Skip to content

build(deps): bump the npm-deps group with 10 updates#6184

Closed
dependabot[bot] wants to merge 7 commits intomasterfrom
dependabot/npm_and_yarn/npm-deps-c400d42767
Closed

build(deps): bump the npm-deps group with 10 updates#6184
dependabot[bot] wants to merge 7 commits intomasterfrom
dependabot/npm_and_yarn/npm-deps-c400d42767

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 15, 2026 •
edited
Loading

Bumps the npm-deps group with 10 updates:

Package From To
dompurify 3.3.2 3.3.3
eslint-plugin-jsdoc 62.7.1 62.8.0
@tony.ganchev/eslint-plugin-header 3.2.6 3.3.1
lint-staged 16.3.2 16.4.0
mailparser 3.9.3 3.9.4
puppeteer 24.37.5 24.39.1
typescript-eslint 8.56.1 8.57.0
undici-types 7.22.0 7.24.3
web-ext 9.4.0 10.0.0
webpack-cli 6.0.1 7.0.0

Updates dompurify from 3.3.2 to 3.3.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.3

  • Fixed an engine requirement for Node 20 which caused hiccups, thanks @​Rotzbua
Commits
  • 8bcbf73 chore: Preparing 3.3.3 release
  • 5faddd6 fix: engine requirement (#1210)
  • 0f91e3a Update README.md
  • d5ff1a8 Merge branch 'main' of github.com:cure53/DOMPurify
  • c3efd48 fix: moved back from jsdom 28 to jsdom 20
  • 988b888 fix: moved back from jsdom 28 to jsdom 20
  • 2726c74 chore: Preparing 3.3.2 release
  • 6202c7e build(deps): bump @​tootallnate/once and jsdom (#1204)
  • 302b51d fix: Expanded the regex ever so slightly to also cover script
  • cd85175 Merge branch 'main' of github.com:cure53/DOMPurify
  • Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 62.7.1 to 62.8.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v62.8.0

62.8.0 (2026-03-12)

Features

  • tsdoc-ruleset: add recommended TSDoc ruleset (a96bc7c)
Commits
  • a96bc7c feat(tsdoc-ruleset): add recommended TSDoc ruleset
  • 26276d4 chore(deps-dev): bump rollup from 4.57.1 to 4.59.0
  • See full diff in compare view

Updates @tony.ganchev/eslint-plugin-header from 3.2.6 to 3.3.1

Release notes

Sourced from @​tony.ganchev/eslint-plugin-header's releases.

v3.3.1

What's Changed

  • fix: regression: she-bangs were treated as part of the initial set of line comments thus failing validation.

Full Changelog: tonyganchev/eslint-plugin-header@v3.3.0...v3.3.1

v3.3.0

What's Changed

Full Changelog: tonyganchev/eslint-plugin-header@v3.2.6...v3.3.0

Changelog

Sourced from @​tony.ganchev/eslint-plugin-header's changelog.

3.3.1

  • fix: regression: shebangs were treated as part of the initial line comments.

3.3.0

  • feat: support leading comments before header to enable behavior control to frameworks such as Jest.
Commits

Updates lint-staged from 16.3.2 to 16.4.0

Release notes

Sourced from lint-staged's releases.

v16.4.0

Minor Changes

v16.3.4

Patch Changes

v16.3.3

Patch Changes

  • #1740 0109e8d Thanks @​iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.
Changelog

Sourced from lint-staged's changelog.

16.4.0

Minor Changes

16.3.4

Patch Changes

16.3.3

Patch Changes

  • #1740 0109e8d Thanks @​iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.
Commits
  • 445f9dd chore(changeset): release
  • d91be60 docs: update readme to use picomatch
  • b392a9f refactor: extract matchFiles and add unit tests
  • 687fc90 refactor: replace micromatch with picomatch
  • 26dadf9 chore(changeset): release
  • 9d6e827 build(deps): update dependencies
  • 8aea986 chore(changeset): release
  • 0109e8d fix: strip Git CRLF warning from output
  • See full diff in compare view

Updates mailparser from 3.9.3 to 3.9.4

Changelog

Sourced from mailparser's changelog.

3.9.4 (2026-03-09)

Bug Fixes

  • bump nodemailer to 8.0.2 for unquoted comma-in-display-name parsing (dd71f08)
  • filter false values from empty References headers (9884e5d), closes #385
  • prevent RFC 2047 encoded-word address fabrication in decodeAddresses (08b800c)
Commits
  • db781d3 chore(master): release 3.9.4 [skip-ci]
  • 9884e5d fix: filter false values from empty References headers
  • dd71f08 fix: bump nodemailer to 8.0.2 for unquoted comma-in-display-name parsing
  • 08b800c fix: prevent RFC 2047 encoded-word address fabrication in decodeAddresses
  • See full diff in compare view

Updates puppeteer from 24.37.5 to 24.39.1

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.39.1

24.39.1 (2026-03-13)

🛠️ Fixes

puppeteer: v24.39.1

24.39.1 (2026-03-13)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.39.0 to 24.39.1

puppeteer-core: v24.39.0

24.39.0 (2026-03-10)

🎉 Features

🛠️ Fixes

puppeteer: v24.39.0

24.39.0 (2026-03-10)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated

... (truncated)

Changelog

Sourced from puppeteer's changelog.

24.39.1 (2026-03-13)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.39.0 to 24.39.1

🛠️ Fixes

24.39.0 (2026-03-10)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.38.0 to 24.39.0

🎉 Features

🛠️ Fixes

24.38.0 (2026-03-04)

... (truncated)

Commits

Updates typescript-eslint from 8.56.1 to 8.57.0

Release notes

Sourced from typescript-eslint's releases.

v8.57.0

8.57.0 (2026-03-09)

🚀 Features

  • eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#12080)

🩹 Fixes

  • eslint-plugin: [strict-void-return] false positives with overloads (#12055)
  • eslint-plugin: handle statically analyzable computed keys in prefer-readonly (#12079)
  • eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#12077)
  • eslint-plugin: [prefer-promise-reject-errors] add allow TypeOrValueSpecifier to prefer-promise-reject-errors (#12094)
  • eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#12089)
  • typescript-estree: switch back to use ts.getModifiers() (#12034)
  • typescript-estree: if the template literal is tagged and the text has an invalid escape, cooked will be null (#11355)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.57.0 (2026-03-09)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates undici-types from 7.22.0 to 7.24.3

Release notes

Sourced from undici-types's releases.

v7.24.3

What's Changed

Full Changelog: nodejs/undici@v7.24.2...v7.24.3

v7.24.2

What's Changed

Full Changelog: nodejs/undici@v7.24.1...v7.24.2

v7.24.1

What's Changed

Full Changelog: nodejs/undici@v7.24.0...v7.24.1

v7.24.0

Undici v7.24.0 Security Release Notes

This release addresses multiple security vulnerabilities in Undici.

Upgrade guidance

All users on v7 should upgrade to v7.24.0 or later.

Fixed advisories

... (truncated)

Commits

Updates web-ext from 9.4.0 to 10.0.0

Release notes

Sourced from web-ext's releases.

10.0.0 (2026-03-13)

main changes

Important: we now use Node 22 by default.

  • Added: web-ext lint now supports Firefox 149 schemas

dependencies

  • Updated: dependency addons-linter to 10.1.0 (#3654)

dev dependencies

  • Updated: dependency @commitlint/config-conventional to 20.4.4 (#3653)
  • Updated: dependency @commitlint/cli to 20.4.4 (#3652)
  • Updated: dependency @eslint/eslintrc to 3.3.5 (#3647)
  • Updated: dependency @eslint/compat to 2.0.3 (#3646)
Commits
  • 97fbb93 10.0.0
  • 67d8f26 chore(deps): bump addons-linter from 10.0.0 to 10.1.0 (#3654)
  • 573991e chore(deps-dev): bump @​commitlint/config-conventional from 20.4.3 to 20.4.4 (...
  • 0e522ee chore(deps-dev): bump @​commitlint/cli from 20.4.3 to 20.4.4 (#3652)
  • 2a9f9cd chore(deps): bump addons-linter from 9.9.1 to 10.0.0 (#3650)
  • f3f4100 Switch to node 22 (#3644)
  • 945a145 chore(deps-dev): bump @​eslint/eslintrc from 3.3.4 to 3.3.5 (#3647)
  • 15f5c43 chore(deps-dev): bump @​eslint/compat from 2.0.2 to 2.0.3 (#3646)
  • See full diff in compare view

Updates webpack-cli from 6.0.1 to 7.0.0

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Changelog

Sourced from webpack-cli's changelog.

7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for webpack-cli since your current version.


Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
puppeteer [>= 21.7.a, < 21.8]
puppeteer [>= 22.0.a, < 22.1]
puppeteer [>= 22.1.a, < 22.2]
puppeteer [>= 22.3.a, < 22.4]
puppeteer [>= 22.5.a, < 22.6]
puppeteer [>= 22.6.a, < 22.7]
puppeteer [>= 22.4.a, < 22.5]
puppeteer [>= 22.2.a, < 22.3]
puppeteer [>= 22.7.a, < 22.8]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the npm-deps group with 10 updates
d4f600e 
Bumps the npm-deps group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.3.2` | `3.3.3` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.7.1` | `62.8.0` |
| [@tony.ganchev/eslint-plugin-header](https://github.com/tonyganchev/eslint-plugin-header) | `3.2.6` | `3.3.1` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.3.2` | `16.4.0` |
| [mailparser](https://github.com/nodemailer/mailparser) | `3.9.3` | `3.9.4` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.37.5` | `24.39.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.56.1` | `8.57.0` |
| [undici-types](https://github.com/nodejs/undici) | `7.22.0` | `7.24.3` |
| [web-ext](https://github.com/mozilla/web-ext) | `9.4.0` | `10.0.0` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `6.0.1` | `7.0.0` |


Updates `dompurify` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.2...3.3.3)

Updates `eslint-plugin-jsdoc` from 62.7.1 to 62.8.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.7.1...v62.8.0)

Updates `@tony.ganchev/eslint-plugin-header` from 3.2.6 to 3.3.1
- [Release notes](https://github.com/tonyganchev/eslint-plugin-header/releases)
- [Changelog](https://github.com/tonyganchev/eslint-plugin-header/blob/main/CHANGELOG.md)
- [Commits](tonyganchev/eslint-plugin-header@v3.2.6...v3.3.1)

Updates `lint-staged` from 16.3.2 to 16.4.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.3.2...v16.4.0)

Updates `mailparser` from 3.9.3 to 3.9.4
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v3.9.3...v3.9.4)

Updates `puppeteer` from 24.37.5 to 24.39.1
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.37.5...puppeteer-v24.39.1)

Updates `typescript-eslint` from 8.56.1 to 8.57.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/typescript-eslint)

Updates `undici-types` from 7.22.0 to 7.24.3
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.22.0...v7.24.3)

Updates `web-ext` from 9.4.0 to 10.0.0
- [Release notes](https://github.com/mozilla/web-ext/releases)
- [Commits](mozilla/web-ext@9.4.0...10.0.0)

Updates `webpack-cli` from 6.0.1 to 7.0.0
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.0.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@tony.ganchev/eslint-plugin-header"
  dependency-version: 3.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: lint-staged
  dependency-version: 16.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: mailparser
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: puppeteer
  dependency-version: 24.39.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: typescript-eslint
  dependency-version: 8.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: undici-types
  dependency-version: 7.24.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: web-ext
  dependency-version: 10.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: webpack-cli
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 15, 2026
@dependabot dependabot bot requested a review from sosnovsky as a code owner March 15, 2026 22:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 15, 2026
@FlowCryptRobot FlowCryptRobot enabled auto-merge (squash) March 15, 2026 22:04
FlowCryptRobot
FlowCryptRobot previously approved these changes Mar 15, 2026
View reviewed changes
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 18, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 18, 2026
auto-merge was automatically disabled March 18, 2026 11:27

Pull request was closed

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm-deps-c400d42767 branch March 18, 2026 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@FlowCryptRobot FlowCryptRobot FlowCryptRobot left review comments

@sosnovsky sosnovsky Awaiting requested review from sosnovsky sosnovsky is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@FlowCryptRobot @sosnovsky