Skip to content

Bump the production-dependencies group across 1 directory with 6 updates #202

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

Bump the production-dependencies group across 1 directory with 6 updates #202

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 14, 2025 •
edited
Loading

Bumps the production-dependencies group with 6 updates in the /backend directory:

Package From To
@octokit/core 6.1.4 6.1.5
cron 4.1.3 4.1.4
dotenv 16.4.7 16.5.0
express 4.21.2 5.1.0
@types/express 4.17.21 5.0.1
octokit 4.1.2 4.1.3

Updates @octokit/core from 6.1.4 to 6.1.5

Release notes

Sourced from @​octokit/core's releases.

v6.1.5

6.1.5 (2025-04-10)

Bug Fixes

  • deps: update dependency @​octokit/types to v14 (#731) (3700c41)
Commits
  • 3700c41 fix(deps): update dependency @​octokit/types to v14 (#731)
  • fcfe306 chore(deps): bump vite from 6.1.0 to 6.2.5 (#729)
  • 59c0138 ci(prettier): use Node LTS instead of Node v16 (#727)
  • 7304860 chore(deps): update dependency prettier to v3.5.3 (#726)
  • 768204c chore(deps): update dependency prettier to v3.5.2 (#725)
  • 3105ee1 chore(deps): update dependency semantic-release-plugin-update-version-in-file...
  • 2ddb327 chore(deps): update dependency prettier to v3.5.1 (#722)
  • See full diff in compare view

Updates cron from 4.1.3 to 4.1.4

Release notes

Sourced from cron's releases.

v4.1.4

4.1.4 (2025-04-06)

🛠 Builds

♻️ Chores

  • deps: lock file maintenance (c3190bf)

v4.1.4-beta.1

4.1.4-beta.1 (2025-04-06)

🛠 Builds

♻️ Chores

  • deps: lock file maintenance (c3190bf)
Changelog

Sourced from cron's changelog.

4.1.4 (2025-04-06)

🛠 Builds

♻️ Chores

  • deps: lock file maintenance (c3190bf)
Commits
  • fe6b815 Release v4.1.4 [skip ci]
  • dccbfc7 build(deps): update dependency @​types/luxon to ~3.6.0
  • c3190bf chore(deps): lock file maintenance
  • See full diff in compare view

Updates dotenv from 16.4.7 to 16.5.0

Changelog

Sourced from dotenv's changelog.

16.5.0 (2025-04-07)

Added

  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

  • Remove _log method. Use _debug #862
Commits

Updates express from 4.21.2 to 5.1.0

Release notes

Sourced from express's releases.

v5.1.0

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.1.0 / 2025-03-31

  • Add support for Uint8Array in res.send()
  • Add support for ETag option in res.sendFile()
  • Add support for multiple links with the same rel in res.links()
  • Add funding field to package.json
  • perf: use loop for acceptParams
  • refactor: prefix built-in node module imports
  • deps: remove setprototypeof
  • deps: remove safe-buffer
  • deps: remove utils-merge
  • deps: remove methods
  • deps: remove depd
  • deps: debug@^4.4.0
  • deps: body-parser@^2.2.0
  • deps: router@^2.2.0
  • deps: content-type@^1.0.5
  • deps: finalhandler@^2.1.0
  • deps: qs@^6.14.0
  • deps: [email protected]
  • deps: [email protected]

5.0.1 / 2024-10-08

5.0.0 / 2024-09-10

  • remove:
    • path-is-absolute dependency - use path.isAbsolute instead
  • breaking:
    • res.status() accepts only integers, and input must be greater than 99 and less than 1000
      • will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
      • will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
    • deps: [email protected]
    • res.redirect('back') and res.location('back') is no longer a supported magic string, explicitly use req.get('Referrer') || '/'.
  • change:
    • res.clearCookie will ignore user provided maxAge and expires options
  • deps: cookie-signature@^1.2.1
  • deps: [email protected]
  • deps: merge-descriptors@^2.0.0
  • deps: serve-static@^2.1.0
  • deps: [email protected]
  • deps: accepts@^2.0.0
  • deps: mime-types@^3.0.0
    • application/javascript => text/javascript
  • deps: type-is@^2.0.0
  • deps: content-disposition@^1.0.0

... (truncated)

Commits

Updates @types/express from 4.17.21 to 5.0.1

Commits

Updates octokit from 4.1.2 to 4.1.3

Release notes

Sourced from octokit's releases.

v4.1.3

4.1.3 (2025-04-10)

Bug Fixes

Commits
  • 4ccc6d3 fix(deps): update octokit monorepo (major) (#2836)
  • 80bc5c8 ci: use Node LTS instead of pinning to specific version (#2830)
  • 3826ee0 build(deps): lock file maintenance (#2831)
  • bca1b1e build(deps): bump vite from 6.2.0 to 6.2.5 (#2834)
  • d618aa3 chore(deps): update dependency prettier to v3.5.3 (#2822)
  • 0d3daf3 build(deps): lock file maintenance (#2824)
  • 5210482 build(deps): lock file maintenance (#2819)
  • e3c4717 chore(deps): update dependency prettier to v3.5.2 (#2818)
  • 2fff2f9 chore(deps): update dependency semantic-release-plugin-update-version-in-file...
  • 62946e9 build(deps): lock file maintenance (#2809)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 6 updates
c0cb579 
Bumps the production-dependencies group with 6 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@octokit/core](https://github.com/octokit/core.js) | `6.1.4` | `6.1.5` |
| [cron](https://github.com/kelektiv/node-cron) | `4.1.3` | `4.1.4` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.7` | `16.5.0` |
| [express](https://github.com/expressjs/express) | `4.21.2` | `5.1.0` |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `4.17.21` | `5.0.1` |
| [octokit](https://github.com/octokit/octokit.js) | `4.1.2` | `4.1.3` |



Updates `@octokit/core` from 6.1.4 to 6.1.5
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v6.1.4...v6.1.5)

Updates `cron` from 4.1.3 to 4.1.4
- [Release notes](https://github.com/kelektiv/node-cron/releases)
- [Changelog](https://github.com/kelektiv/node-cron/blob/main/CHANGELOG.md)
- [Commits](kelektiv/node-cron@v4.1.3...v4.1.4)

Updates `dotenv` from 16.4.7 to 16.5.0
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.7...v16.5.0)

Updates `express` from 4.21.2 to 5.1.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.21.2...v5.1.0)

Updates `@types/express` from 4.17.21 to 5.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `octokit` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](octokit/octokit.js@v4.1.2...v4.1.3)

---
updated-dependencies:
- dependency-name: "@octokit/core"
  dependency-version: 6.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cron
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 16.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: express
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: octokit
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 14, 2025
@github-actions
Copy link

github-actions bot commented Apr 14, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 28, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 28, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/backend/production-dependencies-95f99fbbae branch April 28, 2025 20:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants