Skip to content

chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates#121

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm_and_yarn-9a61f42413
Open

chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates#121
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm_and_yarn-9a61f42413

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Feb 23, 2026

Bumps the npm_and_yarn group with 2 updates in the / directory: ajv and micromatch.
Bumps the npm_and_yarn group with 3 updates in the /apps/admin-ui directory: ajv, firebase and @babel/runtime.
Bumps the npm_and_yarn group with 1 update in the /apps/cli directory: js-yaml.
Bumps the npm_and_yarn group with 3 updates in the /apps/course directory: cookie, katex and mermaid.

Updates ajv from 6.12.6 to 6.14.0

Commits

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

  • this is basically v4.0.5, with some README updates
  • it is vulnerable to CVE-2024-4067
  • Updated braces to v3.0.3 to avoid CVE-2024-4068
  • does NOT break API compatibility

[4.0.6] - 2024-05-21

  • Added hasBraces to check if a pattern contains braces.
  • Fixes CVE-2024-4067
  • BREAKS API COMPATIBILITY
  • Should be labeled as a major release, but it's not.
Commits

Updates ajv from 6.12.6 to 6.14.0

Commits

Updates firebase from 9.23.0 to 10.9.0

Commits

Updates @babel/runtime from 7.24.0 to 7.28.6

Release notes

Sourced from @​babel/runtime's releases.

v7.28.6 (2026-01-12)

Thanks @​kadhirash and @​kolvian for your first PRs!

🐛 Bug Fix

  • babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
  • babel-plugin-transform-regenerator
  • babel-plugin-transform-react-jsx

💅 Polish

  • babel-core, babel-standalone

🏠 Internal

  • babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

🏃‍♀️ Performance

  • babel-plugin-transform-react-jsx

Committers: 7

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/runtime since your current version.


Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates cookie from 0.4.2 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates katex from 0.16.10 to 0.16.32

Release notes

Sourced from katex's releases.

v0.16.32

0.16.32 (2026-02-22)

Bug Fixes

v0.16.31

0.16.31 (2026-02-22)

Bug Fixes

v0.16.30

0.16.30 (2026-02-22)

Bug Fixes

v0.16.29

0.16.29 (2026-02-22)

Bug Fixes

  • \imath and other \html@mathml macros in arguments (#4139) (a850cce)

v0.16.28

0.16.28 (2026-01-25)

Bug Fixes

  • type: add missing types definition path to package.json (#4125) (0ef8921)

v0.16.27

0.16.27 (2025-12-07)

Features

  • support equals sign and surrounding whitespace in \htmlData attribute values (#4112) (c77aaec)

v0.16.26

0.16.26 (2025-12-07)

... (truncated)

Changelog

Sourced from katex's changelog.

0.16.32 (2026-02-22)

Bug Fixes

0.16.31 (2026-02-22)

Bug Fixes

0.16.30 (2026-02-22)

Bug Fixes

0.16.29 (2026-02-22)

Bug Fixes

  • \imath and other \html@mathml macros in arguments (#4139) (a850cce)

0.16.28 (2026-01-25)

Bug Fixes

  • type: add missing types definition path to package.json (#4125) (0ef8921)

0.16.27 (2025-12-07)

Features

  • support equals sign and surrounding whitespace in \htmlData attribute values (#4112) (c77aaec)

0.16.26 (2025-12-07)

Bug Fixes

  • \mathop followed by integral symbol (6fbad18)

0.16.25 (2025-10-13)

... (truncated)

Commits
  • 3590b82 chore(release): 0.16.32 [ci skip]
  • 71305a0 fix: italic separation in \mathnormal (#4143)
  • 7933853 chore(release): 0.16.31 [ci skip]
  • ef51f18 fix: \*frac sizing (#4137)
  • 9ff1ac0 chore(release): 0.16.30 [ci skip]
  • 2d1ba86 fix: no line breaks after \not (#4140)
  • f472dc6 chore(release): 0.16.29 [ci skip]
  • a850cce fix: \imath and other \html@mathml macros in arguments (#4139)
  • a39921c refactor: optimize string lookups using Set instead of Array (#4094)
  • 8645837 refactor: remove default exports from stretchy and delimiter (#4141)
  • Additional commits viewable in compare view

Updates mermaid from 10.8.0 to 11.12.3

Release notes

Sourced from mermaid's releases.

mermaid@11.12.3

Patch Changes

  • Updated dependencies [7243340]:
    • @​mermaid-js/parser@​1.0.0

mermaid@11.12.2

Patch Changes

mermaid@11.12.1

Patch Changes

mermaid@11.12.0

Minor Changes

Patch Changes

mermaid@11.11.0

Minor Changes

  • #6704 012530e Thanks @​omkarht! - feat: Added support for new participant types (actor, boundary, control, entity, database, collections, queue) in sequenceDiagram.

  • #6802 c8e5027 Thanks @​darshanr0107! - feat: Update mindmap rendering to support multiple layouts, improved edge intersections, and new shapes

Patch Changes

mermaid@11.10.1

Patch Changes

... (truncated)

Commits
  • cbe7015 Merge pull request #7397 from mermaid-js/changeset-release/master
  • 69fccd2 Version Packages
  • 56ecd66 Fixed issue with hero text
  • 3735098 Merge pull request #7377 from aloisklink/chore/upgrade-to-langium-v4
  • ea46407 Update link with source
  • dc30a46 Updating the Hero on the docs side
  • 426a616 chore(dev-deps): update @​argos-ci/cypress to 6.2.2
  • 16bc9e6 chore(deps): update dependency lodash-es to v4.17.23
  • 7243340 chore(parser)!: upgrade parser to Langium v4
  • 156dc11 chore(deps): upgrade to langium 3.5.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for mermaid since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump the npm_and_yarn group across 4 directories with 8 …
d40ced6 
…updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [ajv](https://github.com/ajv-validator/ajv) and [micromatch](https://github.com/micromatch/micromatch).
Bumps the npm_and_yarn group with 3 updates in the /apps/admin-ui directory: [ajv](https://github.com/ajv-validator/ajv), [firebase](https://github.com/firebase/firebase-js-sdk) and [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime).
Bumps the npm_and_yarn group with 1 update in the /apps/cli directory: [js-yaml](https://github.com/nodeca/js-yaml).
Bumps the npm_and_yarn group with 3 updates in the /apps/course directory: [cookie](https://github.com/jshttp/cookie), [katex](https://github.com/KaTeX/KaTeX) and [mermaid](https://github.com/mermaid-js/mermaid).


Updates `ajv` from 6.12.6 to 6.14.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.6...v6.14.0)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `ajv` from 6.12.6 to 6.14.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.6...v6.14.0)

Updates `firebase` from 9.23.0 to 10.9.0
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@9.23.0...firebase@10.9.0)

Updates `@babel/runtime` from 7.24.0 to 7.28.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.6/packages/babel-runtime)

Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `cookie` from 0.4.2 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.2...v0.7.2)

Updates `katex` from 0.16.10 to 0.16.32
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.10...v0.16.32)

Updates `mermaid` from 10.8.0 to 11.12.3
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/v10.8.0...mermaid@11.12.3)

---
updated-dependencies:
- dependency-name: ajv
  dependency-version: 6.14.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-version: 4.0.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ajv
  dependency-version: 6.14.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: firebase
  dependency-version: 10.9.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-version: 7.28.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: katex
  dependency-version: 0.16.32
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mermaid
  dependency-version: 11.12.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants