Skip to content

Bump the "all" group with 4 updates across multiple ecosystems - #165

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/all-2bc633d830
Open

Bump the "all" group with 4 updates across multiple ecosystems#165
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/all-2bc633d830

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 2 updates in the / directory: node and alpine.

Updates node from 22-alpine3.23 to 26-alpine3.23

Updates alpine from 3.23 to 3.24

Bumps the all group with 3 updates in the / directory: actions/checkout, actions/setup-node and googleapis/release-please-action.

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

... (truncated)

Commits

Updates actions/setup-node from 6 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates googleapis/release-please-action from 4 to 5

Release notes

Sourced from googleapis/release-please-action's releases.

v5.0.0

5.0.0 (2026-04-22)

⚠ BREAKING CHANGES

  • upgrade to node24 (#1188)

Features

Bug Fixes

  • bump release-please from 17.3.0 to 17.6.0 (#1199) (f533c26)

v4.4.1

4.4.1 (2026-02-20)

Bug Fixes

  • bump release-please from 17.1.3 to 17.3.0 (#1183) (ef9c274)

v4.4.0

4.4.0 (2025-10-09)

Features

  • add ability to select versioning-strategy and release-as (#1121) (ee0f5ba)

Bug Fixes

  • changelog-host parameter ignored when using manifest configuration (#1151) (535c413)
  • bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 directory (#1149) (3612a99)
  • bump release-please from 17.1.2 to 17.1.3 (#1158) (66fbfe9)

v4.3.0

4.3.0 (2025-08-20)

Features

  • deps: update release-please to 17.1.2 (f07192c)

v4.2.0

4.2.0 (2025-03-07)

... (truncated)

Changelog

Sourced from googleapis/release-please-action's changelog.

4.1.1 (2024-05-14)

Bug Fixes

  • bump release-please from 16.10.0 to 16.10.2 (#969) (aa764e0)
  • bump the npm_and_yarn group with 1 update (#967) (ce529d4)

4.1.0 (2024-03-11)

Features

  • add changelog-host input to action.yml (#948) (863b06f)

4.0.3 (2024-03-11)

Bug Fixes

  • bump release-please from 16.5.0 to 16.10.0 (#953) (d7e88e0)

4.0.2 (2023-12-18)

Bug Fixes

4.0.1 (2023-12-07)

Bug Fixes

  • bump release-please from 16.3.1 to 16.4.0 (#897) (2463dad)

4.0.0 (2023-12-01)

⚠ BREAKING CHANGES

  • remove most configuration options in favor of manifest configuration to configure the release-please-action
  • rewrite in typescript
  • remove command option in favor of setting release-type and skip-github-release/skip-github-pull-request
  • run on node20
  • deps: upgrade release-please to v16
  • v4 release

Features

... (truncated)

Commits

Bumps the all group with 11 updates in the /betanin_client directory:

Package From To
axios 1.15.0 1.18.1
buefy 0.9.29 3.0.8
vee-validate 3.4.15 4.15.1
vue 2.7.16 3.5.40
vue-router 3.6.5 5.2.0
vuex 3.6.2 4.1.0
eslint 8.57.1 10.7.0
eslint-plugin-vue 8.7.1 10.10.0
prettier 3.8.1 3.9.5
sass 1.98.0 1.101.0
vite 6.4.2 8.1.5

Updates axios from 1.15.0 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

  • AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)
  • Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)
  • Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)
  • AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

  • Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

  • Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)

... (truncated)

Commits
  • a209bfb chore(release): prepare release 1.18.1 (#11027)
  • fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
  • 40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
  • a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
  • cf1306a docs: add Deno to install instructions (#11023)
  • b32880a fix: incorrect use of error (#11021)
  • 1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
  • 30499d6 fix: various runtime crashes and type definition mismatches (#10959)
  • 20ce9c4 fix(http): defer env proxy handling to Node (#10942)
  • e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
  • Additional commits viewable in compare view

Updates buefy from 0.9.29 to 3.0.8

Release notes

Sourced from buefy's releases.

v3.0.8

What's Changed

Full Changelog: buefy/buefy@v3.0.5...v3.0.8

v3.0.5

What's Changed — 3.0.5

Fixes

  • #4315 Fix desktop scrolling issues on mobile-sized viewports.
  • #4314 Checkbox SVG now uses concrete colors for consistent rendering.
  • #4313 Ensure Carousel list includes the .carousel class.

Enhancements

  • #4308 Modernize docs sidebar, pager, and icons.
  • #4317 Update CDN links and usage examples in the documentation.

Chores & Dependency Updates

  • #4318 Add documentation impact assessment rules to contribution guidance.
  • #4319 Address npm audit vulnerabilities.
  • #4316 Bump lodash, flatted, picomatch, rollup, immutable, minimatch.

New Contributors

Full Changelog: buefy/buefy@v3.0.4...v3.0.5

v3.0.4

What's Changed - 3.0.4

Fixes

  • #4277 Fixed dropdown style for link-based items.
  • #4280 Fixed missing background color in Datepicker.
  • #4283 Added missing reference to Table component.

... (truncated)

Changelog

Sourced from buefy's changelog.

3.0.8

Fixes

  • #4307 Fix programmatic Modal unmounting before leave transition completes by using the after-leave hook instead of setTimeout.

3.0.7

Chores & Dependency Updates

  • Resolve 15 Dependabot security alerts by updating axios (^1.15.2), @babel/preset-env (^7.29.5), and adding overrides for fast-uri (^3.1.2), follow-redirects (^1.16.0), and postcss (^8.5.10).
  • Add workflow_dispatch trigger to npm publish workflow.

3.0.6

Features

  • #4329 Add icon alias system and inline SVG checkmarks for Checkbox component.

Fixes (docs)

  • #4324 Adjust links and spacings on the homepage.

3.0.5

Fixes

  • #4315 Fixed desktop scrolling issues on mobile-sized viewports.
  • #4314 Checkbox SVG now uses concrete colors for consistent rendering.
  • #4313 Ensure Carousel list includes the .carousel class.

Enhancements

  • #4308 Modernize docs sidebar, pager, and icons.
  • #4317 Update CDN links and usage examples in the documentation.

Chores & Dependency Updates

  • #4318 Add documentation impact assessment rules to contribution guidance.
  • #4319 Address npm audit vulnerabilities.
  • #4316 Bump dependencies: lodash, flatted, picomatch, rollup, immutable, minimatch.

New Contributors

3.0.4

Fixes

... (truncated)

Commits

Updates vee-validate from 3.4.15 to 4.15.1

Release notes

Sourced from vee-validate's releases.

v4.15.1

   🐞 Bug Fixes

    View changes on GitHub

v4.15.0

🐛 Bug Fixes

  • fix(perf): Skip loading devtools if in SSR #4963 (ec121b1855228e2146010f9ccd4be0246331cb0d)
  • chore: Bump schema provider versions to their latest move them to peer deps #4951 #4940 (db26a748d8e1d5310dfab74588a0d34ad4878204)
  • fix(yup): Tuple required state resolution #4931 (5cba0aaff870399f6f07a7886f37dfbfe91076ee)
  • fix(bundle): Load devtools lazily to avoid including it in production builds #4943 (#4946)

👕 Types

  • fix: Mark the <Form> submission handler with Generic object to reduce need for casting (#4954) thanks to NaokiHaba

🆕 Features

  • feat: added useIsValidating and useFormContext to Nuxt module auto import list (#4952) thanks to danielwaltz

v4.14.7

🛠️ Devtools

  • Fixed uncontrolled fields (non-form associated) not showing their state in the devtools #4914 (be994b4c59e0ead536573dc26b6947131b4b6eda)
  • Added name prop to <Form /> and useForm to distinguish them in devtools #4930 (#4933) thanks to @​genu

v4.14.6

🛠️ Misc

  • Exclude vee-validate from Vite's dep optmization when used in Nuxt. #4906 #4909 (41d82fd1f0ceb62f3b9d6b2ca2270dfdc69520fc)

v4.14.5

🛠️ Misc

Changes here are related to @vee-validate/nuxt, nothing else changed.

  • Switch @vee-validate/nuxt package type to module. (e9f8c882c827d03d4548b74bda3ef3f2e6d90332)
  • Upgrade nuxt module dependencies. (e9f8c882c827d03d4548b74bda3ef3f2e6d90332)
  • Force loading the mjs module when using nuxt to reduce chances of double import. (e9f8c882c827d03d4548b74bda3ef3f2e6d90332)

... (truncated)

Changelog

Sourced from vee-validate's changelog.

4.15.1

Patch Changes

  • 721e980: Align FormErrors type with its actual structure at runtime.
  • 546d82e: fix: normalize objects before equality checks closes #5006

4.15.0

Patch Changes

  • 30281f5: fix: lazy load the devtools dep to force it out of production bundle
  • ec121b1: fix: skip loading devtools if in SSR

4.14.7

Patch Changes

  • be994b4: fix: show uncontrolled field info in devtools closes #4914

4.14.6

4.14.5

Patch Changes

  • e9f8c88: fix: force loading the mjs module when using nuxt

4.14.4

Patch Changes

  • f33974c: fix(types): expose field and form slot prop types closes #4900
  • 0991c01: fix: devtools crashing when a field name is defined as getter
  • ecb540a: fix: handle getter field names properly closes #4877
  • 4f88d85: fix: specify module type on package.json

4.14.3<...

Description has been truncated

Bumps the all group with 2 updates in the / directory: node and alpine.


Updates `node` from 22-alpine3.23 to 26-alpine3.23

Updates `alpine` from 3.23 to 3.24
chore(deps): bump the all group across 1 directory with 3 updates

Bumps the all group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [googleapis/release-please-action](https://github.com/googleapis/release-please-action).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

Updates `googleapis/release-please-action` from 4 to 5
- [Release notes](https://github.com/googleapis/release-please-action/releases)
- [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md)
- [Commits](googleapis/release-please-action@v4...v5)
chore(deps): bump the all group across 1 directory with 11 updates

Bumps the all group with 11 updates in the /betanin_client directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.15.0` | `1.18.1` |
| [buefy](https://github.com/buefy/buefy) | `0.9.29` | `3.0.8` |
| [vee-validate](https://github.com/logaretm/vee-validate/tree/HEAD/packages/vee-validate) | `3.4.15` | `4.15.1` |
| [vue](https://github.com/vuejs/core) | `2.7.16` | `3.5.40` |
| [vue-router](https://github.com/vuejs/router) | `3.6.5` | `5.2.0` |
| [vuex](https://github.com/vuejs/vuex) | `3.6.2` | `4.1.0` |
| [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.7.0` |
| [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `8.7.1` | `10.10.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.5` |
| [sass](https://github.com/sass/dart-sass) | `1.98.0` | `1.101.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.2` | `8.1.5` |



Updates `axios` from 1.15.0 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.15.0...v1.18.1)

Updates `buefy` from 0.9.29 to 3.0.8
- [Release notes](https://github.com/buefy/buefy/releases)
- [Changelog](https://github.com/buefy/buefy/blob/dev/CHANGELOG.md)
- [Commits](buefy/buefy@v0.9.29...v3.0.8)

Updates `vee-validate` from 3.4.15 to 4.15.1
- [Release notes](https://github.com/logaretm/vee-validate/releases)
- [Changelog](https://github.com/logaretm/vee-validate/blob/main/packages/vee-validate/CHANGELOG.md)
- [Commits](https://github.com/logaretm/vee-validate/commits/v4.15.1/packages/vee-validate)

Updates `vue` from 2.7.16 to 3.5.40
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/core/commits/v3.5.40)

Updates `vue-router` from 3.6.5 to 5.2.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](https://github.com/vuejs/router/commits/v5.2.0)

Updates `vuex` from 3.6.2 to 4.1.0
- [Release notes](https://github.com/vuejs/vuex/releases)
- [Changelog](https://github.com/vuejs/vuex/blob/main/CHANGELOG.md)
- [Commits](vuejs/vuex@v3.6.2...v4.1.0)

Updates `eslint` from 8.57.1 to 10.7.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.1...v10.7.0)

Updates `eslint-plugin-vue` from 8.7.1 to 10.10.0
- [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases)
- [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md)
- [Commits](vuejs/eslint-plugin-vue@v8.7.1...v10.10.0)

Updates `prettier` from 3.8.1 to 3.9.5
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.9.5)

Updates `sass` from 1.98.0 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.98.0...1.101.0)

Updates `vite` from 6.4.2 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)
chore(deps): bump the all group across 1 directory with 12 updates

Bumps the all group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [beets](https://github.com/beetbox/beets) | `2.8.0` | `2.12.0` |
| [apprise](https://github.com/caronc/apprise) | `1.9.9` | `1.12.0` |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.18.4` | `1.18.5` |
| [click](https://github.com/pallets/click) | `8.3.1` | `8.4.2` |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `6.0.2` | `6.0.5` |
| [flask-jwt-extended](https://github.com/vimalloc/flask-jwt-extended) | `4.7.1` | `4.7.4` |
| [gevent](https://github.com/gevent/gevent) | `25.9.1` | `26.5.0` |
| [python-engineio](https://github.com/miguelgrinberg/python-engineio) | `4.13.1` | `4.13.3` |
| [python-socketio](https://github.com/miguelgrinberg/python-socketio) | `5.16.1` | `5.16.3` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.48` | `2.0.51` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.8` | `0.15.22` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.408` | `1.1.411` |



Updates `beets` from 2.8.0 to 2.12.0
- [Release notes](https://github.com/beetbox/beets/releases)
- [Changelog](https://github.com/beetbox/beets/blob/master/docs/changelog.rst)
- [Commits](beetbox/beets@v2.8.0...v2.12.0)

Updates `apprise` from 1.9.9 to 1.12.0
- [Release notes](https://github.com/caronc/apprise/releases)
- [Commits](caronc/apprise@v1.9.9...v1.12.0)

Updates `alembic` from 1.18.4 to 1.18.5
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `click` from 8.3.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.3.1...8.4.2)

Updates `flask-cors` from 6.0.2 to 6.0.5
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@6.0.2...6.0.5)

Updates `flask-jwt-extended` from 4.7.1 to 4.7.4
- [Release notes](https://github.com/vimalloc/flask-jwt-extended/releases)
- [Commits](vimalloc/flask-jwt-extended@4.7.1...4.7.4)

Updates `gevent` from 25.9.1 to 26.5.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@25.9.1...26.5.0)

Updates `python-engineio` from 4.13.1 to 4.13.3
- [Release notes](https://github.com/miguelgrinberg/python-engineio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-engineio@v4.13.1...v4.13.3)

Updates `python-socketio` from 5.16.1 to 5.16.3
- [Release notes](https://github.com/miguelgrinberg/python-socketio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-socketio@v5.16.1...v5.16.3)

Updates `sqlalchemy` from 2.0.48 to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `ruff` from 0.15.8 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.8...0.15.22)

Updates `pyright` from 1.1.408 to 1.1.411
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.408...v1.1.411)

---
updated-dependencies:
- dependency-name: node
  dependency-version: 26-alpine3.23
  dependency-type: direct:production
  dependency-group: all
- dependency-name: alpine
  dependency-version: '3.24'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: googleapis/release-please-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: buefy
  dependency-version: 3.0.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vee-validate
  dependency-version: 4.15.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vue
  dependency-version: 3.5.40
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vue-router
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vuex
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: eslint-plugin-vue
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sass
  dependency-version: 1.101.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: beets
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: apprise
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: alembic
  dependency-version: 1.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: flask-cors
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: flask-jwt-extended
  dependency-version: 4.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: gevent
  dependency-version: 26.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: python-engineio
  dependency-version: 4.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: python-socketio
  dependency-version: 5.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sqlalchemy
  dependency-version: 2.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: pyright
  dependency-version: 1.1.411
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants