Skip to content

chore(deps): multiple package upgrades by dependabot#1327

Merged
davidgamez merged 6 commits intomainfrom
chore/dependabot-fixes-2025-08
Aug 26, 2025
Merged

chore(deps): multiple package upgrades by dependabot#1327
davidgamez merged 6 commits intomainfrom
chore/dependabot-fixes-2025-08

Conversation

dependabot bot and others added 6 commits August 26, 2025 12:24
…#744)

Bumps the pip group with 1 update in the /api directory: [urllib3](https://github.com/urllib3/urllib3).


Updates `urllib3` from 1.26.19 to 2.2.3
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.19...2.2.3)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: David Gamez <1192523+davidgamez@users.noreply.github.com>
---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: David Gamez <1192523+davidgamez@users.noreply.github.com>
Bumps [requests](https://github.com/psf/requests) from 2.31.0 to 2.32.2.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.31.0...v2.32.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: David Gamez <1192523+davidgamez@users.noreply.github.com>
…updates (#497)

Bumps the npm_and_yarn group with 5 updates in the /functions directory:

| Package | From | To |
| --- | --- | --- |
| [firebase-tools](https://github.com/firebase/firebase-tools) | `12.9.1` | `13.6.0` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.8.21` | `1.8.22` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [tar](https://github.com/isaacs/node-tar) | `6.2.0` | `6.2.1` |
| [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` |

Bumps the npm_and_yarn group with 6 updates in the /web-app directory:

| Package | From | To |
| --- | --- | --- |
| [firebase-tools](https://github.com/firebase/firebase-tools) | `12.9.1` | `13.6.0` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.8.21` | `1.8.22` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [tar](https://github.com/isaacs/node-tar) | `6.2.0` | `6.2.1` |
| [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` |
| [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` |



Updates `firebase-tools` from 12.9.1 to 13.6.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/master/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v12.9.1...v13.6.0)

Updates `@grpc/grpc-js` from 1.8.21 to 1.8.22
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.8.21...@grpc/grpc-js@1.8.22)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v6.2.1)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.9...7.5.10)

Updates `firebase-tools` from 12.9.1 to 13.6.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/master/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v12.9.1...v13.6.0)

Updates `@grpc/grpc-js` from 1.8.21 to 1.8.22
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.8.21...@grpc/grpc-js@1.8.22)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v6.2.1)

Updates `tough-cookie` from 2.5.0 to 4.1.3
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v2.5.0...v4.1.3)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.9...7.5.10)

Updates `ejs` from 3.1.9 to 3.1.10
- [Release notes](https://github.com/mde/ejs/releases)
- [Commits](mde/ejs@v3.1.9...v3.1.10)

---
updated-dependencies:
- dependency-name: firebase-tools
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@grpc/grpc-js"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: firebase-tools
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@grpc/grpc-js"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tough-cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ejs
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: David Gamez <1192523+davidgamez@users.noreply.github.com>
@davidgamez davidgamez changed the title chore(deps): bump pydantic in /api in the pip group across 1 director… chore(deps): multiple package upgrades by dependabot Aug 26, 2025
@github-actions
Copy link
Copy Markdown

*Lighthouse ran on https://mobility-feeds-dev--pr-1327-7txr6tdd.web.app/ * (Desktop)
⚡️ HTML Report Lighthouse report for the changes in this PR:

Performance Accessibility Best Practices SEO
🟠 84 🟢 100 🟢 100 🟢 100

*Lighthouse ran on https://mobility-feeds-dev--pr-1327-7txr6tdd.web.app/feeds * (Desktop)
⚡️ HTML Report Lighthouse report for the changes in this PR:

Performance Accessibility Best Practices SEO
🟠 66 🟢 91 🟢 100 🟢 100

*Lighthouse ran on https://mobility-feeds-dev--pr-1327-7txr6tdd.web.app/feeds/gtfs/mdb-2126 * (Desktop)
⚡️ HTML Report Lighthouse report for the changes in this PR:

Performance Accessibility Best Practices SEO
🟠 84 🔴 0 🟢 96 🟢 100

*Lighthouse ran on https://mobility-feeds-dev--pr-1327-7txr6tdd.web.app/feeds/gtfs_rt/mdb-2585 * (Desktop)
⚡️ HTML Report Lighthouse report for the changes in this PR:

Performance Accessibility Best Practices SEO
🟢 94 🟠 88 🟢 100 🟢 100

*Lighthouse ran on https://mobility-feeds-dev--pr-1327-7txr6tdd.web.app/gbfs/gbfs-flamingo_porirua * (Desktop)
⚡️ HTML Report Lighthouse report for the changes in this PR:

Performance Accessibility Best Practices SEO
🟢 100 🟢 100 🟢 100 🟢 100

@github-actions
Copy link
Copy Markdown

Preview Firebase Hosting URL: https://mobility-feeds-dev--pr-1327-7txr6tdd.web.app

@davidgamez davidgamez marked this pull request as ready for review August 26, 2025 17:44
@davidgamez davidgamez merged commit b345536 into main Aug 26, 2025
11 of 12 checks passed
@davidgamez davidgamez deleted the chore/dependabot-fixes-2025-08 branch August 26, 2025 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants