Skip to content

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #27

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates #27

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 24, 2025 •
edited
Loading

Bumps the npm_and_yarn group with 4 updates in the / directory: axios, esbuild, netlify-cli and @netlify/build.
Bumps the npm_and_yarn group with 2 updates in the /demo directory: on-headers and compression.

Updates axios from 1.7.9 to 1.11.0

Release notes

Sourced from axios's releases.

Release v1.11.0

Release notes:

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

Release v1.10.0

Release notes:

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

Release v1.9.0

Release notes:

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#6661) (987d2e2)
  • types: fix autocomplete for adapter config (#6855) (e61a893)

... (truncated)

Changelog

Sourced from axios's changelog.

1.11.0 (2025-07-22)

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

1.10.0 (2025-06-14)

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

1.9.0 (2025-04-24)

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)

... (truncated)

Commits
  • b76c4ac chore(release): v1.11.0 (#6974)
  • e72c193 fix: form-data npm pakcage (#6970)
  • 8517aa1 fix(types): resolve type discrepancies between ESM and CJS TypeScript declara...
  • a2214ca fix: prevent RangeError when using large Buffers (#6961)
  • 6161947 refactor: use spread operator instead of '.apply()' (#6938)
  • a1d16dd refactor: use an object spread instead of Object.assign (#6939)
  • 07183cd chore(sponsor): update sponsor block (#6952)
  • ef36347 docs(CONTRIBUTING): update docs link for accuracy (#6894)
  • b29bd6a chore(sponsor): update sponsor block (#6948)
  • a406a93 chore(sponsor): update sponsor block (#6937)
  • Additional commits viewable in compare view

Updates esbuild from 0.19.6 to 0.25.6

Release notes

Sourced from esbuild's releases.

v0.25.6

  • Fix a memory leak when cancel() is used on a build context (#4231)

    Calling rebuild() followed by cancel() in rapid succession could previously leak memory. The bundler uses a producer/consumer model internally, and the resource leak was caused by the consumer being termianted while there were still remaining unreceived results from a producer. To avoid the leak, the consumer now waits for all producers to finish before terminating.

  • Support empty :is() and :where() syntax in CSS (#4232)

    Previously using these selectors with esbuild would generate a warning. That warning has been removed in this release for these cases.

  • Improve tree-shaking of try statements in dead code (#4224)

    With this release, esbuild will now remove certain try statements if esbuild considers them to be within dead code (i.e. code that is known to not ever be evaluated). For example:

    // Original code
return 'foo'
try { return 'bar' } catch {}
// Old output (with --minify)
return"foo";try{return"bar"}catch{}
// New output (with --minify)
return"foo";

  • Consider negated bigints to have no side effects

    While esbuild currently considers 1, -1, and 1n to all have no side effects, it didn't previously consider -1n to have no side effects. This is because esbuild does constant folding with numbers but not bigints. However, it meant that unused negative bigint constants were not tree-shaken. With this release, esbuild will now consider these expressions to also be side-effect free:

    // Original code
let a = 1, b = -1, c = 1n, d = -1n
// Old output (with --bundle --minify)
(()=>{var n=-1n;})();
// New output (with --bundle --minify)
(()=>{})();

  • Support a configurable delay in watch mode before rebuilding (#3476, #4178)

    The watch() API now takes a delay option that lets you add a delay (in milliseconds) before rebuilding when a change is detected in watch mode. If you use a tool that regenerates multiple source files very slowly, this should make it more likely that esbuild's watch mode won't generate a broken intermediate build before the successful final build. This option is also available via the CLI using the --watch-delay= flag.

    This should also help avoid confusion about the watch() API's options argument. It was previously empty to allow for future API expansion, which caused some people to think that the documentation was missing. It's no longer empty now that the watch() API has an option.

  • Allow mixed array for entryPoints API option (#4223)

    The TypeScript type definitions now allow you to pass a mixed array of both string literals and object literals to the entryPoints API option, such as ['foo.js', { out: 'lib', in: 'bar.js' }]. This was always possible to do in JavaScript but the TypeScript type definitions were previously too restrictive.

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11

  • Fix TypeScript-specific class transform edge case (#3559)

    The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:

    // Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}
// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}
// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}

  • Minifier: allow reording a primitive past a side-effect (#3568)

    The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits

Updates netlify-cli from 17.38.1 to 23.3.1

Release notes

Sourced from netlify-cli's releases.

v23.3.1

23.3.1 (2025-08-22)

Bug Fixes

  • remove console log from proxy error handler (ce16363)

v23.3.0

23.3.0 (2025-08-22)

Features

  • allow a flag to not set gitignore on netlify dev (#7572) (dae4c4c)

v23.2.1

23.2.1 (2025-08-20)

Bug Fixes

  • deploy: make --create-site flag always work without interaction (#7570) (893e5f9)

v23.2.0

23.2.0 (2025-08-20)

Features

  • deploy: significantly improve agent experience (AX) with non-interactive deploy support (#7552) (784b6e4)

Bug Fixes

  • deps: update dependency @​netlify/build to v35.1.2 (#7564) (be4984c)
  • deps: update dependency @​netlify/zip-it-and-ship-it to v14.1.4 (#7565) (5026b17)
  • deps: update dependency chalk to v5.6.0 (#7567) (ee01335)
  • deps: update netlify packages (#7549) (f8840aa)
  • deps: update netlify packages (#7559) (7265160)

v23.1.4

23.1.4 (2025-08-12)

Bug Fixes

  • deps: update dependency @​netlify/build to v35.0.7 (#7548) (7bdcbfe)
  • deps: update netlify packages (#7546) (03b1595)

... (truncated)

Changelog

Sourced from netlify-cli's changelog.

23.3.1 (2025-08-22)

Bug Fixes

  • remove console log from proxy error handler (ce16363)

23.3.0 (2025-08-22)

Features

  • allow a flag to not set gitignore on netlify dev (#7572) (dae4c4c)

23.2.1 (2025-08-20)

Bug Fixes

  • deploy: make --create-site flag always work without interaction (#7570) (893e5f9)

23.2.0 (2025-08-20)

Features

  • deploy: significantly improve agent experience (AX) with non-interactive deploy support (#7552) (784b6e4)

Bug Fixes

  • deps: update dependency @​netlify/build to v35.1.2 (#7564) (be4984c)
  • deps: update dependency @​netlify/zip-it-and-ship-it to v14.1.4 (#7565) (5026b17)
  • deps: update dependency chalk to v5.6.0 (#7567) (ee01335)
  • deps: update netlify packages (#7549) (f8840aa)
  • deps: update netlify packages (#7559) (7265160)

23.1.4 (2025-08-12)

Bug Fixes

  • deps: update dependency @​netlify/build to v35.0.7 (#7548) (7bdcbfe)
  • deps: update netlify packages (#7546) (03b1595)

23.1.3 (2025-08-08)

Bug Fixes

... (truncated)

Commits
  • a873f90 chore(main): release 23.3.1
  • ce16363 fix: remove console log from proxy error handler
  • 2e102be chore(main): release 23.3.0 (#7575)
  • dae4c4c feat: allow a flag to not set gitignore on netlify dev (#7572)
  • c064e01 chore(main): release 23.2.1 (#7571)
  • 893e5f9 fix(deploy): make --create-site flag always work without interaction (#7570)
  • cc34a97 chore(main): release 23.2.0 (#7554)
  • 784b6e4 feat(deploy): significantly improve agent experience (AX) with non-interactiv...
  • bd4e641 chore(deps): update dependency memfs to v4.36.3 (#7566)
  • ee01335 fix(deps): update dependency chalk to v5.6.0 (#7567)
  • Additional commits viewable in compare view

Updates @netlify/build from 29.28.2 to 35.1.2

Release notes

Sourced from @​netlify/build's releases.

build: v35.1.2

35.1.2 (2025-08-19)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/functions-utils bumped from ^6.2.3 to ^6.2.4
      • @​netlify/zip-it-and-ship-it bumped from 14.1.3 to 14.1.4

build: v35.1.1

35.1.1 (2025-08-18)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/functions-utils bumped from ^6.2.2 to ^6.2.3
      • @​netlify/zip-it-and-ship-it bumped from 14.1.2 to 14.1.3

build: v35.1.0

35.1.0 (2025-08-14)

Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/config bumped from ^24.0.2 to ^24.0.3

build: v35.0.7

35.0.7 (2025-08-12)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/edge-bundler bumped from 14.5.1 to 14.5.2

build: v35.0.6

35.0.6 (2025-08-11)

... (truncated)

Changelog

Sourced from @​netlify/build's changelog.

35.1.2 (2025-08-19)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/functions-utils bumped from ^6.2.3 to ^6.2.4
      • @​netlify/zip-it-and-ship-it bumped from 14.1.3 to 14.1.4

35.1.1 (2025-08-18)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/functions-utils bumped from ^6.2.2 to ^6.2.3
      • @​netlify/zip-it-and-ship-it bumped from 14.1.2 to 14.1.3

35.1.0 (2025-08-14)

Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/config bumped from ^24.0.2 to ^24.0.3

35.0.7 (2025-08-12)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​netlify/edge-bundler bumped from 14.5.1 to 14.5.2

35.0.6 (2025-08-11)

Bug Fixes

  • deps: update dependency @​netlify/blobs to ^10.0.8 (#6584) (1e7332a)

... (truncated)

Commits

Updates http-proxy-middleware from 2.0.7 to 2.0.9

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.9

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v2.0.7...v2.0.8

Changelog

Sourced from http-proxy-middleware's changelog.

v2.0.9

  • fix(fixRequestBody): check readableLength

v2.0.8

  • fix(fixRequestBody): prevent multiple .write() calls
  • fix(fixRequestBody): handle invalid request
Commits

Updates ipx from 2.1.0 to 3.1.1

Release notes

Sourced from ipx's releases.

v3.1.1

compare changes

🩹 Fixes

  • fs: Ensure path stays within the exact directory (#271)

v3.1.0

compare changes

📦 Dependencies

  • Upgrade to svgo@4.0 (#231)
  • Upgrade to sharp@0.34 (notes)
  • Upgrade to unstorage@1.16

✅ Tests

  • Increase coverage (#260)

❤️ Contributors

v3.0.3

compare changes

🩹 Fixes

  • Correctly handle format_auto,animated (#235)

📖 Documentation

  • Added jsdocs to exported functions and types (#222)

❤️ Contributors

v3.0.1

compare changes

🩹 Fixes

  • http: Properly respect ignoreCacheControl option (96a8489)

... (truncated)

Changelog

Sourced from ipx's changelog.

v3.1.1

compare changes

🩹 Fixes

  • fs: Ensure path stays within the exact directory (#271)

❤️ Contributors

v3.1.0

compare changes

🏡 Chore

✅ Tests

  • Only include src for coverage report (#258)
  • Increase coverage (#260)

❤️ Contributors

v3.0.3

compare changes

v3.0.2

compare changes

🩹 Fixes

  • Correctly handle format_auto,animated (#235)

📖 Documentation

... (truncated)

Commits

Updates on-headers from 1.0.2 to 1.1.0

Release notes

Sourced from on-headers's releases.

1.1.0

Important

What's Changed

New Contributors

Full Changelog: jshttp/on-headers@v1.0.2...v1.1.0

Changelog

Sourced from on-headers's changelog.

1.1.0 / 2025-07-17

Commits
  • 4b017af 1.1.0
  • b636f2d ♻️ refactor header array code
  • 3e2c2d4 ✨ ignore falsy header keys, matching node behavior
  • 172eb41 ✨ support duplicate headers
  • c6e3849 🔒️ fix array handling
  • 6893518 💚 update CI - add newer node versions
  • 56a345d ✨ add script to update known hashes
  • 175ab21 👷 add upstream change detection (#31)
  • ce0b2c8 ci: apply OSSF Scorecard security best practices (#20)
  • 1a38c54 fix: use ubuntu-latest as ci runner (#19)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for on-headers since your current version.


Updates on-headers from 1.0.2 to 1.1.0

Release notes

Sourced from on-headers's releases.

1.1.0

Important

What's Changed

New Contributors

Full Changelog: jshttp/on-headers@v1.0.2...v1.1.0

Changelog

Sourced from on-headers's changelog.

1.1.0 / 2025-07-17

Commits
  • 4b017af 1.1.0
  • b636f2d ♻️ refactor header array code
  • 3e2c2d4 ✨ ignore falsy header keys, matching node behavior
  • 172eb41 ✨ support duplicate headers
  • c6e3849 🔒️ fix array handling
  • 6893518 💚 update CI - add newer node versions
  • 56a345d ✨ add script to update known hashes
  • 175ab21 👷 add upstream change detection (#31)
  • ce0b2c8 ci: apply OSSF Scorecard security best practices (#20)
  • 1a38c54 fix: use ubuntu-latest as ci runner (#19)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for on-headers since your current version.


Updates compression from 1.7.5 to 1.8.1

Release notes

Sourced from compression's releases.

v1.8.1

What's Changed

@dependabot
chore(deps): bump the npm_and_yarn group across 2 directories with 8 …
7f2c6ca 
…updates

Bumps the npm_and_yarn group with 4 updates in the / directory: [axios](https://github.com/axios/axios), [esbuild](https://github.com/evanw/esbuild), [netlify-cli](https://github.com/netlify/cli) and [@netlify/build](https://github.com/netlify/build/tree/HEAD/packages/build).
Bumps the npm_and_yarn group with 2 updates in the /demo directory: [on-headers](https://github.com/jshttp/on-headers) and [compression](https://github.com/expressjs/compression).


Updates `axios` from 1.7.9 to 1.11.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.9...v1.11.0)

Updates `esbuild` from 0.19.6 to 0.25.6
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.19.6...v0.25.6)

Updates `netlify-cli` from 17.38.1 to 23.3.1
- [Release notes](https://github.com/netlify/cli/releases)
- [Changelog](https://github.com/netlify/cli/blob/main/CHANGELOG.md)
- [Commits](netlify/cli@v17.38.1...v23.3.1)

Updates `@netlify/build` from 29.28.2 to 35.1.2
- [Release notes](https://github.com/netlify/build/releases)
- [Changelog](https://github.com/netlify/build/blob/main/packages/build/CHANGELOG.md)
- [Commits](https://github.com/netlify/build/commits/build-v35.1.2/packages/build)

Updates `http-proxy-middleware` from 2.0.7 to 2.0.9
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v2.0.7...v2.0.9)

Updates `ipx` from 2.1.0 to 3.1.1
- [Release notes](https://github.com/unjs/ipx/releases)
- [Changelog](https://github.com/unjs/ipx/blob/main/CHANGELOG.md)
- [Commits](unjs/ipx@v2.1.0...v3.1.1)

Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](jshttp/on-headers@v1.0.2...v1.1.0)

Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](jshttp/on-headers@v1.0.2...v1.1.0)

Updates `compression` from 1.7.5 to 1.8.1
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](expressjs/compression@1.7.5...v1.8.1)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.11.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.25.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: netlify-cli
  dependency-version: 23.3.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@netlify/build"
  dependency-version: 35.1.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: http-proxy-middleware
  dependency-version: 2.0.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ipx
  dependency-version: 3.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: compression
  dependency-version: 1.8.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2025
@semanticdiff-com
Copy link

semanticdiff-com bot commented Aug 24, 2025 •
edited
Loading

Review changes with  SemanticDiff

Changed Files
File Status
  demo/package-lock.json  58% smaller
  package-lock.json Unsupported file format
  package.json  0% smaller

@snyk-io
Copy link

snyk-io bot commented Aug 24, 2025

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant