Skip to content

Bump the npm_and_yarn group across 1 directory with 11 updates - #30

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-625ddee7e9
Open

Bump the npm_and_yarn group across 1 directory with 11 updates#30
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-625ddee7e9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 5 updates in the / directory:

Package From To
npm 5.10.0 11.9.0
ajv 6.12.0 6.15.0
copy-props 2.0.4 2.0.5
es5-ext 0.10.53 0.10.64
path-parse 1.0.6 1.0.7

Updates npm from 5.10.0 to 11.9.0

Release notes

Sourced from npm's releases.

libnpmpublish: v11.2.0

11.2.0 (2026-05-20)

Features

Chores

libnpmpublish: v11.2.0-pre.0.0

11.2.0-pre.0.0 (2026-05-20)

Features

Chores

libnpmexec: v11.0.2

Dependencies

libnpmexec: v11.0.1

Dependencies

config: v11.0.1

11.0.1 (2026-07-27)

Documentation

config: v11.0.0

11.0.0 (2026-07-08)

⚠️ BREAKING CHANGES

  • npm shrinkwrap is removed, the shrinkwrap config alias is removed, and npm-shrinkwrap.json is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root npm-shrinkwrap.json to package-lock.json; use bundleDependencies if you need to ship a locked dependency tree.
  • The default license for npm init has been changed from "ISC" to an empty string. If not set, the license field will be omitted from new packages.
  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.
  • unknown configs in .npmrc, unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning.

Features

libnpmaccess: v11.0.0

11.0.0 (2026-07-08)

⚠️ BREAKING CHANGES

  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0

Features

libnpmexec: v11.0.0

11.0.0 (2026-07-08)

⚠️ BREAKING CHANGES

... (truncated)

Changelog

Sourced from npm's changelog.

11.9.0 (2026-02-04)

Features

Bug Fixes

Dependencies

Chores

11.8.0 (2026-01-21)

Features

  • 545e861 #8828 show proxy environment variables in npm config list (Max Black)

Bug Fixes

Documentation

Dependencies

Chores

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by gar, a new releaser for npm since your current version.


Updates ajv from 6.12.0 to 6.15.0

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@​issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

Commits

Updates chownr from 1.0.1 to 3.0.0

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates copy-props from 2.0.4 to 2.0.5

Commits

Updates es5-ext from 0.10.53 to 0.10.64

Release notes

Sourced from es5-ext's releases.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

Comparison since last release

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

Comparison since last release

0.10.62 (2022-08-02)

Maintenance Improvements

Comparison since last release

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Comparison since last release

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

... (truncated)

Changelog

Sourced from es5-ext's changelog.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

0.10.62 (2022-08-02)

Maintenance Improvements

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

0.10.59 (2022-03-17)

Maintenance Improvements

0.10.58 (2022-03-11)

... (truncated)

Commits
  • f76b03d chore: Release v0.10.64
  • 2881acd chore: Bump dependencies
  • c2e2bb9 fix: Revert update meant to fix Powershell issue, as it's a regression
  • 16f2b72 docs: Fix date in the changelog
  • de4e03c chore: Release v0.10.63
  • 3fd53b7 chore: Upgrade lint-staged to v13
  • bf8ed79 chore: Ensure postinstall script does not crash on Windows
  • 2cbbb07 chore: Bump dependencies
  • 22d0416 chore: Bump LICENSE year
  • a52e957 fix: Support ES2015+ function definitions in function#toStringTokens()
  • Additional commits viewable in compare view
Install script changes

This version adds postinstall script that runs during installation. Review the package contents before updating.


Updates http-cache-semantics from 3.8.1 to 4.2.0

Commits

Updates lodash from 3.10.1 to 4.17.15

Release notes

Sourced from lodash's releases.

4.0.0

lodash v4.0.0

2015 was big year! Lodash became the most depended on npm package, passed 1 billion downloads, & its v3 release saw massive adoption!

The year was also one of collaboration, as discussions began on merging Lodash & Underscore. Much of Lodash v4 is proofing out the ideas from those discussions. Lodash v4 would not be possible without the collaboration & contributions of the Underscore core team. In the spirit of merging our teams have blended with several members contributing to both libraries.

For 2016 & lodash v4.0.0 we wanted to cut loose, push forward, & take things up a notch!

Modern only

With v4 we’re breaking free from old projects, old environments, & dropping old IE < 9 support!

4 kB Core

Lodash’s kitchen-sink size will continue to grow as new methods & functionality are added. However, we now offer a 4 kB (gzipped) core build that’s compatible with Backbone v1.2.4 for folks who want Lodash without lugging around the kitchen sink.

More ES6

We’ve continued to embrace ES6 with methods like _.isSymbol, added support for cloning & comparing array buffers, maps, sets, & symbols, converting iterators to arrays, & iterable _(…).

In addition, we’ve published an es-build & pulled babel-plugin-lodash into core to make tree-shaking a breeze.

More Modular

Pop quiz! 📣

What category path does the bindAll method belong to? Is it

A) require('lodash/function/bindAll') B) require('lodash/utility/bindAll') C) require('lodash/util/bindAll')

Don’t know? Well, with v4 it doesn’t matter because now module paths are as simple as

var bindAll = require('lodash/bindAll');

We’ve also reduced module complexity making it easier to create smaller bundles. This has helped Lodash adoption with libraries like Async & Redux!

1st Class FP

With v3 we introduced lodash-fp. We learned a lot & with v4 we decided to pull it into core.

Now you can get immutable, auto-curried, iteratee-first, data-last methods as simply as

var _ = require('lodash/fp');
var object = { 'a': 1 };
</tr></table>

... (truncated)

Commits

Updates npm-registry-fetch from 1.1.1 to 19.1.1

Release notes

Sourced from npm-registry-fetch's releases.

v19.1.1

19.1.1 (2025-11-13)

Dependencies

Chores

v19.1.0

19.1.0 (2025-10-28)

Features

v19.0.0

19.0.0 (2025-07-24)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Dependencies

Chores

v18.0.2

18.0.2 (2024-10-16)

Bug Fixes

Chores

v18.0.1

18.0.1 (2024-10-02)

Dependencies

v18.0.0

18.0.0 (2024-09-26)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^18.17.0 || >=20.5.0

Bug Fixes

Dependencies

... (truncated)

Changelog

Sourced from npm-registry-fetch's changelog.

19.1.1 (2025-11-13)

Dependencies

Chores

19.1.0 (2025-10-28)

Features

19.0.0 (2025-07-24)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Dependencies

Chores

18.0.2 (2024-10-16)

Bug Fixes

Chores

18.0.1 (2024-10-02)

Dependencies

18.0.0 (2024-09-26)

⚠️ BREAKING CHANGES

  • npm-registry-fetch now supports node ^18.17.0 || >=20.5.0

Bug Fixes

Dependencies

Chores

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for npm-registry-fetch since your current version.


Updates npm-user-validate from 1.0.0 to 4.0.0

Release notes

Sourced from npm-user-validate's releases.

v4.0.0

4.0.0 (2025-10-22)

⚠️ BREAKING CHANGES

  • npm-user-validate now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Chores

v3.0.0

3.0.0 (2024-09-03)

⚠️ BREAKING CHANGES

  • npm-user-validate now supports node ^18.17.0 || >=20.5.0

Bug Fixes

Chores

v2.0.1

2.0.1 (2024-05-06)

Documentation

Chores

v2.0.0

2.0.0 (2022-12-12)

⚠️ BREAKING CHANGES

  • this package is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0

Features

Changelog

Sourced from npm-user-validate's changelog.

4.0.0 (2025-10-22)

⚠️ BREAKING CHANGES

  • npm-user-validate now supports node ^20.17.0 || >=22.9.0

Bug Fixes

Chores

3.0.0 (2024-09-03)

⚠️ BREAKING CHANGES

  • npm-user-validate now supports node ^18.17.0 || >=20.5.0

Bug Fixes

Chores

@dependabot
Bump the npm_and_yarn group across 1 directory with 11 updates
0679e2c 
Bumps the npm_and_yarn group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [npm](https://github.com/npm/cli) | `5.10.0` | `11.9.0` |
| [ajv](https://github.com/ajv-validator/ajv) | `6.12.0` | `6.15.0` |
| [copy-props](https://github.com/gulpjs/copy-prop) | `2.0.4` | `2.0.5` |
| [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.64` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |



Updates `npm` from 5.10.0 to 11.9.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v5.10.0...v11.9.0)

Updates `ajv` from 6.12.0 to 6.15.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.0...v6.15.0)

Updates `chownr` from 1.0.1 to 3.0.0
- [Commits](isaacs/chownr@v1.0.1...v3.0.0)

Updates `copy-props` from 2.0.4 to 2.0.5
- [Commits](https://github.com/gulpjs/copy-prop/commits)

Updates `es5-ext` from 0.10.53 to 0.10.64
- [Release notes](https://github.com/medikoo/es5-ext/releases)
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md)
- [Commits](medikoo/es5-ext@v0.10.53...v0.10.64)

Updates `http-cache-semantics` from 3.8.1 to 4.2.0
- [Commits](https://github.com/kornelski/http-cache-semantics/commits)

Updates `lodash` from 3.10.1 to 4.17.15
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@3.10.1...4.17.15)

Updates `npm-registry-fetch` from 1.1.1 to 19.1.1
- [Release notes](https://github.com/npm/npm-registry-fetch/releases)
- [Changelog](https://github.com/npm/npm-registry-fetch/blob/main/CHANGELOG.md)
- [Commits](npm/npm-registry-fetch@v1.1.1...v19.1.1)

Updates `npm-user-validate` from 1.0.0 to 4.0.0
- [Release notes](https://github.com/npm/npm-user-validate/releases)
- [Changelog](https://github.com/npm/npm-user-validate/blob/main/CHANGELOG.md)
- [Commits](npm/npm-user-validate@v1.0.0...v4.0.0)

Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

Updates `ssri` from 5.3.0 to 13.0.1
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md)
- [Commits](npm/ssri@v5.3.0...v13.0.1)

---
updated-dependencies:
- dependency-name: npm
  dependency-version: 11.9.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ajv
  dependency-version: 6.15.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: chownr
  dependency-version: 3.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: copy-props
  dependency-version: 2.0.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: es5-ext
  dependency-version: 0.10.64
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-cache-semantics
  dependency-version: 4.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.15
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: npm-registry-fetch
  dependency-version: 19.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: npm-user-validate
  dependency-version: 4.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-parse
  dependency-version: 1.0.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ssri
  dependency-version: 13.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants