Skip to content

Comments

build(deps): bump the npm_and_yarn group across 1 directory with 20 updates#11

Open
dependabot[bot] wants to merge 18 commits intonew_25_10_08from
dependabot/npm_and_yarn/npm_and_yarn-5639360b8b
Open

build(deps): bump the npm_and_yarn group across 1 directory with 20 updates#11
dependabot[bot] wants to merge 18 commits intonew_25_10_08from
dependabot/npm_and_yarn/npm_and_yarn-5639360b8b

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 16, 2025

Bumps the npm_and_yarn group with 15 updates in the / directory:

Package From To
webpack-dev-server 2.11.3 5.2.1
minimist 0.2.0 0.2.4
cli 0.6.6 removed
highlight.js 9.15.5 9.18.5
elliptic 6.4.1 6.6.1
fstream 1.0.11 1.0.12
tunnel-agent 0.4.3 0.6.0
request 2.40.0 2.88.2
js-yaml 3.12.1 3.14.1
lodash.mergewith 4.6.1 4.6.2
mixin-deep 1.3.1 1.3.2
object-path 0.11.4 removed
set-value 2.0.0 2.0.1
yargs-parser 5.0.0 5.0.1
y18n 3.2.1 3.2.2

Updates webpack-dev-server from 2.11.3 to 5.2.1

Release notes

Sourced from webpack-dev-server's releases.

v5.2.1

5.2.1 (2025-03-26)

Security

  • cross-origin requests are not allowed unless allowed by Access-Control-Allow-Origin header
  • requests with an IP addresses in the Origin header are not allowed to connect to WebSocket server unless configured by allowedHosts or it different from the Host header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

Bug Fixes

  • prevent overlay for errors caught by React error boundaries (#5431) (8c1abc9)
  • take the first network found instead of the last one, this restores the same behavior as 5.0.4 (#5411) (ffd0b86)

v5.2.0

5.2.0 (2024-12-11)

Features

  • added getClientEntry and getClientHotEntry methods to get clients entries (dc642a8)

Bug Fixes

  • speed up initial client bundling (145b5d0)

v5.1.0

5.1.0 (2024-09-03)

Features

  • add visual progress indicators (a8f40b7)
  • added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
  • allow the server option to be Function (#5275) (02a1c6d)
  • http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

v5.0.4

5.0.4 (2024-03-19)

... (truncated)

Changelog

Sourced from webpack-dev-server's changelog.

5.2.1 (2025-03-26)

Security

  • cross-origin requests are not allowed unless allowed by Access-Control-Allow-Origin header
  • requests with an IP addresses in the Origin header are not allowed to connect to WebSocket server unless configured by allowedHosts or it different from the Host header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

Bug Fixes

  • prevent overlay for errors caught by React error boundaries (#5431) (8c1abc9)
  • take the first network found instead of the last one, this restores the same behavior as 5.0.4 (#5411) (ffd0b86)

5.2.0 (2024-12-11)

Features

  • added getClientEntry and getClientHotEntry methods to get clients entries (dc642a8)

Bug Fixes

  • speed up initial client bundling (145b5d0)

5.1.0 (2024-09-03)

Features

  • add visual progress indicators (a8f40b7)
  • added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
  • allow the server option to be Function (#5275) (02a1c6d)
  • http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

5.0.4 (2024-03-19)

Bug Fixes

... (truncated)

Commits
  • 0d22a08 chore(release): 5.2.1
  • 6045b1e chore(deps): update (#5444)
  • ffd0b86 fix: take the first network found instead of the last one, this restores the ...
  • 9ea7b08 ci: update dependency-review-action (#5442)
  • 5c9378b Merge commit from fork
  • d2575ad Merge commit from fork
  • 8c1abc9 fix: prevent overlay for errors caught by React error boundaries (#5431)
  • 5a39c70 ci: update codecov/codecov-action to v5 (#5406)
  • 55220a8 chore(deps-dev): bump the dependencies group across 1 directory with 4 update...
  • 09f6f8e chore(deps): bump the dependencies group across 1 directory with 2 updates (#...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack-dev-server since your current version.


Updates minimist from 0.2.0 to 0.2.4

Changelog

Sourced from minimist's changelog.

v0.2.4 - 2023-02-24

Commits

  • [Tests] check side-effects of pollution protection 3dbebff
  • [Robustness] rework isConstructorOrProto 34e20b8
  • [Dev Deps] update tape d031f9b

v0.2.3 - 2023-02-09

Merged

Fixed

Commits

  • [eslint] fix indentation and whitespace e5f5067
  • [eslint] more cleanup 36ac5d0
  • [eslint] fix indentation 34b0f1c
  • isConstructorOrProto adapted from PR ef9153f
  • [Dev Deps] update @ljharb/eslint-config, aud 098873c
  • [Dev Deps] add missing npmignore dev dep 3226afa

v0.2.2 - 2022-10-10

Commits

  • [meta] add auto-changelog 73923d2
  • [actions] add reusable workflows d80727d
  • [eslint] add eslint; rules to enable later are warnings 48bc06a
  • [readme] rename and add badges 5df0fe4
  • [Dev Deps] switch from covert to nyc a48b128
  • [Dev Deps] update covert, tape; remove unnecessary tap f0fb958
  • [meta] create FUNDING.yml; add funding in package.json 3639e0c
  • [meta] use npmignore to autogenerate an npmignore file be2e038
  • Only apps should have lockfiles 282b570
  • [meta] add safe-publish-latest 4b927de
  • [Tests] add aud in posttest b32d9bd
  • [meta] update repo URLs f9fdfc0

v0.2.1 - 2020-03-12

Commits
  • 8c6be48 v0.2.4
  • d031f9b [Dev Deps] update tape
  • 3dbebff [Tests] check side-effects of pollution protection
  • 34e20b8 [Robustness] rework isConstructorOrProto
  • c0b2661 v0.2.3
  • 63b8fee [Fix] Fix long option followed by single dash (#17)
  • 72239e6 [Tests] Remove duplicate test (#12)
  • 34b0f1c [eslint] fix indentation
  • 3226afa [Dev Deps] add missing npmignore dev dep
  • 098873c [Dev Deps] update @ljharb/eslint-config, aud
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.


Removes cli

Updates highlight.js from 9.15.5 to 9.18.5

Release notes

Sourced from highlight.js's releases.

11.10.0 - Welcome to the 2024 Mega-smorgisbord update.

Sorry for the wait, this one is a doozie, thanks to all the contributors who made it possible!

CAVEATS / POTENTIALLY BREAKING CHANGES

[!IMPORTANT] This version drops support for Node 16.x, which is no longer supported by Node.js.

Core Grammars:

  • enh(typescript) add support for satisfies operator [Kisaragi Hiu][]
  • enc(c) added more C23 keywords [Melkor-1][]
  • enh(json) added jsonc as an alias [BackupMiles][]
  • enh(gml) updated to latest language version (GML v2024.2) [gnysek][]
  • enh(c) added more C23 keywords and preprcoessor directives [Eisenwave][]
  • enh(js/ts) support namespaced tagged template strings [Aral Balkan][]
  • enh(perl) fix false-positive variable match at end of string [Josh Goebel][]
  • fix(cpp) not all kinds of number literals are highlighted correctly [Lê Duy Quang][]
  • fix(css) fix overly greedy pseudo class matching [Bradley Mackey][]
  • enh(arcade) updated to ArcGIS Arcade version 1.24 [Kristian Ekenes][]
  • fix(typescript): params types [Mohamed Ali][]
  • fix(rust) fix escaped double quotes in string [Mohamed Ali][]
  • fix(rust) fix for r# raw identifier not being highlighted correctly. [JaeBaek Lee][]
  • enh(rust) Adding union to be recognized as a keyword in Rust. [JaeBaek Lee][]
  • fix(yaml) fix for yaml with keys having brackets highlighted incorrectly [Aneesh Kulkarni][]
  • fix(csharp) add raw string highlighting for C# 11. [Tara][]
  • fix(bash) fix # within token being detected as the start of a comment [Felix Uhl][]
  • fix(python) fix or conflicts with string highlighting [Mohamed Ali][]
  • enh(python) adds a scope to the self variable [Lee Falin][]
  • enh(delphi) allow digits to be omitted for hex and binary literals [Jonah Jeleniewski][]
  • enh(delphi) add support for digit separators [Jonah Jeleniewski][]
  • enh(delphi) add support for character strings with non-decimal numerics [Jonah Jeleniewski][]
  • fix(javascript) incorrect function name highlighting [CY Fung][]
  • fix(1c) fix escaped symbols "+-;():=,[]" literals [Vitaly Barilko][]
  • fix(swift) correctly highlight generics and conformances in type definitions [Bradley Mackey][]
  • enh(swift) add package keyword [Bradley Mackey][]
  • fix(swift) ensure keyword attributes highlight correctly [Bradley Mackey][]
  • fix(types) fix interface LanguageDetail > keywords [Patrick Chiu]
  • enh(java) add goto to be recognized as a keyword in Java [Alvin Joy][]
  • enh(bash) add keyword sudo [Alvin Joy][]
  • fix(haxe) captures new keyword without capturing it within variables/class names [Cameron Taylor][]
  • fix(go) fix go number literals to accept _ separators, add hex p exponents [Lisa Ugray][]
  • enh(markdown) add entity support [David Schach][] [TaraLei][]
  • enh(css) add justify-items and justify-self attributes [Vasily Polovnyov][]
  • enh(css) add accent-color, appearance, color-scheme, rotate, scale and translate attributes [Carl Räfting][]
  • fix(fortran) fixes parsing of keywords delimited by dots [Julien Bloino][]

... (truncated)

Changelog

Sourced from highlight.js's changelog.

Release v9.18.5

Version 9 has reached end-of-support and will not receive future updates or fixes.

Please see VERSION_10_UPGRADE.md and perhaps SECURITY.md.

  • enh: Post-install script can be disabled with HLJS_HIDE_UPGRADE_WARNING=yes
  • fix: Deprecation notice logged at library startup a console.log vs console.warn.
    • Notice only shown if actually highlighting code, not just requiring the library.
    • Node.js treats warn the same as error and that was problematic.
    • You (or perhaps your indirect dependency) may disable the notice with the hideUpgradeWarningAcceptNoSupportOrSecurityUpdates option
    • You can also set HLJS_HIDE_UPGRADE_WARNING=yes in your envionment to disable the warning

Example:

hljs.configure({
  hideUpgradeWarningAcceptNoSupportOrSecurityUpdates: true
})

Reference: highlightjs/highlight.js#2877

Release v9.18.4

Version 9 has reached end-of-support and will not receive future updates or fixes.

Please see VERSION_10_UPGRADE.md and perhaps SECURITY.md.

  • fix(livescript) fix potential catastrophic backtracking (#2852) [commit]

Version 9.18.3

  • fix(parser) Freezing issue with illegal 0 width illegals (#2524)
    • backported from v10.x

Version 9.18.2

Fixes:

  • fix(night) Prevent object prototype values from being returned by getLanguage (#2636) night

... (truncated)

Commits

Updates dns-packet from 1.3.1 to 5.6.1

Changelog

Sourced from dns-packet's changelog.

Version 5.6.0 - 2023-04-18

  • Feature: Added support for the TLSA record type.

Version 5.5.0 - 2023-03-27

  • Feature: Added support for the NAPTR record type.

Version 5.4.0 - 2022-06-14

  • Feature: Added support for the SSHFP record type.

Version 5.2.0 - 2019-02-21

  • Feature: Added support for de/encoding certain OPT options.

Version 5.1.0 - 2019-01-22

  • Feature: Added support for the RP record type.

Version 5.0.0 - 2018-06-01

  • Breaking: Node.js 6.0.0 or greater is now required.
  • Feature: Added support for DNSSEC record types.

Version 4.1.0 - 2018-02-11

  • Feature: Added support for the MX record type.

Version 4.0.0 - 2018-02-04

  • Feature: Added streamEncode and streamDecode methods for encoding TCP packets.
  • Breaking: Changed the decoded value of TXT records to an array of Buffers. This is to accomodate DNS-SD records which rely on the individual strings record being separated.
  • Breaking: Renamed the flag_trunc and flag_auth to flag_tc and flag_aa to match the names of these in the dns standards.

Version 3.0.0 - 2018-01-12

  • Breaking: The class option has been changed from integer to string.

Version 2.0.0 - 2018-01-11

  • Breaking: Converted module to ES2015, now requires Node.js 4.0 or greater
Commits

Updates elliptic from 6.4.1 to 6.6.1

Commits

Updates fstream from 1.0.11 to 1.0.12

Commits

Updates uglify-js from 2.3.6 to 2.8.29

Commits
Maintainer changes

This version was pushed to npm by alexlamsl, a new releaser for uglify-js since your current version.


Updates highlight.js from 9.15.5 to 9.18.5

Release notes

Sourced from highlight.js's releases.

11.10.0 - Welcome to the 2024 Mega-smorgisbord update.

Sorry for the wait, this one is a doozie, thanks to all the contributors who made it possible!

CAVEATS / POTENTIALLY BREAKING CHANGES

[!IMPORTANT] This version drops support for Node 16.x, which is no longer supported by Node.js.

Core Grammars:

  • enh(typescript) add support for satisfies operator [Kisaragi Hiu][]
  • enc(c) added more C23 keywords [Melkor-1][]
  • enh(json) added jsonc as an alias [BackupMiles][]
  • enh(gml) updated to latest language version (GML v2024.2) [gnysek][]
  • enh(c) added more C23 keywords and preprcoessor directives [Eisenwave][]
  • enh(js/ts) support namespaced tagged template strings [Aral Balkan][]
  • enh(perl) fix false-positive variable match at end of string [Josh Goebel][]
  • fix(cpp) not all kinds of number literals are highlighted correctly [Lê Duy Quang][]
  • fix(css) fix overly greedy pseudo class matching [Bradley Mackey][]
  • enh(arcade) updated to ArcGIS Arcade version 1.24 [Kristian Ekenes][]
  • fix(typescript): params types [Mohamed Ali][]
  • fix(rust) fix escaped double quotes in string [Mohamed Ali][]
  • fix(rust) fix for r# raw identifier not being highlighted correctly. [JaeBaek Lee][]
  • enh(rust) Adding union to be recognized as a keyword in Rust. [JaeBaek Lee][]
  • fix(yaml) fix for yaml with keys having brackets highlighted incorrectly [Aneesh Kulkarni][]
  • fix(csharp) add raw string highlighting for C# 11. [Tara][]
  • fix(bash) fix # within token being detected as the start of a comment [Felix Uhl][]
  • fix(python) fix or conflicts with string highlighting [Mohamed Ali][]
  • enh(python) adds a scope to the self variable [Lee Falin][]
  • enh(delphi) allow digits to be omitted for hex and binary literals [Jonah Jeleniewski][]
  • enh(delphi) add support for digit separators [Jonah Jeleniewski][]
  • enh(delphi) add support for character strings with non-decimal numerics [Jonah Jeleniewski][]
  • fix(javascript) incorrect function name highlighting [CY Fung][]
  • fix(1c) fix escaped symbols "+-;():=,[]" literals [Vitaly Barilko][]
  • fix(swift) correctly highlight generics and conformances in type definitions [Bradley Mackey][]
  • enh(swift) add package keyword [Bradley Mackey][]
  • fix(swift) ensure keyword attributes highlight correctly [Bradley Mackey][]
  • fix(types) fix interface LanguageDetail > keywords [Patrick Chiu]
  • enh(java) add goto to be recognized as a keyword in Java [Alvin Joy][]
  • enh(bash) add keyword sudo [Alvin Joy][]
  • fix(haxe) captures new keyword without capturing it within variables/class names [Cameron Taylor][]
  • fix(go) fix go number literals to accept _ separators, add hex p exponents [Lisa Ugray][]
  • enh(markdown) add entity support [David Schach][] [TaraLei][]
  • enh(css) add justify-items and justify-self attributes [Vasily Polovnyov][]
  • enh(css) add accent-color, appearance, color-scheme, rotate, scale and translate attributes [Carl Räfting][]
  • fix(fortran) fixes parsing of keywords delimited by dots [Julien Bloino][]

... (truncated)

Changelog

Sourced from highlight.js's changelog.

Release v9.18.5

Version 9 has reached end-of-support and will not receive future updates or fixes.

Please see VERSION_10_UPGRADE.md and perhaps SECURITY.md.

  • enh: Post-install script can be disabled with HLJS_HIDE_UPGRADE_WARNING=yes
  • fix: Deprecation notice logged at library startup a console.log vs console.warn.
    • Notice only shown if actually highlighting code, not just requiring the library.
    • Node.js treats warn the same as error and that was problematic.
    • You (or perhaps your indirect dependency) may disable the notice with the hideUpgradeWarningAcceptNoSupportOrSecurityUpdates option
    • You can also set HLJS_HIDE_UPGRADE_WARNING=yes in your envionment to disable the warning

Example:

hljs.configure({
  hideUpgradeWarningAcceptNoSupportOrSecurityUpdates: true
})

Reference: highlightjs/highlight.js#2877

Release v9.18.4

Version 9 has reached end-of-support and will not receive future updates or fixes.

Please see VERSION_10_UPGRADE.md and perhaps SECURITY.md.

  • fix(livescript) fix potential catastrophic backtracking (#2852) [commit]

Version 9.18.3

  • fix(parser) Freezing issue with illegal 0 width illegals (#2524)
    • backported from v10.x

Version 9.18.2

Fixes:

  • fix(night) Prevent object prototype values from being returned by getLanguage (#2636) night

... (truncated)

Commits

Updates tunnel-agent from 0.4.3 to 0.6.0

Commits

Updates request from 2.40.0 to 2.88.2

Changelog

Sourced from request's changelog.

Change Log

v2.88.0 (2018/08/10)

v2.87.0 (2018/05/21)

v2.86.0 (2018/05/15)

v2.85.0 (2018/03/12)

v2.84.0 (2018/03/12)

v2.83.0 (2017/09/27)

v2.82.0 (2017/09/19)

v2.81.0 (2017/03/09)

v2.80.0 (2017/03/04)

... (truncated)

Commits

Updates http-proxy from 1.17.0 to 1.18.1

Changelog

Sourced from http-proxy's changelog.

v1.18.1 - 2020-05-17

Merged

1.18.0 - 2019-09-18

Merged

Commits

  • [dist] New test fixtures. 7e4a0e5
  • [dist] End of an era. a9b09cc
  • [dist] Version bump. 1.18.0 9bbe486
  • [fix] Latest versions. 59c4403
  • [fix test] Update tests. dd1d08b
  • [dist] Update dependency ws to v3 [SECURITY] b00911c
  • [dist] .gitattributes all the things. fc93520
  • [dist] Regenerate package-lock.json. 16d4f8a
Commits
  • 9b96cd7 1.18.1
  • 335aeeb Skip sending the proxyReq event when the expect header is present (#1447)
  • dba3966 Remove node6 support, add node12 to build (#1397)
  • 9bbe486 [dist] Version bump. 1.18.0
  • 6e4bef4 Added in auto-changelog module set to keepachangelog format (#1373)
  • d056241 fix 'Modify Response' readme section to avoid unnecessary array copying (#1300)
  • 244303b Fix incorrect target name for reverse proxy example (#1135)
  • b4028ba Fix modify response middleware example (#1139)
  • 77a9815 [dist] Update dependency async to v3 (

slievrly and others added 18 commits July 9, 2021 11:33
@slievrly
update FAQ
bf5305a 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
Merge remote-tracking branch 'upstream/develop' into develop_21_07_09
1e49eab
@slievrly
update nacos doc
a32d407 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
update nacos doc
5bb5d38 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
update ORM framework support doc
0c2b37e 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
Merge remote-tracking branch 'upstream/develop' into develop_21_07_09
b8027a4
@slievrly
add apollo configuration doc
184a2ee 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
Merge remote-tracking branch 'upstream/develop' into develop_21_07_09
7887be6
@slievrly
fix apache#334 doc missing element
5add965 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
Merge remote-tracking branch 'upstream/develop' into develop_21_07_09
f763068
@slievrly
update seata prometheus
cf0cd3d 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
Merge remote-tracking branch 'upstream/develop' into develop_21_07_09
3fc863a
@slievrly
refine APM docs structure
ee09d91 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
Merge remote-tracking branch 'upstream/develop' into develop_21_07_09
82be9cb
@slievrly
update blog seata-nacos-docker
cdecb6b 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
update blog seata-nacos-docker
280bb0b 
Signed-off-by: slievrly <slievrly@163.com>
@slievrly
Merge branch 'seata:develop' into develop_21_07_09
865b76a
@dependabot
build(deps): bump the npm_and_yarn group across 1 directory with 20 u…
34b9621 
…pdates

Bumps the npm_and_yarn group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `2.11.3` | `5.2.1` |
| [minimist](https://github.com/minimistjs/minimist) | `0.2.0` | `0.2.4` |
| [cli](https://github.com/node-js-libs/cli) | `0.6.6` | `removed` |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `9.15.5` | `9.18.5` |
| [elliptic](https://github.com/indutny/elliptic) | `6.4.1` | `6.6.1` |
| [fstream](https://github.com/npm/fstream) | `1.0.11` | `1.0.12` |
| [tunnel-agent](https://github.com/mikeal/tunnel-agent) | `0.4.3` | `0.6.0` |
| [request](https://github.com/request/request) | `2.40.0` | `2.88.2` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.12.1` | `3.14.1` |
| [lodash.mergewith](https://github.com/lodash/lodash) | `4.6.1` | `4.6.2` |
| [mixin-deep](https://github.com/jonschlinkert/mixin-deep) | `1.3.1` | `1.3.2` |
| [object-path](https://github.com/mariocasciaro/object-path) | `0.11.4` | `removed` |
| [set-value](https://github.com/jonschlinkert/set-value) | `2.0.0` | `2.0.1` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |



Updates `webpack-dev-server` from 2.11.3 to 5.2.1
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v2.11.3...v5.2.1)

Updates `minimist` from 0.2.0 to 0.2.4
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v0.2.0...v0.2.4)

Removes `cli`

Updates `highlight.js` from 9.15.5 to 9.18.5
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/9.18.5/CHANGES.md)
- [Commits](highlightjs/highlight.js@9.15.5...9.18.5)

Updates `dns-packet` from 1.3.1 to 5.6.1
- [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md)
- [Commits](mafintosh/dns-packet@v1.3.1...v5.6.1)

Updates `elliptic` from 6.4.1 to 6.6.1
- [Commits](indutny/elliptic@v6.4.1...v6.6.1)

Updates `fstream` from 1.0.11 to 1.0.12
- [Commits](npm/fstream@v1.0.11...v1.0.12)

Updates `uglify-js` from 2.3.6 to 2.8.29
- [Release notes](https://github.com/mishoo/UglifyJS/releases)
- [Commits](mishoo/UglifyJS@v2.3.6...v2.8.29)

Updates `highlight.js` from 9.15.5 to 9.18.5
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/9.18.5/CHANGES.md)
- [Commits](highlightjs/highlight.js@9.15.5...9.18.5)

Updates `tunnel-agent` from 0.4.3 to 0.6.0
- [Commits](request/tunnel-agent@v0.4.3...v0.6.0)

Updates `request` from 2.40.0 to 2.88.2
- [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md)
- [Commits](https://github.com/request/request/commits)

Updates `http-proxy` from 1.17.0 to 1.18.1
- [Release notes](https://github.com/http-party/node-http-proxy/releases)
- [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md)
- [Commits](http-party/node-http-proxy@1.17.0...1.18.1)

Updates `js-yaml` from 3.12.1 to 3.14.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.12.1...3.14.1)

Updates `lodash.mergewith` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Updates `mixin-deep` from 1.3.1 to 1.3.2
- [Commits](jonschlinkert/mixin-deep@1.3.1...1.3.2)

Updates `node-forge` from 0.7.5 to 1.3.1
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](digitalbazaar/forge@0.7.5...v1.3.1)

Removes `object-path`

Updates `set-value` from 2.0.0 to 2.0.1
- [Commits](jonschlinkert/set-value@2.0.0...2.0.1)

Updates `sockjs` from 0.3.19 to 0.3.24
- [Release notes](https://github.com/sockjs/sockjs-node/releases)
- [Changelog](https://github.com/sockjs/sockjs-node/blob/v0.3.24/Changelog)
- [Commits](sockjs/sockjs-node@v0.3.19...v0.3.24)

Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)

Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

---
updated-dependencies:
- dependency-name: webpack-dev-server
  dependency-version: 5.2.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: minimist
  dependency-version: 0.2.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cli
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: highlight.js
  dependency-version: 9.18.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: dns-packet
  dependency-version: 5.6.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-version: 6.6.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fstream
  dependency-version: 1.0.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: uglify-js
  dependency-version: 2.8.29
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: highlight.js
  dependency-version: 9.18.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tunnel-agent
  dependency-version: 0.6.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: request
  dependency-version: 2.88.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-proxy
  dependency-version: 1.18.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 3.14.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash.mergewith
  dependency-version: 4.6.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mixin-deep
  dependency-version: 1.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-forge
  dependency-version: 1.3.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: object-path
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: set-value
  dependency-version: 2.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: sockjs
  dependency-version: 0.3.24
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: yargs-parser
  dependency-version: 5.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: y18n
  dependency-version: 3.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2025
@dependabot dependabot bot mentioned this pull request Oct 16, 2025
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@slievrly