Skip to content

chore(deps)(deps): bump the utilities group across 1 directory with 3 updates - #1292

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/utilities-09fb42d32b
Open

chore(deps)(deps): bump the utilities group across 1 directory with 3 updates#1292
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/utilities-09fb42d32b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the utilities group with 3 updates in the / directory: bad-words, date-fns and iso-639-1.

Updates bad-words from 4.0.0 to 4.1.5

Changelog

Sourced from bad-words's changelog.

4.1.5 (2026-07-19)

4.1.4 (2026-07-19)

4.1.3 (2026-07-16)

4.1.2 (2026-07-16)

4.1.1 (2026-07-15)

4.1.0 (2026-07-15)

Features

  • filter: add tagged template helper (f081631)

Bug Fixes

  • package: ship CJS build as commonjs and correct publish metadata (c9944cd), closes #184 #180
Commits
  • 9e97da7 chore(release): 4.1.5
  • 920a853 Merge pull request #204 from nyvorin/security-policy-doc
  • fc27b32 docs(security): replace template with accurate policy
  • 8da4753 docs(security): Add SECURITY.md for security policy and reporting
  • 24318f8 chore(release): 4.1.4
  • 34ef80e Merge pull request #203 from nyvorin/build/refresh-medium-transitives
  • 0952348 build(deps): refresh picomatch to patched version
  • 9ecc631 build(deps): refresh markdown-it to patched version
  • d2d07dd build(deps): refresh js-yaml to patched versions
  • d0c8ee2 chore(release): 4.1.3
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for bad-words since your current version.


Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @​ImRodry and @​puneetdixit200 for their contributions.

Fixed

v4.2.1

Fixed

  • Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

  • Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.
Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • f95bcf1 (docs): Add missing tsx dependency
  • Additional commits viewable in compare view

Updates iso-639-1 from 3.1.5 to 3.1.6

Changelog

Sourced from iso-639-1's changelog.

iso-639-1 Changelog

Commits

@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: KaustavGhosh, kaustavghosh. Either they do not exist or they do not have the correct permissions to be added as an assignee.

Milestone

The specified milestone could not be found on this repository. If you view a milestone, the final part of the page URL, after milestone, is the identifier. For example: https://github.com/<org>/<repo>/milestone/3.

Labels

The following labels could not be found: auto-merge-candidate, dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@netlify

netlify Bot commented Aug 31, 2026

Copy link
Copy Markdown

Deploy Preview for familiarise canceled.

Name Link
🔨 Latest commit 974c4df
🔍 Latest deploy log https://app.netlify.com/projects/familiarise/deploys/6a9862a9119fa300084c7e80

… updates

Bumps the utilities group with 3 updates in the / directory: [bad-words](https://github.com/nyvorin/badwords), [date-fns](https://github.com/date-fns/date-fns) and [iso-639-1](https://github.com/meikidd/iso-639-1).


Updates `bad-words` from 4.0.0 to 4.1.5
- [Release notes](https://github.com/nyvorin/badwords/releases)
- [Changelog](https://github.com/nyvorin/badwords/blob/main/CHANGELOG.md)
- [Commits](nyvorin/badwords@v4.0.0...v4.1.5)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `iso-639-1` from 3.1.5 to 3.1.6
- [Release notes](https://github.com/meikidd/iso-639-1/releases)
- [Changelog](https://github.com/meikidd/iso-639-1/blob/master/CHANGELOG.md)
- [Commits](https://github.com/meikidd/iso-639-1/commits/v3.1.6)

---
updated-dependencies:
- dependency-name: bad-words
  dependency-version: 4.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: utilities
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: utilities
- dependency-name: iso-639-1
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: utilities
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev/utilities-09fb42d32b branch from 984f7ea to 974c4df Compare September 2, 2026 17:53
@sonarqubecloud

sonarqubecloud Bot commented Sep 2, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants