chore(deps): Bump the dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #43 · swingerman/grid-bootstrap5

dependabot · 2026-05-18T16:21:10Z

Bumps the dependencies group with 10 updates in the / directory:

Package	From	To
@cacheable/memory	`2.0.8`	`2.0.9`
@csstools/css-syntax-patches-for-csstree	`1.1.3`	`1.1.4`
cacheable	`2.3.4`	`2.3.5`
fast-uri	`3.1.0`	`3.1.2`
file-entry-cache	`11.1.2`	`11.1.3`
fs-extra	`11.3.4`	`11.3.5`
is-core-module	`2.16.1`	`2.16.2`
mdn-data	`2.27.1`	`2.28.1`
postcss	`8.5.13`	`8.5.14`
yaml	`2.8.4`	`2.9.0`

Updates @cacheable/memory from 2.0.8 to 2.0.9

Commits

See full diff in compare view

Updates @csstools/css-syntax-patches-for-csstree from 1.1.3 to 1.1.4

Changelog

Sourced from @csstools/css-syntax-patches-for-csstree's changelog.

1.1.4

May 13, 2026

Update @webref/css to v8.5.4

Commits

See full diff in compare view

Updates cacheable from 2.3.4 to 2.3.5

Commits

See full diff in compare view

Updates fast-uri from 3.1.0 to 3.1.2

Release notes

Sourced from fast-uri's releases.

v3.1.2

⚠️ Security Release

Fix for GHSA-v39h-62p7-jpjc

What's Changed

Handle malformed fragment decoding as a parse error by @mcollina in fastify/fast-uri#171

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

Fix for GHSA-q3j6-qgpj-74h6

What's Changed

build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in fastify/fast-uri#148

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in fastify/fast-uri#149

chore(.npmrc): ignore scripts by @Fdawgs in fastify/fast-uri#150

build(deps-dev): remove @fastify/pre-commit by @Fdawgs in fastify/fast-uri#151

build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in fastify/fast-uri#152

ci(ci): add concurrency config by @Fdawgs in fastify/fast-uri#153

build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in fastify/fast-uri#154

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in fastify/fast-uri#156

chore(license): standardise license notice by @Fdawgs in fastify/fast-uri#159

style: remove trailing whitespace by @Fdawgs in fastify/fast-uri#161

ci: remove unused github files by @Tony133 in fastify/fast-uri#162

chore: update readme by @Tony133 in fastify/fast-uri#164

build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-manager.yml from 5 to 6 by @dependabot[bot] in fastify/fast-uri#165

build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in fastify/fast-uri#166

build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in fastify/fast-uri#167

ci: add lock-threads workflow by @Fdawgs in fastify/fast-uri#169

New Contributors

@Tony133 made their first contribution in fastify/fast-uri#162

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits

919dd8e Bumped v3.1.2
c65ba57 fixup: linting
6c86c17 Merge commit from fork
a95158a Handle malformed fragment decoding without throwing (#171)
cea547c Bumped v3.1.1
876ce79 Merge commit from fork
dcdf690 ci: add lock-threads workflow (#169)
c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
9b4c6dc build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)
85d09a9 build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...
Additional commits viewable in compare view

Updates file-entry-cache from 11.1.2 to 11.1.3

Commits

See full diff in compare view

Updates fs-extra from 11.3.4 to 11.3.5

Changelog

Sourced from fs-extra's changelog.

11.3.5 / 2026-05-06

Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)

Fix error handling in timestamp preservation code (#1065, #1069)

Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)

Commits

8a88f58 11.3.5
81a1311 Mirror all utimesMillis() tests for utimesMillisSync() (#1070)
b7ab7f8 Properly handle close errors in utimesMillis*() (#1069)
1c248ed Fix file descriptor leak in utimesMillisSync (#1066)
a4000d6 Ensure all usages of areIdentical receive bigint stats (#1068)
1e9c57d Fix error handling in utimesMillis (#1065)
See full diff in compare view

Updates is-core-module from 2.16.1 to 2.16.2

Changelog

Sourced from is-core-module's changelog.

v2.16.2 - 2026-05-05

Commits

[Tests] increase coverage 1fc59fe

[actions] update workflows 0f6217b

[Fix] node 26 drops stream* modules 3acff68

[Dev Deps] update @ljharb/eslint-config, eslint, npmignore f06678c

[Deps] update hasown d9eae68

[Dev Deps] update @ljharb/eslint-config 8273701

[readme] replace runkit CI badge with shields.io check-runs badge 6b86754

Commits

a1633e0 v2.16.2
0f6217b [actions] update workflows
3acff68 [Fix] node 26 drops stream* modules
d9eae68 [Deps] update hasown
8273701 [Dev Deps] update @ljharb/eslint-config
f06678c [Dev Deps] update @ljharb/eslint-config, eslint, npmignore
1fc59fe [Tests] increase coverage
6b86754 [readme] replace runkit CI badge with shields.io check-runs badge
See full diff in compare view

Updates mdn-data from 2.27.1 to 2.28.1

Release notes

Sourced from mdn-data's releases.

v2.28.1

2.28.1 (2026-05-06)

Bug Fixes

css: correct the malformed reference in patternProperties for custom properties schema. (#1065) (4c1ab15)

css: Fix border-* animationType, computed, initial, percentages, and syntax (#1060) (b1c81f0)

css: Fix syntax for column-rule-style/width and canonical order (#1062) (9c52cb4)

v2.28.0

2.28.0 (2026-04-13)

Features

css: Add and fix -webkit-border-start/end/before/after-* (#1061) (903bf40)

css: add schema validation and supplementary documentation for custom properties (#1057) (fd3122b)

css: Update syntax and initial value for rx ry (#1058) (2e4cbca)

Changelog

Sourced from mdn-data's changelog.

2.28.1 (2026-05-06)

Bug Fixes

css: correct the malformed reference in patternProperties for custom properties schema. (#1065) (4c1ab15)

css: Fix border-* animationType, computed, initial, percentages, and syntax (#1060) (b1c81f0)

css: Fix syntax for column-rule-style/width and canonical order (#1062) (9c52cb4)

2.28.0 (2026-04-13)

Features

css: Add and fix -webkit-border-start/end/before/after-* (#1061) (903bf40)

css: add schema validation and supplementary documentation for custom properties (#1057) (fd3122b)

css: Update syntax and initial value for rx ry (#1058) (2e4cbca)

Commits

54c56cd chore(main): release 2.28.1 (#1067)
9c52cb4 fix(css): Fix syntax for column-rule-style/width and canonical order (#1062)
b1c81f0 fix(css): Fix border-* animationType, computed, initial, percentages, and s...
f0e52d9 updated the intial value and syntax of position-anchor property (#1068)
1c10ba8 ci(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#1064)
053ee48 ci(deps): bump GoogleCloudPlatform/release-please-action from 4.4.0 to 5.0.0 ...
4c1ab15 fix(css): correct the malformed reference in patternProperties for custom pro...
42d6216 chore(main): release 2.28.0 (#1059)
fd3122b feat(css): add schema validation and supplementary documentation for custom p...
903bf40 feat(css): Add and fix -webkit-border-start/end/before/after-* (#1061)
Additional commits viewable in compare view

Updates postcss from 8.5.13 to 8.5.14

Release notes

Sourced from postcss's releases.

8.5.14

Fixed custom syntax regression (by @43081j).

Changelog

Sourced from postcss's changelog.

8.5.14

Fixed custom syntax regression (by @43081j).

Commits

3ec1394 Release 8.5.14 version
f2bb827 Update dependencies
d75953d Merge pull request #2084 from 43081j/raw-raws-rawing
68bd213 fix: always call raw to retrieve raw values
See full diff in compare view

Updates qified from 0.9.1 to 0.10.1

Release notes

Sourced from qified's releases.

v0.10.1

What's Changed

rabbitmq - fix: concurrency fixes by @jaredwray in jaredwray/qified#191

Full Changelog: jaredwray/qified@v0.10.0...v0.10.1

v0.10.0

What's Changed

feat: Add NatsTaskProvider for NATS JetStream task queue support by @jaredwray in jaredwray/qified#181

mono - chore: upgrading biome, types, and vitest by @jaredwray in jaredwray/qified#182

mono - chore: upgrading typescript, tsdown, and docula by @jaredwray in jaredwray/qified#183

rabbitmq - chore: upgrading amqplib to 1.0.3 by @jaredwray in jaredwray/qified#184

rabbitmq - chore: adding in test coverage by @jaredwray in jaredwray/qified#185

rabbitmq - chore: test cleanup by @jaredwray in jaredwray/qified#186

chore: upgrading redis to 5.12.1 by @jaredwray in jaredwray/qified#187

qified - feat: adding in enque and deqeue by @jaredwray in jaredwray/qified#188

mono - fix: rabbit and nats with better connection handling by @jaredwray in jaredwray/qified#189

mono - fix: providerId and reconnect / connection fixes by @jaredwray in jaredwray/qified#190

Full Changelog: jaredwray/qified@v0.9.1...v0.10.0

Commits

3dcb0d2 version bump to v0.10.1
efef697 Merge pull request #191 from jaredwray/rabbitmq---concurrent-connect-gate-and...
dbdd263 Merge branch 'rabbitmq---concurrent-connect-gate-and-nack-fix' of https://git...
bf4b988 handing connect issues
bf1b354 Merge branch 'main' into rabbitmq---concurrent-connect-gate-and-nack-fix
3e1fab5 concurrent fixes
d02eab7 version sync
6e566fa version bump to v0.10.0
3772076 Merge pull request #190 from jaredwray/rabbitmq---concurrent-connect-gate-and...
0d434ff connection fixes
Additional commits viewable in compare view

Updates yaml from 2.8.4 to 2.9.0

Release notes

Sourced from yaml's releases.

v2.9.0

The changes here are really only patches, but I'm releasing this as a minor version to note a small change to the documentation of parseDocument() and parseAllDocuments(): I've removed the claim that they'll "never throw".

It remains the case that practically all non-malicious inputs will be handled without emitting an error, but there is a decent chance that code paths remain where e.g. a RangeError due to call stack exhaustion can be triggered by malicious inputs. Up to now, I've considered these as security vulnerabilities, and in fact it's the only category of error for which yaml CVEs have been issued so far.

Starting from this release, I'll be considering such errors as bugs, but not vulnerabilities. I do welcome people and/or LLMs looking for them, but please report them as normal issues rather than suspected security vulnerabilities. This also applies to previously undiscovered bugs in earlier releases.

fix: Avoid calling Array.prototype.push.apply() with large source array

fix(lexer): Avoid recursive calls that may exhaust the call stack

Commits

ddb21b0 2.9.0
167365b docs: Clarify that not all errors can be avoided
6eca2a7 fix: Avoid calling Array.prototype.push.apply() with large source array
0543cd5 fix(lexer): Avoid recursive calls that may exhaust the call stack
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@cacheable/memory](https://github.com/jaredwray/cacheable/tree/HEAD/packages/cacheable) | `2.0.8` | `2.0.9` | | [@csstools/css-syntax-patches-for-csstree](https://github.com/csstools/postcss-plugins/tree/HEAD/packages/css-syntax-patches-for-csstree) | `1.1.3` | `1.1.4` | | [cacheable](https://github.com/jaredwray/cacheable/tree/HEAD/packages/cacheable) | `2.3.4` | `2.3.5` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.2` | | [file-entry-cache](https://github.com/jaredwray/cacheable/tree/HEAD/packages/file-entry-cache) | `11.1.2` | `11.1.3` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.4` | `11.3.5` | | [is-core-module](https://github.com/inspect-js/is-core-module) | `2.16.1` | `2.16.2` | | [mdn-data](https://github.com/mdn/data) | `2.27.1` | `2.28.1` | | [postcss](https://github.com/postcss/postcss) | `8.5.13` | `8.5.14` | | [yaml](https://github.com/eemeli/yaml) | `2.8.4` | `2.9.0` | Updates `@cacheable/memory` from 2.0.8 to 2.0.9 - [Release notes](https://github.com/jaredwray/cacheable/releases) - [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/cacheable) Updates `@csstools/css-syntax-patches-for-csstree` from 1.1.3 to 1.1.4 - [Changelog](https://github.com/csstools/postcss-plugins/blob/main/packages/css-syntax-patches-for-csstree/CHANGELOG.md) - [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/packages/css-syntax-patches-for-csstree) Updates `cacheable` from 2.3.4 to 2.3.5 - [Release notes](https://github.com/jaredwray/cacheable/releases) - [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/cacheable) Updates `fast-uri` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) Updates `file-entry-cache` from 11.1.2 to 11.1.3 - [Release notes](https://github.com/jaredwray/cacheable/releases) - [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/file-entry-cache) Updates `fs-extra` from 11.3.4 to 11.3.5 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.4...11.3.5) Updates `is-core-module` from 2.16.1 to 2.16.2 - [Changelog](https://github.com/inspect-js/is-core-module/blob/main/CHANGELOG.md) - [Commits](inspect-js/is-core-module@v2.16.1...v2.16.2) Updates `mdn-data` from 2.27.1 to 2.28.1 - [Release notes](https://github.com/mdn/data/releases) - [Changelog](https://github.com/mdn/data/blob/main/CHANGELOG.md) - [Commits](mdn/data@v2.27.1...v2.28.1) Updates `postcss` from 8.5.13 to 8.5.14 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.13...8.5.14) Updates `qified` from 0.9.1 to 0.10.1 - [Release notes](https://github.com/jaredwray/qified/releases) - [Commits](jaredwray/qified@v0.9.1...v0.10.1) Updates `yaml` from 2.8.4 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.4...v2.9.0) --- updated-dependencies: - dependency-name: "@cacheable/memory" dependency-version: 2.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@csstools/css-syntax-patches-for-csstree" dependency-version: 1.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: cacheable dependency-version: 2.3.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: file-entry-cache dependency-version: 11.1.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: fs-extra dependency-version: 11.3.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: is-core-module dependency-version: 2.16.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: mdn-data dependency-version: 2.28.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: postcss dependency-version: 8.5.14 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: qified dependency-version: 0.10.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: yaml dependency-version: 2.9.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-18T16:21:11Z

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the dependencies group across 1 directory with 11 updates#43

chore(deps): Bump the dependencies group across 1 directory with 11 updates#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-1f9e5ba616

dependabot Bot commented on behalf of github May 18, 2026

Uh oh!

dependabot Bot commented on behalf of github May 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 18, 2026

1.1.4

v3.1.2

⚠️ Security Release

What's Changed

v3.1.1

⚠️ Security Release

What's Changed

New Contributors

11.3.5 / 2026-05-06

v2.16.2 - 2026-05-05

Commits

v2.28.1

2.28.1 (2026-05-06)

Bug Fixes

v2.28.0

2.28.0 (2026-04-13)

Features

2.28.1 (2026-05-06)

Bug Fixes

2.28.0 (2026-04-13)

Features

8.5.14

8.5.14

v0.10.1

What's Changed

v0.10.0

What's Changed

v2.9.0

Uh oh!

dependabot Bot commented on behalf of github May 18, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants