Skip to content

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates#1

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-89d6af22f7
Open

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-89d6af22f7

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 18, 2025

Bumps the npm_and_yarn group with 11 updates in the / directory:

Package From To
tsup 8.0.2 8.3.5
@babel/runtime 7.23.9 7.26.10
base-x 3.0.9 3.0.11
braces 3.0.2 3.0.3
cipher-base 1.0.4 1.0.7
form-data 3.0.1 3.0.4
js-yaml 3.14.1 3.14.2
path-to-regexp 1.8.0 1.9.0
pbkdf2 3.1.2 3.1.5
ses 1.1.0 1.14.0
sha.js 2.4.11 2.4.12

Updates tsup from 8.0.2 to 8.3.5

Release notes

Sourced from tsup's releases.

v8.3.5

   🐞 Bug Fixes

    View changes on GitHub

v8.3.4

No significant changes

    View changes on GitHub

v8.3.3

No significant changes

    View changes on GitHub

v8.3.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v8.3.0

8.3.0 (2024-09-17)

Bug Fixes

  • fix experimentalDts file cleaning and watching (#1199) (76dc18b)

Features

v8.2.4

8.2.4 (2024-08-02)

... (truncated)

Commits

Updates @babel/runtime from 7.23.9 to 7.26.10

Release notes

Sourced from @​babel/runtime's releases.

v7.26.10 (2025-03-11)

Thanks @​jordan-choi and @​mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

Committers: 6

v7.26.9 (2025-02-14)

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​babel/runtime's changelog.

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

  • babel-helpers, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-transform-typeof-symbol

... (truncated)

Commits

Updates base-x from 3.0.9 to 3.0.11

Commits

Updates braces from 3.0.2 to 3.0.3

Commits

Updates cipher-base from 1.0.4 to 1.0.7

Changelog

Sourced from cipher-base's changelog.

v1.0.7 - 2025-09-24

Commits

  • [Refactor] use to-buffer fd1e5ee
  • [Dev Deps] update @ljharb/eslint-config 08ba803

v1.0.6 - 2024-11-26

Commits

  • [Fix] io.js 3.0 - Node.js 5.3 typed array support b7ddd2a

v1.0.5 - 2024-11-17

Commits

  • [Tests] standard -> eslint, make test dir, etc ae02fd6
  • [Tests] migrate from travis to GHA 66387d7
  • [meta] fix package.json indentation 5c02918
  • [Fix] return valid values on multi-byte-wide TypedArray input 8fd1364
  • [meta] add auto-changelog 88dc806
  • [meta] add npmignore and safe-publish-latest 7a137d7
  • Only apps should have lockfiles 42528f2
  • [Deps] update inherits, safe-buffer 0e7a2d9
  • [meta] add missing engines.node f2dc13e
Commits
  • 0056718 v1.0.7
  • fd1e5ee [Refactor] use to-buffer
  • 08ba803 [Dev Deps] update @ljharb/eslint-config
  • f5249f9 v1.0.6
  • b7ddd2a [Fix] io.js 3.0 - Node.js 5.3 typed array support
  • f03cebf v1.0.5
  • 88dc806 [meta] add auto-changelog
  • 7a137d7 [meta] add npmignore and safe-publish-latest
  • 5c02918 [meta] fix package.json indentation
  • 8fd1364 [Fix] return valid values on multi-byte-wide TypedArray input
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for cipher-base since your current version.


Updates esbuild from 0.19.12 to 0.27.0

Release notes

Sourced from esbuild's releases.

v0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

  • Use Uint8Array.fromBase64 if available (#4286)

    With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

  • Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

    This raises the operating system requirements for running esbuild:

    • Linux: now requires a kernel version of 3.2 or later
    • macOS: now requires macOS 12 (Monterey) or later

v0.26.0

  • Enable trusted publishing (#4281)

    GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

    Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

v0.25.12

  • Fix a minification regression with CSS media queries (#4315)

    The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.

  • Update the list of known JavaScript globals (#4310)

    This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

    From ES2017:

    • Atomics
    • SharedArrayBuffer

    From ES2020:

    • BigInt64Array
    • BigUint64Array

    From ES2021:

    • FinalizationRegistry
    • WeakRef

    From ES2025:

    • Float16Array
    • Iterator

    Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:

    // This can now be tree-shaken by esbuild:

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

  • Fix regression with --define and import.meta (#4010, #4012, #4013)

    The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

    This fix was contributed by @​sapphi-red.

0.24.1

  • Allow es2024 as a target in tsconfig.json (#4004)

    TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
  "compilerOptions": {
    "target": "ES2024"
  }
}

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

    This fix was contributed by @​billyjanitsch.

  • Allow automatic semicolon insertion after get/set

    This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

    class Foo {
  get
  *x() {}
  set
  *y() {}
}

    The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

  • Allow quoted property names in --define and --pure (#4008)

    The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

    

    • 






... (truncated)





Commits





Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.






Updates form-data from 3.0.1 to 3.0.4



Release notes

Sourced from form-data's releases.




v3.0.2


Fixes


    

  • npmignore temporary build files (#532)
    • 

  • move util.isArray to Array.isArray (#564)
    • 



Tests


    

  • migrate from travis to GHA
    • 








Changelog

Sourced from form-data's changelog.




v3.0.4 - 2025-07-16


Fixed



Commits


    

  • [eslint] update linting config f5e7eb0
    • 

  • [meta] add auto-changelog d2eb290
    • 

  • [Tests] handle predict-v8-randomness failures in node < 17 and node > 23 e8c574c
    • 

  • [Fix] Switch to using crypto random for boundary values c6ced61
    • 

  • [Refactor] use hasown 1a78b5d
    • 

  • [Fix] validate boundary type in setBoundary() method 70bbaa0
    • 

  • [Tests] add tests to check the behavior of getBoundary with non-strings b22a64e
    • 

  • [meta] actually ensure the readme backup isn’t published 0150851
    • 

  • [meta] remove local commit hooks fc42bb9
    • 

  • [Dev Deps] remove unused deps a14d09e
    • 

  • [meta] fix scripts to use prepublishOnly 11d9f73
    • 

  • [meta] fix readme capitalization fc38b48
    • 



v3.0.3 - 2025-02-14


Merged



Fixed



Commits


    

  • [Refactor] use Object.prototype.hasOwnProperty.call 7fecefe
    • 

  • [Dev Deps] update @types/node, browserify, coveralls, cross-spawn, eslint, formidable, in-publish, pkgfiles, pre-commit, puppeteer, request, tape, typescript 8261fcb
    • 

  • Only apps should have lockfiles b82f590
    • 

  • [Dev Deps] pin request which via tough-cookie ^2.4 depends on psl e5df7f2
    • 

  • [Deps] update mime-types 5a5bafe
    • 



v3.0.2 - 2024-10-10


Merged



Commits


    

  • [Tests] migrate from travis to GHA 8fdb3bc
    • 

  • [eslint] clean up ignores 3217b3d
    • 

  • fix: move util.isArray to Array.isArray (#564) edb555a
    • 








Commits

    

  • 9c82fcd v3.0.4
    • 

  • e8c574c [Tests] handle predict-v8-randomness failures in node < 17 and node > 23
    • 

  • c6ced61 [Fix] Switch to using crypto random for boundary values
    • 

  • 0150851 [meta] actually ensure the readme backup isn’t published
    • 

  • fc38b48 [meta] fix readme capitalization
    • 

  • d2eb290 [meta] add auto-changelog
    • 

  • fc42bb9 [meta] remove local commit hooks
    • 

  • a14d09e [Dev Deps] remove unused deps
    • 

  • 002b9b0 [Fix] append: avoid a crash on nullish values
    • 

  • 70bbaa0 [Fix] validate boundary type in setBoundary() method
    • 

  • Additional commits viewable in compare view
    • 






Maintainer changes

This version was pushed to npm by ljharb, a new releaser for form-data since your current version.






Updates js-yaml from 3.14.1 to 3.14.2



Changelog

Sourced from js-yaml's changelog.




[3.14.2] - 2025-11-15


Security


    

  • Backported v4.1.1 fix to v3
    • 



[4.1.1] - 2025-11-12


Security


    

  • Fix prototype pollution issue in yaml merge (<<) operator.
    • 



[4.1.0] - 2021-04-15


Added


    

  • Types are now exported as yaml.types.XXX.
    • 

  • Every type now has options property with original arguments kept as they were
(see yaml.types.int.options as an example).
    • 



Changed


    

  • Schema.extend() now keeps old type order in case of conflicts
(e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).
    • 



[4.0.0] - 2021-01-03


Changed


    

  • Check migration guide to see details for all breaking changes.
    • 

  • Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are
moved to js-yaml-js-types package.
    • 

  • Breaking: removed safe* functions. Use load, loadAll, dump
instead which are all now safe by default.
    • 

  • yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use
yaml.DEFAULT_SCHEMA instead.
    • 

  • yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
    • 

  • !!binary now always mapped to Uint8Array on load.
    • 

  • Reduced nesting of /lib folder.
    • 

  • Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal,
0o1234 is octal, 1:23 is parsed as string instead of base60).
    • 

  • dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.
    • 

  • Line and column in exceptions are now formatted as (X:Y) instead of
at line X, column Y (also present in compact format), #332.
    • 

  • Code snippet created in exceptions now contains multiple lines with line numbers.
    • 

  • dump() now serializes undefined as null in collections and removes keys with
undefined in mappings, #571.
    • 

  • dump() with skipInvalid=true now serializes invalid items in collections as null.
    • 

  • Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.
    • 

  • Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.
    • 



Added


    

  • Added .mjs (es modules) support.
    • 

  • Added quotingType and forceQuotes options for dumper to configure
string literal style, #290, #529.
    • 

  • Added styles: { '!!null': 'empty' } option for dumper
(serializes { foo: null } as "foo: "), #570.
    • 






... (truncated)





Commits






Updates path-to-regexp from 1.8.0 to 1.9.0



Release notes

Sourced from path-to-regexp's releases.




Fix backtracking in 1.x


Fixed


    

  • Add backtrack protection to 1.x release (#320)  925ac8e
    • 

  • Fix re.exec(&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);/test/route&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);) result (#267)  32a14b0
    • 



pillarjs/path-to-regexp@v1.8.0...v1.9.0







Commits






Updates pbkdf2 from 3.1.2 to 3.1.5



Changelog

Sourced from pbkdf2's changelog.




v3.1.5 - 2025-09-23


Commits


    

  • [Fix] only allow finite iterations 67bd94d
    • 

  • [Fix] restore node 0.10 support 8f59d96
    • 

  • [Fix] check parameters before the "no Promise" bailout d2dc5f0
    • 



v3.1.4 - 2025-09-22


Commits


    

  • [Deps] update create-hash, ripemd160, sha.js, to-buffer 8dbf49b
    • 

  • [meta] update repo URLs d15bc35
    • 

  • [Dev Deps] update @ljharb/eslint-config aaf870b
    • 



v3.1.3 - 2025-06-20


Commits


    

  • Only apps should have lockfiles 8b06730
    • 

  • [lint] fix whitespace 9a76e2f
    • 

  • [lint] fix parens/curlies/semis/etc 6fd84bf
    • 

  • [meta] add auto-changelog 796c38d
    • 

  • [Tests] fix tests in node 17 3661fb0
    • 

  • Revert "[Tests] fix tests in node < 3" 7431b57
    • 

  • [Tests] fix tests in node < 3 eb9f97a
    • 

  • [Fix] ensure unknown algorithms throw + known ones match node 26d4fd3
    • 

  • [Tests] add GHA, always run nyc 513906a
    • 

  • [lint] fix a few more rules ab04da8
    • 

  • [lint] switch to eslint 89694cf
    • 

  • [Tests] add coverage d0d534b
    • 

  • [Refactor] use to-buffer e3102a8
    • 

  • [readme] improve badges fca0c9d
    • 

  • [Tests] remove unused travis file a2c7d93
    • 

  • [meta] switch from files to npmignore 7f31fbc
    • 

  • [Tests] use .nycrc 8d628e8
    • 

  • [Refactor] minor tweaks fc61005
    • 

  • [Deps] update create-hmac, safe-buffer, sha.js ae2a7d0
    • 

  • [Fix] pin create-hash, ripemd160 due to breaking changes e079968
    • 

  • [Tests] fix tests in node 3 45fbcf3
    • 

  • [meta] skip publishing benchmarks 19ea57b
    • 

  • [Dev Deps] add missing peer dep 645e252
    • 








Commits

    

  • 3687905 v3.1.5
    • 

  • 67bd94d [Fix] only allow finite iterations
    • 

  • 8f59d96 [Fix] restore node 0.10 support
    • 

  • d2dc5f0 [Fix] check parameters before the "no Promise" bailout
    • 

  • b2ad615 v3.1.4
    • 

  • 8dbf49b [Deps] update create-hash, ripemd160, sha.js, to-buffer
    • 

  • aaf870b [Dev Deps] update @ljharb/eslint-config
    • 

  • d15bc35 [meta] update repo URLs
    • 

  • 3e40827 v3.1.3
    • 

  • e3102a8 [Refactor] use to-buffer
    • 

  • Additional commits viewable in compare view
    • 






Maintainer changes

This version was pushed to npm by ljharb, a new releaser for pbkdf2 since your current version.






Updates rollup from 4.12.0 to 4.53.2



Release notes

Sourced from rollup's releases.




v4.53.2


4.53.2


2025-11-10


Bug Fixes


    

  • Do not throw when using invalid escape sequences in template literals (#6177)
    • 



Pull Requests



v4.53.1


4.53.1


2025-11-07


Bug Fixes


    

  • Fix install script (#6172)
    • 



Pull Requests


    

  • #6172: fix: move patch-package from postinstall to prepare script (@​mshima)
    • 



v4.53.0


4.53.0


2025-11-07


Features


    

  • Improve rendering performance by caching generated variable names (#5947)
    • 



Pull Requests



    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

      
        @dependabot
  




      

        
          chore(deps): bump the npm_and_yarn group across 1 directory with 13 u…
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          f4c6570
        
      

    

  

    

      
…pdates

Bumps the npm_and_yarn group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tsup](https://github.com/egoist/tsup) | `8.0.2` | `8.3.5` |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.23.9` | `7.26.10` |
| [base-x](https://github.com/cryptocoinjs/base-x) | `3.0.9` | `3.0.11` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.7` |
| [form-data](https://github.com/form-data/form-data) | `3.0.1` | `3.0.4` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `1.8.0` | `1.9.0` |
| [pbkdf2](https://github.com/browserify/pbkdf2) | `3.1.2` | `3.1.5` |
| [ses](https://github.com/endojs/endo/tree/HEAD/packages/ses) | `1.1.0` | `1.14.0` |
| [sha.js](https://github.com/crypto-browserify/sha.js) | `2.4.11` | `2.4.12` |



Updates `tsup` from 8.0.2 to 8.3.5
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.0.2...v8.3.5)

Updates `@babel/runtime` from 7.23.9 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime)

Updates `base-x` from 3.0.9 to 3.0.11
- [Commits](cryptocoinjs/base-x@v3.0.9...v3.0.11)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cipher-base` from 1.0.4 to 1.0.7
- [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md)
- [Commits](browserify/cipher-base@v1.0.4...v1.0.7)

Updates `esbuild` from 0.19.12 to 0.27.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.19.12...v0.27.0)

Updates `form-data` from 3.0.1 to 3.0.4
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v3.0.1...v3.0.4)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.14.2)

Updates `path-to-regexp` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v1.8.0...v1.9.0)

Updates `pbkdf2` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md)
- [Commits](browserify/pbkdf2@v3.1.2...v3.1.5)

Updates `rollup` from 4.12.0 to 4.53.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.12.0...v4.53.2)

Updates `ses` from 1.1.0 to 1.14.0
- [Release notes](https://github.com/endojs/endo/releases)
- [Changelog](https://github.com/endojs/endo/blob/master/packages/ses/CHANGELOG.md)
- [Commits](https://github.com/endojs/endo/commits/ses@1.14.0/packages/ses)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

---
updated-dependencies:
- dependency-name: tsup
  dependency-version: 8.3.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-version: 7.26.10
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: base-x
  dependency-version: 3.0.11
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cipher-base
  dependency-version: 1.0.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.27.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: form-data
  dependency-version: 3.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-version: 1.9.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: pbkdf2
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-version: 4.53.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ses
  dependency-version: 1.14.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Nov 18, 2025

    

  












  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews






    
    

    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
      

  

    

      0 participants