Skip to content

chore(deps): bump the dependencies group across 1 directory with 13 updates #5614

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): bump the dependencies group across 1 directory with 13 updates #5614

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025 •
edited
Loading

Bumps the dependencies group with 13 updates in the / directory:

Package From To
express 4.21.2 4.22.1
ipaddr.js 2.2.0 2.3.0
@hono/node-server 1.19.6 1.19.7
@types/node 24.10.1 24.10.4
body-parser 1.20.3 1.20.4
eslint 9.39.1 9.39.2
eslint-plugin-jest 29.2.1 29.5.0
hono 4.10.7 4.11.1
less 4.4.2 4.5.1
memfs 4.51.0 4.51.1
prettier 3.6.2 3.7.4
puppeteer 24.31.0 24.33.0
typescript-eslint 8.48.0 8.49.0

Updates express from 4.21.2 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

4.22.0 / 2025-12-01

Commits

Updates ipaddr.js from 2.2.0 to 2.3.0

Changelog

Sourced from ipaddr.js's changelog.

2.3.0 - 2025-11-27

  • add isValidCIDRFourPartDecimal helper for IPv4 CIDR in four-part decimal form
  • upgrade eslint dev dependency to v9
  • remove duplicated LICENSE entry from published files list
Commits
  • e373b4e Bump version to 2.3.0
  • d564b1d Add IPv4 CIDR four-part decimal validator
  • 08c2cd4 dep(eslint): upgrade to v9
  • e6438fe remove LICENSE from files, redundant, always included
  • See full diff in compare view

Updates @hono/node-server from 1.19.6 to 1.19.7

Release notes

Sourced from @​hono/node-server's releases.

v1.19.7

What's Changed

New Contributors

Full Changelog: honojs/node-server@v1.19.6...v1.19.7

Commits
  • 0a4826c 1.19.7
  • b253386 chore: add configVersion to bun.lock (#291)
  • 38e17b5 fix: Fix for hono issue 4563 - incorrect content-length after following symli...
  • See full diff in compare view

Updates @types/node from 24.10.1 to 24.10.4

Commits

Updates body-parser from 1.20.3 to 1.20.4

Release notes

Sourced from body-parser's releases.

1.20.4

What's Changed

Full Changelog: expressjs/body-parser@1.20.3...1.20.4

Changelog

Sourced from body-parser's changelog.

1.20.4 / 2025-12-01

  • deps: qs@~6.14.0
  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: raw-body@~2.5.3
Commits

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

Commits

Updates eslint-plugin-jest from 29.2.1 to 29.5.0

Release notes

Sourced from eslint-plugin-jest's releases.

v29.5.0

29.5.0 (2025-12-14)

Features

  • create new no-unneeded-async-expect-function rule (#1863) (6b8182d)

v29.4.1

29.4.1 (2025-12-14)

Bug Fixes

  • prefer-to-have-been-called-times: actually check that current matcher is toHaveLength (#1878) (3415744)

v29.4.0

29.4.0 (2025-12-13)

Features

  • create new prefer-to-have-been-called-times rule (281085a)
  • create new prefer-to-have-been-called rule (24e2acd)

v29.3.0

29.3.0 (2025-12-13)

Features

  • prefer-expect-assertions: support basic uses of hasAssertions in beforeEach and afterEach hooks (#1871) (eed9acb)

v29.2.3

29.2.3 (2025-12-13)

Bug Fixes

  • prefer-expect-assertions: use correct word in error message (#1873) (c48c48c)

v29.2.2

29.2.2 (2025-12-12)

Bug Fixes

Changelog

Sourced from eslint-plugin-jest's changelog.

29.5.0 (2025-12-14)

Features

  • create new no-unneeded-async-expect-function rule (#1863) (6b8182d)

29.4.1 (2025-12-14)

Bug Fixes

  • prefer-to-have-been-called-times: actually check that current matcher is toHaveLength (#1878) (3415744)

29.4.0 (2025-12-13)

Features

  • create new prefer-to-have-been-called-times rule (281085a)
  • create new prefer-to-have-been-called rule (24e2acd)

29.3.0 (2025-12-13)

Features

  • prefer-expect-assertions: support basic uses of hasAssertions in beforeEach and afterEach hooks (#1871) (eed9acb)

29.2.3 (2025-12-13)

Bug Fixes

  • prefer-expect-assertions: use correct word in error message (#1873) (c48c48c)

29.2.2 (2025-12-12)

Bug Fixes

Commits
  • 4297d50 chore(release): 29.5.0 [skip ci]
  • 6b8182d feat: create new no-unneeded-async-expect-function rule (#1863)
  • 48e78fc chore(release): 29.4.1 [skip ci]
  • 3415744 fix(prefer-to-have-been-called-times): actually check that current matcher is...
  • 45b4b11 test: always alias FlatCompatRuleTester as RuleTester (#1876)
  • 4a900e3 chore(release): 29.4.0 [skip ci]
  • 24e2acd feat: create new prefer-to-have-been-called rule
  • 281085a feat: create new prefer-to-have-been-called-times rule
  • 2646599 docs(prefer-called-with): remove references to toBeCalled matcher (#1874)
  • a12bc33 chore(release): 29.3.0 [skip ci]
  • Additional commits viewable in compare view

Updates hono from 4.10.7 to 4.11.1

Release notes

Sourced from hono's releases.

v4.11.1

What's Changed

Full Changelog: honojs/hono@v4.11.0...v4.11.1

v4.11.0

Release Notes

Hono v4.11.0 is now available!

This release includes new features for the Hono client, middleware improvements, and an important type system fix.

Type System Fix for Middleware

We've fixed a bug in the type system for middleware. Previously, app did not have the correct type with pathless handlers:

const app = new Hono()
  .use(async (c, next) => {
    await next()
  })
  .get('/a', async (c, next) => {
    await next()
  })
  .get((c) => {
    return c.text('Hello')
  })
// app's type was incorrect

This has now been fixed.

Thanks @​kosei28!

Typed URL for Hono Client

You can now pass the base URL as the second type parameter to hc to get more precise URL types:

const client = hc<typeof app, 'http://localhost:8787'>(
  'http://localhost:8787/'
)
const url = client.api.posts.$url()
// url is TypedURL with precise type information
// including protocol, host, and path

... (truncated)

Commits
  • 1fbe45b 4.11.1
  • 37c3809 fix(types): fix app.on method array type inference (#4578)
  • fe278e9 4.11.0
  • 0d739b6 Merge pull request #4574 from honojs/next
  • 3e12de6 fix(types): replace schema-based path tracking with CurrentPath parameter (#4...
  • 6d62638 feat(secure-headers): Add CSP report-to and report-uri directive support (#4555)
  • b694129 feat(client): add buildSearchParams option to customize query serialization (...
  • d94f4a4 feat(context-storage): Add optional tryGetContext helper to context-storage m...
  • 61f473b feat(pretty-json): support force option (#4531)
  • 44bb7bb feat(timing): add wrapTime to simplify usage (#4519)
  • Additional commits viewable in compare view

Updates less from 4.4.2 to 4.5.1

Changelog

Sourced from less's changelog.

Change Log

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for less since your current version.


Updates memfs from 4.51.0 to 4.51.1

Release notes

Sourced from memfs's releases.

v4.51.1

4.51.1 (2025-11-30)

Bug Fixes

  • add glob functions to API lists (445f337)
Changelog

Sourced from memfs's changelog.

4.51.1 (2025-11-30)

Bug Fixes

  • add glob functions to API lists (445f337)
Commits

Updates prettier from 3.6.2 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

🔗 Changelog

3.7.3

What's Changed

🔗 Changelog

3.7.2

What's Changed

🔗 Changelog

3.7.1

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.


Updates puppeteer from 24.31.0 to 24.33.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.33.0

24.33.0 (2025-12-11)

🎉 Features

🛠️ Fixes

puppeteer: v24.33.0

24.33.0 (2025-12-11)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.32.1 to 24.33.0

puppeteer-core: v24.32.1

24.32.1 (2025-12-08)

🛠️ Fixes

  • assertion errors and wrong URL in puppeteer.connect(channel) (#14486) (1095b46)

📄 Documentation

puppeteer: v24.32.1

24.32.1 (2025-12-08)

♻️ Chores

... (truncated)

Changelog

Sourced from puppeteer's changelog.

24.33.0 (2025-12-11)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.32.1 to 24.33.0

🎉 Features

🛠️ Fixes

24.32.1 (2025-12-08)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.32.0 to 24.32.1

🛠️ Fixes

  • assertion errors and wrong URL in puppeteer.connect(channel) (#14486) (1095b46)

📄 Documentation

... (truncated)

Commits

Updates typescript-eslint from 8.48.0 to 8.49.0

Release notes

Sourced from typescript-eslint's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

  • eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

  • deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

  • eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

  • eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)
  • eslint-plugin: honor ignored base types on generic classes (#11767)
  • eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the dependencies group across 1 directory with 13 u…
aac26ce 
…pdates

Bumps the dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [express](https://github.com/expressjs/express) | `4.21.2` | `4.22.1` |
| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.2.0` | `2.3.0` |
| [@hono/node-server](https://github.com/honojs/node-server) | `1.19.6` | `1.19.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `24.10.4` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.4` |
| [eslint](https://github.com/eslint/eslint) | `9.39.1` | `9.39.2` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.2.1` | `29.5.0` |
| [hono](https://github.com/honojs/hono) | `4.10.7` | `4.11.1` |
| [less](https://github.com/less/less.js) | `4.4.2` | `4.5.1` |
| [memfs](https://github.com/streamich/memfs) | `4.51.0` | `4.51.1` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.31.0` | `24.33.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.48.0` | `8.49.0` |



Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.1)

Updates `ipaddr.js` from 2.2.0 to 2.3.0
- [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md)
- [Commits](whitequark/ipaddr.js@v2.2.0...v2.3.0)

Updates `@hono/node-server` from 1.19.6 to 1.19.7
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.6...v1.19.7)

Updates `@types/node` from 24.10.1 to 24.10.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `body-parser` from 1.20.3 to 1.20.4
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.3...1.20.4)

Updates `eslint` from 9.39.1 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.1...v9.39.2)

Updates `eslint-plugin-jest` from 29.2.1 to 29.5.0
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v29.2.1...v29.5.0)

Updates `hono` from 4.10.7 to 4.11.1
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.10.7...v4.11.1)

Updates `less` from 4.4.2 to 4.5.1
- [Release notes](https://github.com/less/less.js/releases)
- [Changelog](https://github.com/less/less.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/less/less.js/commits)

Updates `memfs` from 4.51.0 to 4.51.1
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.51.0...v4.51.1)

Updates `prettier` from 3.6.2 to 3.7.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.4)

Updates `puppeteer` from 24.31.0 to 24.33.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.31.0...puppeteer-v24.33.0)

Updates `typescript-eslint` from 8.48.0 to 8.49.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ipaddr.js
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 24.10.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: body-parser
  dependency-version: 1.20.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint-plugin-jest
  dependency-version: 29.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: hono
  dependency-version: 4.11.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: less
  dependency-version: 4.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: memfs
  dependency-version: 4.51.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.7.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: puppeteer
  dependency-version: 24.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 15, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 16, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 16, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-4d56b5de04 branch December 16, 2025 03:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@kmk142789 kmk142789 kmk142789 approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@kmk142789