Skip to content

Bump the npm_and_yarn group across 1 directory with 12 updates#25

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-86f4c1a43c
Open

Bump the npm_and_yarn group across 1 directory with 12 updates#25
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-86f4c1a43c

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package From To
npm 5.10.0 11.9.0
ajv 6.12.0 6.14.0
copy-props 2.0.4 2.0.5
decode-uri-component 0.2.0 0.2.2
es5-ext 0.10.53 0.10.64
path-parse 1.0.6 1.0.7

Updates npm from 5.10.0 to 11.9.0

Release notes

Sourced from npm's releases.

v11.9.0

11.9.0 (2026-02-04)

Features

Bug Fixes

Dependencies

Chores

v11.8.0

11.8.0 (2026-01-21)

Features

  • 545e861 #8828 show proxy environment variables in npm config list (Max Black)

Bug Fixes

Documentation

Dependencies

Chores

... (truncated)

Changelog

Sourced from npm's changelog.

11.9.0 (2026-02-04)

Features

Bug Fixes

Dependencies

Chores

11.8.0 (2026-01-21)

Features

  • 545e861 #8828 show proxy environment variables in npm config list (Max Black)

Bug Fixes

Documentation

Dependencies

Chores

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by gar, a new releaser for npm since your current version.


Updates ajv from 6.12.0 to 6.14.0

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@​issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

Commits
  • e3af0a7 6.14.0
  • b552ed6 add regExp option to address $data exploit via a regular expression (CVE-2025...
  • 72f2286 docs: update v7 info
  • 231e52b Merge pull request #1320 from philsturgeon/patch-1
  • d3475fc Add spectral, an AJV util from a sponsor
  • 413afe0 docs: v7.0.0-beta.3
  • 11e997b update readme for v7
  • fe59143 6.12.6
  • d580d3e Merge pull request #1298 from ajv-validator/fix-url
  • fd36389 fix: regular expression for "url" format
  • Additional commits viewable in compare view

Updates chownr from 1.0.1 to 3.0.0

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates copy-props from 2.0.4 to 2.0.5

Commits

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

  • Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

  • Switch to GitHub workflows 76abc93
  • Fix issue where decode throws - fixes #6 746ca5d
  • Update license (#1) 486d7e2
  • Tidelift tasks a650457
  • Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

Updates es5-ext from 0.10.53 to 0.10.64

Release notes

Sourced from es5-ext's releases.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

Comparison since last release

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

Comparison since last release

0.10.62 (2022-08-02)

Maintenance Improvements

Comparison since last release

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Comparison since last release

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

... (truncated)

Changelog

Sourced from es5-ext's changelog.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

0.10.62 (2022-08-02)

Maintenance Improvements

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

0.10.59 (2022-03-17)

Maintenance Improvements

0.10.58 (2022-03-11)

... (truncated)

Commits
  • f76b03d chore: Release v0.10.64
  • 2881acd chore: Bump dependencies
  • c2e2bb9 fix: Revert update meant to fix Powershell issue, as it's a regression
  • 16f2b72 docs: Fix date in the changelog
  • de4e03c chore: Release v0.10.63
  • 3fd53b7 chore: Upgrade lint-staged to v13
  • bf8ed79 chore: Ensure postinstall script does not crash on Windows
  • 2cbbb07 chore: Bump dependencies
  • 22d0416 chore: Bump LICENSE year
  • a52e957 fix: Support ES2015+ function definitions in function#toStringTokens()
  • Additional commits viewable in compare view
Install script changes

This version adds postinstall script that runs during installation. Review the package contents before updating.


Updates http-cache-semantics from 3.8.1 to 4.2.0

Commits

Updates lodash from 3.10.1 to 4.17.15

Release notes

Sourced from lodash's releases.

4.0.0

lodash v4.0.0

2015 was big year! Lodash became the most depended on npm package, passed 1 billion downloads, & its v3 release saw massive adoption!

The year was also one of collaboration, as discussions began on merging Lodash & Underscore. Much of Lodash v4 is proofing out the ideas from those discussions. Lodash v4 would not be possible without the collaboration & contributions of the Underscore core team. In the spirit of merging our teams have blended with several members contributing to both libraries.

For 2016 & lodash v4.0.0 we wanted to cut loose, push forward, & take things up a notch!

Modern only

With v4 we’re breaking free from old projects, old environments, & dropping old IE < 9 support!

4 kB Core

Lodash’s kitchen-sink size will continue to grow as new methods & functionality are added. However, we now offer a 4 kB (gzipped) core build that’s compatible with Backbone v1.2.4 for folks who want Lodash without lugging around the kitchen sink.

More ES6

We’ve continued to embrace ES6 with methods like _.isSymbol, added support for cloning & comparing array buffers, maps, sets, & symbols, converting iterators to arrays, & iterable _(…).

In addition, we’ve published an es-build & pulled babel-plugin-lodash into core to make tree-shaking a breeze.

More Modular

Pop quiz! 📣

What category path does the bindAll method belong to? Is it

A) require('lodash/function/bindAll') B) require('lodash/utility/bindAll') C) require('lodash/util/bindAll')

Don’t know? Well, with v4 it doesn’t matter because now module paths are as simple as

var bindAll = require('lodash/bindAll');

We’ve also reduced module complexity making it easier to create smaller bundles. This has helped Lodash adoption with libraries like Async & Redux!

1st Class FP

With v3 we introduced lodash-fp. We learned a lot & with v4 we decided to pull it into core.

Now you can get immutable, auto-curried, iteratee-first, data-last methods as simply as

var _ = require('lodash/fp');
var object = { 'a': 1 };
</tr></table>

... (truncated)

Commits

Updates npm-registry-fetch from 1.1.1 to 19.1.1

Release notes

Sourced from npm-registry-fetch's releases.

v19.1.1

19.1.1 (2025-11-13)

Dependencies

Chores

v19.1.0

19.1.0 (2025-10-28)

Features

v19.0.0

19.0.0 (2025-07-24)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Dependencies

Chores

v18.0.2

18.0.2 (2024-10-16)

Bug Fixes

Chores

v18.0.1

18.0.1 (2024-10-02)

Dependencies

v18.0.0

18.0.0 (2024-09-26)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^18.17.0 || >=20.5.0

Bug Fixes

Dependencies

... (truncated)

Changelog

Sourced from npm-registry-fetch's changelog.

19.1.1 (2025-11-13)

Dependencies

Chores

19.1.0 (2025-10-28)

Features

19.0.0 (2025-07-24)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Dependencies

Chores

18.0.2 (2024-10-16)

Bug Fixes

Chores

18.0.1 (2024-10-02)

Dependencies

18.0.0 (2024-09-26)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^18.17.0 || >=20.5.0

Bug Fixes

Dependencies

Chores

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for npm-registry-fetch since your current version.


Updates npm-user-validate from 1.0.0 to 4.0.0

Release notes

Sourced from npm-user-validate's releases.

v4.0.0

4.0.0 (2025-10-22)

⚠️ BREAKING CHANGES

  • npm-user-validate now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Chores

v3.0.0

3.0.0 (2024-09-03)

⚠️ BREAKING CHANGES

  • npm-user-validate now supports node ^18.17.0 || >=20.5.0

Bug Fixes

Chores

@dependabot
Bump the npm_and_yarn group across 1 directory with 12 updates
797f21f 
Bumps the npm_and_yarn group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [npm](https://github.com/npm/cli) | `5.10.0` | `11.9.0` |
| [ajv](https://github.com/ajv-validator/ajv) | `6.12.0` | `6.14.0` |
| [copy-props](https://github.com/gulpjs/copy-prop) | `2.0.4` | `2.0.5` |
| [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` |
| [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.64` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |



Updates `npm` from 5.10.0 to 11.9.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v5.10.0...v11.9.0)

Updates `ajv` from 6.12.0 to 6.14.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.0...v6.14.0)

Updates `chownr` from 1.0.1 to 3.0.0
- [Commits](isaacs/chownr@v1.0.1...v3.0.0)

Updates `copy-props` from 2.0.4 to 2.0.5
- [Commits](https://github.com/gulpjs/copy-prop/commits)

Updates `decode-uri-component` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

Updates `es5-ext` from 0.10.53 to 0.10.64
- [Release notes](https://github.com/medikoo/es5-ext/releases)
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md)
- [Commits](medikoo/es5-ext@v0.10.53...v0.10.64)

Updates `http-cache-semantics` from 3.8.1 to 4.2.0
- [Commits](https://github.com/kornelski/http-cache-semantics/commits)

Updates `lodash` from 3.10.1 to 4.17.15
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@3.10.1...4.17.15)

Updates `npm-registry-fetch` from 1.1.1 to 19.1.1
- [Release notes](https://github.com/npm/npm-registry-fetch/releases)
- [Changelog](https://github.com/npm/npm-registry-fetch/blob/main/CHANGELOG.md)
- [Commits](npm/npm-registry-fetch@v1.1.1...v19.1.1)

Updates `npm-user-validate` from 1.0.0 to 4.0.0
- [Release notes](https://github.com/npm/npm-user-validate/releases)
- [Changelog](https://github.com/npm/npm-user-validate/blob/main/CHANGELOG.md)
- [Commits](npm/npm-user-validate@v1.0.0...v4.0.0)

Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

Updates `ssri` from 5.3.0 to 13.0.1
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md)
- [Commits](npm/ssri@v5.3.0...v13.0.1)

---
updated-dependencies:
- dependency-name: npm
  dependency-version: 11.9.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ajv
  dependency-version: 6.14.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: chownr
  dependency-version: 3.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: copy-props
  dependency-version: 2.0.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: decode-uri-component
  dependency-version: 0.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: es5-ext
  dependency-version: 0.10.64
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-cache-semantics
  dependency-version: 4.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.15
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: npm-registry-fetch
  dependency-version: 19.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: npm-user-validate
  dependency-version: 4.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-parse
  dependency-version: 1.0.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ssri
  dependency-version: 13.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 8, 2026
@acquia-stalebot-platauto
Copy link
Copy Markdown

acquia-stalebot-platauto Bot commented Apr 24, 2026

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Please remove the stale label to avoid it being closed. Thank you for your contributions. More info: https://github.com/acquia/devops-github-administration/blob/main/docs/operations_related_to_repositories.md#acquia-stale-bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code stale

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants