Skip to content

Build(deps): Bump the npm-dependencies group across 1 directory with 15 updates - #142

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-24e9575cf2
Open

Build(deps): Bump the npm-dependencies group across 1 directory with 15 updates#142
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-24e9575cf2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 11 updates in the / directory:

Package From To
ansi-regex 6.2.2 6.3.0
ansi-styles 6.2.3 7.0.0
baseline-browser-mapping 2.10.43 2.11.14
browserslist 4.28.6 4.28.8
color-name 2.1.0 2.1.1
fs-extra 11.3.6 11.4.0
nanoid 6.0.0 6.0.1
readdirp 5.0.0 5.1.1
yargs 18.0.0 18.1.0
autoprefixer 10.5.2 10.5.4
postcss 8.5.18 8.5.26

Updates ansi-regex from 6.2.2 to 6.3.0

Release notes

Sourced from ansi-regex's releases.

v6.3.0

  • Improve performance f1bf1f0

chalk/ansi-regex@v6.2.2...v6.3.0

Commits

Updates ansi-styles from 6.2.3 to 7.0.0

Release notes

Sourced from ansi-styles's releases.

v7.0.0

Breaking

  • Require Node.js 22 802582c

Improvements

  • Add extended underline styles and underline colors af41a9e

chalk/ansi-styles@v6.2.3...v7.0.0

Commits

Updates baseline-browser-mapping from 2.10.43 to 2.11.14

Release notes

Sourced from baseline-browser-mapping's releases.

v2.11.0

What's Changed in 2.11.0

  • feat: Adds a new getTimeline() method for getting the series of minimum browser changes, either grouped by date or by browser.
  • refactor: Substantial refactoring of the data compression process that replaces the full list of browsers from @mdn/browser-compat-data and downstream-browsers.json and features from web-features (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date. Thanks to @​swwind for the idea!
  • refactor: Some common functions have been moved to a util.ts module for use in other scripts.
  • fix: Removes process.exit() calls when unsupported option combinations are passed to getCompatibleVersions() and getAllVersions() in favour of throwing an Error. There is a small security risk with process.exit() calls that sites accepting unsanitised inputs could be the subject of attacks. Unsupported config options now throw and Error which should allow for more graceful handling. Thanks to @​bnbdr for flagging this as vulnerability CVE-2026-45819 .

Fixes #134

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.10.44...v2.11.0

Commits
  • b8c07ea Patch to 2.11.14 because browser or feature data changed
  • 2040357 Browser or feature data changed
  • fd7c026 Updating static site
  • bd67e5d Patch to 2.11.13 because browser or feature data changed
  • 97f42ca Browser or feature data changed
  • 5a1924d Check that timeline has changed before changing lastUpdated
  • 141163f Updating static site
  • cc4ecd6 Patch to 2.11.12 because browser or feature data changed
  • fef63fc Browser or feature data changed
  • c224f33 Patch to 2.11.11 because browser or feature data changed
  • Additional commits viewable in compare view

Updates browserslist from 4.28.6 to 4.28.8

Release notes

Sourced from browserslist's releases.

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

Changelog

Sourced from browserslist's changelog.

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

Commits
  • f2f2e6c Release 4.28.8 version
  • d0787c8 Update dependencies
  • fcf8fa9 Merge pull request #939 from Jaybhade/fix/baseline-kaios-without-downstream
  • 57ecd64 fix: support "including kaios" without downstream
  • 093a0f6 Update EM banner
  • b637868 Release 4.28.7 version
  • 313f465 Update dependencies
  • c935c5a Fix regexp performance
  • d7e9e65 Rewrite structure parsing to make it always fast
  • ec4a55e Fix import order
  • Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001805 to 1.0.30001809

Commits

Updates color-name from 2.1.0 to 2.1.1

Commits

Updates electron-to-chromium from 1.5.389 to 1.5.407

Commits

Updates fs-extra from 11.3.6 to 11.4.0

Changelog

Sourced from fs-extra's changelog.

11.4.0 / 2026-07-23

  • Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#925, #1076)
Commits

Updates nanoid from 6.0.0 to 6.0.1

Release notes

Sourced from nanoid's releases.

6.0.1

  • Fixed docs.
Changelog

Sourced from nanoid's changelog.

6.0.1

  • Fixed docs.
Commits

Updates node-releases from 2.0.51 to 2.0.53

Commits

Updates readdirp from 5.0.0 to 5.1.1

Release notes

Sourced from readdirp's releases.

5.1.1

Speed-up massively, reduce RAM usage. 280k files: 2.8s => 1.1s, 76mb ram => 43mb. Fix a few stability issues.

5.1.0

Speed-up massively, reduce RAM usage. 280k files: 2.8s => 1.1s, 76mb ram => 43mb. Fix a few stability issues.

Commits

Updates update-browserslist-db from 1.2.3 to 1.3.1

Release notes

Sourced from update-browserslist-db's releases.

1.3.1

1.3.0

Changelog

Sourced from update-browserslist-db's changelog.

1.3.1

1.3.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for update-browserslist-db since your current version.


Updates yargs from 18.0.0 to 18.1.0

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

  • ignore bun when getting bin name (b77831c)

Bug Fixes

  • lang: 'count' for de locale (#2476) (971e351)
  • local prototype pollution vulnerability in apply-extends (437f3a4)
  • locale: add Georgian translation (#2474) (086aeaa)

17.7.3 (2026-06-19)

Bug Fixes

  • fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

  • fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)
Commits
Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.


Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

Commits

Updates postcss from 8.5.18 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Build(deps): Bump the npm-dependencies group across 1 directory with …
edb401d 
…15 updates

Bumps the npm-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ansi-regex](https://github.com/chalk/ansi-regex) | `6.2.2` | `6.3.0` |
| [ansi-styles](https://github.com/chalk/ansi-styles) | `6.2.3` | `7.0.0` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.43` | `2.11.14` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.6` | `4.28.8` |
| [color-name](https://github.com/colorjs/color-name) | `2.1.0` | `2.1.1` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.6` | `11.4.0` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.0` | `6.0.1` |
| [readdirp](https://github.com/paulmillr/readdirp) | `5.0.0` | `5.1.1` |
| [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.1.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.5.4` |
| [postcss](https://github.com/postcss/postcss) | `8.5.18` | `8.5.26` |



Updates `ansi-regex` from 6.2.2 to 6.3.0
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v6.2.2...v6.3.0)

Updates `ansi-styles` from 6.2.3 to 7.0.0
- [Release notes](https://github.com/chalk/ansi-styles/releases)
- [Commits](chalk/ansi-styles@v6.2.3...v7.0.0)

Updates `baseline-browser-mapping` from 2.10.43 to 2.11.14
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.10.43...v2.11.14)

Updates `browserslist` from 4.28.6 to 4.28.8
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.6...4.28.8)

Updates `caniuse-lite` from 1.0.30001805 to 1.0.30001809
- [Commits](browserslist/caniuse-lite@1.0.30001805...1.0.30001809)

Updates `color-name` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/colorjs/color-name/releases)
- [Commits](https://github.com/colorjs/color-name/commits)

Updates `electron-to-chromium` from 1.5.389 to 1.5.407
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.389...v1.5.407)

Updates `fs-extra` from 11.3.6 to 11.4.0
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.6...11.4.0)

Updates `nanoid` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.0...6.0.1)

Updates `node-releases` from 2.0.51 to 2.0.53
- [Commits](chicoxyzzy/node-releases@v2.0.51...v2.0.53)

Updates `readdirp` from 5.0.0 to 5.1.1
- [Release notes](https://github.com/paulmillr/readdirp/releases)
- [Commits](paulmillr/readdirp@5.0.0...5.1.1)

Updates `update-browserslist-db` from 1.2.3 to 1.3.1
- [Release notes](https://github.com/browserslist/update-db/releases)
- [Changelog](https://github.com/browserslist/update-db/blob/main/CHANGELOG.md)
- [Commits](browserslist/update-db@1.2.3...1.3.1)

Updates `yargs` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.1.0)

Updates `autoprefixer` from 10.5.2 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.5.4)

Updates `postcss` from 8.5.18 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.18...8.5.26)

---
updated-dependencies:
- dependency-name: ansi-regex
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: ansi-styles
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: browserslist
  dependency-version: 4.28.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001809
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: color-name
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: electron-to-chromium
  dependency-version: 1.5.407
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fs-extra
  dependency-version: 11.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: node-releases
  dependency-version: 2.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: readdirp
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: update-browserslist-db
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies npm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants