Skip to content

chore(deps): Bump the dependencies group across 1 directory with 21 updates#45

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-2ea1ce475c
Open

chore(deps): Bump the dependencies group across 1 directory with 21 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-2ea1ce475c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Bumps the dependencies group with 19 updates in the / directory:

Package From To
sass 1.99.0 1.100.0
@babel/code-frame 7.29.0 7.29.7
@cacheable/memory 2.0.8 2.0.9
@csstools/css-syntax-patches-for-csstree 1.1.3 1.1.4
cacheable 2.3.4 2.3.5
es-object-atoms 1.1.1 1.1.2
fast-uri 3.1.0 3.1.2
file-entry-cache 11.1.2 11.1.3
fs-extra 11.3.4 11.3.5
hasown 2.0.3 2.0.4
immutable 5.1.5 5.1.6
is-core-module 2.16.1 2.16.2
js-yaml 4.1.1 4.2.0
postcss 8.5.13 8.5.15
shell-quote 1.8.3 1.8.4
tinyglobby 0.2.16 0.2.17
typed-array-length 1.0.7 1.0.8
which-typed-array 1.1.20 1.1.21
yaml 2.8.4 2.9.0

Updates sass from 1.99.0 to 1.100.0

Release notes

Sourced from sass's releases.

Dart Sass 1.100.0

To install Sass 1.100.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Writing two compound selectors adjacent to one another without any whitespace between them, such as [class]a, is now deprecated. This was always an error in CSS and Sass only supported it by mistake.

    See the Sass website for details.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.100.0

  • Writing two compound selectors adjacent to one another without any whitespace between them, such as [class]a, is now deprecated. This was always an error in CSS and Sass only supported it by mistake.

    See the Sass website for details.

Commits
  • 5fd18c7 Bump node engine requirement to >=20.19.0 and chokidar requirement to ^5.0.0 ...
  • 8c1d984 Deprecate adjacent compound selectors (#2765)
  • 8e5f718 Bump postcss from 8.5.12 to 8.5.13 in /pkg/sass-parser (#2767)
  • 1447f9b Bump postcss from 8.5.8 to 8.5.12 in /pkg/sass-parser (#2766)
  • See full diff in compare view

Updates @babel/code-frame from 7.29.0 to 7.29.7

Release notes

Sourced from @​babel/code-frame's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @babel/helper-validator-identifier from 7.28.5 to 7.29.7

Release notes

Sourced from @​babel/helper-validator-identifier's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @cacheable/memory from 2.0.8 to 2.0.9

Commits

Updates @csstools/css-syntax-patches-for-csstree from 1.1.3 to 1.1.4

Changelog

Sourced from @​csstools/css-syntax-patches-for-csstree's changelog.

1.1.4

May 13, 2026

  • Update @webref/css to v8.5.4
Commits

Updates cacheable from 2.3.4 to 2.3.5

Commits

Updates es-object-atoms from 1.1.1 to 1.1.2

Changelog

Sourced from es-object-atoms's changelog.

v1.1.2 - 2026-05-22

Commits

  • [Dev Deps] update @ljharb/eslint-config, @ljharb/tsconfig, auto-changelog, eslint, npmignore 41e3d94
  • [types] improve isObject type 758edc2
Commits
  • 9e62644 v1.1.2
  • 41e3d94 [Dev Deps] update @ljharb/eslint-config, @ljharb/tsconfig, `auto-changelo...
  • 758edc2 [types] improve isObject type
  • See full diff in compare view

Updates fast-uri from 3.1.0 to 3.1.2

Release notes

Sourced from fast-uri's releases.

v3.1.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits
  • 919dd8e Bumped v3.1.2
  • c65ba57 fixup: linting
  • 6c86c17 Merge commit from fork
  • a95158a Handle malformed fragment decoding without throwing (#171)
  • cea547c Bumped v3.1.1
  • 876ce79 Merge commit from fork
  • dcdf690 ci: add lock-threads workflow (#169)
  • c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
  • 9b4c6dc build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)
  • 85d09a9 build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...
  • Additional commits viewable in compare view

Updates file-entry-cache from 11.1.2 to 11.1.3

Commits

Updates fs-extra from 11.3.4 to 11.3.5

Changelog

Sourced from fs-extra's changelog.

11.3.5 / 2026-05-06

  • Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)
  • Fix error handling in timestamp preservation code (#1065, #1069)
  • Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)
Commits

Updates hasown from 2.0.3 to 2.0.4

Changelog

Sourced from hasown's changelog.

v2.0.4 - 2026-05-28

Commits

  • [types] drop the dead key-narrowing overload fdab00e
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint 91f6247
Commits
  • 97f3a85 v2.0.4
  • fdab00e [types] drop the dead key-narrowing overload
  • 91f6247 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint
  • See full diff in compare view

Updates immutable from 5.1.5 to 5.1.6

Release notes

Sourced from immutable's releases.

v5.1.6

What's Changed

Internal

Full Changelog: immutable-js/immutable-js@v5.1.5...v5.1.6

Changelog

Sourced from immutable's changelog.

5.1.6

  • fix(reverseFactory): read reversedSequence.size in __iterator instead of this #2196
Commits
  • 5486c78 5.1.6
  • fb06b2e changelog
  • 35ec23f Merge pull request #2196 from immutable-js/fix-reverse-factory-iterator-this
  • 93cb6df fix(reverseFactory): use reversedSequence.size in __iterator instead of this
  • ecb6e72 Merge pull request #2188 from immutable-js/dependabot/npm_and_yarn/next-15.5.18
  • 3bb5e61 Bump next from 15.5.9 to 15.5.18
  • 277bc7b Merge pull request #2182 from immutable-js/dependabot/npm_and_yarn/flatted-3.4.2
  • ff939d1 Merge pull request #2187 from immutable-js/dependabot/npm_and_yarn/form-data-...
  • 419a379 Bump form-data from 4.0.0 to 4.0.5
  • 9acd11a Merge pull request #2184 from immutable-js/dependabot/npm_and_yarn/lodash-4.18.1
  • Additional commits viewable in compare view

Updates is-core-module from 2.16.1 to 2.16.2

Changelog

Sourced from is-core-module's changelog.

v2.16.2 - 2026-05-05

Commits

  • [Tests] increase coverage 1fc59fe
  • [actions] update workflows 0f6217b
  • [Fix] node 26 drops stream* modules 3acff68
  • [Dev Deps] update @ljharb/eslint-config, eslint, npmignore f06678c
  • [Deps] update hasown d9eae68
  • [Dev Deps] update @ljharb/eslint-config 8273701
  • [readme] replace runkit CI badge with shields.io check-runs badge 6b86754
Commits
  • a1633e0 v2.16.2
  • 0f6217b [actions] update workflows
  • 3acff68 [Fix] node 26 drops stream* modules
  • d9eae68 [Deps] update hasown
  • 8273701 [Dev Deps] update @ljharb/eslint-config
  • f06678c [Dev Deps] update @ljharb/eslint-config, eslint, npmignore
  • 1fc59fe [Tests] increase coverage
  • 6b86754 [readme] replace runkit CI badge with shields.io check-runs badge
  • See full diff in compare view

Updates js-yaml from 4.1.1 to 4.2.0

Changelog

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

  • Added docs/safety.md with notes about processing untrusted YAML.
  • Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.
  • Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.
  • Added sourcemaps to dist/ builds.

Changed

  • Stop resolving numbers with underscores as numeric scalars, #627.
  • Switched dev toolchains to Vite / neostandard.
  • Updated demo.
  • Reorganized tests.
  • dist/ files are no longer kept in the repository.

Fixed

  • Fix parsing of properties on the first implicit block mapping key, #62.
  • Fix trailing whitespace handling when folding flow scalar lines, #307.
  • Reject top-level block scalars without content indentation, #280.
  • Ensure numbers survive round-trip, #737.
  • Fix test coverage for issue #221.
  • Fix flow scalar trailing whitespace folding, #307.
  • Fix digits in YAML named tag handles.

Security

  • Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

  • Backported v4.1.1 fix to v3
Commits

Updates postcss from 8.5.13 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

Changelog

Sourced from postcss's changelog.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

Commits
  • eae46db Release 8.5.15 version
  • 79508ff Update CI actions
  • b128e21 Speed up declaration parsing by avoiding creating new array on each token
  • 9825dca Fix code format
  • 55789c8 Update dependencies
  • 84fbbe9 Install older pnpm action for old Node.js
  • 9f860bd Revert pnpm action for old Node.js
  • 0877198 Update CI actions
  • b2d1a33 Fix linter warnings
  • 0700dac Merge pull request #2088 from rootvector2/add-oss-fuzz-harness
  • Additional commits viewable in compare view

Updates qified from 0.9.1 to 0.10.1

Release notes

Sourced from qified's releases.

v0.10.1

What's Changed

Full Changelog: jaredwray/qified@v0.10.0...v0.10.1

v0.10.0

What's Changed

Full Changelog: jaredwray/qified@v0.9.1...v0.10.0

Commits
  • 3dcb0d2 version bump to v0.10.1
  • efef697 Merge pull request #191 from jaredwray/rabbitmq---concurrent-connect-gate-and...
  • dbdd263 Merge branch 'rabbitmq---concurrent-connect-gate-and-nack-fix' of https://git...
  • bf4b988 handing connect issues
  • bf1b354 Merge branch 'main' into rabbitmq---concurrent-connect-gate-and-nack-fix
  • 3e1fab5 concurrent fixes
  • d02eab7 version sync
  • 6e566fa version bump to v0.10.0
  • 3772076 Merge pull request #190 from jaredwray/rabbitmq---concurrent-connect-gate-and...
  • 0d434ff connection fixes
  • Additional commits viewable in compare view

Updates shell-quote from 1.8.3 to 1.8.4

Changelog

Sourced from shell-quote's changelog.

v1.8.4 - 2026-05-22

Commits

  • [Fix] quote: validate object-token shapes 4378a6e
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, npmignore 22ebec0
  • [Tests] increase coverage 9f3caa3
  • [readme] replace runkit CI badge with shields.io check-runs badge 3344a04
  • [Dev Deps] update @ljharb/eslint-config 699c511
Commits
  • ff166e2 v1.8.4
  • 4378a6e [Fix] quote: validate object-token shapes
  • 22ebec0 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, `npmig...
  • 9f3caa3 [Tests] increase coverage
  • 3344a04 [readme] replace runkit CI badge with shields.io check-runs badge
  • 699c511 [Dev Deps] update @ljharb/eslint-config
  • See full diff in compare view

Updates tinyglobby from 0.2.16 to 0.2.17

Release notes

Sourced from tinyglobby's releases.

0.2.17

Changed

  • Enabled staged publishing for stronger supply-chain security

Fixed

  • Defaults when undefined is passed to any of the options by @​chloeelim
  • Drive-relative paths on Windows by @​Andrej730
  • FileSystemAdapter is now exported again

Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem

Changelog

Sourced from tinyglobby's changelog.

0.2.17

Changed

  • Enabled staged publishing for stronger supply-chain security

Fixed

  • Defaults when undefined is passed to any of the options by chloeelim
  • Drive-relative paths on Windows by Andrej730
  • FileSystemAdapter is now exported again
Commits

Updates typed-array-length from 1.0.7 to 1.0.8

Changelog

Sourced from typed-array-length's changelog.

v1.0.8 - 2026-05-28

Commits

  • [Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config 24ae7de
  • [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @ljharb/tsconfig, @types/tape, eslint, make-generator-function, npmignore, object-inspect 157fbce
  • [types] improve types 9580efa
  • [Deps] update call-bind, for-each, is-typed-array, possible-typed-array-names, reflect.getprototypeof 0b6c478
  • [Deps] update call-bind, gopd, is-typed-array, reflect.getprototypeof 25825a3
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint ee0f33d
  • [Dev Deps] update @arethetypeswrong/cli, @ljharb/tsconfig, @types/tape 075f435
  • [Dev Deps] update eslint a16cdcc
Commits
  • a010b13 v1.0.8
  • 0b6c478 [Deps] update call-bind, for-each, is-typed-array, `possible-typed-arra...
  • ee0f33d [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint
  • a16cdcc [Dev Deps] update eslint
  • 24ae7de [Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config
  • 157fbce [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `@ljharb/...
  • 9580efa [types] improve types
  • 25825a3 [Deps] update call-bind, gopd, is-typed-array, reflect.getprototypeof
  • 075f435 [Dev Deps] update @arethetypeswrong/cli, @ljharb/tsconfig, @types/tape
  • See full diff in compare view

Updates which-typed-array from 1.1.20 to 1.1.21

Changelog

Sourced from which-typed-array's changelog.

v1.1.21 - 2026-05-26

Commits

  • [types] add Float16Array b3dac9f
  • [Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config 2dd9b04
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint b46f6a2
  • [Tests] pin fflate to 0.8.2 06eb54e
  • [Dev Deps] update eslint 2181d61
  • [Deps] update call-bind ca58bca
Commits
  • 6fd1962 v1.1.21
  • 06eb54e [Tests] pin fflate to 0.8.2
  • b3dac9f [types] add Float16Array
  • ca58bca [Deps] update call-bind
  • b46f6a2 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint
  • 2181d61 [Dev Deps] update eslint
  • 2dd9b04 [Dev Deps] update eslint, @ljharb/eslint-config; migrate to flat config
  • See full diff in compare view

Updates yaml from 2.8.4 to 2.9.0

Release notes

Sourced from yaml's releases.

v2.9.0

The changes here are really only patches, but I'm releasing this as a minor version to note a small change to the documentation of parseDocument() and parseAllDocuments(): I've removed the claim that they'll "never throw".

It remains the case that practically all non-malicious inputs will be handled without emitting an error, but there is a decent chance that code paths remain where e.g. a RangeError due to call stack exhaustion can be triggered by malicious inputs. Up to now, I've considered these as security vulnerabilities, and in fact it's the only category of error for which yaml CVEs have been issued so far.

Starting from this release, I'll be considering such errors as bugs, but not vulnerabilities. I do welcome people and/or LLMs looking for them, but please report them as normal issues rather than suspected security vulnerabilities. This also applies to previously undiscovered bugs in earlier releases.

  • fix: Avoid calling Array.prototype.push.apply() with large source array
  • fix(lexer): Avoid recursive calls that may exhaust the call stack
Commits
  • ddb21b0 2.9.0
  • 167365b docs: Clarify that not all errors can be avoided
  • 6eca2a7 fix: Avoid calling Array.prototype.push.apply() with large source array
  • 0543cd5 fix(lexer): Avoid recursive calls that may exhaust the call stack
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the dependencies group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [sass](https://github.com/sass/dart-sass) | `1.99.0` | `1.100.0` |
| [@babel/code-frame](https://github.com/babel/babel/tree/HEAD/packages/babel-code-frame) | `7.29.0` | `7.29.7` |
| [@cacheable/memory](https://github.com/jaredwray/cacheable/tree/HEAD/packages/cacheable) | `2.0.8` | `2.0.9` |
| [@csstools/css-syntax-patches-for-csstree](https://github.com/csstools/postcss-plugins/tree/HEAD/packages/css-syntax-patches-for-csstree) | `1.1.3` | `1.1.4` |
| [cacheable](https://github.com/jaredwray/cacheable/tree/HEAD/packages/cacheable) | `2.3.4` | `2.3.5` |
| [es-object-atoms](https://github.com/ljharb/es-object-atoms) | `1.1.1` | `1.1.2` |
| [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.2` |
| [file-entry-cache](https://github.com/jaredwray/cacheable/tree/HEAD/packages/file-entry-cache) | `11.1.2` | `11.1.3` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.4` | `11.3.5` |
| [hasown](https://github.com/inspect-js/hasOwn) | `2.0.3` | `2.0.4` |
| [immutable](https://github.com/immutable-js/immutable-js) | `5.1.5` | `5.1.6` |
| [is-core-module](https://github.com/inspect-js/is-core-module) | `2.16.1` | `2.16.2` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.13` | `8.5.15` |
| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.8.4` |
| [tinyglobby](https://github.com/SuperchupuDev/tinyglobby) | `0.2.16` | `0.2.17` |
| [typed-array-length](https://github.com/inspect-js/typed-array-length) | `1.0.7` | `1.0.8` |
| [which-typed-array](https://github.com/inspect-js/which-typed-array) | `1.1.20` | `1.1.21` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.4` | `2.9.0` |



Updates `sass` from 1.99.0 to 1.100.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.99.0...1.100.0)

Updates `@babel/code-frame` from 7.29.0 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-code-frame)

Updates `@babel/helper-validator-identifier` from 7.28.5 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-helper-validator-identifier)

Updates `@cacheable/memory` from 2.0.8 to 2.0.9
- [Release notes](https://github.com/jaredwray/cacheable/releases)
- [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/cacheable)

Updates `@csstools/css-syntax-patches-for-csstree` from 1.1.3 to 1.1.4
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/packages/css-syntax-patches-for-csstree/CHANGELOG.md)
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/packages/css-syntax-patches-for-csstree)

Updates `cacheable` from 2.3.4 to 2.3.5
- [Release notes](https://github.com/jaredwray/cacheable/releases)
- [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/cacheable)

Updates `es-object-atoms` from 1.1.1 to 1.1.2
- [Changelog](https://github.com/es-shims/es-object-atoms/blob/main/CHANGELOG.md)
- [Commits](es-shims/es-object-atoms@v1.1.1...v1.1.2)

Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `file-entry-cache` from 11.1.2 to 11.1.3
- [Release notes](https://github.com/jaredwray/cacheable/releases)
- [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/file-entry-cache)

Updates `fs-extra` from 11.3.4 to 11.3.5
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.4...11.3.5)

Updates `hasown` from 2.0.3 to 2.0.4
- [Changelog](https://github.com/inspect-js/hasOwn/blob/main/CHANGELOG.md)
- [Commits](inspect-js/hasOwn@v2.0.3...v2.0.4)

Updates `immutable` from 5.1.5 to 5.1.6
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v5.1.5...v5.1.6)

Updates `is-core-module` from 2.16.1 to 2.16.2
- [Changelog](https://github.com/inspect-js/is-core-module/blob/main/CHANGELOG.md)
- [Commits](inspect-js/is-core-module@v2.16.1...v2.16.2)

Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `postcss` from 8.5.13 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.13...8.5.15)

Updates `qified` from 0.9.1 to 0.10.1
- [Release notes](https://github.com/jaredwray/qified/releases)
- [Commits](jaredwray/qified@v0.9.1...v0.10.1)

Updates `shell-quote` from 1.8.3 to 1.8.4
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.8.3...v1.8.4)

Updates `tinyglobby` from 0.2.16 to 0.2.17
- [Release notes](https://github.com/SuperchupuDev/tinyglobby/releases)
- [Changelog](https://github.com/SuperchupuDev/tinyglobby/blob/main/CHANGELOG.md)
- [Commits](SuperchupuDev/tinyglobby@0.2.16...0.2.17)

Updates `typed-array-length` from 1.0.7 to 1.0.8
- [Changelog](https://github.com/inspect-js/typed-array-length/blob/main/CHANGELOG.md)
- [Commits](inspect-js/typed-array-length@v1.0.7...v1.0.8)

Updates `which-typed-array` from 1.1.20 to 1.1.21
- [Changelog](https://github.com/inspect-js/which-typed-array/blob/main/CHANGELOG.md)
- [Commits](inspect-js/which-typed-array@v1.1.20...v1.1.21)

Updates `yaml` from 2.8.4 to 2.9.0
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.4...v2.9.0)

---
updated-dependencies:
- dependency-name: sass
  dependency-version: 1.100.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@babel/code-frame"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@babel/helper-validator-identifier"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@cacheable/memory"
  dependency-version: 2.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@csstools/css-syntax-patches-for-csstree"
  dependency-version: 1.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cacheable
  dependency-version: 2.3.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: es-object-atoms
  dependency-version: 1.1.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: file-entry-cache
  dependency-version: 11.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fs-extra
  dependency-version: 11.3.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: hasown
  dependency-version: 2.0.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: immutable
  dependency-version: 5.1.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: is-core-module
  dependency-version: 2.16.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: qified
  dependency-version: 0.10.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: shell-quote
  dependency-version: 1.8.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tinyglobby
  dependency-version: 0.2.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typed-array-length
  dependency-version: 1.0.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: which-typed-array
  dependency-version: 1.1.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: yaml
  dependency-version: 2.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jun 2, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants