14 days ago)
Labels:
dependencies javascript
Assignees:
poad
Description:

Bumps the npm group with 6 updates:

Package From To
@types/node 24.5.1 24.5.2
@vercel/ncc 0.38.3 0.38.4
vite 7.1.5 7.1.6
baseline-browser-mapping 2.8.5 2.8.6
electron-to-chromium 1.5.221 1.5.222
tinyspy 4.0.3 4.0.4

Updates @types/node from 24.5.1 to 24.5.2

Commits

Updates @vercel/ncc from 0.38.3 to 0.38.4

Release notes

Sourced from @​vercel/ncc's releases.

0.38.4

0.38.4 (2025-09-18)

Bug Fixes

Commits
  • e72d34d fix(cjs-build): enable evaluating import.meta in cjs build (#1236)
  • 186af2b chore(deps): Bump amannn/action-semantic-pull-request from 5.5.3 to 6.1.1 (#1...
  • 162c7d4 chore(deps): Bump actions/checkout from 4 to 5 (#1283)
  • 24734b5 chore(deps): Bump cipher-base from 1.0.4 to 1.0.6 (#1280)
  • 7bf44d5 chore(deps): Bump sha.js from 2.4.11 to 2.4.12 (#1281)
  • 50f1851 chore(deps): Bump tmp from 0.2.3 to 0.2.4 (#1278)
  • d797f1b chore(deps-dev): Bump koa from 2.16.1 to 3.0.1 (#1272)
  • 9bdbd47 chore(deps): Bump pbkdf2 from 3.1.2 to 3.1.3 (#1266)
  • cbfd660 chore(deps-dev): bump test deps for aws-sdk (#1263)
  • d17397f chore(deps-dev): Bump axios from 1.7.7 to 1.8.2 (#1262)
  • Additional commits viewable in compare view

Updates vite from 7.1.5 to 7.1.6

Release notes

Sourced from vite's releases.

v7.1.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.6 (2025-09-18)

Bug Fixes

  • deps: update all non-major dependencies (#20773) (88af2ae)
  • esbuild: inject esbuild helper functions with minified $ variables correctly (#20761) (7e8e004)
  • fallback terser to main thread when nameCache is provided (#20750) (a679a64)
  • types: strict env typings fail when skipLibCheck is false (#20755) (cc54e29)

Miscellaneous Chores

Commits
  • 54377f7 release: v7.1.6
  • 88af2ae fix(deps): update all non-major dependencies (#20773)
  • d785e72 chore(deps): update rolldown-related dependencies (#20772)
  • cc54e29 fix(types): strict env typings fail when skipLibCheck is false (#20755)
  • 7e8e004 fix(esbuild): inject esbuild helper functions with minified $ variables cor...
  • a679a64 fix: fallback terser to main thread when nameCache is provided (#20750)
  • a67bb5f chore(deps): update rolldown-related dependencies (#20675)
  • See full diff in compare view

Updates baseline-browser-mapping from 2.8.5 to 2.8.6

Commits

Updates electron-to-chromium from 1.5.221 to 1.5.222

Commits

Updates tinyspy from 4.0.3 to 4.0.4

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for tinyspy since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+47
Deletions:
-47
Package Dependencies
Package:
@types/node
Ecosystem:
npm
Version Change:
24.5.1 → 24.5.2
Update Type:
Patch
Package:
vite
Ecosystem:
npm
Version Change:
7.1.5 → 7.1.6
Update Type:
Patch
Package:
electron-to-chromium
Ecosystem:
npm
Version Change:
1.5.221 → 1.5.222
Update Type:
Patch
Package:
@vercel/ncc
Ecosystem:
npm
Version Change:
0.38.3 → 0.38.4
Update Type:
Patch
Package:
tinyspy
Ecosystem:
npm
Version Change:
4.0.3 → 4.0.4
Update Type:
Patch
Package:
baseline-browser-mapping
Ecosystem:
npm
Version Change:
2.8.5 → 2.8.6
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 8001053
UUID: 2841812485
Node ID: PR_kwDOIx1SF86pYp4F
Host: GitHub
Repository: poad/typescript-action-template
Merge State: Unknown