Skip to content

Bump the npm_and_yarn group across 2 directories with 16 updates - #79

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-601abd5665
Open

Bump the npm_and_yarn group across 2 directories with 16 updates#79
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-601abd5665

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package From To
rollup 0.57.1 2.80.0
atob 1.1.3 2.1.2
concat-with-sourcemaps 1.0.5 1.1.0
decode-uri-component 0.2.0 0.2.2
ecstatic 3.2.0 removed
minimatch 3.0.4 3.1.5

Bumps the npm_and_yarn group with 9 updates in the /src/flvass2mkv directory:

Package From To
rollup 0.57.1 2.80.0
atob 2.0.3 2.1.2
debug 0.7.4 3.1.0
decode-uri-component 0.2.0 0.2.2
minimist 1.2.0 1.2.8
minimatch 0.2.14 removed
randomatic 1.1.7 3.1.1
bl 1.2.1 1.2.3
lodash.merge 4.6.1 4.6.2

Updates rollup from 0.57.1 to 2.80.0

Release notes

Sourced from rollup's releases.

v.2.79.2

2.79.2

2024-09-26

Bug Fixes

  • Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

Changelog

Sourced from rollup's changelog.

2.80.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6277)

Pull Requests

2.79.2

2024-09-26

Bug Fixes

Pull Requests

2.79.1

2022-09-22

Bug Fixes

  • Avoid massive performance degradation when creating thousands of chunks (#4643)

Pull Requests

2.79.0

2022-08-31

Features

  • Add amd.forceJsExtensionForImports to enforce using .js extensions for relative AMD imports (#4607)

Pull Requests

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates atob from 1.1.3 to 2.1.2

Commits

Updates braces from 1.8.5 to 2.3.1

Changelog

Sourced from braces's changelog.

[2.3.1] - 2018-02-17

  • Remove unnecessary escape in Regex. (#14)

[2.3.0] - 2017-10-19

  • minor code reorganization
  • optimize regex
  • expose maxLength option

[2.2.1] - 2017-05-30

  • don't condense when braces contain extglobs

[2.2.0] - 2017-05-28

  • ensure word boundaries are preserved
  • fixes edge case where extglob characters precede a brace pattern

[2.1.1] - 2017-04-27

  • use snapdragon-node
  • handle edge case
  • optimizations, lint

[2.0.4] - 2017-04-11

  • pass opts to compiler
  • minor optimization in create method
  • re-write parser handlers to remove negation regex

[2.0.3] - 2016-12-10

  • use split-string
  • clear queue at the end
  • adds sequences example
  • add unit tests

[2.0.2] - 2016-10-21

  • fix comma handling in nested extglobs

[2.0.1] - 2016-10-20

  • add comments
  • more tests, ensure quotes are stripped

[2.0.0] - 2016-10-19

  • don't expand braces inside character classes

... (truncated)

Commits

Updates concat-with-sourcemaps from 1.0.5 to 1.1.0

Commits
Maintainer changes

This version was pushed to npm by floridoo, a new releaser for concat-with-sourcemaps since your current version.


Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

  • Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

  • Switch to GitHub workflows 76abc93
  • Fix issue where decode throws - fixes #6 746ca5d
  • Update license (#1) 486d7e2
  • Tidelift tasks a650457
  • Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

Removes ecstatic

Updates minimatch from 3.0.4 to 3.1.5

Commits

Updates lodash from 1.0.2 to 4.17.5

Release notes

Sourced from lodash's releases.

4.0.0

lodash v4.0.0

2015 was big year! Lodash became the most depended on npm package, passed 1 billion downloads, & its v3 release saw massive adoption!

The year was also one of collaboration, as discussions began on merging Lodash & Underscore. Much of Lodash v4 is proofing out the ideas from those discussions. Lodash v4 would not be possible without the collaboration & contributions of the Underscore core team. In the spirit of merging our teams have blended with several members contributing to both libraries.

For 2016 & lodash v4.0.0 we wanted to cut loose, push forward, & take things up a notch!

Modern only

With v4 we’re breaking free from old projects, old environments, & dropping old IE < 9 support!

4 kB Core

Lodash’s kitchen-sink size will continue to grow as new methods & functionality are added. However, we now offer a 4 kB (gzipped) core build that’s compatible with Backbone v1.2.4 for folks who want Lodash without lugging around the kitchen sink.

More ES6

We’ve continued to embrace ES6 with methods like _.isSymbol, added support for cloning & comparing array buffers, maps, sets, & symbols, converting iterators to arrays, & iterable _(…).

In addition, we’ve published an es-build & pulled babel-plugin-lodash into core to make tree-shaking a breeze.

More Modular

Pop quiz! 📣

What category path does the bindAll method belong to? Is it

A) require('lodash/function/bindAll') B) require('lodash/utility/bindAll') C) require('lodash/util/bindAll')

Don’t know? Well, with v4 it doesn’t matter because now module paths are as simple as

var bindAll = require('lodash/bindAll');

We’ve also reduced module complexity making it easier to create smaller bundles. This has helped Lodash adoption with libraries like Async & Redux!

1st Class FP

With v3 we introduced lodash-fp. We learned a lot & with v4 we decided to pull it into core.

Now you can get immutable, auto-curried, iteratee-first, data-last methods as simply as

var _ = require('lodash/fp');
var object = { 'a': 1 };
</tr></table>

... (truncated)

Commits
  • 97e9edc Bump to v4.17.5.
  • ce32a89 Rebuild lodash and docs.
  • 5e58cd2 Fix style nits.
  • 5adb4ee Make _.defaults avoid accessing property values it doesn't need to. [closes #...
  • a73b92b Avoid using the values toString method in _.invert if it’s not a function. [c...
  • a1b5305 Add 4.17.5 branch to travis.
  • dac890a Enable _.words to detect ordinals in compound words. [closes #3561]
  • 7167a78 Replacing a regex in stringToPath with a quick character code check. (#3308)
  • f831977 Avoid shadowing result in remainingWait. (#3280)
  • 20c5307 stringToPath: avoid shadowing variable. (#3226)
  • Additional commits viewable in compare view

Updates http-proxy from 1.16.2 to 1.18.1

Release notes

Sourced from http-proxy's releases.

Long overdue maintenance

Due to some great contributions I'm happy to announce a new release of http-proxy containing numerous bug fixes, feature additions and documentation improvements. Thanks to all who contributed for their patience and willingness to contribute despite perceived stagnation in activity in the project. I welcome all contributions and those who are interested in getting more involved with the project. Below I will highlight the changes that landed in the latest version but you can find the full diff of the changes in nodejitsu/node-http-proxy#1251

  • Add option to rewrite path of set-cookie headers. @​swillis12
  • Add option for overriding http METHOD when proxying request @​AydinChavez
  • Feature: selfHandleResponse for taking responsibility in returning your own response when listening on the proxyRes event. @​cpd0101 @​guoxiangyang
  • Add followRedirects option @​n30n0v
  • Document timeout option @​jlaamanen
  • Fix documentation typos @​carpsareokiguess
  • Document buffer option @​jonhunter1977
  • Include websocket non-upgrade response instead of just closing the socket. Allows auth schemes to be possible with websocket proxying. @​Tigge
  • Stop using the writeHead method explicitly and let node handle it internally to prevent thrown errors @​jakefurler
  • Be more defensive in handling of detecting response state when proxying @​thiagobustamante
Changelog

Sourced from http-proxy's changelog.

v1.18.1 - 2020-05-17

Merged

1.18.0 - 2019-09-18

Merged

Commits

  • [dist] New test fixtures. 7e4a0e5
  • [dist] End of an era. a9b09cc
  • [dist] Version bump. 1.18.0 9bbe486
  • [fix] Latest versions. 59c4403
  • [fix test] Update tests. dd1d08b
  • [dist] Update dependency ws to v3 [SECURITY] b00911c
  • [dist] .gitattributes all the things. fc93520
  • [dist] Regenerate package-lock.json. 16d4f8a

1.17.0 - 2018-04-20

Merged

... (truncated)

Commits
  • 9b96cd7 1.18.1
  • 335aeeb Skip sending the proxyReq event when the expect header is present (#1447)
  • dba3966 Remove node6 support, add node12 to build (#1397)
  • 9bbe486 [dist] Version bump. 1.18.0
  • 6e4bef4 Added in auto-changelog module set to keepachangelog format (#1373)
  • d056241 fix 'Modify Response' readme section to avoid unnecessary array copying (#1300)
  • 244303b Fix incorrect target name for reverse proxy example (#1135)
  • b4028ba Fix modify response middleware example (#1139)
  • 77a9815 [dist] Update dependency async to v3 (#1359)
  • c662f9e Fix path to local http-proxy in examples. (#1072)
  • Additional commits viewable in compare view

Updates ini from 1.3.5 to 1.3.8

Commits
  • a2c5da8 1.3.8
  • af5c6bb Do not use Object.create(null)
  • 8b648a1 don't test where our devdeps don't even work
  • c74c8af 1.3.7
  • 024b8b5 update deps, add linting
  • 032fbaf Use Object.create(null) to avoid default object property hazards
  • 2da9039 1.3.6
  • cfea636 better git push script, before publish instead of after
  • 56d2805 do not allow invalid hazardous string as section name
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for ini since your current version.


Updates qs from 2.3.3 to 6.15.0

Changelog

Sourced from qs's changelog.

6.15.0

  • [New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#425, #122)
  • [Fix] duplicates option should not apply to bracket notation keys (#514)

6.14.2

  • [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
  • [Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
  • [Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)
  • [Fix] parse: enforce arrayLimit on comma-parsed values
  • [Fix] parse: fix error message to reflect arrayLimit as max index; remove extraneous comments (#545)
  • [Robustness] avoid .push, use void
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [meta] fix changelog typo (arrayLength → arrayLimit)
  • [actions] fix rebase workflow permissions

6.14.1

  • [Fix] ensure arrayLimit applies to [] notation as well
  • [Fix] parse: when a custom decoder returns null for a key, ignore that key
  • [Refactor] parse: extract key segment splitting helper
  • [meta] add threat model
  • [actions] add workflow permissions
  • [Tests] stringify: increase coverage
  • [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect

6.14.0

  • [New] parse: add throwOnParameterLimitExceeded option (#517)
  • [Refactor] parse: use utils.combine more
  • [patch] parse: add explicit throwOnLimitExceeded default
  • [actions] use shared action; re-add finishers
  • [meta] Fix changelog formatting bug
  • [Deps] update side-channel
  • [Dev Deps] update es-value-fixtures, has-bigints, has-proto, has-symbols
  • [Tests] increase coverage

6.13.3

[Fix] fix regressions from robustness refactor [actions] update reusable workflows

6.13.2

  • [Robustness] avoid .push, use void
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [actions] fix rebase workflow permissions

6.13.1

  • [Fix] stringify: avoid a crash when a filter key is null
  • [Fix] utils.merge: functions should not be stringified into keys

... (truncated)

Commits
  • d9b4c66 v6.15.0
  • cb41a54 [New] parse: add strictMerge option to wrap object/primitive conflicts in...
  • 88e1563 [Fix] duplicates option should not apply to bracket notation keys
  • 9d441d2 Merge backport release tags v6.0.6–v6.13.3 into main
  • 85cc8ca v6.12.5
  • ffc12aa v6.11.4
  • 0506b11 [actions] update reusable workflows
  • 6a37faf [actions] update reusable workflows
  • 8e8df5a [Fix] fix regressions from robustness refactor
  • d60bab3 v6.10.7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for qs since your current version.

Install script changes

This version adds prepublish script that runs during installation. Review the package contents before updating.


Updates rollup from 0.57.1 to 2.80.0

Release notes

Sourced from rollup's releases.

v.2.79.2

2.79.2

2024-09-26

Bug Fixes

  • Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

Changelog

Sourced from rollup's changelog.

2.80.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6277)

Pull Requests

2.79.2

2024-09-26

Bug Fixes

Pull Requests

2.79.1

2022-09-22

Bug Fixes

  • Avoid massive performance degradation when creating thousands of chunks (#4643)

Pull Requests

2.79.0

2022-08-31

Features

  • Add amd.forceJsExtensionForImports to enforce using .js extensions for relative AMD imports (#4607)

Pull Requests

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates atob from 2.0.3 to 2.1.2

Commits

Updates debug from 0.7.4 to 3.1.0

Release notes

Sourced from debug's releases.

3.1.0

Minor Changes

  • Ignore package-lock.json: e7e568a24736486721882282eb21beb31c741647
  • Remove component.json: 47747f329fe159e94262318b52b87a48f6c0acd4
  • Remove "component" from package.json: bdb7e0137f84dc8bcfc95daede7c694799d38dbf
  • Add DEBUG_HIDE_DATE env var: #486

Patches

  • Correct spelling mistake: daf1a7c8c0f62f5dbc8d48158d6748d0527cc551
  • Examples: fix colors printout: 7cd9e539ce571fc3314d34d9d1dac3124839dbac
  • Fix browser detection: fdfa0f5f6cc7e83fd60b6cf1e7b990cbf6388621
  • Remove ReDoS regexp in %o formatter: #504

Credits

Huge thanks to @​amejiarosario and @​zhuangya for their help!

3.0.0

Featuring pretty new colors!

Major Changes

  • Remove DEBUG_FD: #406
  • Make millisecond timer namespace specific and allow 'always enabled' output: #408
  • Use Date#toISOString() instead to Date#toUTCString() when output is not a TTY: #418
  • enabled() updates existing debug instances: #440

Minor Changes

  • Add destroy() function: #440
  • Document enabled flag: #465
  • Support 256 colors: #481
  • Update "browserify" to v14.4.0: 826fd94639efeaa3c5701b50d335caead084a5d6
  • Separate Node.js and web browser examples: 87880f6ae1f48b12d9f3346bce564a66cba6b93e
  • Example: use %o formatter: 31f3343de76cb8687041387a1b811745c6e84473
  • More readme screenshots replaced: 25eb545324912dd2863658d0ba35426c0f617619
  • Add Namespace Colors section to readme: 8b5c438a222167bd0cc66db046bac073f01b3c01
  • Separate the Node and Browser tests in Travis: f178d861df18abacac6e9e4607c7306a1147bf3d

Patches

  • Readme: fix typo: #473
  • Component: update "ms" to v2.0.0: d2dd80aeaf1b037f0b3be21838c4594bbedc4a9c

Credits

... (truncated)

Changelog

Sourced from debug's changelog.

3.1.0 / 2017-09-26

  • Add DEBUG_HIDE_DATE env var (#486)
  • Remove ReDoS regexp in %o formatter (#504)
  • Remove "component" from package.json
  • Remove component.json
  • Ignore package-lock.json
  • Examples: fix colors printout
  • Fix: browser detection
  • Fix: spelling mistake (#496, @​EdwardBetts)

3.0.1 / 2017-08-24

  • Fix: Disable colors in Edge and Internet Explorer (#489)

3.0.0 / 2017-08-08

  • Breaking: Remove DEBUG_FD (#406)
  • Breaking: Use Date#toISOString() instead to Date#toUTCString() when output is not a TTY (#418)
  • Breaking: Make millisecond timer namespace specific and allow 'always enabled' output (#408)
  • Addition: document enabled flag (#465)
  • Addition: add 256 colors mode (#481)
  • Addition: enabled() updates existing debug instances, add destroy() function (#440)
  • Update: component: update "ms" to v2.0.0
  • Update: separate the Node and Browser tests in Travis-CI
  • Update: refactor Readme, fixed documentation, added "Namespace Colors" section, redid screenshots
  • Update: separate Node.js and web browser examples for organization
  • Update: update "browserify" to v14.4.0
  • Fix: fix Readme typo (#473)

2.6.9 / 2017-09-22

  • remove ReDoS regexp in %o formatter (#504)

2.6.8 / 2017-05-18

2.6.7 / 2017-05-16

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by tootallnate, a new releaser for debug since your current version.


Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

  • Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

  • Switch to GitHub workflows 76abc93
  • Fix issue where decode throws - fixes #6 746ca5d
  • Update license (#1) 486d7e2
  • Tidelift tasks a650457
  • Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

Updates minimist from 1.2.0 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

  • Merge tag 'v0.2.3' a026794
  • [eslint] fix indentation and whitespace 5368ca4
  • [eslint] fix indentation and whitespace e5f5067
  • [eslint] more cleanup 62fde7d
  • [eslint] more cleanup 36ac5d0
  • [meta] add auto-changelog 73923d2
  • [actions] add reusable workflows d80727d
  • [eslint] add eslint; rules to enable later are warnings 48bc06a
  • [eslint] fix indentation 34b0f1c
  • [readme] rename and add badges 5df0fe4
  • [Dev Deps] switch from covert to nyc a48b128
  • [Dev Deps] update covert, tape; remove unnecessary tap f0fb958
  • [meta] create FUNDING.yml; add funding in package.json 3639e0c
  • [meta] use npmignore to autogenerate an npmignore file be2e038
  • Only apps should have lockfiles

@dependabot
Bump the npm_and_yarn group across 2 directories with 16 updates
73fcd25 
Bumps the npm_and_yarn group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rollup](https://github.com/rollup/rollup) | `0.57.1` | `2.80.0` |
| [atob](https://github.com/coolaj86/node-browser-compat) | `1.1.3` | `2.1.2` |
| [concat-with-sourcemaps](https://github.com/floridoo/concat-with-sourcemaps) | `1.0.5` | `1.1.0` |
| [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` |
| [ecstatic](https://github.com/jfhbrook/node-ecstatic) | `3.2.0` | `removed` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.5` |

Bumps the npm_and_yarn group with 9 updates in the /src/flvass2mkv directory:

| Package | From | To |
| --- | --- | --- |
| [rollup](https://github.com/rollup/rollup) | `0.57.1` | `2.80.0` |
| [atob](https://github.com/coolaj86/node-browser-compat) | `2.0.3` | `2.1.2` |
| [debug](https://github.com/debug-js/debug) | `0.7.4` | `3.1.0` |
| [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` |
| [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.8` |
| [minimatch](https://github.com/isaacs/minimatch) | `0.2.14` | `removed` |
| [randomatic](https://github.com/jonschlinkert/randomatic) | `1.1.7` | `3.1.1` |
| [bl](https://github.com/rvagg/bl) | `1.2.1` | `1.2.3` |
| [lodash.merge](https://github.com/lodash/lodash) | `4.6.1` | `4.6.2` |



Updates `rollup` from 0.57.1 to 2.80.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/v2.80.0/CHANGELOG.md)
- [Commits](rollup/rollup@v0.57.1...v2.80.0)

Updates `atob` from 1.1.3 to 2.1.2
- [Commits](https://github.com/coolaj86/node-browser-compat/commits)

Updates `braces` from 1.8.5 to 2.3.1
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@1.8.5...2.3.1)

Updates `concat-with-sourcemaps` from 1.0.5 to 1.1.0
- [Commits](https://github.com/floridoo/concat-with-sourcemaps/commits)

Updates `decode-uri-component` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

Removes `ecstatic`

Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)

Updates `lodash` from 1.0.2 to 4.17.5
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@1.0.2...4.17.5)

Updates `http-proxy` from 1.16.2 to 1.18.1
- [Release notes](https://github.com/http-party/node-http-proxy/releases)
- [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md)
- [Commits](http-party/node-http-proxy@1.16.2...1.18.1)

Updates `ini` from 1.3.5 to 1.3.8
- [Release notes](https://github.com/npm/ini/releases)
- [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md)
- [Commits](npm/ini@v1.3.5...v1.3.8)

Updates `qs` from 2.3.3 to 6.15.0
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v2.3.3...v6.15.0)

Updates `rollup` from 0.57.1 to 2.80.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/v2.80.0/CHANGELOG.md)
- [Commits](rollup/rollup@v0.57.1...v2.80.0)

Updates `atob` from 2.0.3 to 2.1.2
- [Commits](https://github.com/coolaj86/node-browser-compat/commits)

Updates `debug` from 0.7.4 to 3.1.0
- [Release notes](https://github.com/debug-js/debug/releases)
- [Changelog](https://github.com/debug-js/debug/blob/3.1.0/CHANGELOG.md)
- [Commits](debug-js/debug@0.7.4...3.1.0)

Updates `decode-uri-component` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

Updates `minimist` from 1.2.0 to 1.2.8
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.0...v1.2.8)

Removes `minimatch`

Updates `ini` from 1.3.5 to 1.3.8
- [Release notes](https://github.com/npm/ini/releases)
- [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md)
- [Commits](npm/ini@v1.3.5...v1.3.8)

Updates `randomatic` from 1.1.7 to 3.1.1
- [Release notes](https://github.com/jonschlinkert/randomatic/releases)
- [Commits](jonschlinkert/randomatic@1.1.7...3.1.1)

Updates `bl` from 1.2.1 to 1.2.3
- [Release notes](https://github.com/rvagg/bl/releases)
- [Changelog](https://github.com/rvagg/bl/blob/master/CHANGELOG.md)
- [Commits](rvagg/bl@v1.2.1...v1.2.3)

Updates `lodash.merge` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 2.80.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: atob
  dependency-version: 2.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 2.3.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: concat-with-sourcemaps
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: decode-uri-component
  dependency-version: 0.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ecstatic
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-proxy
  dependency-version: 1.18.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ini
  dependency-version: 1.3.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-version: 2.80.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: atob
  dependency-version: 2.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-version: 3.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: decode-uri-component
  dependency-version: 0.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimist
  dependency-version: 1.2.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ini
  dependency-version: 1.3.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: randomatic
  dependency-version: 3.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: bl
  dependency-version: 1.2.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash.merge
  dependency-version: 4.6.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 2, 2026
This was referenced Apr 2, 2026
Closed
Closed
Closed
Closed

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants