Skip to content

Combined PR for CG alerts fix and Dependabot PRs#3043

Merged
v-sharmachir merged 52 commits intomainfrom
users/v-jitendjain/combined_dependabot_cg_PR
Apr 13, 2026
Merged

Combined PR for CG alerts fix and Dependabot PRs#3043
v-sharmachir merged 52 commits intomainfrom
users/v-jitendjain/combined_dependabot_cg_PR

Conversation

@v-jitendjain
Copy link
Copy Markdown
Contributor

This pull request updates various dependencies across multiple packages to keep them up-to-date with the latest versions, focusing primarily on devDependencies and some runtime dependencies. The changes are mostly minor version bumps for tools related to testing, linting, and core libraries, ensuring improved compatibility, security, and stability.

Dependency Updates

This PR addresses the fix from below multiple PRs.
This pull request updates dependencies across multiple packages to address security, compatibility, and performance improvements. Most changes are minor version bumps to keep the project up-to-date with the latest releases. The updates affect both development and production dependencies, including core libraries such as lodash, puppeteer, and various build tools.

Dependency Updates:

Build and Tooling Updates:

  • Bumped versions of build tools and linters, including @typescript-eslint/parser, commander, webpack, rollup, and @rollup/plugin-commonjs, to their latest minor or patch releases for improved development experience and compatibility. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11]
  • Updated jest, ts-jest, and related test dependencies to maintain up-to-date testing infrastructure. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15]

Production Dependency Updates:

  • Updated applicationinsights, @apify/log, @crawlee/browser-pool, @crawlee/puppeteer, @opentelemetry/*, and other key dependencies to their latest compatible versions for improved observability, logging, and crawling capabilities. [1] [2] [3] [4] [5] [6] [7] [8] [9]
  • Added or updated specific sub-dependencies in package.json for better resolution and security (brace-expansion, file-type).

Other Dependency Bumps:

  • Updated convict, deep-equal-in-any-order, and other utility libraries to latest versions for bug fixes and maintenance. [1] [2]

These updates ensure the codebase remains secure, compatible with the latest ecosystem changes, and benefits from recent bug fixes and performance improvements. below Dependabot PRs are already merged into this branch and tested on dev VM environment.
#3000
#2994
#2978
#3042
#3041
#3040
#3039
#3038
#3037
#3036
#3035
#3034
#3031
#3028
#3025
#3023
#3022
#3021
#3020
#3013
#3012
#3011
#3007

dependabot Bot and others added 30 commits February 25, 2026 23:28
Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.0.3 to 5.2.0.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)
- [Commits](patrickjuchli/basic-ftp@v5.0.3...v5.2.0)

---
updated-dependencies:
- dependency-name: basic-ftp
  dependency-version: 5.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [commander](https://github.com/tj/commander.js) from 14.0.2 to 14.0.3.
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.2...v14.0.3)

---
updated-dependencies:
- dependency-name: commander
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [rimraf](https://github.com/isaacs/rimraf) from 6.0.1 to 6.1.3.
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.0.1...v6.1.3)

---
updated-dependencies:
- dependency-name: rimraf
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@crawlee/browser-pool](https://github.com/apify/crawlee) from 3.15.2 to 3.16.0.
- [Release notes](https://github.com/apify/crawlee/releases)
- [Changelog](https://github.com/apify/crawlee/blob/master/CHANGELOG.md)
- [Commits](apify/crawlee@v3.15.2...v3.16.0)

---
updated-dependencies:
- dependency-name: "@crawlee/browser-pool"
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@crawlee/puppeteer](https://github.com/apify/crawlee) from 3.15.2 to 3.16.0.
- [Release notes](https://github.com/apify/crawlee/releases)
- [Changelog](https://github.com/apify/crawlee/blob/master/CHANGELOG.md)
- [Commits](apify/crawlee@v3.15.2...v3.16.0)

---
updated-dependencies:
- dependency-name: "@crawlee/puppeteer"
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) from 1.37.0 to 1.40.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.37.0...semconv/v1.40.0)

---
updated-dependencies:
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [applicationinsights](https://github.com/microsoft/ApplicationInsights-node.js) from 3.12.0 to 3.14.0.
- [Release notes](https://github.com/microsoft/ApplicationInsights-node.js/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-node.js/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-node.js@3.12.0...3.14.0)

---
updated-dependencies:
- dependency-name: applicationinsights
  dependency-version: 3.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.1 to 3.4.2.
- [Commits](WebReflection/flatted@v3.3.1...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.0 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.0...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [convict](https://github.com/mozilla/node-convict) from 6.2.4 to 6.2.5.
- [Changelog](https://github.com/mozilla/node-convict/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mozilla/node-convict/commits)

---
updated-dependencies:
- dependency-name: convict
  dependency-version: 6.2.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.6 to 0.8.12.
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](xmldom/xmldom@0.8.6...0.8.12)

---
updated-dependencies:
- dependency-name: "@xmldom/xmldom"
  dependency-version: 0.8.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@apify/log](https://github.com/apify/apify-shared-js) from 2.5.28 to 2.5.34.
- [Release notes](https://github.com/apify/apify-shared-js/releases)
- [Changelog](https://github.com/apify/apify-shared-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apify/apify-shared-js/compare/@apify/log@2.5.28...@apify/log@2.5.34)

---
updated-dependencies:
- dependency-name: "@apify/log"
  dependency-version: 2.5.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 8.51.0 to 8.58.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.58.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [deep-equal-in-any-order](https://github.com/oprogramador/deep-equal-in-any-order) from 2.1.0 to 2.2.0.
- [Commits](oprogramador/deep-equal-in-any-order@v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: deep-equal-in-any-order
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [azure-functions-core-tools](https://github.com/Azure/azure-functions-core-tools) from 4.6.0 to 4.9.0.
- [Release notes](https://github.com/Azure/azure-functions-core-tools/releases)
- [Changelog](https://github.com/Azure/azure-functions-core-tools/blob/main/release_notes.md)
- [Commits](https://github.com/Azure/azure-functions-core-tools/commits)

---
updated-dependencies:
- dependency-name: azure-functions-core-tools
  dependency-version: 4.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.57.0 to 1.59.1.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.57.0...v1.59.1)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.59.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) from 3.30.0 to 3.33.0.
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.33.0/simple-git)

---
updated-dependencies:
- dependency-name: simple-git
  dependency-version: 3.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@azure/functions](https://github.com/Azure/azure-functions-nodejs-library) from 4.10.0 to 4.12.0.
- [Release notes](https://github.com/Azure/azure-functions-nodejs-library/releases)
- [Commits](https://github.com/Azure/azure-functions-nodejs-library/commits)

---
updated-dependencies:
- dependency-name: "@azure/functions"
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [puppeteer](https://github.com/puppeteer/puppeteer) from 24.34.0 to 24.40.0.
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.34.0...puppeteer-v24.40.0)

---
updated-dependencies:
- dependency-name: puppeteer
  dependency-version: 24.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) from 0.208.0 to 0.214.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.208.0...experimental/v0.214.0)

---
updated-dependencies:
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) from 29.0.0 to 29.0.2.
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.2/packages/commonjs)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 29.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [webpack](https://github.com/webpack/webpack) from 5.104.1 to 5.105.4.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.104.1...v5.105.4)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.105.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [rollup](https://github.com/rollup/rollup) from 4.54.0 to 4.60.1.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.54.0...v4.60.1)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.60.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…ioninsights-3.14.0' into users/v-jitendjain/combined_dependabot_cg_PR
…browser-pool-3.16.0' into users/v-jitendjain/combined_dependabot_cg_PR
…h-2.3.2' into users/v-jitendjain/combined_dependabot_cg_PR
…3.4.2' into users/v-jitendjain/combined_dependabot_cg_PR
…6.2.5' into users/v-jitendjain/combined_dependabot_cg_PR
…rs-4.7.9' into users/v-jitendjain/combined_dependabot_cg_PR
…mldom-0.8.12' into users/v-jitendjain/combined_dependabot_cg_PR
…g-2.5.34' into users/v-jitendjain/combined_dependabot_cg_PR
…pt-eslint/parser-8.58.0' into users/v-jitendjain/combined_dependabot_cg_PR
…al-in-any-order-2.2.0' into users/v-jitendjain/combined_dependabot_cg_PR
…nctions-core-tools-4.9.0' into users/v-jitendjain/combined_dependabot_cg_PR
…ht/test-1.59.1' into users/v-jitendjain/combined_dependabot_cg_PR
…it-3.33.0' into users/v-jitendjain/combined_dependabot_cg_PR
…r-24.40.0' into users/v-jitendjain/combined_dependabot_cg_PR
…metry/instrumentation-0.214.0' into users/v-jitendjain/combined_dependabot_cg_PR
…lugin-commonjs-29.0.2' into users/v-jitendjain/combined_dependabot_cg_PR
…5.105.4' into users/v-jitendjain/combined_dependabot_cg_PR
….60.1' into users/v-jitendjain/combined_dependabot_cg_PR
…r-14.0.3' into users/v-jitendjain/combined_dependabot_cg_PR
…p-5.2.0' into users/v-jitendjain/combined_dependabot_cg_PR
@v-jitendjain v-jitendjain requested review from a team as code owners April 3, 2026 13:19
@v-jitendjain
Copy link
Copy Markdown
Contributor Author

/azp run

@v-sharmachir v-sharmachir merged commit 70b2301 into main Apr 13, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants