Skip to content

Build(deps): Bump the npm-dependencies group across 1 directory with 10 updates - #138

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-9a6ac43c06
Open

Build(deps): Bump the npm-dependencies group across 1 directory with 10 updates#138
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-9a6ac43c06

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 8 updates in the / directory:

Package From To
ansi-styles 6.2.3 7.0.0
baseline-browser-mapping 2.10.43 2.11.4
browserslist 4.28.6 4.28.7
color-name 2.1.0 2.1.1
fs-extra 11.3.6 11.4.0
yargs 18.0.0 18.1.0
autoprefixer 10.5.2 10.5.4
postcss 8.5.18 8.5.23

Updates ansi-styles from 6.2.3 to 7.0.0

Release notes

Sourced from ansi-styles's releases.

v7.0.0

Breaking

  • Require Node.js 22 802582c

Improvements

  • Add extended underline styles and underline colors af41a9e

chalk/ansi-styles@v6.2.3...v7.0.0

Commits

Updates baseline-browser-mapping from 2.10.43 to 2.11.4

Release notes

Sourced from baseline-browser-mapping's releases.

v2.11.0

What's Changed in 2.11.0

  • feat: Adds a new getTimeline() method for getting the series of minimum browser changes, either grouped by date or by browser.
  • refactor: Substantial refactoring of the data compression process that replaces the full list of browsers from @mdn/browser-compat-data and downstream-browsers.json and features from web-features (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date. Thanks to @​swwind for the idea!
  • refactor: Some common functions have been moved to a util.ts module for use in other scripts.
  • fix: Removes process.exit() calls when unsupported option combinations are passed to getCompatibleVersions() and getAllVersions() in favour of throwing an Error. There is a small security risk with process.exit() calls that sites accepting unsanitised inputs could be the subject of attacks. Unsupported config options now throw and Error which should allow for more graceful handling. Thanks to @​bnbdr for flagging this as vulnerability CVE-2026-45819 .

Fixes #134

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.10.44...v2.11.0

v2.9.3 - remove process.loadEnvFile()

What's Changed

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

Commits
  • 3181ec7 Patch to 2.11.4 because browser or feature data changed
  • 433f067 Browser or feature data changed
  • f10fc63 Updating static site
  • 5098389 Patch to 2.11.3 because browser or feature data changed
  • 12b1a19 Browser or feature data changed
  • 001faf1 Patch to 2.11.2 because browser or feature data changed
  • 9b11b2d Browser or feature data changed
  • 67502fe Updating static site
  • 0a7ce51 Patch to 2.11.1 because browser or feature data changed
  • 3f08bfe Browser or feature data changed
  • Additional commits viewable in compare view

Updates browserslist from 4.28.6 to 4.28.7

Release notes

Sourced from browserslist's releases.

4.28.7

Changelog

Sourced from browserslist's changelog.

4.28.7

Commits

Updates caniuse-lite from 1.0.30001805 to 1.0.30001806

Commits

Updates color-name from 2.1.0 to 2.1.1

Commits

Updates electron-to-chromium from 1.5.389 to 1.5.396

Commits

Updates fs-extra from 11.3.6 to 11.4.0

Changelog

Sourced from fs-extra's changelog.

11.4.0 / 2026-07-23

  • Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#925, #1076)
Commits

Updates yargs from 18.0.0 to 18.1.0

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

  • ignore bun when getting bin name (b77831c)

Bug Fixes

  • lang: 'count' for de locale (#2476) (971e351)
  • local prototype pollution vulnerability in apply-extends (437f3a4)
  • locale: add Georgian translation (#2474) (086aeaa)

17.7.3 (2026-06-19)

Bug Fixes

  • fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

  • fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)
Commits
Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.


Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

Commits

Updates postcss from 8.5.18 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…10 updates

Bumps the npm-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ansi-styles](https://github.com/chalk/ansi-styles) | `6.2.3` | `7.0.0` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.43` | `2.11.4` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.6` | `4.28.7` |
| [color-name](https://github.com/colorjs/color-name) | `2.1.0` | `2.1.1` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.6` | `11.4.0` |
| [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.1.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.5.4` |
| [postcss](https://github.com/postcss/postcss) | `8.5.18` | `8.5.23` |



Updates `ansi-styles` from 6.2.3 to 7.0.0
- [Release notes](https://github.com/chalk/ansi-styles/releases)
- [Commits](chalk/ansi-styles@v6.2.3...v7.0.0)

Updates `baseline-browser-mapping` from 2.10.43 to 2.11.4
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.10.43...v2.11.4)

Updates `browserslist` from 4.28.6 to 4.28.7
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.6...4.28.7)

Updates `caniuse-lite` from 1.0.30001805 to 1.0.30001806
- [Commits](browserslist/caniuse-lite@1.0.30001805...1.0.30001806)

Updates `color-name` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/colorjs/color-name/releases)
- [Commits](https://github.com/colorjs/color-name/commits)

Updates `electron-to-chromium` from 1.5.389 to 1.5.396
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.389...v1.5.396)

Updates `fs-extra` from 11.3.6 to 11.4.0
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.6...11.4.0)

Updates `yargs` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.1.0)

Updates `autoprefixer` from 10.5.2 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.5.4)

Updates `postcss` from 8.5.18 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.18...8.5.23)

---
updated-dependencies:
- dependency-name: ansi-styles
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: browserslist
  dependency-version: 4.28.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001806
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: color-name
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: electron-to-chromium
  dependency-version: 1.5.396
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fs-extra
  dependency-version: 11.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants