Bump the npm_and_yarn group across 2 directories with 17 updates#185
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Bump the npm_and_yarn group across 2 directories with 17 updates#185dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm_and_yarn group with 1 update in the / directory: [react-native](https://github.com/facebook/react-native/tree/HEAD/packages/react-native). Bumps the npm_and_yarn group with 5 updates in the /example/exampleApp directory: | Package | From | To | | --- | --- | --- | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.23.9` | `7.29.7` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [flatted](https://github.com/WebReflection/flatted) | `3.2.9` | `3.4.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | Updates `react-native` from 0.63.4 to 0.69.12 - [Release notes](https://github.com/facebook/react-native/releases) - [Changelog](https://github.com/react/react-native/blob/main/CHANGELOG-0.6x.md) - [Commits](https://github.com/facebook/react-native/commits/v0.69.12/packages/react-native) Updates `cross-spawn` from 5.1.0 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@5.1.0...v6.0.6) Updates `hermes-engine` from 0.5.1 to 0.11.0 - [Release notes](https://github.com/facebook/hermes/releases) - [Commits](facebook/hermes@v0.5.1...v0.11.0) Updates `node-fetch` from 1.7.3 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@1.7.3...v2.7.0) Updates `shell-quote` from 1.6.1 to 1.8.4 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.6.1...v1.8.4) Updates `ws` from 1.1.5 to 6.2.4 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@1.1.5...6.2.4) Updates `@babel/core` from 7.23.9 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core) Updates `@babel/helpers` from 7.23.9 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-helpers) Updates `@babel/plugin-transform-modules-systemjs` from 7.23.9 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@5.1.0...v6.0.6) Updates `flatted` from 3.2.9 to 3.4.2 - [Commits](WebReflection/flatted@v3.2.9...v3.4.2) Updates `image-size` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/image-size/image-size/releases) - [Commits](image-size/image-size@v1.1.1...v1.2.1) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `send` from 0.18.0 to 0.19.2 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.2) Updates `serve-static` from 1.15.0 to 1.16.3 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.3) Updates `shell-quote` from 1.8.1 to 1.8.4 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.6.1...v1.8.4) Updates `ws` from 6.2.2 to 7.5.11 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@1.1.5...6.2.4) Updates `yaml` from 2.3.4 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.3.4...v2.9.0) --- updated-dependencies: - dependency-name: react-native dependency-version: 0.69.12 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-version: 6.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hermes-engine dependency-version: 0.11.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-version: 2.7.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 6.2.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/core" dependency-version: 7.29.7 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/helpers" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-version: 7.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: image-size dependency-version: 1.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-version: 0.19.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 7.5.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yaml dependency-version: 2.9.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-5fe2139d4d
branch
June 17, 2026 13:05
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 1 update in the / directory: react-native.
Bumps the npm_and_yarn group with 5 updates in the /example/exampleApp directory:
7.23.97.29.73.0.23.0.33.2.93.4.24.17.214.18.14.0.54.0.8Updates
react-nativefrom 0.63.4 to 0.69.12Changelog
Sourced from react-native's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by react-native-bot, a new releaser for react-native since your current version.
Updates
cross-spawnfrom 5.1.0 to 6.0.6Changelog
Sourced from cross-spawn's changelog.
... (truncated)
Commits
d35c865chore(release): 6.0.65a37e19chore: update package.json and package.lockba5aaeffix: disable regexp backtracking (#160)f4af31cfix(core): support worker threads (#127)301187achore(release): 6.0.5ae85d40chore: fix linting errorsd5770dffix: avoid using deprecated Buffer constructor (#94)6b64987chore(package): update lint-staged to version 7.0.0 (#93)39166ebchore: update eslint-config-moxy dependency213aa43Merge pull request #92 from moxystudio/greenkeeper/eslint-config-moxy-5.0.0Updates
hermes-enginefrom 0.5.1 to 0.11.0Commits
2040453Bump versions for 0.11.0 cut6c53047Run Hermes CMake from cargo67fe974Bump nanoid from 3.1.22 to 3.2.0 in /website (#666)10d4945Handle type params in methodsbd64b09Avoid parens around spread argumentsdeabbfdUse proper quotes in string literal type annotationae61d74Fix extra parens in property assignment1ba8ef6Store raw values for string literals as JSX attributes46faa15Enable some syscalls to resume after SIGPROF8bebc9bfix handling of importsUpdates
node-fetchfrom 1.7.3 to 2.7.0Release notes
Sourced from node-fetch's releases.
... (truncated)
Commits
9b9d458feat:AbortError(#1744)65ae25afix: Remove the default connection close header (#1765)8bc3a7cfix: socket variable testing for undefined (#1726)afb36f6Revert "fix: handle bom in text and json (#1739)" (#1741)29909d7fix: handle bom in text and json (#1739)70f592dfix: "global is not defined" (#1704)0f1ebb0Prevent error when response is null (#1699)6e9464dci(release): install dependenciesdd2a0baci(release): install dependencies49bef02ci(release): use latest Node LTSMaintainer changes
This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
shell-quotefrom 1.6.1 to 1.8.4Changelog
Sourced from shell-quote's changelog.
... (truncated)
Commits
ff166e2v1.8.44378a6e[Fix]quote: validate object-token shapes22ebec0[Dev Deps] update@ljharb/eslint-config,auto-changelog,eslint, `npmig...9f3caa3[Tests] increase coverage3344a04[readme] replace runkit CI badge with shields.io check-runs badge699c511[Dev Deps] update@ljharb/eslint-config487a9b4v1.8.301faaff[Fix] remove unnecessary backslash escaping in single quotesb19fc77v1.8.259d29ea[Fix]quote: preserve empty stringsMaintainer changes
This version was pushed to npm by ljharb, a new releaser for shell-quote since your current version.
Install script changes
This version adds
prepublishscript that runs during installation. Review the package contents before updating.Updates
wsfrom 1.1.5 to 6.2.4Release notes
Sourced from ws's releases.
... (truncated)
Commits
86d3e8a[dist] 6.2.4a76e211[security] Limit retained message partsd87f3b6[dist] 6.2.3eeb76d3[security] Fix crash when the Upgrade header cannot be read (#2231)9bdb580[dist] 6.2.278c676d[security] Fix ReDoS vulnerabilityd57db27[dist] 6.2.140734d8[minor] Add missing option in JSDoc comment0556f31[doc] Add TOC to ws.md (#1539)aa1dcd5[fix] MakeWebSocket#close()set the close timer immediatelyUpdates
@babel/corefrom 7.23.9 to 7.29.7Release notes
Sourced from @babel/core's releases.
... (truncated)
Commits
4fba754v7.29.704ea6b2v7.29.699f498a[7.x packport]Improve input source map handling (#18001)feba0a3Preserve original identifier names from input sourcemaps (#17992) (#17998)aa8394ev7.29.0ad0d03f[7.x backport] feat: Allow specifying startLine in code frame (#17739)d7f4008v7.28.6e130225Polish(standalone): improve message on invalid preset/plugin (#17606)99dcba5chore: enable some ts-eslint rules (#17592)c92c491Improve Unicode handling in code-frame tokenizer (#17589)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/coresince your current version.Updates
@babel/helpersfrom 7.23.9 to 7.29.7Release notes
Sourced from @babel/helpers's releases.
... (truncated)
Commits
4fba754v7.29.737d5595v7.29.21c0a08d[7.x backport] fix: Properly handle await in finally (#17805)d7f4008v7.28.699dcba5chore: enable some ts-eslint rules (#17592)c1b55f6Useeslint.config.mts(#17573)35055e3v7.28.418d88b8Improve@babel/coretypings (#17471)ef155f5v7.28.3741cbd2chore: fix various typos across codebase (#17476)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/helperssince your current version.Updates
@babel/plugin-transform-modules-systemjsfrom 7.23.9 to 7.29.7Release notes
Sourced from @babel/plugin-transform-modules-systemjs's releases.
... (truncated)
Commits
4fba754v7.29.7a458f66v7.29.432ebd5a[7.x backport]fix(systemjs): improve module string name support (#17974)aa8394ev7.29.00053db6Update polyfill packages (#17727)61647aev7.28.5a177d55[Babel 8] Uset.traverseFastto replace somepath.traverse(#17518)eebd3a0v7.27.1317e332Enforce node protocol import (#17207)fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/plugin-transform-modules-systemjssince your current version.Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
cross-spawnfrom 7.0.3 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
... (truncated)
Commits
d35c865chore(release): 6.0.65a37e19chore: update package.json and package.lockba5aaeffix: disable regexp backtracking (#160)f4af31cfix(core): support worker threads (#127)301187achore(release): 6.0.5ae85d40chore: fix linting errorsd5770dffix: avoid using deprecated Buffer constructor (#94)6b64987chore(package): update lint-staged to version 7.0.0 (#93)39166ebchore: update eslint-config-moxy dependency213aa43Merge pull request #92 from moxystudio/greenkeeper/eslint-config-moxy-5.0.0Updates
flattedfrom 3.2.9 to 3.4.2Commits
3bf09093.4.2885ddccfix CWE-13210bdba70added flatted-view to the benchmark2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updatesUpdates
image-sizefrom 1.1.1 to 1.2.1Release notes
Sourced from image-size's releases.
Commits
a4178fb1.2.1640a67dfix potential Denial of Service via specially crafted payloads9d414481.2.0405a244fixups76c5c9amention jpeg-xl in the readmea10262cAdd support for JPEG XL (#409)a7a24a3(app): Fix typo in comments (#411)9f48213update dependencies, and reformat code with eslint 964dda84refactor formats that use a ISO-BMFF containere3ea538no need to create hex strings in j2cUpdates
lodashfrom 4.17.21 to 4.18.1Release notes
Sourced from lodash's releases.