Bump the npm group across 1 directory with 21 updates #1077

dependabot · 2025-12-22T20:07:11Z

Bumps the npm group with 21 updates in the /ui directory:

Package	From	To
body-parser	`2.2.0`	`2.2.1`
express	`5.1.0`	`5.2.1`
graphql	`16.11.0`	`16.12.0`
react	`19.2.0`	`19.2.3`
react-dom	`19.2.0`	`19.2.3`
send	`1.2.0`	`1.2.1`
serve-static	`2.2.0`	`2.2.1`
@eslint/config-array	`0.21.1`	`0.23.0`
@eslint/object-schema	`2.1.7`	`3.0.0`
@typescript-eslint/eslint-plugin	`8.46.2`	`8.50.1`
@typescript-eslint/parser	`8.46.2`	`8.50.1`
css-minimizer-webpack-plugin	`7.0.2`	`7.0.4`
esbuild-loader	`4.4.0`	`4.4.1`
eslint	`9.38.0`	`9.39.2`
html-webpack-plugin	`5.6.4`	`5.6.5`
prettier	`3.6.2`	`3.7.4`
react-router-dom	`7.9.5`	`7.11.0`
rimraf	`6.0.1`	`6.1.2`
terser-webpack-plugin	`5.3.14`	`5.3.16`
typescript-eslint	`8.46.2`	`8.50.1`
webpack	`5.102.1`	`5.104.1`

Updates body-parser from 2.2.0 to 2.2.1

Release notes

Sourced from body-parser's releases.

v2.2.1

Important: Security

Security fix for CVE-2025-13466 (GHSA-wqch-xfxh-vrr4)

What's Changed

ci: add dependabot by @Phillip9587 in expressjs/body-parser#593

ci: use full SHAs for github action versions by @Phillip9587 in expressjs/body-parser#594

deps: type-is@^2.0.1 by @Phillip9587 in expressjs/body-parser#599

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/body-parser#609

build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in expressjs/body-parser#610

build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 by @dependabot[bot] in expressjs/body-parser#611

build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.31.0 by @dependabot[bot] in expressjs/body-parser#613

build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 by @dependabot[bot] in expressjs/body-parser#612

ci: add codeql github workflows scanning by @Phillip9587 in expressjs/body-parser#614

ci: update CodeQL config to ignore the test directory by @Phillip9587 in expressjs/body-parser#615

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/body-parser#620

build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in expressjs/body-parser#619

chore(deps): unpin devDependencies by @Phillip9587 in expressjs/body-parser#616

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/body-parser#621

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/body-parser#623

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/body-parser#624

chore: add funding to package.json by @Phillip9587 in expressjs/body-parser#617

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/body-parser#625

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/body-parser#630

refactor: move common request validation to read function by @Phillip9587 in expressjs/body-parser#600

deps: bump iconv-lite by @bjohansebas in expressjs/body-parser#631

doc: pull beta changelog forward into 2.0.0 by @jonchurch in expressjs/body-parser#629

refactor: optimize raw and text parsers with shared passthrough function by @Phillip9587 in expressjs/body-parser#634

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in expressjs/body-parser#640

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in expressjs/body-parser#639

build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in expressjs/body-parser#636

build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in expressjs/body-parser#637

build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 by @dependabot[bot] in expressjs/body-parser#638

deps: raw-body@^3.0.1 by @Phillip9587 in expressjs/body-parser#641

deps: debug@^4.4.3 by @Phillip9587 in expressjs/body-parser#642

docs: add iconv-lite 0.7.0 changes to history entry by @Phillip9587 in expressjs/body-parser#645

ci: add node.js 25 to test matrix by @Phillip9587 in expressjs/body-parser#650

perf: move read options outside parser middlewares by @Phillip9587 in expressjs/body-parser#648

test(json): add RFC 7159 whitespace edge cases by @Ayoub-Mabrouk in expressjs/body-parser#653

test: add test for urlencoded invalid defaultCharset by @Phillip9587 in expressjs/body-parser#643

build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/body-parser#657

build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by @dependabot[bot] in expressjs/body-parser#656

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/body-parser#655

build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/body-parser#654

ci: also test on first supported node.js version by @Phillip9587 in expressjs/body-parser#646

chore: switch badges from badgen.net to shields.io by @Phillip9587 in expressjs/body-parser#661

Remove history.md from being packaged on publish by @bjohansebas in expressjs/body-parser#660

Release: 2.2.1 by @UlisesGascon in expressjs/body-parser#659

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.2.1 / 2025-11-24

Security fix for GHSA-wqch-xfxh-vrr4

deps:

type-is@^2.0.1

iconv-lite@^0.7.0

Handle split surrogate pairs when encoding UTF-8

Avoid false positives in encodingExists by using prototype-less objects

raw-body@^3.0.1

debug@^4.4.3

Commits

d96b63d 2.2.1 (#659)
b204886 sec: security patch for CVE-2025-13466
e20e351 feat: remove history.md from being packaged on publish (#660)
0d7ce71 docs: switch badges from badgen.net to shields.io (#661)
168afff ci: also test on first supported node.js version (#646)
e539a71 build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#654)
9391612 build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#655)
57baafb build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 (#656)
a6a088e build(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 (#657)
10a114d test: add test for urlencoded invalid defaultCharset (#643)
Additional commits viewable in compare view

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 5.2.1 by @UlisesGascon in expressjs/express#6933

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by @dependabot[bot] in expressjs/express#6429

Refactor: simplify acceptsLanguages implementation using spread operator by @Ayoub-Mabrouk in expressjs/express#6137

increased code coverage of utils.js file by @ashish3011 in expressjs/express#6386

chore: remove duplicate word by @dufucun in expressjs/express#6456

build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by @dependabot[bot] in expressjs/express#6498

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/express#6497

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/express#6496

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6504

ci: update codeql config by @Phillip9587 in expressjs/express#6488

chore: wider range for query test skip by @jonchurch in expressjs/express#6512

chore: fix typos in test by @noritaka1166 in expressjs/express#6535

ci: disable credential persistence for checkout actions by @mertssmnoglu in expressjs/express#6522

ci: allow manual triggering of workflow by @shivarm in expressjs/express#6515

test: add coverage for app.listen() variants by @kgarg1 in expressjs/express#6476

docs: move documentation and charters to the discussions and .github … by @bjohansebas in expressjs/express#6427

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/express#6549

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/express#6548

chore: enforce explicit Buffer import and add lint rule by @shivarm in expressjs/express#6525

chore: use node protocol for querystring by @shivarm in expressjs/express#6520

chore: fix typo by @mountdisk in expressjs/express#6609

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/express#6618

add deprecation warnings for redirect arguments undefined by @bjohansebas in expressjs/express#6405

ci: run CI when the markdown changes by @bjohansebas in expressjs/express#6632

doc: fix CONTRIBUTING link by @jonchurch in expressjs/express#6653

doc: update contributing guidelines and code of conduct links by @ShubhamOulkar in expressjs/express#6601

build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by @dependabot[bot] in expressjs/express#6679

build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by @dependabot[bot] in expressjs/express#6678

lint: add --fix flag to automatic fix linting issue by @shivarm in expressjs/express#6644

chore: ignore yarn.lock file and update example by @shivarm in expressjs/express#6588

lib: use req.socket over deprecated req.connection by @bjohansebas in expressjs/express#6705

doc: update express app example by @shivarm in expressjs/express#6718

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/express#6675

Remove history.md from being packaged on publish by @sheplu in expressjs/express#6780

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: body-parser@^2.2.1

A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

Commits

dbac741 5.2.1
697547c Revert "sec: security patch for CVE-2024-51999"
4007ad1 Release: 5.2.0 (#6920)
2f64f68 sec: security patch for CVE-2024-51999
ed0ba3f build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#6928)
8eace46 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#6929)
30bae81 build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#6930)
758d435 deps: body-parser@^2.2.1 (#6922)
77bcd52 docs: update emeritus triagers (#6890)
f33caf1 Nominate to @efekrskl for triage team (#6888)
Additional commits viewable in compare view

Updates graphql from 16.11.0 to 16.12.0

Release notes

Sourced from graphql's releases.

16.12.0

v16.12.0 (2025-11-01)

New Feature 🚀

#4482 Implement changes for executable descriptions (@JoviDeCroock)

#4493 Backport schema coordinates (@JoviDeCroock)

Bug Fix 🐞

#4392 Catch unhandled exception in abstract resolution (@JoviDeCroock)

Docs 📝

#4374 docs: testing graphQL servers (@sarahxsanders)

#4376 docs: type generation for graphql servers (@sarahxsanders)

#4380 docs: add guides for custom scalars (@sarahxsanders)

#4381 docs: anatomy of a resolver (@sarahxsanders)

#4382 docs: understanding graphql errors (@sarahxsanders)

#4383 docs: N+1 problem and DataLoader (@sarahxsanders)

#4391 docs: cursor-based pagination guide (@sarahxsanders)

#4393 docs: add page on abstract types (@sarahxsanders)

#4394 docs: editorial on abstract types page (@benjie)

#4395 docs: editorial for recent documentation updates (@benjie)

#4396 docs: add page on authorization strategies (@sarahxsanders)

#4398 docs: update "going to production" guide (@sarahxsanders)

#4399 Update mutations-and-input-types.mdx (@roman-lakhnov)

#4400 Remove CJS from docs (@JoviDeCroock)

#4401 docs: add guide on directives (@sarahxsanders)

#4402 docs: add guide for operation complexity controls (@sarahxsanders)

#4405 docs: add guide on nullability (@sarahxsanders)

#4406 docs: add guide on subscriptions (@sarahxsanders)

#4411 docs: add guide on caching strategies (@sarahxsanders)

#4414 docs: guide on scaling your API (@sarahxsanders)

#4416 Editorial for #4405 (nullability) (@benjie)

#4417 Indicate that field arguments should always be preferred over directives (@benjie)

#4418 docs: trusted documents (@benjie)

#4419 docs: cleanup and fixes (@sarahxsanders)

#4436 Suggestions for federation links (@Urigo)

#4444 Fix navigation (@JoviDeCroock)

#4452 fix(docs/mutations-and-input-types.mdx): root being inside of SDL (@alesculek)

#4473 docs: remove fourth permutation of the visit API (@janmeier)

Polish 💅

#4453 Remove oneof validation from values of correct type (@JoviDeCroock)

Internal 🏠

... (truncated)

Commits

bf9ffff 16.12.0
e2457b3 Backport schema coordinates (#4493)
364f17f Implement changes for executable descriptions (#4482)
60ae6c4 updated location of ModelSim gitignore file (#4479)
6808b16 docs: remove fourth permutation of the visit API (#4473)
d07c9c5 Fix typo in readme
8dc2955 fix(docs/mutations-and-input-types.mdx): root being inside of SDL (#4452)
7134cab Remove oneof validation from values of correct type (#4453)
9032db1 Fix navigation (#4444)
ba4b411 docs: testing graphQL servers (#4374)
Additional commits viewable in compare view

Updates react from 19.2.0 to 19.2.3

Release notes

Sourced from react's releases.

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.3

Release notes

Sourced from react-dom's releases.

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
See full diff in compare view

Updates send from 1.2.0 to 1.2.1

Release notes

Sourced from send's releases.

1.2.1

What's Changed

ci: add CodeQl (SAST) by @Phillip9587 in pillarjs/send#250

ci: add node.js 24 to test matrix by @Phillip9587 in pillarjs/send#255

[StepSecurity] Apply security best practices by @step-security-bot in pillarjs/send#256

chore: add funding to package.json by @bjohansebas in pillarjs/send#265

build(deps): bump github/codeql-action from 2.23.2 to 3.29.5 by @dependabot[bot] in pillarjs/send#266

build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.2 by @dependabot[bot] in pillarjs/send#257

build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in pillarjs/send#269

build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by @dependabot[bot] in pillarjs/send#268

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in pillarjs/send#267

build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by @dependabot[bot] in pillarjs/send#278

build(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in pillarjs/send#277

build(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in pillarjs/send#276

build(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in pillarjs/send#275

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in pillarjs/send#272

build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 by @dependabot[bot] in pillarjs/send#262

build(deps-dev): bump supertest from 6.2.2 to 6.3.4 by @dependabot[bot] in pillarjs/send#260

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in pillarjs/send#283

build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by @dependabot[bot] in pillarjs/send#282

chore: remove HISTORY.md from tarball by @Phillip9587 in pillarjs/send#285

ci: add Node.js 25 to test matrix by @Phillip9587 in pillarjs/send#284

chore: update dependency ranges to latest versions by @Phillip9587 in pillarjs/send#286

Release: 1.2.1 by @UlisesGascon in pillarjs/send#281

New Contributors

@step-security-bot made their first contribution in pillarjs/send#256

@dependabot[bot] made their first contribution in pillarjs/send#266

Full Changelog: pillarjs/send@1.2.0...1.2.1

Changelog

Sourced from send's changelog.

1.2.1 / 2025-12-15

Minor changes (package metadata)

deps:

debug@^4.4.3

http-errors@^2.0.1

mime-types@^3.0.2

statuses@^2.0.2

Commits

096a614 1.2.1 (#281)
861e3c6 chore: update depenency ranges to latest versions (#286)
a40fcd4 ci: add Node.js 25 to test matrix (#284)
7740dde chore: remove HISTORY.md from tarball (#285)
f532f41 build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 (#282)
f9b651f build(deps): bump actions/checkout from 5 to 6 (#283)
db2558b build(deps-dev): bump supertest from 6.2.2 to 6.3.4 (#260)
136fcf6 build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 (#262)
fac9c3f build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#272)
cd0c253 build(deps): bump actions/setup-node from 4 to 6 (#275)
Additional commits viewable in compare view

Updates serve-static from 2.2.0 to 2.2.1

Release notes

Sourced from serve-static's releases.

v2.2.1

What's Changed

ci: add dependabot by @Phillip9587 in expressjs/serve-static#202

ci: use full SHAs for github action versions by @Phillip9587 in expressjs/serve-static#201

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/serve-static#204

build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in expressjs/serve-static#205

build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in expressjs/serve-static#209

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/serve-static#210

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/serve-static#211

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/serve-static#212

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/serve-static#213

chore: add funding to package.json by @bjohansebas in expressjs/serve-static#216

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/serve-static#226

build(deps): bump actions/download-artifact from 4.3.0 to 6.0.0 by @dependabot[bot] in expressjs/serve-static#225

build(deps): bump github/codeql-action from 3.28.18 to 4.31.2 by @dependabot[bot] in expressjs/serve-static#224

build(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by @dependabot[bot] in expressjs/serve-static#223

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in expressjs/serve-static#218

build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 by @dependabot[bot] in expressjs/serve-static#215

docs: update examples to ES6 by @Phillip9587 in expressjs/serve-static#203

build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 by @dependabot[bot] in expressjs/serve-static#234

build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/serve-static#233

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in expressjs/serve-static#232

build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by @dependabot[bot] in expressjs/serve-static#231

feat: remove HISTORY.md from tarball content by @UlisesGascon in expressjs/serve-static#230

Release: 2.2.1 by @UlisesGascon in expressjs/serve-static#228

New Contributors

@dependabot[bot] made their first contribution in expressjs/serve-static#204

Full Changelog: expressjs/serve-static@v2.2.0...v2.2.1

Changelog

Sourced from serve-static's changelog.

2.2.1 / 2025-12-15

Minor changes (documentation, package metadata...)

Commits

76312e1 2.2.1 (#228)
d15297a feat: remove HISTORY.md from tarball content (#230)
e2713ae build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#231)
d740c83 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#232)
6e2b2f0 build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#233)
ff31626 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#234)
76d6df7 docs: update examples to ES6 (#203)
e3839dc build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 (#215)
9203f4c build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#218)
7408b80 build(deps): bump actions/setup-node from 4.4.0 to 6.0.0 (#223)
Additional commits viewable in compare view

Updates @eslint/config-array from 0.21.1 to 0.23.0

Release notes

Sourced from @eslint/config-array's releases.

config-array: v0.23.0

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

update minimatch (#273)

Features

update minimatch (#273) (8b92470)

config-array: v0.22.0

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297)

Features

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297) (acc623c)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/object-schema bumped from ^2.1.7 to ^3.0.0

Changelog

Sourced from @eslint/config-array's changelog.

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

update minimatch (#273)

Features

update minimatch (#273) (8b92470)

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297)

Features

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297) (acc623c)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/object-schema bumped from ^2.1.7 to ^3.0.0

Commits

f2a3700 chore: release main (#325)

ghjm

Auto-approval of Dependabot PRs

ghjm

Auto-approval of Dependabot PRs

Bumps the npm group with 21 updates in the /ui directory: | Package | From | To | | --- | --- | --- | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.0` | `2.2.1` | | [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` | | [graphql](https://github.com/graphql/graphql-js) | `16.11.0` | `16.12.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.3` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.3` | | [send](https://github.com/pillarjs/send) | `1.2.0` | `1.2.1` | | [serve-static](https://github.com/expressjs/serve-static) | `2.2.0` | `2.2.1` | | [@eslint/config-array](https://github.com/eslint/rewrite/tree/HEAD/packages/config-array) | `0.21.1` | `0.23.0` | | [@eslint/object-schema](https://github.com/eslint/rewrite/tree/HEAD/packages/object-schema) | `2.1.7` | `3.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.2` | `8.50.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.46.2` | `8.50.1` | | [css-minimizer-webpack-plugin](https://github.com/webpack/css-minimizer-webpack-plugin) | `7.0.2` | `7.0.4` | | [esbuild-loader](https://github.com/privatenumber/esbuild-loader) | `4.4.0` | `4.4.1` | | [eslint](https://github.com/eslint/eslint) | `9.38.0` | `9.39.2` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.4` | `5.6.5` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.9.5` | `7.11.0` | | [rimraf](https://github.com/isaacs/rimraf) | `6.0.1` | `6.1.2` | | [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin) | `5.3.14` | `5.3.16` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.46.2` | `8.50.1` | | [webpack](https://github.com/webpack/webpack) | `5.102.1` | `5.104.1` | Updates `body-parser` from 2.2.0 to 2.2.1 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.0...v2.2.1) Updates `express` from 5.1.0 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v5.1.0...v5.2.1) Updates `graphql` from 16.11.0 to 16.12.0 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v16.11.0...v16.12.0) Updates `react` from 19.2.0 to 19.2.3 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react) Updates `react-dom` from 19.2.0 to 19.2.3 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.3/packages/react-dom) Updates `send` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@1.2.0...1.2.1) Updates `serve-static` from 2.2.0 to 2.2.1 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md) - [Commits](expressjs/serve-static@v2.2.0...v2.2.1) Updates `@eslint/config-array` from 0.21.1 to 0.23.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/config-array/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/config-array-v0.23.0/packages/config-array) Updates `@eslint/object-schema` from 2.1.7 to 3.0.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/object-schema/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/object-schema-v3.0.0/packages/object-schema) Updates `@typescript-eslint/eslint-plugin` from 8.46.2 to 8.50.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.46.2 to 8.50.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/parser) Updates `css-minimizer-webpack-plugin` from 7.0.2 to 7.0.4 - [Release notes](https://github.com/webpack/css-minimizer-webpack-plugin/releases) - [Changelog](https://github.com/webpack/css-minimizer-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/css-minimizer-webpack-plugin@v7.0.2...v7.0.4) Updates `esbuild-loader` from 4.4.0 to 4.4.1 - [Release notes](https://github.com/privatenumber/esbuild-loader/releases) - [Commits](privatenumber/esbuild-loader@v4.4.0...v4.4.1) Updates `eslint` from 9.38.0 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.38.0...v9.39.2) Updates `html-webpack-plugin` from 5.6.4 to 5.6.5 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v5.6.4...v5.6.5) Updates `prettier` from 3.6.2 to 3.7.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.7.4) Updates `react-router-dom` from 7.9.5 to 7.11.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom) Updates `rimraf` from 6.0.1 to 6.1.2 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v6.0.1...v6.1.2) Updates `terser-webpack-plugin` from 5.3.14 to 5.3.16 - [Release notes](https://github.com/webpack/terser-webpack-plugin/releases) - [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/terser-webpack-plugin@v5.3.14...v5.3.16) Updates `typescript-eslint` from 8.46.2 to 8.50.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/typescript-eslint) Updates `webpack` from 5.102.1 to 5.104.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.102.1...v5.104.1) --- updated-dependencies: - dependency-name: body-parser dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: graphql dependency-version: 16.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: react dependency-version: 19.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: react-dom dependency-version: 19.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: send dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: serve-static dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@eslint/config-array" dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@eslint/object-schema" dependency-version: 3.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.50.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.50.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: css-minimizer-webpack-plugin dependency-version: 7.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: esbuild-loader dependency-version: 4.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: eslint dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: html-webpack-plugin dependency-version: 5.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: prettier dependency-version: 3.7.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: react-router-dom dependency-version: 7.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: rimraf dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: terser-webpack-plugin dependency-version: 5.3.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: typescript-eslint dependency-version: 8.50.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: webpack dependency-version: 5.104.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm ... Signed-off-by: dependabot[bot] <[email protected]>

ghjm

Auto-approval of Dependabot PRs

dependabot · 2026-01-13T00:57:44Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 22, 2025

ghjm enabled auto-merge (rebase) December 22, 2025 20:07

ghjm approved these changes Dec 22, 2025

View reviewed changes

dependabot bot force-pushed the dependabot/npm_and_yarn/ui/npm-09ac90bf8e branch from f6b2ba0 to ffebcd4 Compare January 5, 2026 20:07

ghjm approved these changes Jan 5, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/npm_and_yarn/ui/npm-09ac90bf8e branch from ffebcd4 to 51ac9f7 Compare January 5, 2026 20:11

ghjm approved these changes Jan 5, 2026

View reviewed changes

dependabot bot closed this Jan 13, 2026

auto-merge was automatically disabled January 13, 2026 00:57
Pull request was closed

dependabot bot deleted the dependabot/npm_and_yarn/ui/npm-09ac90bf8e branch January 13, 2026 00:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm group across 1 directory with 21 updates #1077

Bump the npm group across 1 directory with 21 updates #1077

Uh oh!

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading

Uh oh!

ghjm left a comment

Uh oh!

ghjm left a comment

Uh oh!

ghjm left a comment

Uh oh!

dependabot bot commented on behalf of github Jan 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the npm group across 1 directory with 21 updates #1077

Bump the npm group across 1 directory with 21 updates #1077

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.2.1

Important: Security

What's Changed

2.2.1 / 2025-11-24

v5.2.1

What's Changed

v5.2.0

Important: Security

What's Changed

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

16.12.0

v16.12.0 (2025-11-01)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

1.2.1

What's Changed

New Contributors

1.2.1 / 2025-12-15

v2.2.1

What's Changed

New Contributors

2.2.1 / 2025-12-15

config-array: v0.23.0

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

Features

config-array: v0.22.0

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Features

Dependencies

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

Features

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Features

Dependencies

Uh oh!

ghjm left a comment

Choose a reason for hiding this comment

Uh oh!

ghjm left a comment

Choose a reason for hiding this comment

Uh oh!

ghjm left a comment

Choose a reason for hiding this comment

Uh oh!

dependabot bot commented on behalf of github Jan 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading