chore(deps): bump the patch-updates group across 1 directory with 15 updates

[dependabot]

Bumps the patch-updates group with 3 updates in the / directory: drizzle-orm, didwebvh-ts and nock.

Updates drizzle-orm from 0.45.1 to 0.45.2

Release notes

Sourced from drizzle-orm's releases.

0.45.2

• Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

Commits

• 273c780 + 0.45.2 (#5534)
• 4aa6ecf Kit updates (#5490)
• e8e6edf feat(drizzle-kit): support d1 via binding (#5302)
• See full diff in compare view

Updates didwebvh-ts from 2.7.2 to 2.7.3

Changelog

Sourced from didwebvh-ts's changelog.

2.7.3 (2026-04-18)

Bug Fixes

• entry hash bug (cf948fe)

Commits

• 08412ce chore(release): 2.7.3 [skip ci]
• c2d6481 Merge pull request #94 from aviarytech/main
• cf948fe fix: entry hash bug
• 51852e6 Merge pull request #91 from swcurran/fix-tests
• a0a9b6f Merge pull request #92 from swcurran/add-Claude
• e706883 Adds CLAUDE.md file and a .gitignore entry for a local Claude Code file
• cf625a5 Fix tests that are failing
• See full diff in compare view

Updates nock from 14.0.11 to 14.0.12

Release notes

Sourced from nock's releases.

v14.0.12

14.0.12 (2026-04-05)

Bug Fixes

• prevent crash when query params have conflicting dot-notation keys (#2958) (7ea9933)

Commits

• 7ea9933 fix: prevent crash when query params have conflicting dot-notation keys (#2958)
• d00d371 chore(deps): bump picomatch
• e899c49 chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5
• 9ad19ea chore(deps): bump qs and @​definitelytyped/dtslint
• 657d9a1 chore(deps): bump actions/checkout from 5 to 6 (#2933)
• See full diff in compare view

Updates @expo/package-manager from 1.10.3 to 1.10.4

Changelog

Sourced from @​expo/package-manager's changelog.

Changelog

Unpublished

🛠 Breaking changes

🎉 New features

🐛 Bug fixes

💡 Others

Commits

• See full diff in compare view

Updates @expo/xcpretty from 4.4.1 to 4.4.3

Changelog

Sourced from @​expo/xcpretty's changelog.

Changelog

This is the log of notable changes to Expo CLI and related packages.

main

🛠 Breaking changes

🎉 New features

🧹 Chores

Sun, 10 Sep 2023 17:56:11 -0700

🛠 Breaking changes

🎉 New features

• [doctor] @​expo/metro-config deep dependency check (#4742)
• [pod-install] show alternative message in managed projects (#4566)
• [create-expo] Bump @​expo/package-manager for Bun support
• [create-expo] detect bun package manager (#4752)
• [webpack]: Bump expo to SDK 49 (#4747)
• [schemer]: additional validation for unsupported image formats (#4764)

🧹 Chores

🐛 Bug fixes

• [create-expo]: allow scoped template package names (#4750)

📦 Packages updated

• create-expo@2.1.1
• create-expo-app@2.1.1
• @​expo/dev-tools@​0.13.187
• expo-cli@6.3.12
• expo-doctor@1.1.3
• install-expo-modules@0.6.3
• pod-install@0.1.39
• expo-pwa@0.0.127
• @​expo/webpack-config@​18.1.3
• xdl@60.0.12

Wed Jul 5 17:04:00 2023 -0700

🧹 Chores

• [install-expo-modules] Update text re: Expo CLI installation

... (truncated)

Commits

• af41736 Publish
• f50492b [config-plugins] Make user interface style default to light if not specified ...
• 6e73255 Enable socket controls in run:ios and run:android (#3403)
• 0cad88c Remove readConfigJsonAsync shim (#3402)
• c0ce92c Update CHANGELOG and schema cache
• 50562c7 Publish
• 4f40c27 [config-plugins] feat: enable splash screen plugin for any SDK greater than 3...
• 5a37de7 improve cocoapods manager (#3399)
• 421abf5 [xdl][expo-cli] Adds action event to unified project (#3372)
• 17b37b4 Force overwriting by default (#3395)
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @mswjs/interceptors from 0.41.3 to 0.41.4

Release notes

Sourced from @​mswjs/interceptors's releases.

v0.41.4 (2026-04-18)

Bug Fixes

• add FetchRequest utility (#773) (53651056ceabd9c3dd03558e2409915f75b3d78a) @​kettanaito

Commits

• 48734e7 chore(release): v0.41.4
• 5365105 fix: add FetchRequest utility (#773)
• 92b7958 test: add AbortSignal.timeout compliance tests (#769)
• See full diff in compare view

Updates brace-expansion from 1.1.12 to 1.1.14

Commits

• 10c05fc 1.1.14
• 1afa1b2 Add opt-in { max } mitigation to v1 legacy line (#103)
• 2fbb6a2 Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)
• 0d7652e Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)
• 6c353ca 1.1.13
• 7fd684f Backport fix for GHSA-f886-m6hf-6m8v (#95)
• See full diff in compare view

Updates call-bind from 1.0.8 to 1.0.9

Changelog

Sourced from call-bind's changelog.

v1.0.9 - 2026-04-09

Commits

• [Fix] correct .length computation when partial args exceed function arity 95c406d
• [Dev Deps] update @ljharb/eslint-config, es-value-fixtures, eslint, for-each, has-strict-mode, npmignore, object-inspect 06a4e21
• [Deps] update call-bind-apply-helpers, es-define-property, get-intrinsic 3fea81e
• [readme] replace runkit CI badge with shields.io check-runs badge 23437d4

Commits

• 8d6a98c v1.0.9
• 95c406d [Fix] correct .length computation when partial args exceed function arity
• 3fea81e [Deps] update call-bind-apply-helpers, es-define-property, get-intrinsic
• 06a4e21 [Dev Deps] update @ljharb/eslint-config, es-value-fixtures, eslint, `fo...
• 23437d4 [readme] replace runkit CI badge with shields.io check-runs badge
• See full diff in compare view

Updates es-abstract from 1.24.1 to 1.24.2

Changelog

Sourced from es-abstract's changelog.

1.24.2 / 2026-04-07

• [Fix] IfAbruptCloseIterator: handle all abrupt completions, not just throw
• [Robustness] use +x instead of Number(x)
• [Robustness] use isFinite/parseInt intrinsics, and isNaN helper
• [Robustness] ensure undefined is undefined
• [patch] add a TODO to remove an unused helper
• [Dev Deps] update @ljharb/eslint-config, npmignore

Commits

• 9c40412 v1.24.2
• 5f9c0c1 [Robustness] use +x instead of Number(x)
• 9cb3440 [Fix] IfAbruptCloseIterator: handle all abrupt completions, not just throw
• 4a61750 [patch] add a TODO to remove an unused helper
• e69f21a [Robustness] use isFinite/parseInt intrinsics, and isNaN helper
• ff03c92 [Robustness] ensure undefined is undefined
• f4fc91c [Dev Deps] update @ljharb/eslint-config, npmignore
• See full diff in compare view

Updates fast-xml-parser from 4.5.5 to 4.5.6

Release notes

Sourced from fast-xml-parser's releases.

Summary update on all the previous releases from v4.2.4

• Multiple minor fixes provided in the validator and parser
• v6 is added for experimental use.
• ignoreAttributes support function, and array of string or regex
• Add support for parsing HTML numeric entities
• v5 of the application is ESM module now. However, JS is also supported

Note: Release section in not updated frequently. Please check CHANGELOG or Tags for latest release information.

Commits

• 42fbb0b update release info
• 805671c increase expansion limit as many system need it
• 9a2cf09 update version
• See full diff in compare view

Updates flow-parser from 0.307.0 to 0.309.0

Release notes

Sourced from flow-parser's releases.

v0.309.0

No significant changes.

v0.308.0

Parser:

• The 5 enum body ESTree node types (EnumBooleanBody, EnumNumberBody, EnumStringBody, EnumSymbolBody, EnumBigIntBody) have been replaced with a single EnumBody node. Its members property is a flat array of per-type member nodes (EnumBooleanMember, EnumNumberMember, EnumStringMember, EnumBigIntMember, EnumDefaultedMember). The explicitType property is now a string ("boolean", "number", "string", "symbol", "bigint") or null (previously a boolean). hasUnknownMembers remains a boolean. Several enum validation errors are no longer reported by the parser and are instead reported by the type checker.

Library Definitions:

• Add type definition for RegExp.escape()

v0.307.1

• Misc: Store exports index in saved state

Changelog

Sourced from flow-parser's changelog.

0.309.0

No significant changes.

0.308.0

Parser:

• The 5 enum body ESTree node types (EnumBooleanBody, EnumNumberBody, EnumStringBody, EnumSymbolBody, EnumBigIntBody) have been replaced with a single EnumBody node. Its members property is a flat array of per-type member nodes (EnumBooleanMember, EnumNumberMember, EnumStringMember, EnumBigIntMember, EnumDefaultedMember). The explicitType property is now a string ("boolean", "number", "string", "symbol", "bigint") or null (previously a boolean). hasUnknownMembers remains a boolean. Several enum validation errors are no longer reported by the parser and are instead reported by the type checker.

Library Definitions:

• Add type definition for RegExp.escape()

0.307.1

• Misc: Store exports index in saved state

Commits

• 67b02e5 [flow] Fix saved_state_reinit_libdef_change_mergebase test on macOS
• 045a97c v0.309.0
• 303bfc5 [flow] Try saved-state reinit before reinit_full_check on mergebase change
• 657359f [flow] Refactor reinit to support allow_fallback
• eecbea9 [flow] Rename require_full_check_reinit to incompatible_lib_change
• 0d67d70 [flow] Add test for saved-state reinit on mergebase libdef change
• f7bc8c8 [flow] Fix check-test diff comparison for Windows
• e020b50 [flow][oxidation] Box enum to reduce the memory usage
• 802736d [flow] Add node_modules_errors .flowconfig option
• 8974385 [flow][tslib] Support module as synonym for namespace in .d.ts files
• Additional commits viewable in compare view

Updates minipass-flush from 1.0.6 to 1.0.7

Commits

• 82ef141 1.0.7
• a9a330f Revert all recent updates on v1
• bdc346b add publishConfig to roll back the latest minipass update
• See full diff in compare view

Updates regjsparser from 0.13.0 to 0.13.1

Release notes

Sourced from regjsparser's releases.

Release v0.13.1

What's Changed

• chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @​dependabot[bot] in jviereck/regjsparser#155
• chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 by @​dependabot[bot] in jviereck/regjsparser#157
• Update eslint to v10. by @​JLHwung in jviereck/regjsparser#156
• chore(deps-dev): bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in jviereck/regjsparser#158

New Contributors

• @​dependabot[bot] made their first contribution in jviereck/regjsparser#155

Full Changelog: jviereck/regjsparser@v0.13.0...v0.13.1

Commits

• b20d194 Merge pull request #158 from jviereck/dependabot/npm_and_yarn/flatted-3.4.2
• 447718a chore(deps-dev): bump flatted from 3.3.1 to 3.4.2
• a8996a7 Update eslint to v10. (#156)
• de8ff58 Merge pull request #157 from jviereck/dependabot/npm_and_yarn/minimatch-3.1.5
• fb48f56 chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5
• 983ac7b Merge pull request #155 from jviereck/dependabot/npm_and_yarn/js-yaml-4.1.1
• 112c257 chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1
• See full diff in compare view

Updates safe-array-concat from 1.1.3 to 1.1.4

Changelog

Sourced from safe-array-concat's changelog.

v1.1.4 - 2026-04-19

Commits

• [actions] update workflows 6747b8f
• [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @ljharb/tsconfig, @types/isarray, @types/tape, eslint, npmignore aa30c94
• [types] improve types 21276eb
• [Deps] update call-bound, get-intrinsic efb5138
• [Deps] update call-bind dbe4255
• [Dev Deps] update @ljharb/eslint-config 470988c
• [Dev Deps] update @ljharb/eslint-config 8a8f4ec

Commits

• 255e625 v1.1.4
• 6747b8f [actions] update workflows
• 21276eb [types] improve types
• dbe4255 [Deps] update call-bind
• 470988c [Dev Deps] update @ljharb/eslint-config
• 8a8f4ec [Dev Deps] update @ljharb/eslint-config
• efb5138 [Deps] update call-bound, get-intrinsic
• aa30c94 [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `@ljharb/...
• See full diff in compare view

Updates slugify from 1.6.8 to 1.6.9

Changelog

Sourced from slugify's changelog.

v1.6.9 (2026-04-01)

• #171 fix: correct CommonJS export for "module": "node16" + ESM (171) (@​karlhorky)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by joshuakgoldberg, a new releaser for slugify since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2183299

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR