Skip to content

build(deps): bump the dependencies group across 27 directories with 21 updates#845

Merged
Kikobeats merged 5 commits into
masterfrom
dependabot/npm_and_yarn/dependencies-184343a2d0
Jun 19, 2026
Merged

build(deps): bump the dependencies group across 27 directories with 21 updates#845
Kikobeats merged 5 commits into
masterfrom
dependabot/npm_and_yarn/dependencies-184343a2d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Contributor

Note

This Dependabot bump required manual follow-up fixes to keep the suite green. Summary below; the original Dependabot report follows.

Manual fixes on top of the bump

Several dependencies went from CJS to ESM-only or changed their return shapes across these major bumps, so the following changes were needed:

  • fix: handle esm interop for upgraded dependencies — adapt require() call sites for packages that are now ESM-only / changed their default export shape (e.g. normalize-url, mime, serialize-error, p-*, entities, etc.).
  • fix(helpers): reject javascript: urls in normalizeUrlnormalize-url v9 no longer strips dangerous schemes, so normalizeUrl now explicitly rejects javascript: URLs.
  • fix(manifest): pin data-uri-to-buffer to v5data-uri-to-buffer v8 is ESM-only and returns an ArrayBuffer instead of a Buffer; pinned to v5 (CJS, Buffer result) to preserve behavior.
  • test(metascraper): update entrepreneur snapshot — unrelated to the bump: entrepreneur's ent-apple-touch-icon.jpg now returns 404, so metascraper-logo-favicon correctly falls back to favicon.ico. Snapshot regenerated under TZ=UTC.

The remaining CI failures were flaky live-network integration tests (transistor.fm, 9gag.com) and an npm-registry install timeout — all unrelated to the code changes and resolved by re-running.


Bumps the dependencies group with 21 updates in the / directory:

Package From To
gulp 4.0.2 5.0.1
ava 5.3.1 8.0.1
p-reflect 2.1.0 3.1.0
defuddle 0.18.1 0.19.0
condense-whitespace 2.0.0 3.0.0
entities 7.0.1 8.0.0
is-relative-url 3.0.0 4.1.0
iso-639-3 2.2.0 3.0.1
mime 3.0.0 4.1.0
normalize-url 6.1.0 9.0.1
re2 1.24.1 1.25.0
video-extensions 1.2.0 2.0.0
got 11.8.6 15.0.5
cacheable-lookup 6.1.0 7.0.0
data-uri-to-buffer 5.0.1 8.0.0
p-retry 4.6.2 8.0.0
p-timeout 4.1.0 7.0.1
serialize-error 8.1.0 13.0.1
unique-random-array 2.0.0 4.0.0
get-video-id 3.7.0 4.2.0
p-locate 5.0.0 7.0.0

Bumps the dependencies group with 1 update in the /packages/metascraper directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-amazon directory: ava.
Bumps the dependencies group with 2 updates in the /packages/metascraper-audio directory: ava and p-reflect.
Bumps the dependencies group with 1 update in the /packages/metascraper-bluesky directory: ava.
Bumps the dependencies group with 2 updates in the /packages/metascraper-defuddle directory: ava and defuddle.
Bumps the dependencies group with 1 update in the /packages/metascraper-description directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-dribbble directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-feed directory: ava.
Bumps the dependencies group with 9 updates in the /packages/metascraper-helpers directory:

Package From To
ava 5.3.1 8.0.1
condense-whitespace 2.0.0 3.0.0
entities 7.0.1 8.0.0
is-relative-url 3.0.0 4.1.0
iso-639-3 2.2.0 3.0.1
mime 3.0.0 4.1.0
normalize-url 6.1.0 9.0.1
re2 1.24.1 1.25.0
video-extensions 1.2.0 2.0.0

Bumps the dependencies group with 4 updates in the /packages/metascraper-iframe directory: ava, p-reflect, got and cacheable-lookup.
Bumps the dependencies group with 1 update in the /packages/metascraper-instagram directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-lang directory: ava.
Bumps the dependencies group with 2 updates in the /packages/metascraper-logo-favicon directory: ava and got.
Bumps the dependencies group with 3 updates in the /packages/metascraper-manifest directory: ava, got and data-uri-to-buffer.
Bumps the dependencies group with 7 updates in the /packages/metascraper-media-provider directory:

Package From To
ava 5.3.1 8.0.1
p-reflect 2.1.0 3.1.0
got 11.8.6 15.0.5
p-retry 4.6.2 8.0.0
p-timeout 4.1.0 7.0.1
serialize-error 8.1.0 13.0.1
unique-random-array 2.0.0 4.0.0

Bumps the dependencies group with 1 update in the /packages/metascraper-publisher directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-readability directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-reddit directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-soundcloud directory: ava.
Bumps the dependencies group with 2 updates in the /packages/metascraper-spotify directory: ava and got.
Bumps the dependencies group with 3 updates in the /packages/metascraper-telegram directory: ava, p-reflect and got.
Bumps the dependencies group with 1 update in the /packages/metascraper-tiktok directory: ava.
Bumps the dependencies group with 1 update in the /packages/metascraper-uol directory: ava.
Bumps the dependencies group with 2 updates in the /packages/metascraper-video directory: ava and p-reflect.
Bumps the dependencies group with 1 update in the /packages/metascraper-x directory: ava.
Bumps the dependencies group with 3 updates in the /packages/metascraper-youtube directory: ava, get-video-id and p-locate.

Updates gulp from 4.0.2 to 5.0.1

Release notes

Sourced from gulp's releases.

gulp v5.0.1

Bug Fixes

  • Avoid globbing before read stream is opened (#2839) (19122f3)
  • Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)
  • Support top-level await on Node 22.12+ (#2836) (04b4a74)

gulp v5.0.0

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

  • Drop support for Node.js <10.13
  • Default stream encoding to UTF-8
  • Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!
  • Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream
  • All globs and paths are normalized to unix-like filepaths
  • Only allow JS variants for .gulp.* config files
  • Removed support for alpha releases of v4 from gulp-cli
  • Removed the --verify flag
  • Renamed the --require flag to --preload to avoid conflicting with Node.js flags
  • Removed many legacy and deprecated loaders
  • Upgrade to chokidar v3
  • Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data
  • Stop using process.umask() to make directories, instead falling back to Node's default mode
  • Throw on non-function, non-string option coercers
  • Drop support of Node.js snake_case flags
  • Use a Symbol for attaching the gulplog namespace to the store
  • Use a Symbol for attaching the gulplog store to the global
  • Use sha256 to hash the v8flags cache into a filename

Features

  • Streamlined the dependency tree
  • Switch all streams implementation to Streamx
  • Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation
  • Implement translation support for all CLI messages and all messages passing through gulplog
  • Allow users to customize or remove the timestamp from their logs
  • Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5
  • Added support for gulpile.cjs and gulpfile.mjs
  • Add support for swc, esbuild, sucrase, and mdx loaders
  • Provide an ESM export (#2760) (b00de68)
  • Support sourcemap handling on streaming Vinyl contents

... (truncated)

Changelog

Sourced from gulp's changelog.

5.0.1 (2025-06-01)

Bug Fixes

  • Avoid globbing before read stream is opened (#2839) (19122f3)
  • Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)
  • Support top-level await on Node 22.12+ (#2836) (04b4a74)

5.0.0 (2024-03-29)

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

  • Drop support for Node.js <10.13
  • Default stream encoding to UTF-8
  • Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!
  • Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream
  • All globs and paths are normalized to unix-like filepaths
  • Only allow JS variants for .gulp.* config files
  • Removed support for alpha releases of v4 from gulp-cli
  • Removed the --verify flag
  • Renamed the --require flag to --preload to avoid conflicting with Node.js flags
  • Removed many legacy and deprecated loaders
  • Upgrade to chokidar v3
  • Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data
  • Stop using process.umask() to make directories, instead falling back to Node's default mode
  • Throw on non-function, non-string option coercers
  • Drop support of Node.js snake_case flags
  • Use a Symbol for attaching the gulplog namespace to the store
  • Use a Symbol for attaching the gulplog store to the global
  • Use sha256 to hash the v8flags cache into a filename

Features

  • Streamlined the dependency tree
  • Switch all streams implementation to Streamx
  • Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation
  • Implement translation support for all CLI messages and all messages passing through gulplog
  • Allow users to customize or remove the timestamp from their logs
  • Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5
  • Added support for gulpile.cjs and gulpfile.mjs
  • Add support for swc, esbuild, sucrase, and mdx loaders
  • Provide an ESM export (#2760) (b00de68)
  • Support sourcemap handling on streaming Vinyl contents

... (truncated)

Commits

Updates ava from 5.3.1 to 8.0.1

Release notes

Sourced from ava's releases.

v8.0.1

What's Changed

This release officially adds Node.js 26 support, with thanks to @​novemberborn in avajs/ava#3450.

Per our policy, support for Node.js 25 has been removed.

Full Changelog: avajs/ava@v8.0.0...v8.0.1

v8.0.0

Breaking Changes

AVA now expects Node.js 22.20, 24.12 or newer.

Internally AVA is now fully ESM. This is possible now that Node.js supports loading ES modules using require() calls and simplifies AVA's types and internals.

If you use AVA from a CommonJS project you'll have to update your imports:

-const test = require('ava');
+const {default: test} = require('ava');

We expect an increasing number of projects to be ESM only. As per the above, CommonJS is still supported, but we don't expect cjs extensions to be used. The default file extensions are now js and mjs. Specify extensions: ['cjs', 'js', 'mjs'] for AVA to run test files with the cjs extension.

All test files (and those loaded through AVA's require config) are now loaded via import(). Use customization hooks for transpilation. The object form of the extensions configuration is no longer supported.

If you use AVA with @​ava/typescript you must upgrade that package to v7.

New Features

There's two new test modifiers courtesy of @​sindresorhus: test.skipIf() to skip a test based on a runtime condition. test.runIf() is the inverse: the test only runs when the condition is true.

test.skipIf(process.platform === 'win32')('not on Windows', t => {
	t.pass();
});
test.runIf(process.platform === 'linux')('Linux only', t => {
t.pass();
});

These work with other modifiers like .serial and .failing:

test.serial.skipIf(process.platform === 'win32')('serial, not on Windows', t => {
	t.pass();
});
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ava since your current version.


Updates p-reflect from 2.1.0 to 3.1.0

Release notes

Sourced from p-reflect's releases.

v3.1.0

  • Add status property to the result (#9) 7fa209f

sindresorhus/p-reflect@v3.0.0...v3.1.0

v3.0.0

Breaking

  • Require Node.js 12 a30a0be
  • This package is now pure ESM. Please read this.

sindresorhus/p-reflect@v2.1.0...v3.0.0

Commits

Updates defuddle from 0.18.1 to 0.19.0

Release notes

Sourced from defuddle's releases.

0.19.0

  • Bilibili: video subtitle/transcript extraction (#271)
  • ChatGPT: preserve citation footnotes (#311), fix content after Thought sections (#302)
  • CLI: --frontmatter flag for YAML metadata output (#313), --user-agent flag for fetched URLs, read HTML from stdin (#192)
  • Math: reconstruct MathML from MathJax CHTML render tree (#250), fix Markdown conversion for complex and aligned math (#301), flatten tagged single-equation tables so they render horizontally
  • Tables: preserve trailing columns in ragged tables (#299)
  • X/Twitter: prefer async extraction in Node for X articles (#318), fix non-English aria-label reply extraction (#290), fix FxTwitter facet indices for surrogate-pair emoji (#281)
  • YouTube: fetch videoData from a more reliable source (#211)
  • Fix: don't mutate the live document in parse()
  • Fix: don't strip sections with delimiter-less anchor ids (#303)
  • Fix: author/date byline heuristic no longer matches day-of-week as a date (#291)
  • Markdown: encapsulate links with spaces (#278)
  • Remove subhead (#316); remove <style> from SVGs for security
  • Add CI; dependency upgrades (esbuild, mathml-to-latex, temml)
Commits
  • 19520ad Bump version
  • c012fc7 Preserve ChatGPT citation footnotes (#311)
  • 853c240 Add Bilibili video subtitle/transcript extraction (#271)
  • aa349b6 ci: fix matrix — drop Node 18 (toolchain needs 20+) and jsdom (fixtures are l...
  • a1132f9 Add CI
  • 96532f5 CLI: add --frontmatter flag for YAML metadata output (#313)
  • a432eae fix: don't mutate the live document in parse()
  • ec06322 Remove subhead #316
  • ef4c85e fix: reconstruct MathML from MathJax CHTML render tree (#250)
  • 7c287cb Merge branch 'fix/303-pascalcase-anchor-ids'
  • Additional commits viewable in compare view

Updates condense-whitespace from 2.0.0 to 3.0.0

Release notes

Sourced from condense-whitespace's releases.

v3.0.0

Breaking

  • Require Node.js 12.20 5ec5837
  • This package is now pure ESM. Please read this.

sindresorhus/condense-whitespace@v2.0.0...v3.0.0

Commits

Updates entities from 7.0.1 to 8.0.0

Release notes

Sourced from entities's releases.

v8.0.0

What's Changed

  • BREAKING CHANGE: entities is now ESM-only fb55/entities#2183
    • BREAKING: Update engines to node >= 20.19.0
      • Update tsconfig: target es2022
    • BREAKING: Remove deprecated functions & polyfills
  • Use shared eslint config fb55/entities#2157

Full Changelog: fb55/entities@v7.0.1...v8.0.0

Commits
  • 2322ee7 8.0.0
  • 601b001 refactor!: ESM-only (#2183)
  • f888e4c chore(deps): Bump github/codeql-action from 4.32.6 to 4.33.0 (#2182)
  • 0c36a4d chore(deps-dev): Bump typescript-eslint from 8.57.0 to 8.57.1 (#2181)
  • 556e3f4 chore: Remove Tidelift funding information (#2180)
  • ea1b8f4 chore(deps-dev): Bump @​feedic/eslint-config from 0.2.3 to 0.3.1 (#2179)
  • 0d19be8 chore(deps-dev): Bump @​biomejs/biome from 2.4.6 to 2.4.7 (#2178)
  • 12cfc04 chore(deps-dev): Bump @​vitest/coverage-v8 from 4.0.18 to 4.1.0 (#2177)
  • 96f7cc7 chore(deps-dev): Bump @​types/node from 25.4.0 to 25.5.0 (#2175)
  • 6610169 chore(deps-dev): Bump typescript-eslint from 8.56.1 to 8.57.0 (#2174)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for entities since your current version.


Updates is-relative-url from 3.0.0 to 4.1.0

Release notes

Sourced from is-relative-url's releases.

v4.1.0


sindresorhus/is-relative-url@v4.0.0...v4.1.0

v4.0.0

Breaking

  • Require Node.js 14 648ecc1
  • This package is now pure ESM. Please read this.

sindresorhus/is-relative-url@v3.0.0...v4.0.0

Commits

Updates iso-639-3 from 2.2.0 to 3.0.1

Release notes

Sourced from iso-639-3's releases.

3.0.1

  • 8cfeaca Update docs
  • f0f8209 Use strict types

Full Changelog: wooorm/iso-639-3@3.0.0...3.0.1

3.0.0

  • 3333a96 Add JSDoc based types
  • 8a04321 Use ESM
Commits

Updates mime from 3.0.0 to 4.1.0

Release notes

Sourced from mime's releases.

v4.1.0

4.1.0 (2025-09-12)

Features

  • enable literal type access to MIME types in Typescript (#339) (7de528d)

Bug Fixes

v4.0.7

4.0.7 (2025-04-03)

Bug Fixes

v4.0.6

4.0.6 (2024-12-17)

Bug Fixes

v4.0.5

4.0.5 (2024-12-17)

Bug Fixes

Changelog

Sourced from mime's changelog.

4.1.0 (2025-09-12)

Features

  • enable literal type access to MIME types in Typescript (#339) (7de528d)

Bug Fixes

4.0.7 (2025-04-03)

Bug Fixes

4.0.6 (2024-12-17)

Bug Fixes

4.0.5 (2024-12-17)

Bug Fixes

4.0.4 (2024-07-06)

4.0.3 (2024-04-25)

Bug Fixes

  • add types dir to package.json#files, fixes #310 (a547ca7)

4.0.2 (2024-04-24)

Bug Fixes

... (truncated)

Commits
  • a3c97a3 chore(main): release 4.1.0 (#340)
  • 4d57045 chore: update CI matrix, update dependencies (#342)
  • 0862cbf fix: update types (#341)
  • 7de528d feat: enable literal type access to MIME types in Typescript (#339)
  • 295382f chore(main): release 4.0.7 (#333)
  • e84ee2e chore(deps-dev): bump jsonpath-plus from 10.2.0 to 10.3.0 (#331)
  • d7871f3 fix: use dotall modifier for getType() regexes (#334)
  • 953ae3e fix: update mime types (#332)
  • cafe1ea chore: update MDN types used in test
  • f5edc31 Revert "chore: update MDN types used in test"
  • Additional commits viewable in compare view

Updates normalize-url from 6.1.0 to 9.0.1

Release notes

Sourced from normalize-url's releases.

v9.0.1

  • Fix removeExplicitPort option not working for localhost ef8df19

sindresorhus/normalize-url@v9.0.0...v9.0.1

v9.0.0

Breaking

  • Require Node.js 20 c0477f6

Improvements


sindresorhus/normalize-url@v8.1.1...v9.0.0

v8.1.1

  • Fix removeDirectoryIndex option to handle trailing slashes consistently 320d9b3

sindresorhus/normalize-url@v8.1.0...v8.1.1

v8.1.0

  • Add removePath and transformPath option dfcfc06
  • Fix path-like query strings losing structure when sorting parameters 92eb703

sindresorhus/normalize-url@v8.0.2...v8.1.0

v8.0.2

  • Fix handling of encoded backslash (#192) 07c9a7b

sindresorhus/normalize-url@v8.0.1...v8.0.2

v8.0.1

  • Fix handling of protocol-less URLs with a port dec5dc6

sindresorhus/normalize-url@v8.0.0...v8.0.1

v8.0.0

... (truncated)

Commits

Updates re2 from 1.24.1 to 1.25.0

Commits

Updates video-extensions from 1.2.0 to 2.0.0

Release notes

Sourced from video-extensions's releases.

v2.0.0

Breaking

  • Require Node.js 18 031ac16
  • This package is now pure ESM. Please read this.

sindresorhus/video-extensions@v1.2.0...v2.0.0

Commits

Updates got from 11.8.6 to 15.0.5

Release notes

Sourced from got's releases.

v15.0.5

  • Fix: Handle abort signals added by handlers 74e3167

sindresorhus/got@v15.0.4...v15.0.5

v15.0.4

  • Fix aborting during download progress 11a2202

sindresorhus/got@v15.0.3...v15.0.4

v15.0.3

  • Fix false ReadError on responses without Content-Length 071ea07

sindresorhus/got@v15.0.2...v15.0.3

v15.0.2

  • Fix stream cookie jar completion race b170125

sindresorhus/got@v15.0.1...v15.0.2

v15.0.1

  • Fix init types 20633bc

sindresorhus/got@v15.0.0...v15.0.1

v15.0.0

Breaking changes

  • Require Node.js 22 b933476
  • Remove promise cancel API a06ac6c
  • Remove isStream option c241c6c
    • Use got.stream() directly.
  • Use native FormData global 670b228
  • responseType: 'buffer' returns Uint8Array instead of Buffer 309e36d
    • response.rawBody and promise.buffer() now return a Uint8Array. Buffer is a subclass of Uint8Array, so most code will continue to work, but strict type checks will need updating.
  • strictContentLength defaults to true 08e9dff
    • Got now throws a ContentLengthMismatchError by default if Content-Length doesn't match the actual body size. Set {strictContentLength: false} to restore the old behavior.
  • retry.enforceRetryRules defaults to true 9bc8dfb

... (truncated)

Commits

Updates cacheable-lookup from 6.1.0 to 7.0.0

Release notes

Sourced from cacheable-lookup's releases.

v7.0.0

Breaking

  • Require Node.js 14 (#69) 08a6478
  • This package is now pure ESM. Please read this.

Improvements

  • Add stats for query and cache requests (#65) ab8d286

szmarczak/cacheable-lookup@v6.1.0...v7.0.0

Commits
Maintainer changes

This version was pushed to npm by sindresorhus, a new releaser for cacheable-lookup since your current version.


Updates data-uri-to-buffer from 5.0.1 to 8.0.0

Release notes

Sourced from data-uri-to-buffer's releases.

data-uri-to-buffer@8.0.0

Major Changes

  • 7d12b51: Set minimum Node.js version to 20

data-uri-to-buffer@7.0.0

Major Changes

  • 9c92c09: Convert to ESM. All packages now use "type": "module" and compile to ESM output instead of CommonJS.

data-uri-to-buffer@6.0.2

Patch Changes

  • c881a18: Use native Buffer decoding in Node.js

data-uri-to-buffer@6.0.1

Patch Changes

  • 1d146e8: Ensure <reference types="node" /> is not present in generated types

data-uri-to-buffer@6.0.0

Major Changes

  • 52b458f: Refactor to return an ArrayBuffer instead of a Node.js Buffer.

    This change is being made to make the package platform-agnostic, and work in web browsers or other non-Node.js environments without polyfills.

    For Node.js users of this package, you can get a Node.js Buffer instance from an ArrayBuffer like so:

    const uri = 'data:,Hello%2C%20World!';
    const parsed = dataUriToBuffer(uri);
    const buffer = Buffer.from(parsed.buffer);
    // `buffer` is a Node.js Buffer
Changelog

Sourced from data-uri-to-buffer's changelog.

8.0.0

Major Changes

  • 7d12b51: Set minimum Node.js version to 20

7.0.0

Major Changes

  • 9c92c09: Convert to ESM. All packages now use "type": "module" and compile to ESM output instead of CommonJS.

6.0.2

Patch Changes

  • c881a18: Use native Buffer decoding in Node.js

6.0.1

Patch Changes

  • 1d146e8: Ensure <reference types="node" /> is not present in generated types

6.0.0

Major Changes

  • 52b458f: Refactor to return an ArrayBuffer instead of a Node.js Buffer.

    This change is being made to make the package platform-agnostic, and work in web browsers or other non-Node.js environments without polyfills.

    For Node.js users of this package, you can get a Node.js Buffer instance from an ArrayBuffer like so:

    const uri = 'data:,Hello%2C%20World!';
    const parsed = dataUriToBuffer(uri);
    const buffer = Buffer.from(parsed.buffer);
    // `buffer` is a Node.js Buffer
Commits

…1 updates

Bumps the dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gulp](https://github.com/gulpjs/gulp) | `4.0.2` | `5.0.1` |
| [ava](https://github.com/avajs/ava) | `5.3.1` | `8.0.1` |
| [p-reflect](https://github.com/sindresorhus/p-reflect) | `2.1.0` | `3.1.0` |
| [defuddle](https://github.com/kepano/defuddle) | `0.18.1` | `0.19.0` |
| [condense-whitespace](https://github.com/sindresorhus/condense-whitespace) | `2.0.0` | `3.0.0` |
| [entities](https://github.com/fb55/entities) | `7.0.1` | `8.0.0` |
| [is-relative-url](https://github.com/sindresorhus/is-relative-url) | `3.0.0` | `4.1.0` |
| [iso-639-3](https://github.com/wooorm/iso-639-3) | `2.2.0` | `3.0.1` |
| [mime](https://github.com/broofa/mime) | `3.0.0` | `4.1.0` |
| [normalize-url](https://github.com/sindresorhus/normalize-url) | `6.1.0` | `9.0.1` |
| [re2](https://github.com/uhop/node-re2) | `1.24.1` | `1.25.0` |
| [video-extensions](https://github.com/sindresorhus/video-extensions) | `1.2.0` | `2.0.0` |
| [got](https://github.com/sindresorhus/got) | `11.8.6` | `15.0.5` |
| [cacheable-lookup](https://github.com/szmarczak/cacheable-lookup) | `6.1.0` | `7.0.0` |
| [data-uri-to-buffer](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/data-uri-to-buffer) | `5.0.1` | `8.0.0` |
| [p-retry](https://github.com/sindresorhus/p-retry) | `4.6.2` | `8.0.0` |
| [p-timeout](https://github.com/sindresorhus/p-timeout) | `4.1.0` | `7.0.1` |
| [serialize-error](https://github.com/sindresorhus/serialize-error) | `8.1.0` | `13.0.1` |
| [unique-random-array](https://github.com/sindresorhus/unique-random-array) | `2.0.0` | `4.0.0` |
| [get-video-id](https://github.com/radiovisual/get-video-id) | `3.7.0` | `4.2.0` |
| [p-locate](https://github.com/sindresorhus/p-locate) | `5.0.0` | `7.0.0` |

Bumps the dependencies group with 1 update in the /packages/metascraper directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-amazon directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 2 updates in the /packages/metascraper-audio directory: [ava](https://github.com/avajs/ava) and [p-reflect](https://github.com/sindresorhus/p-reflect).
Bumps the dependencies group with 1 update in the /packages/metascraper-bluesky directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 2 updates in the /packages/metascraper-defuddle directory: [ava](https://github.com/avajs/ava) and [defuddle](https://github.com/kepano/defuddle).
Bumps the dependencies group with 1 update in the /packages/metascraper-description directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-dribbble directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-feed directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 9 updates in the /packages/metascraper-helpers directory:

| Package | From | To |
| --- | --- | --- |
| [ava](https://github.com/avajs/ava) | `5.3.1` | `8.0.1` |
| [condense-whitespace](https://github.com/sindresorhus/condense-whitespace) | `2.0.0` | `3.0.0` |
| [entities](https://github.com/fb55/entities) | `7.0.1` | `8.0.0` |
| [is-relative-url](https://github.com/sindresorhus/is-relative-url) | `3.0.0` | `4.1.0` |
| [iso-639-3](https://github.com/wooorm/iso-639-3) | `2.2.0` | `3.0.1` |
| [mime](https://github.com/broofa/mime) | `3.0.0` | `4.1.0` |
| [normalize-url](https://github.com/sindresorhus/normalize-url) | `6.1.0` | `9.0.1` |
| [re2](https://github.com/uhop/node-re2) | `1.24.1` | `1.25.0` |
| [video-extensions](https://github.com/sindresorhus/video-extensions) | `1.2.0` | `2.0.0` |

Bumps the dependencies group with 4 updates in the /packages/metascraper-iframe directory: [ava](https://github.com/avajs/ava), [p-reflect](https://github.com/sindresorhus/p-reflect), [got](https://github.com/sindresorhus/got) and [cacheable-lookup](https://github.com/szmarczak/cacheable-lookup).
Bumps the dependencies group with 1 update in the /packages/metascraper-instagram directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-lang directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 2 updates in the /packages/metascraper-logo-favicon directory: [ava](https://github.com/avajs/ava) and [got](https://github.com/sindresorhus/got).
Bumps the dependencies group with 3 updates in the /packages/metascraper-manifest directory: [ava](https://github.com/avajs/ava), [got](https://github.com/sindresorhus/got) and [data-uri-to-buffer](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/data-uri-to-buffer).
Bumps the dependencies group with 7 updates in the /packages/metascraper-media-provider directory:

| Package | From | To |
| --- | --- | --- |
| [ava](https://github.com/avajs/ava) | `5.3.1` | `8.0.1` |
| [p-reflect](https://github.com/sindresorhus/p-reflect) | `2.1.0` | `3.1.0` |
| [got](https://github.com/sindresorhus/got) | `11.8.6` | `15.0.5` |
| [p-retry](https://github.com/sindresorhus/p-retry) | `4.6.2` | `8.0.0` |
| [p-timeout](https://github.com/sindresorhus/p-timeout) | `4.1.0` | `7.0.1` |
| [serialize-error](https://github.com/sindresorhus/serialize-error) | `8.1.0` | `13.0.1` |
| [unique-random-array](https://github.com/sindresorhus/unique-random-array) | `2.0.0` | `4.0.0` |

Bumps the dependencies group with 1 update in the /packages/metascraper-publisher directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-readability directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-reddit directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-soundcloud directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 2 updates in the /packages/metascraper-spotify directory: [ava](https://github.com/avajs/ava) and [got](https://github.com/sindresorhus/got).
Bumps the dependencies group with 3 updates in the /packages/metascraper-telegram directory: [ava](https://github.com/avajs/ava), [p-reflect](https://github.com/sindresorhus/p-reflect) and [got](https://github.com/sindresorhus/got).
Bumps the dependencies group with 1 update in the /packages/metascraper-tiktok directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 1 update in the /packages/metascraper-uol directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 2 updates in the /packages/metascraper-video directory: [ava](https://github.com/avajs/ava) and [p-reflect](https://github.com/sindresorhus/p-reflect).
Bumps the dependencies group with 1 update in the /packages/metascraper-x directory: [ava](https://github.com/avajs/ava).
Bumps the dependencies group with 3 updates in the /packages/metascraper-youtube directory: [ava](https://github.com/avajs/ava), [get-video-id](https://github.com/radiovisual/get-video-id) and [p-locate](https://github.com/sindresorhus/p-locate).


Updates `gulp` from 4.0.2 to 5.0.1
- [Release notes](https://github.com/gulpjs/gulp/releases)
- [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md)
- [Commits](gulpjs/gulp@v4.0.2...v5.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `p-reflect` from 2.1.0 to 3.1.0
- [Release notes](https://github.com/sindresorhus/p-reflect/releases)
- [Commits](sindresorhus/p-reflect@v2.1.0...v3.1.0)

Updates `defuddle` from 0.18.1 to 0.19.0
- [Release notes](https://github.com/kepano/defuddle/releases)
- [Commits](kepano/defuddle@0.18.1...0.19.0)

Updates `condense-whitespace` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/sindresorhus/condense-whitespace/releases)
- [Commits](sindresorhus/condense-whitespace@v2.0.0...v3.0.0)

Updates `entities` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/fb55/entities/releases)
- [Commits](fb55/entities@v7.0.1...v8.0.0)

Updates `is-relative-url` from 3.0.0 to 4.1.0
- [Release notes](https://github.com/sindresorhus/is-relative-url/releases)
- [Commits](sindresorhus/is-relative-url@v3.0.0...v4.1.0)

Updates `iso-639-3` from 2.2.0 to 3.0.1
- [Release notes](https://github.com/wooorm/iso-639-3/releases)
- [Commits](wooorm/iso-639-3@2.2.0...3.0.1)

Updates `mime` from 3.0.0 to 4.1.0
- [Release notes](https://github.com/broofa/mime/releases)
- [Changelog](https://github.com/broofa/mime/blob/main/CHANGELOG.md)
- [Commits](broofa/mime@v3.0.0...v4.1.0)

Updates `normalize-url` from 6.1.0 to 9.0.1
- [Release notes](https://github.com/sindresorhus/normalize-url/releases)
- [Commits](sindresorhus/normalize-url@v6.1.0...v9.0.1)

Updates `re2` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/uhop/node-re2/releases)
- [Commits](uhop/node-re2@1.24.1...1.25.0)

Updates `video-extensions` from 1.2.0 to 2.0.0
- [Release notes](https://github.com/sindresorhus/video-extensions/releases)
- [Commits](sindresorhus/video-extensions@v1.2.0...v2.0.0)

Updates `got` from 11.8.6 to 15.0.5
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v15.0.5)

Updates `cacheable-lookup` from 6.1.0 to 7.0.0
- [Release notes](https://github.com/szmarczak/cacheable-lookup/releases)
- [Commits](szmarczak/cacheable-lookup@v6.1.0...v7.0.0)

Updates `data-uri-to-buffer` from 5.0.1 to 8.0.0
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/data-uri-to-buffer/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/data-uri-to-buffer@8.0.0/packages/data-uri-to-buffer)

Updates `p-retry` from 4.6.2 to 8.0.0
- [Release notes](https://github.com/sindresorhus/p-retry/releases)
- [Commits](sindresorhus/p-retry@v4.6.2...v8.0.0)

Updates `p-timeout` from 4.1.0 to 7.0.1
- [Release notes](https://github.com/sindresorhus/p-timeout/releases)
- [Commits](sindresorhus/p-timeout@v4.1.0...v7.0.1)

Updates `serialize-error` from 8.1.0 to 13.0.1
- [Release notes](https://github.com/sindresorhus/serialize-error/releases)
- [Commits](sindresorhus/serialize-error@v8.1.0...v13.0.1)

Updates `unique-random-array` from 2.0.0 to 4.0.0
- [Release notes](https://github.com/sindresorhus/unique-random-array/releases)
- [Commits](sindresorhus/unique-random-array@v2.0.0...v4.0.0)

Updates `get-video-id` from 3.7.0 to 4.2.0
- [Release notes](https://github.com/radiovisual/get-video-id/releases)
- [Commits](radiovisual/get-video-id@3.7.0...4.2.0)

Updates `p-locate` from 5.0.0 to 7.0.0
- [Release notes](https://github.com/sindresorhus/p-locate/releases)
- [Commits](sindresorhus/p-locate@v5.0.0...v7.0.0)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `p-reflect` from 2.1.0 to 3.1.0
- [Release notes](https://github.com/sindresorhus/p-reflect/releases)
- [Commits](sindresorhus/p-reflect@v2.1.0...v3.1.0)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `defuddle` from 0.18.1 to 0.19.0
- [Release notes](https://github.com/kepano/defuddle/releases)
- [Commits](kepano/defuddle@0.18.1...0.19.0)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `condense-whitespace` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/sindresorhus/condense-whitespace/releases)
- [Commits](sindresorhus/condense-whitespace@v2.0.0...v3.0.0)

Updates `entities` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/fb55/entities/releases)
- [Commits](fb55/entities@v7.0.1...v8.0.0)

Updates `is-relative-url` from 3.0.0 to 4.1.0
- [Release notes](https://github.com/sindresorhus/is-relative-url/releases)
- [Commits](sindresorhus/is-relative-url@v3.0.0...v4.1.0)

Updates `iso-639-3` from 2.2.0 to 3.0.1
- [Release notes](https://github.com/wooorm/iso-639-3/releases)
- [Commits](wooorm/iso-639-3@2.2.0...3.0.1)

Updates `mime` from 3.0.0 to 4.1.0
- [Release notes](https://github.com/broofa/mime/releases)
- [Changelog](https://github.com/broofa/mime/blob/main/CHANGELOG.md)
- [Commits](broofa/mime@v3.0.0...v4.1.0)

Updates `normalize-url` from 6.1.0 to 9.0.1
- [Release notes](https://github.com/sindresorhus/normalize-url/releases)
- [Commits](sindresorhus/normalize-url@v6.1.0...v9.0.1)

Updates `re2` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/uhop/node-re2/releases)
- [Commits](uhop/node-re2@1.24.1...1.25.0)

Updates `video-extensions` from 1.2.0 to 2.0.0
- [Release notes](https://github.com/sindresorhus/video-extensions/releases)
- [Commits](sindresorhus/video-extensions@v1.2.0...v2.0.0)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `p-reflect` from 2.1.0 to 3.1.0
- [Release notes](https://github.com/sindresorhus/p-reflect/releases)
- [Commits](sindresorhus/p-reflect@v2.1.0...v3.1.0)

Updates `got` from 11.8.6 to 15.0.5
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v15.0.5)

Updates `cacheable-lookup` from 6.1.0 to 7.0.0
- [Release notes](https://github.com/szmarczak/cacheable-lookup/releases)
- [Commits](szmarczak/cacheable-lookup@v6.1.0...v7.0.0)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `got` from 11.8.6 to 15.0.5
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v15.0.5)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `got` from 11.8.6 to 15.0.5
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v15.0.5)

Updates `data-uri-to-buffer` from 5.0.1 to 8.0.0
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/data-uri-to-buffer/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/data-uri-to-buffer@8.0.0/packages/data-uri-to-buffer)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `p-reflect` from 2.1.0 to 3.1.0
- [Release notes](https://github.com/sindresorhus/p-reflect/releases)
- [Commits](sindresorhus/p-reflect@v2.1.0...v3.1.0)

Updates `got` from 11.8.6 to 15.0.5
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v15.0.5)

Updates `p-retry` from 4.6.2 to 8.0.0
- [Release notes](https://github.com/sindresorhus/p-retry/releases)
- [Commits](sindresorhus/p-retry@v4.6.2...v8.0.0)

Updates `p-timeout` from 4.1.0 to 7.0.1
- [Release notes](https://github.com/sindresorhus/p-timeout/releases)
- [Commits](sindresorhus/p-timeout@v4.1.0...v7.0.1)

Updates `serialize-error` from 8.1.0 to 13.0.1
- [Release notes](https://github.com/sindresorhus/serialize-error/releases)
- [Commits](sindresorhus/serialize-error@v8.1.0...v13.0.1)

Updates `unique-random-array` from 2.0.0 to 4.0.0
- [Release notes](https://github.com/sindresorhus/unique-random-array/releases)
- [Commits](sindresorhus/unique-random-array@v2.0.0...v4.0.0)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `got` from 11.8.6 to 15.0.5
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v15.0.5)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `p-reflect` from 2.1.0 to 3.1.0
- [Release notes](https://github.com/sindresorhus/p-reflect/releases)
- [Commits](sindresorhus/p-reflect@v2.1.0...v3.1.0)

Updates `got` from 11.8.6 to 15.0.5
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v15.0.5)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `p-reflect` from 2.1.0 to 3.1.0
- [Release notes](https://github.com/sindresorhus/p-reflect/releases)
- [Commits](sindresorhus/p-reflect@v2.1.0...v3.1.0)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `ava` from 5.3.1 to 8.0.1
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v5.3.1...v8.0.1)

Updates `get-video-id` from 3.7.0 to 4.2.0
- [Release notes](https://github.com/radiovisual/get-video-id/releases)
- [Commits](radiovisual/get-video-id@3.7.0...4.2.0)

Updates `p-locate` from 5.0.0 to 7.0.0
- [Release notes](https://github.com/sindresorhus/p-locate/releases)
- [Commits](sindresorhus/p-locate@v5.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: gulp
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-reflect
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: defuddle
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: condense-whitespace
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: entities
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: is-relative-url
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: iso-639-3
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: mime
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: normalize-url
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: re2
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: video-extensions
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: got
  dependency-version: 15.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: cacheable-lookup
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: data-uri-to-buffer
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-retry
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-timeout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: serialize-error
  dependency-version: 13.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: unique-random-array
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: get-video-id
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-locate
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-reflect
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: defuddle
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: condense-whitespace
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: entities
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: is-relative-url
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: iso-639-3
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: mime
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: normalize-url
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: re2
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: video-extensions
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-reflect
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: got
  dependency-version: 15.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: cacheable-lookup
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: got
  dependency-version: 15.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: got
  dependency-version: 15.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: data-uri-to-buffer
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-reflect
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: got
  dependency-version: 15.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-retry
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-timeout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: serialize-error
  dependency-version: 13.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: unique-random-array
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: got
  dependency-version: 15.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-reflect
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: got
  dependency-version: 15.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-reflect
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ava
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: get-video-id
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: p-locate
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 17, 2026
Kikobeats and others added 3 commits June 17, 2026 09:14
Several deps moved CJS->ESM in the dependabot bump, changing require()
interop shape. Adjust consumers:

- access .default for condense-whitespace, is-relative-url, normalize-url,
  video-extensions, p-locate, p-reflect, unique-random-array, mime, ava
- bind mime.getExtension (instance method needs its receiver)
- iso-639-3 v3 renamed /to-1 subpath to /iso6393-to-1.js (named export)
- pin get-video-id to v3 (v4 ships CJS under type:module, require returns {})
- keep got at v11 and cacheable-lookup at v6 (CJS)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
normalize-url v9 no longer throws on javascript: URLs (v6 did), so
normalizeUrl was leaking them through. Guard the protocol explicitly.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
data-uri-to-buffer v6+ returns { buffer: ArrayBuffer } instead of a Node
Buffer, breaking JSON.parse(dataUriToBuffer(...)). The upgrade isn't worth
the churn, so stay on v5 which returns a Buffer directly.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@Kikobeats Kikobeats force-pushed the dependabot/npm_and_yarn/dependencies-184343a2d0 branch from c236429 to c5002b3 Compare June 17, 2026 15:52
The apple-touch-icon (ent-apple-touch-icon.jpg) now returns 404, so
logo-favicon correctly falls back to favicon.ico.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@coveralls

Copy link
Copy Markdown
Collaborator

Coverage Status

Coverage is 94.102%dependabot/npm_and_yarn/dependencies-184343a2d0 into master. No base build found for master.

@Kikobeats Kikobeats merged commit db863ad into master Jun 19, 2026
82 of 83 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-184343a2d0 branch June 19, 2026 08:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants