An open index of dependabot pull requests across open source projects.

build(deps): bump the npm_and_yarn group with 3 updates

Merged
Number: #990
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: February 19, 2025 at 11:27 AM UTC
(7 months ago)
Updated: May 16, 2025 at 06:34 AM UTC
(4 months ago)
Merged: May 16, 2025 at 06:34 AM UTC
(4 months ago)
by Belco90
Time to Close: 3 months
Labels:
dependencies javascript
Description:

Bumps the npm_and_yarn group with 3 updates: @octokit/plugin-paginate-rest, @octokit/request-error and @octokit/request.

Updates @octokit/plugin-paginate-rest from 11.3.5 to 11.4.2

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v11.4.2

11.4.2 (2025-02-13)

Bug Fixes

v11.4.1

11.4.1 (2025-02-13)

Bug Fixes

v11.4.0

11.4.0 (2025-01-08)

Features

  • new action runner groups endpoints, new code scanning alerts autofix endpoints, new sub-issues endpoints, new private registries enpoints, new code security endpoints, various description updates (#646) (a73883f)

v11.3.6

11.3.6 (2024-11-26)

Bug Fixes

  • types: bump @octokit/types to improve Deno compatibility (#642) (acb6a6e)
Commits
  • 8b8c500 fix(types): add back the pagination keys (#653)
  • 41876f4 chore(deps): update dependency prettier to v3.5.1 (#658)
  • 7d1fade fix: mitigate ReDos issues & linting issues (#659)
  • bb6c4f9 Merge commit from fork
  • d9c1e8f chore(deps): update dependency esbuild to ^0.25.0 (#656)
  • 7ed5627 build(deps-dev): bump vitest and @​vitest/coverage-v8 (#655)
  • 4a41307 build: remove @​types/fetch-mock (#654)
  • 31f8fe9 build(deps): bump vite from 5.4.6 to 6.0.11 (#651)
  • bc38852 chore(deps): update vitest monorepo to v3 (major) (#650)
  • a73883f feat: new action runner groups endpoints, new code scanning alerts autofix en...
  • Additional commits viewable in compare view

Updates @octokit/request-error from 6.1.5 to 6.1.7

Release notes

Sourced from @​octokit/request-error's releases.

v6.1.7

6.1.7 (2025-02-13)

Bug Fixes

  • ReDos regex vulnerability, reported by @​DayShift (d558320874a4bc8d356babf1079e6f0056a59b9e)

v6.1.6

6.1.6 (2024-12-29)

Bug Fixes

  • deps: bump @octokit/types to fix Deno compat (#483) (e01d470)
Commits

Updates @octokit/request from 9.1.3 to 9.2.2

Release notes

Sourced from @​octokit/request's releases.

v9.2.2

9.2.2 (2025-02-14)

Bug Fixes

  • deps: update dependency @​octokit/request-error to v6.1.7 [security] (#740) (4b2f485)

v9.2.1

9.2.1 (2025-02-13)

Bug Fixes

  • mitigate ReDos vulnerabilities & lint (#738) (6bb29ba)

v9.2.0

9.2.0 (2025-01-16)

Features

  • correctly parse response bodies as JSON where the Content-Type is application/scim+json (#731) (00bf316)

v9.1.4

9.1.4 (2024-12-29)

Bug Fixes

  • deps: bump @octokit/types to fix deno compat (#730) (324ffef)
Commits
  • 4b2f485 fix(deps): update dependency @​octokit/request-error to v6.1.7 [security] (#740)
  • 0320a42 chore(deps): update dependency prettier to v3.5.1 (#737)
  • 6bb29ba fix: mitigate ReDos vulnerabilities & lint (#738)
  • 34ff07e Merge commit from fork
  • a0e96b3 chore(deps): update dependency esbuild to ^0.25.0 (#736)
  • d27daa7 build(deps-dev): bump vitest and @​vitest/coverage-v8 (#735)
  • bc07c8a build(deps): bump vite from 5.4.6 to 6.0.11 (#734)
  • 4266a84 build(deps-dev): bump undici from 6.19.2 to 6.21.1 (#733)
  • c2d27a2 chore(deps): update vitest monorepo to v3 (major) (#732)
  • 00bf316 feat: correctly parse response bodies as JSON where the Content-Type is `appl...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Pull Request Statistics
Commits:
1
Files Changed:
1
Additions:
+24
Deletions:
-18
Package Dependencies
Ecosystem:
npm
Version Change:
11.3.5 → 11.4.2
Update Type:
Minor
Ecosystem:
npm
Version Change:
9.1.3 → 9.2.2
Update Type:
Minor
Ecosystem:
npm
Version Change:
6.1.5 → 6.1.7
Update Type:
Patch
Technical Details
ID: 351215
UUID: 2344350786
Node ID: PR_kwDODEL08c6Lu_RC
Host: GitHub
Repository: testing-library/eslint-plugin-testing-library
Merge State: Unknown