Skip to content

chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 14 updates - #9754

Closed
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/dev-minor-and-patch-dependencies-2aa0d71f39
Closed

chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 14 updates#9754
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/dev-minor-and-patch-dependencies-2aa0d71f39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-minor-and-patch-dependencies group with 13 updates in the / directory:

Package From To
@eslint/eslintrc 3.3.5 3.3.6
@openfeature/core 1.11.0 1.12.0
@openfeature/server-sdk 1.22.0 1.23.0
axios 1.18.1 1.19.0
eslint 10.7.0 10.8.0
eslint-plugin-cypress 6.4.2 6.4.4
eslint-plugin-jsdoc 63.0.12 63.3.3
eslint-plugin-n 18.2.1 18.2.2
minimatch 10.2.5 10.2.6
mocha 11.7.6 11.8.0
nock 14.0.16 14.0.17
p-limit 7.3.0 7.3.1
sinon 22.0.0 22.1.0

Updates @eslint/eslintrc from 3.3.5 to 3.3.6

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

  • update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)
Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.6 (2026-07-10)

Bug Fixes

  • update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)
Commits

Updates @openfeature/core from 1.11.0 to 1.12.0

Release notes

Sourced from @​openfeature/core's releases.

core: v1.12.0

1.12.0 (2026-07-27)

✨ New Features

  • core: pass bound domain to provider initialize and enforce domain-scoped binding (#1433) (a98f914)
Commits
  • 090bf55 chore(main): release core 1.12.0 (#1437)
  • a98f914 feat(core): pass bound domain to provider initialize and enforce domain-scope...
  • bc470dc test: add package export smoke checks (#1406)
  • 3c01041 chore(main): release react-sdk 1.4.1 (#1427)
  • c3833a7 chore(deps): update angular monorepo to v21.2.17 (#1404)
  • 407e06e chore(deps): update dependency rollup-plugin-dts to v6.4.1 (#1393)
  • 3f6ac84 chore(deps): update angular-cli monorepo to v21.2.15 (#1411)
  • 274ea74 chore(deps): update react monorepo to v18.3.31 (#1424)
  • f6da4e2 chore(deps): update dependency ts-jest to v29.4.11 (#1423)
  • 7a7f795 chore(deps): update dependency rollup to v4.62.0 (#1391)
  • Additional commits viewable in compare view

Updates @openfeature/server-sdk from 1.22.0 to 1.23.0

Release notes

Sourced from @​openfeature/server-sdk's releases.

server-sdk: v1.23.0

1.23.0 (2026-07-28)

✨ New Features

  • core: pass bound domain to provider initialize and enforce domain-scoped binding (#1433) (a98f914)
Commits
  • ba1bfd0 chore(main): release server-sdk 1.23.0 (#1438)
  • 0fffbc0 chore(main): release web-sdk 1.10.0 (#1439)
  • 090bf55 chore(main): release core 1.12.0 (#1437)
  • a98f914 feat(core): pass bound domain to provider initialize and enforce domain-scope...
  • bc470dc test: add package export smoke checks (#1406)
  • 3c01041 chore(main): release react-sdk 1.4.1 (#1427)
  • c3833a7 chore(deps): update angular monorepo to v21.2.17 (#1404)
  • 407e06e chore(deps): update dependency rollup-plugin-dts to v6.4.1 (#1393)
  • 3f6ac84 chore(deps): update angular-cli monorepo to v21.2.15 (#1411)
  • 274ea74 chore(deps): update react monorepo to v18.3.31 (#1424)
  • Additional commits viewable in compare view

Updates axios from 1.18.1 to 1.19.0

Release notes

Sourced from axios's releases.

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

  • Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

  • Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)
  • Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)
  • HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

  • Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)
  • Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)
  • Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)
  • Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)
  • URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11024, #11038)
  • Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)
  • Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)
  • Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)
  • Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

  • Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)
  • Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)
  • Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)
  • Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)
  • Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)
  • Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

... (truncated)

Changelog

Sourced from axios's changelog.

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

  • Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

  • Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)
  • Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)
  • HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

  • Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

  • Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

  • Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

  • Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

  • URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

  • Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

  • Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

  • Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

  • Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

  • Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)
  • Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)
  • Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)
  • Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)
  • Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)
  • Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

... (truncated)

Commits
  • 311fcc5 chore(release): prepare release 1.19.0 (#11095)
  • cb4fd74 chore(deps): bump axios from 1.16.1 to 1.18.1 in /docs (#11088)
  • 004c93a chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the github-action...
  • 122edde chore(deps-dev): bump the development_dependencies group with 3 updates (#11089)
  • c44f8d0 ci: use bundled npm for v1 publish (#11083)
  • 878bb29 fix(sandbox): resolve TypeError on constant variable path assignment (#11073)
  • a092bae fix(core): synchronous interceptors swallow errors and proceed with request (...
  • 3041b8f feat(HttpStatusCode): add missing 520 status code (#11067)
  • 58b16c8 refactor(helpers): extract duplicated setFormDataHeaders into a shared helper...
  • 3077e62 feat(types): Allow the Params property to be typed, instead of any (#11081)
  • Additional commits viewable in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates eslint-plugin-cypress from 6.4.2 to 6.4.4

Release notes

Sourced from eslint-plugin-cypress's releases.

v6.4.4

6.4.4 (2026-08-04)

Bug Fixes

  • deps: update dependency globals to ^17.8.0 (#404) (a03661e)

v6.4.3

6.4.3 (2026-07-14)

Bug Fixes

  • docs: add no-and rule documentation to README (#379) (f1e2b93)
Commits
  • a03661e fix(deps): update dependency globals to ^17.8.0 (#404)
  • 8d81cb8 chore(ci): run eslint-doc-generator check in ci (#408)
  • 4c8e323 chore(deps): update typescript to 6.0.3 (#391)
  • 8133f8d chore(deps): update node.js to v24.18.0 (#398)
  • 480bbdd chore(deps): update dependency prettier to ^3.9.6 (#401)
  • 968a8c3 chore(deps): update eslint (#399)
  • 618f85c chore(renovate): add circle.yml to Renovate scope (#389)
  • 3e43004 docs(deps): locally install eslint-doc-generator@3.6.0 (#394)
  • 2068613 chore: lint Markdown files with Prettier (#393)
  • 7a6bf7b chore(deps): update eslint to ^8.64.0 (#396)
  • Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 63.0.12 to 63.3.3

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v63.3.3

63.3.3 (2026-08-02)

Bug Fixes

v63.3.2

63.3.2 (2026-07-28)

Bug Fixes

  • require-example: support fixer with 1-line JSDoc blocks; fixes #1736 (36f8e9e)

v63.3.1

63.3.1 (2026-07-27)

Bug Fixes

  • normalize-see-links: minimally escape link targets instead of encodeURI (#1735) (ae27cd2)

v63.3.0

63.3.0 (2026-07-26)

Features

  • normalize-see-links: autofix delimiter-colliding labels via escape round-trip (#1734) (cfe9cdb)

v63.2.2

63.2.2 (2026-07-24)

Bug Fixes

v63.2.1

63.2.1 (2026-07-23)

Bug Fixes

  • update jsdoccomment, spdx-expression-parse, devDeps.; fixes #1727 (#1728) (9fd2f28)

v63.2.0

63.2.0 (2026-07-19)

... (truncated)

Commits
  • cb41846 chore: update devDeps.
  • 5c17ce4 refactor: fix tsc dev
  • 4ff1e96 fix(types): add missing tsdoc configs; closes #1739
  • 7d5df2e chore: update devDeps.
  • 36f8e9e fix(require-example): support fixer with 1-line JSDoc blocks; fixes #1736
  • 1dbf404 chore: update jsdoccomment and devDeps.
  • ae27cd2 fix(normalize-see-links): minimally escape link targets instead of encodeURI ...
  • cfe9cdb feat(normalize-see-links): autofix delimiter-colliding labels via escape roun...
  • e62e746 docs: explain usage with defineConfig(); fixes #1729 (#1731)
  • 3663803 fix: update jsdoccomment and devDeps. (#1730)
  • Additional commits viewable in compare view

Updates eslint-plugin-n from 18.2.1 to 18.2.2

Release notes

Sourced from eslint-plugin-n's releases.

v18.2.2

18.2.2 (2026-07-11)

🩹 Fixes

  • Ignore HTTP imports in no-missing-import (#547) (3ff929d)
  • no-callback-literal: report object, array, and template literals (#552) (dca2330)
Changelog

Sourced from eslint-plugin-n's changelog.

18.2.2 (2026-07-11)

🩹 Fixes

  • Ignore HTTP imports in no-missing-import (#547) (3ff929d)
  • no-callback-literal: report object, array, and template literals (#552) (dca2330)
Commits

Updates globals from 17.7.0 to 17.9.0

Release notes

Sourced from globals's releases.

v17.9.0

  • Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

  • Update globals (2026-07-01) (#347) 7394811

sindresorhus/globals@v17.7.0...v17.8.0

Commits

Updates minimatch from 10.2.5 to 10.2.6

Commits

Updates mocha from 11.7.6 to 11.8.0

Release notes

Sourced from mocha's releases.

v11.8.0

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

v11.7.7

11.7.7 (2026-06-13)

🩹 Fixes

Changelog

Sourced from mocha's changelog.

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

11.7.7 (2026-06-13)

🩹 Fixes

Commits
  • 90c1bb3 chore(v11.x): release 11.8.0 (#6076)
  • 05aec43 chore(CI): bump Node from 22 to 24 in publish action (#6206)
  • 1f44d5f chore: change site title to Mocha 11, update index note (#6086)
  • 26deb23 chore: add modern Netlify to v11.x branch (#6082)
  • 7830309 feat: add --fail-hook-affected-tests option to report skipped tests as failed...
  • 41f2b95 chore(v11.x): release 11.7.7 (#6068)
  • 3477563 fix: surface ts-node compile errors (#6045)
  • See full diff in compare view

Updates nock from 14.0.16 to 14.0.17

Release notes

Sourced from...

Description has been truncated

…ss 1 directory with 14 updates

Bumps the dev-minor-and-patch-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.5` | `3.3.6` |
| [@openfeature/core](https://github.com/open-feature/js-sdk) | `1.11.0` | `1.12.0` |
| [@openfeature/server-sdk](https://github.com/open-feature/js-sdk) | `1.22.0` | `1.23.0` |
| [axios](https://github.com/axios/axios) | `1.18.1` | `1.19.0` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` |
| [eslint-plugin-cypress](https://github.com/cypress-io/eslint-plugin-cypress) | `6.4.2` | `6.4.4` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `63.0.12` | `63.3.3` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `18.2.1` | `18.2.2` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.5` | `10.2.6` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.6` | `11.8.0` |
| [nock](https://github.com/nock/nock) | `14.0.16` | `14.0.17` |
| [p-limit](https://github.com/sindresorhus/p-limit) | `7.3.0` | `7.3.1` |
| [sinon](https://github.com/sinonjs/sinon) | `22.0.0` | `22.1.0` |



Updates `@eslint/eslintrc` from 3.3.5 to 3.3.6
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](eslint/eslintrc@eslintrc-v3.3.5...eslintrc-v3.3.6)

Updates `@openfeature/core` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/open-feature/js-sdk/releases)
- [Commits](open-feature/js-sdk@core-v1.11.0...core-v1.12.0)

Updates `@openfeature/server-sdk` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/open-feature/js-sdk/releases)
- [Commits](open-feature/js-sdk@server-sdk-v1.22.0...server-sdk-v1.23.0)

Updates `axios` from 1.18.1 to 1.19.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.18.1...v1.19.0)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `eslint-plugin-cypress` from 6.4.2 to 6.4.4
- [Release notes](https://github.com/cypress-io/eslint-plugin-cypress/releases)
- [Commits](cypress-io/eslint-plugin-cypress@v6.4.2...v6.4.4)

Updates `eslint-plugin-jsdoc` from 63.0.12 to 63.3.3
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v63.0.12...v63.3.3)

Updates `eslint-plugin-n` from 18.2.1 to 18.2.2
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v18.2.1...v18.2.2)

Updates `globals` from 17.7.0 to 17.9.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.9.0)

Updates `minimatch` from 10.2.5 to 10.2.6
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.5...v10.2.6)

Updates `mocha` from 11.7.6 to 11.8.0
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.8.0/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.6...v11.8.0)

Updates `nock` from 14.0.16 to 14.0.17
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.16...v14.0.17)

Updates `p-limit` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/sindresorhus/p-limit/releases)
- [Commits](sindresorhus/p-limit@v7.3.0...v7.3.1)

Updates `sinon` from 22.0.0 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v22.0.0...v22.1.0)

---
updated-dependencies:
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: "@openfeature/core"
  dependency-version: 1.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: "@openfeature/server-sdk"
  dependency-version: 1.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: axios
  dependency-version: 1.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: eslint-plugin-cypress
  dependency-version: 6.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 63.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: eslint-plugin-n
  dependency-version: 18.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: globals
  dependency-version: 17.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: minimatch
  dependency-version: 10.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: mocha
  dependency-version: 11.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: nock
  dependency-version: 14.0.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: p-limit
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependabot dependencies javascript Pull requests that update javascript code semver-patch labels Aug 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 10, 2026 20:54
@dependabot dependabot Bot added semver-patch dependencies javascript Pull requests that update javascript code dependabot labels Aug 10, 2026
dd-octo-sts[bot]
dd-octo-sts Bot previously approved these changes Aug 10, 2026
@dd-octo-sts
dd-octo-sts Bot enabled auto-merge (squash) August 10, 2026 20:54
@dd-octo-sts

dd-octo-sts Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Overall package size

Self size: 7.98 MB
Deduped: 8.65 MB
No deduping: 8.65 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.3.3 | 125.43 kB | 441.68 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@datadog-datadog-prod-us1-2

datadog-datadog-prod-us1-2 Bot commented Aug 10, 2026

Copy link
Copy Markdown

Pipelines  Tests

⚠️ Warnings

🚦 2 Pipeline jobs failed

All Green | all-green   View in Datadog   GitHub Actions

See error API rate limit exceeded for installation. Request ID: 25C7:205E21:362FA93:B56D970:6A7A3FFD.

System Tests | main / End-to-end #13 / nextjs 13   View in Datadog   GitHub Actions

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

🎯 Code Coverage (details)
Patch Coverage: 100.00%
Overall Coverage: 98.55% (+0.00%)

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 0e1dfb3 | Docs | Datadog PR Page | Give us feedback!

@pr-commenter

pr-commenter Bot commented Aug 10, 2026

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2026-08-10 21:08:22

Comparing candidate commit 0e1dfb3 in PR branch dependabot/npm_and_yarn/dev-minor-and-patch-dependencies-2aa0d71f39 with baseline commit bde44cb in branch master.

📊 Benchmarking dashboard

Found 0 performance improvements and 0 performance regressions! Performance is the same for 2320 metrics, 38 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

  • 🟩 = significantly better candidate vs. baseline
  • 🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

Unstable benchmarks

These benchmarks have a confidence interval too wide to call a change; treat them as noise rather than signal.

scenario:appsec-appsec-enabled-24

  • unstable execution_time [-199.302ms; +206.328ms] or [-7.363%; +7.622%]

scenario:appsec-appsec-enabled-26

  • unstable execution_time [-241.250ms; +239.215ms] or [-9.330%; +9.251%]

scenario:appsec-appsec-enabled-with-attacks-24

  • unstable execution_time [-160.987ms; +163.453ms] or [-5.149%; +5.228%]

scenario:appsec-appsec-enabled-with-attacks-26

  • unstable execution_time [-184816.848µs; +186333.781µs] or [-6.289%; +6.341%]

scenario:appsec-control-20

  • unstable execution_time [-121.610ms; +131.027ms] or [-7.394%; +7.967%]

scenario:appsec-control-24

  • unstable execution_time [-117.808ms; +120.371ms] or [-9.378%; +9.582%]

scenario:appsec-control-26

  • unstable execution_time [-128923.470µs; +127428.937µs] or [-10.258%; +10.139%]

scenario:appsec-iast-no-vulnerability-control-20

  • unstable execution_time [-10.772ms; +15.958ms] or [-4.219%; +6.250%]

scenario:appsec-iast-no-vulnerability-iast-enabled-default-config-20

  • unstable execution_time [-13.228ms; +20.295ms] or [-5.149%; +7.900%]

scenario:appsec-iast-with-vulnerability-control-20

  • unstable execution_time [-31370.170µs; +32390.637µs] or [-5.686%; +5.871%]

scenario:appsec-iast-with-vulnerability-iast-enabled-always-active-20

  • unstable execution_time [-30.337ms; +32.891ms] or [-5.518%; +5.983%]

scenario:debugger-line-probe-with-snapshot-default-24

  • unstable cpu_user_time [-1778.088ms; +691.461ms] or [-21.638%; +8.415%]
  • unstable execution_time [-1795.680ms; +702.109ms] or [-20.114%; +7.864%]
  • unstable instructions [-15.4G instructions; +5.9G instructions] or [-22.943%; +8.823%]
  • unstable throughput [-218.494op/s; +478.743op/s] or [-5.893%; +12.912%]

scenario:debugger-line-probe-with-snapshot-default-26

  • unstable cpu_user_time [-3.587s; +0.475s] or [-34.665%; +4.591%]
  • unstable execution_time [-3.629s; +0.443s] or [-32.739%; +3.996%]
  • unstable instructions [-32.0G instructions; +4.3G instructions] or [-36.955%; +4.967%]
  • unstable throughput [-82.658op/s; +712.975op/s] or [-2.697%; +23.267%]

scenario:debugger-line-probe-with-snapshot-minimal-24

  • unstable cpu_user_time [-2189.713ms; +529.698ms] or [-25.426%; +6.151%]
  • unstable execution_time [-2191.155ms; +519.546ms] or [-23.515%; +5.576%]
  • unstable instructions [-18.8G instructions; +4.5G instructions] or [-26.638%; +6.379%]
  • unstable throughput [-171.212op/s; +626.413op/s] or [-4.799%; +17.556%]

scenario:debugger-line-probe-without-snapshot-24

  • unstable cpu_user_time [-994.175ms; +1600.394ms] or [-12.476%; +20.084%]
  • unstable execution_time [-958.394ms; +1586.334ms] or [-11.051%; +18.292%]
  • unstable instructions [-8.8G instructions; +13.5G instructions] or [-13.566%; +20.849%]
  • unstable throughput [-539.915op/s; +326.635op/s] or [-14.465%; +8.751%]

scenario:dogstatsd-with-tags-20

  • unstable cpu_user_time [-379.433ms; +285.088ms] or [-7.853%; +5.901%]
  • unstable execution_time [-379.081ms; +281.443ms] or [-7.724%; +5.735%]
  • unstable throughput [-100397.829op/s; +134674.585op/s] or [-5.872%; +7.877%]

scenario:plugin-claude-agent-sdk-compact-stream-scan-24

  • unstable cpu_usage_percentage [-5.419%; +5.886%]

scenario:plugin-graphql-long-with-depth-and-collapse-off-20

  • unstable max_rss_usage [-15.153MB; +25.330MB] or [-3.881%; +6.488%]

scenario:plugin-graphql-long-with-depth-off-20

  • unstable max_rss_usage [-10.328MB; +3.517MB] or [-7.912%; +2.695%]

scenario:plugin-graphql-long-with-depth-off-26

  • unstable max_rss_usage [-43.923MB; +23.819MB] or [-22.041%; +11.952%]

scenario:plugin-graphql-long-with-depth-on-max-20

  • unstable cpu_user_time [-591.620ms; +599.753ms] or [-5.125%; +5.196%]
  • unstable execution_time [-608825.631µs; +607022.431µs] or [-5.170%; +5.154%]
  • unstable throughput [-3.557op/s; +3.559op/s] or [-5.206%; +5.209%]

scenario:test-optimization-large-suite-20

  • unstable max_rss_usage [-4096.688KB; +4170.354KB] or [-5.136%; +5.229%]

@codecov

codecov Bot commented Aug 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.55%. Comparing base (bde44cb) to head (0e1dfb3).

Additional details and impacted files
@@           Coverage Diff            @@
##           master    #9754    +/-   ##
========================================
  Coverage   98.55%   98.55%            
========================================
  Files         966      966            
  Lines      139409   139409            
  Branches    12389    12162   -227     
========================================
  Hits       137396   137396            
  Misses       2013     2013            
Flag Coverage Δ
aiguard 56.98% <ø> (-0.03%) ⬇️
aiguard-integration 55.88% <ø> (ø)
apm-bucket-0 57.23% <ø> (-0.03%) ⬇️
apm-bucket-1 63.36% <ø> (-0.02%) ⬇️
apm-bucket-2 62.20% <ø> (-0.03%) ⬇️
apm-bucket-3 59.79% <ø> (-0.03%) ⬇️
apm-capabilities-tracing 62.32% <ø> (ø)
apm-integrations-aerospike 56.27% <ø> (-0.03%) ⬇️
apm-integrations-confluentinc-kafka-javascript 61.16% <ø> (-0.03%) ⬇️
apm-integrations-couchbase 56.71% <ø> (-0.03%) ⬇️
apm-integrations-http 61.90% <ø> (-0.02%) ⬇️
apm-integrations-kafkajs 61.71% <ø> (-0.03%) ⬇️
apm-integrations-next 59.40% <ø> (-0.03%) ⬇️
apm-integrations-prisma 58.51% <ø> (-0.02%) ⬇️
appsec 72.09% <ø> (-0.05%) ⬇️
appsec-express_fastify_graphql 69.42% <ø> (-0.02%) ⬇️
appsec-integration 50.17% <ø> (-0.01%) ⬇️
appsec-kafka_ldapjs_lodash 63.40% <ø> (-0.02%) ⬇️
appsec-mongodb-core_mongoose_mysql 66.86% <ø> (-0.02%) ⬇️
appsec-next 56.66% <ø> (-0.02%) ⬇️
appsec-node-serialize_passport_postgres 66.28% <ø> (-0.02%) ⬇️
appsec-sourcing_stripe_template 64.71% <ø> (-0.02%) ⬇️
debugger 64.23% <ø> (-0.05%) ⬇️
instrumentations-bucket-0 51.70% <ø> (-0.03%) ⬇️
instrumentations-bucket-1 59.39% <ø> (-0.03%) ⬇️
instrumentations-bucket-10 60.87% <ø> (-0.02%) ⬇️
instrumentations-bucket-11 61.60% <ø> (-0.02%) ⬇️
instrumentations-bucket-12 51.72% <ø> (-0.03%) ⬇️
instrumentations-bucket-13 52.45% <ø> (-0.03%) ⬇️
instrumentations-bucket-14 51.67% <ø> (-0.03%) ⬇️
instrumentations-bucket-2 53.15% <ø> (-0.03%) ⬇️
instrumentations-bucket-3 53.50% <ø> (-0.03%) ⬇️
instrumentations-bucket-4 58.76% <ø> (-0.03%) ⬇️
instrumentations-bucket-5 50.32% <ø> (-0.02%) ⬇️
instrumentations-bucket-6 60.50% <ø> (-0.03%) ⬇️
instrumentations-bucket-7 58.10% <ø> (-0.03%) ⬇️
instrumentations-bucket-8 59.07% <ø> (-0.02%) ⬇️
instrumentations-bucket-9 57.44% <ø> (-0.03%) ⬇️
instrumentations-instrumentation-couchbase 50.97% <ø> (-0.03%) ⬇️
instrumentations-integration-esbuild 34.24% <ø> (ø)
llmobs-ai_anthropic_bedrock 62.84% <ø> (-0.02%) ⬇️
llmobs-bucket-1 61.34% <ø> (-0.02%) ⬇️
llmobs-openai 61.74% <ø> (-0.02%) ⬇️
llmobs-openai-agents_vertex-ai 60.03% <ø> (-0.02%) ⬇️
llmobs-sdk 66.78% <ø> (-0.03%) ⬇️
master-coverage 98.55% <ø> (?)
openfeature 55.68% <ø> (ø)
openfeature-unit 53.23% <ø> (-0.03%) ⬇️
platform-core_esbuild_instrumentations-misc 41.26% <ø> (-0.02%) ⬇️
platform-integration 60.42% <ø> (ø)
platform-shimmer_unit-guardrails_webpack 38.92% <ø> (-0.02%) ⬇️
plugins-bucket-0 56.92% <ø> (-0.02%) ⬇️
plugins-bucket-1 54.03% <ø> (ø)
plugins-bucket-11 61.47% <ø> (-0.03%) ⬇️
plugins-bucket-17 61.29% <ø> (-0.03%) ⬇️
plugins-bucket-18 61.92% <ø> (-0.02%) ⬇️
plugins-bucket-19 61.31% <ø> (-0.03%) ⬇️
plugins-bucket-20 63.72% <ø> (-0.03%) ⬇️
plugins-bucket-4 58.31% <ø> (-0.03%) ⬇️
plugins-bullmq_cassandra_cookie 61.37% <ø> (-0.03%) ⬇️
plugins-cookie-parser_crypto_dd-trace-api 56.35% <ø> (-0.03%) ⬇️
plugins-fetch_fs_generic-pool 58.22% <ø> (-0.03%) ⬇️
plugins-google-cloud-pubsub_grpc_handlebars 64.14% <ø> (-0.03%) ⬇️
plugins-hapi_hono_ioredis 59.90% <ø> (-0.03%) ⬇️
plugins-knex_langgraph_ldapjs 55.07% <ø> (-0.03%) ⬇️
plugins-light-my-request_limitd-client_lodash 58.38% <ø> (-0.02%) ⬇️
plugins-mariadb_memcached_mercurius 61.29% <ø> (-0.02%) ⬇️
plugins-mongodb_mongodb-core_mongoose 59.26% <ø> (-0.03%) ⬇️
plugins-multer_mysql_mysql2 58.85% <ø> (-0.03%) ⬇️
plugins-nats_node-serialize_opensearch 60.39% <ø> (-0.03%) ⬇️
plugins-passport-http_pino_postgres 58.59% <ø> (-0.03%) ⬇️
plugins-process_pug_redis 57.39% <ø> (-0.03%) ⬇️
plugins-undici_url_valkey 58.02% <ø> (-0.03%) ⬇️
plugins-vm_winston_ws 59.59% <ø> (-0.03%) ⬇️
profiling 61.51% <ø> (-0.03%) ⬇️
serverless-aws-sdk-aws-sdk 55.13% <ø> (-0.02%) ⬇️
serverless-aws-sdk-base-inject-field 50.94% <ø> (-0.03%) ⬇️
serverless-aws-sdk-bedrockruntime 54.66% <ø> (-0.02%) ⬇️
serverless-aws-sdk-client 56.22% <ø> (-0.03%) ⬇️
serverless-aws-sdk-dynamodb 55.49% <ø> (-0.02%) ⬇️
serverless-aws-sdk-eventbridge 49.74% <ø> (-0.02%) ⬇️
serverless-aws-sdk-kinesis 59.08% <ø> (-0.02%) ⬇️
serverless-aws-sdk-lambda 57.23% <ø> (-0.02%) ⬇️
serverless-aws-sdk-s3 55.59% <ø> (-0.02%) ⬇️
serverless-aws-sdk-serverless-peer-service 59.34% <ø> (-0.02%) ⬇️
serverless-aws-sdk-sns 59.88% <ø> (-0.02%) ⬇️
serverless-aws-sdk-sqs 60.30% <ø> (-0.02%) ⬇️
serverless-aws-sdk-stepfunctions 55.42% <ø> (-0.02%) ⬇️
serverless-aws-sdk-util 51.47% <ø> (-0.03%) ⬇️
serverless-bucket-0 54.07% <ø> (ø)
serverless-bucket-1 58.85% <ø> (-0.03%) ⬇️
test-optimization-cucumber 71.04% <ø> (-0.03%) ⬇️
test-optimization-cypress 64.85% <ø> (+0.07%) ⬆️
test-optimization-jest 72.44% <ø> (-0.01%) ⬇️
test-optimization-mocha 72.11% <ø> (+0.03%) ⬆️
test-optimization-playwright-playwright-atr 59.88% <ø> (-0.03%) ⬇️
test-optimization-playwright-playwright-efd 60.02% <ø> (+0.05%) ⬆️
test-optimization-playwright-playwright-final-status 60.24% <ø> (+0.04%) ⬆️
test-optimization-playwright-playwright-impacted-tests 59.72% <ø> (+0.13%) ⬆️
test-optimization-playwright-playwright-reporting 60.95% <ø> (-0.05%) ⬇️
test-optimization-playwright-playwright-test-management 60.70% <ø> (-0.11%) ⬇️
test-optimization-playwright-playwright-test-span 59.93% <ø> (-0.08%) ⬇️
test-optimization-selenium 59.08% <ø> (-0.16%) ⬇️
test-optimization-testopt 57.62% <ø> (+0.07%) ⬆️
test-optimization-vitest 73.32% <ø> (+0.02%) ⬆️
test-optimization-vitest-browser 58.96% <ø> (-0.02%) ⬇️
test-optimization-webdriverio 65.46% <ø> (+0.05%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 12, 2026
auto-merge was automatically disabled August 12, 2026 00:56

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-minor-and-patch-dependencies-2aa0d71f39 branch August 12, 2026 00:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies javascript Pull requests that update javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants