Skip to content

build(deps): bump the types group across 1 directory with 7 updates#1477

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/types-043759d2fd
Open

build(deps): bump the types group across 1 directory with 7 updates#1477
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/types-043759d2fd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the types group with 7 updates in the / directory:

Package From To
@types/node 25.9.1 25.9.3
@types/dagre 0.7.52 0.7.54
@types/lodash 4.17.17 4.17.24
@types/luxon 3.6.2 3.7.1
@types/prismjs 1.26.5 1.26.6
@types/qs 6.14.0 6.15.1
oidc-client-ts 3.2.1 3.5.0

Updates @types/node from 25.9.1 to 25.9.3

Commits

Updates @types/dagre from 0.7.52 to 0.7.54

Commits

Updates @types/lodash from 4.17.17 to 4.17.24

Commits

Updates @types/luxon from 3.6.2 to 3.7.1

Commits

Updates @types/prismjs from 1.26.5 to 1.26.6

Commits

Updates @types/qs from 6.14.0 to 6.15.1

Commits

Updates oidc-client-ts from 3.2.1 to 3.5.0

Release notes

Sourced from oidc-client-ts's releases.

v3.5.0

oidc-client-ts v3.5.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #2295 add maxSilentRenewTimeoutRetries configuration
    • #2311 add nonce validation for ID tokens
  • Fixes;
    • #2369 reword misleading error messages for request_type check

thanks to @​ninadvadujkar, @​Osmose and @​ferdinand-varta

v3.4.1

oidc-client-ts v3.4.1 is a bugfix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Fixes:
    • #2259 forward popupAbortOnClose to PopupNavigator.prepare

thanks to @​watabean

v3.4.0

oidc-client-ts v3.4.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #1890 optionally enforce iframe auth flow in signinSilent
    • #2180 add support for client_secret_jwt
    • #2244 optionally restore popup close rejection
  • Fixes;
    • #2147 wait until the page is shown again to resolve in RedirectNavigator

thanks to @​Hyperkid123, @​Nick-Source, @​Skizu and @​smujmaiku

v3.3.0

oidc-client-ts v3.3.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #1924 use BroadcastChannel if no window.opener

thanks to @​jcphill

... (truncated)

Commits
  • 9bea2d8 v3.5.0
  • e2f2a38 Merge pull request #2390 from authts/dependabot/npm_and_yarn/globals-17.4.0
  • 70d36c0 Merge pull request #2401 from authts/dependabot/npm_and_yarn/lint-staged-16.3.3
  • dd84fc5 Merge pull request #2402 from authts/dependabot/npm_and_yarn/microsoft/api-ex...
  • 104def8 build(deps-dev): bump @​microsoft/api-extractor from 7.57.6 to 7.57.7
  • cf0e029 build(deps-dev): bump lint-staged from 16.2.7 to 16.3.3
  • c23b00c build(deps-dev): bump globals from 17.3.0 to 17.4.0
  • fd7eb5c Merge pull request #2386 from authts/dependabot/npm_and_yarn/rollup-4.59.0
  • 1043ef4 Merge pull request #2387 from authts/dependabot/npm_and_yarn/multi-770cfcd984
  • d5a1b1e Merge pull request #2364 from authts/dependabot/npm_and_yarn/samples/Parcel/q...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for oidc-client-ts since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/types-043759d2fd branch from d8ddf3e to c87e655 Compare June 10, 2026 09:36
Bumps the types group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `25.9.3` |
| [@types/dagre](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dagre) | `0.7.52` | `0.7.54` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.17` | `4.17.24` |
| [@types/luxon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/luxon) | `3.6.2` | `3.7.1` |
| [@types/prismjs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/prismjs) | `1.26.5` | `1.26.6` |
| [@types/qs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qs) | `6.14.0` | `6.15.1` |
| [oidc-client-ts](https://github.com/authts/oidc-client-ts) | `3.2.1` | `3.5.0` |



Updates `@types/node` from 25.9.1 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/dagre` from 0.7.52 to 0.7.54
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dagre)

Updates `@types/lodash` from 4.17.17 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/luxon` from 3.6.2 to 3.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/luxon)

Updates `@types/prismjs` from 1.26.5 to 1.26.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/prismjs)

Updates `@types/qs` from 6.14.0 to 6.15.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qs)

Updates `oidc-client-ts` from 3.2.1 to 3.5.0
- [Release notes](https://github.com/authts/oidc-client-ts/releases)
- [Commits](authts/oidc-client-ts@v3.2.1...v3.5.0)

---
updated-dependencies:
- dependency-name: "@types/dagre"
  dependency-version: 0.7.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: "@types/lodash"
  dependency-version: 4.17.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: "@types/luxon"
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: types
- dependency-name: "@types/node"
  dependency-version: 25.9.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: types
- dependency-name: "@types/prismjs"
  dependency-version: 1.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: "@types/qs"
  dependency-version: 6.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: types
- dependency-name: oidc-client-ts
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/types-043759d2fd branch from c87e655 to 2983805 Compare June 17, 2026 08:50
@github-actions

Copy link
Copy Markdown

🧪 Acceptance Test Results

❌ Some acceptance tests failed

View Details

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants