Bump the npm_and_yarn group across 2 directories with 6 updates by dependabot[bot] · Pull Request #5563 · microsoft/BotFramework-WebChat

dependabot · 2025-08-29T02:46:39Z

Bumps the npm_and_yarn group with 5 updates in the / directory:

Package	From	To
@babel/runtime	`7.28.2`	`7.28.3`
http-proxy-middleware	`2.0.9`	`3.0.5`
cookie	`0.7.1`	`0.7.2`
nanoid	`3.3.8`	`3.3.11`
tmp	`0.2.3`	`0.2.5`

Bumps the npm_and_yarn group with 2 updates in the /packages/embed directory: @babel/runtime and express.

Updates @babel/runtime from 7.28.2 to 7.28.3

Release notes

Sourced from @babel/runtime's releases.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jam Balaya (@JamBalaya56562)

Nicolò Ribaudo (@nicolo-ribaudo)

easrng (@easrng)

Changelog

Sourced from @babel/runtime's changelog.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Commits

ef155f5 v7.28.3
See full diff in compare view

Updates http-proxy-middleware from 2.0.9 to 3.0.5

Release notes

Sourced from http-proxy-middleware's releases.

v3.0.5

What's Changed

fix(fixRequestBody): check readableLength by @chimurai in chimurai/http-proxy-middleware#1096

chore(package): v3.0.5 by @chimurai in chimurai/http-proxy-middleware#1098

Full Changelog: chimurai/http-proxy-middleware@v3.0.4...v3.0.5

v3.0.4

What's Changed

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1045

chore(package): update yarn.lock by @chimurai in chimurai/http-proxy-middleware#1046

docs(readme): fix example code syntax error by @17hz in chimurai/http-proxy-middleware#1014

chore(package): bump express to v4.21.1 by @chimurai in chimurai/http-proxy-middleware#1047

chore(examples): update yarn.lock by @chimurai in chimurai/http-proxy-middleware#1048

chore(package): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1059

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1060

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1074

ci(github-actions): pipeline improvements by @chimurai in chimurai/http-proxy-middleware#1082

feat(types): export Plugin type by @oktapodia in chimurai/http-proxy-middleware#1071

fix(fixRequestBody): support multipart/form-data by @JS-mark in chimurai/http-proxy-middleware#896

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1083

ci(package): patch http-proxy by @chimurai in chimurai/http-proxy-middleware#1084

ci(pkg-pr-new): publish package for testing purposes by @chimurai in chimurai/http-proxy-middleware#1085

build(patch-package): run patch-package in 'development' only by @chimurai in chimurai/http-proxy-middleware#1086

chore(examples): update next deps by @chimurai in chimurai/http-proxy-middleware#1087

ci(github-actions): update spellcheck config by @chimurai in chimurai/http-proxy-middleware#1088

fix(websocket): handle errors in handleUpgrade by @nwalters512 in chimurai/http-proxy-middleware#823

fix(fixRequestBody): prevent multiple .write() calls by @chimurai in chimurai/http-proxy-middleware#1089

fix(fixRequestBody): handle invalid request by @chimurai in chimurai/http-proxy-middleware#1092

docs(CHANGELOG): update changelog by @chimurai in chimurai/http-proxy-middleware#1093

chore(package): v3.0.4 by @chimurai in chimurai/http-proxy-middleware#1095

New Contributors

@17hz made their first contribution in chimurai/http-proxy-middleware#1014

@oktapodia made their first contribution in chimurai/http-proxy-middleware#1071

@JS-mark made their first contribution in chimurai/http-proxy-middleware#896

@nwalters512 made their first contribution in chimurai/http-proxy-middleware#823

Full Changelog: chimurai/http-proxy-middleware@v3.0.3...v3.0.4

v3.0.3

What's Changed

fix(pathFilter): handle errors by @chimurai in chimurai/http-proxy-middleware#1043

chore(package): v3.0.3 by @chimurai in chimurai/http-proxy-middleware#1044

Full Changelog: chimurai/http-proxy-middleware@v3.0.2...v3.0.3

v3.0.2

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v3.0.5

fix(fixRequestBody): check readableLength (#1096)

v3.0.4

fix(fixRequestBody): handle invalid request (#1092)

fix(fixRequestBody): prevent multiple .write() calls (#1089)

fix(websocket): handle errors in handleUpgrade (#823)

ci(package): patch http-proxy (#1084)

fix(fixRequestBody): support multipart/form-data (#896)

feat(types): export Plugin type (#1071)

v3.0.3

fix(pathFilter): handle errors

v3.0.2

refactor(dependency): replace is-plain-obj with is-plain-object (#1031)

chore(package): upgrade to eslint v9 (#1032)

fix(logger-plugin): handle undefined protocol and hostname (#1036)

v3.0.1

fix(type): fix RequestHandler return type (#980)

refactor(errors): improve pathFilter error message (#987)

fix(logger-plugin): fix missing target port (#989)

ci(package): npm package provenance (#991)

fix(logger-plugin): log target port when router option is used (#1001)

refactor: fix circular dependencies (#1010)

fix(fix-request-body): support '+json' content-type suffix (#1015)

v3.0.0

This release contains some breaking changes.

Please read the V3 discussion chimurai/http-proxy-middleware#768 or follow the MIGRATION.md guide.

feat(typescript): type improvements (#882)

chore(deps): update micromatch to 4.0.5

chore(package): bump devDependencies

feat(legacyCreateProxyMiddleware): show migration tips (#756)

feat(legacyCreateProxyMiddleware): adapter with v2 behavior (#754)

docs(proxy events): fix new syntax (#753)

feat(debug): improve troubleshooting (#752)

test(path-rewriter): improve coverage (#751)

feat(ejectPlugins): skip registering default plugins (#750)

refactor: logging [BREAKING CHANGE] (#749)

... (truncated)

Commits

d3851ed chore(package): v3.0.5 (#1098)
1bdccbe fix(fixRequestBody): check readableLength (#1096)
01934d3 chore(package): v3.0.4 (#1095)
3364c0a docs(CHANGELOG): update changelog (#1093)
bd3c124 fix(fixRequestBody): handle invalid request (#1092)
0209760 fix(fixRequestBody): prevent multiple .write() calls (#1089)
fd0f568 fix(websocket): handle errors in handleUpgrade (#823)
e94087e ci(github-actions): update spellcheck config (#1088)
397748a chore(examples): update next deps (#1087)
6fb6032 build(patch-package): run patch-package in 'development' only (#1086)
Additional commits viewable in compare view

Updates cookie from 0.7.1 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

Commits

d19eaa1 0.7.2
bc38ffd Fix object assignment of hasOwnProperty (#177)
See full diff in compare view

Updates nanoid from 3.3.8 to 3.3.11

Release notes

Sourced from nanoid's releases.

3.3.11

Fixed React Native support.

3.3.10

Fixed React Native support (by @steida).

3.3.9

Reduced npm package size.

Changelog

Sourced from nanoid's changelog.

3.3.11

Fixed React Native support.

3.3.10

Fixed React Native support (by @steida).

3.3.9

Reduced npm package size.

Commits

37289ce Release 3.3.11 version
23690b7 Fix CI
c147962 Fix RN support
a83734e Move to manually ESM/CJS dual package
bb12e8a Release 3.3.10 version
8f44264 Fix Expo support
adf9b0c Release 3.3.9 version
1c6f088 Remove dev file from npm package
See full diff in compare view

Updates tmp from 0.2.3 to 0.2.5

Commits

3d2fe38 Bump up the version
e162828 Merge pull request #309 from fflorent/fix-tmp-dir-with-dir
b847d2f Fix use of tmp.dir() with dir option
08fa3ab Update version
1cf4ec5 Merge commit from fork
188b25e Fix GHSA-52f5-9888-hmc6
73b9fe4 Add test case for GHSA-52f5-9888-hmc6
b8e2f29 Remove broken tests
2892a02 Remove outdated URL
f592318 Reformat package.json
Additional commits viewable in compare view

Updates @babel/runtime from 7.28.2 to 7.28.3

Release notes

Sourced from @babel/runtime's releases.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jam Balaya (@JamBalaya56562)

Nicolò Ribaudo (@nicolo-ribaudo)

easrng (@easrng)

Changelog

Sourced from @babel/runtime's changelog.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Commits

ef155f5 v7.28.3
See full diff in compare view

Updates http-proxy-middleware from 2.0.9 to 3.0.5

Release notes

Sourced from http-proxy-middleware's releases.

v3.0.5

What's Changed

fix(fixRequestBody): check readableLength by @chimurai in chimurai/http-proxy-middleware#1096

chore(package): v3.0.5 by @chimurai in chimurai/http-proxy-middleware#1098

Full Changelog: chimurai/http-proxy-middleware@v3.0.4...v3.0.5

v3.0.4

What's Changed

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1045

chore(package): update yarn.lock by @chimurai in chimurai/http-proxy-middleware#1046

docs(readme): fix example code syntax error by @17hz in chimurai/http-proxy-middleware#1014

chore(package): bump express to v4.21.1 by @chimurai in chimurai/http-proxy-middleware#1047

chore(examples): update yarn.lock by @chimurai in chimurai/http-proxy-middleware#1048

chore(package): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1059

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1060

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1074

ci(github-actions): pipeline improvements by @chimurai in chimurai/http-proxy-middleware#1082

feat(types): export Plugin type by @oktapodia in chimurai/http-proxy-middleware#1071

fix(fixRequestBody): support multipart/form-data by @JS-mark in chimurai/http-proxy-middleware#896

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1083

ci(package): patch http-proxy by @chimurai in chimurai/http-proxy-middleware#1084

ci(pkg-pr-new): publish package for testing purposes by @chimurai in chimurai/http-proxy-middleware#1085

build(patch-package): run patch-package in 'development' only by @chimurai in chimurai/http-proxy-middleware#1086

chore(examples): update next deps by @chimurai in chimurai/http-proxy-middleware#1087

ci(github-actions): update spellcheck config by @chimurai in chimurai/http-proxy-middleware#1088

fix(websocket): handle errors in handleUpgrade by @nwalters512 in chimurai/http-proxy-middleware#823

fix(fixRequestBody): prevent multiple .write() calls by @chimurai in chimurai/http-proxy-middleware#1089

fix(fixRequestBody): handle invalid request by @chimurai in chimurai/http-proxy-middleware#1092

docs(CHANGELOG): update changelog by @chimurai in chimurai/http-proxy-middleware#1093

chore(package): v3.0.4 by @chimurai in chimurai/http-proxy-middleware#1095

New Contributors

@17hz made their first contribution in chimurai/http-proxy-middleware#1014

@oktapodia made their first contribution in chimurai/http-proxy-middleware#1071

@JS-mark made their first contribution in chimurai/http-proxy-middleware#896

@nwalters512 made their first contribution in chimurai/http-proxy-middleware#823

Full Changelog: chimurai/http-proxy-middleware@v3.0.3...v3.0.4

v3.0.3

What's Changed

fix(pathFilter): handle errors by @chimurai in chimurai/http-proxy-middleware#1043

chore(package): v3.0.3 by @chimurai in chimurai/http-proxy-middleware#1044

Full Changelog: chimurai/http-proxy-middleware@v3.0.2...v3.0.3

v3.0.2

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v3.0.5

fix(fixRequestBody): check readableLength (#1096)

v3.0.4

fix(fixRequestBody): handle invalid request (#1092)

fix(fixRequestBody): prevent multiple .write() calls (#1089)

fix(websocket): handle errors in handleUpgrade (#823)

ci(package): patch http-proxy (#1084)

fix(fixRequestBody): support multipart/form-data (#896)

feat(types): export Plugin type (#1071)

v3.0.3

fix(pathFilter): handle errors

v3.0.2

refactor(dependency): replace is-plain-obj with is-plain-object (#1031)

chore(package): upgrade to eslint v9 (#1032)

fix(logger-plugin): handle undefined protocol and hostname (#1036)

v3.0.1

fix(type): fix RequestHandler return type (#980)

refactor(errors): improve pathFilter error message (#987)

fix(logger-plugin): fix missing target port (#989)

ci(package): npm package provenance (#991)

fix(logger-plugin): log target port when router option is used (#1001)

refactor: fix circular dependencies (#1010)

fix(fix-request-body): support '+json' content-type suffix (#1015)

v3.0.0

This release contains some breaking changes.

Please read the V3 discussion chimurai/http-proxy-middleware#768 or follow the MIGRATION.md guide.

feat(typescript): type improvements (#882)

chore(deps): update micromatch to 4.0.5

chore(package): bump devDependencies

feat(legacyCreateProxyMiddleware): show migration tips (#756)

feat(legacyCreateProxyMiddleware): adapter with v2 behavior (#754)

docs(proxy events): fix new syntax (#753)

feat(debug): improve troubleshooting (#752)

test(path-rewriter): improve coverage (#751)

feat(ejectPlugins): skip registering default plugins (#750)

refactor: logging [BREAKING CHANGE] (#749)

... (truncated)

Commits

d3851ed chore(package): v3.0.5 (#1098)
1bdccbe fix(fixRequestBody): check readableLength (#1096)
01934d3 chore(package): v3.0.4 (#1095)
3364c0a docs(CHANGELOG): update changelog (#1093)
bd3c124 fix(fixRequestBody): handle invalid request (#1092)
0209760 fix(fixRequestBody): prevent multiple .write() calls (#1089)
fd0f568 fix(websocket): handle errors in handleUpgrade (#823)
e94087e ci(github-actions): update spellcheck config (#1088)
397748a chore(examples): update next deps (#1087)
6fb6032 build(patch-package): run patch-package in 'development' only (#1086)
Additional commits viewable in compare view

Updates @babel/runtime from 7.17.2 to 7.26.10

Release notes

Sourced from @babel/runtime's releases.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jam Balaya (@JamBalaya56562)

Nicolò Ribaudo (@nicolo-ribaudo)

easrng (@easrng)

Changelog

Sourced from @babel/runtime's changelog.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Commits

ef155f5 v7.28.3
See full diff in compare view

Updates express from 4.21.2 to 5.1.0

Release notes

Sourced from express's releases.

v5.1.0

What's Changed

Update captains by @UlisesGascon in expressjs/express#6027

build: Node.js 23.0 by @bjohansebas in expressjs/express#6075

Add funding field (v5) by @bjohansebas in expressjs/express#6064

✅ add discarded middleware test by @ctcpip in expressjs/express#5819

update homepage link http to https by @bjohansebas in expressjs/express#5920

Improve readme by @bjohansebas in expressjs/express#5994

Add bjohansebas as repo captain for expressjs.com by @crandmck in expressjs/express#6058

Remove Object.setPrototypeOf polyfill by @Phillip9587 in expressjs/express#6081

fix(buffer): use node:buffer instead of safe-buffer by @bhavya3024 in expressjs/express#6071

docs: Add DCO by @UlisesGascon in expressjs/express#6048

cleanup: remove promise support check from tests by @Phillip9587 in expressjs/express#6148

Use loop for acceptParams by @blakeembrey in expressjs/express#6066

Improve documentation step in release process by @bjohansebas in expressjs/express#6150

cleanup: remove unnecessary require for global Buffer by @Phillip9587 in expressjs/express#6146

cleanup: remove AsyncLocalStorage check by @Phillip9587 in expressjs/express#6147

update history.md for acceptParams change by @jonchurch in expressjs/express#6177

docs: add @rxmarbles to the triage team by @UlisesGascon in expressjs/express#6151

refactor: improve readability by @sazk07 in expressjs/express#6173

docs: clarify the security process in the triage role by @bjohansebas in expressjs/express#6217

chore: replace methods dependency with standard library by @jonkoops in expressjs/express#6196

Remove utils-merge dependency - use spread syntax instead by @Phillip9587 in expressjs/express#6091

fix(securite): fix vulnerabilities by @Abdel-Monaam-Aouini in expressjs/express#6211

refactor: prefix built-in node module imports by @slagiewka in expressjs/express#6236

fix: remove download size badges by @wesleytodd in expressjs/express#6266

Remove unused depd dependency by @jonkoops in expressjs/express#6197

fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml by @hamirmahal in expressjs/express#6256

Add support for OSSF scorecard reporting by @UlisesGascon in expressjs/express#5431

docs: add @Phillip9587 to the triage team by @bjohansebas in expressjs/express#6276

fix: added a missing semicolon in css styles in examples/auth by @pr4j3sh in expressjs/express#6297

docs: include team email in the security policy by @UlisesGascon in expressjs/express#6278

refactor: simplify normalizeTypes function by @Ayoub-Mabrouk in expressjs/express#6097

ci: updated github actions ci workflow by @Phillip9587 in expressjs/express#6314

ci: fix npm install --include typo by @Phillip9587 in expressjs/express#6324

ci: updated scorecard actions by @Phillip9587 in expressjs/express#6322

build(deps): use carat notation for dependency versions by @dpopp07 in expressjs/express#6317

chore(deps): update debug to ^4.4.0 by @Phillip9587 in expressjs/express#6313

docs: retroactively note 5.0.0-beta.1 api change in history file by @dpopp07 in expressjs/express#6333

feat(deps): body-parser@^2.1.0 by @wesleytodd in expressjs/express#6332

feat(deps): router@^2.1.0 by @wesleytodd in expressjs/express#6331

Update repo captains by @UlisesGascon in expressjs/express#6234

deps: upgrade nyc by @agungjati in expressjs/express#6122

fix (deps): update deps by @wesleytodd in expressjs/express#6337

response: add support for ETag option in res.sendFile by @juanarbol in expressjs/...
Description has been truncated

dependabot · 2025-09-16T04:50:24Z

Dependabot encountered an unknown error. Because of this, Dependabot cannot update this pull request.

Bumps the npm_and_yarn group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.28.2` | `7.28.3` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `3.0.5` | | [cookie](https://github.com/jshttp/cookie) | `0.7.1` | `0.7.2` | | [nanoid](https://github.com/ai/nanoid) | `3.3.8` | `3.3.11` | | [tmp](https://github.com/raszi/node-tmp) | `0.2.3` | `0.2.5` | Bumps the npm_and_yarn group with 2 updates in the /packages/embed directory: [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) and [express](https://github.com/expressjs/express). Updates `@babel/runtime` from 7.28.2 to 7.28.3 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.3/packages/babel-runtime) Updates `http-proxy-middleware` from 2.0.9 to 3.0.5 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.9...v3.0.5) Updates `cookie` from 0.7.1 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.7.1...v0.7.2) Updates `nanoid` from 3.3.8 to 3.3.11 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.8...3.3.11) Updates `tmp` from 0.2.3 to 0.2.5 - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.3...v0.2.5) Updates `@babel/runtime` from 7.28.2 to 7.28.3 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.3/packages/babel-runtime) Updates `http-proxy-middleware` from 2.0.9 to 3.0.5 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.9...v3.0.5) Updates `@babel/runtime` from 7.17.2 to 7.26.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.3/packages/babel-runtime) Updates `express` from 4.21.2 to 5.1.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.21.2...v5.1.0) Updates `@babel/runtime` from 7.17.2 to 7.26.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.3/packages/babel-runtime) --- updated-dependencies: - dependency-name: "@babel/runtime" dependency-version: 7.28.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 3.0.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cookie dependency-version: 0.7.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmp dependency-version: 0.2.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-version: 7.28.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 3.0.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-version: 7.26.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-version: 5.1.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-version: 7.26.10 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-09-19T03:29:48Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 29, 2025

dependabot bot requested review from a-b-r-o-w-n, beyackle2, compulim, cwhitten, srinaath and tdurnford as code owners August 29, 2025 02:46

dependabot bot mentioned this pull request Aug 29, 2025

Bump the npm_and_yarn group across 2 directories with 6 updates #5542

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-76c13fb3d0 branch 3 times, most recently from 789dec0 to f025249 Compare September 12, 2025 19:54

dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-76c13fb3d0 branch from f025249 to 46e2253 Compare September 18, 2025 07:46

dependabot bot closed this Sep 19, 2025

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-76c13fb3d0 branch September 19, 2025 03:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 2 directories with 6 updates#5563

Bump the npm_and_yarn group across 2 directories with 6 updates#5563
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-76c13fb3d0

dependabot bot commented on behalf of github Aug 29, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 16, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Aug 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

v3.0.5

What's Changed

v3.0.4

What's Changed

New Contributors

v3.0.3

What's Changed

v3.0.2

v0.7.2

3.3.11

3.3.10

3.3.9

3.3.11

3.3.10

3.3.9

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

v3.0.5

What's Changed

v3.0.4

What's Changed

New Contributors

v3.0.3

What's Changed

v3.0.2

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

v5.1.0

What's Changed

Uh oh!

dependabot bot commented on behalf of github Sep 16, 2025

Uh oh!

dependabot bot commented on behalf of github Sep 19, 2025

Uh oh!

Reviewers

Assignees

dependabot bot commented on behalf of github Aug 29, 2025 •

edited

Loading