build(deps): bump the npm-dependencies group across 1 directory with 11 updates#406
Closed
dependabot[bot] wants to merge 1 commit into
Closed
build(deps): bump the npm-dependencies group across 1 directory with 11 updates#406dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…11 updates Bumps the npm-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@cyclonedx/cyclonedx-library](https://github.com/CycloneDX/cyclonedx-javascript-library) | `6.13.1` | `10.0.0` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.3.4` | `5.5.2` | | [packageurl-js](https://github.com/package-url/packageurl-js) | `1.0.2` | `2.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.31` | `25.4.0` | | [chai](https://github.com/chaijs/chai) | `4.5.0` | `6.2.2` | | [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.0.3` | | [mocha](https://github.com/mochajs/mocha) | `10.8.2` | `11.7.5` | | [msw](https://github.com/mswjs/msw) | `2.12.7` | `2.12.10` | | [sinon](https://github.com/sinonjs/sinon) | `15.2.0` | `21.0.2` | | [sinon-chai](https://github.com/chaijs/sinon-chai) | `3.7.0` | `4.0.1` | | [which](https://github.com/npm/node-which) | `5.0.0` | `6.0.1` | Updates `@cyclonedx/cyclonedx-library` from 6.13.1 to 10.0.0 - [Release notes](https://github.com/CycloneDX/cyclonedx-javascript-library/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-javascript-library/blob/main/HISTORY.md) - [Commits](CycloneDX/cyclonedx-javascript-library@v6.13.1...v10.0.0) Updates `fast-xml-parser` from 5.3.4 to 5.5.2 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.3.4...v5.5.2) Updates `packageurl-js` from 1.0.2 to 2.0.1 - [Changelog](https://github.com/package-url/packageurl-js/blob/master/CHANGELOG.md) - [Commits](package-url/packageurl-js@v1.0.2...v2.0.1) Updates `@types/node` from 20.19.31 to 25.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `chai` from 4.5.0 to 6.2.2 - [Release notes](https://github.com/chaijs/chai/releases) - [Changelog](https://github.com/chaijs/chai/blob/main/History.md) - [Commits](chaijs/chai@v4.5.0...v6.2.2) Updates `eslint` from 8.57.1 to 10.0.3 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.1...v10.0.3) Updates `mocha` from 10.8.2 to 11.7.5 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md) - [Commits](mochajs/mocha@v10.8.2...v11.7.5) Updates `msw` from 2.12.7 to 2.12.10 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.12.7...v2.12.10) Updates `sinon` from 15.2.0 to 21.0.2 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v15.2.0...v21.0.2) Updates `sinon-chai` from 3.7.0 to 4.0.1 - [Release notes](https://github.com/chaijs/sinon-chai/releases) - [Changelog](https://github.com/chaijs/sinon-chai/blob/master/CHANGELOG.md) - [Commits](chaijs/sinon-chai@3.7.0...4.0.1) Updates `which` from 5.0.0 to 6.0.1 - [Release notes](https://github.com/npm/node-which/releases) - [Changelog](https://github.com/npm/node-which/blob/main/CHANGELOG.md) - [Commits](npm/node-which@v5.0.0...v6.0.1) --- updated-dependencies: - dependency-name: "@cyclonedx/cyclonedx-library" dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: fast-xml-parser dependency-version: 5.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: packageurl-js dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 25.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: chai dependency-version: 6.2.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: mocha dependency-version: 11.7.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: msw dependency-version: 2.12.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: sinon dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: sinon-chai dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: which dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/npm-dependencies-22ef56293a
branch
March 12, 2026 06:45
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-dependencies group with 11 updates in the / directory:
6.13.110.0.05.3.45.5.21.0.22.0.120.19.3125.4.04.5.06.2.28.57.110.0.310.8.211.7.52.12.72.12.1015.2.021.0.23.7.04.0.15.0.06.0.1Updates
@cyclonedx/cyclonedx-libraryfrom 6.13.1 to 10.0.0Release notes
Sourced from
@cyclonedx/cyclonedx-library's releases.... (truncated)
Changelog
Sourced from
@cyclonedx/cyclonedx-library's changelog.... (truncated)
Commits
b47c06910.0.0869c416chore: prep v10.0.02fecf38docsd533341feat: harden schema validators (#1396)aa8ddb1feat: pulled SPDX license IDs v1.0-3.28.0 (#1395)2a75d8fchore(deps): bump knip from 5.83.1 to 5.85.0 in /tools/test-dependencies (#1392)397ab83v10.0.0 (#1376)21e9cf8style: typed import extraf1a09d8Merge remote-tracking branch 'origin/main' into feat/10.0.0-devd0cab769.5.0Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@cyclonedx/cyclonedx-librarysince your current version.Updates
fast-xml-parserfrom 5.3.4 to 5.5.2Release notes
Sourced from fast-xml-parser's releases.
... (truncated)
Changelog
Sourced from fast-xml-parser's changelog.
... (truncated)
Commits
e0a14f7update dependency to fix typings4b4a765update dependencyce01792update browser bundle3412feeintegrate path-expression-matcherdf02c6bUpdate Security.md with v6 release information329a070Document security considerations for XMLParser usage44af544update release info3abdca9support maxEntityCountf95852aupdate changelog4e7ca80update release infoUpdates
packageurl-jsfrom 1.0.2 to 2.0.1Changelog
Sourced from packageurl-js's changelog.
Commits
cd1eb4bchore: bump to v2.0.1 (#77)f7dccd6fix: error on decode with meaningful message07b818bfix: only decode in parseStringc2f576fbump to v2.0.0 (#74)b5660a5Merge pull request #73 from package-url/jdalton/sync400de0cMerge pull request #72 from package-url/dependabot/npm_and_yarn/braces-3.0.3b6c8ce8fix: correct package-url.d.ts readonly type casing96822affix: correct param name typosf81a6befix: use encodeQualifierValue for qualifierKey and qualifierValueff590d2feat: encode qualifiers with URLSearchParamsUpdates
@types/nodefrom 20.19.31 to 25.4.0Commits
Updates
chaifrom 4.5.0 to 6.2.2Release notes
Sourced from chai's releases.
... (truncated)
Commits
814172dchore(deps): update dependency esbuild to v0.27.2 (#1759)b38c22bchore: add legal-comments=none option (#1756)180d4ccchore(deps): update dependencies to v9.39.2 (#1757)678cd00chore(deps): update dependencies (#1755)c8fb100chore(deps): update dependency prettier to v3.7.3 (#1754)d63c74echore(deps): update dependency eslint-plugin-jsdoc to v61.4.1 (#1751)243bf86fix: avoid BigInt literal in closeTo for runtime compat (#1748)d8b0395chore(deps): update actions/checkout action to v6 (#1749)7e1e247build(deps): bump glob from 10.4.5 to 10.5.0 (#1747)b25e5d8chore(deps): update dependency eslint-plugin-jsdoc to v61.2.1 (#1746)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chai since your current version.
Updates
eslintfrom 8.57.1 to 10.0.3Release notes
Sourced from eslint's releases.
... (truncated)
Commits
bfce7ea10.0.3d44ced8Build: changelog update for 10.0.3e511b58fix: update eslint (#20595)ef8fb92chore: package.json update for eslint-config-eslint releasee8f2104chore: updates for v9.39.4 release5cd1604refactor: simplify isCombiningCharacter helper (#20524)9fc31b0docs: Update README70ff1d0chore: eslint-config-eslint require Node^20.19.0 || ^22.13.0 || >=24(#20586)f4c9cf9fix: include variable name inno-useless-assignmentmessage (#20581)4efaa36docs: add info box foreslint-plugin-eslint-comments(#20570)Updates
mochafrom 10.8.2 to 11.7.5Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
9a6a5dbchore(v11.x): release 11.7.5 (#5523)8b21b38chore: run tests on PRs for and pushes to v11.x (#5525)663fff4chore: setup release-please for v11 (#5522)8d97220Update release-please to include v11.x and use Node ^22d89dbaffix: swallow morerequireerrors from *ts files (#5498)8649f39chore(main): release 11.7.4 (#5473)c2667c3fix: watch mode using chokidar v4 (