deps: bump the security-updates group with 27 updates by dependabot[bot] · Pull Request #971 · suites-dev/suites

dependabot · 2026-02-05T17:49:04Z

Bumps the security-updates group with 27 updates:

Package	From	To
@babel/traverse	`7.28.3`	`7.29.0`
@eslint/js	`9.8.0`	`9.39.2`
@nestjs/common	`10.4.20`	`11.1.13`
@types/node	`22.19.1`	`25.2.1`
@typescript-eslint/eslint-plugin	`7.18.0`	`8.54.0`
@typescript-eslint/parser	`7.18.0`	`8.54.0`
axios	`1.8.2`	`1.13.4`
eslint	`9.8.0`	`9.39.2`
globals	`16.5.0`	`17.3.0`
husky	`8.0.3`	`9.1.7`
inversify	`6.0.1`	`7.11.0`
jest	`29.7.0`	`30.2.0`
@types/jest	`29.5.12`	`30.0.0`
jest-environment-node	`29.1.0`	`30.2.0`
lerna	`8.2.4`	`9.0.3`
lint-staged	`16.2.6`	`16.2.7`
madge	`7.0.0`	`8.0.0`
prettier	`3.6.2`	`3.8.1`
rimraf	`5.0.10`	`6.1.2`
sinon	`16.1.3`	`21.0.1`
@types/sinon	`10.0.20`	`21.0.0`
tar	`6.2.1`	`7.5.7`
ts-jest	`29.4.5`	`29.4.6`
typescript	`5.2.2`	`5.9.3`
@vitest/coverage-v8	`1.6.1`	`4.0.18`
@vitest/spy	`1.6.1`	`4.0.18`
vitest	`1.6.1`	`4.0.18`

Updates @babel/traverse from 7.28.3 to 7.29.0

Release notes

Sourced from @babel/traverse's releases.

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types

#17750 [7.x backport] Add attributes import declaration builder (@JLHwung)

babel-standalone

#17663 [7.x backport] feat(standalone): export async transform (@JLHwung)

#17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser

#17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)

#17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)

babel-traverse

#17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)

babel-plugin-transform-block-scoping, babel-traverse

#17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3

#17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

@magic-akari

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

... (truncated)

Commits

aa8394e v7.29.0
84366a8 fix(traverse): provide a hub when traversing a File or Program and no parentP...
229eb45 [7.x backport] fix: Rename switch discriminant references when body creates s...
d7f4008 v7.28.6
905bc22 fix: lint errors in main branch (#17612)
a03e2b6 fix: path.evaluate correctly returns confident (#17584)
aac2c37 chore: Use Gulpfile.mts (#17579)
65c4a6b [Babel 8] fix: Improve traverse types (#17574)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/traverse since your current version.

Updates @eslint/js from 9.8.0 to 9.39.2

Release notes

Sourced from @eslint/js's releases.

v9.39.2

Bug Fixes

5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

c43ce24 chore: package.json update for @eslint/js release (Jenkins)

4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

v9.39.1

Bug Fixes

650753e fix: Only pass node to JS lang visitor methods (#20283) (Nicholas C. Zakas)

Documentation

51b51f4 docs: add a section on when to use extends vs cascading (#20268) (Tanuj Kanti)

b44d426 docs: Update README (GitHub Actions Bot)

Chores

92db329 chore: update @eslint/js version to 9.39.1 (#20284) (Francesco Trotta)

c7ebefc chore: package.json update for @eslint/js release (Jenkins)

61778f6 chore: update eslint-config-eslint dependency @eslint/js to ^9.39.0 (#20275) (renovate[bot])

d9ca2fc ci: Add rangeStrategy to eslint group in renovate config (#20266) (唯然)

009e507 test: fix version tests for ESLint v10 (#20274) (Milos Djermanovic)

v9.39.0

Features

cc57d87 feat: update error loc to key in no-dupe-class-members (#20259) (Tanuj Kanti)

126552f feat: update error location in for-direction and no-dupe-args (#20258) (Tanuj Kanti)

167d097 feat: update complexity rule to highlight only static block header (#20245) (jaymarvelz)

Bug Fixes

15f5c7c fix: forward traversal step.args to visitors (#20253) (jaymarvelz)

5a1a534 fix: allow JSDoc comments in object-shorthand rule (#20167) (Nitin Kumar)

e86b813 fix: Use more types from @eslint/core (#20257) (Nicholas C. Zakas)

927272d fix: correct Scope typings (#20198) (jaymarvelz)

37f76d9 fix: use AST.Program type for Program node (#20244) (Francesco Trotta)

ae07f0b fix: unify timing report for concurrent linting (#20188) (jaymarvelz)

b165d47 fix: correct Rule typings (#20199) (jaymarvelz)

fb97cda fix: improve error message for missing fix function in suggestions (#20218) (jaymarvelz)

Documentation

d3e81e3 docs: Always recommend to include a files property (#20158) (Percy Ma)

0f0385f docs: use consistent naming recommendation (#20250) (Alex M. Spieslechner)

a3b1456 docs: Update README (GitHub Actions Bot)

cf5f2dd docs: fix correct tag of no-useless-constructor (#20255) (Tanuj Kanti)

10b995c docs: add TS options and examples for nofunc in no-use-before-define (#20249) (Tanuj Kanti)

2584187 docs: remove repetitive word in comment (#20242) (reddaisyy)

... (truncated)

Commits

c43ce24 chore: package.json update for @eslint/js release
c7ebefc chore: package.json update for @eslint/js release
2375a6d chore: package.json update for @eslint/js release
9e7fad4 chore: add script to auto-generate eslint:recommended configuration (#20208)
25d0e33 chore: package.json update for @eslint/js release
abee4ca chore: package.json update for @eslint/js release
90a71bf docs: update README files to add badge and instructions (#20115)
488cba6 chore: package.json update for @eslint/js release
1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#20116)
af2a087 chore: package.json update for @eslint/js release
Additional commits viewable in compare view

Updates @nestjs/common from 10.4.20 to 11.1.13

Release notes

Sourced from @nestjs/common's releases.

v11.1.13 (2026-02-03)

Bug fixes

common

#16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

microservices

#16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)

#16262 Feat/microservices configurable max buffer size (@jobnow)

common

#16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

platform-fastify

#16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])

platform-express

#16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

Lee Donghyun (@devizi0)

Mykhailo Skrypsky (@mixator)

Neo (@chojs23)

Praveen Somasundaram (@som14062005)

Ricardo Gomes (@jobnow)

조수민 (@suuuuuuminnnnnn)

v11.1.12 (2026-01-15)

Bug fixes

common

#16187 fix(common): regression in loading file-type under Windows OS (@iamkanguk97)

Dependencies

platform-ws

#16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@dependabot[bot])

common

#16155 fix(deps): update dependency file-type to v21.3.0 (@renovate[bot])

platform-fastify

#16154 fix(deps): update dependency find-my-way to v9.4.0 (@renovate[bot])

Committers: 3

Antonio Tripodi (@Tony133)

KANGUK LEE (@iamkanguk97)

@miso-kyoungminkim

v11.1.11 (2025-12-29)

Bug fixes

platform-fastify

... (truncated)

Commits

e3a958a chore(release): publish v11.1.13 release
d88856c test(common): add unit tests for class serializer interceptor
a1f6162 Merge pull request #16202 from som14062005/fix/issue-16195
8222634 refactor: move built-in types to module-level constant
979a8e2 fix(common): Fix skipping maxArrayLength and maxStringLength option
8fb17f5 fix(common): exclude built-in primitives from strip proto keys
16296b9 fix(common): exclude built-in primitives from strip proto keys
96932ad chore(release): publish v11.1.12 release
a52e608 fix(common): convert absolute paths to urls for esm loading
8a5be22 fix(deps): update dependency file-type to v21.3.0
Additional commits viewable in compare view

Updates @types/node from 22.19.1 to 25.2.1

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 7.18.0 to 8.54.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)

scope-manager: support ScopeManager#addGlobals (#11914)

typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)

eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)

scope-manager: fix catch clause scopes def.name (#11982)

scope-manager: prevent misidentification of "use strict" directives (#11995)

utils: handle missing FlatESLint and LegacyESLint (#11958)

❤️ Thank You

Brad Zacher @bradzacher

fnx @DMartens

Francesco Trotta

Josh Goldberg

MinJae @Ju-MINJAE

Minyeong Kim @minyeong981

overlookmotel

Yuya Yoshioka @YuyaYoshioka

김현수 @Kimsoo0119

You can read about our versioning strategy and releases on our website.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)

utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

Cameron

Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.54.0 (2026-01-26)

🚀 Features

eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)

typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)

deps: update dependency prettier to v3.8.0 (#11991)

scope-manager: fix catch clause scopes def.name (#11982)

eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)

❤️ Thank You

Brad Zacher @bradzacher

Josh Goldberg

MinJae @Ju-MINJAE

Minyeong Kim @minyeong981

overlookmotel

Yuya Yoshioka @YuyaYoshioka

김현수 @Kimsoo0119

You can read about our versioning strategy and releases on our website.

8.53.1 (2026-01-19)

🩹 Fixes

utils: make RuleCreator root defaultOptions optional (#11956)

eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)

❤️ Thank You

Cameron

Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

8.53.0 (2026-01-12)

🚀 Features

eslint-plugin: add rule [strict-void-return] (#9707)

eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)

🩹 Fixes

eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)

... (truncated)

Commits

d423e57 chore(release): publish 8.54.0
80e33ff feat(eslint-plugin-internal): add prefer-tsutils-methods rule (#11974)
ec4f73a feat(typescript-estree): add shortcut methods to ParserServicesWithTypeInform...
d32f909 test(eslint-plugin): skip rules tests in windows ci (#11988)
17fa993 test(eslint-plugin): improve vitest performance with isolate: false (#11754)
1c66ab4 fix(eslint-plugin): [no-unnecessary-type-assertion] check both base constrain...
aaa7ca2 fix(deps): update dependency prettier to v3.8.0 (#11991)
d50aa18 fix(scope-manager): fix catch clause scopes def.name (#11982)
4c0b379 fix(eslint-plugin): [no-unused-private-class-members] private destructured cl...
9940e53 chore(release): publish 8.53.1
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @typescript-eslint/eslint-plugin since your current version.

Updates @typescript-eslint/parser from 7.18.0 to 8.54.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)

scope-manager: support ScopeManager#addGlobals (#11914)

typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)

eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)

scope-manager: fix catch clause scopes def.name (#11982)

scope-manager: prevent misidentification of "use strict" directives (#11995)

utils: handle missing FlatESLint and LegacyESLint (#11958)

❤️ Thank You

Brad Zacher @bradzacher

fnx @DMartens

Francesco Trotta

Josh Goldberg

MinJae @Ju-MINJAE

Minyeong Kim @minyeong981

overlookmotel

Yuya Yoshioka @YuyaYoshioka

김현수 @Kimsoo0119

You can read about our versioning strategy and releases on our website.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)

utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

Cameron

Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.54.0 (2026-01-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.1 (2026-01-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.0 (2026-01-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.52.0 (2026-01-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.0 (2025-12-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.49.0 (2025-12-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

... (truncated)

Commits

d423e57 chore(release): publish 8.54.0
9940e53 chore(release): publish 8.53.1
3021ede chore(release): publish 8.53.0
9ddd571 chore(release): publish 8.52.0
95c7c73 chore: update deps to latest minor/patch (#11921)
e4c57f5 chore(release): publish 8.51.0
d520b88 chore(release): publish 8.50.1
c62e858 chore(release): publish 8.50.0
864595a chore(release): publish 8.49.0
32b7e89 chore(deps): update dependency @vitest/eslint-plugin to v1.5.1 (#11816)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @typescript-eslint/parser since your current version.

Updates axios from 1.8.2 to 1.13.4

Release notes

Sourced from axios's releases.

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

fix: issues with version 1.13.3 (#7352) (ee90dfc)

Fixed issues discovered in v1.13.3 release

Cleaned up interceptor test files

Improved workflow configurations

Infrastructure & CI/CD

refactor: ci and build (#7340) (8ff6c19)

Major refactoring of CI/CD workflows

Consolidated workflow files for better maintainability

Added mise configuration for the development environment

Improved sponsor block update automation

Enhanced issue and PR templates

Added automatic release notes generation

Implemented workflow cancellation for concurrent runs

chore: codegen and some updates to workflows (76cf77b)

Code generation improvements

Workflow optimisations

Migration Notes

Breaking Changes

None in this release.

Deprecations

None in this release.

Contributors

Thank you to all contributors who made this release possible! Special thanks to:

jasonsaayman - Release management and CI/CD improvements

Release v1.13.3

Release notes:

Bug Fixes

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

1.13.3 (2026-01-20)

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)

interceptor: handle the error in the same interceptor (#6269) (5945e40)

main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)

package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)

silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)

turn AxiosError into a native error (#5394) (#5558) (1c6a86d)

types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)

types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)

unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

add undefined as a value in AxiosRequestConfig (#5560) (095033c)

add automatic minor and patch upgrades to dependabot (#6053) (65a7584)

add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)

added copilot instructions (3f83143)

compatibility with frozen prototypes (#6265) (860e033)

enhance pipeFileToResponse with error handling (#7169) (88d7884)

types: Intellisense for string literals in a widened union (#6134) (f73474d), closes microsoft/TypeScript#33471

Reverts

Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298

deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

Ashvin Tiwari

Nikunj Mochi

Anchal Singh

jasonsaayman

Julian Dax

Akash Dhar Dubey

Madhumita

Tackoil

Justin Dhillon

Rudransh

WuMingDao

codenomnom

Nandan Acharya

Eric Dubé

Tibor Pilz

Gabriel Quaresma

Turadg Aleahmad

... (truncated)

Commits

9336cf9 chore(release): prepare release 1.13.4 (#7353)
ee90dfc fix: issues with version 1.13.3 (#7352)
af4f6d9 fix: release branch yml
253e3ad fix: all merge configs
8ff6c19 refactor: ci and build (#7340)
ab06109 chore(release): v1.13.3 (#7335)
2d6ad5e revert(deps): bump peter-evans/create-pull-request from 7 to 8 in the github-...
cb49a6f chore(sponsor): update sponsor block (#7330)
d8233d9 fix(types): restore AxiosError.cause type from unknown to Error (#7327)
5945e40 fix(interceptor): handle the error in the same interceptor (#6269)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.

Updates eslint from 9.8.0 to 9.39.2

Release notes

Sourced from

Bumps the security-updates group with 27 updates: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.28.3` | `7.29.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.8.0` | `9.39.2` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `10.4.20` | `11.1.13` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.1` | `25.2.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.54.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.54.0` | | [axios](https://github.com/axios/axios) | `1.8.2` | `1.13.4` | | [eslint](https://github.com/eslint/eslint) | `9.8.0` | `9.39.2` | | [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.3.0` | | [husky](https://github.com/typicode/husky) | `8.0.3` | `9.1.7` | | [inversify](https://github.com/inversify/monorepo) | `6.0.1` | `7.11.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.2.0` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` | | [jest-environment-node](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-node) | `29.1.0` | `30.2.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `8.2.4` | `9.0.3` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.6` | `16.2.7` | | [madge](https://github.com/pahen/madge) | `7.0.0` | `8.0.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.1` | | [rimraf](https://github.com/isaacs/rimraf) | `5.0.10` | `6.1.2` | | [sinon](https://github.com/sinonjs/sinon) | `16.1.3` | `21.0.1` | | [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `10.0.20` | `21.0.0` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.7` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.2.2` | `5.9.3` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `1.6.1` | `4.0.18` | | [@vitest/spy](https://github.com/vitest-dev/vitest/tree/HEAD/packages/spy) | `1.6.1` | `4.0.18` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.1` | `4.0.18` | Updates `@babel/traverse` from 7.28.3 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-traverse) Updates `@eslint/js` from 9.8.0 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js) Updates `@nestjs/common` from 10.4.20 to 11.1.13 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/common) Updates `@types/node` from 22.19.1 to 25.2.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.54.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.18.0 to 8.54.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/parser) Updates `axios` from 1.8.2 to 1.13.4 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.8.2...v1.13.4) Updates `eslint` from 9.8.0 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.8.0...v9.39.2) Updates `globals` from 16.5.0 to 17.3.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.5.0...v17.3.0) Updates `husky` from 8.0.3 to 9.1.7 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v8.0.3...v9.1.7) Updates `inversify` from 6.0.1 to 7.11.0 - [Release notes](https://github.com/inversify/monorepo/releases) - [Changelog](https://github.com/inversify/monorepo/blob/main/docs/release.md) - [Commits](https://github.com/inversify/monorepo/compare/@inversifyjs/core@6.0.1...inversify@7.11.0) Updates `jest` from 29.7.0 to 30.2.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest) Updates `@types/jest` from 29.5.12 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `jest-environment-node` from 29.1.0 to 30.2.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest-environment-node) Updates `lerna` from 8.2.4 to 9.0.3 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v9.0.3/packages/lerna) Updates `lint-staged` from 16.2.6 to 16.2.7 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.2.6...v16.2.7) Updates `madge` from 7.0.0 to 8.0.0 - [Changelog](https://github.com/pahen/madge/blob/master/CHANGELOG.md) - [Commits](pahen/madge@v7.0.0...v8.0.0) Updates `prettier` from 3.6.2 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.8.1) Updates `rimraf` from 5.0.10 to 6.1.2 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v5.0.10...v6.1.2) Updates `sinon` from 16.1.3 to 21.0.1 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v16.1.3...v21.0.1) Updates `@types/sinon` from 10.0.20 to 21.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `tar` from 6.2.1 to 7.5.7 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.7) Updates `ts-jest` from 29.4.5 to 29.4.6 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.6) Updates `typescript` from 5.2.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.2.2...v5.9.3) Updates `@vitest/coverage-v8` from 1.6.1 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8) Updates `@vitest/spy` from 1.6.1 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/spy) Updates `vitest` from 1.6.1 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-version: 7.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@eslint/js" dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@nestjs/common" dependency-version: 11.1.13 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/node" dependency-version: 25.2.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.54.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/parser" dependency-version: 8.54.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: axios dependency-version: 1.13.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: eslint dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: globals dependency-version: 17.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: husky dependency-version: 9.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: inversify dependency-version: 7.11.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest dependency-version: 30.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest-environment-node dependency-version: 30.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lerna dependency-version: 9.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lint-staged dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: madge dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: rimraf dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: sinon dependency-version: 21.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/sinon" dependency-version: 21.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: tar dependency-version: 7.5.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: ts-jest dependency-version: 29.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/spy" dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: vitest dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-02-05T22:15:18Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 5, 2026

omermorad closed this Feb 5, 2026

dependabot bot deleted the dependabot/npm_and_yarn/security-updates-8f678ea992 branch February 5, 2026 22:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the security-updates group with 27 updates#971

deps: bump the security-updates group with 27 updates#971
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/security-updates-8f678ea992

dependabot bot commented on behalf of github Feb 5, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 5, 2026

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

v9.39.2

Bug Fixes

Build Related

Chores

v9.39.1

Bug Fixes

Documentation

Chores

v9.39.0

Features

Bug Fixes

Documentation

v11.1.13 (2026-02-03)

Bug fixes

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

❤️ Thank You

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

8.54.0 (2026-01-26)

🚀 Features

🩹 Fixes

❤️ Thank You

8.53.1 (2026-01-19)

🩹 Fixes

❤️ Thank You

8.53.0 (2026-01-12)

🚀 Features

🩹 Fixes

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

❤️ Thank You

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

8.54.0 (2026-01-26)

8.53.1 (2026-01-19)

8.53.0 (2026-01-12)

8.52.0 (2026-01-05)

8.51.0 (2025-12-29)

8.50.1 (2025-12-22)

8.50.0 (2025-12-15)

8.49.0 (2025-12-08)

8.48.1 (2025-12-02)

v1.13.4

Overview