Skip to content

build(deps): bump the dependencies group across 1 directory with 19 updates - #3306

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-632e20f89c
Closed

build(deps): bump the dependencies group across 1 directory with 19 updates#3306
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-632e20f89c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 17, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 18 updates in the / directory:

Package From To
@eslint/js 9.39.1 9.39.2
@types/node 24.10.1 25.0.3
eslint-plugin-jest 29.2.1 29.5.0
lerna 9.0.1 9.0.3
ts-jest 29.4.5 29.4.6
typescript-eslint 8.47.0 8.50.0
node-forge 1.3.1 1.3.3
@aws-sdk/client-route-53 3.936.0 3.953.0
express 5.1.0 5.2.1
@types/express 5.0.1 5.0.6
@electron/rebuild 4.0.1 4.0.2
webpack 5.103.0 5.104.0
ipaddr.js 2.2.0 2.3.0
lru-cache 11.2.2 11.2.4
zod 4.1.13 4.2.1
nightwatch 3.12.3 3.13.0
webpack-bundle-analyzer 5.0.1 5.1.0
pino-pretty 13.1.2 13.1.3

Updates @eslint/js from 9.39.1 to 9.39.2

Release notes

Sourced from @​eslint/js's releases.

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

  • 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
  • c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
  • 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)
Commits

Updates @types/node from 24.10.1 to 25.0.3

Commits

Updates eslint-plugin-jest from 29.2.1 to 29.5.0

Release notes

Sourced from eslint-plugin-jest's releases.

v29.5.0

29.5.0 (2025-12-14)

Features

  • create new no-unneeded-async-expect-function rule (#1863) (6b8182d)

v29.4.1

29.4.1 (2025-12-14)

Bug Fixes

  • prefer-to-have-been-called-times: actually check that current matcher is toHaveLength (#1878) (3415744)

v29.4.0

29.4.0 (2025-12-13)

Features

  • create new prefer-to-have-been-called-times rule (281085a)
  • create new prefer-to-have-been-called rule (24e2acd)

v29.3.0

29.3.0 (2025-12-13)

Features

  • prefer-expect-assertions: support basic uses of hasAssertions in beforeEach and afterEach hooks (#1871) (eed9acb)

v29.2.3

29.2.3 (2025-12-13)

Bug Fixes

  • prefer-expect-assertions: use correct word in error message (#1873) (c48c48c)

v29.2.2

29.2.2 (2025-12-12)

Bug Fixes

Changelog

Sourced from eslint-plugin-jest's changelog.

29.5.0 (2025-12-14)

Features

  • create new no-unneeded-async-expect-function rule (#1863) (6b8182d)

29.4.1 (2025-12-14)

Bug Fixes

  • prefer-to-have-been-called-times: actually check that current matcher is toHaveLength (#1878) (3415744)

29.4.0 (2025-12-13)

Features

  • create new prefer-to-have-been-called-times rule (281085a)
  • create new prefer-to-have-been-called rule (24e2acd)

29.3.0 (2025-12-13)

Features

  • prefer-expect-assertions: support basic uses of hasAssertions in beforeEach and afterEach hooks (#1871) (eed9acb)

29.2.3 (2025-12-13)

Bug Fixes

  • prefer-expect-assertions: use correct word in error message (#1873) (c48c48c)

29.2.2 (2025-12-12)

Bug Fixes

Commits
  • 4297d50 chore(release): 29.5.0 [skip ci]
  • 6b8182d feat: create new no-unneeded-async-expect-function rule (#1863)
  • 48e78fc chore(release): 29.4.1 [skip ci]
  • 3415744 fix(prefer-to-have-been-called-times): actually check that current matcher is...
  • 45b4b11 test: always alias FlatCompatRuleTester as RuleTester (#1876)
  • 4a900e3 chore(release): 29.4.0 [skip ci]
  • 24e2acd feat: create new prefer-to-have-been-called rule
  • 281085a feat: create new prefer-to-have-been-called-times rule
  • 2646599 docs(prefer-called-with): remove references to toBeCalled matcher (#1874)
  • a12bc33 chore(release): 29.3.0 [skip ci]
  • Additional commits viewable in compare view

Updates lerna from 9.0.1 to 9.0.3

Release notes

Sourced from lerna's releases.

v9.0.3

9.0.3 (2025-11-27)

Bumped some dependencies to reduce audit warning noise.

NOTE: 9.0.2 does not exist because of a failed release

Changelog

Sourced from lerna's changelog.

9.0.3 (2025-11-27)

Note: Version bump only for package lerna

9.0.2 (2025-11-27)

Note: Version bump only for package lerna

Commits

Updates ts-jest from 29.4.5 to 29.4.6

Release notes

Sourced from ts-jest's releases.

v29.4.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.6 (2025-12-01)

Bug Fixes

  • log hybrid module as warning instead of failing tests (#5144) (528d37c), closes #5130
Commits
  • 202bde5 chore(release): 29.4.6 (#5146)
  • 528d37c fix: log hybrid module as warning instead of failing tests (#5144)
  • 141e5af build(deps): update github/codeql-action digest to 497990d
  • d281cce build(deps): update google/osv-scanner-action action to v2.3.0
  • 0d20322 build(deps): update dependency memfs to ^4.51.0
  • 455dde2 build(deps): update dependency js-yaml to ^4.1.1
  • d579480 build(deps): update dependency @​types/node to v20.19.25
  • f6859d0 build(deps): update dependency @​types/yargs to ^17.0.35
  • 4d7e432 build(deps): update github/codeql-action digest to d3ced5c
  • 4ea70c9 build(deps): update actions/checkout digest to 34e1148
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.47.0 to 8.50.0

Release notes

Sourced from typescript-eslint's releases.

v8.50.0

8.50.0 (2025-12-15)

🚀 Features

  • eslint-plugin: [no-useless-default-assignment] add rule (#11720)

❤️ Thank You

  • Josh Goldberg ✨
  • Ulrich Stark

You can read about our versioning strategy and releases on our website.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

  • eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

  • deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

  • eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

  • eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)
  • eslint-plugin: honor ignored base types on generic classes (#11767)
  • eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.50.0 (2025-12-15)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates node-forge from 1.3.1 to 1.3.3

Changelog

Sourced from node-forge's changelog.

1.3.3 - 2025-12-02

Fixed

  • [pkcs12] Make digestAlgorithm parameters optional to fix PKCS#12/PFX issues introduced in 1.3.2.

1.3.2 - 2025-11-25

Security

  • HIGH: ASN.1 Validator Desynchronization
    • An Interpretation Conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.
    • Reported by Hunter Wodzenski.
    • CVE ID: CVE-2025-12816
    • GHSA ID: GHSA-5gfm-wpxj-wjgq
  • HIGH: ASN.1 Unbounded Recursion
    • An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs.
    • Reported by Hunter Wodzenski.
    • CVE ID: CVE-2025-66031
    • GHSA ID: GHSA-554w-wpv2-vw27
  • MODERATE: ASN.1 OID Integer Truncation
    • An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions.
    • Reported by Hunter Wodzenski.
    • CVE ID: CVE-2025-66030
    • GHSA ID: GHSA-65ch-62r8-g69g

Fixed

  • [asn1] Fix for vulnerability identified by CVE-2025-12816 PKCS#12 MAC verification bypass due to missing macData enforcement and improper asn1.validate routine.
  • [asn1] Add fromDer() max recursion depth check.
    • Add a asn1.maxDepth global configurable maximum depth of 256.
    • Add a asn1.fromDer() per-call maxDepth option.
    • NOTE: The default maximum is assumed to be higher than needed for valid data. If this assumption is false then this could be a breaking change. Please file an issue if there are use cases that need a higher maximum.
    • NOTE: The per-call maxDepth parameter has not been exposed up through all of the API stack due to the complexities involved. Please file an issue if there are use cases that require this instead of changing the default

... (truncated)

Commits

Updates @aws-sdk/client-route-53 from 3.936.0 to 3.953.0

Release notes

Sourced from @​aws-sdk/client-route-53's releases.

v3.953.0

3.953.0(2025-12-16)

Chores
New Features
  • clients:
    • update client endpoints as of 2025-12-16 (5c0fba3d)
    • allow protocol selection by class constructor (#7568) (5c5fd2e6)
  • client-iot: Add support for dynamic payloads in IoT Device Management Commands (991cba08)
  • client-timestream-influxdb: This release adds support for rebooting InfluxDB DbInstances and DbClusters (a8b712bb)

For list of updated packages, view updated-packages.md in assets-3.953.0.zip

v3.952.0

3.952.0(2025-12-15)

Chores
Documentation Changes
  • client-bedrock-agentcore-control: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. (6207cfae)
New Features
  • client-service-quotas: Add support for SQ Dashboard Api (bcc5261c)
  • client-entityresolution: Support Customer Profiles Integration for AWS Entity Resolution (32903b15)
  • client-health: Updating Health API endpoint generation for dualstack only regions (c8be328f)
  • client-s3: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. (55955e01)
  • client-ec2: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. (f5db7c3c)
  • client-cloudwatch-logs: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. (23d7db9d)
  • client-route53resolver: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. (93737551)
  • client-glacier: Documentation updates for Amazon Glacier's maintenance mode (069dcf44)
  • client-connect: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. (c9b56eb0)
  • client-mediatailor: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. (d0aae6dd)
Bug Fixes
  • client-sts: warn sts default region only when used (#7579) (6512de50)
  • credential-provider-ini: pass requestHandler from client to login provider (#7577) (a0bd362c)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-route-53's changelog.

3.953.0 (2025-12-16)

Features

  • clients: allow protocol selection by class constructor (#7568) (5c5fd2e)

3.952.0 (2025-12-15)

Note: Version bump only for package @​aws-sdk/client-route-53

3.948.0 (2025-12-09)

Features

  • client-route-53: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region (c21e90b)

3.947.0 (2025-12-08)

Note: Version bump only for package @​aws-sdk/client-route-53

3.946.0 (2025-12-05)

Note: Version bump only for package @​aws-sdk/client-route-53

3.943.0 (2025-12-02)

Note: Version bump only for package @​aws-sdk/client-route-53

... (truncated)

Commits
  • 09e0721 Publish v3.953.0
  • 5c5fd2e feat(clients): allow protocol selection by class constructor (#7568)
  • 4359e40 chore: build cjs rollup without typescript (#7580)
  • 3870229 Publish v3.952.0
  • c6e71bf Publish v3.948.0
  • c21e90b feat(client-route-53): Amazon Route 53 now supports the EU (Germany) Region (...
  • 656bd00 Publish v3.947.0
  • 731dbfe chore(codegen): service closure knowledge index (#7554)
  • 309a20f Publish v3.946.0
  • da6eee7 chore(codegen): sync for typescript formatting (#7546)
  • Additional commits viewable in compare view

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

  • Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
    • The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
Commits

Updates @types/express from 5.0.1 to 5.0.6

Commits

Updates @types/express from 5.0.1 to 5.0.6

Commits

Updates @electron/rebuild from 4.0.1 to 4.0.2

Release notes

Sourced from @​electron/rebuild's releases.

v4.0.2

4.0.2 (2025-12-09)

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​electron/rebuild since your current version.


Updates webpack from 5.103.0 to 5.104.0

Release notes

Sourced from webpack's releases.

v5.104.0

5.104.0

Minor Changes

  • d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
  • d3dd841: Enhance import.meta.env to support object access.
  • 4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
  • 04cd530: Handle more at-rules for CSS modules.
  • cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
  • d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
  • 5983843: Provide a stable runtime function variable __webpack_global__.
  • d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

  • 22c48fb: Added module existence check for informative error message in development mode.
  • 50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
  • d3dd841: Support universal lazy compilation.
  • d3dd841: Fixed module library export definitions when multiple runtimes.
  • d3dd841: Fixed CSS nesting and CSS custom properties parsing.
  • d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.
  • aab1da9: Fixed bugs for css/global type.
  • d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.
  • d3dd841: Handle nested __webpack_require__.
  • 728ddb7: The speed of identifier parsing has been improved.
  • 0f8b31b: Improve types.
  • d3dd841: Don't corrupt debugId injection when hidden-source-map is used.
  • 2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.
  • d3dd841: Serialize HookWebpackError.
  • d3dd841: Added ability to use built-in properties in dotenv and define plugin.
  • 3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.
  • d3dd841: Reduce collision for local indent name in CSS.
  • d3dd841: Remove CSS link tags when CSS imports are removed.
Changelog

Sourced from webpack's changelog.

5.104.0

Minor Changes

  • d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
  • d3dd841: Enhance import.meta.env to support object access.
  • 4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
  • 04cd530: Handle more at-rules for CSS modules.
  • cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
  • d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
  • 5983843: Provide a stable runtime function variable __webpack_global__.
  • d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

  • 22c48fb: Added module existence check for informative error message in development mode.
  • 50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
  • d3dd841: Support universal lazy compilation.
  • d3dd841: Fixed module library export definitions when multiple runtimes.
  • d3dd841: Fixed CSS nesting and CSS custom properties parsing.
  • d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.
  • aab1da9: Fixed bugs for css/global type.
  • d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.
  • d3dd841: Handle nested __webpack_require__.
  • 728ddb7: The speed of identifier parsing has been improved.
  • 0f8b31b: Improve types.
  • d3dd841: Don't corrupt debugId injection when hidden-source-map is used.
  • 2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.
  • d3dd841: Serialize HookWebpackError.
  • d3dd841: Added ability to use built-in properties in dotenv and define plugin.
  • 3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.
  • d3dd841: Reduce collision for local indent name in CSS.
  • d3dd841: Remove CSS link tags when CSS imports are removed.
Commits
  • 505a5e7 chore(release): new release (#20188)
  • 0c06680 refactor: update eslint configuration
  • 2eb0d6a ci: release announcement (#20238)
  • b2b2459 ci: cancel in progress (#20239)
  • 918a2cb chore(deps): update (#20237)
  • cafae23 feat: added options to control renaming of identifiers in CSS modules
  • e8dca82 chore(deps): bump actions/cache from 5.0.0 to 5.0.1 (#20236)
  • 2179fdb fix(security): re-validate HttpUriPlugin redirects against allowedUris; enfor...
  • 512a32f docs: update examples (#20233)
  • 3c4319f fix: optimize regex character class with ranges for runtime code
  • Additional commits viewable in compare view

Updates ipaddr.js from 2.2.0 to 2.3.0

Changelog

Sourced from ipaddr.js's changelog.

2.3.0 - 2025-11-27

  • add isValidCIDRFourPartDecimal helper for IPv4 CIDR in four-part decimal form
  • upgrade eslint dev dependency to v9
  • remove duplicated LICENSE entry from published files list
Description has been truncated

Note

Bumps key runtime and tooling dependencies (Express, AWS SDK, node-forge, Webpack, ESLint, TypeScript tooling, etc.) across multiple packages and aligns versions.

  • Runtime/server deps:
    • Update express to ^5.2.1 across packages/*.
    • Update @aws-sdk/client-route-53 to ^3.954.0 in packages/autocertifier-server.
    • Update node-forge to ^1.3.3 in packages/autocertifier-client.
    • Bump ipaddr.js to ^2.3.0, lru-cache to ^11.2.4, zod to ^4.2.1, and pino-pretty to ^13.1.3 where used.
  • Build/tooling:
    • Bump @eslint/js ^9.39.2, eslint-plugin-jest ^29.5.0, typescript-eslint ^8.50.0, @types/node ^25.0.3, ts-jest ^29.4.6, and lerna ^9.0.3 in root.
  • Bundling/test infra:
    • Upgrade webpack to ^5.104.1, webpack-bundle-analyzer to ^5.1.0, @electron/rebuild to ^4.0.2, and nightwatch to ^3.13.0 where applicable.
  • Type definitions:
    • Bump @types/express to ^5.0.6 in relevant packages.
  • Monorepo-wide alignment:
    • Propagate these versions across autocertifier-*, dht, geoip-location, node, sdk, utils, browser-test-runner, and test-utils package manifests.

Written by Cursor Bugbot for commit 6ea53b4. This will update automatically on new commits. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 17, 2025
@github-actions github-actions Bot added test-utils Related to Test Utils Package dht Related to DHT package utils sdk node labels Dec 17, 2025
@dependabot
build(deps): bump the dependencies group across 1 directory with 19 u…
6ea53b4 
…pdates

Bumps the dependencies group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.1` | `9.39.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `25.0.3` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.2.1` | `29.5.0` |
| [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `9.0.1` | `9.0.3` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.6` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.47.0` | `8.50.0` |
| [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.3` |
| [@aws-sdk/client-route-53](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-route-53) | `3.936.0` | `3.953.0` |
| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.1` | `5.0.6` |
| [@electron/rebuild](https://github.com/electron/rebuild) | `4.0.1` | `4.0.2` |
| [webpack](https://github.com/webpack/webpack) | `5.103.0` | `5.104.0` |
| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.2.0` | `2.3.0` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.2.2` | `11.2.4` |
| [zod](https://github.com/colinhacks/zod) | `4.1.13` | `4.2.1` |
| [nightwatch](https://github.com/nightwatchjs/nightwatch) | `3.12.3` | `3.13.0` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.0.1` | `5.1.0` |
| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.1.2` | `13.1.3` |



Updates `@eslint/js` from 9.39.1 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js)

Updates `@types/node` from 24.10.1 to 25.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-plugin-jest` from 29.2.1 to 29.5.0
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v29.2.1...v29.5.0)

Updates `lerna` from 9.0.1 to 9.0.3
- [Release notes](https://github.com/lerna/lerna/releases)
- [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md)
- [Commits](https://github.com/lerna/lerna/commits/v9.0.3/packages/lerna)

Updates `ts-jest` from 29.4.5 to 29.4.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.6)

Updates `typescript-eslint` from 8.47.0 to 8.50.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.0/packages/typescript-eslint)

Updates `node-forge` from 1.3.1 to 1.3.3
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](digitalbazaar/forge@v1.3.1...v1.3.3)

Updates `@aws-sdk/client-route-53` from 3.936.0 to 3.953.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-route-53/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.953.0/clients/client-route-53)

Updates `express` from 5.1.0 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.1)

Updates `@types/express` from 5.0.1 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `@types/express` from 5.0.1 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `@electron/rebuild` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/electron/rebuild/releases)
- [Commits](electron/rebuild@v4.0.1...v4.0.2)

Updates `webpack` from 5.103.0 to 5.104.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.103.0...v5.104.0)

Updates `ipaddr.js` from 2.2.0 to 2.3.0
- [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md)
- [Commits](whitequark/ipaddr.js@v2.2.0...v2.3.0)

Updates `lru-cache` from 11.2.2 to 11.2.4
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-lru-cache@v11.2.2...v11.2.4)

Updates `zod` from 4.1.13 to 4.2.1
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.1.13...v4.2.1)

Updates `nightwatch` from 3.12.3 to 3.13.0
- [Release notes](https://github.com/nightwatchjs/nightwatch/releases)
- [Commits](nightwatchjs/nightwatch@v3.12.3...v3.13.0)

Updates `terser-webpack-plugin` from 5.3.14 to 5.3.16
- [Release notes](https://github.com/webpack/terser-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.14...v5.3.16)

Updates `webpack-bundle-analyzer` from 5.0.1 to 5.1.0
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.0.1...v5.1.0)

Updates `pino-pretty` from 13.1.2 to 13.1.3
- [Release notes](https://github.com/pinojs/pino-pretty/releases)
- [Commits](pinojs/pino-pretty@v13.1.2...v13.1.3)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 25.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: eslint-plugin-jest
  dependency-version: 29.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: lerna
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: node-forge
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@aws-sdk/client-route-53"
  dependency-version: 3.953.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@electron/rebuild"
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: webpack
  dependency-version: 5.104.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ipaddr.js
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: lru-cache
  dependency-version: 11.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: zod
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: nightwatch
  dependency-version: 3.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: terser-webpack-plugin
  dependency-version: 5.3.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pino-pretty
  dependency-version: 13.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-632e20f89c branch from e8d1288 to 6ea53b4 Compare December 18, 2025 15:10
@dependabot @github

dependabot Bot commented on behalf of github Dec 18, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot @github

dependabot Bot commented on behalf of github Dec 18, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Dec 18, 2025
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-632e20f89c branch December 18, 2025 22:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file dht Related to DHT package javascript Pull requests that update Javascript code node sdk test-utils Related to Test Utils Package utils

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants