G
YouTube TikTok Games
Skip to content

chore(deps): bump the dependencies group with 10 updates - #2506

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-30facc5012
Open

chore(deps): bump the dependencies group with 10 updates#2506
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-30facc5012

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 10 updates:

Package From To
schema-utils 4.8.2 4.8.3
@babel/cli 8.0.6 8.1.0
@babel/core 8.0.10 8.1.0
@hapi/hapi 21.4.12 21.4.13
@hono/node-server 2.1.5 2.1.6
cspell 10.4.0 10.4.1
fastify 5.12.7 5.12.8
hono 4.13.16 4.13.17
koa 3.2.1 3.3.0
supertest 7.3.1 7.3.2

Updates schema-utils from 4.8.2 to 4.8.3

Release notes

Sourced from schema-utils's releases.

v4.8.3

Patch Changes

  • Accept any webpack 5 as the optional peer dependency. Requiring ^5.112.0 broke installs with an older webpack 5, such as NestJS CLI's pinned webpack@5.106.2. Only precompile with minify needs webpack 5.112.0 or later, and it reports that when webpack is older. (by @​alexander-akait in #244)
Changelog

Sourced from schema-utils's changelog.

4.8.3

Patch Changes

  • Accept any webpack 5 as the optional peer dependency. Requiring ^5.112.0 broke installs with an older webpack 5, such as NestJS CLI's pinned webpack@5.106.2. Only precompile with minify needs webpack 5.112.0 or later, and it reports that when webpack is older. (by @​alexander-akait in #244)
Commits

Updates @babel/cli from 8.0.6 to 8.1.0

Release notes

Sourced from @​babel/cli's releases.

v8.1.0 (2026-11-02)

NOTE: @babel/plugin-proposal-bytes-modules, @babel/plugin-proposal-filtered-namespaces, and @babel/plugin-proposal-text-modules were accidentally excluded from this release. We're working on re-publishing the as 8.1.1.

Thanks @​Kjubikstronk for your first PR!

🚀 New Feature

  • babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • Other
  • babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • babel-generator, babel-parser, babel-traverse, babel-types
    • #17624 Add parse support for the "structs" proposal (only non-shared) (@​JLHwung)
  • babel-generator, babel-parser, babel-types
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • babel-core
  • babel-core, babel-plugin-transform-classes

🐛 Bug Fix

  • babel-parser
  • babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

🔬 Output optimization

  • babel-helpers, babel-runtime-corejs3

Committers: 4

v8.0.10 (2026-10-29)

Thanks @​dagemawinegash, @​nyan-left, @​saiyam-jain-dev, and @​yulman2207 for your first PRs!

... (truncated)

Changelog

Sourced from @​babel/cli's changelog.

v8.1.0 (2026-11-02)

🚀 New Feature

  • babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • Other
  • babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • babel-generator, babel-parser, babel-traverse, babel-types
    • #17624 Add parse support for the "structs" proposal (only non-shared) (@​JLHwung)
  • babel-generator, babel-parser, babel-types
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • babel-core
  • babel-core, babel-plugin-transform-classes

🐛 Bug Fix

  • babel-parser
  • babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

🔬 Output optimization

  • babel-helpers, babel-runtime-corejs3

v8.0.10 (2026-10-29)

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping

... (truncated)

Commits

Updates @babel/core from 8.0.10 to 8.1.0

Release notes

Sourced from @​babel/core's releases.

v8.1.0 (2026-11-02)

NOTE: @babel/plugin-proposal-bytes-modules, @babel/plugin-proposal-filtered-namespaces, and @babel/plugin-proposal-text-modules were accidentally excluded from this release. We're working on re-publishing the as 8.1.1.

Thanks @​Kjubikstronk for your first PR!

🚀 New Feature

  • babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • Other
  • babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • babel-generator, babel-parser, babel-traverse, babel-types
    • #17624 Add parse support for the "structs" proposal (only non-shared) (@​JLHwung)
  • babel-generator, babel-parser, babel-types
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • babel-core
  • babel-core, babel-plugin-transform-classes

🐛 Bug Fix

  • babel-parser
  • babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

🔬 Output optimization

  • babel-helpers, babel-runtime-corejs3

Committers: 4

Changelog

Sourced from @​babel/core's changelog.

v8.1.0 (2026-11-02)

🚀 New Feature

  • babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • Other
  • babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • babel-generator, babel-parser, babel-traverse, babel-types
    • #17624 Add parse support for the "structs" proposal (only non-shared) (@​JLHwung)
  • babel-generator, babel-parser, babel-types
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • babel-core
  • babel-core, babel-plugin-transform-classes

🐛 Bug Fix

  • babel-parser
  • babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

🔬 Output optimization

  • babel-helpers, babel-runtime-corejs3
Commits

Updates @hapi/hapi from 21.4.12 to 21.4.13

Commits

Updates @hono/node-server from 2.1.5 to 2.1.6

Release notes

Sourced from @​hono/node-server's releases.

v2.1.6

Security fixes

This release includes fixes for the following security issues:

Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxy

Affects: all requests. The raw request-target was passed to the WHATWG URL parser, which treats a backslash in the path as / and resolves .. segments, so /admin\secret reached the application as /admin/secret. A reverse proxy that forwards the backslash unchanged applied its path-based rules to the original path. GHSA-jpvv-r467-5p4w

A request whose path contains a raw backslash is now rejected with 400 Bad Request, for HTTP/1.1, HTTP/2 and WebSocket upgrades. A percent-encoded backslash (%5C) and a backslash in the query string are still accepted.

WebSocket upgrade request-target starting with // replaces the host in c.req.url, bypassing Origin checks

Affects: upgradeWebSocket. The URL of an upgrade request was built by resolving the request-target against the Host header, so a request-target such as //attacker.example/ws set the host of c.req.url to a client-chosen value while routing still saw /ws. An application that compared Origin with the origin of c.req.url could be bypassed by a page on another site. GHSA-7v5p-43qr-wch5

The host of upgrade requests now comes from the Host header, as for ordinary requests.

Unhandled ECONNRESET on the socket during an asynchronous WebSocket upgrade crashes the process

Affects: upgradeWebSocket. While the application handled an upgrade request, the socket had no error listener. A client that reset the connection during asynchronous middleware caused an unhandled 'error' event and terminated the process. GHSA-qv5m-9pm6-hqp3

Error and close events on the socket are now handled while the application runs, and a pending upgrade is released when the socket closes.

The backslash fix also ships in @hono/node-server v1.19.18. Users of upgradeWebSocket are encouraged to upgrade to this version.

Commits

Updates cspell from 10.4.0 to 10.4.1

Release notes

Sourced from cspell's releases.

v10.4.1

Fixes

fix: Show "stdin" as the file name when checking stdin (#9487)

Summary

When cspell lint checks text from stdin, the issues it reports now name the file stdin. Before, the file name was empty.

This applies to cspell lint stdin, cspell lint --file stdin, and cspell lint stdin://. With stdin://<path>, the issues still show <path>.

Before:

$ echo 'const recieve = 1;' | cspell lint --no-progress --file stdin
:1:7 - Unknown word (recieve) fix: (receive)

After:

$ echo 'const recieve = 1;' | cspell lint --no-progress --file stdin
stdin:1:7 - Unknown word (recieve) fix: (receive)

With --no-relative, the name is also stdin, instead of a stdin: URL that points to the current folder.

fix: Recognize Fortran source files (#9490)

Summary

cspell now recognizes Fortran source files. Each one gets the file type fortran, plus FortranFreeForm or FortranFixedForm, the language IDs used by the Modern Fortran extension for VS Code. Settings and dictionaries can now target Fortran files.

Feature

File type Extensions
fortran all of the extensions below
FortranFreeForm .f90, .f95, .f03, .f08, .f18, .fpp, .fypp, .pf, .cuf (CUDA Fortran)
FortranFixedForm .f, .f77, .for, .ftn

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.4.1 (2026-11-06)

Fixes

fix: cspell init updates the config in the current directory (#9552)

Summary

cspell init now updates the config file in the current directory, so you no longer need -c to point at it. Parent directories are not searched.

Feature

Run cspell init with the options you want, and it updates the config that cspell would load for the current directory:

cspell init --locale en-GB --dictionary python
  • Which file: the first match in cspell's usual search order, including .vscode/ and .config/.
  • package.json: it counts only if it has a cspell section.
  • Creating a new file: --output or --format still creates a new file, even if a config exists. --config still names the file to use.
  • No config found: cspell init creates cspell.config.yaml, as before.

JavaScript and TypeScript configs

cspell init can't edit a config such as cspell.config.mjs, so changes go in a new cspell.config.yaml that imports it. The code file is not changed, and the new file holds only what you asked for.

For example, cspell init --locale en-GB beside cspell.config.mjs creates this file:

# The locale to use when spell checking. (e.g., en, en-GB, de-DE
language: en-GB
# Configuration or packages to import.
import:
  - ./cspell.config.mjs

Before, it created a separate config that did not import the code file, which hid its settings.

The new file takes priority over the code file, so a setting it holds overrides the same setting there. If no option asks for a change, nothing is written.

... (truncated)

Commits
  • ddb1699 v10.4.1
  • 40702f3 chore: Prepare Release v10.4.1 (auto-deploy) (#9467)
  • a94754c ci: Workflow Bot -- Update ALL Dependencies (main) (#9537)
  • 90fce3b chore: Remove the VS Code launch, task, and subfolder settings files (#9557)
  • 0af12c3 chore: Remove the unused cspell-dict-nl-nl dev dependency (#9555)
  • c7129b1 fix: cspell init updates the config in the current directory (#9552)
  • 2b84f78 fix: cspell init only changes what you ask for and handles new JSON paths (...
  • 369b93c fix: cspell init no longer adds the schema to existing config files (#9550)
  • cc6ec10 chore: bump minimatch from 9.0.9 to 11.0.1 (#9523)
  • e82c2fa ci: Workflow Bot -- Update ALL Dependencies (main) (#9531)
  • Additional commits viewable in compare view

Updates fastify from 5.12.7 to 5.12.8

Release notes

Sourced from fastify's releases.

v5.12.8

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify@v5.12.7...v5.12.8

Commits
  • 0c7413a Bumped v5.12.8
  • 0ffe18f test: make handlerTimeout ended-but-not-finished test deterministic
  • 8e7c2b7 test: restore 100% coverage for handlerTimeout abort paths
  • 15fbadf [Backport 5.x] fix: abort streaming response when handlerTimeout fires after ...
  • 18a7049 docs: fix syntax errors in code examples (#7159)
  • c410867 docs: clarify that maxParamLength does not prevent ReDoS (#7140)
  • 0fa6bc2 [Backport 5.x] fix(decorators): evaluate instance getters once in getDecorato...
  • 0873d55 perf(request): hoist port regex to module level (#7110)
  • 25cd11e [Backport 5.x] docs: remove plugins that do not support Fastify v5 (#7152)
  • d60a57b [Backport 5.x] docs(reply): reorganize Reply reference by properties and meth...
  • Additional commits viewable in compare view

Updates hono from 4.13.16 to 4.13.17

Release notes

Sourced from hono's releases.

v4.13.17

What's Changed

  • fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in honojs/hono#5608
  • fix(utils/url): do not match a query key across separators in honojs/hono#5607
  • fix(etag,pretty-json): cancel the discarded response body in honojs/hono#5606
  • fix(client): detect the JSON media type with whitespace before a parameter in honojs/hono#5609
  • fix(timing): honor a precision of 0 in setMetric in honojs/hono#5363
  • fix(utils/mime,ssg): match media types case-insensitively in honojs/hono#5449
  • fix(timing): escape double quotes and backslashes in Server-Timing descriptions in honojs/hono#5478
  • fix(etag): preserve commas within quoted entity tags in honojs/hono#5353
  • fix(accepts): preserve exact media type quality over subtype wildcards in honojs/hono#5427
  • fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in CookieConstraint in honojs/hono#5611
  • fix(jsx): add the CSP nonce to all scripts generated by ErrorBoundary in honojs/hono#5430
  • fix(ssg): do not reuse created directories across toSSG runs in honojs/hono#5381
  • fix(aws-lambda): sanitize non-ASCII header values in API Gateway v2 events in honojs/hono#5483
  • fix(jsx): escape element and object attribute values in honojs/hono#5512
  • fix(jsx): do not render ref objects as attributes in honojs/hono#5615
  • fix(factory): keep independent return types for nine handlers in honojs/hono#5618

Full Changelog: honojs/hono@v4.13.16...v4.13.17

Commits
  • 61f7c59 4.13.17
  • 1534ffa fix(factory): keep independent return types for nine handlers (#5618)
  • eb754bd fix(jsx): do not render ref objects as attributes (#5615)
  • 6cbe361 fix(jsx): escape element and object attribute values (#5512)
  • 8b7f9e9 fix(aws-lambda): sanitize non-ASCII header values in API Gateway v2 events (#...
  • 7852e0a fix(ssg): do not reuse created directories across toSSG runs (#5381)
  • bcfd02b fix(jsx): add the CSP nonce to all scripts generated by ErrorBoundary (#5430)
  • 456fe46 fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in C...
  • 98b35af fix(accepts): preserve exact media type quality over subtype wildcards (#5427)
  • b3f1272 fix(etag): preserve commas within quoted entity tags (#5353)
  • Additional commits viewable in compare view

Updates koa from 3.2.1 to 3.3.0

Release notes

Sourced from koa's releases.

v3.3.0

What's Changed

@dependabot
chore(deps): bump the dependencies group with 10 updates
fac7fc4 
Bumps the dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [schema-utils](https://github.com/webpack/schema-utils) | `4.8.2` | `4.8.3` |
| [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `8.0.6` | `8.1.0` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.10` | `8.1.0` |
| [@hapi/hapi](https://github.com/hapijs/hapi) | `21.4.12` | `21.4.13` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.1.5` | `2.1.6` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.4.0` | `10.4.1` |
| [fastify](https://github.com/fastify/fastify) | `5.12.7` | `5.12.8` |
| [hono](https://github.com/honojs/hono) | `4.13.16` | `4.13.17` |
| [koa](https://github.com/koajs/koa) | `3.2.1` | `3.3.0` |
| [supertest](https://github.com/ladjs/supertest) | `7.3.1` | `7.3.2` |


Updates `schema-utils` from 4.8.2 to 4.8.3
- [Release notes](https://github.com/webpack/schema-utils/releases)
- [Changelog](https://github.com/webpack/schema-utils/blob/main/CHANGELOG.md)
- [Commits](webpack/schema-utils@v4.8.2...v4.8.3)

Updates `@babel/cli` from 8.0.6 to 8.1.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.1.0/packages/babel-cli)

Updates `@babel/core` from 8.0.10 to 8.1.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.1.0/packages/babel-core)

Updates `@hapi/hapi` from 21.4.12 to 21.4.13
- [Release notes](https://github.com/hapijs/hapi/releases)
- [Commits](hapijs/hapi@v21.4.12...v21.4.13)

Updates `@hono/node-server` from 2.1.5 to 2.1.6
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.1.5...v2.1.6)

Updates `cspell` from 10.4.0 to 10.4.1
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.4.1/packages/cspell)

Updates `fastify` from 5.12.7 to 5.12.8
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.7...v5.12.8)

Updates `hono` from 4.13.16 to 4.13.17
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.16...v4.13.17)

Updates `koa` from 3.2.1 to 3.3.0
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](koajs/koa@v3.2.1...v3.3.0)

Updates `supertest` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.3.1...v7.3.2)

---
updated-dependencies:
- dependency-name: schema-utils
  dependency-version: 4.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@babel/cli"
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@babel/core"
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@hapi/hapi"
  dependency-version: 21.4.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cspell
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fastify
  dependency-version: 5.12.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: hono
  dependency-version: 4.13.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: koa
  dependency-version: 3.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: supertest
  dependency-version: 7.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 11, 2026
@changeset-bot

changeset-bot Bot commented Nov 11, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: fac7fc4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) November 11, 2026 10:34
@socket-security

socket-security Bot commented Nov 11, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​babel/​cli@​8.0.6 ⏵ 8.1.0100 +110076 +196100
Updated@​babel/​core@​8.0.10 ⏵ 8.1.0991007998 +1100
Updated@​hapi/​hapi@​21.4.12 ⏵ 21.4.1399 +110082 +196 +1100
Updatedsupertest@​7.3.1 ⏵ 7.3.299100100 +190 -3100
Updatedkoa@​3.2.1 ⏵ 3.3.099 +110010093100
Updated@​hono/​node-server@​2.1.5 ⏵ 2.1.6100 +110010094100
Updatedcspell@​10.4.0 ⏵ 10.4.19810010096100
Updatedhono@​4.13.16 ⏵ 4.13.17100 +110097 +196100
Updatedschema-utils@​4.8.2 ⏵ 4.8.39910010097100
Updatedfastify@​5.12.7 ⏵ 5.12.898 +3310010099 +1100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webpack webpack[bot] webpack[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants