Skip to content

fix(deps): bump the npm-prod-deps group across 1 directory with 7 updates#3022

Merged
saikumarrs merged 1 commit into
developfrom
dependabot/npm_and_yarn/develop/npm-prod-deps-0c91adc2b2
May 27, 2026
Merged

fix(deps): bump the npm-prod-deps group across 1 directory with 7 updates#3022
saikumarrs merged 1 commit into
developfrom
dependabot/npm_and_yarn/develop/npm-prod-deps-0c91adc2b2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-prod-deps group with 7 updates in the / directory:

Package From To
@preact/signals-core 1.14.1 1.14.2
axios 1.16.0 1.16.1
@nx/nx-darwin-arm64 22.7.1 22.7.2
@nx/nx-darwin-x64 22.7.1 22.7.2
@nx/nx-linux-x64-gnu 22.7.1 22.7.2
@nx/nx-win32-x64-msvc 22.7.1 22.7.2
@rollup/rollup-linux-x64-gnu 4.60.3 4.60.4

Updates @preact/signals-core from 1.14.1 to 1.14.2

Release notes

Sourced from @​preact/signals-core's releases.

@​preact/signals-core@​1.14.2

Patch Changes

Commits

Updates axios from 1.16.0 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Changelog

Sourced from axios's changelog.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Commits
  • 1337d6b chore(release): prepare release 1.16.1 (#10877)
  • 858a790 fix: remove all caches (#10882)
  • 34adfd9 revert: "fix: support URL object as config.url input (#10866)" (#10874)
  • 847d89b fix: support URL object as config.url input (#10866)
  • 4094886 fix(progress): guard malformed XHR upload events (#10868)
  • 44f0c5b chore: change sponsorship link and add Twicsy advertisement (#10869)
  • 64e1095 chore: update PR and issue template to use h2 (#10865)
  • 3e6b4e1 fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...
  • c4453ba fix: add the ability to add additional sponsors to the process sponsors scrip...
  • caa00a9 fix: https data in cleartext to proxy (#10858)
  • Additional commits viewable in compare view

Updates @nx/nx-darwin-arm64 from 22.7.1 to 22.7.2

Release notes

Sourced from @​nx/nx-darwin-arm64's releases.

22.7.2 (2026-05-14)

🚀 Features

  • gradle: stream batch task results to nx as they finish (#35487)
  • nx-dev: track docs analytics for code copy, LLM prompt, YouTube (#35526)
  • testing: add migration for Jest 30 snapshot guide link (#35629)

🩹 Fixes

  • angular: disable vitest watch by default (#35493)
  • angular-rspack: keep root-scoped assets out of per-locale i18n emit (#35621)
  • bundling: include tsconfig solution input for rollup (#35476)
  • bundling: include tsconfig solution input for webpack (#35477, #35476)
  • core: bump axios to 1.16.0 for all packages (#35568)
  • core: add provenance check in nx console status path (#35485)
  • core: remove access control header from graph app (#35494)
  • core: ensure verbose logs go to stderr and daemon logs are properly decorated (#34358)
  • core: show flaky-task count in run summary (#35491)
  • core: unique telemetry user_id; expose workspace_id dimension (#35553)
  • core: update minimatch to 10.2.5 (#35569, #34660)
  • core: restore use-legacy-versioning shim for @​nx/js@​21 ensurePackage path (#35574)
  • core: isolate NX_PARALLEL env var in parallel-related specs (#35579)
  • core: skip handleimport miss path when nx key packages are absent (#35596)
  • core: use gethostuuid(3) instead of ioreg on macOS (#35599)
  • core: isolate cache env vars in splitArgs spec (#35584)
  • core: enable node's native v8 compile cache support (#35415, #20454)
  • core: support skipped batch tasks end-to-end and fix TUI double logs (#35617)
  • core: keep TUI task selection on the in-progress section (#35640)
  • core: allow nx mcp to run outside of an Nx workspace (#35655)
  • core: cast perf entries to PerformanceMeasure for detail access (43c0c821ba)
  • devkit: exclude dist from jest module path scan (#35615)
  • devkit: expand @​nx/devkit/internal re-exports for cherry-picked v23 deep-import migration (#35541)
  • dotnet: correct output paths for Web SDK and centralized dist setups (#35398)
  • gradle: exclude batch-runner from jest haste-map crawl (#35501)
  • gradle: exclude project-graph from jest module path scan (#35609)
  • gradle: support Windows file paths (#35184, #34987)
  • js: strip glob from inferred outputs before resolving as path (#35463, #35452)
  • js: reference vitest.config in eslint dep-checks for vitest libs (#35460, #33670, #35450)
  • js: include transitive workspace deps in pruned pnpm lockfile (#35532, #35347, #34655)
  • linter: prevent ENOENT crash in getRelativeImportPath for unresolvable paths (#35007, #13872, #34066, #30491, #16716, #35006, #21889, #32190)
  • maven: skip attached artifacts that fail to materialize in batch record (#35473)
  • maven: serialize Maven 4 build state recording (#35555)
  • maven: widen runCLI timeout for --no-batch maven.test.ts cases (#35589)
  • nx-dev: document nested CLI subcommands beyond two levels (#35519)
  • nx-dev: short-circuit bot probes in framer rewrite edge function (#35527)
  • react: withSvgr migration preserves other properties (#35484)
  • repo: clear NX_INVOCATION_ROOT_PID in run-native-target to avoid recursion false-positive (443dee0b22)
  • repo: revert deep-import rewrites that targeted v23-only @​nx/devkit/internal entry (ac8187963d)
  • repo: unblock 22.7.x cargo tests and nx-build e2e (#34285)

... (truncated)

Commits

Updates @nx/nx-darwin-x64 from 22.7.1 to 22.7.2

Release notes

Sourced from @​nx/nx-darwin-x64's releases.

22.7.2 (2026-05-14)

🚀 Features

  • gradle: stream batch task results to nx as they finish (#35487)
  • nx-dev: track docs analytics for code copy, LLM prompt, YouTube (#35526)
  • testing: add migration for Jest 30 snapshot guide link (#35629)

🩹 Fixes

  • angular: disable vitest watch by default (#35493)
  • angular-rspack: keep root-scoped assets out of per-locale i18n emit (#35621)
  • bundling: include tsconfig solution input for rollup (#35476)
  • bundling: include tsconfig solution input for webpack (#35477, #35476)
  • core: bump axios to 1.16.0 for all packages (#35568)
  • core: add provenance check in nx console status path (#35485)
  • core: remove access control header from graph app (#35494)
  • core: ensure verbose logs go to stderr and daemon logs are properly decorated (#34358)
  • core: show flaky-task count in run summary (#35491)
  • core: unique telemetry user_id; expose workspace_id dimension (#35553)
  • core: update minimatch to 10.2.5 (#35569, #34660)
  • core: restore use-legacy-versioning shim for @​nx/js@​21 ensurePackage path (#35574)
  • core: isolate NX_PARALLEL env var in parallel-related specs (#35579)
  • core: skip handleimport miss path when nx key packages are absent (#35596)
  • core: use gethostuuid(3) instead of ioreg on macOS (#35599)
  • core: isolate cache env vars in splitArgs spec (#35584)
  • core: enable node's native v8 compile cache support (#35415, #20454)
  • core: support skipped batch tasks end-to-end and fix TUI double logs (#35617)
  • core: keep TUI task selection on the in-progress section (#35640)
  • core: allow nx mcp to run outside of an Nx workspace (#35655)
  • core: cast perf entries to PerformanceMeasure for detail access (43c0c821ba)
  • devkit: exclude dist from jest module path scan (#35615)
  • devkit: expand @​nx/devkit/internal re-exports for cherry-picked v23 deep-import migration (#35541)
  • dotnet: correct output paths for Web SDK and centralized dist setups (#35398)
  • gradle: exclude batch-runner from jest haste-map crawl (#35501)
  • gradle: exclude project-graph from jest module path scan (#35609)
  • gradle: support Windows file paths (#35184, #34987)
  • js: strip glob from inferred outputs before resolving as path (#35463, #35452)
  • js: reference vitest.config in eslint dep-checks for vitest libs (#35460, #33670, #35450)
  • js: include transitive workspace deps in pruned pnpm lockfile (#35532, #35347, #34655)
  • linter: prevent ENOENT crash in getRelativeImportPath for unresolvable paths (#35007, #13872, #34066, #30491, #16716, #35006, #21889, #32190)
  • maven: skip attached artifacts that fail to materialize in batch record (#35473)
  • maven: serialize Maven 4 build state recording (#35555)
  • maven: widen runCLI timeout for --no-batch maven.test.ts cases (#35589)
  • nx-dev: document nested CLI subcommands beyond two levels (#35519)
  • nx-dev: short-circuit bot probes in framer rewrite edge function (#35527)
  • react: withSvgr migration preserves other properties (#35484)
  • repo: clear NX_INVOCATION_ROOT_PID in run-native-target to avoid recursion false-positive (443dee0b22)
  • repo: revert deep-import rewrites that targeted v23-only @​nx/devkit/internal entry (ac8187963d)
  • repo: unblock 22.7.x cargo tests and nx-build e2e (#34285)

... (truncated)

Commits

Updates @nx/nx-linux-x64-gnu from 22.7.1 to 22.7.2

Release notes

Sourced from @​nx/nx-linux-x64-gnu's releases.

22.7.2 (2026-05-14)

🚀 Features

  • gradle: stream batch task results to nx as they finish (#35487)
  • nx-dev: track docs analytics for code copy, LLM prompt, YouTube (#35526)
  • testing: add migration for Jest 30 snapshot guide link (#35629)

🩹 Fixes

  • angular: disable vitest watch by default (#35493)
  • angular-rspack: keep root-scoped assets out of per-locale i18n emit (#35621)
  • bundling: include tsconfig solution input for rollup (#35476)
  • bundling: include tsconfig solution input for webpack (#35477, #35476)
  • core: bump axios to 1.16.0 for all packages (#35568)
  • core: add provenance check in nx console status path (#35485)
  • core: remove access control header from graph app (#35494)
  • core: ensure verbose logs go to stderr and daemon logs are properly decorated (#34358)
  • core: show flaky-task count in run summary (#35491)
  • core: unique telemetry user_id; expose workspace_id dimension (#35553)
  • core: update minimatch to 10.2.5 (#35569, #34660)
  • core: restore use-legacy-versioning shim for @​nx/js@​21 ensurePackage path (#35574)
  • core: isolate NX_PARALLEL env var in parallel-related specs (#35579)
  • core: skip handleimport miss path when nx key packages are absent (#35596)
  • core: use gethostuuid(3) instead of ioreg on macOS (#35599)
  • core: isolate cache env vars in splitArgs spec (#35584)
  • core: enable node's native v8 compile cache support (#35415, #20454)
  • core: support skipped batch tasks end-to-end and fix TUI double logs (#35617)
  • core: keep TUI task selection on the in-progress section (#35640)
  • core: allow nx mcp to run outside of an Nx workspace (#35655)
  • core: cast perf entries to PerformanceMeasure for detail access (43c0c821ba)
  • devkit: exclude dist from jest module path scan (#35615)
  • devkit: expand @​nx/devkit/internal re-exports for cherry-picked v23 deep-import migration (#35541)
  • dotnet: correct output paths for Web SDK and centralized dist setups (#35398)
  • gradle: exclude batch-runner from jest haste-map crawl (#35501)
  • gradle: exclude project-graph from jest module path scan (#35609)
  • gradle: support Windows file paths (#35184, #34987)
  • js: strip glob from inferred outputs before resolving as path (#35463, #35452)
  • js: reference vitest.config in eslint dep-checks for vitest libs (#35460, #33670, #35450)
  • js: include transitive workspace deps in pruned pnpm lockfile (#35532, #35347, #34655)
  • linter: prevent ENOENT crash in getRelativeImportPath for unresolvable paths (#35007, #13872, #34066, #30491, #16716, #35006, #21889, #32190)
  • maven: skip attached artifacts that fail to materialize in batch record (#35473)
  • maven: serialize Maven 4 build state recording (#35555)
  • maven: widen runCLI timeout for --no-batch maven.test.ts cases (#35589)
  • nx-dev: document nested CLI subcommands beyond two levels (#35519)
  • nx-dev: short-circuit bot probes in framer rewrite edge function (#35527)
  • react: withSvgr migration preserves other properties (#35484)
  • repo: clear NX_INVOCATION_ROOT_PID in run-native-target to avoid recursion false-positive (443dee0b22)
  • repo: revert deep-import rewrites that targeted v23-only @​nx/devkit/internal entry (ac8187963d)
  • repo: unblock 22.7.x cargo tests and nx-build e2e (#34285)

... (truncated)

Commits

Updates @nx/nx-win32-x64-msvc from 22.7.1 to 22.7.2

Release notes

Sourced from @​nx/nx-win32-x64-msvc's releases.

22.7.2 (2026-05-14)

🚀 Features

  • gradle: stream batch task results to nx as they finish (#35487)
  • nx-dev: track docs analytics for code copy, LLM prompt, YouTube (#35526)
  • testing: add migration for Jest 30 snapshot guide link (#35629)

🩹 Fixes

  • angular: disable vitest watch by default (#35493)
  • angular-rspack: keep root-scoped assets out of per-locale i18n emit (#35621)
  • bundling: include tsconfig solution input for rollup (#35476)
  • bundling: include tsconfig solution input for webpack (#35477, #35476)
  • core: bump axios to 1.16.0 for all packages (#35568)
  • core: add provenance check in nx console status path (#35485)
  • core: remove access control header from graph app (#35494)
  • core: ensure verbose logs go to stderr and daemon logs are properly decorated (#34358)
  • core: show flaky-task count in run summary (#35491)
  • core: unique telemetry user_id; expose workspace_id dimension (#35553)
  • core: update minimatch to 10.2.5 (#35569, #34660)
  • core: restore use-legacy-versioning shim for @​nx/js@​21 ensurePackage path (#35574)
  • core: isolate NX_PARALLEL env var in parallel-related specs (#35579)
  • core: skip handleimport miss path when nx key packages are absent (#35596)
  • core: use gethostuuid(3) instead of ioreg on macOS (#35599)
  • core: isolate cache env vars in splitArgs spec (#35584)
  • core: enable node's native v8 compile cache support (#35415, #20454)
  • core: support skipped batch tasks end-to-end and fix TUI double logs (#35617)
  • core: keep TUI task selection on the in-progress section (#35640)
  • core: allow nx mcp to run outside of an Nx workspace (#35655)
  • core: cast perf entries to PerformanceMeasure for detail access (43c0c821ba)
  • devkit: exclude dist from jest module path scan (#35615)
  • devkit: expand @​nx/devkit/internal re-exports for cherry-picked v23 deep-import migration (#35541)
  • dotnet: correct output paths for Web SDK and centralized dist setups (#35398)
  • gradle: exclude batch-runner from jest haste-map crawl (#35501)
  • gradle: exclude project-graph from jest module path scan (#35609)
  • gradle: support Windows file paths (#35184, #34987)
  • js: strip glob from inferred outputs before resolving as path (#35463, #35452)
  • js: reference vitest.config in eslint dep-checks for vitest libs (#35460, #33670, #35450)
  • js: include transitive workspace deps in pruned pnpm lockfile (#35532, #35347, #34655)
  • linter: prevent ENOENT crash in getRelativeImportPath for unresolvable paths (#35007, #13872, #34066, #30491, #16716, #35006, #21889, #32190)
  • maven: skip attached artifacts that fail to materialize in batch record (#35473)
  • maven: serialize Maven 4 build state recording (#35555)
  • maven: widen runCLI timeout for --no-batch maven.test.ts cases (#35589)
  • nx-dev: document nested CLI subcommands beyond two levels (#35519)
  • nx-dev: short-circuit bot probes in framer rewrite edge function (#35527)
  • react: withSvgr migration preserves other properties (#35484)
  • repo: clear NX_INVOCATION_ROOT_PID in run-native-target to avoid recursion false-positive (443dee0b22)
  • repo: revert deep-import rewrites that targeted v23-only @​nx/devkit/internal entry (ac8187963d)
  • repo: unblock 22.7.x cargo tests and nx-build e2e (#34285)

... (truncated)

Commits

Updates @rollup/rollup-linux-x64-gnu from 4.60.3 to 4.60.4

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 20, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 20, 2026 05:39
Copilot AI review requested due to automatic review settings May 20, 2026 05:39
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 20, 2026
Copilot AI reviewed May 20, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@github-actions

github-actions Bot commented May 20, 2026 •
edited
Loading

Copy link
Copy Markdown

size-limit report 📦

Name Size Delta Limit check
Common - No bundling 5.78 KB 0 B (0% 🟢) 6 KB (✅)
Legacy Utils - No bundling 11.11 KB 0 B (0% 🟢) 12 KB (✅)
Cookies Utils - Legacy - NPM (ESM) 1.54 KB 0 B (0% 🟢) 2 KB (✅)
Cookies Utils - Legacy - NPM (CJS) 1.74 KB 0 B (0% 🟢) 2 KB (✅)
Cookies Utils - Legacy - NPM (UMD) 1.52 KB 0 B (0% 🟢) 2 KB (✅)
Cookies Utils - Modern - NPM (ESM) 1.16 KB 0 B (0% 🟢) 1.5 KB (✅)
Cookies Utils - Modern - NPM (CJS) 1.39 KB 0 B (0% 🟢) 1.5 KB (✅)
Cookies Utils - Modern - NPM (UMD) 1.15 KB 0 B (0% 🟢) 1.5 KB (✅)
Plugins Module Federation Mapping - Legacy - CDN 330 B 0 B (0% 🟢) 512 B (✅)
Plugins Module Federation Mapping - Modern - CDN 330 B 0 B (0% 🟢) 512 B (✅)
Plugins - Legacy - CDN 13.6 KB 0 B (0% 🟢) 15 KB (✅)
Plugins - Modern - CDN 5.52 KB 0 B (0% 🟢) 6 KB (✅)
Core (v1.1) - NPM (ESM) 29.74 KB 0 B (0% 🟢) 32 KB (✅)
Core (v1.1) - NPM (CJS) 29.97 KB 0 B (0% 🟢) 32 KB (✅)
Core (v1.1) - NPM (UMD) 29.77 KB 0 B (0% 🟢) 32 KB (✅)
Core (Content Script - v1.1) - NPM (ESM) 29.33 KB 0 B (0% 🟢) 30.5 KB (✅)
Core (Content Script - v1.1) - NPM (CJS) 29.55 KB 0 B (0% 🟢) 30.5 KB (✅)
Core (Content Script - v1.1) - NPM (UMD) 29.34 KB 0 B (0% 🟢) 30.5 KB (✅)
Core (v1.1) - Legacy - CDN 31.27 KB 0 B (0% 🟢) 32.5 KB (✅)
Core (v1.1) - Modern - CDN 29.69 KB 0 B (0% 🟢) 32 KB (✅)
Service Worker - Legacy - NPM (ESM) 31.69 KB 138 B (+0.43% 🔺) 32 KB (✅)
Service Worker - Legacy - NPM (CJS) 31.84 KB 73 B (+0.23% 🔺) 32 KB (✅)
Service Worker - Legacy - NPM (UMD) 31.61 KB 8 B (+0.03% 🔺) 32 KB (✅)
Service Worker - Modern - NPM (ESM) 27.55 KB 89 B (+0.32% 🔺) 28 KB (✅)
Service Worker - Modern - NPM (CJS) 27.75 KB 89 B (+0.32% 🔺) 28 KB (✅)
Service Worker - Modern - NPM (UMD) 27.59 KB 134 B (+0.48% 🔺) 28 KB (✅)
All Integrations - Legacy - CDN 95.83 KB 0 B (0% 🟢) 97 KB (✅)
All Integrations - Modern - CDN 88.3 KB 0 B (0% 🟢) 93.5 KB (✅)
Core - Legacy - NPM (ESM) 47.74 KB -58 B (-0.12% 🟢) 50 KB (✅)
Core - Legacy - NPM (CJS) 47.96 KB 25 B (+0.06% 🔺) 50 KB (✅)
Core - Legacy - NPM (UMD) 47.8 KB 51 B (+0.11% 🔺) 50 KB (✅)
Core - Legacy - CDN 47.87 KB -54 B (-0.12% 🟢) 50 KB (✅)
Core - Modern - NPM (ESM) 27.09 KB 16 B (+0.06% 🔺) 28.5 KB (✅)
Core - Modern - NPM (CJS) 27.33 KB 23 B (+0.09% 🔺) 28.5 KB (✅)
Core - Modern - NPM (UMD) 27.13 KB 9 B (+0.04% 🔺) 28.5 KB (✅)
Core - Modern - CDN 27.36 KB 14 B (+0.05% 🔺) 28.5 KB (✅)
Core (Bundled) - Legacy - NPM (ESM) 47.8 KB 39 B (+0.08% 🔺) 50 KB (✅)
Core (Bundled) - Legacy - NPM (CJS) 47.94 KB -6 B (-0.02% 🟢) 50 KB (✅)
Core (Bundled) - Legacy - NPM (UMD) 47.8 KB -10 B (-0.03% 🟢) 50 KB (✅)
Core (Bundled) - Modern - NPM (ESM) 40.4 KB 80 B (+0.2% 🔺) 41.5 KB (✅)
Core (Bundled) - Modern - NPM (CJS) 40.5 KB -29 B (-0.07% 🟢) 42 KB (✅)
Core (Bundled) - Modern - NPM (UMD) 40.36 KB -22 B (-0.06% 🟢) 41.5 KB (✅)
Core (Content Script) - Legacy - NPM (ESM) 47.73 KB -5 B (-0.02% 🟢) 50 KB (✅)
Core (Content Script) - Legacy - NPM (CJS) 47.92 KB 27 B (+0.06% 🔺) 50 KB (✅)
Core (Content Script) - Legacy - NPM (UMD) 47.78 KB -25 B (-0.06% 🟢) 50 KB (✅)
Core (Content Script) - Modern - NPM (ESM) 40.31 KB 24 B (+0.06% 🔺) 41.5 KB (✅)
Core (Content Script) - Modern - NPM (CJS) 40.47 KB -5 B (-0.02% 🟢) 41.5 KB (✅)
Core (Content Script) - Modern - NPM (UMD) 40.35 KB 30 B (+0.08% 🔺) 41.5 KB (✅)
Core (Lite) - Legacy - NPM (ESM) 36.47 KB 21 B (+0.06% 🔺) 39 KB (✅)
Core (Lite) - Legacy - NPM (CJS) 36.65 KB -52 B (-0.14% 🟢) 39 KB (✅)
Core (Lite) - Legacy - NPM (UMD) 36.48 KB -41 B (-0.11% 🟢) 39 KB (✅)
Core (Lite) - Modern - NPM (ESM) 31.85 KB 61 B (+0.19% 🔺) 34 KB (✅)
Core (Lite) - Modern - NPM (CJS) 32.02 KB -65 B (-0.2% 🟢) 34 KB (✅)
Core (Lite) - Modern - NPM (UMD) 31.84 KB -4 B (-0.02% 🟢) 34 KB (✅)
Load Snippet 780 B 0 B (0% 🟢) 1 KB (✅)

@dependabot
fix(deps): bump the npm-prod-deps group across 1 directory with 7 upd…
6a36c0a 
…ates

Bumps the npm-prod-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@preact/signals-core](https://github.com/preactjs/signals) | `1.14.1` | `1.14.2` |
| [axios](https://github.com/axios/axios) | `1.16.0` | `1.16.1` |
| [@nx/nx-darwin-arm64](https://github.com/nrwl/nx/tree/HEAD/packages/nx/native-packages/darwin-arm64) | `22.7.1` | `22.7.2` |
| [@nx/nx-darwin-x64](https://github.com/nrwl/nx/tree/HEAD/packages/nx/native-packages/darwin-x64) | `22.7.1` | `22.7.2` |
| [@nx/nx-linux-x64-gnu](https://github.com/nrwl/nx/tree/HEAD/packages/nx/native-packages/linux-x64-gnu) | `22.7.1` | `22.7.2` |
| [@nx/nx-win32-x64-msvc](https://github.com/nrwl/nx/tree/HEAD/packages/nx/native-packages/win32-x64-msvc) | `22.7.1` | `22.7.2` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.3` | `4.60.4` |



Updates `@preact/signals-core` from 1.14.1 to 1.14.2
- [Release notes](https://github.com/preactjs/signals/releases)
- [Commits](https://github.com/preactjs/signals/compare/@preact/signals-core@1.14.1...@preact/signals-core@1.14.2)

Updates `axios` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.0...v1.16.1)

Updates `@nx/nx-darwin-arm64` from 22.7.1 to 22.7.2
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.2/packages/nx/native-packages/darwin-arm64)

Updates `@nx/nx-darwin-x64` from 22.7.1 to 22.7.2
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.2/packages/nx/native-packages/darwin-x64)

Updates `@nx/nx-linux-x64-gnu` from 22.7.1 to 22.7.2
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.2/packages/nx/native-packages/linux-x64-gnu)

Updates `@nx/nx-win32-x64-msvc` from 22.7.1 to 22.7.2
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.2/packages/nx/native-packages/win32-x64-msvc)

Updates `@rollup/rollup-linux-x64-gnu` from 4.60.3 to 4.60.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.3...v4.60.4)

---
updated-dependencies:
- dependency-name: "@nx/nx-darwin-arm64"
  dependency-version: 22.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-deps
- dependency-name: "@nx/nx-darwin-x64"
  dependency-version: 22.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-deps
- dependency-name: "@nx/nx-linux-x64-gnu"
  dependency-version: 22.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-deps
- dependency-name: "@nx/nx-win32-x64-msvc"
  dependency-version: 22.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-deps
- dependency-name: "@preact/signals-core"
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-deps
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.60.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-deps
- dependency-name: axios
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title fix(deps): bump the npm-prod-deps group with 7 updates fix(deps): bump the npm-prod-deps group across 1 directory with 7 updates May 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/develop/npm-prod-deps-0c91adc2b2 branch from 0418f00 to 6a36c0a Compare May 22, 2026 04:59
@sonarqubecloud

sonarqubecloud Bot commented May 22, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@saikumarrs saikumarrs merged commit 2614f86 into develop May 27, 2026
14 checks passed
@saikumarrs saikumarrs deleted the dependabot/npm_and_yarn/develop/npm-prod-deps-0c91adc2b2 branch May 27, 2026 05:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments
@saikumarrs saikumarrs saikumarrs approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@saikumarrs