Bump the npm group across 1 directory with 24 updates #1086

dependabot · 2026-01-27T20:26:43Z

Bumps the npm group with 24 updates in the /ui directory:

Package	From	To
body-parser	`2.2.0`	`2.2.2`
express	`5.1.0`	`5.2.1`
graphql	`16.11.0`	`16.12.0`
react	`19.2.0`	`19.2.4`
react-dom	`19.2.0`	`19.2.4`
send	`1.2.0`	`1.2.1`
serve-static	`2.2.0`	`2.2.1`
@eslint/config-array	`0.21.1`	`0.23.0`
@eslint/object-schema	`2.1.7`	`3.0.0`
@typescript-eslint/eslint-plugin	`8.46.2`	`8.54.0`
@typescript-eslint/parser	`8.46.2`	`8.54.0`
css-loader	`7.1.2`	`7.1.3`
css-minimizer-webpack-plugin	`7.0.2`	`7.0.4`
esbuild-loader	`4.4.0`	`4.4.2`
eslint	`9.38.0`	`9.39.2`
html-webpack-plugin	`5.6.4`	`5.6.6`
mini-css-extract-plugin	`2.9.4`	`2.10.0`
prettier	`3.6.2`	`3.8.1`
react-router-dom	`7.9.5`	`7.13.0`
rimraf	`6.0.1`	`6.1.2`
terser-webpack-plugin	`5.3.14`	`5.3.16`
typescript-eslint	`8.46.2`	`8.54.0`
webpack	`5.102.1`	`5.104.1`
webpack-dev-server	`5.2.2`	`5.2.3`

Updates body-parser from 2.2.0 to 2.2.2

Release notes

Sourced from body-parser's releases.

v2.2.2

What's Changed

docs: update README links by @efekrskl in expressjs/body-parser#673

docs: release notes for the v1.20.4 release by @Phillip9587 in expressjs/body-parser#674

docs: update URL-encoded parser description to include ISO-8859-1 encoding support by @Phillip9587 in expressjs/body-parser#679

docs: use standard jsdoc tags everywhere by @Phillip9587 in expressjs/body-parser#677

deps: qs@^6.14.1 by @UlisesGascon in expressjs/body-parser#689

refactor(json): simplify strict mode error string construction by @jonchurch in expressjs/body-parser#693

Release: 2.2.2 by @UlisesGascon in expressjs/body-parser#691

New Contributors

@efekrskl made their first contribution in expressjs/body-parser#673

Full Changelog: expressjs/body-parser@v2.2.1...v2.2.2

v2.2.1

Important: Security

Security fix for CVE-2025-13466 (GHSA-wqch-xfxh-vrr4)

What's Changed

ci: add dependabot by @Phillip9587 in expressjs/body-parser#593

ci: use full SHAs for github action versions by @Phillip9587 in expressjs/body-parser#594

deps: type-is@^2.0.1 by @Phillip9587 in expressjs/body-parser#599

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/body-parser#609

build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in expressjs/body-parser#610

build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 by @dependabot[bot] in expressjs/body-parser#611

build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.31.0 by @dependabot[bot] in expressjs/body-parser#613

build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 by @dependabot[bot] in expressjs/body-parser#612

ci: add codeql github workflows scanning by @Phillip9587 in expressjs/body-parser#614

ci: update CodeQL config to ignore the test directory by @Phillip9587 in expressjs/body-parser#615

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/body-parser#620

build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in expressjs/body-parser#619

chore(deps): unpin devDependencies by @Phillip9587 in expressjs/body-parser#616

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/body-parser#621

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/body-parser#623

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/body-parser#624

chore: add funding to package.json by @Phillip9587 in expressjs/body-parser#617

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/body-parser#625

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/body-parser#630

refactor: move common request validation to read function by @Phillip9587 in expressjs/body-parser#600

deps: bump iconv-lite by @bjohansebas in expressjs/body-parser#631

doc: pull beta changelog forward into 2.0.0 by @jonchurch in expressjs/body-parser#629

refactor: optimize raw and text parsers with shared passthrough function by @Phillip9587 in expressjs/body-parser#634

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in expressjs/body-parser#640

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in expressjs/body-parser#639

build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in expressjs/body-parser#636

build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in expressjs/body-parser#637

build(deps): bump github/codeql-action from 3.29.7 to 3.30.5 by @dependabot[bot] in expressjs/body-parser#638

deps: raw-body@^3.0.1 by @Phillip9587 in expressjs/body-parser#641

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.2.2 / 2026-01-07

deps: qs@^6.14.1

refactor(json): simplify strict mode error string construction

2.2.1 / 2025-11-24

Security fix for GHSA-wqch-xfxh-vrr4

deps:

type-is@^2.0.1

iconv-lite@^0.7.0

Handle split surrogate pairs when encoding UTF-8

Avoid false positives in encodingExists by using prototype-less objects

raw-body@^3.0.1

debug@^4.4.3

Commits

3d24866 2.2.2 (#691)
8474a98 refactor(json): simplify strict mode error string construction (#693)
03f17c2 deps: qs@^6.14.1 (#689)
ea1f25e docs: use standard jsdoc tags everywhere (#677)
d7deef8 docs: update URL-encoded parser description to include ISO-8859-1 encoding su...
b6f52aa docs: release notes for the v1.20.4 release (#674)
2965ca4 docs: update links (#673)
d96b63d 2.2.1 (#659)
b204886 sec: security patch for CVE-2025-13466
e20e351 feat: remove history.md from being packaged on publish (#660)
Additional commits viewable in compare view

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 5.2.1 by @UlisesGascon in expressjs/express#6933

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by @dependabot[bot] in expressjs/express#6429

Refactor: simplify acceptsLanguages implementation using spread operator by @Ayoub-Mabrouk in expressjs/express#6137

increased code coverage of utils.js file by @ashish3011 in expressjs/express#6386

chore: remove duplicate word by @dufucun in expressjs/express#6456

build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by @dependabot[bot] in expressjs/express#6498

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/express#6497

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/express#6496

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6504

ci: update codeql config by @Phillip9587 in expressjs/express#6488

chore: wider range for query test skip by @jonchurch in expressjs/express#6512

chore: fix typos in test by @noritaka1166 in expressjs/express#6535

ci: disable credential persistence for checkout actions by @mertssmnoglu in expressjs/express#6522

ci: allow manual triggering of workflow by @shivarm in expressjs/express#6515

test: add coverage for app.listen() variants by @kgarg1 in expressjs/express#6476

docs: move documentation and charters to the discussions and .github … by @bjohansebas in expressjs/express#6427

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/express#6549

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/express#6548

chore: enforce explicit Buffer import and add lint rule by @shivarm in expressjs/express#6525

chore: use node protocol for querystring by @shivarm in expressjs/express#6520

chore: fix typo by @mountdisk in expressjs/express#6609

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/express#6618

add deprecation warnings for redirect arguments undefined by @bjohansebas in expressjs/express#6405

ci: run CI when the markdown changes by @bjohansebas in expressjs/express#6632

doc: fix CONTRIBUTING link by @jonchurch in expressjs/express#6653

doc: update contributing guidelines and code of conduct links by @ShubhamOulkar in expressjs/express#6601

build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by @dependabot[bot] in expressjs/express#6679

build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by @dependabot[bot] in expressjs/express#6678

lint: add --fix flag to automatic fix linting issue by @shivarm in expressjs/express#6644

chore: ignore yarn.lock file and update example by @shivarm in expressjs/express#6588

lib: use req.socket over deprecated req.connection by @bjohansebas in expressjs/express#6705

doc: update express app example by @shivarm in expressjs/express#6718

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/express#6675

Remove history.md from being packaged on publish by @sheplu in expressjs/express#6780

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: body-parser@^2.2.1

A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

Commits

dbac741 5.2.1
697547c Revert "sec: security patch for CVE-2024-51999"
4007ad1 Release: 5.2.0 (#6920)
2f64f68 sec: security patch for CVE-2024-51999
ed0ba3f build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#6928)
8eace46 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#6929)
30bae81 build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#6930)
758d435 deps: body-parser@^2.2.1 (#6922)
77bcd52 docs: update emeritus triagers (#6890)
f33caf1 Nominate to @efekrskl for triage team (#6888)
Additional commits viewable in compare view

Updates graphql from 16.11.0 to 16.12.0

Release notes

Sourced from graphql's releases.

16.12.0

v16.12.0 (2025-11-01)

New Feature 🚀

#4482 Implement changes for executable descriptions (@JoviDeCroock)

#4493 Backport schema coordinates (@JoviDeCroock)

Bug Fix 🐞

#4392 Catch unhandled exception in abstract resolution (@JoviDeCroock)

Docs 📝

#4374 docs: testing graphQL servers (@sarahxsanders)

#4376 docs: type generation for graphql servers (@sarahxsanders)

#4380 docs: add guides for custom scalars (@sarahxsanders)

#4381 docs: anatomy of a resolver (@sarahxsanders)

#4382 docs: understanding graphql errors (@sarahxsanders)

#4383 docs: N+1 problem and DataLoader (@sarahxsanders)

#4391 docs: cursor-based pagination guide (@sarahxsanders)

#4393 docs: add page on abstract types (@sarahxsanders)

#4394 docs: editorial on abstract types page (@benjie)

#4395 docs: editorial for recent documentation updates (@benjie)

#4396 docs: add page on authorization strategies (@sarahxsanders)

#4398 docs: update "going to production" guide (@sarahxsanders)

#4399 Update mutations-and-input-types.mdx (@roman-lakhnov)

#4400 Remove CJS from docs (@JoviDeCroock)

#4401 docs: add guide on directives (@sarahxsanders)

#4402 docs: add guide for operation complexity controls (@sarahxsanders)

#4405 docs: add guide on nullability (@sarahxsanders)

#4406 docs: add guide on subscriptions (@sarahxsanders)

#4411 docs: add guide on caching strategies (@sarahxsanders)

#4414 docs: guide on scaling your API (@sarahxsanders)

#4416 Editorial for #4405 (nullability) (@benjie)

#4417 Indicate that field arguments should always be preferred over directives (@benjie)

#4418 docs: trusted documents (@benjie)

#4419 docs: cleanup and fixes (@sarahxsanders)

#4436 Suggestions for federation links (@Urigo)

#4444 Fix navigation (@JoviDeCroock)

#4452 fix(docs/mutations-and-input-types.mdx): root being inside of SDL (@alesculek)

#4473 docs: remove fourth permutation of the visit API (@janmeier)

Polish 💅

#4453 Remove oneof validation from values of correct type (@JoviDeCroock)

Internal 🏠

... (truncated)

Commits

bf9ffff 16.12.0
e2457b3 Backport schema coordinates (#4493)
364f17f Implement changes for executable descriptions (#4482)
60ae6c4 updated location of ModelSim gitignore file (#4479)
6808b16 docs: remove fourth permutation of the visit API (#4473)
d07c9c5 Fix typo in readme
8dc2955 fix(docs/mutations-and-input-types.mdx): root being inside of SDL (#4452)
7134cab Remove oneof validation from values of correct type (#4453)
9032db1 Fix navigation (#4444)
ba4b411 docs: testing graphQL servers (#4374)
Additional commits viewable in compare view

Updates react from 19.2.0 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
See full diff in compare view

Updates send from 1.2.0 to 1.2.1

Release notes

Sourced from send's releases.

1.2.1

What's Changed

ci: add CodeQl (SAST) by @Phillip9587 in pillarjs/send#250

ci: add node.js 24 to test matrix by @Phillip9587 in pillarjs/send#255

[StepSecurity] Apply security best practices by @step-security-bot in pillarjs/send#256

chore: add funding to package.json by @bjohansebas in pillarjs/send#265

build(deps): bump github/codeql-action from 2.23.2 to 3.29.5 by @dependabot[bot] in pillarjs/send#266

build(deps): bump ossf/scorecard-action from 2.3.1 to 2.4.2 by @dependabot[bot] in pillarjs/send#257

build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in pillarjs/send#269

build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by @dependabot[bot] in pillarjs/send#268

