Bump the code-dependencies group with 7 updates by dependabot[bot] · Pull Request #20 · Navino16/Librarr

dependabot · 2026-04-03T04:34:02Z

Bumps the code-dependencies group with 7 updates:

Package	From	To
axios	`1.13.6`	`1.14.0`
express-rate-limit	`8.3.1`	`8.3.2`
next	`16.2.1`	`16.2.2`
next-intl	`4.8.3`	`4.9.0`
@playwright/test	`1.58.2`	`1.59.1`
eslint-config-next	`16.2.1`	`16.2.2`
typescript-eslint	`8.57.2`	`8.58.0`

Updates axios from 1.13.6 to 1.14.0

Release notes

Sourced from axios's releases.

v1.14.0

This release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.

⚠️ Important Changes

Breaking Changes: None identified in this release.

Action Required: If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably proxy-from-env v2 alignment and main entry compatibility fix).

🚀 New Features

Runtime Features: No new end-user features were introduced in this release.

Test Coverage Expansion: Added broader smoke/module test coverage for CJS and ESM package usage. (#7510)

🐛 Bug Fixes

Headers: Trim trailing CRLF in normalised header values. (#7456)

HTTP/2: Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (#7457)

Fetch Adapter: Cancel ReadableStream created during request-stream capability probing to prevent async resource leaks. (#7515)

Proxy Handling: Fixed env proxy behavior with proxy-from-env v2 usage. (#7499)

CommonJS Compatibility: Fixed package main entry regression affecting CJS consumers. (#7532)

🔧 Maintenance & Chores

Security/Dependencies: Updated formidable and refreshed package set to newer versions. (#7533, #10556)

Tooling: Continued migration to Vitest and modernised CI/test harnesses. (#7484, #7489, #7498)

Build/Lint Stack: Rollup, ESLint, TypeScript, and related dev-dependency updates. (#7508, #7509, #7522)

Documentation: Clarified JSON parsing and adapter-related docs/comments. (#7398, #7460, #7478)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

@aviu16 (#7456)

@NETIZEN-11 (#7460)

@fedotov (#7457)

@nthbotast (#7478)

@veeceey (#7398)

@penkzhou (#7515)

Full Changelog: v1.13.6...v1.14.0

Commits

46bee3d chore(release): prepare release 1.14.0 (#10563)
518aff5 chore: add AI Moderator workflow for spam detection (#10551)
b7dfda3 chore(sponsor): update sponsor block (#10557)
9aa34d5 fix: updated release flow to match the current flows (#10562)
e9e5ebe Update packages to latest version (#10556)
4d8931c fix: formidable dependency vulnerable to arbitrary (#7533)
3a6f5c1 chore(deps-dev): bump @babel/preset-env (#7531)
bcfd299 fix: bug axios breaks commonjs compatibility main entry (#7532)
d6dcbfd fix: dependabot uses the correct labels (#7530)
5dd7ba7 chore: upgrade to latest ts (#7522)
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates express-rate-limit from 8.3.1 to 8.3.2

Release notes

Sourced from express-rate-limit's releases.

v8.3.2

You can view the changelog here.

Commits

c4dbb42 8.3.2
8f1cc66 v8.3.2 changelog
601b87f Fix skipFailedRequests for for connections that close very early (#611)
014c2f3 chore(deps-dev): bump the development-dependencies group with 6 updates (#612)
4e8b18b Remove Zuplo sponsorship details from README (#613)
31dab19 test: use numeric range for reset timestamp assertion (#610)
f82ad13 chore(deps-dev): bump the development-dependencies group with 2 updates (#609)
fa0b098 docs: fix broken link
See full diff in compare view

Updates next from 16.2.1 to 16.2.2

Release notes

Sourced from next's releases.

v16.2.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

backport: Move expanded adapters docs to API reference (#92115) (#92129)

Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)

[create-next-app] Skip interactive prompts when CLI flags are provided (#91840)

next.config.js: Accept an option for serverFastRefresh (#91968)

Turbopack: enable server HMR for app route handlers (#91466)

Turbopack: exclude metadata routes from server HMR (#92034)

Fix CI for glibc linux builds

Backport: disable bmi2 in qfilter #92177

[backport] Fix CSS HMR on Safari (#92174)

Credits

Huge thanks to @nextjs-bot, @icyJoseph, @ijjk, @gaojude, @wbinnssmith, @lukesandberg, and @bgw for helping!

Commits

52faae3 v16.2.2
8d0f77b Backport: #92177
e151e5f Fix CI for glibc linux builds
1a319ea [backport] Fix CSS HMR on Safari (#92174)
c0edad2 Turbopack: exclude metadata routes from server HMR (#92034)
d644699 Turbopack: enable server HMR for app route handlers (#91466)
34de2ca next.config.js: Accept an option for serverFastRefresh (#91968)
c4779d1 [create-next-app] Skip interactive prompts when CLI flags are provided (#91840)
edcf19a Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)
eee3f52 backport: Move expanded adapters docs to API reference (#92115) (#92129)
Additional commits viewable in compare view

Updates next-intl from 4.8.3 to 4.9.0

Release notes

Sourced from next-intl's releases.

v4.9.0

4.9.0 (2026-04-01)

Features

Support transitionTypes on Link (#2302) (02811f5) – by @amannn

v4.8.4

4.8.4 (2026-03-31)

Bug Fixes

Remove TypeScript peer dependency and update examples to TypeScript v6 (#2293) (5e7bcd7) – by @wojtekmaj

Changelog

Sourced from next-intl's changelog.

4.9.0 (2026-04-01)

Features

Support transitionTypes on Link (#2302) (02811f5) – by @amannn

4.8.4 (2026-03-31)

Bug Fixes

Remove TypeScript peer dependency and update examples to TypeScript v6 (#2293) (5e7bcd7) – by @wojtekmaj

Commits

b65f8c4 v4.9.0
02811f5 feat: Support transitionTypes on Link (#2302)
722785b v4.8.4
5e7bcd7 fix: Remove TypeScript peer dependency and update examples to TypeScript v6 (...
c9d6051 fix: Remove TypeScript peer dependency and update examples to TypeScript v6 (...
5be07b6 fix: Remove TypeScript peer dependency and update examples to TypeScript v6 (...
58326e7 docs: Fix typos (#2282)
ed19787 docs: Fix typos (#2283)
db51a73 docs: Fix typos in useExtracted blog post (#2279)
c0f494c docs: Update precompilation.mdx
Additional commits viewable in compare view

Updates @playwright/test from 1.58.2 to 1.59.1

Release notes

Sourced from @playwright/test's releases.

v1.59.1

Bug Fixes

[Windows] Reverted hiding console window when spawning browser processes, which caused regressions including broken codegen, --ui and show commands (#39990)

v1.59.0

🎬 Screencast

New page.screencast API provides a unified interface for capturing page content with:

Screencast recordings

Action annotations

Visual overlays

Real-time frame capture

Agentic video receipts

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideo option:
await page.screencast.start({ path: 'video.webm' });
// ... perform actions ...
await page.screencast.stop();
Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:
await page.screencast.showActions({ position: 'top-right' });
screencast.showActions() accepts position ('top-left', 'top', 'top-right', 'bottom-left', 'bottom', 'bottom-right'), duration (ms per annotation), and fontSize (px). Returns a disposable to stop showing actions.

Action annotations can also be enabled in test fixtures via the video option:
// playwright.config.ts
export default defineConfig({
  use: {
    video: {
      mode: 'on',
      show: {
        actions: { position: 'top-left' },
        test: { position: 'top-right' },
      },
</tr></table> 

... (truncated)

Commits

d466ac5 chore: mark v1.59.1 (#40005)
530e7e5 cherry-pick(#4004): fix(cli): kill-all should kill dashboard
9aa216c cherry-pick(#39994): Revert "fix(windows): hide console window when spawning ...
01b2b15 cherry-pick(#39980): chore: more release notes fixes
a5cb6c9 cherry-pick(#39972): chore: expose browser.bind and browser.unbind APIs
99a17b5 cherry-pick(#39975): chore: support opening .trace files via .link indirection
43607c3 cherry-pick(#39974): chore(webkit): update Safari user-agent version to 26.4
62cabe1 cherry-pick(#39969): chore(npm): include all *.md from lib (#39970)
0c65a75 cherry-pick(#39968): chore: screencast.showActions api
f04155b cherry-pick(#39958): chore: release notes for langs v1.59
Additional commits viewable in compare view

Updates eslint-config-next from 16.2.1 to 16.2.2

Release notes

Sourced from eslint-config-next's releases.

v16.2.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

backport: Move expanded adapters docs to API reference (#92115) (#92129)

Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)

[create-next-app] Skip interactive prompts when CLI flags are provided (#91840)

next.config.js: Accept an option for serverFastRefresh (#91968)

Turbopack: enable server HMR for app route handlers (#91466)

Turbopack: exclude metadata routes from server HMR (#92034)

Fix CI for glibc linux builds

Backport: disable bmi2 in qfilter #92177

[backport] Fix CSS HMR on Safari (#92174)

Credits

Huge thanks to @nextjs-bot, @icyJoseph, @ijjk, @gaojude, @wbinnssmith, @lukesandberg, and @bgw for helping!

Commits

52faae3 v16.2.2
See full diff in compare view

Updates typescript-eslint from 8.57.2 to 8.58.0

Release notes

Sourced from typescript-eslint's releases.

v8.58.0

8.58.0 (2026-03-30)

🚀 Features

support TypeScript 6 (#12124)

🩹 Fixes

eslint-plugin: crash in no-unnecessary-type-arguments (#12163)

eslint-plugin: [no-extraneous-class] handle index signatures (#12142)

eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#12161)

❤️ Thank You

ej shafran @ej-shafran

Evyatar Daud @StyleShit

GG ZIBLAKING

milkboy2564 @SeolJaeHyeok

teee32 @teee32

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.58.0 (2026-03-30)

🚀 Features

support TypeScript 6 (#12124)

❤️ Thank You

Evyatar Daud @StyleShit

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

4933417 chore(release): publish 8.58.0
8cde2d0 feat: support TypeScript 6 (#12124)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the code-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.13.6` | `1.14.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.3.1` | `8.3.2` | | [next](https://github.com/vercel/next.js) | `16.2.1` | `16.2.2` | | [next-intl](https://github.com/amannn/next-intl) | `4.8.3` | `4.9.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.1` | `16.2.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.57.2` | `8.58.0` | Updates `axios` from 1.13.6 to 1.14.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.13.6...v1.14.0) Updates `express-rate-limit` from 8.3.1 to 8.3.2 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.3.1...v8.3.2) Updates `next` from 16.2.1 to 16.2.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.1...v16.2.2) Updates `next-intl` from 4.8.3 to 4.9.0 - [Release notes](https://github.com/amannn/next-intl/releases) - [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md) - [Commits](amannn/next-intl@v4.8.3...v4.9.0) Updates `@playwright/test` from 1.58.2 to 1.59.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.2...v1.59.1) Updates `eslint-config-next` from 16.2.1 to 16.2.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.2.2/packages/eslint-config-next) Updates `typescript-eslint` from 8.57.2 to 8.58.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: axios dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: code-dependencies - dependency-name: express-rate-limit dependency-version: 8.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: code-dependencies - dependency-name: next dependency-version: 16.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: code-dependencies - dependency-name: next-intl dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: code-dependencies - dependency-name: "@playwright/test" dependency-version: 1.59.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: code-dependencies - dependency-name: eslint-config-next dependency-version: 16.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: code-dependencies - dependency-name: typescript-eslint dependency-version: 8.58.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: code-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

codecov-commenter · 2026-04-03T04:35:22Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

dependabot · 2026-04-10T04:38:26Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 3, 2026

dependabot Bot closed this Apr 10, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/develop/code-dependencies-d8392c0c85 branch April 10, 2026 04:38

Navigation Menu

Bump the code-dependencies group with 7 updates - #20

Bump the code-dependencies group with 7 updates#20
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/code-dependencies-d8392c0c85

dependabot Bot commented on behalf of github Apr 3, 2026 •

edited

Loading

Uh oh!

codecov-commenter commented Apr 3, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.14.0

⚠️ Important Changes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v8.3.2

v16.2.2

Core Changes

Credits

v4.9.0

4.9.0 (2026-04-01)

Features

v4.8.4

4.8.4 (2026-03-31)

Bug Fixes

4.9.0 (2026-04-01)

Features

4.8.4 (2026-03-31)

Bug Fixes

v1.59.1

Bug Fixes

v1.59.0

🎬 Screencast

v16.2.2

Core Changes

Credits

v8.58.0

8.58.0 (2026-03-30)

🚀 Features

🩹 Fixes

❤️ Thank You

8.58.0 (2026-03-30)

🚀 Features

❤️ Thank You

Uh oh!

codecov-commenter commented Apr 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

dependabot Bot commented on behalf of github Apr 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 3, 2026 •

edited

Loading

codecov-commenter commented Apr 3, 2026 •

edited

Loading