Skip to content

build(deps-dev): Bump the dev-dependencies group with 4 updates#841

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-48f0778e37
Open

build(deps-dev): Bump the dev-dependencies group with 4 updates#841
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-48f0778e37

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 4 updates: @types/jsdom, fs-extra, semver and web-ext.

Updates @types/jsdom from 28.0.1 to 28.0.3

Commits

Updates fs-extra from 11.3.4 to 11.3.5

Changelog

Sourced from fs-extra's changelog.

11.3.5 / 2026-05-06

  • Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)
  • Fix error handling in timestamp preservation code (#1065, #1069)
  • Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)
Commits

Updates semver from 7.7.4 to 7.8.1

Release notes

Sourced from semver's releases.

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

Changelog

Sourced from semver's changelog.

7.8.1 (2026-05-21)

Bug Fixes

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

Commits

Updates web-ext from 10.1.0 to 10.3.0

Release notes

Sourced from web-ext's releases.

10.3.0 (2026-05-28)

main changes

None

dependencies

  • Updated: dependency tmp to 0.2.6 (#3724)

others

  • chore(deps): bump addons-linter to 10.6.0 (#3725)
  • chore(ci): add cooldown setting to dependabot (#3722)

10.2.0 (2026-05-21)

main changes

  • Added --chromium-pref to CLI options (#3664)
  • Added termsofuse.bypassNotification to the default Firefox prefs (#3691)
  • Updated Firefox default prefs to ensure web-ext run is enabling by default content scripts visibility in the devtools debugger panel (#3690)
  • Removed node-notifier unmaintained dependency (#3689)

dependencies

  • Updated: dependency addons-linter to 10.5.0 (#3717)

dev dependencies

  • Updated: dependency @babel/preset-env to 7.29.5 (#3710)
  • Updated: dependency @babel/register to 7.29.3 (#3705)
  • Updated: dependency @commitlint/cli to 21.0.1 (#3718)
  • Updated: dependency @commitlint/config-conventional to 21.0.1 (#3719)
  • Updated: dependency @eslint/compat to 2.1.0 (#3713)
  • Updated: dependency babel-plugin-istanbul to 8.0.0 (#3680)
  • Updated: dependency cross-env to 10.1.0 (#3526)
  • Updated: dependency fast-uri to 3.1.2 (#3714)
  • Updated: dependency fs-extra to 11.3.5 (#3712)
  • Updated: dependency globals to 17.6.0 (#3708)
  • Updated: dependency prettier to 3.8.3 (#3686)
  • Updated: dependency sinon to 22.0.0 (#3711)

others

  • Avoid intermittent failure of test.watcher.js (#3695)
  • Add some npm audit exceptions: brace-expansion (#3721) and uuid (#3692)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 4 updates: [@types/jsdom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsdom), [fs-extra](https://github.com/jprichardson/node-fs-extra), [semver](https://github.com/npm/node-semver) and [web-ext](https://github.com/mozilla/web-ext).


Updates `@types/jsdom` from 28.0.1 to 28.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsdom)

Updates `fs-extra` from 11.3.4 to 11.3.5
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.4...11.3.5)

Updates `semver` from 7.7.4 to 7.8.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.4...v7.8.1)

Updates `web-ext` from 10.1.0 to 10.3.0
- [Release notes](https://github.com/mozilla/web-ext/releases)
- [Commits](mozilla/web-ext@10.1.0...10.3.0)

---
updated-dependencies:
- dependency-name: "@types/jsdom"
  dependency-version: 28.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: fs-extra
  dependency-version: 11.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: semver
  dependency-version: 7.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: web-ext
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 3, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedweb-ext@​10.3.0951001009370
Added@​types/​jsdom@​28.0.31001007489100
Addedvite-plus@​0.1.2481100100100100
Addedfs-extra@​11.3.510010010090100
Addedsemver@​7.8.110010010092100

View full report

@github-actions

github-actions Bot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

🤖 Build Bot

✅ Successful build

⬇️ Download: notero-1.2.4-1056

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants