build(deps): bump the npm_and_yarn group across 1 directory with 21 updates#88
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
build(deps): bump the npm_and_yarn group across 1 directory with 21 updates#88dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…pdates Bumps the npm_and_yarn group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@keycloak/keycloak-admin-client](https://github.com/keycloak/keycloak/tree/HEAD/js/libs/keycloak-admin-client) | `24.0.5` | `26.5.5` | | [axios](https://github.com/axios/axios) | `1.8.4` | `1.13.5` | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.0` | `2.2.1` | | [minimatch](https://github.com/isaacs/minimatch) | `8.0.4` | `8.0.6` | | [next](https://github.com/vercel/next.js) | `15.3.0` | `15.5.10` | | [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.7` | `4.24.12` | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.11` | | [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `6.14.0` | | [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.0.5` | `5.2.0` | | [bn.js](https://github.com/indutny/bn.js) | `4.12.0` | `4.12.3` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` | | [diff](https://github.com/kpdecker/jsdiff) | `4.0.2` | `4.0.4` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.1` | `3.4.1` | | [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.5` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [jws](https://github.com/brianloveswords/node-jws) | `3.2.2` | `3.2.3` | | [linkifyjs](https://github.com/nfrasser/linkifyjs/tree/HEAD/packages/linkifyjs) | `4.2.0` | `4.3.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [markdown-it](https://github.com/markdown-it/markdown-it) | `14.1.0` | `14.1.1` | | [tar-fs](https://github.com/mafintosh/tar-fs) | `2.1.1` | `2.1.4` | | [tar](https://github.com/isaacs/node-tar) | `7.4.3` | `7.5.11` | Updates `@keycloak/keycloak-admin-client` from 24.0.5 to 26.5.5 - [Release notes](https://github.com/keycloak/keycloak/releases) - [Commits](https://github.com/keycloak/keycloak/commits/26.5.5/js/libs/keycloak-admin-client) Updates `axios` from 1.8.4 to 1.13.5 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.8.4...v1.13.5) Updates `body-parser` from 2.2.0 to 2.2.1 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.0...v2.2.1) Updates `minimatch` from 8.0.4 to 8.0.6 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v8.0.4...v8.0.6) Updates `next` from 15.3.0 to 15.5.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.0...v15.5.10) Updates `next-auth` from 4.24.7 to 4.24.12 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.7...next-auth@4.24.12) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.11 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.11/packages/config-resolver) Updates `ajv` from 6.12.6 to 6.14.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v6.14.0) Updates `basic-ftp` from 5.0.5 to 5.2.0 - [Release notes](https://github.com/patrickjuchli/basic-ftp/releases) - [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md) - [Commits](patrickjuchli/basic-ftp@v5.0.5...v5.2.0) Updates `bn.js` from 4.12.0 to 4.12.3 - [Release notes](https://github.com/indutny/bn.js/releases) - [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md) - [Commits](indutny/bn.js@v4.12.0...v4.12.3) Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v4.0.2...v4.0.4) Updates `flatted` from 3.3.1 to 3.4.1 - [Commits](WebReflection/flatted@v3.3.1...v3.4.1) Updates `form-data` from 4.0.0 to 4.0.5 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.0...v4.0.5) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `jws` from 3.2.2 to 3.2.3 - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) Updates `linkifyjs` from 4.2.0 to 4.3.2 - [Release notes](https://github.com/nfrasser/linkifyjs/releases) - [Changelog](https://github.com/nfrasser/linkifyjs/blob/main/CHANGELOG.md) - [Commits](https://github.com/nfrasser/linkifyjs/commits/v4.3.2/packages/linkifyjs) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `markdown-it` from 14.1.0 to 14.1.1 - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/markdown-it@14.1.0...14.1.1) Updates `tar-fs` from 2.1.1 to 2.1.4 - [Commits](mafintosh/tar-fs@v2.1.1...v2.1.4) Updates `tar` from 7.4.3 to 7.5.11 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.4.3...v7.5.11) --- updated-dependencies: - dependency-name: "@keycloak/keycloak-admin-client" dependency-version: 26.5.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.13.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 2.2.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 8.0.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next-auth dependency-version: 4.24.12 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 6.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: basic-ftp dependency-version: 5.2.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: bn.js dependency-version: 4.12.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: linkifyjs dependency-version: 4.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: markdown-it dependency-version: 14.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar-fs dependency-version: 2.1.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.11 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 21 updates in the / directory:
24.0.526.5.51.8.41.13.52.2.02.2.18.0.48.0.615.3.015.5.104.24.74.24.124.1.04.4.116.12.66.14.05.0.55.2.04.12.04.12.31.1.111.1.124.0.24.0.43.3.13.4.14.0.04.0.54.1.04.1.13.2.23.2.34.2.04.3.24.17.214.17.2314.1.014.1.12.1.12.1.47.4.37.5.11Updates
@keycloak/keycloak-admin-clientfrom 24.0.5 to 26.5.5Release notes
Sourced from
@keycloak/keycloak-admin-client's releases.... (truncated)
Commits
011adabSet version to 26.5.5d385dbdtoken could be undefined when using other grant type05b7a79added ability to refresh token when within time (#45789) (#45813)c0fa4d5Bump the npm-dependencies group across 1 directory with 32 updates (#45148)40eb51fAdd timeout option for keycloak-admin-client93812a6Enable unit tests for keycloak-admin-clientf91363dImprove Public Key Management for JWTAuthorizationGrant identity providerb0b3817Manage Organization Invitesf7e4b78Prevent slash duplication in request URLs3319e8dAdd optional parameter in WorkflowResource.toRepresentation to allow retrieva...Updates
axiosfrom 1.8.4 to 1.13.5Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
29f7542chore(release): prepare release 1.13.5 (#7379)431c3a3ci: fix run condition (#7373)9ff3a78ci: update ymls (#7372)265b712docs: fix deprecated Buffer constructor and formatting issues in README (#7371)475e75afeat: add input validation to isAbsoluteURL (#7326)28c7215fix: Denial of Service via proto Key in mergeConfig (#7369)04cf019docs: clarify object check comment (#7323)696fa75fix: status is missing in AxiosError on and after v1.13.3 (#7368)569f028fix: added a option to choose between legacy and the new request/response int...44b7c9fchore(deps-dev): bump karma-sourcemap-loader (#7360)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.
Updates
body-parserfrom 2.2.0 to 2.2.1Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
Commits
d96b63d2.2.1 (#659)b204886sec: security patch for CVE-2025-13466e20e351feat: removehistory.mdfrom being packaged on publish (#660)0d7ce71docs: switch badges from badgen.net to shields.io (#661)168afffci: also test on first supported node.js version (#646)e539a71build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#654)9391612build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#655)57baafbbuild(deps): bump github/codeql-action from 3.30.5 to 4.31.2 (#656)a6a088ebuild(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 (#657)10a114dtest: add test for urlencoded invalid defaultCharset (#643)Updates
minimatchfrom 8.0.4 to 8.0.6Commits
a5f07f48.0.6c42643alock node to v16 in dev9bbb456limit nested extglob recursion, flatten extglobsf4ce0118.0.550c739aupdate CI matrix and actionse16b0f0update test expectations for coalesced consecutive stars5173367coalesce consecutive non-globstar * charactersee9f152[meta] add publishConfig.tag legacy-v8Updates
nextfrom 15.3.0 to 15.5.10Release notes
Sourced from next's releases.
Commits
60a2aa9v15.5.10e5b834dfetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)39a2f6afeat(next/image)!: addimages.maximumResponseBodyconfig (#88183)bf9f084Sync DoS mitigations for React Flightc5de33ev15.5.9dd23399Backport facebook/react#35351 for 15.5.8 (#87086)7526cd6v15.5.81e9ec41Update React Version (#41)16141e5Update React Version (#30)e01e589Backport Next.js changes to v15.5.8 (#23)Updates
next-authfrom 4.24.7 to 4.24.12Commits
1f48cf7chore(release): bump version [skip ci]4758a2fci: addworkflow_dispatchfor release.ymld3aecfefeat: add next 16 support (#13303)82efcf8fix: security issue fromnodemailer(#13304)798c3d5docs: update banner02d3480chore: remove clerk ads7f88fa0chore: remove sponsors46e01afchore(docs): update credentials.md app router route.js filename (#13025)11939f2feat(core): add default cache control headers for GET endpoints (#12627)918a6acdocs: Update FAQ withallowDangerousEmailAccountLinking(#12586)Maintainer changes
This version was pushed to npm by himself_65, a new releaser for next-auth since your current version.
Updates
@smithy/config-resolverfrom 4.1.0 to 4.4.11Release notes
Sourced from
@smithy/config-resolver's releases.Changelog
Sourced from
@smithy/config-resolver's changelog.... (truncated)
Commits
0bdca15Version NPM packages5eab7eaVersion NPM packagesa4d95e6fix: set downlevel types to be used in typescript@'<4.5' (#1906)2acebecVersion NPM packages06793ccVersion NPM packages1f51a0cVersion NPM packagesa028fc5chore: replace rimraf with premove (#1834)0e8cc49Version NPM packages7e4bbf6chore: upgrade rimraf to v5.0.10 (#1829)521d67cVersion NPM packagesUpdates
ajvfrom 6.12.6 to 6.14.0Commits
e3af0a76.14.0b552ed6add regExp option to address $data exploit via a regular expression (CVE-2025...72f2286docs: update v7 info231e52bMerge pull request #1320 from philsturgeon/patch-1d3475fcAdd spectral, an AJV util from a sponsor413afe0docs: v7.0.0-beta.311e997bupdate readme for v7Updates
basic-ftpfrom 5.0.5 to 5.2.0Release notes
Sourced from basic-ftp's releases.
Changelog
Sourced from basic-ftp's changelog.
Commits
5d41e45Bump version49c2e73Update dependencies2a2a0e6Skip invalid filenames65c90d9Fix permissions for workflows593cb78Set permissions for workflow jobs36adf11Remove deprecated CodeQL check9da4af0Update changelog6993039Improve naming0b8f756Improve naming67a53f2Bump versionMaintainer changes
This version was pushed to npm by patrickjuchli, a new releaser for basic-ftp since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
bn.jsfrom 4.12.0 to 4.12.3Commits
39fe4384.12.367ecb35backport(4.x): fix imaskn state (#317)c4098ba4.12.26277fd7backport(4.x): Fix imuln/muln with zero (backport of #313) (#314)ac0d4af4.12.1a5f14b4Fix serious issue in.toString(16)(#309)0cd2661Remove package-lock.json added by npmUpdates
brace-expansionfrom 1.1.11 to 1.1.12Release notes
Sourced from brace-expansion's releases.
Commits
44f33b41.1.12c460dbdpkg: publish on tag 1.xccb8ac6fmtc3c73c8Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)Updates
difffrom 4.0.2 to 4.0.4Changelog
Sourced from diff's changelog.
Commits
f06f3e4v4.0.40179a48v4.0.34568caeBackport kpdecker/jsdiff#6494de0ffaBackport kpdecker/jsdiff#647Maintainer changes
This version was pushed to npm by explodingcabbage, a new releaser for diff since your current version.
Updates
flattedfrom 3.3.1 to 3.4.1Commits
2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updatesd3418c73.4.07eb65d8Merge pull request #88 from WebReflection/avoid-recusrion7774aaeAvoid recursion on parse due possible shenanigansUpdates
form-datafrom 4.0.0 to 4.0.5Release notes
Sourced from form-data's releases.
... (truncated)
Changelog
Sourced from form-data's changelog.