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in pillarjs/send#267

build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by @dependabot[bot] in pillarjs/send#278

build(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in pillarjs/send#277

build(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in pillarjs/send#276

build(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in pillarjs/send#275

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in pillarjs/send#272

build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 by @dependabot[bot] in pillarjs/send#262

build(deps-dev): bump supertest from 6.2.2 to 6.3.4 by @dependabot[bot] in pillarjs/send#260

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in pillarjs/send#283

build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by @dependabot[bot] in pillarjs/send#282

chore: remove HISTORY.md from tarball by @Phillip9587 in pillarjs/send#285

ci: add Node.js 25 to test matrix by @Phillip9587 in pillarjs/send#284

chore: update dependency ranges to latest versions by @Phillip9587 in pillarjs/send#286

Release: 1.2.1 by @UlisesGascon in pillarjs/send#281

New Contributors

@step-security-bot made their first contribution in pillarjs/send#256

@dependabot[bot] made their first contribution in pillarjs/send#266

Full Changelog: pillarjs/send@1.2.0...1.2.1

Changelog

Sourced from send's changelog.

1.2.1 / 2025-12-15

Minor changes (package metadata)

deps:

debug@^4.4.3

http-errors@^2.0.1

mime-types@^3.0.2

statuses@^2.0.2

Commits

096a614 1.2.1 (#281)
861e3c6 chore: update depenency ranges to latest versions (#286)
a40fcd4 ci: add Node.js 25 to test matrix (#284)
7740dde chore: remove HISTORY.md from tarball (#285)
f532f41 build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 (#282)
f9b651f build(deps): bump actions/checkout from 5 to 6 (#283)
db2558b build(deps-dev): bump supertest from 6.2.2 to 6.3.4 (#260)
136fcf6 build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 (#262)
fac9c3f build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#272)
cd0c253 build(deps): bump actions/setup-node from 4 to 6 (#275)
Additional commits viewable in compare view

Updates serve-static from 2.2.0 to 2.2.1

Release notes

Sourced from serve-static's releases.

v2.2.1

What's Changed

ci: add dependabot by @Phillip9587 in expressjs/serve-static#202

ci: use full SHAs for github action versions by @Phillip9587 in expressjs/serve-static#201

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/serve-static#204

build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in expressjs/serve-static#205

build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in expressjs/serve-static#209

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/serve-static#210

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/serve-static#211

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/serve-static#212

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/serve-static#213

chore: add funding to package.json by @bjohansebas in expressjs/serve-static#216

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/serve-static#226

build(deps): bump actions/download-artifact from 4.3.0 to 6.0.0 by @dependabot[bot] in expressjs/serve-static#225

build(deps): bump github/codeql-action from 3.28.18 to 4.31.2 by @dependabot[bot] in expressjs/serve-static#224

build(deps): bump actions/setup-node from 4.4.0 to 6.0.0 by @dependabot[bot] in expressjs/serve-static#223

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in expressjs/serve-static#218

build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 by @dependabot[bot] in expressjs/serve-static#215

docs: update examples to ES6 by @Phillip9587 in expressjs/serve-static#203

build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 by @dependabot[bot] in expressjs/serve-static#234

build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/serve-static#233

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in expressjs/serve-static#232

build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by @dependabot[bot] in expressjs/serve-static#231

feat: remove HISTORY.md from tarball content by @UlisesGascon in expressjs/serve-static#230

Release: 2.2.1 by @UlisesGascon in expressjs/serve-static#228

New Contributors

@dependabot[bot] made their first contribution in expressjs/serve-static#204

Full Changelog: expressjs/serve-static@v2.2.0...v2.2.1

Changelog

Sourced from serve-static's changelog.

2.2.1 / 2025-12-15

Minor changes (documentation, package metadata...)

Commits

76312e1 2.2.1 (#228)
d15297a feat: remove HISTORY.md from tarball content (#230)
e2713ae build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#231)
d740c83 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#232)
6e2b2f0 build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#233)
ff31626 build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#234)
76d6df7 docs: update examples to ES6 (#203)
e3839dc build(deps-dev): bump eslint-plugin-import from 2.25.4 to 2.32.0 (#215)
9203f4c build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#218)
7408b80 build(deps): bump actions/setup-node from 4.4.0 to 6.0.0 (#223)
Additional commits viewable in compare view

Updates @eslint/config-array from 0.21.1 to 0.23.0

Release notes

Sourced from @eslint/config-array's releases.

config-array: v0.23.0

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

update minimatch (#273)

Features

update minimatch (#273) (8b92470)

config-array: v0.22.0

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297)

Features

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297) (acc623c)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/object-schema bumped from ^2.1.7 to ^3.0.0

Changelog

Sourced from @eslint/config-array's changelog.

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

update minimatch (#273)

Features

update minimatch (#273) (8b92470)

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297)

Features

Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297) (acc623c)

Dependencies

The following workspace dependencies were updated

dependencies

@eslint/object-schema bumped from ^2.1.7 to ^3.0.0

<...

Description has been truncated

Bumps the npm group with 24 updates in the /ui directory: | Package | From | To | | --- | --- | --- | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.0` | `2.2.2` | | [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` | | [graphql](https://github.com/graphql/graphql-js) | `16.11.0` | `16.12.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.4` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.4` | | [send](https://github.com/pillarjs/send) | `1.2.0` | `1.2.1` | | [serve-static](https://github.com/expressjs/serve-static) | `2.2.0` | `2.2.1` | | [@eslint/config-array](https://github.com/eslint/rewrite/tree/HEAD/packages/config-array) | `0.21.1` | `0.23.0` | | [@eslint/object-schema](https://github.com/eslint/rewrite/tree/HEAD/packages/object-schema) | `2.1.7` | `3.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.2` | `8.54.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.46.2` | `8.54.0` | | [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.3` | | [css-minimizer-webpack-plugin](https://github.com/webpack/css-minimizer-webpack-plugin) | `7.0.2` | `7.0.4` | | [esbuild-loader](https://github.com/privatenumber/esbuild-loader) | `4.4.0` | `4.4.2` | | [eslint](https://github.com/eslint/eslint) | `9.38.0` | `9.39.2` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.4` | `5.6.6` | | [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.9.4` | `2.10.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.1` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.9.5` | `7.13.0` | | [rimraf](https://github.com/isaacs/rimraf) | `6.0.1` | `6.1.2` | | [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin) | `5.3.14` | `5.3.16` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.46.2` | `8.54.0` | | [webpack](https://github.com/webpack/webpack) | `5.102.1` | `5.104.1` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.2` | `5.2.3` | Updates `body-parser` from 2.2.0 to 2.2.2 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.0...v2.2.2) Updates `express` from 5.1.0 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v5.1.0...v5.2.1) Updates `graphql` from 16.11.0 to 16.12.0 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v16.11.0...v16.12.0) Updates `react` from 19.2.0 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react) Updates `react-dom` from 19.2.0 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom) Updates `send` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@1.2.0...1.2.1) Updates `serve-static` from 2.2.0 to 2.2.1 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md) - [Commits](expressjs/serve-static@v2.2.0...v2.2.1) Updates `@eslint/config-array` from 0.21.1 to 0.23.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/config-array/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/config-array-v0.23.0/packages/config-array) Updates `@eslint/object-schema` from 2.1.7 to 3.0.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/object-schema/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/object-schema-v3.0.0/packages/object-schema) Updates `@typescript-eslint/eslint-plugin` from 8.46.2 to 8.54.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.46.2 to 8.54.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/parser) Updates `css-loader` from 7.1.2 to 7.1.3 - [Release notes](https://github.com/webpack/css-loader/releases) - [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md) - [Commits](webpack/css-loader@v7.1.2...v7.1.3) Updates `css-minimizer-webpack-plugin` from 7.0.2 to 7.0.4 - [Release notes](https://github.com/webpack/css-minimizer-webpack-plugin/releases) - [Changelog](https://github.com/webpack/css-minimizer-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/css-minimizer-webpack-plugin@v7.0.2...v7.0.4) Updates `esbuild-loader` from 4.4.0 to 4.4.2 - [Release notes](https://github.com/privatenumber/esbuild-loader/releases) - [Commits](privatenumber/esbuild-loader@v4.4.0...v4.4.2) Updates `eslint` from 9.38.0 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.38.0...v9.39.2) Updates `html-webpack-plugin` from 5.6.4 to 5.6.6 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v5.6.4...v5.6.6) Updates `mini-css-extract-plugin` from 2.9.4 to 2.10.0 - [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases) - [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/mini-css-extract-plugin@v2.9.4...v2.10.0) Updates `prettier` from 3.6.2 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.8.1) Updates `react-router-dom` from 7.9.5 to 7.13.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom) Updates `rimraf` from 6.0.1 to 6.1.2 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v6.0.1...v6.1.2) Updates `terser-webpack-plugin` from 5.3.14 to 5.3.16 - [Release notes](https://github.com/webpack/terser-webpack-plugin/releases) - [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/terser-webpack-plugin@v5.3.14...v5.3.16) Updates `typescript-eslint` from 8.46.2 to 8.54.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/typescript-eslint) Updates `webpack` from 5.102.1 to 5.104.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.102.1...v5.104.1) Updates `webpack-dev-server` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.2...v5.2.3) --- updated-dependencies: - dependency-name: body-parser dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: graphql dependency-version: 16.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: send dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: serve-static dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@eslint/config-array" dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@eslint/object-schema" dependency-version: 3.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.54.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.54.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: css-loader dependency-version: 7.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: css-minimizer-webpack-plugin dependency-version: 7.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: esbuild-loader dependency-version: 4.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: eslint dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: html-webpack-plugin dependency-version: 5.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: mini-css-extract-plugin dependency-version: 2.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: react-router-dom dependency-version: 7.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: rimraf dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: terser-webpack-plugin dependency-version: 5.3.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: typescript-eslint dependency-version: 8.54.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: webpack dependency-version: 5.104.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: webpack-dev-server dependency-version: 5.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <[email protected]>

ghjm

Auto-approval of Dependabot PRs

dependabot · 2026-01-29T20:25:08Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 27, 2026

ghjm enabled auto-merge (rebase) January 27, 2026 20:27

ghjm approved these changes Jan 27, 2026

View reviewed changes

dependabot bot closed this Jan 29, 2026

auto-merge was automatically disabled January 29, 2026 20:25
Pull request was closed

dependabot bot deleted the dependabot/npm_and_yarn/ui/npm-b52b69119a branch January 29, 2026 20:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm group across 1 directory with 24 updates #1086

Bump the npm group across 1 directory with 24 updates #1086

Uh oh!

dependabot bot commented on behalf of github Jan 27, 2026 •

edited

Loading

Uh oh!

ghjm left a comment

Uh oh!

dependabot bot commented on behalf of github Jan 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the npm group across 1 directory with 24 updates #1086

Bump the npm group across 1 directory with 24 updates #1086

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.2.2

What's Changed

New Contributors

v2.2.1

Important: Security

What's Changed

2.2.2 / 2026-01-07

2.2.1 / 2025-11-24

v5.2.1

What's Changed

v5.2.0

Important: Security

What's Changed

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

16.12.0

v16.12.0 (2025-11-01)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

1.2.1

What's Changed

New Contributors

1.2.1 / 2025-12-15

v2.2.1

What's Changed

New Contributors

2.2.1 / 2025-12-15

config-array: v0.23.0

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

Features

config-array: v0.22.0

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Features

Dependencies

0.23.0 (2025-11-17)

⚠ BREAKING CHANGES

Features

0.22.0 (2025-11-14)

⚠ BREAKING CHANGES

Features

Dependencies

Uh oh!

ghjm left a comment

Choose a reason for hiding this comment

Uh oh!

dependabot bot commented on behalf of github Jan 29, 2026

Uh oh!

Reviewers

Assignees

dependabot bot commented on behalf of github Jan 27, 2026 •

edited

Loading