Skip to content

deps(deps): bump the production-dependencies group across 1 directory with 23 updates - #12

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-b49deac4ab
Closed

deps(deps): bump the production-dependencies group across 1 directory with 23 updates#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-b49deac4ab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
@azure/core-client 1.10.1 1.10.2
@azure/core-rest-pipeline 1.23.0 1.24.0
@azure/storage-blob 12.31.0 12.32.0
@bufbuild/protoplugin 2.11.0 2.12.0
@typespec/ts-http-runtime 0.3.5 0.3.6
b4a 1.8.0 1.8.1
bare-events 2.8.2 2.9.1
bare-fs 4.7.1 4.7.2
bare-os 3.8.7 3.9.1
bare-path 3.0.0 3.0.1
bare-stream 2.13.0 2.13.3
bare-url 2.4.0 2.4.5
brace-expansion 1.1.14 1.1.15
es-object-atoms 1.1.1 1.1.2
fast-xml-builder 1.1.4 1.2.0
fast-xml-parser 5.6.0 5.9.2
form-data 2.5.5 2.5.6
streamx 2.25.0 2.28.0
tar-stream 3.1.8 3.2.0
undici 6.25.0 6.27.0

Updates @azure/core-client from 1.10.1 to 1.10.2

Changelog

Sourced from @​azure/core-client's changelog.

1.10.2 (2026-06-04)

Bugs Fixed

Commits
  • 000bfb6 [core] prepare for June 2026 release (#38788)
  • 08fae51 chore: consolidate with @​azure/core-util APIs and simplify runtime checks (#3...
  • 0117af3 feat(core/core-client): migrate to #platform/* imports (#38200)
  • e8f0055 chore: Update registry for all package.json and adjust check rules (#38281)
  • be0d109 fix(core-client): fix typos in serializer error messages (#38258)
  • 55155ea Improve test coverage to ~100% for @​azure/core-client (#38176)
  • 8edb91b chore(core): remove dead code, unnecessary casts, and redundant async (#38149)
  • 38b6a92 fix(core): handle Uint8Array subarrays correctly in createFile and encodeByte...
  • 686b9db chore(core): improve cross-platform test compatibility (#38145)
  • c4de0e1 chore(core): add react-native and @​types/react devDependencies (#38135)
  • Additional commits viewable in compare view

Updates @azure/core-rest-pipeline from 1.23.0 to 1.24.0

Changelog

Sourced from @​azure/core-rest-pipeline's changelog.

1.24.0 (2026-06-05)

Features Added

Commits
  • 2d3b618 [core-rest-pipeline] prepare for june 2026 release (#38847)
  • 4765ec8 fix: consolidate duplicate changelog sections for core-rest-pipeline and core...
  • e8f0055 chore: Update registry for all package.json and adjust check rules (#38281)
  • 8d8b5b5 feat(core/core-rest-pipeline): migrate to #platform/* imports (#38205)
  • ef31af4 Improve test coverage to ~100% for @​azure/core-rest-pipeline (#38180)
  • 8edb91b chore(core): remove dead code, unnecessary casts, and redundant async (#38149)
  • 38b6a92 fix(core): handle Uint8Array subarrays correctly in createFile and encodeByte...
  • 686b9db chore(core): improve cross-platform test compatibility (#38145)
  • c4de0e1 chore(core): add react-native and @​types/react devDependencies (#38135)
  • ca0618c chore(core): add per-platform tsconfig files in config/ directories (#38136)
  • Additional commits viewable in compare view

Updates @azure/storage-blob from 12.31.0 to 12.32.0

Changelog

Sourced from @​azure/storage-blob's changelog.

12.32.0 (2026-05-22)

Features Added

  • Includes all features released in 12.32.0-beta.1.

12.32.0-beta.1 (2026-03-05)

Features Added

  • Added support for service version 2026-04-06.
  • Added support for Content Validation via Structured Message.
  • Added support for Delete Blob Conditional Tier.
  • Added support for Server-side Encryption Rekeying.
  • Added cross-tenant support for Principal-Bound User Delegation SAS.
  • Added support for Dynamic User Delegation SAS.
Commits
  • d740d83 Resolve interface comments (#38702)
  • ff9fc24 Update package version for stg101 (#38623)
  • 603366d [storage] update streamToBuffer helpers to handle chunks correctly (#38465)
  • 3de1abe Add imports field to all warp-built packages (#38391)
  • 0aa0f0f Add react-native devDependency to packages with RN targets (#38392)
  • e8f0055 chore: Update registry for all package.json and adjust check rules (#38281)
  • 8226e6f [test] Fix swapped assertion arguments across test files (#37972)
  • 65c0ccc feat(warp): explicit CJS via moduleType, esbuild ESM→CJS transform (#37893)
  • 7b9b6aa Storage/content checksum (#37208)
  • 460a94d [warp] Migrate storage packages to warp with type-compatible browser … (#37443)
  • Additional commits viewable in compare view

Updates @azure/storage-common from 12.3.0 to 12.4.0

Changelog

Sourced from @​azure/storage-common's changelog.

12.4.0 (2026-05-22)

Features Added

  • Includes all features released in 12.4.0-beta.1.

Bugs Fixed

  • Fixed CRC64 checksum calculator failing under both module systems: ReferenceError: require is not defined when loaded as ESM under Node, and SyntaxError: Unexpected token 'export' when loaded as CommonJS. The bundled Emscripten output now polyfills require/__filename/__dirname from import.meta.url for the ESM build, and the CommonJS copy is rewritten to use module.exports. Issues #38069 and #38501.

12.4.0-beta.1 (2026-03-05)

Features Added

  • Added functions structuredMessageDecodingStream and structuredMessageEncoding to parsing and construct structured message with CRC64 checksum for content validation.
  • Added property of signedDelegatedUserTid in UserDelegationKey
Commits
  • 9d83f5e [storage-common] remove top-level await from crc64.js (#38741)
  • ff9fc24 Update package version for stg101 (#38623)
  • 626a45b [storage-common] Fix CRC64 module loading under ESM and CommonJS (#38507)
  • cd995b1 Migrate @​azure/storage-common to #platform/* wildcard imports (#38440)
  • 3de1abe Add imports field to all warp-built packages (#38391)
  • 0aa0f0f Add react-native devDependency to packages with RN targets (#38392)
  • e8f0055 chore: Update registry for all package.json and adjust check rules (#38281)
  • 65c0ccc feat(warp): explicit CJS via moduleType, esbuild ESM→CJS transform (#37893)
  • 8c0d6ee Update change log for STG101 release (#37503)
  • 7b9b6aa Storage/content checksum (#37208)
  • Additional commits viewable in compare view

Updates @bufbuild/protoplugin from 2.11.0 to 2.12.0

Release notes

Sourced from @​bufbuild/protoplugin's releases.

v2.12.0

What's Changed

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.11.0...v2.12.0

Commits

Updates @typespec/ts-http-runtime from 0.3.5 to 0.3.6

Changelog

Sourced from @​typespec/ts-http-runtime's changelog.

0.3.6 (2026-06-04)

Bugs Fixed

  • Fix an issue in NodeHttpClient where we incorrectly send the whole backing buffer when request body is an ArrayBufferView. [PR #38718](Azure/azure-sdk-for-js#38718)
  • createHttpHeaders now strips CR (\r) and LF (\n) characters from header values to prevent obs-fold (line folding) sequences, as required by RFC 7230 §3.2.4. [PR #38744](Azure/azure-sdk-for-js#38744)

Other Changes

Commits
  • 000bfb6 [core] prepare for June 2026 release (#38788)
  • 1d12fe2 Sanitize HTTP header values to strip CR/LF (RFC 7230 §3.2.4) (#38744)
  • a44316c [core] send request body of ArrayBufferView subarray properly (#38718)
  • 1c23475 [core-client-rest] preserve tracingOptions in request parameters (#38285)
  • e8f0055 chore: Update registry for all package.json and adjust check rules (#38281)
  • 686b9db chore(core): improve cross-platform test compatibility (#38145)
  • b9e6755 feat(ts-http-runtime): migrate to #platform/* subpath imports (#37974)
  • 7cf73b6 [ts-http-runtime] set bodyAsText on RestError.response (#38059)
  • 047b6ad chore(ts-http-runtime): add react-native platform tests (#38066)
  • See full diff in compare view

Updates b4a from 1.8.0 to 1.8.1

Release notes

Sourced from b4a's releases.

v1.8.1

Full Changelog: holepunchto/b4a@v1.8.0...v1.8.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for b4a since your current version.


Updates bare-events from 2.8.2 to 2.9.1

Release notes

Sourced from bare-events's releases.

v2.9.1

No release notes provided.

v2.9.0

No release notes provided.

v2.8.3

What's Changed

Full Changelog: holepunchto/bare-events@v2.8.2...v2.8.3

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for bare-events since your current version.


Updates bare-fs from 4.7.1 to 4.7.2

Commits

Updates bare-os from 3.8.7 to 3.9.1

Release notes

Sourced from bare-os's releases.

v3.9.1

What's Changed

New Contributors

Full Changelog: holepunchto/bare-os@v3.9.0...v3.9.1

v3.9.0

What's Changed

Full Changelog: holepunchto/bare-os@v3.8.7...v3.9.0

Commits

Updates bare-path from 3.0.0 to 3.0.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for bare-path since your current version.


Updates bare-stream from 2.13.0 to 2.13.3

Release notes

Sourced from bare-stream's releases.

v2.13.3

No release notes provided.

v2.13.2

No release notes provided.

v2.13.1

What's Changed

Full Changelog: holepunchto/bare-stream@v2.13.0...v2.13.1

Commits

Updates bare-url from 2.4.0 to 2.4.5

Release notes

Sourced from bare-url's releases.

v2.4.5

No release notes provided.

v2.4.4

No release notes provided.

v2.4.3

What's Changed

Full Changelog: holepunchto/bare-url@v2.4.2...v2.4.3

v2.4.2

Full Changelog: holepunchto/bare-url@v2.4.1...v2.4.2

v2.4.1

Full Changelog: holepunchto/bare-url@v2.4.0...v2.4.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for bare-url since your current version.


Updates brace-expansion from 1.1.14 to 1.1.15

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

Commits

Updates es-object-atoms from 1.1.1 to 1.1.2

Changelog

Sourced from es-object-atoms's changelog.

v1.1.2 - 2026-05-22

Commits

  • [Dev Deps] update @ljharb/eslint-config, @ljharb/tsconfig, auto-changelog, eslint, npmignore 41e3d94
  • [types] improve isObject type 758edc2
Commits
  • 9e62644 v1.1.2
  • 41e3d94 [Dev Deps] update @ljharb/eslint-config, @ljharb/tsconfig, `auto-changelo...
  • 758edc2 [types] improve isObject type
  • See full diff in compare view

Updates fast-xml-builder from 1.1.4 to 1.2.0

Changelog

Sourced from fast-xml-builder's changelog.

1.2.0 (2026-05-08)

  • Add support for sanitizeName option
  • Support xml-naming for validating and sanitizing tag and attribute names

1.1.9 (2026-05-06)

  • fix: format output for preserve order when indent by is set to empty string

1.1.8 (2026-05-05)

  • fix: skip text property for PI tags
  • improve typings

1.1.7 (2026--05-04)

  • fix security issues when attribute value contains quotes

1.1.6 (2026--05-04)

  • fix security issues related to comment
  • skip comment with null value

1.1.5 (2026-04-17)

  • fix security issues related to comment and cdata

1.1.4 (2026-03-16)

  • support maxNestedTags option

1.1.3 (2026-03-13)

  • declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

1.1.2 (2026-03-11)

  • fix typings

1.1.1 (2026-03-11)

  • upgrade path-expression-matcher to 1.1.3

1.1.0 (2026-03-10)

Commits

Updates fast-xml-parser from 5.6.0 to 5.9.2

Release notes

Sourced from fast-xml-parser's releases.

v5.9.2

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.1...v5.9.2

v5.9.1

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.0...v5.9.1

update strnum, use is-unsafe

  • update strnum to 2.3.0
    • you can set hex, binary, enotation, infinity, unicode
  • validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

update strnum, FXB. Use xml-naming for DOCTYPE

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname because of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is by deault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

fix minor old bugs and update builder

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated

backward compatibility for numerical external entity, fix #705, #817

  • allow numerical external entity for backward compatibility
  • fix #705: attributesGroupName working with preserveOrder
  • fix #817: stackoverflow when tag expression is very long

upgrade @​nodable/entities and FXB

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to use entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment's content
Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

*5.9.2 / 2026-06-17

  • dummy release to test changes in github action

*5.9.1 / 2026-06-17

  • dummy release to test release from github action

*5.9.0 / 2026-06-15

  • update strnum to 2.3.0
    • you can set hex, binary, enotation, infinity, unicode
  • validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is bydeault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

5.7.3 / 2006-05-05

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated

5.7.2 / 2026-04-25

  • allow numerical external entity for backward compatibility
  • fix #705: attributesGroupName working with preserveOrder
  • fix #817: stackoverflow when tag expression is very long

5.7.1 / 2026-04-20

  • fix typo in CJS typing file

5.7.0 / 2026-04-17

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to user entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.

... (truncated)

Commits
  • bf9b81a 5.9.2
  • 232abf5 update publish action for better security
  • 73411fa update checklist
  • d57e33b 5.9.1
  • 3be603a testing release from Github
  • b6c41ea Add GitHub Actions workflow for npm publishing
  • 43cc56d Revise CHANGELOG for upcoming version 5.9.0
  • d429d70 update for release
  • a8b3564 update docs
  • ca273dc update strnum to support unicode, discard unsafe doctype entities
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fast-xml-parser since your current version.


Updates form-data from 2.5.5 to 2.5.6

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

  • [Fix] escape CR, LF, and " in field names and filenames b620316
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578
  • [Dev Deps] update js-randomness-predictor 46cfd23
  • [Tests] use safe-buffer so the header-injection test runs on node < 4 633044a
  • [Deps] update hasown e3b96ee
Commits
  • c713349 v2.5.6
  • 46cfd23 [Dev Deps] update js-randomness-predictor
  • 633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
  • e3b96ee [Deps] update hasown
  • 12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
  • b620316 [Fix] escape CR, LF, and " in field names and filenames
  • See full diff in compare view

Updates hasown from 2.0.2 to 2.0.4

Changelog

Sourced from hasown's changelog.

v2.0.4 - 2026-05-28

Commits

  • [types] drop the dead key-narrowing overload fdab00e
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint 91f6247

v2.0.3 - 2026-04-17

Commits

  • [actions] update workflows fb837b8
  • [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @ljharb/tsconfig, @types/tape, auto-changelog, eslint, mock-property, npmignore, tape f4b279b
  • [Dev Deps] update eslint, @ljharb/esl...

    Description has been truncated

@dependabot
deps(deps): bump the production-dependencies group across 1 directory…
ce69fd5 
… with 23 updates

Bumps the production-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/core-client](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/core/core-client) | `1.10.1` | `1.10.2` |
| [@azure/core-rest-pipeline](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/core/core-rest-pipeline) | `1.23.0` | `1.24.0` |
| [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/storage/storage-blob) | `12.31.0` | `12.32.0` |
| [@bufbuild/protoplugin](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protoplugin) | `2.11.0` | `2.12.0` |
| [@typespec/ts-http-runtime](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/core/ts-http-runtime) | `0.3.5` | `0.3.6` |
| [b4a](https://github.com/holepunchto/b4a) | `1.8.0` | `1.8.1` |
| [bare-events](https://github.com/holepunchto/bare-events) | `2.8.2` | `2.9.1` |
| [bare-fs](https://github.com/holepunchto/bare-fs) | `4.7.1` | `4.7.2` |
| [bare-os](https://github.com/holepunchto/bare-os) | `3.8.7` | `3.9.1` |
| [bare-path](https://github.com/holepunchto/bare-path) | `3.0.0` | `3.0.1` |
| [bare-stream](https://github.com/holepunchto/bare-stream) | `2.13.0` | `2.13.3` |
| [bare-url](https://github.com/holepunchto/bare-url) | `2.4.0` | `2.4.5` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.14` | `1.1.15` |
| [es-object-atoms](https://github.com/ljharb/es-object-atoms) | `1.1.1` | `1.1.2` |
| [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) | `1.1.4` | `1.2.0` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.6.0` | `5.9.2` |
| [form-data](https://github.com/form-data/form-data) | `2.5.5` | `2.5.6` |
| [streamx](https://github.com/mafintosh/streamx) | `2.25.0` | `2.28.0` |
| [tar-stream](https://github.com/mafintosh/tar-stream) | `3.1.8` | `3.2.0` |
| [undici](https://github.com/nodejs/undici) | `6.25.0` | `6.27.0` |



Updates `@azure/core-client` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/core/core-client/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/core-client_1.10.2/sdk/core/core-client)

Updates `@azure/core-rest-pipeline` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/core/core-rest-pipeline/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/core-rest-pipeline_1.24.0/sdk/core/core-rest-pipeline)

Updates `@azure/storage-blob` from 12.31.0 to 12.32.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/storage/storage-blob/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/storage-blob_12.32.0/sdk/storage/storage-blob)

Updates `@azure/storage-common` from 12.3.0 to 12.4.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/storage/storage-common/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/storage-common_12.4.0/sdk/storage/storage-common)

Updates `@bufbuild/protoplugin` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/bufbuild/protobuf-es/releases)
- [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.12.0/packages/protoplugin)

Updates `@typespec/ts-http-runtime` from 0.3.5 to 0.3.6
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/core/ts-http-runtime/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@typespec/ts-http-runtime_0.3.6/sdk/core/ts-http-runtime)

Updates `b4a` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/holepunchto/b4a/releases)
- [Commits](holepunchto/b4a@v1.8.0...v1.8.1)

Updates `bare-events` from 2.8.2 to 2.9.1
- [Release notes](https://github.com/holepunchto/bare-events/releases)
- [Commits](holepunchto/bare-events@v2.8.2...v2.9.1)

Updates `bare-fs` from 4.7.1 to 4.7.2
- [Release notes](https://github.com/holepunchto/bare-fs/releases)
- [Commits](holepunchto/bare-fs@v4.7.1...v4.7.2)

Updates `bare-os` from 3.8.7 to 3.9.1
- [Release notes](https://github.com/holepunchto/bare-os/releases)
- [Commits](holepunchto/bare-os@v3.8.7...v3.9.1)

Updates `bare-path` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/holepunchto/bare-path/releases)
- [Commits](holepunchto/bare-path@v3.0.0...v3.0.1)

Updates `bare-stream` from 2.13.0 to 2.13.3
- [Release notes](https://github.com/holepunchto/bare-stream/releases)
- [Commits](holepunchto/bare-stream@v2.13.0...v2.13.3)

Updates `bare-url` from 2.4.0 to 2.4.5
- [Release notes](https://github.com/holepunchto/bare-url/releases)
- [Commits](holepunchto/bare-url@v2.4.0...v2.4.5)

Updates `brace-expansion` from 1.1.14 to 1.1.15
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.14...v1.1.15)

Updates `es-object-atoms` from 1.1.1 to 1.1.2
- [Changelog](https://github.com/es-shims/es-object-atoms/blob/main/CHANGELOG.md)
- [Commits](es-shims/es-object-atoms@v1.1.1...v1.1.2)

Updates `fast-xml-builder` from 1.1.4 to 1.2.0
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-builder@v1.1.4...v1.2.0)

Updates `fast-xml-parser` from 5.6.0 to 5.9.2
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.6.0...v5.9.2)

Updates `form-data` from 2.5.5 to 2.5.6
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v2.5.5...v2.5.6)

Updates `hasown` from 2.0.2 to 2.0.4
- [Changelog](https://github.com/inspect-js/hasOwn/blob/main/CHANGELOG.md)
- [Commits](inspect-js/hasOwn@v2.0.2...v2.0.4)

Updates `streamx` from 2.25.0 to 2.28.0
- [Commits](mafintosh/streamx@v2.25.0...v2.28.0)

Updates `strnum` from 2.2.3 to 2.4.1
- [Changelog](https://github.com/NaturalIntelligence/strnum/blob/main/CHANGELOG.md)
- [Commits](NaturalIntelligence/strnum@v2.2.3...v2.4.1)

Updates `tar-stream` from 3.1.8 to 3.2.0
- [Commits](mafintosh/tar-stream@v3.1.8...v3.2.0)

Updates `undici` from 6.25.0 to 6.27.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.25.0...v6.27.0)

---
updated-dependencies:
- dependency-name: "@azure/core-client"
  dependency-version: 1.10.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@azure/core-rest-pipeline"
  dependency-version: 1.24.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@azure/storage-blob"
  dependency-version: 12.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@azure/storage-common"
  dependency-version: 12.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@bufbuild/protoplugin"
  dependency-version: 2.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@typespec/ts-http-runtime"
  dependency-version: 0.3.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: b4a
  dependency-version: 1.8.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bare-events
  dependency-version: 2.9.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: bare-fs
  dependency-version: 4.7.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bare-os
  dependency-version: 3.9.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: bare-path
  dependency-version: 3.0.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bare-stream
  dependency-version: 2.13.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bare-url
  dependency-version: 2.4.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: brace-expansion
  dependency-version: 1.1.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: es-object-atoms
  dependency-version: 1.1.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fast-xml-builder
  dependency-version: 1.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: fast-xml-parser
  dependency-version: 5.9.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: form-data
  dependency-version: 2.5.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: hasown
  dependency-version: 2.0.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: streamx
  dependency-version: 2.28.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: strnum
  dependency-version: 2.4.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tar-stream
  dependency-version: 3.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jun 19, 2026

Copy link
Copy Markdown

🔮 Release Preview

Full Changelog: V1...preview

@dependabot @github

dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-b49deac4ab branch June 26, 2026 00:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants