Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 10, 2025

Bumps the production group with 5 updates:

Package From To
baseline-browser-mapping 2.8.32 2.9.5
browserslist 4.28.0 4.28.1
caniuse-lite 1.0.30001757 1.0.30001760
electron-to-chromium 1.5.263 1.5.267
update-browserslist-db 1.1.4 1.2.2

Updates baseline-browser-mapping from 2.8.32 to 2.9.5

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.3 - remove process.loadEnvFile()

What's Changed

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

v2.9.2 - fix browser support bug

What's Changed

v2.9.0 - Reduce frequency of data staleness warnings

This version introduces a number of changes to data staleness warnings in response to #105 , #107 and #109

  • Data staleness warnings are now only shown if the getCompatibleVersions() or getAllVersions() functions are called - previously they were shown whenever the module was loaded, which meant many browserslist consumers were seeing the warning despite not targeting Baseline, especially those who were consuming browserslist in a pre-compiled format via next.js.
  • Adds new conditions for these warnings to be displayed which should only warn users for whom data freshness is critical:
    • The feature cut off data must be within the last two months, i.e. widelyAvailableOnDate: today + >2 years and 4 months or newly available in a browserslist query.
    • The module data must be more than 2 months old.
  • Introduces suppression options for these warning via the options objects and environment variables:
    • Adds a new suppressWarnings boolean to the getCompatibleVersions() and getAllVersions()
    • Respects the existing BROWSERSLIST_IGNORE_OLD_DATA environment variable.
    • Respects a new BASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA environment variable.
  • Adds explanatory text to the README for how to avoid such warnings when reproducible builds are a requirement.
  • Change warning text to be package manager agnostic and mention the possibility of pre-compiled data.
Commits
  • 9193e75 Patch to 2.9.5 because browser or feature data changed
  • b418f5d Browser or feature data changed
  • baac99e Updating static site
  • 73c8429 Patch to 2.9.4 because browser or feature data changed
  • 079e1d9 Browser or feature data changed
  • 3553f31 Remove process.loadEnfFile() from main script (#112)
  • 5972583 Bump version from 2.9.1 to 2.9.2
  • 0ab0d6f Fix browser support bug (#111)
  • b326475 Patch to 2.9.1 because browser or feature data changed
  • 9ee8cbe Browser or feature data changed
  • Additional commits viewable in compare view

Updates browserslist from 4.28.0 to 4.28.1

Release notes

Sourced from browserslist's releases.

4.28.1

  • Removed Baseline warning since we have it own warning.
Changelog

Sourced from browserslist's changelog.

4.28.1

  • Removed Baseline warning since we have it own warning.

4.48.0

4.27.0

  • Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

4.26.2

  • Fixed baseline-browser-mapping version requirement.

4.26.1

  • Updated Firefox ESR.

4.26.0

4.25.4

4.25.3

4.25.2

  • Fixed Node.js --permission support (by @​broofa).

4.25.1

  • Updated Firefox ESR.

4.25.0

  • Added cover 95% in browserslist-config-mycompany stats query support.

4.24.5

  • Fixed support ESM shared config.
  • Fixed docs (by Alexander Pushkov & マルコメ).

4.24.4

4.24.3

4.24.2

  • Clarify outdated caniuse-lite warning text.

... (truncated)

Commits

Updates caniuse-lite from 1.0.30001757 to 1.0.30001760

Commits

Updates electron-to-chromium from 1.5.263 to 1.5.267

Commits

Updates update-browserslist-db from 1.1.4 to 1.2.2

Release notes

Sourced from update-browserslist-db's releases.

1.2.2

  • Fixed update on depth in pnpm config.

1.2.1

  • Fix ERR_PNPM_NO_PACKAGE_IN_DEPENDENCIES error on pnpm with old Browserslist.

1.2.0

  • Add Baseline data updating too.
Changelog

Sourced from update-browserslist-db's changelog.

1.2.2

  • Fixed update on depth in pnpm config.

1.2.1

  • Fixed ERR_PNPM_NO_PACKAGE_IN_DEPENDENCIES error on pnpm.

1.2.0

  • Added Baseline data updating too.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.8.32` | `2.9.5` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.0` | `4.28.1` |
| [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001757` | `1.0.30001760` |
| [electron-to-chromium](https://github.com/kilian/electron-to-chromium) | `1.5.263` | `1.5.267` |
| [update-browserslist-db](https://github.com/browserslist/update-db) | `1.1.4` | `1.2.2` |


Updates `baseline-browser-mapping` from 2.8.32 to 2.9.5
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.8.32...v2.9.5)

Updates `browserslist` from 4.28.0 to 4.28.1
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.0...4.28.1)

Updates `caniuse-lite` from 1.0.30001757 to 1.0.30001760
- [Commits](browserslist/caniuse-lite@1.0.30001757...1.0.30001760)

Updates `electron-to-chromium` from 1.5.263 to 1.5.267
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/master/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.263...v1.5.267)

Updates `update-browserslist-db` from 1.1.4 to 1.2.2
- [Release notes](https://github.com/browserslist/update-db/releases)
- [Changelog](https://github.com/browserslist/update-db/blob/main/CHANGELOG.md)
- [Commits](browserslist/update-db@1.1.4...1.2.2)

---
updated-dependencies:
- dependency-name: baseline-browser-mapping
  dependency-version: 2.9.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: browserslist
  dependency-version: 4.28.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001760
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: electron-to-chromium
  dependency-version: 1.5.267
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: update-browserslist-db
  dependency-version: 1.2.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 10, 2025
@cb1kenobi cb1kenobi merged commit e6f6c6a into main Dec 10, 2025
20 of 21 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-9800b2b841 branch December 10, 2025 04:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants