Skip to content

chore(deps): bump the npm group in /playwright with 11 updates#11267

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/playwright/npm-7cb5ddb998
Open

chore(deps): bump the npm group in /playwright with 11 updates#11267
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/playwright/npm-7cb5ddb998

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group in /playwright with 11 updates:

Package From To
@faker-js/faker 8.4.1 10.5.0
lodash 4.17.21 4.18.1
lodash-es 4.17.21 4.18.1
luxon 3.4.4 3.7.2
slugify 1.6.6 1.6.9
@playwright/test 1.42.1 1.61.1
eslint 8.57.0 10.7.0
eslint-plugin-import 2.29.1 2.32.0
eslint-plugin-n 16.6.2 18.2.2
eslint-plugin-promise 6.1.1 7.3.0
npm-check-updates 16.14.18 22.2.9

Updates @faker-js/faker from 8.4.1 to 10.5.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.5.0

What's Changed

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.5.0 (2026-06-17)

New Locales

  • locale: add color to cy (#3816) (5a6379f)
  • locale: add Farsi airline module locale (#3789) (f4a1c3e)
  • locale: add mn_MN_cyrl (Mongolian) locale (#3796) (d17c0f1)
  • locale: Add more realistic Greek address data (#3792) (6153eb7)
  • locale: Add postal_address and improved secondary_address for es (#3798) (6c2a0ab)
  • locale: add sl_SI locale, location module (#3652) (28d4f7c)
  • locale: add Welsh (cy) animal type definitions (#3842) (50a5ec9)
  • locale: add Welsh (cy) book format definitions (#3846) (#3846) (2b32d6e)
  • locale: add Welsh (cy) building numbers definition (#3892) (4996a2b)
  • locale: add Welsh (cy) city name definitions (#3884) (ac36c22)
  • locale: add Welsh (cy) continents definitions (#3880) (03a1682)
  • locale: add Welsh (cy) county definitions (#3849) (f51d28a)
  • locale: add Welsh (cy) direction definitions (#3840) (d862071)
  • locale: add Welsh (cy) internet domain suffix definitions (#3865) (#3865) (fb2e2cb)
  • locale: add Welsh (cy) phone number definitions (#3878) (70994db)
  • locale: add Welsh (cy) postal address definitions (#3850) (e72fd7c)
  • locale: add Welsh (cy) postcode definitions (#3851) (1afbd59)
  • locale: add Welsh (cy) sex definitions (#3824) (6f29eb7)
  • locale: add Welsh (cy) state definitions (#3891) (#3891) (606d47c)
  • locale: add Welsh (cy) street name definitions (#3889) (143789e)
  • locale: add Welsh (cy) vehicle fuel definitions (#3845) (29c918a)
  • locale: extend tr person last names (#3839) (f433771)
  • locale: improved en_GB postcodes (#3864) (a4e5039)
  • locale: improved en_IE postal_address (#3797) (fb3ffd3)

Features

  • add first standalone module functions (#3818) (5d4f5de)
  • date: add ability to provide date range for recent and soon (#3844) (0bc038d)
  • date: add ability to provide year range for past and future (#3783) (237e7dc)
  • food: expand plant-based dish and pattern variety (#3887) (5eaf729)
  • introduce FakerCore (#2838) (68e15d7)
  • location: add postal address generation (#3760) (753bec6)
  • number: add distributor functions (#3375) (325e402)
  • phone: mobile style for phone.number (#3583) (cd5953b)

Bug Fixes

  • date: incorrect date boundary in past and future (#3827) (0446411)
  • finance: routingNumber now uses real FederalReserveRoutingSymbol from lookup table. (#3429) (c53c1fe)
  • food: correct fruit and vegetable locale data (#3800) (30a812a)
  • handle single-character fromRegExp patterns (#3877) (ec6cc3b)
  • helpers: ignore wrapper characters in fromRegExp (#3795) (9e2c0e3)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​faker-js/faker since your current version.


Updates lodash from 4.17.21 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates lodash-es from 4.17.21 to 4.18.1

Release notes

Sourced from lodash-es's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates luxon from 3.4.4 to 3.7.2

Changelog

Sourced from luxon's changelog.

3.7.2 (2025-07-09)

  • Fix ES6 packaging

3.7.1 (2025-07-09)

  • Revert change in ES6 packaging

3.7.0 (2025-07-09)

  • Added showZeros option to Duration#toHuman
  • Added Duration#removeZeros method.
  • Added rounding option to DateTime#toRelative
  • Added precision option to ISO formatting methods
  • Added signMode option to Duration#toFormat
  • Allow escaping single quotes in format strings
  • Improve output of Info.months and Info.monthsFormat for ja locale
  • Accept lowercase t as a separator in ISO strings
  • Accept lowercase z as an offset in ISO strings
  • Reject non-finite numbers where previously only NaN was rejected
  • Improve the documentation for Interval
  • Added a dark theme for the documentation site

3.6.1 (2025-03-31)

  • Add Fallback for minimalDays being removed from Intl.WeekInfo
  • Fix various caches when JS keywords like "constructor" are used for names

3.6.0 (2025-03-25)

  • Add Interval.lastDateTime
  • Fix a bug that could cause wrong timezone calculations when multiple timezones are in use

3.5.0 (2024-08-03)

  • Various performance improvements
  • throwOnInvalid causes the constructor to throw if the year is invalid
Commits
  • 4262a38 Version 3.7.2
  • 738144d Fix the build ES6 code having the wrong file extension and use it in package....
  • 3b2f374 Release version 3.7.1
  • c67ee7d Revert "build: use the es6 build for ESM exports (#1707)"
  • cfa58a2 Release version 3.7.0
  • 7d379cc Fix unsupported signDisplay value
  • 4e81ef9 Implement "signMode" on Duration#toFormat
  • 5aa55da Improve documentation regarding Interval's half-openness
  • b188e10 add dark theme to docs (#1713)
  • cf67025 build: use the es6 build for ESM exports (#1707)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by diesieben07, a new releaser for luxon since your current version.


Updates slugify from 1.6.6 to 1.6.9

Changelog

Sourced from slugify's changelog.

v1.6.9 (2026-04-01)

  • #171 fix: correct CommonJS export for "module": "node16" + ESM (171) (@​karlhorky)

v1.6.8 (2026-03-13)

Commits
Maintainer changes

This version was pushed to npm by joshuakgoldberg, a new releaser for slugify since your current version.


Updates @playwright/test from 1.42.1 to 1.61.1

Release notes

Sourced from @​playwright/test's releases.

v1.61.1

Bug Fixes

  • #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
  • #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
  • #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
  • #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
  • #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

Browser and Screencast

... (truncated)

Commits
  • 39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
  • 4328122 chore: mark v1.61.1 (#41404)
  • 2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
  • 4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
  • 041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
  • b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
  • b5a3175 cherry-pick(#41319): fix(loader): support other node versions
  • d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
  • 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
  • a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​playwright/test since your current version.


Updates eslint from 8.57.0 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

  • cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
  • f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
  • 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
  • 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
  • 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

  • 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
  • 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
  • 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
  • b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
  • e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
  • a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
  • d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
  • 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
  • a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
  • 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

  • c30d808 docs: Update README (GitHub Actions Bot)
  • 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
  • 04174cb docs: Update README (GitHub Actions Bot)
  • 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
  • 9d42fef docs: Update README (GitHub Actions Bot)
  • b230159 docs: Update README (GitHub Actions Bot)
  • 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

  • 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
  • 81a4774 chore: updates for v9.39.5 release (Jenkins)
  • 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
  • 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
  • 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
  • 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
  • 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
  • e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
  • 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
  • 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
  • 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
  • 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
  • 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
  • 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
  • a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
  • 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

  • b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits
  • fabd99b 10.7.0
  • 37c5e75 Build: changelog update for 10.7.0
  • 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
  • 81a4774 chore: updates for v9.39.5 release
  • 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
  • 9835414 chore: enable $ExpectType annotations in ...

    Description has been truncated

@dependabot
chore(deps): bump the npm group in /playwright with 11 updates
9751503 
Bumps the npm group in /playwright with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@faker-js/faker](https://github.com/faker-js/faker) | `8.4.1` | `10.5.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [lodash-es](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [luxon](https://github.com/moment/luxon) | `3.4.4` | `3.7.2` |
| [slugify](https://github.com/simov/slugify) | `1.6.6` | `1.6.9` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.42.1` | `1.61.1` |
| [eslint](https://github.com/eslint/eslint) | `8.57.0` | `10.7.0` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.29.1` | `2.32.0` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `16.6.2` | `18.2.2` |
| [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) | `6.1.1` | `7.3.0` |
| [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | `16.14.18` | `22.2.9` |


Updates `@faker-js/faker` from 8.4.1 to 10.5.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v8.4.1...v10.5.0)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `lodash-es` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `luxon` from 3.4.4 to 3.7.2
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](moment/luxon@3.4.4...3.7.2)

Updates `slugify` from 1.6.6 to 1.6.9
- [Changelog](https://github.com/simov/slugify/blob/master/CHANGELOG.md)
- [Commits](https://github.com/simov/slugify/commits)

Updates `@playwright/test` from 1.42.1 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.42.1...v1.61.1)

Updates `eslint` from 8.57.0 to 10.7.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.0...v10.7.0)

Updates `eslint-plugin-import` from 2.29.1 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.29.1...v2.32.0)

Updates `eslint-plugin-n` from 16.6.2 to 18.2.2
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@16.6.2...v18.2.2)

Updates `eslint-plugin-promise` from 6.1.1 to 7.3.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-promise/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-promise/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-promise@v6.1.1...v7.3.0)

Updates `npm-check-updates` from 16.14.18 to 22.2.9
- [Release notes](https://github.com/raineorshine/npm-check-updates/releases)
- [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md)
- [Commits](raineorshine/npm-check-updates@v16.14.18...v22.2.9)

---
updated-dependencies:
- dependency-name: "@faker-js/faker"
  dependency-version: 10.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: luxon
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: slugify
  dependency-version: 1.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: eslint-plugin-import
  dependency-version: 2.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint-plugin-n
  dependency-version: 18.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: eslint-plugin-promise
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: npm-check-updates
  dependency-version: 22.2.9
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code major labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code major

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants