Bump the npm_and_yarn group across 4 directories with 23 updates#4
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
Bump the npm_and_yarn group across 4 directories with 23 updates#4dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the npm_and_yarn group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws-sdk](https://github.com/aws/aws-sdk-js) | `2.1185.0` | `2.1693.0` | | [body-parser](https://github.com/expressjs/body-parser) | `1.20.0` | `1.20.3` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `6.9.12` | `7.0.11` | | [snowflake-sdk](https://github.com/snowflakedb/snowflake-connector-nodejs) | `1.10.1` | `2.0.4` | | [diff](https://github.com/kpdecker/jsdiff) | `5.0.0` | `5.2.2` | | [next](https://github.com/vercel/next.js) | `14.2.26` | `15.5.10` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.5` | `2.1.9` | | [rollup](https://github.com/rollup/rollup) | `2.77.2` | `2.79.2` | | [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) | `9.1.5` | `9.2.2` | | [@octokit/request-error](https://github.com/octokit/request-error.js) | `5.0.1` | `5.1.1` | | [@octokit/request](https://github.com/octokit/request.js) | `8.1.6` | `8.4.1` | | [formidable](https://github.com/node-formidable/formidable) | `3.5.1` | `3.5.4` | | [jws](https://github.com/brianloveswords/node-jws) | `3.2.2` | `3.2.3` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.11` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.3` | | [undici](https://github.com/nodejs/undici) | `5.20.0` | `5.29.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.11` | `5.4.21` | Bumps the npm_and_yarn group with 5 updates in the /docs directory: | Package | From | To | | --- | --- | --- | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [diff](https://github.com/kpdecker/jsdiff) | `4.0.2` | `4.0.4` | | [mdast-util-to-hast](https://github.com/syntax-tree/mdast-util-to-hast) | `13.2.0` | `13.2.1` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.3` | | [webpack](https://github.com/webpack/webpack) | `5.99.9` | `5.105.2` | Bumps the npm_and_yarn group with 2 updates in the /packages/back-end directory: [nodemailer](https://github.com/nodemailer/nodemailer) and [snowflake-sdk](https://github.com/snowflakedb/snowflake-connector-nodejs). Bumps the npm_and_yarn group with 1 update in the /packages/front-end directory: [next](https://github.com/vercel/next.js). Updates `aws-sdk` from 2.1185.0 to 2.1693.0 - [Release notes](https://github.com/aws/aws-sdk-js/releases) - [Commits](aws/aws-sdk-js@v2.1185.0...v2.1693.0) Updates `body-parser` from 1.20.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.0...1.20.3) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `nodemailer` from 6.9.12 to 7.0.11 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v6.9.12...v7.0.11) Updates `snowflake-sdk` from 1.10.1 to 2.0.4 - [Release notes](https://github.com/snowflakedb/snowflake-connector-nodejs/releases) - [Changelog](https://github.com/snowflakedb/snowflake-connector-nodejs/blob/master/CHANGELOG.md) - [Commits](snowflakedb/snowflake-connector-nodejs@v1.10.1...v2.0.4) Updates `diff` from 5.0.0 to 5.2.2 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v5.0.0...v5.2.2) Updates `next` from 14.2.26 to 15.5.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v14.2.26...v15.5.10) Updates `vitest` from 2.1.5 to 2.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.9/packages/vitest) Updates `rollup` from 2.77.2 to 2.79.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md) - [Commits](rollup/rollup@v2.77.2...v2.79.2) Updates `@octokit/plugin-paginate-rest` from 9.1.5 to 9.2.2 - [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases) - [Commits](octokit/plugin-paginate-rest.js@v9.1.5...v9.2.2) Updates `@octokit/request-error` from 5.0.1 to 5.1.1 - [Release notes](https://github.com/octokit/request-error.js/releases) - [Commits](octokit/request-error.js@v5.0.1...v5.1.1) Updates `@octokit/request` from 8.1.6 to 8.4.1 - [Release notes](https://github.com/octokit/request.js/releases) - [Commits](octokit/request.js@v8.1.6...v8.4.1) Updates `formidable` from 3.5.1 to 3.5.4 - [Release notes](https://github.com/node-formidable/formidable/releases) - [Changelog](https://github.com/node-formidable/formidable/blob/master/CHANGELOG.md) - [Commits](https://github.com/node-formidable/formidable/commits) Updates `jws` from 3.2.2 to 3.2.3 - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `nanoid` from 3.3.7 to 3.3.11 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.7...3.3.11) Updates `node-forge` from 1.3.1 to 1.3.3 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.3) Updates `qs` from 6.10.3 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.10.3...v6.13.0) Updates `undici` from 5.20.0 to 5.29.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.20.0...v5.29.0) Updates `vite` from 5.4.11 to 5.4.21 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v5.0.0...v5.2.2) Updates `mdast-util-to-hast` from 13.2.0 to 13.2.1 - [Release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases) - [Commits](syntax-tree/mdast-util-to-hast@13.2.0...13.2.1) Updates `node-forge` from 1.3.1 to 1.3.3 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.3) Updates `webpack` from 5.99.9 to 5.105.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.99.9...v5.105.2) Updates `nodemailer` from 6.10.1 to 8.0.1 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v6.9.12...v7.0.11) Updates `snowflake-sdk` from 1.10.1 to 2.0.4 - [Release notes](https://github.com/snowflakedb/snowflake-connector-nodejs/releases) - [Changelog](https://github.com/snowflakedb/snowflake-connector-nodejs/blob/master/CHANGELOG.md) - [Commits](snowflakedb/snowflake-connector-nodejs@v1.10.1...v2.0.4) Updates `next` from 14.2.26 to 15.5.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v14.2.26...v15.5.10) --- updated-dependencies: - dependency-name: aws-sdk dependency-version: 2.1693.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 1.20.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nodemailer dependency-version: 7.0.11 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: snowflake-sdk dependency-version: 2.0.4 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 5.2.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 2.1.9 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 2.79.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@octokit/plugin-paginate-rest" dependency-version: 9.2.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@octokit/request-error" dependency-version: 5.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@octokit/request" dependency-version: 8.4.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: formidable dependency-version: 3.5.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.13.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 5.29.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 5.4.21 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mdast-util-to-hast dependency-version: 13.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.105.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nodemailer dependency-version: 8.0.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: snowflake-sdk dependency-version: 2.0.4 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.10 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 20 updates in the / directory:
2.1185.02.1693.01.20.01.20.34.1.04.1.14.17.214.17.236.9.127.0.111.10.12.0.45.0.05.2.214.2.2615.5.102.1.52.1.92.77.22.79.29.1.59.2.25.0.15.1.18.1.68.4.13.5.13.5.43.2.23.2.34.0.54.0.83.3.73.3.111.3.11.3.35.20.05.29.05.4.115.4.21Bumps the npm_and_yarn group with 5 updates in the /docs directory:
4.17.214.17.234.0.24.0.413.2.013.2.11.3.11.3.35.99.95.105.2Bumps the npm_and_yarn group with 2 updates in the /packages/back-end directory: nodemailer and snowflake-sdk.
Bumps the npm_and_yarn group with 1 update in the /packages/front-end directory: next.
Updates
aws-sdkfrom 2.1185.0 to 2.1693.0Release notes
Sourced from aws-sdk's releases.
... (truncated)
Commits
9d3c66eUpdates SDK to v2.1693.0c039567test(client-elastictranscoder): remove feature test (#4711)f5b1a6fdocs: end-of-support (#4706)657d6fechore: use ssh private key for git sync (#4705)c12585bchore: remove regression label management (#4699)966fa6cUpdates SDK to v2.1692.05d0e38aDelete EC2 launch configuration e2e tests (#4685)b9ce346chore: fix issue config (#4683)c066681Update issue template config and disable docs requests (#4682)163a7cfModified bug issue template to add checkbox to report potential regression. (...Maintainer changes
This version was pushed to npm by aws-sdk-bot, a new releaser for aws-sdk since your current version.
Install script changes
This version adds
postinstallscript that runs during installation. Review the package contents before updating.Updates
body-parserfrom 1.20.0 to 1.20.3Release notes
Sourced from body-parser's releases.
Changelog
Sourced from body-parser's changelog.
Commits
17529511.20.339744cfchore: linter (#534)b2695c4Merge commit from forkade0f3fadd scorecard to readme (#531)99a1bd6deps: qs@6.12.3 (#521)9478591fix: pin to node@22.4.183db46aci: fix errors in ci github action for node 8 and 9 (#523)9d4e212chore: add support for OSSF scorecard reporting (#522)ee913741.20.2368a93aFix strict json error message on Node.js 19+Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.
Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
lodashfrom 4.17.21 to 4.17.23Commits
dec55b7Bump main to v4.17.23 (#6088)19c9251fix: setCacheHas JSDoc return type should be boolean (#6071)b5e6729jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)edadd45Prevent prototype pollution on baseUnset function4879a7adoc: fix autoLink function, conversion of source links (#6056)9648f69chore: removeyarn.lockfile (#6053)dfa407dci: remove legacy configuration files (#6052)156e196feat: add renovate setup (#6039)933e106ci: add pipeline for Bun (#6023)072a807docs: update links related to Open JS Foundation (#5968)Updates
nodemailerfrom 6.9.12 to 7.0.11Release notes
Sourced from nodemailer's releases.
... (truncated)
Changelog
Sourced from nodemailer's changelog.
... (truncated)
Commits
3d17dbechore(master): release 7.0.11 (#1783)15879f8Bumped dev dependenciesb61b9c0fix: prevent stack overflow DoS in addressparser with deeply nested groups4175e4bchore(master): release 7.0.10 (#1776)d882ccfMerge branch 'master' of github.com:nodemailer/nodemailer1d7e4f7Bumped deps10bd871chore: correct typo in variable name (#1773)28dbf3ffix: Increase data URI size limit from 100KB to 50MB and preserve content type92ae1c4chore(master): release 7.0.9 (#1769)c675d9eMerge branch 'master' of github.com:nodemailer/nodemailerMaintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nodemailer since your current version.
Updates
snowflake-sdkfrom 1.10.1 to 2.0.4Release notes
Sourced from snowflake-sdk's releases.
Commits
a6bd057NO-SNOW: Bump version to 2.0.4 (#1064)e94c241SNOW-1156037: CVE-2025-46328 (#1062)d2d939dSNOW-1825499 - added experimental flag for PAT authentication (#1060)a075fb6SNOW-2034298 replacing deprecated util._extend with Object.assign (#1050)9df8e5eSNOW-2028060: Fix OCSP response cache entries not being refreshed (#1051)a0c297fNO-SNOW: Disable system tests (#1053)116f407SNOW-2040000 change default tag to bptp-stable (#1054)4c38215SNOW-1982168 fix binding tests (#1047)0aa0156jira creation ownership (to another support group) (#1039)492392fSNOW-1825499 - secret detector extensions for oauth parameters (#1037)Updates
difffrom 5.0.0 to 5.2.2Changelog
Sourced from diff's changelog.
Commits
b7b6339v5.2.2b5377abUpdate package version to 5.2.17801789Backport kpdecker/jsdiff#649042a837Backport kpdecker/jsdiff#647370a9df5.2.0 release (#483)a2f726aAdd myself to the list of maintainers (#482)dfc6fe4Add examples to docs of creating and applying patches (importantly including ...b5d1cfaModify node_example.js to support showing added/deleted spaces (#479)533893dAddtimeoutoption (#478)1f1ec96Replace broken link to Myers's paper in the README with a working one (#476)Maintainer changes
This version was pushed to npm by explodingcabbage, a new releaser for diff since your current version.
Updates
nextfrom 14.2.26 to 15.5.10Release notes
Sourced from next's releases.
Commits
60a2aa9v15.5.10e5b834dfetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)39a2f6afeat(next/image)!: addimages.maximumResponseBodyconfig (#88183)bf9f084Sync DoS mitigations for React Flightc5de33ev15.5.9dd23399Backport facebook/react#35351 for 15.5.8 (#87086)7526cd6v15.5.81e9ec41Update React Version (#41)16141e5Update React Version (#30)e01e589Backport Next.js changes to v15.5.8 (#23)Updates
vitestfrom 2.1.5 to 2.1.9Release notes
Sourced from vitest's releases.
Commits
c9e59a0chore: release v2.1.9e0fe1d8fix: backport #7317 to v2 (#7318)d69cc75bump: 2.1.892f7a2afix: support Node 2181ed45bchore: release v2.1.7fbe5c39fix: revert support for Vite 6b936702bump: 2.1.6Updates
rollupfrom 2.77.2 to 2.79.2Release notes
Sourced from rollup's releases.
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
c9bd03d2.79.248aef33fix: resolve DOM Clobbering CVE-2024-43788 (backport to v2) (#5677)69ff4182.79.104dce1bUpdate changelog159137efix: typo docs and contributors link in CONTRIBUTING.md (#4639)e1392b3Update type definition of resolveId (#4641)7836357Improve performance of chunk naming collision check (#4643)71d20c9Reduce permissions for repl-artefacts.yml workflow (#4630)8193ea5Adapt workflow to use Node 14 sub-version to work with branch protection8477f8f2.79.0Updates
@octokit/plugin-paginate-restfrom 9.1.5 to 9.2.2Release notes
Sourced from
@octokit/plugin-paginate-rest's releases.Commits
e1e4489fix: ReDos regex vulnerability, reported by@DayShift(#660)5b84386fix(pkg): pin@octokit/corepeerDependency to v5 (#599)fa01f94ci(action): update actions/add-to-project action to v0.6.0 (#598)75aeaaffeat: new/orgs/{org}/organization-roles/{role_id}/teamsand `/orgs/{org}/o...54d6bcfchore(deps): update dependency prettier to v3.2.51bfa2f8chore(deps): update dependency npm-run-all2 to v6eb4a8fechore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.011ef779chore(deps): update dependency esbuild to ^0.20.02b6cc98ci(action): update peter-evans/create-or-update-comment action to v4d7c9de5chore(deps): update dependency prettier to v3.2.4 (#588)Updates
@octokit/request-errorfrom 5.0.1 to 5.1.1Release notes
Sourced from
@octokit/request-error's releases.Commits
b51ed27test: ReDos regex vulnerability, reported by@dayshift12a14f0fix: ReDos regex vulnerability, reported by@dayshift3af20bdfix: upgrade@octokit/typesto v1394147e8feat(security): Add provenance (#416)Updates
@octokit/requestfrom 8.1.6 to 8.4.1Release notes
Sourced from
@octokit/request's releases.Commits
356411efix: ReDos regex vulnerability, reported by@DayShift(#741)abc4955feat: re-addredirectrequest option (#636)4e7127cfix: upgrade@octokit/endpoint2e67925feat(security): Add provenance (#685)6822e8bfix: upgrade@octokit/typesdbfeab2feat: add documentation link in error message (#667)c013de4docs: fix spelling errors (#671)3d22c38chore(deps): update dependency prettier to v3.2.5984ec17chore(deps): update dependency esbuild to ^0.20.02a9cf78ci(action): update peter-evans/create-or-update-comment action to v4Updates
formidablefrom 3.5.1 to 3.5.4Release notes
Sourced from formidable's releases.