From 680e559cc7b50084654f3c27cffd7202d260ebfa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 13 Oct 2026 11:26:08 +0000 Subject: [PATCH] deps: Bump the npm group across 1 directory with 3 updates Bumps the npm group with 3 updates in the / directory: [js-yaml](https://github.com/nodeca/js-yaml), [resolve](https://github.com/browserify/resolve) and [express](https://github.com/expressjs/express). Updates `js-yaml` from 5.4.2 to 5.4.3 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/5.4.2...5.4.3) Updates `resolve` from 1.22.12 to 1.22.13 - [Commits](https://github.com/browserify/resolve/compare/v1.22.12...v1.22.13) Updates `express` from 5.2.1 to 5.3.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](https://github.com/expressjs/express/compare/v5.2.1...v5.3.0) --- updated-dependencies: - dependency-name: express dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: js-yaml dependency-version: 5.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: resolve dependency-version: 1.22.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] --- internal/benchmark/package.json | 2 +- package-lock.json | 77 +++++++++++++++------------------ packages/cli/package.json | 2 +- packages/project/package.json | 4 +- packages/server/package.json | 2 +- 5 files changed, 39 insertions(+), 48 deletions(-) diff --git a/internal/benchmark/package.json b/internal/benchmark/package.json index 2a53a47789f..cbcd4ede43e 100644 --- a/internal/benchmark/package.json +++ b/internal/benchmark/package.json @@ -19,6 +19,6 @@ }, "devDependencies": { "eslint": "^10.11.0", - "js-yaml": "^5.4.2" + "js-yaml": "^5.4.3" } } diff --git a/package-lock.json b/package-lock.json index 2b5657bd7e6..95626ef629c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -40,7 +40,7 @@ }, "devDependencies": { "eslint": "^10.11.0", - "js-yaml": "^5.4.2" + "js-yaml": "^5.4.3" }, "engines": { "node": "^22.22.2 || ^24.15.0 || >=26.0.0", @@ -48,9 +48,9 @@ } }, "internal/benchmark/node_modules/js-yaml": { - "version": "5.4.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz", - "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==", + "version": "5.4.3", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.3.tgz", + "integrity": "sha512-yzzNtgczwgoVHNigCyKTXcQJU4Y8t/ikU4UxXW0BvrLfHTGWZhsNcOT2s/a7vn81/4KqVnNmHjaUEPlvWnNwVw==", "dev": true, "funding": [ { @@ -7420,9 +7420,9 @@ } }, "node_modules/content-disposition": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz", - "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==", + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-2.0.1.tgz", + "integrity": "sha512-e+H0ZXHSWYrENhQzw1LPuP4oF5MzVKmDU6d3hxlvaPEYLLg62MxtQNPRx4SYSuYJSBUgnQIG4HIN2tEtNv7Dog==", "license": "MIT", "engines": { "node": ">=18" @@ -9222,15 +9222,15 @@ "license": "Apache-2.0" }, "node_modules/express": { - "version": "5.2.1", - "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz", - "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==", + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/express/-/express-5.3.0.tgz", + "integrity": "sha512-qCqy1xSoaugxOD4IVHb1ZWdkvCF2W3aE2okKouWj8VwJ+ztskSiXoBnCSJqfKT+cVPJhuJqe9YLbY425+Zh00g==", "license": "MIT", "dependencies": { "accepts": "^2.0.0", - "body-parser": "^2.2.1", - "content-disposition": "^1.0.0", - "content-type": "^1.0.5", + "body-parser": "^2.3.0", + "content-disposition": "^2.0.1", + "content-type": "^2.0.0", "cookie": "^0.7.1", "cookie-signature": "^1.2.1", "debug": "^4.4.0", @@ -9246,14 +9246,14 @@ "on-finished": "^2.4.1", "once": "^1.4.0", "parseurl": "^1.3.3", - "proxy-addr": "^2.0.7", - "qs": "^6.14.0", + "proxy-addr": "^2.0.8", + "qs": "^6.16.0", "range-parser": "^1.2.1", "router": "^2.2.0", "send": "^1.1.0", "serve-static": "^2.2.0", "statuses": "^2.0.1", - "type-is": "^2.0.1", + "type-is": "^2.1.0", "vary": "^1.1.2" }, "engines": { @@ -9264,15 +9264,6 @@ "url": "https://opencollective.com/express" } }, - "node_modules/express/node_modules/content-type": { - "version": "1.0.5", - "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz", - "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==", - "license": "MIT", - "engines": { - "node": ">= 0.6" - } - }, "node_modules/express/node_modules/fresh": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz", @@ -10740,12 +10731,12 @@ } }, "node_modules/is-core-module": { - "version": "2.16.2", - "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.2.tgz", - "integrity": "sha512-evOr8xfXKxE6qSR0hSXL2r3sd7ALj8+7jQEUvPYcm5sgZFdJ+AYzT6yNmJenvIYQBgIGwfwz08sL8zoL7yq2BA==", + "version": "2.17.0", + "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.17.0.tgz", + "integrity": "sha512-J/vG0zBCbIKOQFfufSwyXdMrsohyJIUNkrnmo6WZGzoM7tr/lsbfW5b2BvisL6zsyMzK9UxV9L6c7AoFbyXHOA==", "license": "MIT", "dependencies": { - "hasown": "^2.0.3" + "hasown": "^2.0.4" }, "engines": { "node": ">= 0.4" @@ -15350,13 +15341,13 @@ } }, "node_modules/resolve": { - "version": "1.22.12", - "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.12.tgz", - "integrity": "sha512-TyeJ1zif53BPfHootBGwPRYT1RUt6oGWsaQr8UyZW/eAm9bKoijtvruSDEmZHm92CwS9nj7/fWttqPCgzep8CA==", + "version": "1.22.13", + "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.13.tgz", + "integrity": "sha512-Dj/cW9zBV2aRj6XzCxuGIs3ESZKv02jixne3q6jFZYZ3/Tg09gHHviSMDL4kObh9pqSahdRHEnDoaP2gn8YLhA==", "license": "MIT", "dependencies": { "es-errors": "^1.3.0", - "is-core-module": "^2.16.1", + "is-core-module": "^2.17.0", "path-parse": "^1.0.7", "supports-preserve-symlinks-flag": "^1.0.0" }, @@ -18558,7 +18549,7 @@ "chalk": "^6.0.1", "data-with-position": "^0.5.0", "import-local": "^3.2.0", - "js-yaml": "^5.4.2", + "js-yaml": "^5.4.3", "open": "^11.0.4", "pretty-hrtime": "^1.0.3", "semver": "^7.8.5", @@ -18614,9 +18605,9 @@ } }, "packages/cli/node_modules/js-yaml": { - "version": "5.4.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz", - "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==", + "version": "5.4.3", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.3.tgz", + "integrity": "sha512-yzzNtgczwgoVHNigCyKTXcQJU4Y8t/ikU4UxXW0BvrLfHTGWZhsNcOT2s/a7vn81/4KqVnNmHjaUEPlvWnNwVw==", "funding": [ { "type": "github", @@ -18800,7 +18791,7 @@ "escape-string-regexp": "^5.0.0", "globby": "^16.2.4", "graceful-fs": "^4.2.11", - "js-yaml": "^5.4.2", + "js-yaml": "^5.4.3", "lockfile": "^1.0.4", "make-fetch-happen": "^16.0.1", "micromatch": "^4.0.8", @@ -18809,7 +18800,7 @@ "pretty-hrtime": "^1.0.3", "read-package-up": "^12.0.0", "read-pkg": "^10.1.0", - "resolve": "^1.22.12", + "resolve": "^1.22.13", "semver": "^7.8.5", "xml2js": "^0.6.2", "yesno": "^0.4.0" @@ -19172,9 +19163,9 @@ } }, "packages/project/node_modules/js-yaml": { - "version": "5.4.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz", - "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==", + "version": "5.4.3", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.3.tgz", + "integrity": "sha512-yzzNtgczwgoVHNigCyKTXcQJU4Y8t/ikU4UxXW0BvrLfHTGWZhsNcOT2s/a7vn81/4KqVnNmHjaUEPlvWnNwVw==", "funding": [ { "type": "github", @@ -19530,7 +19521,7 @@ "devcert-sanscache": "^0.5.1", "escape-html": "^1.0.3", "etag": "^1.8.1", - "express": "^5.2.1", + "express": "^5.3.0", "fresh": "^0.5.2", "graceful-fs": "^4.2.11", "mime-types": "^3.0.2", diff --git a/packages/cli/package.json b/packages/cli/package.json index 75e8c8d319e..056298f046f 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -58,7 +58,7 @@ "chalk": "^6.0.1", "data-with-position": "^0.5.0", "import-local": "^3.2.0", - "js-yaml": "^5.4.2", + "js-yaml": "^5.4.3", "open": "^11.0.4", "pretty-hrtime": "^1.0.3", "semver": "^7.8.5", diff --git a/packages/project/package.json b/packages/project/package.json index 2181c706fb7..d417f94411b 100644 --- a/packages/project/package.json +++ b/packages/project/package.json @@ -70,7 +70,7 @@ "escape-string-regexp": "^5.0.0", "globby": "^16.2.4", "graceful-fs": "^4.2.11", - "js-yaml": "^5.4.2", + "js-yaml": "^5.4.3", "lockfile": "^1.0.4", "make-fetch-happen": "^16.0.1", "micromatch": "^4.0.8", @@ -79,7 +79,7 @@ "pretty-hrtime": "^1.0.3", "read-package-up": "^12.0.0", "read-pkg": "^10.1.0", - "resolve": "^1.22.12", + "resolve": "^1.22.13", "semver": "^7.8.5", "xml2js": "^0.6.2", "yesno": "^0.4.0" diff --git a/packages/server/package.json b/packages/server/package.json index cc47945571b..d78dd121fc2 100644 --- a/packages/server/package.json +++ b/packages/server/package.json @@ -94,7 +94,7 @@ "devcert-sanscache": "^0.5.1", "escape-html": "^1.0.3", "etag": "^1.8.1", - "express": "^5.2.1", + "express": "^5.3.0", "fresh": "^0.5.2", "graceful-fs": "^4.2.11", "mime-types": "^3.0.2",