FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

chore(deps): bump the dependencies group with 5 updates by dependabot[bot] · Pull Request #752 · NodeSecure/scanner · GitHub

/ scanner Public

chore(deps): bump the dependencies group with 5 updates - #752

Merged
fraxken merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-af442df462
Aug 10, 2026
ConversationCommits (1)ChecksFiles changed
Merged

chore(deps): bump the dependencies group with 5 updates#752
fraxken merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-af442df462

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates:

Package From To
@openally/mutex 2.0.0 3.0.0
@openally/result 2.0.0 3.1.0
ipaddr.js 2.4.0 2.5.0
@npmcli/arborist 10.0.1 10.0.2
@openally/config 1.2.0 2.0.0

Updates @openally/mutex from 2.0.0 to 3.0.0

Release notes

Sourced from @​openally/mutex's releases.

@​openally/mutex@​3.0.0

Major Changes

Changelog

Sourced from @​openally/mutex's changelog.

3.0.0

Major Changes

Commits
  • 25865b9 chore: update versions (#299)
  • f9e607f refactor: drop CJS support for all packages and remove tsup (#304)
  • c7b4b55 chore: support TypeScript 6.x (#288)
  • 65c706d fix(workspaces): add missing repository configuration for workspaces manifest
  • 7ccae39 chore: add publish configuration to each workspaces
  • 082d7dc ci: drop Node.js v22.x
  • b9d4034 refactor: use Node.js native type striping
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openally/mutex since your current version.


Updates @openally/result from 2.0.0 to 3.1.0

Release notes

Sourced from @​openally/result's releases.

@​openally/result@​3.1.0

Minor Changes

  • #307 3227a4f Thanks @​fraxken! - Introduce Option.from to collapse value to either Some(value) or None for undefined and null primitive.

@​openally/result@​3.0.0

Major Changes

Changelog

Sourced from @​openally/result's changelog.

3.1.0

Minor Changes

  • #307 3227a4f Thanks @​fraxken! - Introduce Option.from to collapse value to either Some(value) or None for undefined and null primitive.

3.0.0

Major Changes

Commits
  • bda26fc chore: update versions (#308)
  • 3227a4f feat(result): implement Option.from to collapse value to Some/None (#307)
  • 25865b9 chore: update versions (#299)
  • f9e607f refactor: drop CJS support for all packages and remove tsup (#304)
  • ca75a16 feat(result): implement missing APIs for Ok and Err + useful helpers (#298)
  • c7b4b55 chore: support TypeScript 6.x (#288)
  • See full diff in compare view

Updates ipaddr.js from 2.4.0 to 2.5.0

Changelog

Sourced from ipaddr.js's changelog.

2.5.0 - 2026-08-04

  • remove ipaddr.min.js, end users must provide own minification/bundling
  • fix: compress the leftmost zero run in toString (RFC 5952, 4.2.3)
  • fix: strict IPv6 validation — reject :: with zero compression and hextets >4 hex digits
  • fix: reject non-numeric prefix length in subnetMaskFromPrefixLength
  • fix: compress trailing zero run in toString when a zoneIndex is present
  • fix: throw a descriptive error for malformed input in IPv6.parse
Commits

Updates @npmcli/arborist from 10.0.1 to 10.0.2

Release notes

Sourced from @​npmcli/arborist's releases.

arborist: v10.0.2

10.0.2 (2026-07-27)

Bug Fixes

Chores

libnpmpack: v10.0.2

Dependencies

Changelog

Sourced from @​npmcli/arborist's changelog.

10.0.2 (2026-07-27)

Bug Fixes

Chores

Commits
  • b888cc9 chore: release 12.0.2
  • 74eff59 fix(arborist): avoid crash when peer back-off detaches a node (#9770)
  • 882d0b2 fix(arborist): allow audit fix to install safe downgrades (#9761)
  • ddd50e9 chore(arborist): add missing registry mock in bin links reify test (#9746)
  • 72a6088 chore: release 12.0.1
  • 47fc8b1 fix: correct bundled sigstore from dev dependency conflict (#9740)
  • 4403f05 chore: release 12.0.0
  • fb304e7 chore: release 12.0.0-pre.2
  • b51d156 feat(arborist): extend replace-registry-host with URL prefix matching (#6110)...
  • 86416a6 feat: graduate the linked install strategy from experimental to stable (#9674)
  • Additional commits viewable in compare view

Updates @openally/config from 1.2.0 to 2.0.0

Release notes

Sourced from @​openally/config's releases.

@​openally/config@​2.0.0

Major Changes

Changelog

Sourced from @​openally/config's changelog.

2.0.0

Major Changes

Commits
  • 25865b9 chore: update versions (#299)
  • f9e607f refactor: drop CJS support for all packages and remove tsup (#304)
  • c7b4b55 chore: support TypeScript 6.x (#288)
  • 65c706d fix(workspaces): add missing repository configuration for workspaces manifest
  • 7ccae39 chore: add publish configuration to each workspaces
  • 082d7dc ci: drop Node.js v22.x
  • b9d4034 refactor: use Node.js native type striping
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openally/config since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

chore(deps): bump the dependencies group with 5 updates
2738ea8 
Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@openally/mutex](https://github.com/OpenAlly/npm-packages/tree/HEAD/src/mutex) | `2.0.0` | `3.0.0` |
| [@openally/result](https://github.com/OpenAlly/npm-packages/tree/HEAD/src/result) | `2.0.0` | `3.1.0` |
| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.4.0` | `2.5.0` |
| [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist) | `10.0.1` | `10.0.2` |
| [@openally/config](https://github.com/OpenAlly/npm-packages/tree/HEAD/src/config) | `1.2.0` | `2.0.0` |


Updates `@openally/mutex` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/OpenAlly/npm-packages/releases)
- [Changelog](https://github.com/OpenAlly/npm-packages/blob/main/src/mutex/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/npm-packages/commits/@openally/mutex@3.0.0/src/mutex)

Updates `@openally/result` from 2.0.0 to 3.1.0
- [Release notes](https://github.com/OpenAlly/npm-packages/releases)
- [Changelog](https://github.com/OpenAlly/npm-packages/blob/main/src/result/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/npm-packages/commits/@openally/result@3.1.0/src/result)

Updates `ipaddr.js` from 2.4.0 to 2.5.0
- [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md)
- [Commits](https://github.com/whitequark/ipaddr.js/commits)

Updates `@npmcli/arborist` from 10.0.1 to 10.0.2
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/arborist/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/arborist-v10.0.2/workspaces/arborist)

Updates `@openally/config` from 1.2.0 to 2.0.0
- [Release notes](https://github.com/OpenAlly/npm-packages/releases)
- [Changelog](https://github.com/OpenAlly/npm-packages/blob/main/src/config/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/npm-packages/commits/@openally/config@2.0.0/src/config)

---
updated-dependencies:
- dependency-name: "@openally/mutex"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@openally/result"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ipaddr.js
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@npmcli/arborist"
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@openally/config"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026
dependabot Bot requested a review from a team as a code owner August 10, 2026 09:37
dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026

changeset-bot Bot commented Aug 10, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 2738ea8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security Bot commented Aug 10, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
npm/​@​openally/​mutex@​3.0.0
npm/​@​openally/​config@​2.0.0
npm/​@​npmcli/​arborist@​10.0.1 ⏵ 10.0.2 -1 +1
npm/​@​openally/​result@​3.1.0
npm/​ipaddr.js@​2.5.0

View full report

fraxken merged commit 5e8413d into master Aug 10, 2026
8 checks passed
fraxken deleted the dependabot/npm_and_yarn/dependencies-af442df462 branch August 10, 2026 12:53
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

fraxken fraxken approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

Back | FazBrowse Home | New Git URL