Skip to content

chore(deps): bump the dependencies group across 1 directory with 12 updates - #820

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-52d410921f
Open

chore(deps): bump the dependencies group across 1 directory with 12 updates#820
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-52d410921f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 12 updates in the / directory:

Package From To
highlight.js 11.11.1 11.12.0
markdown-it 15.0.0 15.0.2
pretty-bytes 7.1.1 7.2.0
vis-network 10.1.1 10.1.2
filenamify 7.0.2 7.0.3
@openally/httpie 1.1.3 2.0.1
find-my-way 9.8.0 9.10.0
pino 10.3.1 10.4.0
pino-pretty 13.1.3 13.2.0
ts-pattern 5.9.0 5.9.1
ws 8.21.3 8.22.0
open 11.0.1 11.0.4

Updates highlight.js from 11.11.1 to 11.12.0

Release notes

Sourced from highlight.js's releases.

v11.12.0 - Summer, hot and rainy.

Parser Engine:

  • fix(parser) count named capture groups when rewriting backreferences [spokodev][]

New Grammars:

  • add FreeDesktop config file (.desktop / systemd) grammar [gg582][]
  • added 3rd party Cedar grammar to SUPPORTED_LANGUAGES [Dhruv Maniya][]
  • added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES [jiaopengzi][]
  • added 3rd party Djot grammar to SUPPORTED_LANGUAGES [Mark Scherer][]
  • added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES [Ryne Andal][]
  • added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES [Lehlogonolo Poole][]
  • added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES [Romain Beauxis][]
  • added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES [Kaida-Amethyst][]
  • added 3rd party Pkl grammar to SUPPORTED_LANGUAGES [Dan Chao][]
  • added 3rd party RAScript grammar to SUPPORTED_LANGUAGES [Joshua Raphael][]
  • added 3rd party Veryl grammar to SUPPORTED_LANGUAGES [Naoya Hatta][]
  • added 3rd party Why3 grammar to SUPPORTED_LANGUAGES [JGalego][]
  • added 3rd party Xojo grammar to SUPPORTED_LANGUAGES [patricksalo][]
  • referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES [Styx0x6][]

Core Grammars:

  • fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 [Mark Xian][]
  • fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 [Jayesh Bhade][]
  • fix(c, cpp) scope angle-bracket header string to #include, issue #3505 [Pablo][]
  • fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 [David Pavlovschii][]
  • enh(cmake) add block and endblock keywords [Anonymous Maarten][]
  • fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 [Mark Xian][]
  • fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 [Mark Xian][]
  • fix(crystal) stop treating integer division // as a regex literal [Zain Asif][]
  • enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 [Sarath Francis][]
  • enh(css) add corner-shape properties [Hama Tanveer][]
  • enh(css) support six-digit unicode-range values [Konstantin Baltsat][]
  • enh(dart) add highlighting for class and function names [guuido][]
  • enh(dns) highlight registered CAA property tags, issue #4475 [Joey Huang][]
  • enh(dns) improve grammar: character strings, TXT, classes, escapes, addresses [Checconio][]
  • enh(dos) add batch as an alias, issue #4395 [Hashim Khan][]
  • enh(gherkin) update keyword list [Hirse][]
  • enh(gherkin) variables can't contain whitespace [Hirse][]
  • enh(gherkin) docstrings can use backticks [Hirse][]
  • enh(go) recognize binary integer literals [spokodev][]
  • enh(groovy) support underscores in numeric literals [greymoth][]
  • fix(haskell) highlight where in GADT and closed type-family declarations, issue #3753 [Konstantin Baltsat][]
  • enh(java) improve detection of types, including generic and array types [Hannes Wallnoefer][]
  • enh(javascript) add self to built-in variables [Dsaquel][]
  • enh(kotlin) add ktm and ktx aliases [DarkMatter-999][]
  • fix(leaf) fix bug in Leaf keyword highlighting [Francesco Paolo Severino][]
  • fix(lisp) preserve highlighting after quoted multiplication expressions [arturict][]

... (truncated)

Changelog

Sourced from highlight.js's changelog.

Version 11.12.0

Parser Engine:

  • fix(parser) count named capture groups when rewriting backreferences [spokodev][]

New Grammars:

  • add FreeDesktop config file (.desktop / systemd) grammar [gg582][]
  • added 3rd party Cedar grammar to SUPPORTED_LANGUAGES [Dhruv Maniya][]
  • added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES [jiaopengzi][]
  • added 3rd party Djot grammar to SUPPORTED_LANGUAGES [Mark Scherer][]
  • added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES [Ryne Andal][]
  • added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES [Lehlogonolo Poole][]
  • added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES [Romain Beauxis][]
  • added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES [Kaida-Amethyst][]
  • added 3rd party Pkl grammar to SUPPORTED_LANGUAGES [Dan Chao][]
  • added 3rd party RAScript grammar to SUPPORTED_LANGUAGES [Joshua Raphael][]
  • added 3rd party Veryl grammar to SUPPORTED_LANGUAGES [Naoya Hatta][]
  • added 3rd party Why3 grammar to SUPPORTED_LANGUAGES [JGalego][]
  • added 3rd party Xojo grammar to SUPPORTED_LANGUAGES [patricksalo][]
  • referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES [Styx0x6][]

Core Grammars:

  • fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 [Mark Xian][]
  • fix(c) do not highlight C++ std types as built-ins, issue #4103 [Arron Zou][]
  • fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 [Jayesh Bhade][]
  • fix(c, cpp) scope angle-bracket header string to #include, issue #3505 [Pablo][]
  • fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 [David Pavlovschii][]
  • enh(cmake) add block and endblock keywords [Anonymous Maarten][]
  • fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 [Mark Xian][]
  • fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 [Mark Xian][]
  • fix(crystal) stop treating integer division // as a regex literal [Zain Asif][]
  • enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 [Sarath Francis][]
  • enh(css) add corner-shape properties [Hama Tanveer][]
  • enh(css) support six-digit unicode-range values [Konstantin Baltsat][]
  • enh(dart) add highlighting for class and function names [guuido][]
  • enh(dns) highlight registered CAA property tags, issue #4475 [Joey Huang][]
  • enh(dns) improve grammar: character strings, TXT, classes, escapes, addresses [Checconio][]
  • enh(dos) add batch as an alias, issue #4395 [Hashim Khan][]
  • enh(gherkin) update keyword list [Hirse][]
  • enh(gherkin) variables can't contain whitespace [Hirse][]
  • enh(gherkin) docstrings can use backticks [Hirse][]
  • enh(go) recognize binary integer literals [spokodev][]
  • enh(groovy) support underscores in numeric literals [greymoth][]
  • fix(haml) recognize implicit div tag lines starting with .class or #id, issue #3783 [pikammmmm][]
  • fix(haskell) highlight where in GADT and closed type-family declarations, issue #3753 [Konstantin Baltsat][]
  • enh(java) improve detection of types, including generic and array types [Hannes Wallnoefer][]
  • enh(javascript) add self to built-in variables [Dsaquel][]

... (truncated)

Commits
  • f7f7d38 (release) release v11.12.0
  • c4c4728 (docs) FreeDesktop + Kotlin aliases; note extra language override
  • 9142292 bump version to 11.12.0
  • 03d1e7e (chore) rebuild CHANGES.md for 11.12.0
  • ca6bb8e enh(sqf) update to A3 v2.22 (#4460)
  • 1414c96 fix: use Trusted Publishers in publishing pipeline (#4427)
  • 2a9ad7d fix(markdown) don't treat a thematic break as the start of bold text (#4485)
  • 375f3f4 build(deps-dev): bump @​rollup/plugin-commonjs from 28.0.1 to 29.0.3 (#4481)
  • 2ce1706 build(deps-dev): bump del from 8.0.0 to 8.0.1 (#4484)
  • 72084b5 fix(ruby): don't treat scope resolution :: as symbols (#4463)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for highlight.js since your current version.


Updates markdown-it from 15.0.0 to 15.0.2

Changelog

Sourced from markdown-it's changelog.

[15.0.2] - 2026-09-11

Security

  • Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.

[15.0.1] - 2026-08-27

Changed

  • doc: replace oxide theme with custom one.

Fixed

  • Fixed code span parsing after lookaheads for unclosed link and image labels, #1201.
  • Preserve spaces in code spans whose content consists only of spaces, #1180.
  • Preserve brackets around IPv6 address literals when normalizing links, #1204.

Security

  • Fixed quadratic complexity when replacing fuzzy links.
  • Fixed quadratic complexity in scheme backscan (inline linkify rule).
Commits
  • 3c51991 15.0.2 released
  • cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
  • 1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
  • 924b203 15.0.1 released
  • 25c3895 Changelog update
  • aaadcfa Fix quadratic complexity in scheme backscan (inline linkify rule)
  • 09fa071 Fix quadratic complexity when replacing fuzzy links
  • 988c82b fix: don't strip spaces from all-space code spans
  • 26b9a7b Polish previous commit
  • e8c6688 fix: preserve IPv6 brackets in normalizeLink (#1204)
  • Additional commits viewable in compare view

Updates pretty-bytes from 7.1.1 to 7.2.0

Release notes

Sourced from pretty-bytes's releases.

v7.2.0

  • Fix formatting edge cases and validate options 4e800a3

sindresorhus/pretty-bytes@v7.1.3...v7.2.0

v7.1.3

  • Fix fractional digit formatting when localization is disabled (#92) 5cb9c95

sindresorhus/pretty-bytes@v7.1.2...v7.1.3

v7.1.2

  • Fix rounding across unit boundaries 059c979

sindresorhus/pretty-bytes@v7.1.1...v7.1.2

Commits

Updates vis-network from 10.1.1 to 10.1.2

Release notes

Sourced from vis-network's releases.

v10.1.2

10.1.2 (2026-08-19)

Bug Fixes

Commits

Updates filenamify from 7.0.2 to 7.0.3

Release notes

Sourced from filenamify's releases.

v7.0.3

  • Fix Windows reserved device name handling 4eb7d0c

sindresorhus/filenamify@v7.0.2...v7.0.3

Commits

Updates @openally/httpie from 1.1.3 to 2.0.1

Release notes

Sourced from @​openally/httpie's releases.

v2.0.1

What's Changed

Full Changelog: OpenAlly/httpie@v2.0.0...v2.0.1

v2.0.0

What's Changed

Full Changelog: OpenAlly/httpie@v1.1.4...v2.0.0

v1.1.4

What's Changed

Full Changelog: OpenAlly/httpie@v1.1.3...v1.1.4

Commits
  • ccfb6a1 2.0.1
  • b260c24 chore: fix vulnerabilities (#14)
  • 49bb862 Merge pull request #13 from OpenAlly/update-documentation
  • 328ca48 2.0.0
  • 969ebac Merge pull request #12 from OpenAlly/improve-implementation
  • cf9de75 refactor(response): replace HttpieResponseHandler with internal functions
  • 14dcf3c chore: update dependencies
  • f4db16a refactor: use custom and minimal LRU-cache implementation
  • b054d2b refactor(typescript): migrate to esm-ts-next
  • 5bf5edf refactor: revamp folders and tests architecture
  • Additional commits viewable in compare view

Updates find-my-way from 9.8.0 to 9.10.0

Release notes

Sourced from find-my-way's releases.

v9.10.0

What's Changed

New Contributors

Full Changelog: delvedor/find-my-way@v9.9.0...v9.10.0

v9.9.0

What's Changed

Full Changelog: delvedor/find-my-way@v9.8.0...v9.9.0

Commits
  • c47c38d Bumped v9.10.0
  • 7115731 perf: make route registration linear instead of quadratic (#457)
  • 91cb96b Merge pull request #465 from delvedor/fix/compiled-duplicate-slashes-querystring
  • b2cdb40 perf: validate absolute URLs without throwing (#460)
  • ab85d67 fix: do not remove duplicate slashes from the querystring (#463)
  • 7633b66 fix: use strict mode in all generated functions (#464)
  • cf0c300 feat: compiler mode for route lookup (#462)
  • ea13c2b fix(constrainer): guard strategy lookups against inherited Object prototype p...
  • 491be74 fix: do not leak a global from the compiled constraint matcher (#458)
  • 0eb2159 fix: bound regex host lookup cache (#454)
  • Additional commits viewable in compare view

Updates pino from 10.3.1 to 10.4.0

Release notes

Sourced from pino's releases.

v10.4.0

What's Changed

... (truncated)

Commits
  • b29dbe9 Bumped v10.4.0
  • 6ba157b docs: fix the pino-pretty flush explanation after thread-stream#198 (#2524)
  • 6429c14 docs: Note that serializers run on child bindings at creation time (#2518)
  • 6c71bc9 Add bindings method to browser logger (#2504)
  • b557f72 ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (#2525)
  • 1de1212 docs: document the APIs that are unavailable in the browser (#2521)
  • af2fe10 Delete .github/dependabot.yml (#2517)
  • 5aa6230 build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (#2515)
  • 6f5af07 build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (#2513)
  • 2ffe576 ci: check pull requests target main (#2500)
  • Additional commits viewable in compare view

Updates pino-pretty from 13.1.3 to 13.2.0

Release notes

Sourced from pino-pretty's releases.

v13.2.0

What's Changed

New Contributors

Full Changelog: pinojs/pino-pretty@v13.1.3...v13.2.0

Commits
  • 6776301 v13.2.0
  • ce57771 fix: support nested keys in the include filter (#677)
  • 0ebe244 build(deps): bump actions/setup-node from 6 to 7 (#673)
  • 5b7c15c docs: add security policy (#670)
  • 253c18b ignore ai
  • 87ed39f fix: strip unsafe terminal control characters (#671)
  • a93ed10 build(deps-dev): bump @​types/node from 25.9.4 to 26.0.1 (#669)
  • 4e11bd7 build(deps): bump actions/cache from 5 to 6 (#666)
  • 7bcb31a build(deps): bump actions/dependency-review-action from 4 to 5 (#661)
  • 6631345 build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 (#659)
  • Additional commits viewable in compare view

Updates ts-pattern from 5.9.0 to 5.9.1

Release notes

Sourced from ts-pattern's releases.

v5.9.1

Faster type checking

Large .exhaustive() matches type-check much faster. Fast paths for primitive patterns and an early exit for object patterns cut type instantiations by about 70-80% on big literal unions and about 35% on discriminated unions. This is the work of @​gwkline in #357, shipped through #372. Thank you Gavin!

  • literal union, 200 members: 788,205 → 240,909 instantiations (−69%)
  • literal union, 400 members: 2,470,005 → 447,609 (−82%)
  • discriminated union, 20 variants: 488,507 → 319,005 (−35%)

Error messages on invalid code

An invalid 2-argument .with() now reports "No overload matches this call" (TS2769). It is usually on the same spot as before. Two cases move it to the .with name: a pattern with 2+ invalid values (one error listing both), and a second argument that isn't a function. Valid code type-checks the same.

What's Changed

New Contributors

Full Changelog: gvergnaud/ts-pattern@v5.9.0...v5.9.1

Commits
  • 45dcdc7 Merge pull request #381 from gvergnaud/sb/release
  • 914c8a6 Merge pull request #361 from hasanefeuygun/fix/picomatch-build-compat
  • fd9e4af chore(release): 5.9.1
  • d8e79d6 Merge pull request #372 from gvergnaud/perf/type-instantiations
  • 3c7d37b chore: add a script to compare editor completions with main
  • b65d062 fix: no Symbol members in object pattern key completions
  • df37263 fix: keep string literal completions in patterns before the handler is written
  • fd96d72 fix: keep P.when inference in fast .with()
  • 4ec0211 bench: add compile-time benchmarks
  • 168f964 docs: remove duplicated JSDoc comment on .with()
  • Additional commits viewable in compare view

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

  • Introduced the protocols option (8b918b01).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).
Commits
  • 297202c [dist] 8.22.0
  • 8b918b0 [feature] Introduce the protocols option
  • 73e03eb [ci] Update actions/setup-node action to v7
  • d9b8954 [fix] Change the ready state after validating the arguments (#2337)
  • See full diff in compare view

Updates open from 11.0.1 to 11.0.4

Release notes

Sourced from open's releases.

v11.0.4

  • Fix browser/browserPrivate not detecting Safari or Brave as the default browser 6ae6196

sindresorhus/open@v11.0.3...v11.0.4

v11.0.3

  • Fix Windows launches being killed when the parent process exits 734b821

sindresorhus/open@v11.0.2...v11.0.3

v11.0.2

  • Update dependencies 6f006ad

sindresorhus/open@v11.0.1...v11.0.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter ...

Description has been truncated

@dependabot
chore(deps): bump the dependencies group across 1 directory with 12 u…
0fdeb6b 
…pdates

Bumps the dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `11.11.1` | `11.12.0` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.0` | `15.0.2` |
| [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) | `7.1.1` | `7.2.0` |
| [vis-network](https://github.com/visjs/vis-network) | `10.1.1` | `10.1.2` |
| [filenamify](https://github.com/sindresorhus/filenamify) | `7.0.2` | `7.0.3` |
| [@openally/httpie](https://github.com/OpenAlly/httpie) | `1.1.3` | `2.0.1` |
| [find-my-way](https://github.com/delvedor/find-my-way) | `9.8.0` | `9.10.0` |
| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |
| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.1.3` | `13.2.0` |
| [ts-pattern](https://github.com/gvergnaud/ts-pattern) | `5.9.0` | `5.9.1` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |
| [open](https://github.com/sindresorhus/open) | `11.0.1` | `11.0.4` |



Updates `highlight.js` from 11.11.1 to 11.12.0
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
- [Commits](highlightjs/highlight.js@11.11.1...11.12.0)

Updates `markdown-it` from 15.0.0 to 15.0.2
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@15.0.0...15.0.2)

Updates `pretty-bytes` from 7.1.1 to 7.2.0
- [Release notes](https://github.com/sindresorhus/pretty-bytes/releases)
- [Commits](sindresorhus/pretty-bytes@v7.1.1...v7.2.0)

Updates `vis-network` from 10.1.1 to 10.1.2
- [Release notes](https://github.com/visjs/vis-network/releases)
- [Changelog](https://github.com/visjs/vis-network/blob/master/HISTORY.md)
- [Commits](visjs/vis-network@v10.1.1...v10.1.2)

Updates `filenamify` from 7.0.2 to 7.0.3
- [Release notes](https://github.com/sindresorhus/filenamify/releases)
- [Commits](sindresorhus/filenamify@v7.0.2...v7.0.3)

Updates `@openally/httpie` from 1.1.3 to 2.0.1
- [Release notes](https://github.com/OpenAlly/httpie/releases)
- [Commits](OpenAlly/httpie@v1.1.3...v2.0.1)

Updates `find-my-way` from 9.8.0 to 9.10.0
- [Release notes](https://github.com/delvedor/find-my-way/releases)
- [Commits](delvedor/find-my-way@v9.8.0...v9.10.0)

Updates `pino` from 10.3.1 to 10.4.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.1...v10.4.0)

Updates `pino-pretty` from 13.1.3 to 13.2.0
- [Release notes](https://github.com/pinojs/pino-pretty/releases)
- [Commits](pinojs/pino-pretty@v13.1.3...v13.2.0)

Updates `ts-pattern` from 5.9.0 to 5.9.1
- [Release notes](https://github.com/gvergnaud/ts-pattern/releases)
- [Commits](gvergnaud/ts-pattern@v5.9.0...v5.9.1)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

Updates `open` from 11.0.1 to 11.0.4
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v11.0.1...v11.0.4)

---
updated-dependencies:
- dependency-name: highlight.js
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: markdown-it
  dependency-version: 15.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pretty-bytes
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: vis-network
  dependency-version: 10.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: filenamify
  dependency-version: 7.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@openally/httpie"
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: find-my-way
  dependency-version: 9.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pino-pretty
  dependency-version: 13.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ts-pattern
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: open
  dependency-version: 11.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
@changeset-bot

changeset-bot Bot commented Oct 19, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 0fdeb6b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Oct 19, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​openally/​httpie@​1.1.3 ⏵ 2.0.177 +2100100 +192 +3100
Updatednpm/​highlight.js@​11.11.1 ⏵ 11.12.099 +110010085100
Updatednpm/​markdown-it@​15.0.0 ⏵ 15.0.2100 +1100 +287 +193 +2100
Updatednpm/​open@​11.0.1 ⏵ 11.0.4100 +1100100 +187 -4100
Addednpm/​ts-pattern@​5.9.110010010087100
Updatednpm/​find-my-way@​9.8.0 ⏵ 9.10.09910010088 -3100
Addednpm/​pino-pretty@​13.2.09910010089100
Updatednpm/​ws@​8.21.3 ⏵ 8.22.09910010090100
Addednpm/​pino@​10.4.09810010093100
Updatednpm/​vis-network@​10.1.1 ⏵ 10.1.210010010093 +2100

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants