chore(deps): update devdependencies (non-major) (patch) - autoclosed by mend-for-github-com[bot] · Pull Request #1450 · Vonage/vivid

mend-for-github-com · 2025-07-28T02:40:37Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@open-wc/semantic-dom-diff (source)	`0.19.4` -> `0.19.9`
@storybook/addon-a11y (source)	`6.3.10` -> `6.3.13`
@storybook/addon-actions (source)	`6.3.10` -> `6.3.13`
@storybook/addon-controls (source)	`6.3.10` -> `6.3.13`
@storybook/addon-docs (source)	`6.3.10` -> `6.3.13`
@storybook/addon-viewport (source)	`6.3.10` -> `6.3.13`
@storybook/addons (source)	`6.3.10` -> `6.3.13`
@storybook/theming (source)	`6.3.10` -> `6.3.13`
@storybook/web-components (source)	`6.3.10` -> `6.3.13`
@types/ramda (source)	`0.27.44` -> `0.27.66`
@types/serve-handler (source)	`6.1.1` -> `6.1.4`
@whitespace/storybook-addon-html	`5.0.0` -> `5.0.3`
chai (source)	`4.3.4` -> `4.3.10`
chai-a11y-axe (source)	`1.3.1` -> `1.3.2`
chokidar	`3.5.2` -> `3.5.3`
command-line-args	`5.2.0` -> `5.2.1`
command-line-usage	`6.1.1` -> `6.1.3`
depcheck	`1.4.2` -> `1.4.7`
eslint-plugin-import	`2.25.2` -> `2.25.4`
fibers	`5.0.0` -> `5.0.3`
glob	`7.2.0` -> `7.2.3`
got	`11.8.2` -> `11.8.6`
husky	`7.0.2` -> `7.0.4`
immer	`9.0.6` -> `9.0.21`
jimp	`0.16.1` -> `0.16.13`
karma-chrome-launcher	`3.1.0` -> `3.1.1`
karma-file-fixtures-preprocessor	`3.0.1` -> `3.0.2`
karma-firefox-launcher	`2.1.1` -> `2.1.3`
lint-staged	`11.2.0` -> `11.2.6`
minimist	`1.2.6` -> `1.2.8`
standard-version	`9.3.1` -> `9.3.2`
style-dictionary	`3.0.1` -> `3.0.3`
stylelint-no-unsupported-browser-features	`5.0.2` -> `5.0.4`
ts-loader	`9.2.5` -> `9.2.9`
tslib (source)	`2.3.0` -> `2.3.1`
web-component-analyzer	`1.1.6` -> `1.1.7`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

open-wc/open-wc (@open-wc/semantic-dom-diff)

`v0.19.9`

Compare Source

Patch Changes

9e49e7a: fix(deps): update @web/* dependencies

`v0.19.8`

Compare Source

Patch Changes

2629244: Change return type from Assertion to Promise

`v0.19.7`

Compare Source

Patch Changes

735b009: Avoid saving unchanged snapshots

`v0.19.6`

Patch Changes

a7e9c20: chore(semantic-dom-diff): updates dependencies

`v0.19.5`

Patch Changes

b9b11ad: support snapshot testing with Web Test Runner
b6e868d: Use latest dependencies
40837d1: - use latest axe-core
- allow not required attributes in role testing
580ce0e: Snapshot testing with WTR updated to not modify the snapshot files running the test

storybookjs/storybook (@storybook/addon-a11y)

`v6.3.13`

Compare Source

Dependency Upgrades

Bump cli-table3 to fix colors bug (#17180)

`v6.3.12`

Compare Source

Bug Fixes

CLI: Force sb upgrade to use latest version of npm-check-updates (#16336)

`v6.3.11`

Compare Source

Bug Fixes

CLI: Fix CRA version detection crash (#16308)

whitespace-se/storybook-addon-html (@whitespace/storybook-addon-html)

chaijs/chai (chai)

`v4.3.10`

Compare Source

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

upgrade all dependencies by @keithamus in https://github.com/chaijs/chai/pull/1540

Full Changelog: chaijs/chai@v4.3.9...v4.3.10

`v4.3.9`

Compare Source

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: chaijs/chai@v4.3.8...v4.3.9

`v4.3.8`

Compare Source

What's Changed

4.x.x: Fix link to commit logs on GitHub by @bugwelle in https://github.com/chaijs/chai/pull/1487
build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @dependabot in https://github.com/chaijs/chai/pull/1488
Small typo in test.js by @mavaddat in https://github.com/chaijs/chai/pull/1459
docs: specify return type of objDisplay by @scarf005 in https://github.com/chaijs/chai/pull/1490
Update CONTRIBUTING.md by @matheus-rodrigues00 in https://github.com/chaijs/chai/pull/1521
Fix: update exports.version to current version by @peanutenthusiast in https://github.com/chaijs/chai/pull/1534

New Contributors

@bugwelle made their first contribution in https://github.com/chaijs/chai/pull/1487
@mavaddat made their first contribution in https://github.com/chaijs/chai/pull/1459
@scarf005 made their first contribution in https://github.com/chaijs/chai/pull/1490
@matheus-rodrigues00 made their first contribution in https://github.com/chaijs/chai/pull/1521
@peanutenthusiast made their first contribution in https://github.com/chaijs/chai/pull/1534

Full Changelog: chaijs/chai@v4.3.7...v4.3.8

`v4.3.7`

Compare Source

What's Changed

fix: deep-eql bump package to support symbols comparison by @snewcomer in https://github.com/chaijs/chai/pull/1483

Full Changelog: chaijs/chai@v4.3.6...v4.3.7

`v4.3.6`

Compare Source

Update loupe to 2.3.1

`v4.3.5`

Compare Source

build chaijs fca5bb1
build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446) 747eb4e
fix package.json exports 022c2fa
fix: package.json - deprecation warning on exports field (#1400) 5276af6
feat: use chaijs/loupe for inspection (#1401) (#1407) c8a4e00

open-wc/open-wc (chai-a11y-axe)

`v1.3.2`

Patch Changes

40837d1: - use latest axe-core
- allow not required attributes in role testing
6940a3c: fix: override bad publication

paulmillr/chokidar (chokidar)

`v3.5.3`

Compare Source

What's Changed

types: use correct type def for ignored option by @iheyunfei in https://github.com/paulmillr/chokidar/pull/1140
Update chokidar-cli link in README.md by @mcecode in https://github.com/paulmillr/chokidar/pull/1142
handle promise rejection when a symlink's target does not exist. Fixe… by @nicks in https://github.com/paulmillr/chokidar/pull/1010
fix: improve add and unwatch TypeScript definitions by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1157
Enable dtslinting by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1158
style: delete yarn.lock by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1159

New Contributors

@iheyunfei made their first contribution in https://github.com/paulmillr/chokidar/pull/1140
@mcecode made their first contribution in https://github.com/paulmillr/chokidar/pull/1142
@nicks made their first contribution in https://github.com/paulmillr/chokidar/pull/1010
@alan-agius4 made their first contribution in https://github.com/paulmillr/chokidar/pull/1157

Full Changelog: paulmillr/chokidar@3.5.2...3.5.3

75lb/command-line-args (command-line-args)

`v5.2.1`

Compare Source

75lb/command-line-usage (command-line-usage)

`v6.1.3`

Compare Source

`v6.1.2`

Compare Source

depcheck/depcheck (depcheck)

`v1.4.7`

Compare Source

Full Changelog

Fixed bugs:

False positive missing dependency with SCSS files on Windows #838
A dynamic import with template string literal is not found by depcheck #779

Merged pull requests:

Update babel packages to latest #843 (legobeat)
Support package.json subpath imports #836 (dobesv)
--quiet: don't print an empty line if nothing to report #835 (seansfkelley)
chore: bump dependencies #801 (legobeat)

`v1.4.6`

Compare Source

Full Changelog

Fixed bugs:

False positive missing dependency with SCSS files on Windows #838
A dynamic import with template string literal is not found by depcheck #779

Merged pull requests:

Update babel packages to latest #843 (legobeat)
Support package.json subpath imports #836 (dobesv)
--quiet: don't print an empty line if nothing to report #835 (seansfkelley)
chore: bump dependencies #801 (legobeat)

`v1.4.5`

Compare Source

Full Changelog

Closed issues:

Add explicitResourceManagement to default TS babel config #833
Flag to make logs readable and less verbose #759

Merged pull requests:

Add explicitResourceManagement to TypeScript babel settings #834 (jtbandes)
Support projects field in jest configuration #831 (dobesv)
Handle scoped package bin with default name #830 (dobesv)
feat: add --quiet flag to suppress No depcheck issue messages #829 (openam)
fix(sass): don't detect transitive dependencies #827 (miluoshi)
feat(tsconfig): support tsconfig.json files with comments #826 (miluoshi)
fix(storybook): parse package names out of addons array #825 (miluoshi)

`v1.4.3`

Compare Source

Full Changelog

Fixed bugs:

Next.js webpack configuration detection failed #805
Missing = Using #794
Breaks when using satisfies operator in TypeScript #768
Unable to analyze next.config.js in a ESM package #762
Suddenly stopped working #750
mjs and cjs extensions not detected by default #733
Unexpected token '.' #715
Depcheck started returning incorrect unused dependencies without any changes #687
[false positives] SCSS variables are tracked as packages, while they are not #633

Closed issues:

Upcoming releases #799
Add an option to clear the cache #755
Support babel config that exports a function #723
Support graphql imports #722
Support typescript "extends" and "types" fields #720
Support babel preset scope shorthand #719
Allow marking a directory to pass the isModule check #711
Support React 17 #697

Merged pull requests:

fix: typescript parser add importAssertions #823 (simllll)
feat(jest): add support for jest.config.mjs and jest.config.ts #820 (miluoshi)
Fix badges #819 (dnicolson)
Add support for .cts, .mts file extensions #817 (derekcicerone)
Webpack special: add a fakePath as dir in fakeContext for next.js #816 (znarf)
Fix dynamic import with a template literal #779 #810 (ArtskydJ)
feat: Clear content at end. #809 (regseb)
Support Babel presets/plugins from scoped packages #808 (miluoshi)
add node 20 to test matrix #804 (a-rothwell)
Convert travis to github actions #803 (a-rothwell)
Upgrade Babel parser to support Typescript 5.0 #788 (Karfroth)
Load next config with import instead of require #786 (cprussin)
Fix parsing of scoped package names in jest dependencies #785 (jtbandes)
Fix parsing Vue 3 files with Composition API and TypeScript #778 (vlad-psh)
Add parsers for mjs and cjs extensions #773 (augustobmoura)
add esm support for bin packages #760 (dword-design)
feat: ignore url imports #756 (rexxars)
Adds Vue3 setup support #749 (devan1011)
convert object to array for babel support #745 (Robbilie)
Fix typos #741 (friederbluemle)
Parse storybook configuration for dependencies #727 (dobesv)
Add support for graphql imports #726 (dobesv)
Add support for some tsconfig.json fields #725 (dobesv)
If babel config is a function, call it to get config #724 (dobesv)
Tweak Parser typescript definition #718 (dobesv)
feat: use current sass package to parse scss files #710 (miluoshi)
feat(jest): add support for jest.config.cjs #682 (shian15810)

import-js/eslint-plugin-import (eslint-plugin-import)

`v2.25.4`

Compare Source

Fixed

importType: avoid crashing on a non-string' ([#2305], thanks [@ljharb])
[first]: prevent crash when parsing angular templates ([#2210], thanks [@ljharb])
importType: properly resolve @/*-aliased imports as internal ([#2334], thanks [@ombene])
[named]/ExportMap: handle named imports from CJS modules that use dynamic import ([#2341], thanks [@ludofischer])

Changed

[no-default-import]: report on the token "default" instead of the entire node ([#2299], thanks [@pmcelhaney])
[Docs] [order]: Remove duplicate mention of default ([#2280], thanks [@johnthagen])
[Deps] update eslint-module-utils

`v2.25.3`

Compare Source

Fixed

[extensions]: ignore unresolveable type-only imports ([#2270], [#2271], thanks [@jablko])
importType: fix isExternalModule calculation ([#2282], thanks [@mx-bernhard])
[no-import-module-exports]: avoid false positives with a shadowed module or exports ([#2297], thanks [@ljharb])

Changed

[Docs] [order]: add type to the default groups ([#2272], thanks [@charpeni])
[readme] Add note to TypeScript docs to install appropriate resolver ([#2279], thanks [@johnthagen])
[Refactor] importType: combine redundant isScoped and isScopedModule (thanks [@ljharb])
[Docs] HTTP => HTTPS ([#2287], thanks [@Schweinepriester])

laverdet/node-fibers (fibers)

`v5.0.2`

Compare Source

`v5.0.1`

Compare Source

isaacs/node-glob (glob)

`v7.2.3`

Compare Source

`v7.2.2`

Compare Source

sindresorhus/got (got)

`v11.8.6`

Compare Source

Destroy request object after successful response

`v11.8.5`

Compare Source

Backport security fix sindresorhus/got@861ccd9
- [CVE-2022-339

Configuration

📅 Schedule: Branch creation - "before 5am every weekday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

sonarqubecloud · 2025-08-01T03:12:34Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

mend-for-github-com bot added the patch release label Jul 28, 2025

mend-for-github-com bot force-pushed the whitesource-remediate/patch-dev-dependencies-non-major branch 3 times, most recently from 1498f33 to 9d4428b Compare July 31, 2025 03:05

chore(deps): update devdependencies (non-major)

c659e59

mend-for-github-com bot force-pushed the whitesource-remediate/patch-dev-dependencies-non-major branch from 9d4428b to c659e59 Compare August 1, 2025 03:11

mend-for-github-com bot changed the title ~~chore(deps): update devdependencies (non-major) (patch)~~ chore(deps): update devdependencies (non-major) (patch) - autoclosed Aug 4, 2025

mend-for-github-com bot closed this Aug 4, 2025

mend-for-github-com bot deleted the whitesource-remediate/patch-dev-dependencies-non-major branch August 4, 2025 02:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update devdependencies (non-major) (patch) - autoclosed#1450

chore(deps): update devdependencies (non-major) (patch) - autoclosed#1450
mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/patch-dev-dependencies-non-major

mend-for-github-com bot commented Jul 28, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Aug 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

mend-for-github-com bot commented Jul 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Dependency Upgrades

Bug Fixes

Bug Fixes

What's Changed

What's Changed

New Contributors

What's Changed

Patch Changes

What's Changed

New Contributors

Fixed

Changed

Fixed

Changed

Configuration

Uh oh!

sonarqubecloud bot commented Aug 1, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

mend-for-github-com bot commented Jul 28, 2025 •

edited

Loading