Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 21, 2025

Bumps the npm_and_yarn group with 3 updates in the /tests/e2e directory: brace-expansion, form-data and jest-puppeteer.

Updates brace-expansion from 1.1.11 to 1.1.12

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Updates form-data from 2.3.3 to 4.0.4

Release notes

Sourced from form-data's releases.

v4.0.1

Fixes

  • npmignore temporary build files (#532)
  • move util.isArray to Array.isArray (#564)

Tests

  • migrate from travis to GHA

v4.0.0

  • Merge pull request #382 from wxt2005/custom-stream 8968e01
  • Fix typo e705c0a
  • Merge branch 'master' of github.com:form-data/form-data into custom-stream b7b7dee
  • Update README for custom stream behavior 6dd8624
  • Handle custom stream a3e191d

form-data/form-data@v3.0.1...v4.0.0

v3.0.2

Fixes

  • npmignore temporary build files (#532)
  • move util.isArray to Array.isArray (#564)

Tests

  • migrate from travis to GHA

v3.0.1

  • feat: add setBoundary method 55d90ce
  • Merge pull request #451 from arku/patch-1 d702625
  • Fix typo: ads -> adds 714ac8b

form-data/form-data@v3.0.0...v3.0.1

v2.5.2

Fixes

  • Buffer.from and Buffer.alloc require node 4+
  • npmignore temporary build files (#532)
  • move util.isArray to Array.isArray (#564)

Tests

  • migrate from travis to GHA

Dev Improvements

  • Fixed error in the documentations as indicated in #439
  • Added remaining combined-stream options to typedef
  • Bumped rimraf to 2.7.1 (dev-dep)
  • Added constructor options to TypeScript defs
  • Fixed error in callback signatures

Added Types

  • Added TS types

... (truncated)

Changelog

Sourced from form-data's changelog.

v4.0.4 - 2025-07-16

Commits

  • [meta] add auto-changelog 811f682
  • [Tests] handle predict-v8-randomness failures in node < 17 and node > 23 1d11a76
  • [Fix] Switch to using crypto random for boundary values 3d17230
  • [Tests] fix linting errors 5e34080
  • [meta] actually ensure the readme backup isn’t published 316c82b
  • [Dev Deps] update @ljharb/eslint-config 58c25d7
  • [meta] fix readme capitalization 2300ca1

v4.0.3 - 2025-06-05

Fixed

Commits

  • [eslint] use a shared config 426ba9a
  • [eslint] fix some spacing issues 2094191
  • [Refactor] use hasown 81ab41b
  • [Fix] validate boundary type in setBoundary() method 8d8e469
  • [Tests] add tests to check the behavior of getBoundary with non-strings 837b8a1
  • [Dev Deps] remove unused deps 870e4e6
  • [meta] remove local commit hooks e6e83cc
  • [Dev Deps] update eslint 4066fd6
  • [meta] fix scripts to use prepublishOnly c4bbb13

v4.0.2 - 2025-02-14

Merged

Fixed

Commits

  • Merge tags v2.5.3 and v3.0.3 92613b9
  • [Tests] migrate from travis to GHA 806eda7
  • [Tests] migrate from travis to GHA 8fdb3bc

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for form-data since your current version.


Updates jest-puppeteer from 4.4.0 to 11.0.0

Release notes

Sourced from jest-puppeteer's releases.

v11.0.0

Features

BREAKING CHANGES

  • Node.js v16 is not supported

v10.1.4

Bug Fixes

  • revert types resolution from [@jest](https://github.com/jest)/globals (#604) (4bc420b)

v10.1.3

Bug Fixes

v10.1.2

Bug Fixes

  • fix types resolution for expect-puppeteer (#599) (37e3271)

v10.1.1

No release notes provided.

v10.1.0

Features

v10.0.1

Bug Fixes

... (truncated)

Changelog

Sourced from jest-puppeteer's changelog.

11.0.0 (2024-12-21)

Features

  • add support for Node.js v22-23 (d67228e)

BREAKING CHANGES

  • Node.js v16 is not supported

10.1.4 (2024-10-26)

Note: Version bump only for package jest-puppeteer

10.1.3 (2024-10-22)

Note: Version bump only for package jest-puppeteer

10.1.2 (2024-10-10)

Note: Version bump only for package jest-puppeteer

10.1.1 (2024-09-06)

Note: Version bump only for package jest-puppeteer

10.1.0 (2024-08-17)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2025
@sonarqubecloud
Copy link

@odeimaiz odeimaiz self-requested a review July 22, 2025 06:31
@odeimaiz odeimaiz self-assigned this Jul 22, 2025
@odeimaiz odeimaiz removed their request for review July 22, 2025 06:31
@odeimaiz odeimaiz added this to the Engage milestone Jul 22, 2025
@odeimaiz odeimaiz modified the milestones: Engage, Voyager Aug 4, 2025
@mergify
Copy link
Contributor

mergify bot commented Aug 22, 2025

🧪 CI Insights

Here's what we observed from your CI run for d3f8a67.

❌ Job Failures

Pipeline Job Health on master Retries 🔍 CI Insights 📄 Logs
CI system-tests Healthy 0 View View

@odeimaiz odeimaiz modified the milestones: Voyager, Narsil Sep 1, 2025
Bumps the npm_and_yarn group with 3 updates in the /tests/e2e directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [form-data](https://github.com/form-data/form-data) and [jest-puppeteer](https://github.com/argos-ci/jest-puppeteer/tree/HEAD/packages/jest-puppeteer).


Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

Updates `form-data` from 2.3.3 to 4.0.4
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/commits/v4.0.4)

Updates `jest-puppeteer` from 4.4.0 to 11.0.0
- [Release notes](https://github.com/argos-ci/jest-puppeteer/releases)
- [Changelog](https://github.com/argos-ci/jest-puppeteer/blob/main/packages/jest-puppeteer/CHANGELOG.md)
- [Commits](https://github.com/argos-ci/jest-puppeteer/commits/v11.0.0/packages/jest-puppeteer)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: jest-puppeteer
  dependency-version: 11.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@sanderegg sanderegg force-pushed the dependabot/npm_and_yarn/tests/e2e/npm_and_yarn-47ce2aa328 branch from ad60759 to b1e1f9f Compare September 11, 2025 06:06
@sonarqubecloud
Copy link

@pcrespov pcrespov closed this Oct 3, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 3, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/tests/e2e/npm_and_yarn-47ce2aa328 branch October 3, 2025 15:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants