Skip to content

Bump the npm_and_yarn group across 5 directories with 12 updates#93

Open
dependabot[bot] wants to merge 50 commits into
mainfrom
dependabot/npm_and_yarn/bun/helpers/npm_and_yarn-3b41be1188
Open

Bump the npm_and_yarn group across 5 directories with 12 updates#93
dependabot[bot] wants to merge 50 commits into
mainfrom
dependabot/npm_and_yarn/bun/helpers/npm_and_yarn-3b41be1188

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 26, 2026 •
edited
Loading

Bumps the npm_and_yarn group with 8 updates in the /bun/helpers directory:

Package From To
js-yaml 3.14.1 3.14.2
@isaacs/brace-expansion 5.0.0 5.0.1
minimatch 3.1.2 3.1.5
minimatch 10.1.1 10.2.4
@tootallnate/once 2.0.0 removed
ajv 6.12.6 6.14.0
ansi-regex 3.0.0 3.0.1
ansi-regex 4.1.0 4.1.1
flatted 3.3.1 3.4.2
picomatch 4.0.3 4.0.4
picomatch 2.3.1 2.3.2

Bumps the npm_and_yarn group with 3 updates in the /bun/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested directory: minimatch, lodash and async.
Bumps the npm_and_yarn group with 3 updates in the /bun/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested directory: minimatch, lodash and es5-ext.
Bumps the npm_and_yarn group with 3 updates in the /npm_and_yarn/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested directory: minimatch, lodash and async.
Bumps the npm_and_yarn group with 3 updates in the /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested directory: minimatch, lodash and es5-ext.

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

  • Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

  • Types are now exported as yaml.types.XXX.
  • Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

  • Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

  • Check migration guide to see details for all breaking changes.
  • Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.
  • Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.
  • yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.
  • yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
  • !!binary now always mapped to Uint8Array on load.
  • Reduced nesting of /lib folder.
  • Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).
  • dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.
  • Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.
  • Code snippet created in exceptions now contains multiple lines with line numbers.
  • dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.
  • dump() with skipInvalid=true now serializes invalid items in collections as null.
  • Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.
  • Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

  • Added .mjs (es modules) support.
  • Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.
  • Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

Updates @isaacs/brace-expansion from 5.0.0 to 5.0.1

Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates minimatch from 10.1.1 to 10.2.4

Commits

Removes @tootallnate/once

Updates ajv from 6.12.6 to 6.14.0

Commits

Updates ansi-regex from 3.0.0 to 3.0.1

Commits

Updates ansi-regex from 4.1.0 to 4.1.1

Commits

Updates flatted from 3.3.1 to 3.4.2

Commits
  • 3bf0909 3.4.2
  • 885ddcc fix CWE-1321
  • 0bdba70 added flatted-view to the benchmark
  • 2a02dce 3.4.1
  • fba4e8f Merge pull request #89 from WebReflection/python-fix
  • 5fe8648 added "when in Rome" also a test for PHP
  • 53517ad some minor improvement
  • b3e2a0c Fixing recursion issue in Python too
  • c4b46db Add SECURITY.md for security policy and reporting
  • f86d071 Create dependabot.yml for version updates
  • Additional commits viewable in compare view

Updates tar from 7.5.4 to 7.5.6

Commits

Updates picomatch from 4.0.3 to 4.0.4

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates lodash from 4.17.21 to 4.17.23

Commits

Updates async from 2.6.3 to 2.6.4

Changelog

Sourced from async's changelog.

v2.6.4

  • Fix potential prototype pollution exploit (#1828)
Commits
Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.


Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates lodash from 4.17.21 to 4.17.23

Commits

Updates es5-ext from 0.10.53 to 0.10.64

Release notes

Sourced from es5-ext's releases.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

Comparison since last release

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

Comparison since last release

0.10.62 (2022-08-02)

Maintenance Improvements

Comparison since last release

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Comparison since last release

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

... (truncated)

Changelog

Sourced from es5-ext's changelog.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

0.10.62 (2022-08-02)

Maintenance Improvements

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

0.10.59 (2022-03-17)

Maintenance Improvements

0.10.58 (2022-03-11)

... (truncated)

Commits
  • f76b03d chore: Release v0.10.64
  • 2881acd chore: Bump dependencies
  • c2e2bb9 fix: Revert update meant to fix Powershell issue, as it's a regression
  • 16f2b72 docs: Fix date in the changelog
  • de4e03c chore: Release v0.10.63
  • 3fd53b7 chore: Upgrade lint-staged to v13
  • bf8ed79 chore: Ensure postinstall script does not crash on Windows
  • 2cbbb07 chore: Bump dependencies
  • 22d0416 chore: Bump LICENSE year
  • a52e957 fix: Support ES2015+ function definitions in function#toStringTokens()
  • Additional commits viewable in compare view
Install script changes

This version adds postinstall script that runs during installation. Review the package contents before updating.


Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates lodash from 4.17.21 to 4.17.23

Commits

Updates async from 2.6.3 to 2.6.4

Changelog

Sourced from async's changelog.

v2.6.4

  • Fix potential prototype pollution exploit (#1828)
Commits
Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.


Updates minimatch from 3.0.4 to 3.1.5

Commits

Updates lodash from 4.17.21 to 4.17.23

Commits

Updates es5-ext from 0.10.53 to 0.10.64

Release notes

Sourced from es5-ext's releases.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

Comparison since last release

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

Comparison since last release

0.10.62 (2022-08-02)

Maintenance Improvements

Comparison since last release

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Comparison since last release

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

... (truncated)

Changelog

Sourced from es5-ext's changelog.

0.10.64 (2024-02-27)

Bug Fixes

  • Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

0.10.63 (2024-02-23)

Bug Fixes

  • Do not rely on problematic regex (3551cdd), addresses #201
  • Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021
  • Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

  • Simplify the manifest message (7855319)

0.10.62 (2022-08-02)

Maintenance Improvements

0.10.61 (2022-04-20)

Bug Fixes

  • Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

0.10.60 (2022-04-07)

Maintenance Improvements

  • Improve postinstall script configuration (ab6b121)

0.10.59 (2022-03-17)

Maintenance Improvements

0.10.58 (2022-03-11)

... (truncated)

Commits
  • f76b03d chore: Release v0.10.64
  • 2881acd chore: Bump dependencies
  • c2e2bb9 fix: Revert update meant to fix Powershell issue, as it's a regression
  • 16f2b72 docs: Fix date in the changelog
  • de4e03c chore: Release v0.10.63
  • 3fd53b7 chore: Upgrade lint-staged to v13
  • bf8ed79 chore: Ensure postinstall script does not crash on Windows
  • 2cbbb07 chore: Bump dependencies
  • 22d0416 chore: Bump LICENSE year
  • a52e957 fix: Support ES2015+ function definitions in function#toStringTokens()
  • Additional commits viewable in compare view
Install script changes

This version adds postinstall script that runs during installation. Review the package contents before updating.


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot Bot and others added 30 commits January 23, 2026 21:35
@dependabot
Bump lodash from 4.17.21 to 4.17.23 in /bun/helpers
7fa5537 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@JaclynCodes
Merge pull request #3 from JaclynCodes/dependabot/npm_and_yarn/bun/he…
cd6d109 
…lpers/lodash-4.17.23
@dependabot
Bump tar, @npmcli/arborist and npm in /bun/helpers
3f4f9d3 
Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.6 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist) and [npm](https://github.com/npm/cli). These dependencies need to be updated together.


Updates `tar` from 6.2.1 to 7.5.6
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.5.6)

Updates `@npmcli/arborist` from 8.0.0 to 9.1.10
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/arborist/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/arborist-v9.1.10/workspaces/arborist)

Updates `npm` from 6.14.18 to 11.8.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v6.14.18...v11.8.0)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.6
  dependency-type: indirect
- dependency-name: "@npmcli/arborist"
  dependency-version: 9.1.10
  dependency-type: direct:production
- dependency-name: npm
  dependency-version: 11.8.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@JaclynCodes
Merge pull request #4 from JaclynCodes/dependabot/npm_and_yarn/bun/he…
82a0666 
…lpers/multi-6afa301cf6

Bump tar, @npmcli/arborist and npm in /bun/helpers
@dependabot
Bump symfony/process from 7.3.0 to 7.4.5 in /composer/helpers/v2
98c3cea 
Bumps [symfony/process](https://github.com/symfony/process) from 7.3.0 to 7.4.5.
- [Release notes](https://github.com/symfony/process/releases)
- [Changelog](https://github.com/symfony/process/blob/8.1/CHANGELOG.md)
- [Commits](symfony/process@v7.3.0...v7.4.5)

---
updated-dependencies:
- dependency-name: symfony/process
  dependency-version: 7.4.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump nuget/helpers/lib/NuGet.Client from 2948e02 to 53c7a9c
8379397 
Bumps [nuget/helpers/lib/NuGet.Client](https://github.com/NuGet/NuGet.Client) from `2948e02` to `53c7a9c`.
- [Release notes](https://github.com/NuGet/NuGet.Client/releases)
- [Commits](NuGet/NuGet.Client@2948e02...53c7a9c)

---
updated-dependencies:
- dependency-name: nuget/helpers/lib/NuGet.Client
  dependency-version: 53c7a9c9b4a3c31d9adf13fc873f2432eb53768e
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump library/rust from 1.88.0-bookworm to 1.93.0-bookworm in /cargo
d0e8f6b 
Bumps library/rust from 1.88.0-bookworm to 1.93.0-bookworm.

---
updated-dependencies:
- dependency-name: library/rust
  dependency-version: 1.93.0-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump golang.org/x/mod from 0.26.0 to 0.32.0 in /go_modules/helpers
b73e3e9 
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.26.0 to 0.32.0.
- [Commits](golang/mod@v0.26.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump dotnet-sdk in /nuget/helpers/lib/NuGetUpdater
f42a4a1 
Bumps [dotnet-sdk](https://github.com/dotnet/sdk) from 9.0.302 to 10.0.102.
- [Release notes](https://github.com/dotnet/sdk/releases)
- [Commits](dotnet/sdk@v9.0.302...v10.0.102)

---
updated-dependencies:
- dependency-name: dotnet-sdk
  dependency-version: 10.0.102
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump pip-tools in /python/helpers in the pip-tools group
e870168 
Bumps the pip-tools group in /python/helpers with 1 update: [pip-tools](https://github.com/jazzband/pip-tools).


Updates `pip-tools` from 7.4.1 to 7.5.2
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](jazzband/pip-tools@7.4.1...v7.5.2)

---
updated-dependencies:
- dependency-name: pip-tools
  dependency-version: 7.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@JaclynCodes
Merge pull request #11 from JaclynCodes/dependabot/dotnet_sdk/nuget/h…
3909d20 
…elpers/lib/NuGetUpdater/dotnet-sdk-10.0.102
@JaclynCodes
Merge pull request #17 from JaclynCodes/dependabot/pip/python/helpers…
044211a 
…/pip-tools-ae90bfcbbe
@JaclynCodes
Merge pull request #8 from JaclynCodes/dependabot/docker/cargo/librar…
d32e152 
…y/rust-1.93.0-bookworm
@JaclynCodes
Merge pull request #5 from JaclynCodes/dependabot/composer/composer/h…
c931ab1 
…elpers/v2/symfony/process-7.4.5
@JaclynCodes
Merge pull request #9 from JaclynCodes/dependabot/go_modules/go_modul…
96b1e3d 
…es/helpers/golang.org/x/mod-0.32.0
@JaclynCodes
Merge pull request #6 from JaclynCodes/dependabot/submodules/nuget/he…
716bdde 
…lpers/lib/NuGet.Client-53c7a9c
@dependabot
Bump lodash from 4.17.21 to 4.17.23 in /npm_and_yarn/helpers
57ce1d6 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump brace-expansion in /npm_and_yarn/helpers
9c97e4c 
Bumps  and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together.

Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

Updates `brace-expansion` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.12
  dependency-type: indirect
- dependency-name: brace-expansion
  dependency-version: 2.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@JaclynCodes
Merge pull request #36 from JaclynCodes/dependabot/npm_and_yarn/npm_a…
b2aa71f 
…nd_yarn/helpers/lodash-4.17.23
@JaclynCodes
Merge pull request #37 from JaclynCodes/dependabot/npm_and_yarn/npm_a…
7e11852 
…nd_yarn/helpers/multi-c22e25d29b
@dependabot
Bump the npm-dependencies group in /npm_and_yarn/helpers with 3 updates
969a15b 
Bumps the npm-dependencies group in /npm_and_yarn/helpers with 3 updates: [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist), [nock](https://github.com/nock/nock) and [semver](https://github.com/npm/node-semver).


Updates `@npmcli/arborist` from 8.0.0 to 9.1.10
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/arborist/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/arborist-v9.1.10/workspaces/arborist)

Updates `nock` from 13.5.6 to 14.0.10
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v13.5.6...v14.0.10)

Updates `semver` from 7.6.3 to 7.7.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.6.3...v7.7.3)

---
updated-dependencies:
- dependency-name: "@npmcli/arborist"
  dependency-version: 9.1.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: nock
  dependency-version: 14.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: semver
  dependency-version: 7.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@JaclynCodes
Merge pull request #16 from JaclynCodes/dependabot/npm_and_yarn/npm_a…
ff55ac1 
…nd_yarn/helpers/npm-dependencies-b295cd00ec

Bump the npm-dependencies group in /npm_and_yarn/helpers with 3 updates
@dependabot
Bump composer/composer
5af292a 
Bumps the prod-dependencies group with 1 update in the /composer/helpers/v2 directory: [composer/composer](https://github.com/composer/composer).


Updates `composer/composer` from 2.8.9 to 2.9.4
- [Release notes](https://github.com/composer/composer/releases)
- [Changelog](https://github.com/composer/composer/blob/main/CHANGELOG.md)
- [Commits](composer/composer@2.8.9...2.9.4)

---
updated-dependencies:
- dependency-name: composer/composer
  dependency-version: 2.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@JaclynCodes
Merge pull request #10 from JaclynCodes/dependabot/composer/composer/…
c718a32 
…helpers/v2/prod-dependencies-2bf85eb48c

Bump composer/composer from 2.8.9 to 2.9.4 in /composer/helpers/v2 in the prod-dependencies group across 1 directory
@dependabot
Bump the prod-dependencies group across 1 directory with 30 updates (#31
a719f0e 
)

Bumps the prod-dependencies group with 25 updates in the /updater directory:

| Package | From | To |
| --- | --- | --- |
| [zeitwerk](https://github.com/fxn/zeitwerk) | `2.7.1` | `2.7.4` |
| [parallel](https://github.com/grosser/parallel) | `1.26.3` | `1.27.0` |
| [aws-sdk-codecommit](https://github.com/aws/aws-sdk-ruby) | `1.63.0` | `1.96.0` |
| [aws-sdk-ecr](https://github.com/aws/aws-sdk-ruby) | `1.68.0` | `1.119.0` |
| [commonmarker](https://github.com/gjtorikian/commonmarker) | `2.3.1` | `2.6.3` |
| [excon](https://github.com/excon/excon) | `1.2.5` | `1.3.2` |
| [faraday](https://github.com/lostisland/faraday) | `2.7.11` | `2.14.0` |
| [faraday-retry](https://github.com/lostisland/faraday-retry) | `2.2.0` | `2.4.0` |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.18.9` | `1.19.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-ruby) | `1.5.0` | `1.7.0` |
| [opentelemetry-metrics-api](https://github.com/open-telemetry/opentelemetry-ruby) | `0.3.0` | `0.4.0` |
| [ostruct](https://github.com/ruby/ostruct) | `0.6.1` | `0.6.3` |
| [parser](https://github.com/whitequark/parser) | `3.3.7.1` | `3.3.10.1` |
| [psych](https://github.com/ruby/psych) | `5.1.2` | `5.3.1` |
| [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.5.11952` | `0.6.12903` |
| [stackprof](https://github.com/tmm1/stackprof) | `0.2.25` | `0.2.27` |
| [toml-rb](https://github.com/emancu/toml-rb) | `4.0.0` | `4.1.0` |
| [parseconfig](https://github.com/datafolklabs/ruby-parseconfig) | `1.0.8` | `1.1.2` |
| [http](https://github.com/httprb/http) | `5.1.1` | `5.3.1` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-ruby) | `0.30.0` | `0.31.1` |
| [opentelemetry-exporter-otlp-logs](https://github.com/open-telemetry/opentelemetry-ruby) | `0.2.0` | `0.2.2` |
| [opentelemetry-exporter-otlp-metrics](https://github.com/open-telemetry/opentelemetry-ruby) | `0.4.0` | `0.6.1` |
| [opentelemetry-instrumentation-excon](https://github.com/open-telemetry/opentelemetry-ruby-contrib) | `0.23.0` | `0.27.0` |
| [opentelemetry-logs-sdk](https://github.com/open-telemetry/opentelemetry-ruby) | `0.2.0` | `0.4.0` |
| [opentelemetry-metrics-sdk](https://github.com/open-telemetry/opentelemetry-ruby) | `0.6.0` | `0.11.2` |



Updates `zeitwerk` from 2.7.1 to 2.7.4
- [Changelog](https://github.com/fxn/zeitwerk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fxn/zeitwerk/commits)

Updates `parallel` from 1.26.3 to 1.27.0
- [Commits](grosser/parallel@v1.26.3...v1.27.0)

Updates `aws-sdk-codecommit` from 1.63.0 to 1.96.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-codecommit/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `aws-sdk-ecr` from 1.68.0 to 1.119.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-ecr/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `commonmarker` from 2.3.1 to 2.6.3
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/commonmarker@v2.3.1...v2.6.3)

Updates `excon` from 1.2.5 to 1.3.2
- [Changelog](https://github.com/excon/excon/blob/master/changelog.txt)
- [Commits](excon/excon@v1.2.5...v1.3.2)

Updates `faraday` from 2.7.11 to 2.14.0
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.7.11...v2.14.0)

Updates `faraday-retry` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/lostisland/faraday-retry/releases)
- [Changelog](https://github.com/lostisland/faraday-retry/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday-retry@v2.2.0...v2.4.0)

Updates `json` from 2.9.1 to 2.11.3
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.9.1...v2.11.3)

Updates `nokogiri` from 1.18.9 to 1.19.0
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.9...v1.19.0)

Updates `opentelemetry-api` from 1.5.0 to 1.7.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/api/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-api/v1.5.0...opentelemetry-api/v1.7.0)

Updates `opentelemetry-metrics-api` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/metrics_api/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-metrics-api/v0.3.0...opentelemetry-metrics-api/v0.4.0)

Updates `ostruct` from 0.6.1 to 0.6.3
- [Release notes](https://github.com/ruby/ostruct/releases)
- [Commits](ruby/ostruct@v0.6.1...v0.6.3)

Updates `parser` from 3.3.7.1 to 3.3.10.1
- [Changelog](https://github.com/whitequark/parser/blob/master/CHANGELOG.md)
- [Commits](whitequark/parser@v3.3.7.1...v3.3.10.1)

Updates `psych` from 5.1.2 to 5.3.1
- [Release notes](https://github.com/ruby/psych/releases)
- [Commits](ruby/psych@v5.1.2...v5.3.1)

Updates `sorbet-runtime` from 0.5.11952 to 0.6.12903
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `stackprof` from 0.2.25 to 0.2.27
- [Changelog](https://github.com/tmm1/stackprof/blob/master/CHANGELOG.md)
- [Commits](tmm1/stackprof@v0.2.25...v0.2.27)

Updates `toml-rb` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/emancu/toml-rb/releases)
- [Commits](emancu/toml-rb@v4.0.0...v4.1.0)

Updates `parseconfig` from 1.0.8 to 1.1.2
- [Changelog](https://github.com/datafolklabs/ruby-parseconfig/blob/master/Changelog)
- [Commits](https://github.com/datafolklabs/ruby-parseconfig/commits)

Updates `http` from 5.1.1 to 5.3.1
- [Changelog](https://github.com/httprb/http/blob/main/CHANGELOG.md)
- [Commits](httprb/http@v5.1.1...v5.3.1)

Updates `opentelemetry-exporter-otlp` from 0.30.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/exporter/otlp/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-exporter-otlp/v0.30.0...opentelemetry-exporter-otlp/v0.31.1)

Updates `opentelemetry-exporter-otlp-logs` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/exporter/otlp/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-exporter-otlp-logs/v0.2.0...opentelemetry-exporter-otlp-logs/v0.2.2)

Updates `opentelemetry-exporter-otlp-metrics` from 0.4.0 to 0.6.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/exporter/otlp-metrics/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-exporter-otlp-metrics/v0.4.0...opentelemetry-exporter-otlp-metrics/v0.6.1)

Updates `opentelemetry-instrumentation-excon` from 0.23.0 to 0.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/excon/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby-contrib@opentelemetry-instrumentation-excon/v0.23.0...opentelemetry-instrumentation-excon/v0.27.0)

Updates `opentelemetry-instrumentation-faraday` from 0.26.0 to 0.31.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/faraday/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby-contrib@opentelemetry-instrumentation-faraday/v0.26.0...opentelemetry-instrumentation-faraday/v0.31.0)

Updates `opentelemetry-instrumentation-http` from 0.24.0 to 0.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/http/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby-contrib@opentelemetry-instrumentation-http/v0.24.0...opentelemetry-instrumentation-http/v0.28.0)

Updates `opentelemetry-instrumentation-net_http` from 0.23.0 to 0.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/net_http/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby-contrib@opentelemetry-instrumentation-net_http/v0.23.0...opentelemetry-instrumentation-net_http/v0.27.0)

Updates `opentelemetry-logs-sdk` from 0.2.0 to 0.4.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/logs_sdk/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-logs-sdk/v0.2.0...opentelemetry-logs-sdk/v0.4.0)

Updates `opentelemetry-metrics-sdk` from 0.6.0 to 0.11.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/metrics_sdk/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-metrics-sdk/v0.6.0...opentelemetry-metrics-sdk/v0.11.2)

Updates `opentelemetry-sdk` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/sdk/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-sdk/v1.8.0...opentelemetry-sdk/v1.10.0)

---
updated-dependencies:
- dependency-name: zeitwerk
  dependency-version: 2.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: parallel
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: aws-sdk-codecommit
  dependency-version: 1.96.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: aws-sdk-ecr
  dependency-version: 1.119.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: commonmarker
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: excon
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: faraday
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: faraday-retry
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: json
  dependency-version: 2.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: nokogiri
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-api
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-metrics-api
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: ostruct
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: parser
  dependency-version: 3.3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: psych
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sorbet-runtime
  dependency-version: 0.6.12903
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: stackprof
  dependency-version: 0.2.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: toml-rb
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: parseconfig
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: http
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-exporter-otlp-logs
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-exporter-otlp-metrics
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-instrumentation-excon
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-instrumentation-faraday
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-instrumentation-http
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-instrumentation-net_http
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-logs-sdk
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-metrics-sdk
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump npm from 6.14.18 to 11.9.0 in /npm_and_yarn/helpers (#51)
bdec2f5
@dependabot
Bump the pnpm-dependencies group in /npm_and_yarn/helpers with 2 upda…
5f122db 
…tes (#20)
@dependabot
Bump nuget/helpers/lib/dotnet-core from 218ef74 to d9ecafa (#59)
da9fa89
@dependabot
Bump nuget/helpers/lib/NuGet.Client from 53c7a9c to acc6c0e (#58)
ea7a455
@dependabot
Bump ajv from 6.12.6 to 6.14.0 in /npm_and_yarn/helpers (#68)
ccb69a5
dependabot Bot added 20 commits February 22, 2026 19:42
@dependabot @JaclynCodes
Bump the prod-dependencies group across 1 directory with 8 updates
0503af1 
Bumps the prod-dependencies group with 8 updates in the /updater directory:

| Package | From | To |
| --- | --- | --- |
| [opentelemetry-metrics-sdk](https://github.com/open-telemetry/opentelemetry-ruby) | `0.11.2` | `0.12.0` |
| [zeitwerk](https://github.com/fxn/zeitwerk) | `2.7.4` | `2.7.5` |
| [aws-sdk-ecr](https://github.com/aws/aws-sdk-ruby) | `1.119.0` | `1.121.0` |
| [faraday](https://github.com/lostisland/faraday) | `2.14.0` | `2.14.1` |
| [json](https://github.com/ruby/json) | `2.11.3` | `2.18.1` |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.19.0` | `1.19.1` |
| [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.12908` | `0.6.12957` |
| [stackprof](https://github.com/tmm1/stackprof) | `0.2.27` | `0.2.28` |



Updates `opentelemetry-metrics-sdk` from 0.11.2 to 0.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/metrics_sdk/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-metrics-sdk/v0.11.2...opentelemetry-metrics-sdk/v0.12.0)

Updates `zeitwerk` from 2.7.4 to 2.7.5
- [Changelog](https://github.com/fxn/zeitwerk/blob/main/CHANGELOG.md)
- [Commits](fxn/zeitwerk@v2.7.4...v2.7.5)

Updates `aws-sdk-ecr` from 1.119.0 to 1.121.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-ecr/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `faraday` from 2.14.0 to 2.14.1
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.14.0...v2.14.1)

Updates `json` from 2.11.3 to 2.18.1
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.11.3...v2.18.1)

Updates `nokogiri` from 1.19.0 to 1.19.1
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.19.0...v1.19.1)

Updates `sorbet-runtime` from 0.6.12908 to 0.6.12957
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `stackprof` from 0.2.27 to 0.2.28
- [Changelog](https://github.com/tmm1/stackprof/blob/master/CHANGELOG.md)
- [Commits](tmm1/stackprof@v0.2.27...v0.2.28)

---
updated-dependencies:
- dependency-name: opentelemetry-metrics-sdk
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: zeitwerk
  dependency-version: 2.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: aws-sdk-ecr
  dependency-version: 1.121.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: faraday
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: json
  dependency-version: 2.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: nokogiri
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: sorbet-runtime
  dependency-version: 0.6.12957
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: stackprof
  dependency-version: 0.2.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump gitlab from 5.1.0 to 6.1.0 in /updater
b9d1c8e 
Bumps [gitlab](https://github.com/NARKOZ/gitlab) from 5.1.0 to 6.1.0.
- [Release notes](https://github.com/NARKOZ/gitlab/releases)
- [Commits](NARKOZ/gitlab@v5.1.0...v6.1.0)

---
updated-dependencies:
- dependency-name: gitlab
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump rexml from 3.4.1 to 3.4.2 in /updater
7c2315a 
Bumps [rexml](https://github.com/ruby/rexml) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.1...v3.4.2)

---
updated-dependencies:
- dependency-name: rexml
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump the dev-dependencies group across 1 directory with 2 updates
a7768e9 
Bumps the dev-dependencies group with 2 updates in the /composer/helpers/v2 directory: [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) and [phpstan/phpstan](https://github.com/phpstan/phpstan).


Updates `friendsofphp/php-cs-fixer` from 3.84.0 to 3.93.0
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.84.0...v3.93.0)

Updates `phpstan/phpstan` from 2.1.18 to 2.1.37
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/2.1.x/CHANGELOG.md)
- [Commits](phpstan/phpstan@2.1.18...2.1.37)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.93.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: phpstan/phpstan
  dependency-version: 2.1.37
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump parser from 3.3.10.1 to 3.3.10.2 in /updater
c219f4d 
Bumps [parser](https://github.com/whitequark/parser) from 3.3.10.1 to 3.3.10.2.
- [Changelog](https://github.com/whitequark/parser/blob/master/CHANGELOG.md)
- [Commits](whitequark/parser@v3.3.10.1...v3.3.10.2)

---
updated-dependencies:
- dependency-name: parser
  dependency-version: 3.3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump the dev-dependencies group across 1 directory with 11 updates
54ad3c6 
Bumps the dev-dependencies group with 11 updates in the /updater directory:

| Package | From | To |
| --- | --- | --- |
| [debug](https://github.com/ruby/debug) | `1.9.2` | `1.11.1` |
| [gpgme](https://github.com/ueno/ruby-gpgme) | `2.0.25` | `2.0.26` |
| [rake](https://github.com/ruby/rake) | `13.3.0` | `13.3.1` |
| [rspec](https://github.com/rspec/rspec) | `3.13.0` | `3.13.2` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.67.0` | `1.85.0` |
| [rubocop-performance](https://github.com/rubocop/rubocop-performance) | `1.22.1` | `1.26.1` |
| [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) | `0.8.7` | `0.12.0` |
| [turbo_tests](https://github.com/serpapi/turbo_tests) | `2.2.4` | `2.2.5` |
| [vcr](https://github.com/vcr/vcr) | `6.3.1` | `6.4.0` |
| [webmock](https://github.com/bblimke/webmock) | `3.24.0` | `3.26.1` |
| [webrick](https://github.com/ruby/webrick) | `1.9.1` | `1.9.2` |



Updates `debug` from 1.9.2 to 1.11.1
- [Release notes](https://github.com/ruby/debug/releases)
- [Commits](ruby/debug@v1.9.2...v1.11.1)

Updates `gpgme` from 2.0.25 to 2.0.26
- [Changelog](https://github.com/ueno/ruby-gpgme/blob/master/NEWS)
- [Commits](ueno/ruby-gpgme@v2.0.25...v2.0.26)

Updates `rake` from 13.3.0 to 13.3.1
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.3.0...v13.3.1)

Updates `rspec` from 3.13.0 to 3.13.2
- [Commits](rspec/rspec@rspec-metagem-v3.13.0...rspec-v3.13.2)

Updates `rubocop` from 1.67.0 to 1.85.0
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.67.0...v1.85.0)

Updates `rubocop-performance` from 1.22.1 to 1.26.1
- [Release notes](https://github.com/rubocop/rubocop-performance/releases)
- [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-performance@v1.22.1...v1.26.1)

Updates `rubocop-sorbet` from 0.8.7 to 0.12.0
- [Release notes](https://github.com/shopify/rubocop-sorbet/releases)
- [Commits](Shopify/rubocop-sorbet@v0.8.7...v0.12.0)

Updates `turbo_tests` from 2.2.4 to 2.2.5
- [Release notes](https://github.com/serpapi/turbo_tests/releases)
- [Commits](serpapi/turbo_tests@v2.2.4...v2.2.5)

Updates `vcr` from 6.3.1 to 6.4.0
- [Release notes](https://github.com/vcr/vcr/releases)
- [Changelog](https://github.com/vcr/vcr/blob/master/CHANGELOG.md)
- [Commits](vcr/vcr@v6.3.1...v6.4.0)

Updates `webmock` from 3.24.0 to 3.26.1
- [Release notes](https://github.com/bblimke/webmock/releases)
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.24.0...v3.26.1)

Updates `webrick` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/ruby/webrick/releases)
- [Commits](ruby/webrick@v1.9.1...v1.9.2)

---
updated-dependencies:
- dependency-name: debug
  dependency-version: 1.11.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: gpgme
  dependency-version: 2.0.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: rake
  dependency-version: 13.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: rspec
  dependency-version: 3.13.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: rubocop
  dependency-version: 1.85.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: rubocop-performance
  dependency-version: 1.26.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: rubocop-sorbet
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: turbo_tests
  dependency-version: 2.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vcr
  dependency-version: 6.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: webmock
  dependency-version: 3.26.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: webrick
  dependency-version: 1.9.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump poetry from 2.1.1 to 2.3.1 in /python/helpers in the poetry group
50eb356 
Bumps the poetry group in /python/helpers with 1 update: [poetry](https://github.com/python-poetry/poetry).


Updates `poetry` from 2.1.1 to 2.3.1
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@2.1.1...2.3.1)

---
updated-dependencies:
- dependency-name: poetry
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: poetry
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump prettier
83b32da 
Bumps the dev-dependencies group with 1 update in the /npm_and_yarn/helpers directory: [prettier](https://github.com/prettier/prettier).


Updates `prettier` from 3.6.2 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.8.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump the prod-dependencies group across 1 directory with 2 updates
f83ccc2 
Bumps the prod-dependencies group with 2 updates in the /updater directory: [aws-sdk-ecr](https://github.com/aws/aws-sdk-ruby) and [sorbet-runtime](https://github.com/sorbet/sorbet).


Updates `aws-sdk-ecr` from 1.121.0 to 1.122.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-ecr/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `sorbet-runtime` from 0.6.12957 to 0.6.12977
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-ecr
  dependency-version: 1.122.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sorbet-runtime
  dependency-version: 0.6.12977
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump cython from 3.1.2 to 3.2.4 in /python/helpers in the common group
93eca1e 
Bumps the common group in /python/helpers with 1 update: [cython](https://github.com/cython/cython).


Updates `cython` from 3.1.2 to 3.2.4
- [Release notes](https://github.com/cython/cython/releases)
- [Changelog](https://github.com/cython/cython/blob/master/CHANGES.rst)
- [Commits](cython/cython@3.1.2...3.2.4)

---
updated-dependencies:
- dependency-name: cython
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump tomli from 2.2.1 to 2.4.0 in /python/helpers
5f6c3d7 
Bumps [tomli](https://github.com/hukkin/tomli) from 2.2.1 to 2.4.0.
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.2.1...2.4.0)

---
updated-dependencies:
- dependency-name: tomli
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump pip from 24.2 to 26.0 in /python/helpers
ef15f02 
Bumps [pip](https://github.com/pypa/pip) from 24.2 to 26.0.
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@24.2...26.0)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: '26.0'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump library/golang in /go_modules
bc88cc3 
Bumps library/golang from 1.24.5-bookworm to 1.26.1-bookworm.

---
updated-dependencies:
- dependency-name: library/golang
  dependency-version: 1.26.1-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump library/rust from 1.93.0-bookworm to 1.94.0-bookworm in /cargo
e71afb7 
Bumps library/rust from 1.93.0-bookworm to 1.94.0-bookworm.

---
updated-dependencies:
- dependency-name: library/rust
  dependency-version: 1.94.0-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump nuget/helpers/lib/NuGet.Client from acc6c0e to e6283f3
67eb6a3 
Bumps [nuget/helpers/lib/NuGet.Client](https://github.com/NuGet/NuGet.Client) from `acc6c0e` to `e6283f3`.
- [Release notes](https://github.com/NuGet/NuGet.Client/releases)
- [Commits](NuGet/NuGet.Client@acc6c0e...e6283f3)

---
updated-dependencies:
- dependency-name: nuget/helpers/lib/NuGet.Client
  dependency-version: e6283f3f736c9674b1789d5c6c849ff9bbf6685c
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump pip-tools in /python/helpers in the pip-tools group
3595d99 
Bumps the pip-tools group in /python/helpers with 1 update: [pip-tools](https://github.com/jazzband/pip-tools).


Updates `pip-tools` from 7.5.2 to 7.5.3
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](jazzband/pip-tools@v7.5.2...v7.5.3)

---
updated-dependencies:
- dependency-name: pip-tools
  dependency-version: 7.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump rubocop
adce6dd 
Bumps the dev-dependencies group with 1 update in the /updater directory: [rubocop](https://github.com/rubocop/rubocop).


Updates `rubocop` from 1.85.0 to 1.85.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.85.0...v1.85.1)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.85.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump terminal-table from 3.0.2 to 4.0.0 in /updater
81aae69 
Bumps [terminal-table](https://github.com/tj/terminal-table) from 3.0.2 to 4.0.0.
- [Release notes](https://github.com/tj/terminal-table/releases)
- [Changelog](https://github.com/tj/terminal-table/blob/master/History.rdoc)
- [Commits](tj/terminal-table@v3.0.2...v4.0.0)

---
updated-dependencies:
- dependency-name: terminal-table
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @JaclynCodes
Bump the prod-dependencies group across 1 directory with 9 updates
56ae0e5 
Bumps the prod-dependencies group with 8 updates in the /updater directory:

| Package | From | To |
| --- | --- | --- |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-ruby) | `0.31.1` | `0.32.0` |
| [opentelemetry-exporter-otlp-logs](https://github.com/open-telemetry/opentelemetry-ruby) | `0.2.2` | `0.3.0` |
| [opentelemetry-exporter-otlp-metrics](https://github.com/open-telemetry/opentelemetry-ruby) | `0.6.1` | `0.7.0` |
| [aws-sdk-ecr](https://github.com/aws/aws-sdk-ruby) | `1.122.0` | `1.123.0` |
| [commonmarker](https://github.com/gjtorikian/commonmarker) | `2.6.3` | `2.7.0` |
| [excon](https://github.com/excon/excon) | `1.3.2` | `1.4.0` |
| [json](https://github.com/ruby/json) | `2.18.1` | `2.19.1` |
| [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.12977` | `0.6.13028` |



Updates `opentelemetry-exporter-otlp` from 0.31.1 to 0.32.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/exporter/otlp/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-exporter-otlp/v0.31.1...opentelemetry-exporter-otlp/v0.32.0)

Updates `opentelemetry-exporter-otlp-logs` from 0.2.2 to 0.3.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/exporter/otlp/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-exporter-otlp-logs/v0.2.2...opentelemetry-exporter-otlp-logs/v0.3.0)

Updates `opentelemetry-exporter-otlp-metrics` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/exporter/otlp-metrics/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-exporter-otlp-metrics/v0.6.1...opentelemetry-exporter-otlp-metrics/v0.7.0)

Updates `aws-sdk-ecr` from 1.122.0 to 1.123.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-ecr/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `commonmarker` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/commonmarker@v2.6.3...v2.7.0)

Updates `excon` from 1.3.2 to 1.4.0
- [Changelog](https://github.com/excon/excon/blob/master/changelog.txt)
- [Commits](excon/excon@v1.3.2...v1.4.0)

Updates `json` from 2.18.1 to 2.19.1
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.18.1...v2.19.1)

Updates `opentelemetry-api` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/api/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-api/v1.7.0...opentelemetry-api/v1.8.0)

Updates `sorbet-runtime` from 0.6.12977 to 0.6.13028
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-exporter-otlp-logs
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-exporter-otlp-metrics
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: aws-sdk-ecr
  dependency-version: 1.123.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: commonmarker
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: excon
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: json
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: opentelemetry-api
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13028
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump the npm_and_yarn group across 5 directories with 12 updates
69ac1a1 
Bumps the npm_and_yarn group with 8 updates in the /bun/helpers directory:

| Package | From | To |
| --- | --- | --- |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` |
| @isaacs/brace-expansion | `5.0.0` | `5.0.1` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.1.1` | `10.2.4` |
| [@tootallnate/once](https://github.com/TooTallNate/once) | `2.0.0` | `removed` |
| [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `6.14.0` |
| [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `3.0.1` |
| [ansi-regex](https://github.com/chalk/ansi-regex) | `4.1.0` | `4.1.1` |
| [flatted](https://github.com/WebReflection/flatted) | `3.3.1` | `3.4.2` |
| [picomatch](https://github.com/micromatch/picomatch) | `4.0.3` | `4.0.4` |
| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |

Bumps the npm_and_yarn group with 3 updates in the /bun/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested directory: [minimatch](https://github.com/isaacs/minimatch), [lodash](https://github.com/lodash/lodash) and [async](https://github.com/caolan/async).
Bumps the npm_and_yarn group with 3 updates in the /bun/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested directory: [minimatch](https://github.com/isaacs/minimatch), [lodash](https://github.com/lodash/lodash) and [es5-ext](https://github.com/medikoo/es5-ext).
Bumps the npm_and_yarn group with 3 updates in the /npm_and_yarn/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested directory: [minimatch](https://github.com/isaacs/minimatch), [lodash](https://github.com/lodash/lodash) and [async](https://github.com/caolan/async).
Bumps the npm_and_yarn group with 3 updates in the /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested directory: [minimatch](https://github.com/isaacs/minimatch), [lodash](https://github.com/lodash/lodash) and [es5-ext](https://github.com/medikoo/es5-ext).


Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.14.2)

Updates `@isaacs/brace-expansion` from 5.0.0 to 5.0.1

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `minimatch` from 10.1.1 to 10.2.4
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Removes `@tootallnate/once`

Updates `ajv` from 6.12.6 to 6.14.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.6...v6.14.0)

Updates `ansi-regex` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v3.0.0...v3.0.1)

Updates `ansi-regex` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v3.0.0...v3.0.1)

Updates `flatted` from 3.3.1 to 3.4.2
- [Commits](WebReflection/flatted@v3.3.1...v3.4.2)

Updates `tar` from 7.5.4 to 7.5.6
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.4...v7.5.6)

Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.3...4.0.4)

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `async` from 2.6.3 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.6.3...v2.6.4)

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `es5-ext` from 0.10.53 to 0.10.64
- [Release notes](https://github.com/medikoo/es5-ext/releases)
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md)
- [Commits](medikoo/es5-ext@v0.10.53...v0.10.64)

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `async` from 2.6.3 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.6.3...v2.6.4)

Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `es5-ext` from 0.10.53 to 0.10.64
- [Release notes](https://github.com/medikoo/es5-ext/releases)
- [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md)
- [Commits](medikoo/es5-ext@v0.10.53...v0.10.64)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@isaacs/brace-expansion"
  dependency-version: 5.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 10.2.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@tootallnate/once"
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ajv
  dependency-version: 6.14.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ansi-regex
  dependency-version: 3.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ansi-regex
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 7.5.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-version: 2.6.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: es5-ext
  dependency-version: 0.10.64
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-version: 2.6.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: es5-ext
  dependency-version: 0.10.64
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code L: javascript

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JaclynCodes