An open index of dependabot pull requests across open source projects.

Bump the npm_and_yarn group across 1 directory with 43 updates

Closed
Number: #1
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 3
Created: June 13, 2025 at 10:40 PM UTC
(3 months ago)
Updated: June 13, 2025 at 11:02 PM UTC
(3 months ago)
Closed: June 13, 2025 at 11:02 PM UTC
(3 months ago)
Time to Close: 23 minutes
Labels:
dependencies javascript
Description:

Bumps the npm_and_yarn group with 29 updates in the / directory:

Package From To
vue 2.6.11 3.0.0
vue-template-compiler 2.6.11 2.7.16
@babel/traverse 7.8.3 7.27.4
y18n 3.2.1 3.2.2
@hapi/hoek 8.5.0 8.5.1
node-fetch 2.6.0 2.7.0
@reach/router 1.2.1 1.3.4
ajv 6.11.0 6.12.6
async 2.6.3 2.6.4
axios 0.19.0 removed
react-inspector 4.0.0 4.0.1
body-parser 1.19.0 1.20.3
express 4.17.1 4.21.2
brace-expansion 1.1.11 1.1.12
browserify-sign 4.0.4 4.2.3
browserslist 4.8.5 4.25.0
@storybook/vue 5.3.9 7.6.20
decode-uri-component 0.2.0 0.2.2
dns-packet 1.3.1 1.3.4
ejs 2.7.4 removed
@vue/cli-plugin-babel 4.1.2 5.0.8
@vue/cli-plugin-eslint 4.1.2 5.0.8
@vue/cli-service 4.1.2 5.0.8
minimatch 3.0.4 3.1.2
minimist 0.0.8 1.2.8
mkdirp 0.5.1 0.5.6
markdown-to-jsx 6.10.3 removed
@storybook/addon-actions 5.3.9 9.0.8
store2 2.10.0 2.14.4

Updates vue from 2.6.11 to 3.0.0

Changelog

Sourced from vue's changelog.

3.0.0 (2020-09-18)

3.0.0-rc.13 (2020-09-18)

Bug Fixes

  • hmr: make hmr working with class components (#2144) (422f05e)
  • reactivity: avoid length mutating array methods causing infinite updates (#2138) (f316a33), closes #2137
  • suspense: should discard unmount effects of invalidated pending branch (5bfcad1)
  • types: component instance inference without props (#2145) (57bdaa2)

Code Refactoring

Features

  • runtime-core: support using inject() inside props default functions (58c31e3)
  • watch: support dot-delimited path in watch option (1c9a0b3)

BREAKING CHANGES

  • watch APIs now default to use flush: 'pre' instead of flush: 'post'. This change affects watch, watchEffect, the watch component option, and this.$watch. See (49bb447) for more details.

3.0.0-rc.12 (2020-09-16)

Bug Fixes

  • reactivity: effect should only recursively self trigger with explicit options (3810de7), closes #2125
  • runtime-core: ensure root stable fragments inherit elements for moving (bebd44f), closes #2134
  • runtime-core: should still do full traverse of stable fragment children in dev + hmr (dd40ad8)
  • runtime-core/async-component: fix error component when there are no error handlers (c7b4a37), closes #2129
  • types/tsx: optional props from Mixin/Extends are treated as required (#2048) (89e9ab8)

Features

  • compiler-sfc: additionalData support for css preprocessors (#2126) (066d514)

3.0.0-rc.11 (2020-09-15)

... (truncated)

Commits

Updates vue-template-compiler from 2.6.11 to 2.7.16

Release notes

Sourced from vue-template-compiler's releases.

v2.7.16 "Swan Song"

This is the final release for Vue 2.

Vue 2 will reach End of Life on December 31st, 2023. For more details, please read this blog post.

Please refer to CHANGELOG.md for details.

v2.7.16-beta.2

Please refer to CHANGELOG.md for details.

v2.7.16-beta.1

Please refer to CHANGELOG.md for details.

v2.7.15

Please refer to CHANGELOG.md for details.

v2.7.14

Please refer to CHANGELOG.md for details.

v2.7.13

Please refer to CHANGELOG.md for details.

v2.7.12

Please refer to CHANGELOG.md for details.

v2.7.11

Please refer to CHANGELOG.md for details.

v2.7.10

Please refer to CHANGELOG.md for details.

v2.7.9

Please refer to CHANGELOG.md for details.

v2.7.8

Please refer to CHANGELOG.md for details.

v2.7.7

Please refer to CHANGELOG.md for details.

v2.7.6

Please refer to CHANGELOG.md for details.

v2.7.5

Please refer to CHANGELOG.md for details.

v2.7.4

Please refer to CHANGELOG.md for details.

v2.7.3

... (truncated)

Changelog

Sourced from vue-template-compiler's changelog.

2.7.16 Swan Song (2023-12-24)

Bug Fixes

  • lifecycle: ensure component effect scopes are disconnected (56ce7f8), closes #13134

2.7.16-beta.2 (2023-12-14)

Bug Fixes

2.7.16-beta.1 (2023-12-08)

Bug Fixes

2.7.15 (2023-10-23)

Bug Fixes

  • compiler-sfc: add semicolon after defineProps statement (#12879) (51fef2c)
  • compiler-sfc: fix macro usage in multi-variable declaration (#12873) (d27c128)
  • compiler-sfc: Optimize the value of emitIdentifier (#12851) (bb59751)
  • compiler-sfc: Resolve object expression parsing errors in v-on (#12862) (b8c8b3f)
  • lifecycle: scope might changed when call hook (#13070) (74ca5a1)

... (truncated)

Commits
  • 13f4e7d release: v2.7.16
  • 56ce7f8 fix(lifecycle): esnure component effect scopes are disconnected
  • 305e4ae release: v2.7.16-beta.2
  • 3e1037e chore: bump vitest to 1.0.4
  • db9c566 fix: account for nested render calls
  • 895669f fix(types): export more types for v3 alignment (jsx / component options)
  • 73bdf14 release: v2.7.16-beta.1
  • e0747f4 fix(keep-alive): fix memory leak without breaking transition tests
  • 2632249 fix(keep-alive): fix keep-alive memory leak
  • 3650c12 fix(types): provide types for built-in components
  • Additional commits viewable in compare view

Updates @babel/traverse from 7.8.3 to 7.27.4

Release notes

Sourced from @​babel/traverse's releases.

v7.27.4 (2025-05-30)

:eyeglasses: Spec Compliance

  • babel-parser, babel-plugin-proposal-explicit-resource-management

:nail_care: Polish

:microscope: Output optimization

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

Committers: 4

v7.27.3 (2025-05-27)

:bug: Bug Fix

  • babel-generator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-proposal-explicit-resource-management
  • babel-plugin-proposal-decorators, babel-types
    • #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
  • babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
  • babel-parser
  • babel-generator, babel-parser

Committers: 7

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.27.4 (2025-05-30)

:eyeglasses: Spec Compliance

  • babel-parser, babel-plugin-proposal-explicit-resource-management

:nail_care: Polish

:microscope: Output optimization

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

v7.27.3 (2025-05-27)

:bug: Bug Fix

  • babel-generator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-proposal-explicit-resource-management
  • babel-plugin-proposal-decorators, babel-types
    • #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
  • babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
  • babel-parser
  • babel-generator, babel-parser

v7.27.2 (2025-05-06)

:bug: Bug Fix

  • babel-parser
  • babel-plugin-transform-object-rest-spread
  • babel-plugin-transform-modules-commonjs, babel-template

:running_woman: Performance

  • babel-cli

... (truncated)

Commits

Updates y18n from 3.2.1 to 3.2.2

Release notes

Sourced from y18n's releases.

y18n y18n-v4.0.3

Bug Fixes

  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)

y18n y18n-v4.0.2

Bug Fixes

  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.


Updates @hapi/hoek from 8.5.0 to 8.5.1

Commits

Updates node-fetch from 2.6.0 to 2.7.0

Release notes

Sourced from node-fetch's releases.

v2.7.0

2.7.0 (2023-08-23)

Features

v2.6.13

2.6.13 (2023-08-18)

Bug Fixes

v2.6.12

2.6.12 (2023-06-29)

Bug Fixes

v2.6.11

2.6.11 (2023-05-09)

Reverts

v2.6.10

2.6.10 (2023-05-08)

Bug Fixes

v2.6.9

2.6.9 (2023-01-30)

Bug Fixes

v2.6.8

2.6.8 (2023-01-13)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.


Updates @reach/router from 1.2.1 to 1.3.4

Changelog

Sourced from @​reach/router's changelog.

v1.3.4

  • d7e4cfc Support forwarding url params with wildcard paths

v1.3.3

1.3.2 was a failed publish

  • 8b93694 Fix an encoding issue with browsers who do not encode urls
  • d0962d7 Fix a bug on specific vendors that do not ship location.pathname
  • 244e2bf Improve compatibility for createMemorySource

v1.3.1

  • f40ea53 Fix an accidental breaking change not exposing all location properties

v1.3.0

  • 56d4dca Added 4 new Hook APIs!
    • useLocation
    • useParams
    • useNavigate
    • useMatch
  • 15298df Improved displayName for react context
  • 11e9ed6 Fixed a bug that pushed to history when a user clicks the same path
  • ccfc3c8 Added support for trailing wildcard names e.g., path="/files/*filePath"
  • ad52cd3 Upgraded create-react-context to an MIT license compatible version
  • 0a8af93 Fixed a bug with checking own property on locations
  • 28a79e7 Fixed search not being prepended with a ?
  • 77fa233 Added displayName to Link
Commits
Maintainer changes

This version was pushed to npm by blainekasten, a new releaser for @​reach/router since your current version.


Updates ajv from 6.11.0 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@​issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@​sambauers, #1143) Option keywords to add custom keywords (@​franciscomorais, #1137) Types fixes (@​boenrobot, @​MattiAstedrone) Docs:

Commits
  • fe59143 6.12.6
  • d580d3e Merge pull request #1298 from ajv-validator/fix-url
  • fd36389 fix: regular expression for "url" format
  • 490e34c docs: link to v7-beta branch
  • 9cd93a1 docs: note about v7 in readme
  • 877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
  • f1c8e45 6.12.5
  • 764035e Merge branch 'ChALkeR-chalker/fix-comma'
  • 3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
  • a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
  • Additional commits viewable in compare view

Updates async from 2.6.3 to 2.6.4

Changelog

Sourced from async's changelog.

v2.6.4

  • Fix potential prototype pollution exploit (#1828)
Commits
Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.


Removes axios

Updates react-inspector from 4.0.0 to 4.0.1

Commits

Updates follow-redirects from 1.5.10 to 1.9.1

Commits
  • 9df47ad Release version 1.9.1 of the npm package.
  • ca2d528 Update dependencies.
  • 137c8cf Catch and re-emit request errors.
  • 42971cc Skip inapplicable test.
  • 633ffa8 Test on Node 13.
  • e5ca479 Only change methods with 301/302/303.
  • a9d9205 Format authors similarly.
  • 2215c54 Release version 1.9.0 of the npm package.
  • 539ccd9 Support connect event.
  • 2958ba3 Also lint on Travis.
  • Additional commits viewable in compare view

Updates body-parser from 1.19.0 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

New Contributors

Full Changelog: https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3

1.20.2

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

1.20.1

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone

1.20.0

  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: http-errors@2.0.0
    • deps: depd@2.0.0
    • deps: statuses@2.0.1
  • deps: on-finished@2.4.1
  • deps: qs@6.10.3

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

1.20.1 / 2022-10-06

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone

1.20.0 / 2022-04-02

  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0
    • Replace internal eval usage with Function constructor
    • Use instance methods on process to check for listeners
  • deps: http-errors@2.0.0
    • deps: depd@2.0.0
    • deps: statuses@2.0.1
  • deps: on-finished@2.4.1
  • deps: qs@6.10.3
  • deps: raw-body@2.5.1
    • deps: http-errors@2.0.0

1.19.2 / 2022-02-15

  • deps: bytes@3.1.2
  • deps: qs@6.9.7
    • Fix handling of __proto__ keys
  • deps: raw-body@2.4.3
    • deps: bytes@3.1.2

1.19.1 / 2021-12-10

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates express from 4.17.1 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link...

    Description has been truncated

    Summary by Sourcery

    Bump project dependencies across npm and Yarn to their latest versions, including major framework upgrades and removal of deprecated modules.

    Enhancements:

    • Upgrade Vue framework from v2.x to v3.0.0
    • Update Storybook renderer and addons to v7.6.20
    • Bump Vue CLI plugins and service to v5.0.8

    Build:

    • Update package.json and lock file with new dependency versions

    Chores:

    • Remove deprecated packages axios, ejs, and markdown-to-jsx
    • Bulk upgrade 40+ other runtime and development libraries to their latest minor and patch releases
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+13104
Deletions:
-12823
Package Dependencies
Ecosystem:
npm
Version Change:
7.8.3 → 7.27.4
Update Type:
Minor
Package:
axios
Ecosystem:
npm
Version Change:
0.19.0 → removed
Package:
express
Ecosystem:
npm
Version Change:
4.17.1 → 4.21.2
Update Type:
Minor
Package:
vue
Ecosystem:
npm
Version Change:
2.6.11 → 3.0.0
Update Type:
Major
Ecosystem:
npm
Version Change:
0.2.0 → 0.2.2
Update Type:
Patch
Package:
store2
Ecosystem:
npm
Version Change:
2.10.0 → 2.14.4
Update Type:
Minor
Package:
async
Ecosystem:
npm
Version Change:
2.6.3 → 2.6.4
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.0.4 → 4.2.3
Update Type:
Minor
Package:
minimatch
Ecosystem:
npm
Version Change:
3.0.4 → 3.1.2
Update Type:
Minor
Package:
y18n
Ecosystem:
npm
Version Change:
3.2.1 → 3.2.2
Update Type:
Patch
Package:
minimist
Ecosystem:
npm
Version Change:
0.0.8 → 1.2.8
Update Type:
Major
Package:
ejs
Ecosystem:
npm
Version Change:
2.7.4 → removed
Ecosystem:
npm
Version Change:
5.3.9 → 9.0.8
Update Type:
Major
Package:
dns-packet
Ecosystem:
npm
Version Change:
1.3.1 → 1.3.4
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.8.5 → 4.25.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
2.6.11 → 2.7.16
Update Type:
Minor
Package:
node-fetch
Ecosystem:
npm
Version Change:
2.6.0 → 2.7.0
Update Type:
Minor
Package:
body-parser
Ecosystem:
npm
Version Change:
1.19.0 → 1.20.3
Update Type:
Minor
Package:
ajv
Ecosystem:
npm
Version Change:
6.11.0 → 6.12.6
Update Type:
Minor
Package:
@hapi/hoek
Ecosystem:
npm
Version Change:
8.5.0 → 8.5.1
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.1.2 → 5.0.8
Update Type:
Major
Package:
mkdirp
Ecosystem:
npm
Version Change:
0.5.1 → 0.5.6
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.1.2 → 5.0.8
Update Type:
Major
Ecosystem:
npm
Version Change:
4.1.2 → 5.0.8
Update Type:
Major
Ecosystem:
npm
Version Change:
6.10.3 → removed
Ecosystem:
npm
Version Change:
5.3.9 → 7.6.20
Update Type:
Major
Ecosystem:
npm
Version Change:
1.1.11 → 1.1.12
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.2.1 → 1.3.4
Update Type:
Minor
Ecosystem:
npm
Version Change:
4.0.0 → 4.0.1
Update Type:
Patch
Technical Details
ID: 1555671
UUID: 2591536187
Node ID: PR_kwDOO7Ud1M6ad7Q7
Host: GitHub
Repository: tylerbishopdev/storybook-vue-OV
Merge State: Dirty