Skip to content

Build(deps): Bump the npm-dependencies group across 1 directory with 13 updates - #141

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-b29b969568
Open

Build(deps): Bump the npm-dependencies group across 1 directory with 13 updates#141
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-b29b969568

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 11 updates in the / directory:

Package From To
ansi-styles 6.2.3 7.0.0
baseline-browser-mapping 2.10.43 2.11.12
browserslist 4.28.6 4.28.7
color-name 2.1.0 2.1.1
fs-extra 11.3.6 11.4.0
nanoid 6.0.0 6.0.1
node-releases 2.0.51 2.0.53
readdirp 5.0.0 5.1.1
yargs 18.0.0 18.1.0
autoprefixer 10.5.2 10.5.4
postcss 8.5.18 8.5.26

Updates ansi-styles from 6.2.3 to 7.0.0

Release notes

Sourced from ansi-styles's releases.

v7.0.0

Breaking

  • Require Node.js 22 802582c

Improvements

  • Add extended underline styles and underline colors af41a9e

chalk/ansi-styles@v6.2.3...v7.0.0

Commits

Updates baseline-browser-mapping from 2.10.43 to 2.11.12

Release notes

Sourced from baseline-browser-mapping's releases.

v2.11.0

What's Changed in 2.11.0

  • feat: Adds a new getTimeline() method for getting the series of minimum browser changes, either grouped by date or by browser.
  • refactor: Substantial refactoring of the data compression process that replaces the full list of browsers from @mdn/browser-compat-data and downstream-browsers.json and features from web-features (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date. Thanks to @​swwind for the idea!
  • refactor: Some common functions have been moved to a util.ts module for use in other scripts.
  • fix: Removes process.exit() calls when unsupported option combinations are passed to getCompatibleVersions() and getAllVersions() in favour of throwing an Error. There is a small security risk with process.exit() calls that sites accepting unsanitised inputs could be the subject of attacks. Unsupported config options now throw and Error which should allow for more graceful handling. Thanks to @​bnbdr for flagging this as vulnerability CVE-2026-45819 .

Fixes #134

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.10.44...v2.11.0

v2.9.3 - remove process.loadEnvFile()

What's Changed

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

Commits
  • cc4ecd6 Patch to 2.11.12 because browser or feature data changed
  • fef63fc Browser or feature data changed
  • c224f33 Patch to 2.11.11 because browser or feature data changed
  • bf8e2fb Browser or feature data changed
  • c1ade64 Updating static site
  • 5137e40 Patch to 2.11.10 because browser or feature data changed
  • d298f41 Browser or feature data changed
  • 89dd914 Patch to 2.11.9 because browser or feature data changed
  • cb95a74 Browser or feature data changed
  • f61d3d4 Patch to 2.11.8 because browser or feature data changed
  • Additional commits viewable in compare view

Updates browserslist from 4.28.6 to 4.28.7

Release notes

Sourced from browserslist's releases.

4.28.7

Changelog

Sourced from browserslist's changelog.

4.28.7

Commits

Updates caniuse-lite from 1.0.30001805 to 1.0.30001809

Commits

Updates color-name from 2.1.0 to 2.1.1

Commits

Updates electron-to-chromium from 1.5.389 to 1.5.403

Commits

Updates fs-extra from 11.3.6 to 11.4.0

Changelog

Sourced from fs-extra's changelog.

11.4.0 / 2026-07-23

  • Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#925, #1076)
Commits

Updates nanoid from 6.0.0 to 6.0.1

Release notes

Sourced from nanoid's releases.

6.0.1

  • Fixed docs.
Changelog

Sourced from nanoid's changelog.

6.0.1

  • Fixed docs.
Commits

Updates node-releases from 2.0.51 to 2.0.53

Commits

Updates readdirp from 5.0.0 to 5.1.1

Release notes

Sourced from readdirp's releases.

5.1.1

Speed-up massively, reduce RAM usage. 280k files: 2.8s => 1.1s, 76mb ram => 43mb. Fix a few stability issues.

5.1.0

Speed-up massively, reduce RAM usage. 280k files: 2.8s => 1.1s, 76mb ram => 43mb. Fix a few stability issues.

Commits

Updates yargs from 18.0.0 to 18.1.0

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

  • ignore bun when getting bin name (b77831c)

Bug Fixes

  • lang: 'count' for de locale (#2476) (971e351)
  • local prototype pollution vulnerability in apply-extends (437f3a4)
  • locale: add Georgian translation (#2474) (086aeaa)

17.7.3 (2026-06-19)

Bug Fixes

  • fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

  • fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)
Commits
Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.


Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

Commits

Updates postcss from 8.5.18 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Build(deps): Bump the npm-dependencies group across 1 directory with …
0b1f7d5 
…13 updates

Bumps the npm-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ansi-styles](https://github.com/chalk/ansi-styles) | `6.2.3` | `7.0.0` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.43` | `2.11.12` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.6` | `4.28.7` |
| [color-name](https://github.com/colorjs/color-name) | `2.1.0` | `2.1.1` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.6` | `11.4.0` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.0` | `6.0.1` |
| [node-releases](https://github.com/chicoxyzzy/node-releases) | `2.0.51` | `2.0.53` |
| [readdirp](https://github.com/paulmillr/readdirp) | `5.0.0` | `5.1.1` |
| [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.1.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.5.4` |
| [postcss](https://github.com/postcss/postcss) | `8.5.18` | `8.5.26` |



Updates `ansi-styles` from 6.2.3 to 7.0.0
- [Release notes](https://github.com/chalk/ansi-styles/releases)
- [Commits](chalk/ansi-styles@v6.2.3...v7.0.0)

Updates `baseline-browser-mapping` from 2.10.43 to 2.11.12
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.10.43...v2.11.12)

Updates `browserslist` from 4.28.6 to 4.28.7
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.6...4.28.7)

Updates `caniuse-lite` from 1.0.30001805 to 1.0.30001809
- [Commits](browserslist/caniuse-lite@1.0.30001805...1.0.30001809)

Updates `color-name` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/colorjs/color-name/releases)
- [Commits](https://github.com/colorjs/color-name/commits)

Updates `electron-to-chromium` from 1.5.389 to 1.5.403
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.389...v1.5.403)

Updates `fs-extra` from 11.3.6 to 11.4.0
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.6...11.4.0)

Updates `nanoid` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.0...6.0.1)

Updates `node-releases` from 2.0.51 to 2.0.53
- [Commits](chicoxyzzy/node-releases@v2.0.51...v2.0.53)

Updates `readdirp` from 5.0.0 to 5.1.1
- [Release notes](https://github.com/paulmillr/readdirp/releases)
- [Commits](paulmillr/readdirp@5.0.0...5.1.1)

Updates `yargs` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.1.0)

Updates `autoprefixer` from 10.5.2 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.5.4)

Updates `postcss` from 8.5.18 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.18...8.5.26)

---
updated-dependencies:
- dependency-name: ansi-styles
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: browserslist
  dependency-version: 4.28.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001809
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: color-name
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: electron-to-chromium
  dependency-version: 1.5.403
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fs-extra
  dependency-version: 11.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: node-releases
  dependency-version: 2.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: readdirp
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies npm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants