Skip to content

chore(deps): bump the dependencies group across 1 directory with 11 updates#105

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-f30927c2f2
Closed

chore(deps): bump the dependencies group across 1 directory with 11 updates#105
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-f30927c2f2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 11 updates in the / directory:

Package From To
axios 1.16.1 1.18.1
nanoid 5.1.11 5.1.16
@apify/actor-memory-expression 0.1.17 0.2.0
@apify/input_secrets 1.2.42 1.2.47
@types/node 25.9.1 26.1.0
apify-cli 1.6.1 1.7.0
eslint 10.4.1 10.6.0
eslint-plugin-sonarjs 4.0.3 4.1.0
globals 17.6.0 17.7.0
lint-staged 17.0.6 17.0.8
prettier 3.8.3 3.9.4

Updates axios from 1.16.1 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

  • AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)
  • Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)
  • Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)
  • AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

  • Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

  • Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

🔒 Security Fixes

  • Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)

  • URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)

🐛 Bug Fixes

  • Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)

🔧 Maintenance & Chores

  • Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)

  • Dependencies: Bumped @babel/core, @babel/preset-env, @commitlint/cli, @commitlint/config-conventional, @rollup/plugin-babel, @rollup/plugin-commonjs, @vitest/browser, @vitest/browser-playwright, eslint, lint-staged, rollup, vitest, and actions/checkout. (#10989, #10996, #10997)

  • Release Metadata: Prepared the 1.18.0 release by updating package metadata and the runtime VERSION value. (#11003)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)

... (truncated)

Commits
  • a209bfb chore(release): prepare release 1.18.1 (#11027)
  • fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
  • 40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
  • a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
  • cf1306a docs: add Deno to install instructions (#11023)
  • b32880a fix: incorrect use of error (#11021)
  • 1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
  • 30499d6 fix: various runtime crashes and type definition mismatches (#10959)
  • 20ce9c4 fix(http): defer env proxy handling to Node (#10942)
  • e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
  • Additional commits viewable in compare view

Updates nanoid from 5.1.11 to 5.1.16

Release notes

Sourced from nanoid's releases.

5.1.16

5.1.15

  • Fixed random pool corruption on big ID sizes.

5.1.14

  • Fixed npm package size regression.

5.1.13

  • Fixed npm package size regression.

5.1.12

  • Moved to npm Provenance and Staged Publishing.
Changelog

Sourced from nanoid's changelog.

5.1.16

5.1.15

  • Fixed random pool corruption on big ID sizes.

5.1.14

  • Fixed npm package size regression.

5.1.13

  • Fixed npm package size regression.

5.1.12

  • Moved to npm Provenance and Staged Publishing.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.


Updates @apify/actor-memory-expression from 0.1.17 to 0.2.0

Release notes

Sourced from @​apify/actor-memory-expression's releases.

@​apify/actor-memory-expression@​0.1.18

0.1.18 (2026-06-03)

Note: Version bump only for package @​apify/actor-memory-expression

Changelog

Sourced from @​apify/actor-memory-expression's changelog.

apify-shared monorepo

apify-shared is now an independently versioned monorepo.

This file is generated.

See the changelogs of each package:

package version changelog
@apify/actor-memory-expression 0.2.0 CHANGELOG
@apify/consts 2.53.3 CHANGELOG
@apify/datastructures 2.0.6 CHANGELOG
@apify/git 2.1.6 CHANGELOG
@apify/image_proxy_client 2.0.4 CHANGELOG
@apify/input_schema 3.28.18 CHANGELOG
@apify/input_secrets 1.2.47 CHANGELOG
@apify/json_schemas 0.16.10 CHANGELOG
@apify/log 2.5.41 CHANGELOG
@apify/markdown 3.0.71 CHANGELOG
@apify/payment_qr_codes 0.2.2 CHANGELOG
@apify/pseudo_url 2.0.82 CHANGELOG
@apify/timeout 0.3.5 CHANGELOG
@apify/utilities 2.34.1 CHANGELOG
Commits
  • a5afcac chore: release new package versions [skip ci]
  • c0f168f chore(ci): Revert previous version bump, bump apify/signed-commit action (#...
  • 975c51d chore: release new package versions [skip ci]
  • effe553 fix(ci): Use long commit SHA when creating git tags during new release, rever...
  • 864683d chore: release new package versions [skip ci]
  • f4315ba fix(ci): Add GH_TOKEN env variable to workflow using the GitHub CLI, revert p...
  • 602f4c0 chore: release new package versions [skip ci]
  • 645f9ee ci: Set git identity for temporary commit in publish workflow (#662)
  • 7cb3fbf feat: memory expression allow comparing text (#661)
  • 2952904 chore(deps): bump undici, @sigstore/*, js-yaml to resolve security alerts (#659)
  • Additional commits viewable in compare view

Updates @apify/input_secrets from 1.2.42 to 1.2.47

Release notes

Sourced from @​apify/input_secrets's releases.

@​apify/input_secrets@1.2.47

1.2.47 (2026-06-22)

Note: Version bump only for package @​apify/input_secrets

@​apify/input_secrets@1.2.46

1.2.46 (2026-06-16)

Note: Version bump only for package @​apify/input_secrets

@​apify/input_secrets@1.2.45

1.2.45 (2026-06-12)

Bug Fixes

  • correct outdated JSDoc type annotations in utilities and input_secrets (#648) (2184ee1)

@​apify/input_secrets@1.2.44

1.2.44 (2026-06-09)

Note: Version bump only for package @​apify/input_secrets

@​apify/input_secrets@1.2.43

1.2.43 (2026-06-03)

Note: Version bump only for package @​apify/input_secrets

Changelog

Sourced from @​apify/input_secrets's changelog.

apify-shared monorepo

apify-shared is now an independently versioned monorepo.

This file is generated.

See the changelogs of each package:

package version changelog
@apify/actor-memory-expression 0.2.0 CHANGELOG
@apify/consts 2.53.3 CHANGELOG
@apify/datastructures 2.0.6 CHANGELOG
@apify/git 2.1.6 CHANGELOG
@apify/image_proxy_client 2.0.4 CHANGELOG
@apify/input_schema 3.28.18 CHANGELOG
@apify/input_secrets 1.2.47 CHANGELOG
@apify/json_schemas 0.16.10 CHANGELOG
@apify/log 2.5.41 CHANGELOG
@apify/markdown 3.0.71 CHANGELOG
@apify/payment_qr_codes 0.2.2 CHANGELOG
@apify/pseudo_url 2.0.82 CHANGELOG
@apify/timeout 0.3.5 CHANGELOG
@apify/utilities 2.34.1 CHANGELOG
Commits
  • 3128003 chore: release [skip ci]
  • ff6959c fix: fix incorrect types (#654)
  • f9a27f9 chore(deps): bump vulnerable transitive deps to resolve security alerts (#652)
  • 3138ad3 ci: add pre-publish npm drift gate (#650)
  • d009fad chore: update root lock file and changelog [skip ci]
  • ae8b00f chore: release [skip ci]
  • fc00133 feat: add forbidden usernames for open-source roles (#651)
  • 6de600c chore: update root lock file and changelog [skip ci]
  • c37d898 chore: release [skip ci]
  • 2184ee1 fix: correct outdated JSDoc type annotations in utilities and input_secrets (...
  • Additional commits viewable in compare view

Updates @types/node from 25.9.1 to 26.1.0

Commits

Updates apify-cli from 1.6.1 to 1.7.0

Release notes

Sourced from apify-cli's releases.

1.7.0

1.7.0 (2026-07-01)

🚀 Features

🐛 Bug Fixes

1.6.4-beta.0

1.6.4 (2026-07-02)

1.6.3-beta.25

1.6.3 (2026-07-01)

🚀 Features

🐛 Bug Fixes

1.6.3-beta.6

1.6.3 (2026-06-21)

🚀 Features

🐛 Bug Fixes

1.6.3-beta.5

... (truncated)

Changelog

Sourced from apify-cli's changelog.

1.7.0 (2026-07-02)

🚀 Features

🐛 Bug Fixes

1.6.2 (2026-06-03)

🚀 Features

🐛 Bug Fixes

Commits
  • 1832d57 chore(release): Update changelog and package version [skip ci]
  • d4ec817 chore(release): Update changelog and package version [skip ci]
  • 160a8f3 chore(deps): lock file maintenance (#1217)
  • 09de9e0 docs: version docs for 1.6.3 [docs build]
  • 116a83d chore(release): Update changelog and package version [skip ci]
  • 25fe45c chore(ci): disable git check
  • a70bd06 docs: add agent skill (SKILL.md) for the Apify CLI (#1233)
  • f4bcb7f chore: Automatic theme updating workflow [skip ci]
  • 0c28463 chore: Automatic theme updating workflow [skip ci]
  • b82f429 ci: bump apify/actions/pnpm-install to v1.3.1 (#1244)
  • Additional commits viewable in compare view

Updates eslint from 10.4.1 to 10.6.0

Release notes

Sourced from eslint's releases.

v10.6.0

Features

  • b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)
  • f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

  • 6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)
  • bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)
  • 8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)
  • 5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)
  • 9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)
  • d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)
  • 2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)
  • 63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)
  • 7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)
  • 399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

  • a83683d docs: Update README (GitHub Actions Bot)
  • f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)
  • bea49f7 docs: Update README (GitHub Actions Bot)
  • e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)
  • 8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)
  • 3eb3d9b docs: Update README (GitHub Actions Bot)
  • c5bb59c docs: Update README (GitHub Actions Bot)
  • eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

  • 6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)
  • 3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])
  • c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)
  • a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)
  • 27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)
  • 865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])
  • 27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)
  • 970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)
  • b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])
  • 6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

v10.5.0

Features

  • 5ca8c52 feat: correct stack tracking in max-nested-callbacks (#20973) (Pixel998)
  • b565783 feat: report no-with violations at the with keyword (#20971) (Pixel998)
  • 2ce032f feat: report max-lines-per-function violations at function head (#20966) (Pixel998)
  • 732cb3e feat: report max-nested-callbacks violations at function head (#20967) (Pixel998)
  • f9c138a feat: report max-depth violations on keywords (#20943) (Pixel998)
  • bdb496c feat: correct max-depth handling for else-if chains (#20944) (Pixel998)
  • c296873 feat: update error loc in max-statements to function header (#20907) (Taejin Kim)

Documentation

... (truncated)

Commits
  • 5d12a04 10.6.0
  • f7ca54b Build: changelog update for 10.6.0
  • 6a42034 ci: run ecosystem tests on main branch (#20891)
  • b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981)
  • 3dbacdb ci: bump actions/checkout from 6 to 7 (#21014)
  • c3abfca chore: correct JSDoc param types in html formatter (#21018)
  • a83683d docs: Update README
  • a832320 ci: split ecosystem tests into separate jobs (#21001)
  • 6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997)
  • bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013)
  • Additional commits viewable in compare view

Updates eslint-plugin-sonarjs from 4.0.3 to 4.1.0

Commits

Updates globals from 17.6.0 to 17.7.0

Release notes

Sourced from globals's releases.

v17.7.0

  • Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

Commits

Updates lint-staged from 17.0.6 to 17.0.8

Release notes

Sourced from lint-staged's releases.

v17.0.8

Patch Changes

  • #1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

  • #1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr...

    Description has been truncated

@dependabot
chore(deps): bump the dependencies group across 1 directory with 11 u…
ef1606b 
…pdates

Bumps the dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.18.1` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.11` | `5.1.16` |
| [@apify/actor-memory-expression](https://github.com/apify/apify-shared-js) | `0.1.17` | `0.2.0` |
| [@apify/input_secrets](https://github.com/apify/apify-shared-js) | `1.2.42` | `1.2.47` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.1.0` |
| [apify-cli](https://github.com/apify/apify-cli) | `1.6.1` | `1.7.0` |
| [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.6.0` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.0.3` | `4.1.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.7.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.6` | `17.0.8` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.4` |



Updates `axios` from 1.16.1 to 1.18.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.18.1)

Updates `nanoid` from 5.1.11 to 5.1.16
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.11...5.1.16)

Updates `@apify/actor-memory-expression` from 0.1.17 to 0.2.0
- [Release notes](https://github.com/apify/apify-shared-js/releases)
- [Changelog](https://github.com/apify/apify-shared-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apify/apify-shared-js/compare/@apify/actor-memory-expression@0.1.17...@apify/actor-memory-expression@0.2.0)

Updates `@apify/input_secrets` from 1.2.42 to 1.2.47
- [Release notes](https://github.com/apify/apify-shared-js/releases)
- [Changelog](https://github.com/apify/apify-shared-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/apify/apify-shared-js/compare/@apify/input_secrets@1.2.42...@apify/input_secrets@1.2.47)

Updates `@types/node` from 25.9.1 to 26.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `apify-cli` from 1.6.1 to 1.7.0
- [Release notes](https://github.com/apify/apify-cli/releases)
- [Changelog](https://github.com/apify/apify-cli/blob/master/CHANGELOG.md)
- [Commits](apify/apify-cli@v1.6.1...v1.7.0)

Updates `eslint` from 10.4.1 to 10.6.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.1...v10.6.0)

Updates `eslint-plugin-sonarjs` from 4.0.3 to 4.1.0
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `globals` from 17.6.0 to 17.7.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.6.0...v17.7.0)

Updates `lint-staged` from 17.0.6 to 17.0.8
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.0.6...v17.0.8)

Updates `prettier` from 3.8.3 to 3.9.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: nanoid
  dependency-version: 5.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@apify/actor-memory-expression"
  dependency-version: 0.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@apify/input_secrets"
  dependency-version: 1.2.47
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: apify-cli
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: globals
  dependency-version: 17.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: lint-staged
  dependency-version: 17.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 4, 2026
@greptile-apps

greptile-apps Bot commented Jul 4, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@socket-security

socket-security Bot commented Jul 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedapify-cli@​1.6.1 ⏵ 1.7.065 -6100100100100
Updatedeslint-plugin-sonarjs@​4.0.3 ⏵ 4.1.01001001009270
Updated@​apify/​actor-memory-expression@​0.1.17 ⏵ 0.2.074 +110076 +198 -1100
Updated@​apify/​input_secrets@​1.2.42 ⏵ 1.2.4799 +110077100100
Updatednanoid@​5.1.11 ⏵ 5.1.16100 +11007993100
Updated@​types/​node@​25.9.1 ⏵ 26.1.0100 +110081 +196100
Updatedglobals@​17.6.0 ⏵ 17.7.0100 +110086 +192100
Updatedaxios@​1.16.1 ⏵ 1.18.19710010094100
Updatedlint-staged@​17.0.6 ⏵ 17.0.810010010096 -1100
Updatedeslint@​10.4.1 ⏵ 10.6.098 +110010096 +2100
Updatedprettier@​3.8.3 ⏵ 3.9.499 +110097 +199100

View full report

@dependabot @github

dependabot Bot commented on behalf of github Jul 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 11, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-f30927c2f2 branch July 11, 2026 16:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants