chore(deps): update devdependencies (non-major) (master) (patch) #1453

mend-for-github-com · 2025-08-04T02:57:31Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@open-wc/semantic-dom-diff (source)	`0.19.4` -> `0.19.9`
@storybook/addon-a11y (source)	`6.3.10` -> `6.3.13`
@storybook/addon-actions (source)	`6.3.10` -> `6.3.13`
@storybook/addon-controls (source)	`6.3.10` -> `6.3.13`
@storybook/addon-docs (source)	`6.3.10` -> `6.3.13`
@storybook/addon-viewport (source)	`6.3.10` -> `6.3.13`
@storybook/addons (source)	`6.3.10` -> `6.3.13`
@storybook/theming (source)	`6.3.10` -> `6.3.13`
@storybook/web-components (source)	`6.3.10` -> `6.3.13`
@types/ramda (source)	`0.27.44` -> `0.27.66`
@types/serve-handler (source)	`6.1.1` -> `6.1.4`
@whitespace/storybook-addon-html	`5.0.0` -> `5.0.3`
chai (source)	`4.3.4` -> `4.3.10`
chai-a11y-axe (source)	`1.3.1` -> `1.3.2`
chokidar	`3.5.2` -> `3.5.3`
command-line-args	`5.2.0` -> `5.2.1`
command-line-usage	`6.1.1` -> `6.1.3`
depcheck	`1.4.2` -> `1.4.7`
eslint-plugin-import	`2.25.2` -> `2.25.4`
fibers	`5.0.0` -> `5.0.3`
glob	`7.2.0` -> `7.2.3`
got	`11.8.2` -> `11.8.6`
husky	`7.0.2` -> `7.0.4`
immer	`9.0.6` -> `9.0.21`
jimp	`0.16.1` -> `0.16.13`
karma-chrome-launcher	`3.1.0` -> `3.1.1`
karma-file-fixtures-preprocessor	`3.0.1` -> `3.0.2`
karma-firefox-launcher	`2.1.1` -> `2.1.3`
lint-staged	`11.2.0` -> `11.2.6`
minimist	`1.2.6` -> `1.2.8`
standard-version	`9.3.1` -> `9.3.2`
style-dictionary	`3.0.1` -> `3.0.3`
stylelint-no-unsupported-browser-features	`5.0.2` -> `5.0.4`
ts-loader	`9.2.5` -> `9.2.9`
tslib (source)	`2.3.0` -> `2.3.1`
web-component-analyzer	`1.1.6` -> `1.1.7`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

open-wc/open-wc (@open-wc/semantic-dom-diff)

`v0.19.9`

Compare Source

Patch Changes

9e49e7a: fix(deps): update @web/* dependencies

`v0.19.8`

Compare Source

Patch Changes

2629244: Change return type from Assertion to Promise

`v0.19.7`

Compare Source

Patch Changes

735b009: Avoid saving unchanged snapshots

`v0.19.6`

Patch Changes

a7e9c20: chore(semantic-dom-diff): updates dependencies

`v0.19.5`

Patch Changes

b9b11ad: support snapshot testing with Web Test Runner
b6e868d: Use latest dependencies
40837d1: - use latest axe-core
- allow not required attributes in role testing
580ce0e: Snapshot testing with WTR updated to not modify the snapshot files running the test

storybookjs/storybook (@storybook/addon-a11y)

`v6.3.13`

Compare Source

Dependency Upgrades

Bump cli-table3 to fix colors bug (#17180)

`v6.3.12`

Compare Source

Bug Fixes

CLI: Force sb upgrade to use latest version of npm-check-updates (#16336)

`v6.3.11`

Compare Source

Bug Fixes

CLI: Fix CRA version detection crash (#16308)

whitespace-se/storybook-addon-html (@whitespace/storybook-addon-html)

chaijs/chai (chai)

`v4.3.10`

Compare Source

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

upgrade all dependencies by @keithamus in #1540

Full Changelog: chaijs/chai@v4.3.9...v4.3.10

`v4.3.9`

Compare Source

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: chaijs/chai@v4.3.8...v4.3.9

`v4.3.8`

Compare Source

What's Changed

4.x.x: Fix link to commit logs on GitHub by @bugwelle in #1487
build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @dependabot in #1488
Small typo in test.js by @mavaddat in #1459
docs: specify return type of objDisplay by @scarf005 in #1490
Update CONTRIBUTING.md by @matheus-rodrigues00 in #1521
Fix: update exports.version to current version by @peanutenthusiast in #1534

New Contributors

@bugwelle made their first contribution in #1487
@mavaddat made their first contribution in #1459
@scarf005 made their first contribution in #1490
@matheus-rodrigues00 made their first contribution in #1521
@peanutenthusiast made their first contribution in #1534

Full Changelog: chaijs/chai@v4.3.7...v4.3.8

`v4.3.7`

Compare Source

What's Changed

fix: deep-eql bump package to support symbols comparison by @snewcomer in #1483

Full Changelog: chaijs/chai@v4.3.6...v4.3.7

`v4.3.6`

Compare Source

Update loupe to 2.3.1

`v4.3.5`

Compare Source

build chaijs fca5bb1
build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446) 747eb4e
fix package.json exports 022c2fa
fix: package.json - deprecation warning on exports field (#1400) 5276af6
feat: use chaijs/loupe for inspection (#1401) (#1407) c8a4e00

open-wc/open-wc (chai-a11y-axe)

`v1.3.2`

Patch Changes

40837d1: - use latest axe-core
- allow not required attributes in role testing
6940a3c: fix: override bad publication

paulmillr/chokidar (chokidar)

`v3.5.3`

Compare Source

What's Changed

types: use correct type def for ignored option by @iheyunfei in #1140
Update chokidar-cli link in README.md by @mcecode in #1142
handle promise rejection when a symlink's target does not exist. Fixe… by @nicks in #1010
fix: improve add and unwatch TypeScript definitions by @alan-agius4 in #1157
Enable dtslinting by @alan-agius4 in #1158
style: delete yarn.lock by @alan-agius4 in #1159

New Contributors

@iheyunfei made their first contribution in #1140
@mcecode made their first contribution in #1142
@nicks made their first contribution in #1010
@alan-agius4 made their first contribution in #1157

Full Changelog: paulmillr/chokidar@3.5.2...3.5.3

75lb/command-line-args (command-line-args)

`v5.2.1`

Compare Source

75lb/command-line-usage (command-line-usage)

`v6.1.3`

Compare Source

`v6.1.2`

Compare Source

depcheck/depcheck (depcheck)

`v1.4.7`

Compare Source

Full Changelog

Fixed bugs:

False positive missing dependency with SCSS files on Windows #838
A dynamic import with template string literal is not found by depcheck #779

Merged pull requests:

Update babel packages to latest #843 (legobeat)
Support package.json subpath imports #836 (dobesv)
--quiet: don't print an empty line if nothing to report #835 (seansfkelley)
chore: bump dependencies #801 (legobeat)

`v1.4.6`

Compare Source

Full Changelog

Fixed bugs:

False positive missing dependency with SCSS files on Windows #838
A dynamic import with template string literal is not found by depcheck #779

Merged pull requests:

Update babel packages to latest #843 (legobeat)
Support package.json subpath imports #836 (dobesv)
--quiet: don't print an empty line if nothing to report #835 (seansfkelley)
chore: bump dependencies #801 (legobeat)

`v1.4.5`

Compare Source

Full Changelog

Closed issues:

Add explicitResourceManagement to default TS babel config #833
Flag to make logs readable and less verbose #759

Merged pull requests:

Add explicitResourceManagement to TypeScript babel settings #834 (jtbandes)
Support projects field in jest configuration #831 (dobesv)
Handle scoped package bin with default name #830 (dobesv)
feat: add --quiet flag to suppress No depcheck issue messages #829 (openam)
fix(sass): don't detect transitive dependencies #827 (miluoshi)
feat(tsconfig): support tsconfig.json files with comments #826 (miluoshi)
fix(storybook): parse package names out of addons array #825 (miluoshi)

`v1.4.3`

Compare Source

Full Changelog

Fixed bugs:

Next.js webpack configuration detection failed #805
Missing = Using #794
Breaks when using satisfies operator in TypeScript #768
Unable to analyze next.config.js in a ESM package #762
Suddenly stopped working #750
mjs and cjs extensions not detected by default #733
Unexpected token '.' #715
Depcheck started returning incorrect unused dependencies without any changes #687
[false positives] SCSS variables are tracked as packages, while they are not #633

Closed issues:

Upcoming releases #799
Add an option to clear the cache #755
Support babel config that exports a function #723
Support graphql imports #722
Support typescript "extends" and "types" fields #720
Support babel preset scope shorthand #719
Allow marking a directory to pass the isModule check #711
Support React 17 #697

Merged pull requests:

fix: typescript parser add importAssertions #823 (simllll)
feat(jest): add support for jest.config.mjs and jest.config.ts #820 (miluoshi)
Fix badges #819 (dnicolson)
Add support for .cts, .mts file extensions #817 (derekcicerone)
Webpack special: add a fakePath as dir in fakeContext for next.js #816 (znarf)
Fix dynamic import with a template literal #779 #810 (ArtskydJ)
feat: Clear content at end. #809 (regseb)
Support Babel presets/plugins from scoped packages #808 (miluoshi)
add node 20 to test matrix #804 (a-rothwell)
Convert travis to github actions #803 (a-rothwell)
Upgrade Babel parser to support Typescript 5.0 #788 (Karfroth)
Load next config with import instead of require #786 (cprussin)
Fix parsing of scoped package names in jest dependencies #785 (jtbandes)
Fix parsing Vue 3 files with Composition API and TypeScript #778 (vlad-psh)
Add parsers for mjs and cjs extensions #773 (augustobmoura)
add esm support for bin packages #760 (dword-design)
feat: ignore url imports #756 (rexxars)
Adds Vue3 setup support #749 (devan1011)
convert object to array for babel support #745 (Robbilie)
Fix typos #741 (friederbluemle)
Parse storybook configuration for dependencies #727 (dobesv)
Add support for graphql imports #726 (dobesv)
Add support for some tsconfig.json fields #725 (dobesv)
If babel config is a function, call it to get config #724 (dobesv)
Tweak Parser typescript definition #718 (dobesv)
feat: use current sass package to parse scss files #710 (miluoshi)
feat(jest): add support for jest.config.cjs #682 (shian15810)

import-js/eslint-plugin-import (eslint-plugin-import)

`v2.25.4`

Compare Source

Fixed

importType: avoid crashing on a non-string' ([#2305], thanks [@ljharb])
[first]: prevent crash when parsing angular templates ([#2210], thanks [@ljharb])
importType: properly resolve @/*-aliased imports as internal ([#2334], thanks [@ombene])
[named]/ExportMap: handle named imports from CJS modules that use dynamic import ([#2341], thanks [@ludofischer])

Changed

[no-default-import]: report on the token "default" instead of the entire node ([#2299], thanks [@pmcelhaney])
[Docs] [order]: Remove duplicate mention of default ([#2280], thanks [@johnthagen])
[Deps] update eslint-module-utils

`v2.25.3`

Compare Source

Fixed

[extensions]: ignore unresolveable type-only imports ([#2270], [#2271], thanks [@jablko])
importType: fix isExternalModule calculation ([#2282], thanks [@mx-bernhard])
[no-import-module-exports]: avoid false positives with a shadowed module or exports ([#2297], thanks [@ljharb])

Changed

[Docs] [order]: add type to the default groups ([#2272], thanks [@charpeni])
[readme] Add note to TypeScript docs to install appropriate resolver ([#2279], thanks [@johnthagen])
[Refactor] importType: combine redundant isScoped and isScopedModule (thanks [@ljharb])
[Docs] HTTP => HTTPS ([#2287], thanks [@Schweinepriester])

laverdet/node-fibers (fibers)

`v5.0.2`

Compare Source

`v5.0.1`

Compare Source

isaacs/node-glob (glob)

`v7.2.3`

Compare Source

`v7.2.2`

Compare Source

sindresorhus/got (got)

`v11.8.6`

Compare Source

Destroy request object after successful response

`v11.8.5`

Compare Source

Backport security fix 861ccd9
- CVE-2022-33987

`v11.8.3`

Compare Source

Bump cacheable-request dependency (#1921) 9463bb6
Fix HTTPError missing .code property (#1739) 0e167b8

typicode/husky (husky)

`v7.0.4`

Compare Source

No changes. Husky v7.0.3 was reverted, this version is the same as v7.0.2.

`v7.0.3`

Compare Source

immerjs/immer (immer)

`v9.0.21`

Compare Source

Bug Fixes

ensure type exports is first in package.json export declaration (#1018) (b6ccd0f)

`v9.0.20`

Compare Source

Bug Fixes

patching maps failed when using number keys (#1025) (dd83e2e)

`v9.0.19`

Compare Source

Bug Fixes

don't freeze drafts returned from produce if they were passed in as draft (#917) (46867f8)
produce results should never be frozen when returned from nested produces, to prevent 'hiding' drafts. Fixes #935 (a810960)
release and publish from 'main' rather than 'master' branch (82acc40)
revert earlier fix (#990) for recursive types (#1014) (3eeb331)
Upgrade Github actions to Node 16 attempt 1 (9d4ea93)
Upgrade Github actions to Node 16 attempt 2 (082eecd)

`v9.0.18`

Compare Source

Bug Fixes

Preserve insertion order of Sets, fixes #819 (#976) (b3eeb69)
unnecessarily recursive Draft type (#990) (b9eae1d)

`v9.0.17`

Compare Source

Bug Fixes

special case NaN in setter (#912) (5721bb7)

`v9.0.16`

Compare Source

Bug Fixes

protect isDraftable against undefined constructor (#969) (ced4563)

`v9.0.15`

Compare Source

Bug Fixes

Add "types" to exports for TypeScript 4.7 (#946) (85ce6b7)

`v9.0.14`

Compare Source

Bug Fixes

Use .esm.js module for backwards compatibility with old build tools ([#939](https://redirect.g

Configuration

📅 Schedule: Branch creation - "before 5am every weekday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

sonarqubecloud · 2025-12-30T03:17:31Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

mend-for-github-com bot added the patch release label Aug 4, 2025

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 7 times, most recently from 2e49685 to e4546eb Compare August 12, 2025 02:58

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from 7451d9f to dc073b1 Compare August 19, 2025 03:32

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from f2627a7 to 87a3282 Compare August 26, 2025 02:43

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from bc47b29 to 16a46a4 Compare September 4, 2025 02:49

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 4 times, most recently from 5f38faf to 4612bba Compare September 9, 2025 03:10

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 5 times, most recently from 904f441 to 9a072ca Compare December 1, 2025 03:06

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 7 times, most recently from 5e3f36f to d9c53cc Compare December 8, 2025 16:37

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from e12e36f to 597ca95 Compare December 16, 2025 03:15

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from 01f5817 to 68eb6c5 Compare December 23, 2025 16:39

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 3 times, most recently from 61c6ccd to b3ac425 Compare December 29, 2025 03:03

chore(deps): update devdependencies (non-major)

54c898c

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch from b3ac425 to 54c898c Compare December 30, 2025 03:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update devdependencies (non-major) (master) (patch) #1453

chore(deps): update devdependencies (non-major) (master) (patch) #1453

Uh oh!

mend-for-github-com bot commented Aug 4, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Dec 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update devdependencies (non-major) (master) (patch) #1453

Are you sure you want to change the base?

chore(deps): update devdependencies (non-major) (master) (patch) #1453

Uh oh!

Conversation

mend-for-github-com bot commented Aug 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Dependency Upgrades

Bug Fixes

Bug Fixes

What's Changed

What's Changed

New Contributors

What's Changed

Patch Changes

What's Changed

New Contributors

Fixed

Changed

Fixed

Changed

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Configuration

Uh oh!

sonarqubecloud bot commented Dec 30, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

mend-for-github-com bot commented Aug 4, 2025 •

edited

Loading