chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates by dependabot[bot] · Pull Request #245 · Fluent-Health/terraform-stack-plan

dependabot · 2026-09-02T05:46:50Z

Bumps the npm_and_yarn group with 3 updates in the /web/ui directory: browserslist, postcss and undici.

Updates browserslist from 4.28.5 to 4.28.8

Release notes

4.28.8

Fixed including kaios in baseline queries (by @Jaybhade).

4.28.7

Improved parsing performance.

Fixed unbounded memory growth (by @alanturing881).

Fixed prototype write issue (by @alanturing881).

4.28.6

Fixed Electron version queries (by @spokodev).

Changelog

Sourced from browserslist's changelog.

4.28.8

Fixed including kaios in baseline queries (by @Jaybhade).

4.28.7

Improved parsing performance.

Fixed unbounded memory growth (by @alanturing881).

Fixed prototype write issue (by @alanturing881).

4.28.6

Fixed Electron version queries (by @spokodev).

Commits

f2f2e6c Release 4.28.8 version
d0787c8 Update dependencies
fcf8fa9 Merge pull request #939 from Jaybhade/fix/baseline-kaios-without-downstream
57ecd64 fix: support "including kaios" without downstream
093a0f6 Update EM banner
b637868 Release 4.28.7 version
313f465 Update dependencies
c935c5a Fix regexp performance
d7e9e65 Rewrite structure parsing to make it always fast
ec4a55e Fix import order
Additional commits viewable in compare view

Updates postcss from 8.5.16 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

Changelog

Sourced from postcss's changelog.

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

Commits

07b2577 Release 8.5.26 version
47de6b9 Update CI
1493a83 Fix Rule#selectors losing the empty selector (#2129)
180db16 Typo
29e9e00 Resolve symlinks before the previous-source-map containment check (#2125)
3ba8f84 Update dependencies
87e72f6 Update lock file
caaeeb9 Upgrade nanoid to fix infinite loop on zero size (#2124)
3609b6f Explain how to type plugin options
fbad419 docs: show ESM and TypeScript plugin declaration (#2118)
Additional commits viewable in compare view

Updates undici from 8.7.0 to 8.10.1

Release notes

Sourced from undici's releases.

v8.10.1

What's Changed

fix(mock): re-invoke reply callback for persistent mocks by @mcollina in nodejs/undici#5650

fix: preserve MockAgent interceptors for legacy global fetch by @pacocartones in nodejs/undici#5648

ci: align codeql-action autobuild and analyze with init at v4.37.3 by @ostapondo in nodejs/undici#5655

ci: test against the current Node.js nightly major by @ostapondo in nodejs/undici#5654

ci: only accept a numeric nightly major by @ostapondo in nodejs/undici#5657

test: complete the h2 settings round-trip before asserting single-session multiplexing by @ostapondo in nodejs/undici#5656

fix: propagate dispatcher origin to composed interceptors by @jibin7jose in nodejs/undici#5624

fix: limit EventSource event size by @mcollina in nodejs/undici#5552

build(deps-dev): bump ws from 8.21.1 to 8.21.3 by @dependabot[bot] in nodejs/undici#5678

fix(retry): honor the retryAfter option in the default retry strategy by @codeAnqiang-ma in nodejs/undici#5683

fix(interceptor/dump): reject aborted requests when response is smaller than maxSize by @codeAnqiang-ma in nodejs/undici#5685

test: add unexpected disconnect guards to remaining http2 tests by @zeexzeex in nodejs/undici#5686

test: harden http2-request-never-settles against late session errors by @pacocartones in nodejs/undici#5674

fix(test): skip cache-tests when submodule is missing by @edenbuilds in nodejs/undici#5661

fix(retry): honor the abort signal during the retry backoff by @pacocartones in nodejs/undici#5675

fix(deduplicate): settle the deduplicated request when it is aborted by @pacocartones in nodejs/undici#5673

build(deps-dev): bump esbuild from 0.28.1 to 0.28.2 by @dependabot[bot] in nodejs/undici#5698

build(deps-dev): bump @fastify/busboy from 3.2.0 to 3.2.1 by @dependabot[bot] in nodejs/undici#5697

fix: accept a negative Set-Cookie Max-Age attribute by @arshsmith1 in nodejs/undici#5571

fix(h2): honour maxResponseSize by @ondraulehla in nodejs/undici#5676

test: stabilize HTTP/2 timeout tests by @mcollina in nodejs/undici#5689

fix: forward onBodySent/onRequestSent through interceptor handlers by @adarshx01 in nodejs/undici#5696

perf(h1): drop idle-socket timer floor with a ref'd setImmediate by @anonrig in nodejs/undici#5707

perf(fetch): skip empty RequestInit work by @anonrig in nodejs/undici#5701

fix: propagate dispatcher options to base class by @mcollina in nodejs/undici#5687

fix(env-http-proxy-agent): ignore trailing dots when matching no_proxy by @pacocartones in nodejs/undici#5637

build(deps-dev): bump @fastify/busboy from 3.2.1 to 3.2.2 by @dependabot[bot] in nodejs/undici#5718

build(deps): bump brace-expansion by @dependabot[bot] in nodejs/undici#5719

fix(socks5-proxy-agent): destroy socket when negotiation times out by @abhijeet117 in nodejs/undici#5709

fix(cache): evict entries when a key holds a single entry by @mcollina in nodejs/undici#5737

test: restore /xhr to the WPT filter by @RaphaelFakhri in nodejs/undici#5723

fix(h2): forward 1xx informational responses to onInfo by @pacocartones in nodejs/undici#5712

fix(agent): preserve pools with pending GOAWAY replays by @mcollina in nodejs/undici#5740

test: skip HTTP/2 churn test on Node.js 26 by @mcollina in nodejs/undici#5742

New Contributors

@ostapondo made their first contribution in nodejs/undici#5655

@jibin7jose made their first contribution in nodejs/undici#5624

@codeAnqiang-ma made their first contribution in nodejs/undici#5683

@zeexzeex made their first contribution in nodejs/undici#5686

@edenbuilds made their first contribution in nodejs/undici#5661

@arshsmith1 made their first contribution in nodejs/undici#5571

@ondraulehla made their first contribution in nodejs/undici#5676

@adarshx01 made their first contribution in nodejs/undici#5696

@abhijeet117 made their first contribution in nodejs/undici#5709

@RaphaelFakhri made their first contribution in nodejs/undici#5723

Full Changelog: nodejs/undici@v8.10.0...v8.10.1

... (truncated)

Commits

ede2a74 Bumped v8.10.1 (#5743)
d0389ca test: skip HTTP/2 churn test on Node.js 26 (#5742)
8b00542 fix(agent): preserve pools with pending GOAWAY replays (#5740)
c32ea13 fix(h2): forward 1xx informational responses to onInfo (#5712)
f474548 test: restore /xhr to the WPT filter (#5723)
3e622dc fix(cache): evict entries when a key holds a single entry (#5737)
fc3450d fix(socks5-proxy-agent): destroy socket when negotiation times out (#5709)
efc4f09 build(deps): bump brace-expansion (#5719)
8726edc build(deps-dev): bump @fastify/busboy from 3.2.1 to 3.2.2 (#5718)
5033aa1 fix(env-http-proxy-agent): ignore trailing dots when matching no_proxy (#5637)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates Bumps the npm_and_yarn group with 3 updates in the /web/ui directory: [browserslist](https://github.com/browserslist/browserslist), [postcss](https://github.com/postcss/postcss) and [undici](https://github.com/nodejs/undici). Updates `browserslist` from 4.28.5 to 4.28.8 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.28.5...4.28.8) Updates `postcss` from 8.5.16 to 8.5.26 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.16...8.5.26) Updates `undici` from 8.7.0 to 8.10.1 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.7.0...v8.10.1) --- updated-dependencies: - dependency-name: browserslist dependency-version: 4.28.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.26 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 8.10.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

github-code-quality · 2026-09-02T05:47:41Z

Code Coverage Overview

Languages: Go

Go / code-coverage/go

The overall line coverage in commit 26f65d4 in the dependabot/npm_and_y... branch remains at 71%, unchanged from commit ef1fd2b in the main branch.

Show a line coverage summary of the most impacted files.

File	`main` ef1fd2b	`dependabot/npm_and_y...` 26f65d4	+/-
`internal/server/shell.go`	90%	86%	-4%
`internal/server/shell_save.go`	74%	70%	-4%
`internal/eventsourcing/host.go`	70%	77%	+7%

dependabot · 2026-09-02T06:29:59Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026

dependabot Bot requested a review from a team as a code owner September 2, 2026 05:46

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026

ivank approved these changes Sep 2, 2026

View reviewed changes

dependabot Bot closed this Sep 2, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/web/ui/npm_and_yarn-a6ad71032f branch September 2, 2026 06:30

Navigation Menu

Uh oh!

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates - #245

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates#245
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/ui/npm_and_yarn-a6ad71032f

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited

Loading

Uh oh!

github-code-quality Bot commented Sep 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.28.8

4.28.7

4.28.6

4.28.8

4.28.7

4.28.6

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

v8.10.1

What's Changed

New Contributors

Uh oh!

github-code-quality Bot commented Sep 2, 2026

Code Coverage Overview

Go / code-coverage/go

Uh oh!

dependabot Bot commented on behalf of github Sep 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited

Loading