Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 11 updates #905

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 3 commits into
base: main
Choose a base branch
from
Open

chore(deps): bump the npm-dependencies group across 1 directory with 11 updates #905

dependabot wants to merge 3 commits into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps the npm-dependencies group with 11 updates in the / directory:

Package From To
@apidevtools/json-schema-ref-parser 15.2.1 15.2.2
axios 1.13.2 1.13.3
cors 2.8.5 2.8.6
express-openapi-validator 5.6.1 5.6.2
lodash 4.17.21 4.17.23
zod 4.3.5 4.3.6
@typescript-eslint/eslint-plugin 8.53.0 8.53.1
@typescript-eslint/parser 8.53.0 8.53.1
cspell 9.6.0 9.6.2
globals 17.0.0 17.1.0
prettier 3.8.0 3.8.1

Updates @apidevtools/json-schema-ref-parser from 15.2.1 to 15.2.2

Release notes

Sourced from @​apidevtools/json-schema-ref-parser's releases.

v15.2.2

15.2.2 (2026-01-24)

Bug Fixes

  • circular: call onCircular callback for all occurrences of circular $refs (#408) (78b3323)
Commits
  • 78b3323 fix(circular): call onCircular callback for all occurrences of circular $refs...
  • 037d93e chore(deps): bump deps
  • See full diff in compare view

Updates axios from 1.13.2 to 1.13.3

Release notes

Sourced from axios's releases.

Release v1.13.3

Release notes:

Bug Fixes

  • http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
  • turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

Reverts

  • Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
  • deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.13.3 (2026-01-20)

Bug Fixes

  • http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
  • turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

Reverts

  • Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
  • deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

... (truncated)

Commits
  • ab06109 chore(release): v1.13.3 (#7335)
  • 2d6ad5e revert(deps): bump peter-evans/create-pull-request from 7 to 8 in the github-...
  • cb49a6f chore(sponsor): update sponsor block (#7330)
  • d8233d9 fix(types): restore AxiosError.cause type from unknown to Error (#7327)
  • 5945e40 fix(interceptor): handle the error in the same interceptor (#6269)
  • 7373fbf fix: main field in package.json should correspond to cjs artifacts (#5756)
  • 8d1271b fix(types): add handlers to AxiosInterceptorManager interface (#5551)
  • f869434 docs: refresh CDN URLs and example JSON headers (#7236)
  • 46db331 doc: update deprecated var usage in documentation examples (#7246)
  • d6bbb3d docs: add async/await timeout handling example (#7250)
  • Additional commits viewable in compare view

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.


Updates express-openapi-validator from 5.6.1 to 5.6.2

Release notes

Sourced from express-openapi-validator's releases.

v5.6.2

(2026-01-20)

  • upgrades multer from 1.x to 2.0.0, impacting multer.ErrorCodes type (now ErrorCode) (d9da257)
  • v5.6.1 (3ea686d)
  • v5.6.1 (58e7a16)
  • v5.6.1 (0acdd7a)
  • v5.6.2 (f6953b6)
  • chore(deps): bump body-parser in /examples/1-standard (8271f2c)
  • chore(deps): bump js-yaml in /examples/4-eov-operations-babel (02f35a3)
  • chore(deps): bump multer in /examples/6-multi-file-spec (38af363)
  • chore(deps): bump on-headers and morgan in /examples/6-multi-file-spec (#1103) (6493afe), closes #1103
  • chore(deps): bump qs and @​nestjs/platform-express in /examples/9-nestjs (97b5aff)
  • chore(deps): bump qs from 6.14.0 to 6.14.1 in /examples/1-standard (#1126) (fd79836), closes #1126
  • fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (81b4e5c), closes #1123
  • fix: package.json & package-lock.json to reduce vulnerabilities (#1127) (48e08a7), closes #1127
  • fix: upgrade @​apidevtools/json-schema-ref-parser from 14.0.3 to 14.1.0 (#1104) (ff51b76), closes #1104

(2026-01-17)

  • v5.6.1 (58e7a16)
  • v5.6.1 (0acdd7a)
  • fix: package.json & package-lock.json to reduce vulnerabilities (#1127) (48e08a7), closes #1127
  • fix: upgrade @​apidevtools/json-schema-ref-parser from 14.0.3 to 14.1.0 (#1104) (ff51b76), closes #1104
  • chore(deps): bump on-headers and morgan in /examples/6-multi-file-spec (#1103) (6493afe), closes #1103

(2025-09-06)

  • Add deep discriminator support (#1106) (0c4fe03), closes #1106
  • Dependency bump for snyk and npm vulnerabilities (#1099) (99c370c), closes #1099
  • chore(deps): bump cookie and express (#1029) (e76e354), closes #1029
  • chore(deps): bump form-data from 3.0.1 to 3.0.4 in /examples/9-nestjs (#1097) (a582000), closes #1097
  • chore(deps): bump multer in /examples/4-eov-operations-babel (#1091) (4f97239), closes #1091
  • chore(deps): bump on-headers and morgan (#1094) (167b7e1), closes #1094
  • fix: examples/2-standard-multiple-api-specs/package.json & examples/2-standard-multiple-api-specs/pa (41a3821), closes #1098
  • fix: examples/3-eov-operations/package.json & examples/3-eov-operations/package-lock.json to reduce (574187f), closes #1095
  • fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (4aab85d), closes #1100
  • fix: upgrade @​types/multer from 1.4.12 to 1.4.13 (#1092) (ab6d1ab), closes #1092

(2025-07-27)

... (truncated)

Commits

Updates lodash from 4.17.21 to 4.17.23

Commits

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)
  • 251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call
  • edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)
  • 85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)
  • cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)
  • dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)
  • 762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling
  • ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6
Commits

Updates @typescript-eslint/eslint-plugin from 8.53.0 to 8.53.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

  • eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)
  • utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.53.1 (2026-01-19)

🩹 Fixes

  • utils: make RuleCreator root defaultOptions optional (#11956)
  • eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Commits
  • 9940e53 chore(release): publish 8.53.1
  • e0f2a01 fix(utils): make RuleCreator root defaultOptions optional (#11956)
  • 76f8ff7 fix(eslint-plugin): [consistent-indexed-object-style] skip fixer if interface...
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.53.0 to 8.53.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

  • eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)
  • utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.53.1 (2026-01-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates cspell from 9.6.0 to 9.6.2

Release notes

Sourced from cspell's releases.

v9.6.2

Fixes

fix: Conditionally compress and build bTrie (#8437)

Pull request overview

This PR refactors the compilation process to conditionally compress dictionary files and build bTrie files based on the compression settings. The main changes separate compression and bTrie generation into distinct steps and update dependency path handling to be relative to the checksum file location.

Changes:

  • Separated dictionary compression into a dedicated step that runs after building the dictionary
  • Modified bTrie generation to use the appropriate source file (compressed or uncompressed) based on target configuration
  • Updated dependency path resolution to make paths relative to the checksum file directory instead of the root directory

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#8440)

Update Dictionaries (main)

Summary

 packages/cspell-bundled-dicts/package.json |  4 ++--
 pnpm-lock.yaml                             | 24 ++++++++++++------------
 2 files changed, 14 insertions(+), 14 deletions(-)

v9.6.1

Fixes

... (truncated)

Changelog

Sourced from cspell's changelog.

v9.6.2 (2026-01-26)

Fixes

fix: Conditionally compress and build bTrie (#8437)

Pull request overview

This PR refactors the compilation process to conditionally compress dictionary files and build bTrie files based on the compression settings. The main changes separate compression and bTrie generation into distinct steps and update dependency path handling to be relative to the checksum file location.

Changes:

  • Separated dictionary compression into a dedicated step that runs after building the dictionary
  • Modified bTrie generation to use the appropriate source file (compressed or uncompressed) based on target configuration
  • Updated dependency path resolution to make paths relative to the checksum file directory instead of the root directory

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#8440)

Update Dictionaries (main)

Summary

 packages/cspell-bundled-dicts/package.json |  4 ++--
 pnpm-lock.yaml                             | 24 ++++++++++++------------
 2 files changed, 14 insertions(+), 14 deletions(-)

v9.6.1 (2026-01-25)

Fixes

... (truncated)

Commits

Updates globals from 17.0.0 to 17.1.0

Release notes

Sourced from globals's releases.

v17.1.0

  • Add webpack and rspack globals (#333) 65cae73

sindresorhus/globals@v17.0.0...v17.1.0

Commits

Updates prettier from 3.8.0 to 3.8.1

Release notes

Sourced from prettier's releases.

3.8.1

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.1

diff

Include available printers in plugin type declarations (#18706 by @​porada)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";
// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any
// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

Commits

@dependabot
chore(deps): bump the npm-dependencies group across 1 directory with …
d8b5ad4 
…11 updates

Bumps the npm-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@apidevtools/json-schema-ref-parser](https://github.com/APIDevTools/json-schema-ref-parser) | `15.2.1` | `15.2.2` |
| [axios](https://github.com/axios/axios) | `1.13.2` | `1.13.3` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [express-openapi-validator](https://github.com/cdimascio/express-openapi-validator) | `5.6.1` | `5.6.2` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` |
| [zod](https://github.com/colinhacks/zod) | `4.3.5` | `4.3.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.53.0` | `8.53.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.53.0` | `8.53.1` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `9.6.0` | `9.6.2` |
| [globals](https://github.com/sindresorhus/globals) | `17.0.0` | `17.1.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.0` | `3.8.1` |



Updates `@apidevtools/json-schema-ref-parser` from 15.2.1 to 15.2.2
- [Release notes](https://github.com/APIDevTools/json-schema-ref-parser/releases)
- [Commits](APIDevTools/json-schema-ref-parser@v15.2.1...v15.2.2)

Updates `axios` from 1.13.2 to 1.13.3
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.2...v1.13.3)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `express-openapi-validator` from 5.6.1 to 5.6.2
- [Release notes](https://github.com/cdimascio/express-openapi-validator/releases)
- [Commits](https://github.com/cdimascio/express-openapi-validator/commits/v5.6.2)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `zod` from 4.3.5 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.5...v4.3.6)

Updates `@typescript-eslint/eslint-plugin` from 8.53.0 to 8.53.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.53.0 to 8.53.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.1/packages/parser)

Updates `cspell` from 9.6.0 to 9.6.2
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v9.6.2/packages/cspell)

Updates `globals` from 17.0.0 to 17.1.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.0.0...v17.1.0)

Updates `prettier` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.0...3.8.1)

---
updated-dependencies:
- dependency-name: "@apidevtools/json-schema-ref-parser"
  dependency-version: 15.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: axios
  dependency-version: 1.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: express-openapi-validator
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: cspell
  dependency-version: 9.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: globals
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from ferruhcihan as a code owner January 26, 2026 16:16
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 26, 2026
@dependabot dependabot bot requested a review from dennisvankekem as a code owner January 26, 2026 16:17
@dependabot dependabot bot added dependencies Pull requests that update a dependency file dependabot labels Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

@ferruhcihan ferruhcihan Awaiting requested review from ferruhcihan ferruhcihan is a code owner

@dennisvankekem dennisvankekem Awaiting requested review from dennisvankekem dennisvankekem is a code owner

Assignees

No one assigned

Labels

dependabot dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@svcAPLBot