deps(deps): bump the everything group across 1 directory with 11 updates by dependabot[bot] · Pull Request #17162 · GoogleChrome/lighthouse

dependabot · 2026-08-09T12:06:03Z

Bumps the everything group with 11 updates in the / directory:

Package	From	To
@sentry/node	`10.58.0`	`10.68.0`
configstore	`7.0.0`	`7.1.0`
devtools-protocol	`0.0.1663043`	`0.0.1666840`
enquirer	`2.3.6`	`2.4.1`
http-link-header	`1.1.1`	`1.1.4`
intl-messageformat	`10.5.3`	`10.7.18`
lodash-es	`4.17.21`	`4.18.1`
open	`8.4.0`	`8.4.2`
web-features	`3.34.0`	`3.34.2`
ws	`7.4.6`	`7.5.13`
yargs	`17.7.1`	`17.7.3`

Updates @sentry/node from 10.58.0 to 10.68.0

Release notes

Sourced from @sentry/node's releases.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

10.67.0

... (truncated)

Commits

b4396c3 release: 10.68.0
be21e8c meta(changelog): Update changelog for 10.68.0 (#22566)
fb0987f feat(v10): Add http.route attribute to http.server spans with parameteriz...
f7bd901 feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
ed3a8c8 feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
20227f9 feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
3e5625e feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
d924551 test(v10/cloudflare): Add Vite-build support to the integration-test runner (...
11fed03 feat(v10/cloudflare): Read wrangler config and resolve the Sentry options mod...
a540764 feat(v10): Add url.full and url.path to http.server spans (#22533)
Additional commits viewable in compare view

Updates configstore from 7.0.0 to 7.1.0

Release notes

Sourced from configstore's releases.

v7.1.0

Add clearInvalidConfig option af24eac

sindresorhus/configstore@v7.0.0...v7.1.0

Commits

a5ec042 7.1.0
af24eac Add clearInvalidConfig option
b14e818 Update link
See full diff in compare view

Updates devtools-protocol from 0.0.1663043 to 0.0.1666840

Commits

a9544e3 Roll protocol to r1666840
8ff84ba Roll protocol to r1666022
See full diff in compare view

Updates enquirer from 2.3.6 to 2.4.1

Changelog

Sourced from enquirer's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

Commits

See full diff in compare view

Updates http-link-header from 1.1.1 to 1.1.4

Commits

See full diff in compare view

Updates intl-messageformat from 10.5.3 to 10.7.18

Commits

8c196f3 build: publish
fe0dd85 fix: add a comment just to bump patch version
3a192d4 build: publish
3cf9083 build(deps): bump form-data and @parcel/config-default in /packages/react-int...
e392fba chore(deps): update io_buildbuddy_buildbuddy_toolchain digest to 722cf8f (#5125)
cfa2707 chore: Lerna-Lite --skip-bump-only-releases (#5124)
c7bc7c7 chore(deps): update babel monorepo to v7.28.4 (#5115)
e8b5a0e build: publish
e55618d chore: tooling
e1b954c chore: update lock
Additional commits viewable in compare view

Updates lodash-es from 4.17.21 to 4.18.1

Release notes

Sourced from lodash-es's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

lodash: lodash/lodash@4.18.0-npm...4.18.1-npm

lodash-es: lodash/lodash@4.18.0-es...4.18.1-es

lodash-amd: lodash/lodash@4.18.0-amd...4.18.1-amd

lodash.templatelodash/lodash@4.18.0-npm-packages...4.18.1-npm-packages

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

Add security notice for _.template in threat model and API docs (#6099)

Document lower > upper behavior in _.random (#6115)

Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

lodash.orderby

lodash.tonumber

lodash.trim

lodash.trimend

lodash.sortedindexby

lodash.zipobjectdeep

lodash.unset

lodash.omit

lodash.template

Commits

cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
75535f5 chore: prune stale advisory refs (#6170)
62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
59be2de release(minor): bump to 4.18.0 (#6161)
af63457 fix: broken tests for _.template 879aaa9
1073a76 fix: linting issues
879aaa9 fix: validate imports keys in _.template
fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
b819080 ci: add dist sync validation workflow (#6137)
Additional commits viewable in compare view

Updates open from 8.4.0 to 8.4.2

Release notes

Sourced from open's releases.

v8.4.2

Fix support for Podman 51fae87

sindresorhus/open@v8.4.1...v8.4.2

v8.4.1

Fix allowNonzeroExitCode option (#296) 051edca

Fix the app argument with WSL (#295) 4cf1a6d

sindresorhus/open@v8.4.0...v8.4.1

Commits

cbc008b 8.4.2
51fae87 Fix support for Podman
27e4e3a 8.4.1
13a800c Meta tweaks
051edca Fix allowNonzeroExitCode option (#296)
4cf1a6d Fix the app argument with WSL (#295)
05ba9e1 Meta tweaks
See full diff in compare view

Updates web-features from 3.34.0 to 3.34.2

Release notes

Sourced from web-features's releases.

v3.34.2

What's New

Status changes:

Baseline newly available: intl-locale-info

Baseline widely available: rect-xywh

What's Changed

Bump @mdn/browser-compat-data from 8.0.7 to 8.0.8 by @dependabot[bot] in web-platform-dx/web-features#4205

Full Changelog: web-platform-dx/web-features@v3.34.1...v3.34.2

Subscribe to the Upcoming changes announcements thread for news about upcoming releases, such as breaking changes or major features.

v3.34.1

What's New

Status changes:

Baseline widely available: ext-shader-texture-lod, oes-texture-half-float-linear

What's Changed

Bump @mdn/browser-compat-data from 8.0.6 to 8.0.7 by @dependabot[bot] in web-platform-dx/web-features#4193

Full Changelog: web-platform-dx/web-features@v3.34.0...v3.34.1

Subscribe to the Upcoming changes announcements thread for news about upcoming releases, such as breaking changes or major features.

Commits

9f3f763 Increment patch version to v3.34.2 (#4208)
c8b4c88 Increment patch version to v3.34.1 (#4195)
1e82ed4 Bump @types/node (#4185)
See full diff in compare view

Updates ws from 7.4.6 to 7.5.13

Release notes

Sourced from ws's releases.

7.5.13

Bug fixes

Fixed a bug introduced in version 7.5.12 that prevented the fragment counter from resetting (18bcb11a).

7.5.12

Bug fixes

Backported a2f4e7c0 and f197ac65 to the v7.x release line (fb8a1935, deec2114).

7.5.11

Bug fixes

Backported 2b2abd45 to the 7.x release line (e14c4586).

7.5.10

Bug fixes

Backported e55e5106 to the 7.x release line (22c28763).

7.5.9

Bug fixes

Backported bc8bd34e to the 7.x release line (0435e6e1).

7.5.8

Bug fixes

Backported 0fdcc0af to the 7.x release line (2758ed35).

Backported d68ba9e1 to the 7.x release line (dc1781bc).

7.5.7

Bug fixes

Backported 6946f5fe to the 7.x release line (1f72e2e1).

7.5.6

Bug fixes

Backported b8186dd1 to the 7.x release line (73dec34b).

Backported ed2b8039 to the 7.x release line (22a26afb).

7.5.5

Bug fixes

Backported ec9377ca to the 7.x release line (0e274acd).

7.5.4

Bug fixes

... (truncated)

Commits

1680801 [dist] 7.5.13
18bcb11 [fix] Reset the fragment counter when the message is complete
98fce81 [dist] 7.5.12
deec211 [fix] Lower default values of maxBufferedChunks and maxFragments
fb8a193 [fix] Count empty fragments toward the limit (#2329)
fd36cd8 [dist] 7.5.11
e14c458 [security] Limit retained message parts
d962d70 [dist] 7.5.10
22c2876 [security] Fix crash when the Upgrade header cannot be read (#2231)
8a78f87 [dist] 7.5.9
Additional commits viewable in compare view

Updates yargs from 17.7.1 to 17.7.3

Changelog

Sourced from yargs's changelog.

17.7.3 (2026-06-19)

Bug Fixes

fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

command names are not derived from modules passed to command.

singleton usage of yargs yargs.foo, yargs().argv, has been removed.

minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.

yargs is now ESM first

Features

commandDir now works with ESM files (#2461) (27eec18)

locale: adds hebrew translation (#2357) (4266485)

yargs is now ESM first (d90af45)

zsh: Add default completion as fallback (#2331) (e02c91b)

Bug Fixes

addDirectory do not support absolute command dir (#2465) (3a40a78)

allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)

browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)

build: address problems with typescript compilation (#2445) (8d72fb3)

coerce should play well with parser configuration (#2308) (8343c66)

deps: update dependency yargs-parser to v22 (#2470) (639130d)

exit after async handler done (#2313) (e326cde)

handle spaces in bash completion (#2452) (83b7788)

parser-configuration should work well with generated completion script (#2332) (888db19)

propagate Dictionary including undefined in value type (#2393) (2b2f7f5)

zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

Code Refactoring

command names are not derived from modules passed to command. (d90af45)

singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

... (truncated)

Commits

2f7df4d chore: bump version for release
caf8440 chore: bump version for prerelease
c7597e3 fix: use entry point with file extension for anything that supports exports (...
3566b84 chore(main): release 17.7.2 (#2323)
7f42848 fix: do not crash completion when having negated options (#2322)
See full diff in compare view

Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the everything group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.58.0` | `10.68.0` | | [configstore](https://github.com/sindresorhus/configstore) | `7.0.0` | `7.1.0` | | [devtools-protocol](https://github.com/ChromeDevTools/devtools-protocol) | `0.0.1663043` | `0.0.1666840` | | [enquirer](https://github.com/enquirer/enquirer) | `2.3.6` | `2.4.1` | | [http-link-header](https://github.com/jhermsmeier/node-http-link-header) | `1.1.1` | `1.1.4` | | [intl-messageformat](https://github.com/formatjs/formatjs) | `10.5.3` | `10.7.18` | | [lodash-es](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [open](https://github.com/sindresorhus/open) | `8.4.0` | `8.4.2` | | [web-features](https://github.com/web-platform-dx/web-features/tree/HEAD/packages/web-features) | `3.34.0` | `3.34.2` | | [ws](https://github.com/websockets/ws) | `7.4.6` | `7.5.13` | | [yargs](https://github.com/yargs/yargs) | `17.7.1` | `17.7.3` | Updates `@sentry/node` from 10.58.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.58.0...10.68.0) Updates `configstore` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/sindresorhus/configstore/releases) - [Commits](sindresorhus/configstore@v7.0.0...v7.1.0) Updates `devtools-protocol` from 0.0.1663043 to 0.0.1666840 - [Commits](ChromeDevTools/devtools-protocol@v0.0.1663043...v0.0.1666840) Updates `enquirer` from 2.3.6 to 2.4.1 - [Changelog](https://github.com/enquirer/enquirer/blob/master/CHANGELOG.md) - [Commits](https://github.com/enquirer/enquirer/commits) Updates `http-link-header` from 1.1.1 to 1.1.4 - [Commits](https://github.com/jhermsmeier/node-http-link-header/commits) Updates `intl-messageformat` from 10.5.3 to 10.7.18 - [Release notes](https://github.com/formatjs/formatjs/releases) - [Commits](https://github.com/formatjs/formatjs/compare/intl-messageformat@10.5.3...intl-messageformat@10.7.18) Updates `lodash-es` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `open` from 8.4.0 to 8.4.2 - [Release notes](https://github.com/sindresorhus/open/releases) - [Commits](sindresorhus/open@v8.4.0...v8.4.2) Updates `web-features` from 3.34.0 to 3.34.2 - [Release notes](https://github.com/web-platform-dx/web-features/releases) - [Commits](https://github.com/web-platform-dx/web-features/commits/v3.34.2/packages/web-features) Updates `ws` from 7.4.6 to 7.5.13 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...7.5.13) Updates `yargs` from 17.7.1 to 17.7.3 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md) - [Commits](yargs/yargs@v17.7.1...v17.7.3) --- updated-dependencies: - dependency-name: "@sentry/node" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: configstore dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: devtools-protocol dependency-version: 0.0.1666840 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: enquirer dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: http-link-header dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: intl-messageformat dependency-version: 10.7.18 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: lodash-es dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: open dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: web-features dependency-version: 3.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: ws dependency-version: 7.5.13 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: yargs dependency-version: 17.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 9, 2026

dependabot Bot requested a review from a team as a code owner August 9, 2026 12:06

dependabot Bot requested review from paulirish and removed request for a team August 9, 2026 12:06

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 9, 2026

vercel Bot deployed to Preview August 9, 2026 12:07 View deployment

Navigation Menu

Uh oh!

deps(deps): bump the everything group across 1 directory with 11 updates - #17162

deps(deps): bump the everything group across 1 directory with 11 updates#17162
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/everything-e5d6bb4aac

dependabot Bot commented on behalf of github Aug 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 9, 2026

10.68.0

Bundle size 📦

10.68.0

10.67.0

v7.1.0

Release history

4.18.1

Bugs

4.18.0

v4.18.0

Security

Docs

lodash.* modular packages

v8.4.2

v8.4.1

v3.34.2

What's New

What's Changed

v3.34.1

What's New

What's Changed

7.5.13

Bug fixes

7.5.12

Bug fixes

7.5.11

Bug fixes

7.5.10

Bug fixes

7.5.9

Bug fixes

7.5.8

Bug fixes

7.5.7

Bug fixes

7.5.6

Bug fixes

7.5.5

Bug fixes

7.5.4

Bug fixes

17.7.3 (2026-06-19)

Bug Fixes

16.2.2 (2026-06-19)

Bug Fixes

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

Features

Bug Fixes

Code Refactoring

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`lodash.*` modular packages