Skip to content

Bump the npm_and_yarn group across 3 directories with 4 updates - #253

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/print-vault-node/npm_and_yarn-9b9a8719ac
Open

Bump the npm_and_yarn group across 3 directories with 4 updates#253
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/print-vault-node/npm_and_yarn-9b9a8719ac

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the /examples/print-vault-node directory: websocket-driver.
Bumps the npm_and_yarn group with 1 update in the /examples/sdk_example directory: websocket-driver.
Bumps the npm_and_yarn group with 4 updates in the /keeperapi directory: websocket-driver, protobufjs, brace-expansion and linkify-it.

Updates websocket-driver from 0.7.4 to 0.7.5

Changelog

Sourced from websocket-driver's changelog.

0.7.5 / 2026-06-04

  • Close a draft-75/76 connection if a length header grows to exceed the configured max length
  • Fail the connection if a message is larger than the configured max length after extension processing
Commits
  • 5d6a9aa Bump version to 0.7.5
  • c55679a Fail the connection if a message is larger than the configured max length aft...
  • 5b197ca Close a draft-75/76 connection if a length header grows to exceed the configu...
  • fc93a48 Test on Node v22, v24, and v26
  • 2e82d34 Test on recent versions of Node
  • e4962db Switch from Travis CI to GitHub Actions
  • 3f2f9b7 Travis update: cache npm modules, remove sudo, run on Node 15
  • See full diff in compare view

Updates websocket-driver from 0.7.4 to 0.7.5

Changelog

Sourced from websocket-driver's changelog.

0.7.5 / 2026-06-04

  • Close a draft-75/76 connection if a length header grows to exceed the configured max length
  • Fail the connection if a message is larger than the configured max length after extension processing
Commits
  • 5d6a9aa Bump version to 0.7.5
  • c55679a Fail the connection if a message is larger than the configured max length aft...
  • 5b197ca Close a draft-75/76 connection if a length header grows to exceed the configu...
  • fc93a48 Test on Node v22, v24, and v26
  • 2e82d34 Test on recent versions of Node
  • e4962db Switch from Travis CI to GitHub Actions
  • 3f2f9b7 Travis update: cache npm modules, remove sudo, run on Node 15
  • See full diff in compare view

Updates websocket-driver from 0.7.4 to 0.7.5

Changelog

Sourced from websocket-driver's changelog.

0.7.5 / 2026-06-04

  • Close a draft-75/76 connection if a length header grows to exceed the configured max length
  • Fail the connection if a message is larger than the configured max length after extension processing
Commits
  • 5d6a9aa Bump version to 0.7.5
  • c55679a Fail the connection if a message is larger than the configured max length aft...
  • 5b197ca Close a draft-75/76 connection if a length header grows to exceed the configu...
  • fc93a48 Test on Node v22, v24, and v26
  • 2e82d34 Test on recent versions of Node
  • e4962db Switch from Travis CI to GitHub Actions
  • 3f2f9b7 Travis update: cache npm modules, remove sudo, run on Node 15
  • See full diff in compare view

Updates protobufjs from 7.6.4 to 8.8.0

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.8.0

8.8.0 (2026-08-26)

Features

Bug Fixes

protobufjs: v8.7.2

8.7.2 (2026-08-08)

Bug Fixes

  • Also use TextDecoder for loose UTF-8 decoding (#2408) (5851a3b)
  • Parse numeric defaults according to field type (#2402) (bb2d836)
  • Parse numeric descriptor defaults by field type (#2406) (09f24ec)
  • preserve first enum alias from JSON descriptors (#2389) (8304739)
  • Preserve negative zero in codegen formatters (#2403) (92ddc9b)
  • Preserve non-finite defaults in toObject (#2393) (a38b925)

Performance Improvements

  • Optimize writer allocs and packed varint reads (#2405) (64cc8f1)

protobufjs: v8.7.1

8.7.1 (2026-07-12)

Bug Fixes

  • Accept repeated NullValue elements in ProtoJSON (#2373) (ad0b9bb)
  • Apply enum options regardless of declaration order (#2384) (b5009b0)
  • Base64-encode bytes field defaults in toObject (#2375) (e552511)
  • cli: Handle extensions during sparse generation (#2386) (1965d37)
  • cli: Match declaration imports to generated modules (#2385) (3cf7420)
  • cli: Preserve array element union precedence in pbts (#2378) (2a697a5)
  • cli: Resolve imports from cwd by default (#2381) (65f659a)
  • Merge repeated message-valued fields within map entries (#2364) (13b417b)
  • Parse aggregate objects in option arrays (#2379) (71c2532)
  • Parse Any type URLs in aggregate options (#2383) (666fa6b)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

8.8.0 (2026-08-26)

Features

Bug Fixes

8.7.2 (2026-08-08)

Bug Fixes

  • Also use TextDecoder for loose UTF-8 decoding (#2408) (5851a3b)
  • Parse numeric defaults according to field type (#2402) (bb2d836)
  • Parse numeric descriptor defaults by field type (#2406) (09f24ec)
  • preserve first enum alias from JSON descriptors (#2389) (8304739)
  • Preserve negative zero in codegen formatters (#2403) (92ddc9b)
  • Preserve non-finite defaults in toObject (#2393) (a38b925)

Performance Improvements

  • Optimize writer allocs and packed varint reads (#2405) (64cc8f1)

8.7.1 (2026-07-12)

Bug Fixes

  • accept repeated NullValue elements in ProtoJSON (#2373) (ad0b9bb)
  • Apply enum options regardless of declaration order (#2384) (b5009b0)
  • Base64-encode bytes field defaults in toObject (#2375) (e552511)
  • cli: Handle extensions during sparse generation (#2386) (1965d37)
  • cli: Match declaration imports to generated modules (#2385) (3cf7420)
  • cli: Preserve array element union precedence in pbts (#2378) (2a697a5)
  • cli: Resolve imports from cwd by default (#2381) (65f659a)
  • Merge repeated message-valued fields within map entries (#2364) (13b417b)
  • Parse aggregate objects in option arrays (#2379) (71c2532)
  • Parse Any type URLs in aggregate options (#2383) (666fa6b)
  • Parse bracketed special field names in options (#2377) (dd1870b)
  • Parse map fields inside groups (#2382) (8a2c427)

... (truncated)

Commits

Updates brace-expansion from 1.1.15 to 1.1.18

Commits

Updates brace-expansion from 2.1.1 to 2.1.4

Commits

Updates linkify-it from 5.0.1 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

  • Fixed DoS in mailto: links (restrict user name to 64 chars).
  • Restricted user/pass part length in links.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the /examples/print-vault-node directory: [websocket-driver](https://github.com/faye/websocket-driver-node).
Bumps the npm_and_yarn group with 1 update in the /examples/sdk_example directory: [websocket-driver](https://github.com/faye/websocket-driver-node).
Bumps the npm_and_yarn group with 4 updates in the /keeperapi directory: [websocket-driver](https://github.com/faye/websocket-driver-node), [protobufjs](https://github.com/protobufjs/protobuf.js), [brace-expansion](https://github.com/juliangruber/brace-expansion) and [linkify-it](https://github.com/markdown-it/linkify-it).


Updates `websocket-driver` from 0.7.4 to 0.7.5
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.7.4...0.7.5)

Updates `websocket-driver` from 0.7.4 to 0.7.5
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.7.4...0.7.5)

Updates `websocket-driver` from 0.7.4 to 0.7.5
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.7.4...0.7.5)

Updates `protobufjs` from 7.6.4 to 8.8.0
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.6.4...protobufjs-v8.8.0)

Updates `brace-expansion` from 1.1.15 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.15...v1.1.18)

Updates `brace-expansion` from 2.1.1 to 2.1.4
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.15...v1.1.18)

Updates `linkify-it` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/linkify-it@5.0.1...5.0.2)

---
updated-dependencies:
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: protobufjs
  dependency-version: 8.8.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 2.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedprotobufjs@​7.6.4 ⏵ 8.8.099 +6100 +210096 -2100
Updatedprotobufjs-cli@​1.3.3 ⏵ 2.7.099 +110010097100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants