Skip to content

chore(deps): bump the minor-patch-other group across 1 directory with 32 updates#6951

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-patch-other-72e06effa4
Open

chore(deps): bump the minor-patch-other group across 1 directory with 32 updates#6951
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-patch-other-72e06effa4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-patch-other group with 31 updates in the / directory:

Package From To
@godaddy/terminus 4.11.0 4.12.1
bowser 2.11.0 2.14.1
braintree-web-drop-in 1.42.0 1.46.1
canvas 3.1.0 3.2.3
canvas-confetti 1.5.1 1.9.4
deepool 3.0.0 3.0.1
dompurify 3.3.2 3.4.10
express-winston 4.1.0 4.2.0
fuse.js 7.1.0 7.4.2
gsap 3.12.5 3.15.0
js-cookie 3.0.5 3.0.8
jsonwebtoken 9.0.2 9.0.3
libphonenumber-js 1.11.4 1.13.6
linkify-string 4.3.2 4.3.3
lodash 4.17.23 4.18.1
make-fetch-happen 15.0.4 15.0.6
memjs 1.3.0 1.3.2
passport-auth0 1.4.4 1.4.5
prom-client 15.0.0 15.1.3
qrcode.vue 3.4.1 3.10.0
serialize-javascript 7.0.4 7.0.5
timesync 1.0.8 1.0.11
whatwg-fetch 3.6.2 3.6.20
winston 3.3.3 3.19.0
happy-dom 20.0.10 20.10.4
istanbul-reports 3.1.7 3.2.0
junit-report-merger 9.0.3 9.0.4
mocha-junit-reporter 2.0.2 2.2.1
sass 1.89.0 1.101.0
semver 7.7.2 7.8.4
wait-on 9.0.4 9.0.10

Updates @godaddy/terminus from 4.11.0 to 4.12.1

Release notes

Sourced from @​godaddy/terminus's releases.

v4.12.1

4.12.1 (2023-06-23)

Bug Fixes

  • example/postgres/package.json to reduce vulnerabilities (#275) (aea2f6d)

v4.12.0

4.12.0 (2023-04-16)

Features

v4.11.2

4.11.2 (2022-08-29)

Bug Fixes

  • upgrade mongodb from 3.1.13 to 3.7.3 (#218) (47cca48)

v4.11.1

4.11.1 (2022-07-10)

Bug Fixes

Commits
  • aea2f6d fix: example/postgres/package.json to reduce vulnerabilities (#275)
  • d0df104 Create PULL_REQUEST_TEMPLATE.md
  • 734c6f7 Update issue templates
  • 408729a Update README.md
  • be9d4dd chore(deps): bump actions/checkout from 2 to 3 (#237)
  • f61009a feat(status): Custom status response (#192)
  • c02925b Add cluster section to readme (#213)
  • f626532 chore(deps-dev): bump mocha from 10.0.0 to 10.2.0 (#229)
  • 5e5361d chore(deps-dev): bump @​types/koa from 2.13.1 to 2.13.5 (#228)
  • cf57391 chore(deps): bump json5 from 1.0.1 to 1.0.2 (#225)
  • Additional commits viewable in compare view

Updates bowser from 2.11.0 to 2.14.1

Release notes

Sourced from bowser's releases.

v2.14.1

Changes

v2.14.0

Changes

v2.13.1

Changes

v2.13.0

Changes

v2.12.1

Changes

  • [REVERT] rollback default export to = syntax in type definitions @​naorpeled (#570)

v2.12.0

Changes

... (truncated)

Changelog

Sourced from bowser's changelog.

Bowser Changelog

Commits
  • eb3f153 fix: attempt to resolve build issues (#604)
  • 740d6c4 Update npm to latest version before publishing to npm registry (#603)
  • 2bb8cae fix: remove prepublish hook
  • 382bc22 chore: update publish flow
  • e2318ef fix: attemp to resolve NPM publish issues
  • 8f9badd chore: update publish flow
  • 5032e0e docs: resolve missing referenced links in index page
  • a2d6ce8 feat: add Smart TV platform detection (#582)
  • 227f5ec feat: add Brave browser support via clientHints (#597)
  • fa08e7c docs: fix badges
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for bowser since your current version.


Updates braintree-web-drop-in from 1.42.0 to 1.46.1

Release notes

Sourced from braintree-web-drop-in's releases.

v1.46.1

  • Sanitize Venmo username before adding it to the DOM

v1.46.0

  • Apple Pay
    • Add optional domainName parameter to Drop-in Apple Pay configuration to support merchants using Drop-in in cross-origin iframes.

v1.44.0

  • Update Braintree web dependency
    • braintree-web to 3.113.0

v1.43.0

Update Braintree web dependancies

  • asset-loader to 2.0.1
  • browser-detection to 2.0.1
  • uuid to 1.0.0
  • braintree-web to 3.103.0
Changelog

Sourced from braintree-web-drop-in's changelog.

1.46.1

  • Sanitize Venmo username before adding it to the DOM

1.46.0

  • Add optional domainName parameter to Drop-in Apple Pay configuration to support merchants using Drop-in in cross-origin iframes.

1.45.2

  • Fix translations strings that had an extra '}' in some languages.

1.45.1

  • Update dependencies
    • braintree-web to 3.123.2
      • Fixes bug where some UK postal codes were incorrectly failing validation

1.45.0

  • Fix bug where field would be incorrectly presented as invalid while using autocomplete
  • Update Braintree web dependencies
    • braintree-web to 3.122.0

1.44.1

  • Fix bug where the last card field would not display a message if the user tabbed to the Paypal Collection notice
  • Update Braintree web dependencies
    • asset-loader to 2.0.2
    • browser-detection to 2.0.2
    • uuid to 1.0.1
    • braintree-web to 3.115.1

1.44.0

  • Update Braintree web dependency
    • braintree-web to 3.113.0

1.43.0

  • Update Braintree web dependencies
    • asset-loader to 2.0.1
    • browser-detection to 2.0.1
    • uuid to 1.0.0
    • braintree-web to 3.103.0
Commits

Updates canvas from 3.1.0 to 3.2.3

Release notes

Sourced from canvas's releases.

v3.2.3

Fixed

  • Fix building with gcc (#2559)

v3.2.2

Fixed

  • Fix dangling env pointer in image MIME data cleanup (#2550)
  • Fix ctx.direction not affected by ctx.save and ctx.restore
  • Preserve rest of PDF pages when changing width and height (#2538)
  • Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.

v3.2.1

3.2.1

  • Fix error message HTTP response status code in image src setter
  • roundRect() shape incorrect when radii were large relative to rectangle size (#2400)
  • Reject loadImage when src is null or invalid (#2304)
  • Fix compilation on GCC 15 by including <cstdint> (#2545)

v3.2.0

3.2.0

Added

  • Added ctx.lang to set the ISO language code for text

v3.1.2

3.1.2

Fixed

  • Fix crash when setting width/height on PDF, SVG canvas (#2520)

v3.1.1

3.1.1

This release also introduces arm64 prebuilds for Linux!

Fixed

  • Fix a crash when SVGs without width or height are loaded (#2486)
  • Fix fetching prebuilds during installation on certain newer versions of Node (#2497)
  • Fixed issue with fillText that was breaking subsequent fillText calls (#2171)
  • Fix svg rendering when the image is resized (#2498)
  • Fix measureText with direction rtl textAlign start/end
  • Fix a crash in Node 24, due to external memory API change (#2514)
Changelog

Sourced from canvas's changelog.

3.2.3

Fixed

  • Fix building with gcc (#2559)

3.2.2

Fixed

  • Fix dangling env pointer in image MIME data cleanup (#2550)
  • Fix ctx.direction not affected by ctx.save and ctx.restore
  • Preserve rest of PDF pages when changing width and height (#2538)
  • Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.

3.2.1

  • Fix error message HTTP response status code in image src setter
  • roundRect() shape incorrect when radii were large relative to rectangle size (#2400)
  • Reject loadImage when src is null or invalid (#2304)
  • Fix compilation on GCC 15 by including (#2545)

3.2.0

Added

  • Added ctx.lang to set the ISO language code for text

3.1.2

Fixed

  • Fix crash when setting width/height on PDF, SVG canvas (#2520)

3.1.1

Fixed

  • Fix a crash when SVGs without width or height are loaded (#2486)
  • Fix fetching prebuilds during installation on certain newer versions of Node (#2497)
  • Fixed issue with fillText that was breaking subsequent fillText calls (#2171)
  • Fix svg rendering when the image is resized (#2498)
  • Fix measureText with direction rtl textAlign start/end
  • Fix a crash in Node 24, due to external memory API change (#2514)
Commits
  • f91598e v3.2.3
  • 1541544 PAGE_SIZE shouldn't be unsigned
  • ac82fa7 v3.2.2
  • 103a620 add the last flurry of commits to CHANGELOG
  • 7304c7a avoid integer overflow in getImageData
  • f9fcc5f avoid integer overflow in putImageData
  • 802a8ca avoid integer overflow in new ImageData
  • 9d1b478 wrap negative values passed to createImageData
  • 779483c bail early when setting zero-length image source
  • 22ed2b7 make canvas types unsigned
  • Additional commits viewable in compare view

Updates canvas-confetti from 1.5.1 to 1.9.4

Release notes

Sourced from canvas-confetti's releases.

1.9.4

What's Changed

Maintenance

New Contributors

Full Changelog: catdad/canvas-confetti@1.9.3...1.9.4

1.9.3

Bug Fixes

Testing improvements

New Contributors

Full Changelog: catdad/canvas-confetti@1.9.2...1.9.3

1.9.2

  • Fixed a bug that caused Emoji confetti to render poorly in Firefox -- see #213

catdad/canvas-confetti@1.9.1...1.9.2

1.9.1

  • Fixed a bug that caused Emoji confetti to not work in Safari -- see #209

catdad/canvas-confetti@1.9.0...1.9.1

1.9.0

  • 🎉 Emoji are finally here 🎉 Create confetti from any emoji you'd like, using the confetti.shapeFromText() helper -- see #82 and #206

catdad/canvas-confetti@1.8.0...1.9.0

1.8.0

  • Custom confetti shapes are here! You can now use any SVG Path string to make a custom confetti shape, using the confetti.shapeFromPath() helper -- see #81 and #203

catdad/canvas-confetti@1.7.0...1.8.0

1.7.0

  • Added a flat option to allow rendering confetti without any tilt or wobble -- see #157 and #202

catdad/canvas-confetti@1.6.1...1.7.0

... (truncated)

Commits
  • 5f77cde bumping version to 1.9.4
  • f0027c6 updating to use github action as trusted publisher
  • 0566ad2 Merge pull request #258 from Gavin-Hofer/gavin/fix-offscreen-canvas-error
  • 51e7932 Merge branch 'master' into gavin/fix-offscreen-canvas-error
  • c4385c8 Merge pull request #259 from catdad/actions-update
  • 4bf60a5 updating linting to later versions that work in node 24
  • 0d755bc using latest version of node
  • 664a8bb updating actions to the latest versions
  • c1748fe Fixed error in canDrawBitmap if OffscreenCanvas exists but is not supported
  • 320381b bumping version to 1.9.3
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for canvas-confetti since your current version.


Updates deepool from 3.0.0 to 3.0.1

Commits

Updates dompurify from 3.3.2 to 3.4.10

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.10

  • Refactored codebase for clarity: extracted the public type declarations into types.ts
  • Decomposed the three largest sanitizer functions into focused helpers
  • Removed duplicated defaults and dead branches, consolidated SAFE_FOR_TEMPLATES scrubbing into single shared path
  • Improved per-node performance by hoisting the mXSS probe regexes and testing textContent before innerHTML
  • Added a deterministic micro-benchmark harness (npm run bench) with a --compare mode
  • Reduced CI cost by running the full three-engine browser suite once per PR
  • Refreshed the demos/ folder so every demo runs again, and added a SVG-via-<img> demo
  • Documented the bench and test:happydom scripts in the README
  • Completed the Attack Classes & Bypass History wiki page
  • Bumped several dependencies where possible

DOMPurify 3.4.9

  • Further improved the handling of Trusted Types config options, thanks @​offset
  • Further improved the handling of IN_PLACE sanitization, thanks @​mozfreddyb
  • Added more test coverage for IN_PLACE and Trusted Types related usage
  • Bumped several dependencies where possible
  • Updated README and wiki with more accurate documentation & attack samples

DOMPurify 3.4.8

  • Cleaned up the repository root, renamed some and removed unneeded files
  • Fixed an issue with handling of Trusted Types policies, thanks @​fulstadev
  • Fixed the node iterator for better template scrubbing, thanks @​IamLeandrooooo
  • Included formerly missing LICENSE-MPL in published npm package, thanks @​asamuzaK
  • Bumped several dependencies where possible

DOMPurify 3.4.7

  • Hardened the handling of Shadow Roots when using IN_PLACE, thanks @​GameZoneHacker
  • Removed a problem leading to permanent hook pollution, thanks @​offset
  • Refactored the test suite and expanded test coverage significantly

DOMPurify 3.4.6

  • Fixed several issues with DOM Clobbering in IN_PLACE mode, thanks @​offset & @​Bankde
  • Hardened the checks for cross-realm IN_PLACE and Shadow DOM sanitization, thanks @​offset & @​Bankde
  • Added more test coverage for IN_PLACE and general DOM Clobbering attacks
  • Bumped several dependencies where possible

DOMPurify 3.4.5

  • Fixed a bypass caused by the new HTML element selectedcontent added in 3.4.4, thanks @​KabirAcharya

Note that this is a security release for an issue introduced in 3.4.4 and should be upgraded to immediately.

DOMPurify 3.4.4

  • Added the selectedcontent element to default allow-list, thanks @​lukewarlow
  • Added the command and commandfor attributes to default allowed-list, thanks @​lukewarlow
  • Added better template scrubbing for IN_PLACE operations, thanks @​DEMON1A
  • Added stronger checks for cross-realm windows, thanks @​DEMON1A & @​fg0x0
  • Updated demo website and made sure it uses the latest from main
  • Updated existing workflows, fuzzer, dependabot, etc., added more tests
  • Bumped several dependencies where possible

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates express-winston from 4.1.0 to 4.2.0

Release notes

Sourced from express-winston's releases.

v4.2.0

  • Upgraded lodash to 4.17.21 minimum (#264)
  • Fixed typos and Readme format (#262)

Published as + [email protected]

Changelog

Sourced from express-winston's changelog.

4.2.0

  • Upgraded lodash to 4.17.21 minimum (#264)
  • Fixed typos and Readme format (#262)
Commits

Updates fuse.js from 7.1.0 to 7.4.2

Release notes

Sourced from fuse.js's releases.

v7.4.2

Bug Fixes

  • types: ship CommonJS type declarations (.d.cts) so consumers on moduleResolution: node16/nodenext no longer hit TS1479 ("masquerading as ESM") when importing the package from a CommonJS project. The lib entries now resolve to a runtime-accurate export = declaration and the worker to its named declaration, via the require exports condition. (#780)

Full Changelog: krisk/Fuse@v7.4.1...v7.4.2

v7.4.1

Bug Fixes

  • types: ship TypeScript declarations for fuse.js/worker (572ad1e), closes #828
  • types: add TypeScript declarations for fuse.js/worker-script (6ef6c33), closes #828

Both worker subpaths now resolve types under node16/nodenext and bundler module resolution.

v7.4.0

First stable on the 7.4 line. Aggregates everything from the 7.4.0-beta.1 → 7.4.0-beta.8 cycle. See CHANGELOG.md for the per-beta breakdown.

Features

  • FuseWorker — parallel search via Web Workers (9ba192c). New FuseWorker class shards the collection across workers, runs searches in parallel, and preserves the same result ordering as Fuse. See the Web Workers guide.
  • token-search: tokenMatch: 'all' | 'any' option for AND/OR semantics (#827, 9f979d0). Default 'any' preserves existing behavior; 'all' requires every query word to match somewhere in a record (term-centric AND), useful for filter-style queries.
  • token-search: customizable tokenizer with unicode-aware default (#821, 8e55cae). New tokenize?: RegExp | (text: string) => string[] option; the default regex now segments CJK, Cyrillic, Greek, Arabic, etc. out of the box.

Bug Fixes

  • matches: report array-path keys as dotted strings (acd54e8). Previously match.key leaked a raw string[] for keys declared as path arrays (e.g. keys: [['author', 'firstName']]), contradicting the documented FuseResultMatch.key: string type. Now emits the canonical dotted string ('author.firstName'). Behavior change: consumers relying on the array shape need to update.
  • bitap: restrict highlight indices to matched window (#792, 622f105). Closes #505, #611, #691, #793.
  • index: correct doc-index alignment for Fuse<string> with blank docs (0b8e3ca).
  • core: invalidate searcher cache on collection mutation (fcf4228).
  • token-search: renumber inverted index after doc removal (ea9356d).
  • workers: preserve global refIndex across shards (e4217f9), match Fuse ordering and reject non-cloneable options (d571390), reject useTokenSearch in FuseWorker (8c6183d).
  • match: explicitly reject useTokenSearch in Fuse.match (3959d91).
  • correct fieldCount accounting and add reverse lookup in inverted index (54e702c).
  • guard against empty-string crash in fieldNorm (e550ab1); skip consecutive spaces in fieldNorm word counting (5929af6).
  • types: resolve typecheck errors and align KeyStore types (dbc115d).
  • docs: reflect data edits in playground demo (#825, 6eff909).

Performance

  • reuse bit arrays in Bitap search instead of allocating per error level (ec9b446)
  • replace forEach with for loops in search hot paths (1945f49)
  • fast-path Math.pow when exponent is 1 in computeScore (c82de57)
  • pre-allocate records array and use for loops in FuseIndex.create (5800036)
  • replace regex with loop for word counting in fieldNorm (5517a9b)
  • use filter instead of reverse-splice in removeAll / remove (c74823b, 8372b0a)
  • token-search: drop unused postings from inverted index (5ea216f)

Internal

... (truncated)

Changelog

Sourced from fuse.js's changelog.

7.4.2 (2026-06-05)

Bug Fixes

  • types: emit CommonJS declarations (.d.cts) for node16/nodenext (#780) (33f5d29)

7.4.1 (2026-06-02)

Bug Fixes

  • types: add TypeScript declarations for fuse.js/worker-script (6ef6c33), closes #828
  • types: ship TypeScript declarations for fuse.js/worker (572ad1e), closes #828

7.4.0 (2026-05-30)

7.4.0-beta.8 (2026-05-25)

Bug Fixes

  • matches: report array-path keys as dotted strings (acd54e8)

7.4.0-beta.7 (2026-05-22)

Features

  • token-search: add tokenMatch 'all' | 'any' for AND/OR (#827) (9f979d0)

Bug Fixes

  • docs: reflect data edits in playground demo (#825) (6eff909)

7.4.0-beta.6 (2026-05-14)

Bug Fixes

7.4.0-beta.5 (2026-05-10)

Features

  • token-search: add customizable tokenizer with unicode-aware default (8e55cae), closes #821

... (truncated)

Commits
  • 9e63058 chore(release): 7.4.2
  • 33f5d29 fix(types): emit CommonJS declarations (.d.cts) for node16/nodenext (#780)
  • 7c6af4e build: replace rollup/babel/terser build with tsdown
  • 50f6b24 chore(deps): pin fast-uri to ^3.1.2 via overrides
  • 9e6ec22 chore(build): exit non-zero when a build step fails
  • ff51f6b chore: source docs version from package.json, not npm view
  • 08b77d9 chore: bump doc versions to 7.4.1
  • ce75998 chore(release): 7.4.1
  • e842baf test(types): guard that every exports subpath resolves to declarations
  • 6ef6c33 fix(types): add TypeScript declarations for fuse.js/worker-script
  • Additional commits viewable in compare view

Updates gsap from 3.12.5 to 3.15.0

Commits

Updates js-cookie from 3.0.5 to 3.0.8

Release notes

Sourced from js-cookie's releases.

v3.0.8

  • Restore ES5 compatibility, inadvertently broken in 3.0.7 - #959
  • Lift Node version restriction, inadvertently restricted to >= 20 in 3.0.7 - #956

v3.0.7

  • Prevent cookie attribute injection: CVE-2026-46625 (eb3c40e)
  • Add Partitioned attribute to readme (b994768)
  • Publish to npm registry via trusted publisher exclusively (4dc71be)
  • Ensure consistent behaviour for get('name') + get() (1953d30)
Commits
  • d7a1096 Craft v3.0.8 release
  • 248e685 Use existing Chrome with puppeteer
  • fc04269 Remove QUnit related workaround in Grunt config
  • 265a685 Tidy up package lock file
  • 478e591 Disable Node deprecation DEP0044 for release workflow
  • 331d524 Fix node version config for E2E test job
  • 11d773d Ensure ECMAScript compatibility
  • d788646 Remove engines property from package
  • e7d9a4d Fix typo in test assertion message
  • b5fca24 Make credentials use explicit in release workflow
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for js-cookie since your current version.


Updates jsonwebtoken from 9.0.2 to 9.0.3

Changelog

Sourced from jsonwebtoken's changelog.

9.0.3 - 2025-12-04

  • updates jws version to 4.0.1.
Commits

Updates libphonenumber-js from 1.11.4 to 1.13.6

Changelog

Sourced from libphonenumber-js's changelog.

1.13.6 / 5.6.2026

  • Updated metadata to version 9.0.32:
    • Updated phone metadata for region code(s): DZ, JP, NO, SJ, SO, UG
    • Updated carrier data for country calling code(s): 33 (en), 47 (en), 233 (en), 252 (en), 256 (en)

1.13.5 / 03.06.2026

  • Converted any "tagged" types back to simple strings. Originally, some developers lobbied the use of so-called "tagged" types in this package in order to return more "strict" values. My knowledge of TypeScript at that time was limited to just its title, so I naturally succumbed to that influence and merged whatever changes seemed to be consensual between the participants in the issue discussions. Now though I can see how the concept of "tagged" types is redundant and adds nothing, so I decided to revert any "tagged" types back to simple strings.

1.13.3 / 22.5.2026

  • Updated metadata to version 9.0.31:
    • Updated alternate formatting data for country calling code(s): 84
    • Updated phone metadata for region code(s): AI, BO, DZ, ET, GE, GM, IN, TR, UG, VN
    • Updated short number metadata for region code(s): IT
    • Updated geocoding data for country calling code(s): 213 (en)
    • Updated carrier data for country calling code(s): 34 (en), 43 (en), 84 (en), 90 (en), 220 (en), 251 (en), 256 (en), 354 (en), 591 (en), 1264 (en)

1.13.0 / 08.05.2026

  • Merged a pull request by Matt d'Entremont that adds ES6-only versions of min/max/mobile/core exports.

    • The new exports are:

      • min — libphonenumber-js/min/es6
      • max — libphonenumber-js/max/es6
      • mobile — libphonenumber-js/mobile/es6
      • "custom" — libphonenumber-js/core/es6

    • The bundle size reduction is roughly 37 KB raw and 3.8-4.1 KB gzipped.

                        | legacy raw | modern raw | legacy gzip | modern gzip
  min                   | 177,666 B  | 140,563 B  | 42,081 B    | 38,223 B
  max                   | 251,327 B  | 214,2...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 2, 2026
@dependabot dependabot Bot changed the title build(deps): bump the minor-patch-other group across 1 directory with 32 updates chore(deps): bump the minor-patch-other group across 1 directory with 32 updates Jun 3, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-patch-other-72e06effa4 branch 8 times, most recently from a6d0e35 to 83a8414 Compare June 10, 2026 20:39
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-patch-other-72e06effa4 branch 3 times, most recently from 5711457 to 9aa918a Compare June 15, 2026 13:17
@dependabot
chore(deps): bump the minor-patch-other group across 1 directory with…
417598c 
… 32 updates

Bumps the minor-patch-other group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@godaddy/terminus](https://github.com/godaddy/terminus) | `4.11.0` | `4.12.1` |
| [bowser](https://github.com/bowser-js/bowser) | `2.11.0` | `2.14.1` |
| [braintree-web-drop-in](https://github.com/braintree/braintree-web-dropin) | `1.42.0` | `1.46.1` |
| [canvas](https://github.com/Automattic/node-canvas) | `3.1.0` | `3.2.3` |
| [canvas-confetti](https://github.com/catdad/canvas-confetti) | `1.5.1` | `1.9.4` |
| [deepool](https://github.com/getify/deePool) | `3.0.0` | `3.0.1` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.3.2` | `3.4.10` |
| [express-winston](https://github.com/bithavoc/express-winston) | `4.1.0` | `4.2.0` |
| [fuse.js](https://github.com/krisk/Fuse) | `7.1.0` | `7.4.2` |
| [gsap](https://github.com/greensock/GSAP) | `3.12.5` | `3.15.0` |
| [js-cookie](https://github.com/js-cookie/js-cookie) | `3.0.5` | `3.0.8` |
| [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.2` | `9.0.3` |
| [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) | `1.11.4` | `1.13.6` |
| [linkify-string](https://github.com/nfrasser/linkifyjs/tree/HEAD/packages/linkify-string) | `4.3.2` | `4.3.3` |
| [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` |
| [make-fetch-happen](https://github.com/npm/make-fetch-happen) | `15.0.4` | `15.0.6` |
| [memjs](https://github.com/memcachier/memjs) | `1.3.0` | `1.3.2` |
| [passport-auth0](https://github.com/auth0/passport-auth0) | `1.4.4` | `1.4.5` |
| [prom-client](https://github.com/siimon/prom-client) | `15.0.0` | `15.1.3` |
| [qrcode.vue](https://github.com/scopewu/qrcode.vue) | `3.4.1` | `3.10.0` |
| [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `7.0.4` | `7.0.5` |
| [timesync](https://github.com/enmasseio/timesync) | `1.0.8` | `1.0.11` |
| [whatwg-fetch](https://github.com/github/fetch) | `3.6.2` | `3.6.20` |
| [winston](https://github.com/winstonjs/winston) | `3.3.3` | `3.19.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.0.10` | `20.10.4` |
| [istanbul-reports](https://github.com/istanbuljs/istanbuljs/tree/HEAD/packages/istanbul-reports) | `3.1.7` | `3.2.0` |
| [junit-report-merger](https://github.com/bhovhannes/junit-report-merger) | `9.0.3` | `9.0.4` |
| [mocha-junit-reporter](https://github.com/michaelleeallen/mocha-junit-reporter) | `2.0.2` | `2.2.1` |
| [sass](https://github.com/sass/dart-sass) | `1.89.0` | `1.101.0` |
| [semver](https://github.com/npm/node-semver) | `7.7.2` | `7.8.4` |
| [wait-on](https://github.com/jeffbski/wait-on) | `9.0.4` | `9.0.10` |



Updates `@godaddy/terminus` from 4.11.0 to 4.12.1
- [Release notes](https://github.com/godaddy/terminus/releases)
- [Commits](godaddy/terminus@v4.11.0...v4.12.1)

Updates `bowser` from 2.11.0 to 2.14.1
- [Release notes](https://github.com/bowser-js/bowser/releases)
- [Changelog](https://github.com/bowser-js/bowser/blob/master/CHANGELOG.md)
- [Commits](bowser-js/bowser@2.11.0...v2.14.1)

Updates `braintree-web-drop-in` from 1.42.0 to 1.46.1
- [Release notes](https://github.com/braintree/braintree-web-dropin/releases)
- [Changelog](https://github.com/braintree/braintree-web-drop-in/blob/main/CHANGELOG.md)
- [Commits](braintree/braintree-web-drop-in@v1.42.0...v1.46.1)

Updates `canvas` from 3.1.0 to 3.2.3
- [Release notes](https://github.com/Automattic/node-canvas/releases)
- [Changelog](https://github.com/Automattic/node-canvas/blob/master/CHANGELOG.md)
- [Commits](Automattic/node-canvas@v3.1.0...v3.2.3)

Updates `canvas-confetti` from 1.5.1 to 1.9.4
- [Release notes](https://github.com/catdad/canvas-confetti/releases)
- [Commits](catdad/canvas-confetti@1.5.1...1.9.4)

Updates `deepool` from 3.0.0 to 3.0.1
- [Commits](getify/deePool@3.0.0...3.0.1)

Updates `dompurify` from 3.3.2 to 3.4.10
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.2...3.4.10)

Updates `express-winston` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/bithavoc/express-winston/releases)
- [Changelog](https://github.com/bithavoc/express-winston/blob/main/CHANGELOG.md)
- [Commits](bithavoc/express-winston@v4.1.0...v4.2.0)

Updates `fuse.js` from 7.1.0 to 7.4.2
- [Release notes](https://github.com/krisk/Fuse/releases)
- [Changelog](https://github.com/krisk/Fuse/blob/main/CHANGELOG.md)
- [Commits](krisk/Fuse@v7.1.0...v7.4.2)

Updates `gsap` from 3.12.5 to 3.15.0
- [Commits](greensock/GSAP@3.12.5...3.15.0)

Updates `js-cookie` from 3.0.5 to 3.0.8
- [Release notes](https://github.com/js-cookie/js-cookie/releases)
- [Commits](js-cookie/js-cookie@v3.0.5...v3.0.8)

Updates `jsonwebtoken` from 9.0.2 to 9.0.3
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jsonwebtoken@v9.0.2...v9.0.3)

Updates `libphonenumber-js` from 1.11.4 to 1.13.6
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/commits/master)

Updates `linkify-string` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/nfrasser/linkifyjs/releases)
- [Changelog](https://github.com/nfrasser/linkifyjs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nfrasser/linkifyjs/commits/v4.3.3/packages/linkify-string)

Updates `linkifyjs` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/nfrasser/linkifyjs/releases)
- [Changelog](https://github.com/nfrasser/linkifyjs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nfrasser/linkifyjs/commits/v4.3.3/packages/linkifyjs)

Updates `lodash` from 4.17.23 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

Updates `make-fetch-happen` from 15.0.4 to 15.0.6
- [Release notes](https://github.com/npm/make-fetch-happen/releases)
- [Changelog](https://github.com/npm/make-fetch-happen/blob/v15.0.6/CHANGELOG.md)
- [Commits](npm/make-fetch-happen@v15.0.4...v15.0.6)

Updates `memjs` from 1.3.0 to 1.3.2
- [Release notes](https://github.com/memcachier/memjs/releases)
- [Changelog](https://github.com/memcachier/memjs/blob/master/CHANGELOG)
- [Commits](https://github.com/memcachier/memjs/commits)

Updates `passport-auth0` from 1.4.4 to 1.4.5
- [Release notes](https://github.com/auth0/passport-auth0/releases)
- [Changelog](https://github.com/auth0/passport-auth0/blob/master/CHANGELOG.md)
- [Commits](auth0/passport-auth0@v1.4.4...v1.4.5)

Updates `prom-client` from 15.0.0 to 15.1.3
- [Release notes](https://github.com/siimon/prom-client/releases)
- [Changelog](https://github.com/siimon/prom-client/blob/master/CHANGELOG.md)
- [Commits](siimon/prom-client@v15.0.0...v15.1.3)

Updates `qrcode.vue` from 3.4.1 to 3.10.0
- [Release notes](https://github.com/scopewu/qrcode.vue/releases)
- [Changelog](https://github.com/scopewu/qrcode.vue/blob/main/CHANGELOG.md)
- [Commits](scopewu/qrcode.vue@v3.4.1...v3.10.0)

Updates `serialize-javascript` from 7.0.4 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v7.0.4...v7.0.5)

Updates `timesync` from 1.0.8 to 1.0.11
- [Changelog](https://github.com/enmasseio/timesync/blob/master/HISTORY.md)
- [Commits](enmasseio/timesync@v1.0.8...v1.0.11)

Updates `whatwg-fetch` from 3.6.2 to 3.6.20
- [Release notes](https://github.com/github/fetch/releases)
- [Changelog](https://github.com/JakeChampion/fetch/blob/main/CHANGELOG.md)
- [Commits](JakeChampion/fetch@v3.6.2...v3.6.20)

Updates `winston` from 3.3.3 to 3.19.0
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.3.3...v3.19.0)

Updates `happy-dom` from 20.0.10 to 20.10.4
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.0.10...v20.10.4)

Updates `istanbul-reports` from 3.1.7 to 3.2.0
- [Release notes](https://github.com/istanbuljs/istanbuljs/releases)
- [Changelog](https://github.com/istanbuljs/istanbuljs/blob/main/packages/istanbul-reports/CHANGELOG.md)
- [Commits](https://github.com/istanbuljs/istanbuljs/commits/istanbul-reports-v3.2.0/packages/istanbul-reports)

Updates `junit-report-merger` from 9.0.3 to 9.0.4
- [Release notes](https://github.com/bhovhannes/junit-report-merger/releases)
- [Commits](bhovhannes/junit-report-merger@v9.0.3...v9.0.4)

Updates `mocha-junit-reporter` from 2.0.2 to 2.2.1
- [Release notes](https://github.com/michaelleeallen/mocha-junit-reporter/releases)
- [Commits](michaelleeallen/mocha-junit-reporter@v2.0.2...v2.2.1)

Updates `sass` from 1.89.0 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.89.0...1.101.0)

Updates `semver` from 7.7.2 to 7.8.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.2...v7.8.4)

Updates `wait-on` from 9.0.4 to 9.0.10
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v9.0.4...v9.0.10)

---
updated-dependencies:
- dependency-name: "@godaddy/terminus"
  dependency-version: 4.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: bowser
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: braintree-web-drop-in
  dependency-version: 1.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: canvas
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: canvas-confetti
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: deepool
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: dompurify
  dependency-version: 3.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: express-winston
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: fuse.js
  dependency-version: 7.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: gsap
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: happy-dom
  dependency-version: 20.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: istanbul-reports
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: js-cookie
  dependency-version: 3.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: jsonwebtoken
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: junit-report-merger
  dependency-version: 9.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: libphonenumber-js
  dependency-version: 1.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: linkify-string
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: linkifyjs
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: make-fetch-happen
  dependency-version: 15.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: memjs
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: mocha-junit-reporter
  dependency-version: 2.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: passport-auth0
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: prom-client
  dependency-version: 15.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: qrcode.vue
  dependency-version: 3.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: sass
  dependency-version: 1.100.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: semver
  dependency-version: 7.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: timesync
  dependency-version: 1.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: wait-on
  dependency-version: 9.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: whatwg-fetch
  dependency-version: 3.6.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-other
- dependency-name: winston
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-other
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-patch-other-72e06effa4 branch from 9aa918a to 417598c Compare June 16, 2026 00:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@dyersituations dyersituations

@christian14b christian14b

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@dyersituations @christian14b