Skip to content

build(deps): bump the prod-minor-versions group across 1 directory with 16 updates #423

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump the prod-minor-versions group across 1 directory with 16 updates #423

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025 •
edited
Loading

Bumps the prod-minor-versions group with 16 updates in the /frontend directory:

Package From To
@axe-core/playwright 4.10.1 4.11.0
@date-fns/tz 1.2.0 1.4.1
@radix-ui/react-dialog 1.1.14 1.1.15
compression 1.8.0 1.8.1
express 5.1.0 5.2.0
express-session 1.18.1 1.18.2
i18next 25.2.1 25.7.0
ioredis 5.6.1 5.8.2
isbot 5.1.28 5.1.32
minimatch 10.0.1 10.1.1
morgan 1.10.0 1.10.1
react 19.1.0 19.2.0
react-dom 19.1.0 19.2.0
tailwind-merge 3.3.0 3.4.0
valibot 1.1.0 1.2.0
winston 3.17.0 3.18.3

Updates @axe-core/playwright from 4.10.1 to 4.11.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.11.0

Bug Fixes

Features

Release 4.10.2

  • Optimize AxeBuilder memory usage in #1154
  • Update axe-core to v4.10.3 in #1155
  • wdio: resolve blank navigation issue in WDIO v9 in #1169
  • chore: RC v4.10.2
Changelog

Sourced from @​axe-core/playwright's changelog.

4.11.0 (2025-10-14)

Bug Fixes

Features

4.10.2 (2025-05-12)

Bug Fixes

Commits

Updates @date-fns/tz from 1.2.0 to 1.4.1

Release notes

Sourced from @​date-fns/tz's releases.

v1.4.1

Fixed

v1.4.0

Added

v1.3.1

Fixed

v1.3.0

Fixed

  • Fixed Format.JS support when running in Hermes engine (React Native). Ensured compatibility with JavaScriptCore engine (Safari).

  • Fixed TypeScript node16 module resolution #59. Thanks to @​samchungy.

Added

  • Added tzName function that formats time zone name in given date time and format. It supports "short", "long", "shortGeneric", and "longGeneric" formats, corresponding to TR35 tokens z..zzz, zzzz, v, and vvvv respectively. See README for more details.
Changelog

Sourced from @​date-fns/tz's changelog.

v1.4.1 - 2025-08-12

Fixed

v1.4.0 - 2025-08-12

Added

v1.3.1 - 2025-08-01

Fixed

v1.3.0 - 2025-08-01

Fixed

  • Fixed Format.JS support when running in Hermes engine (React Native). Ensured compatibility with JavaScriptCore engine (Safari).

  • Fixed TypeScript node16 module resolution #59. Thanks to @​samchungy.

Added

  • Added tzName function that formats time zone name in given date time and format. It supports "short", "long", "shortGeneric", and "longGeneric" formats, corresponding to TR35 tokens z..zzz, zzzz, v, and vvvv respectively. See README for more details.
Commits

Updates @radix-ui/react-dialog from 1.1.14 to 1.1.15

Commits

Updates compression from 1.8.0 to 1.8.1

Release notes

Sourced from compression's releases.

v1.8.1

What's Changed

New Contributors

Full Changelog: expressjs/compression@1.8.0...v1.8.1

Changelog

Sourced from compression's changelog.

1.8.1 / 2025-07-17

Commits
  • 83a0c45 1.8.1
  • ce62713 deps: [email protected] (#246)
  • f4acb23 build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (#244)
  • 6eaebe6 build(deps): bump actions/checkout from 4.1.1 to 4.2.2 (#241)
  • 37e0623 build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#240)
  • bc436b2 build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#239)
  • 2f9f572 build(deps): bump github/codeql-action from 3.28.15 to 3.29.2 (#243)
  • 5f13b14 [StepSecurity] ci: Harden GitHub Actions (#235)
  • 76e0945 build(deps-dev): bump supertest from 6.2.3 to 6.3.4 (#231)
  • ae6ee80 build(deps-dev): bump eslint-plugin-import from 2.26.0 to 2.31.0 (#230)
  • Additional commits viewable in compare view

Updates express from 5.1.0 to 5.2.0

Release notes

Sourced from express's releases.

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
Commits

Updates express-session from 1.18.1 to 1.18.2

Release notes

Sourced from express-session's releases.

v1.18.2

What's Changed

New Contributors

Full Changelog: expressjs/session@v1.18.1...v1.18.2

Changelog

Sourced from express-session's changelog.

1.18.2 / 2025-07-17

Commits

Updates i18next from 25.2.1 to 25.7.0

Release notes

Sourced from i18next's releases.

v25.7.0

  • Enhance cloneInstance to create a new interpolator if interpolation options are passed in. This will address 2371.

v25.6.3

  • chore: dependency updates 2368

v25.6.2

  • types: export InterpolationMap

v25.6.1

  • fix: createInstance does not exist on an instance #2366

v25.6.0

  • feat: exists() method now respects returnObjects option - returns false when accessing an object key with returnObjects: false, enabling detection of object vs string keys 2359

    Note: This is a potential behavior change. If you were previously calling exists() with returnObjects: false on object keys, those calls will now return false instead of true. This enables developers to detect whether a key points to an object or string value.

v25.5.3

  • export esm type declaration for keyFromSelector 2356

v25.5.2

  • fix last change => for cjs there is just 1 default export, no named exports, fixes 2348

v25.5.1

  • export keyFromSelector from index.cjs 2347

v25.5.0

  • export keyFromSelector function for testing purposes 2346

v25.4.2

  • fix: enableSelector: true doesn't work with custom keySeparator 2341

v25.4.1

  • fix: KeyPrefix not working with new selector api 2340

v25.4.0

  • add new selector API to improve TypeScript IDE performance 2322
    • To enable it, set enableSelector: true in your configuration options
    • With enableSelector: "optimize", i18next can now handle translation dictionaries of any size, without affecting IDE performance or build times
    • To assist with the migration, we've published the following packages:

v25.3.6

  • improve fix: Ordinals and non-ordinals don't work together 2337

v25.3.5

  • fix: Ordinals and non-ordinals don't work together 2337

v25.3.4

... (truncated)

Changelog

Sourced from i18next's changelog.

25.7.0

  • Enhance cloneInstance to create a new interpolator if interpolation options are passed in. This will address 2371.

25.6.3

  • chore: dependency updates 2368

25.6.2

  • types: export InterpolationMap

25.6.1

  • fix: createInstance does not exist on an instance 2366

25.6.0

  • feat: exists() method now respects returnObjects option - returns false when accessing an object key with returnObjects: false, enabling detection of object vs string keys 2359

    Note: This is a potential behavior change. If you were previously calling exists() with returnObjects: false on object keys, those calls will now return false instead of true. This enables developers to detect whether a key points to an object or string value.

25.5.3

  • export esm type declaration for keyFromSelector 2356

25.5.2

  • fix last change => for cjs there is just 1 default export, no named exports, fixes 2348

25.5.1

  • export keyFromSelector from index.cjs 2347

25.5.0

  • export keyFromSelector function for testing purposes 2346

25.4.2

  • fix: enableSelector: true doesn't work with custom keySeparator 2341

25.4.1

  • fix: KeyPrefix not working with new selector api 2340

25.4.0

  • add new selector API to improve TypeScript IDE performance 2322
    • To enable it, set enableSelector: true in your configuration options

... (truncated)

Commits

Updates ioredis from 5.6.1 to 5.8.2

Release notes

Sourced from ioredis's releases.

v5.8.2

5.8.2 (2025-10-21)

Bug Fixes

v5.8.1

5.8.1 (2025-10-06)

Bug Fixes

  • ssubscribe: re-subscribe sharded pubsub channels individually (#2021) (f161367)

v5.8.0

5.8.0 (2025-09-23)

Bug Fixes

  • ssubscribe: re-subscribe sharded pubsub channels individually on ready (#2012) (55a410f)

Features

v5.7.0

5.7.0 (2025-07-31)

Bug Fixes

Features

Changelog

Sourced from ioredis's changelog.

5.8.2 (2025-10-21)

Bug Fixes

5.8.1 (2025-10-06)

Bug Fixes

  • ssubscribe: re-subscribe sharded pubsub channels individually (#2021) (f161367)

5.8.0 (2025-09-23)

Bug Fixes

  • ssubscribe: re-subscribe sharded pubsub channels individually on ready (#2012) (55a410f)

Features

5.7.0 (2025-07-31)

Bug Fixes

Features

Commits
  • d5f5b40 chore(release): 5.8.2 [skip ci]
  • fcbbbe8 fix: move CLIENT SETINFO commands to connection handshake (#2033)
  • b179039 ci(test): add redis matrix and update docker compose file (#2034)
  • 44c2df6 docs(example): add example for setting TTL to "HSET Field" (#2027)
  • fb082d6 fix: default IP family selection to 0 (#2028)
  • 8dad79f chore(release): 5.8.1 [skip ci]
  • c3f2ebe test: add scenario tests v5 (#2020)
  • f161367 fix(ssubscribe): re-subscribe sharded pubsub channels individually (#2021)
  • 561f354 chore(release): 5.8.0 [skip ci]
  • a5d808b feat: support client setinfo (#2011)
  • Additional commits viewable in compare view

Updates isbot from 5.1.28 to 5.1.32

Changelog

Sourced from isbot's changelog.

5.1.32

  • [Pattern] Pattern updates

5.1.31

  • [Pattern] Pattern updates

5.1.30

  • [Pattern] Pattern updates

5.1.29

  • [Pattern] Pattern update
Commits

Updates minimatch from 10.0.1 to 10.1.1

Changelog

Sourced from minimatch's changelog.

change log

10.1

  • Add magicalBraces option for escape
  • Fix makeRe when partial: true is set.
  • Fix makeRe when pattern ends in a final ** path part.

10.0

  • Require node 20 or 22 and higher

9.0

  • No default export, only named exports.

8.0

  • Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
  • Bump required Node.js version

7.4

  • Add escape() method
  • Add unescape() method
  • Add Minimatch.hasMagic() method

7.3

  • Add support for posix character classes in a unicode-aware way.

7.2

  • Add windowsNoMagicRoot option

7.1

  • Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

7.0

  • Preprocess patterns to simplify complicated patterns and reduce out Description has been truncated

@dependabot
build(deps): bump the prod-minor-versions group across 1 directory wi…
9abf841 
…th 16 updates

Bumps the prod-minor-versions group with 16 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.10.1` | `4.11.0` |
| [@date-fns/tz](https://github.com/date-fns/tz) | `1.2.0` | `1.4.1` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives) | `1.1.14` | `1.1.15` |
| [compression](https://github.com/expressjs/compression) | `1.8.0` | `1.8.1` |
| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.0` |
| [express-session](https://github.com/expressjs/session) | `1.18.1` | `1.18.2` |
| [i18next](https://github.com/i18next/i18next) | `25.2.1` | `25.7.0` |
| [ioredis](https://github.com/luin/ioredis) | `5.6.1` | `5.8.2` |
| [isbot](https://github.com/omrilotan/isbot) | `5.1.28` | `5.1.32` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.0.1` | `10.1.1` |
| [morgan](https://github.com/expressjs/morgan) | `1.10.0` | `1.10.1` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.1.0` | `19.2.0` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.1.0` | `19.2.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.3.0` | `3.4.0` |
| [valibot](https://github.com/open-circle/valibot) | `1.1.0` | `1.2.0` |
| [winston](https://github.com/winstonjs/winston) | `3.17.0` | `3.18.3` |



Updates `@axe-core/playwright` from 4.10.1 to 4.11.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.10.1...v4.11.0)

Updates `@date-fns/tz` from 1.2.0 to 1.4.1
- [Release notes](https://github.com/date-fns/tz/releases)
- [Changelog](https://github.com/date-fns/tz/blob/main/CHANGELOG.md)
- [Commits](https://github.com/date-fns/tz/commits/v1.4.1)

Updates `@radix-ui/react-dialog` from 1.1.14 to 1.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/release-process.md)
- [Commits](https://github.com/radix-ui/primitives/commits)

Updates `compression` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](expressjs/compression@1.8.0...v1.8.1)

Updates `express` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.0)

Updates `express-session` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/expressjs/session/releases)
- [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md)
- [Commits](expressjs/session@v1.18.1...v1.18.2)

Updates `i18next` from 25.2.1 to 25.7.0
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v25.2.1...v25.7.0)

Updates `ioredis` from 5.6.1 to 5.8.2
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.6.1...v5.8.2)

Updates `isbot` from 5.1.28 to 5.1.32
- [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md)
- [Commits](omrilotan/isbot@v5.1.28...v5.1.32)

Updates `minimatch` from 10.0.1 to 10.1.1
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.0.1...v10.1.1)

Updates `morgan` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.10.0...1.10.1)

Updates `react` from 19.1.0 to 19.2.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react)

Updates `react-dom` from 19.1.0 to 19.2.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react-dom)

Updates `tailwind-merge` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.3.0...v3.4.0)

Updates `valibot` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.1.0...v1.2.0)

Updates `winston` from 3.17.0 to 3.18.3
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.17.0...v3.18.3)

---
updated-dependencies:
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: "@date-fns/tz"
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-versions
- dependency-name: compression
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-versions
- dependency-name: express
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: express-session
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-versions
- dependency-name: i18next
  dependency-version: 25.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: ioredis
  dependency-version: 5.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: isbot
  dependency-version: 5.1.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-versions
- dependency-name: minimatch
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: morgan
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-versions
- dependency-name: react
  dependency-version: 19.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: react-dom
  dependency-version: 19.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: tailwind-merge
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: valibot
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
- dependency-name: winston
  dependency-version: 3.18.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-versions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant