Skip to content

chore(deps): bump the npm group across 1 directory with 5 updates #697

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Dec 1, 2025
Merged

chore(deps): bump the npm group across 1 directory with 5 updates #697

merged 1 commit into from
Dec 1, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025 •
edited
Loading

Bumps the npm group with 4 updates in the / directory: glob, mime-types, @types/node and @vitest/coverage-v8.

Updates glob from 11.0.3 to 13.0.0

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

Updates mime-types from 3.0.1 to 3.0.2

Release notes

Sourced from mime-types's releases.

v3.0.2

What's Changed

New Contributors

Full Changelog: jshttp/mime-types@v3.0.1...v3.0.2

Changelog

Sourced from mime-types's changelog.

3.0.2 / 2025-11-20

  • Fix: update JSDoc to reflect that functions return only false or string, not boolean|string.
  • Fix: refined mime-score logic so .mp4 resolves correctly
  • Fix:reflect the current Node.js version supported to ≥ 18 (See 3.0.0 for more details).
Commits
  • 29a0302 3.0.2 (#169)
  • c3ebfb1 build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.32.0 (#155)
  • 02e8eb2 fix: update JSDoc to convey only false return (#152)
  • ef03e6a build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 (#147)
  • 636cd1b build(deps-dev): bump mocha from 10.2.0 to 10.8.2 (#149)
  • c02166b build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 (#148)
  • 44956c6 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#144)
  • 5e3bb15 build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 (#150)
  • 53f720c build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#167)
  • eac806f build(deps): bump github/codeql-action from 3.30.0 to 3.30.5 (#168)
  • Additional commits viewable in compare view

Updates @types/node from 20.19.24 to 20.19.25

Commits

Updates @vitest/coverage-v8 from 4.0.6 to 4.0.13

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.13

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.12

   🐞 Bug Fixes

    View changes on GitHub

v4.0.11

   🚀 Experimental Features

   🏎 Performance

    View changes on GitHub

v4.0.10

   🐞 Bug Fixes

... (truncated)

Commits

Updates vitest from 4.0.6 to 4.0.13

Release notes

Sourced from vitest's releases.

v4.0.13

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.12

   🐞 Bug Fixes

    View changes on GitHub

v4.0.11

   🚀 Experimental Features

   🏎 Performance

    View changes on GitHub

v4.0.10

   🐞 Bug Fixes

... (truncated)

Commits
  • 73b54ce chore: release v4.0.13
  • b27e002 perf: avoid fetchModule roundtrip if the module is cached (#9075)
  • 6b9a1b5 perf(experimental): if fsCacheModule is enabled, read from the memory when ...
  • 332afa0 fix(types): don't import node.js dependent types in vitest/browser (#9068)
  • 6356b1d fix(types): don't use type from Vite 7.1 (#9071)
  • 5aa84d5 chore: release v4.0.12
  • e944a37 fix: don't import from @opentelemetry/api in public types (#9066)
  • 9a8bc78 fix: inherit fsModuleCachePath by default (#9063)
  • c3befb0 chore: release v4.0.11
  • 1b14737 perf(experimental): add file system cache (#9026)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm group across 1 directory with 5 updates
5c595f6 
Bumps the npm group with 4 updates in the / directory: [glob](https://github.com/isaacs/node-glob), [mime-types](https://github.com/jshttp/mime-types), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8).


Updates `glob` from 11.0.3 to 13.0.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.0.3...v13.0.0)

Updates `mime-types` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/jshttp/mime-types/releases)
- [Changelog](https://github.com/jshttp/mime-types/blob/master/HISTORY.md)
- [Commits](jshttp/mime-types@v3.0.1...v3.0.2)

Updates `@types/node` from 20.19.24 to 20.19.25
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.0.6 to 4.0.13
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.13/packages/coverage-v8)

Updates `vitest` from 4.0.6 to 4.0.13
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.13/packages/vitest)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: mime-types
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 20.19.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.0.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 24, 2025
@chenrui333 chenrui333 merged commit 1bfc62a into master Dec 1, 2025
2 checks passed
@chenrui333 chenrui333 deleted the dependabot/npm_and_yarn/npm-9494d4ecac branch December 1, 2025 05:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@chenrui333