Skip to content

chore(deps): bump the patch-updates group across 1 directory with 21 updates#2791

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-updates-ac195581d3
Closed

chore(deps): bump the patch-updates group across 1 directory with 21 updates#2791
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-updates-ac195581d3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026 •
edited
Loading

Bumps the patch-updates group with 4 updates in the / directory: @libsql/client, drizzle-orm, didwebvh-ts and nock.

Updates @libsql/client from 0.17.2 to 0.17.3

Commits

Updates drizzle-orm from 0.45.1 to 0.45.2

Release notes

Sourced from drizzle-orm's releases.

0.45.2

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

Commits

Updates didwebvh-ts from 2.7.2 to 2.7.4

Changelog

Sourced from didwebvh-ts's changelog.

2.7.4 (2026-04-24)

Bug Fixes

  • default verification method controller to the DID (f3ac134)

2.7.3 (2026-04-18)

Bug Fixes

Commits
  • f23ea45 chore(release): 2.7.4 [skip ci]
  • 3b096b0 Merge pull request #98 from Dtitkaio/fix/vm-controller-default
  • a3c26d5 Merge pull request #95 from decentralized-identity/swcurran-fix-1
  • f3ac134 fix: default verification method controller to the DID
  • f2ab4d7 Fix prerotation key verification logic in method.v1.0.ts
  • 08412ce chore(release): 2.7.3 [skip ci]
  • c2d6481 Merge pull request #94 from aviarytech/main
  • cf948fe fix: entry hash bug
  • 51852e6 Merge pull request #91 from swcurran/fix-tests
  • a0a9b6f Merge pull request #92 from swcurran/add-Claude
  • Additional commits viewable in compare view

Updates nock from 14.0.11 to 14.0.15

Release notes

Sourced from nock's releases.

v14.0.15

14.0.15 (2026-05-07)

Bug Fixes

  • Revert "fix(backport): apply body delay before the response end" (#2973) (de5450c), closes #2969

v14.0.14

14.0.14 (2026-04-30)

Bug Fixes

  • backport: apply body delay before the response end (#2969) (215cd2a)

v14.0.13

14.0.13 (2026-04-20)

Bug Fixes

  • types: align Definition with runtime; add rawHeaders, drop headers (#2955) (07fbfab)

v14.0.12

14.0.12 (2026-04-05)

Bug Fixes

  • prevent crash when query params have conflicting dot-notation keys (#2958) (7ea9933)
Commits
  • de5450c fix: Revert "fix(backport): apply body delay before the response end" (#2973)
  • 215cd2a fix(backport): apply body delay before the response end (#2969)
  • 07fbfab fix(types): align Definition with runtime; add rawHeaders, drop headers (#2955)
  • fe2c3ea chore(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#2961)
  • ee49b4f chore(deps-dev): bump flatted from 3.2.5 to 3.4.2
  • 11bf183 chore(deps-dev): bump undici from 6.23.0 to 6.24.1 (#2954)
  • 6b80154 chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#2960)
  • 4cbf6cc chore(deps): bump tar and npm (#2952)
  • 7ea9933 fix: prevent crash when query params have conflicting dot-notation keys (#2958)
  • d00d371 chore(deps): bump picomatch
  • Additional commits viewable in compare view

Updates @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4

Release notes

Sourced from @​babel/plugin-transform-modules-systemjs's releases.

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

📝 Documentation

🏃‍♀️ Performance

  • babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-transform-json-modules

Committers: 4

v7.29.2 (2026-03-16)

👓 Spec Compliance

  • babel-parser

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
  • babel-preset-env

... (truncated)

Commits

Updates @babel/register from 7.28.6 to 7.29.3

Release notes

Sourced from @​babel/register's releases.

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

📝 Documentation

🏃‍♀️ Performance

  • babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-transform-json-modules

Committers: 4

v7.29.2 (2026-03-16)

👓 Spec Compliance

  • babel-parser

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
  • babel-preset-env
    • #17789 [7.x backport] preset-env include/exclude should accept bugfix plugins (@​JLHwung)

🏠 Internal

Committers: 2

... (truncated)

Commits

Updates @expo/osascript from 2.4.2 to 2.4.3

Changelog

Sourced from @​expo/osascript's changelog.

2.4.3 - 2026-05-05

This version does not introduce any user-facing changes.

Commits

Updates @expo/package-manager from 1.10.3 to 1.10.5

Changelog

Sourced from @​expo/package-manager's changelog.

1.10.5 - 2026-05-05

This version does not introduce any user-facing changes.

1.10.4 - 2026-04-07

This version does not introduce any user-facing changes.

Commits

Updates @expo/xcpretty from 4.4.1 to 4.4.4

Changelog

Sourced from @​expo/xcpretty's changelog.

Changelog

This is the log of notable changes to Expo CLI and related packages.

main

🛠 Breaking changes

🎉 New features

🧹 Chores

Sun, 10 Sep 2023 17:56:11 -0700

🛠 Breaking changes

🎉 New features

  • [doctor] @​expo/metro-config deep dependency check (#4742)
  • [pod-install] show alternative message in managed projects (#4566)
  • [create-expo] Bump @​expo/package-manager for Bun support
  • [create-expo] detect bun package manager (#4752)
  • [webpack]: Bump expo to SDK 49 (#4747)
  • [schemer]: additional validation for unsupported image formats (#4764)

🧹 Chores

🐛 Bug fixes

  • [create-expo]: allow scoped template package names (#4750)

📦 Packages updated

  • create-expo@2.1.1
  • create-expo-app@2.1.1
  • @​expo/dev-tools@​0.13.187
  • expo-cli@6.3.12
  • expo-doctor@1.1.3
  • install-expo-modules@0.6.3
  • pod-install@0.1.39
  • expo-pwa@0.0.127
  • @​expo/webpack-config@​18.1.3
  • xdl@60.0.12

Wed Jul 5 17:04:00 2023 -0700

🧹 Chores

  • [install-expo-modules] Update text re: Expo CLI installation

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @libsql/core from 0.17.2 to 0.17.3

Commits

Updates @libsql/hrana-client from 0.9.0 to 0.10.0

Changelog

Sourced from @​libsql/hrana-client's changelog.

0.10.0 -- 2026-04-22

  • Remove cross-fetch dependency and use native fetch, Request, and Response globals. This package now requires an environment with a built-in Fetch API (Node 18+, modern browsers, Bun, Deno).
Commits

Updates @mswjs/interceptors from 0.41.3 to 0.41.8

Release notes

Sourced from @​mswjs/interceptors's releases.

v0.41.8 (2026-05-01)

Bug Fixes

  • support patching non-configurable writable properties (#780) (39372f78876fbef1ce207bf327116510beca697d) @​kettanaito

v0.41.7 (2026-04-29)

Bug Fixes

  • FetchResponse: preserve custom status and url after cloning (#778) (c1a4ba9302b3a51dabfce2bb218868b3d7711ce9) @​kettanaito
  • fetch: sanitize header tuples to fix Node.js 24 compatibility (#766) (fa0f1eeb084f98553eece6ee29393a745bd2da11) @​KrantiPonala @​kettanaito

v0.41.6 (2026-04-24)

Bug Fixes

  • fetch: clone responses safely (#775) (35b102134c76d8e2615dfa3cb3b57d32c95a34bc) @​kettanaito

v0.41.5 (2026-04-22)

Bug Fixes

  • support detecting prototype-level globals (#774) (7f8c14aeb6e58594aec02e4918ec0dfd7cf17920) @​kettanaito

v0.41.4 (2026-04-18)

Bug Fixes

  • add FetchRequest utility (#773) (53651056ceabd9c3dd03558e2409915f75b3d78a) @​kettanaito
Commits
  • 7af67bf chore(release): v0.41.8
  • 39372f7 fix: support patching non-configurable writable properties (#780)
  • 24858e7 chore(release): v0.41.7
  • c1a4ba9 fix(FetchResponse): preserve custom status and url after cloning (#778)
  • fa0f1ee fix(fetch): sanitize header tuples to fix Node.js 24 compatibility (#766)
  • f864330 chore: rename globalsRegistry into patchesRegistry (#776)
  • 6a454f9 chore: fix inconsistent test suite naming
  • 36f4192 chore(release): v0.41.6
  • 35b1021 fix(fetch): clone responses safely (#775)
  • 8c0644a chore(release): v0.41.5
  • Additional commits viewable in compare view

Updates brace-expansion from 1.1.12 to 1.1.14

Commits

Updates call-bind from 1.0.8 to 1.0.9

Changelog

Sourced from call-bind's changelog.

v1.0.9 - 2026-04-09

Commits

  • [Fix] correct .length computation when partial args exceed function arity 95c406d
  • [Dev Deps] update @ljharb/eslint-config, es-value-fixtures, eslint, for-each, has-strict-mode, npmignore, object-inspect 06a4e21
  • [Deps] update call-bind-apply-helpers, es-define-property, get-intrinsic 3fea81e
  • [readme] replace runkit CI badge with shields.io check-runs badge 23437d4
Commits
  • 8d6a98c v1.0.9
  • 95c406d [Fix] correct .length computation when partial args exceed function arity
  • 3fea81e [Deps] update call-bind-apply-helpers, es-define-property, get-intrinsic
  • 06a4e21 [Dev Deps] update @ljharb/eslint-config, es-value-fixtures, eslint, `fo...
  • 23437d4 [readme] replace runkit CI badge with shields.io check-runs badge
  • See full diff in compare view

Updates es-abstract from 1.24.1 to 1.24.2

Changelog

Sourced from es-abstract's changelog.

1.24.2 / 2026-04-07

  • [Fix] IfAbruptCloseIterator: handle all abrupt completions, not just throw
  • [Robustness] use +x instead of Number(x)
  • [Robustness] use isFinite/parseInt intrinsics, and isNaN helper
  • [Robustness] ensure undefined is undefined
  • [patch] add a TODO to remove an unused helper
  • [Dev Deps] update @ljharb/eslint-config, npmignore
Commits
  • 9c40412 v1.24.2
  • 5f9c0c1 [Robustness] use +x instead of Number(x)
  • 9cb3440 [Fix] IfAbruptCloseIterator: handle all abrupt completions, not just throw
  • 4a61750 [patch] add a TODO to remove an unused helper
  • e69f21a [Robustness] use isFinite/parseInt intrinsics, and isNaN helper
  • ff03c92 [Robustness] ensure undefined is undefined
  • f4fc91c [Dev Deps] update @ljharb/eslint-config, npmignore
  • See full diff in compare view

Updates flow-parser from 0.307.0 to 0.313.0

Release notes

Sourced from flow-parser's releases.

v0.313.0

Likely to cause new Flow errors:

  • Flow has changed its casting syntax from (x: T) to x as T. The default value of the option casting_syntax is now as, and Flow will error on the old syntax. If you want to preserve the old defualt value, add casting_syntax=both to your .flowconfig. You can use the npm package flow-upgrade to upgade: yarn run flow-codemod typeCastToAsExpression. Read the docs for more.

New Features:

  • Exported class setters no longer require an explicit type annotation: void is used if omitted

Parser:

  • The flow-parser estree output now aligns more with hermes-parser: ArrayExpression gains a trailingComma field, optional chaining is wrapped in a ChainExpression, AssertNonnull (expr!) emits a NonNullExpression instead of an optional node, type-position this emits ThisTypeAnnotation, and TypeParameter.bound is now a bare type node without the TypeAnnotation wrapper.

v0.312.1

  • Fix in saved state checks after a rebase

v0.312.0

Likely to cause new Flow errors:

  • Flow will now error on variance modifiers (+T, -T, in T, out T) on interface method type parameters, matching the existing rejection on class methods and function types

New Features:

  • Declaration merging between declare class and interface of the same name in the same scope.
  • Flow now separates value namespace and type namespace, so code like const A = 1; interface A {} is now accepted.

v0.311.0

New Features:

  • Added support for string and number literal properties in declare class and interface

Library Definitions:

  • Change the Record<K, T> utility type's key bound from K: string to K: PropertyKey, allowing number and symbol keys in addition to string
  • Added some TS built-in types that were missing from Flow's core lib

Misc:

  • When experimental.allow_variance_keywords is set to true, we support the keywords in / out / readonly along with +/- for variance

v0.310.0

New Features:

  • Support constructor type signatures (new (...) => Type) in interfaces and declare class

Misc:

  • When allow_variance_keywords is set to true, Flow stops erroring for in / out / readonly

v0.309.0

No significant changes.

v0.308.0

Parser:

  • The 5 enum body ESTree node types (EnumBooleanBody, EnumNumberBody, EnumStringBody, EnumSymbolBody, EnumBigIntBody) have been replaced with a single EnumBody node. Its members property is a flat array of per-type member nodes (EnumBooleanMember, EnumNumberMember, EnumStringMember, EnumBigIntMember, EnumDefaultedMember). The explicitType property is now a string ("boolean", "number", "string", "symbol", "bigint") or null (previously a boolean). hasUnknownMembers remains a boolean. Several enum validation errors are no longer reported by the parser and are instead reported by the type checker.

Library Definitions:

  • Add type definition for RegExp.escape()

v0.307.1

... (truncated)

Changelog

Sourced from flow-parser's changelog.

0.313.0

Likely to cause new Flow errors:

  • Flow has changed its casting syntax from (x: T) to x as T. The default value of the option casting_syntax is now as, and Flow will error on the old syntax. If you want to preserve the old defualt value, add casting_syntax=both to your .flowconfig. You can use the npm package flow-upgrade to upgade: yarn run flow-codemod typeCastToAsExpression. Read the docs for more.

New Features:

  • Exported class setters no longer require an explicit type annotation: void is used if omitted

Parser:

  • The flow-parser estree output now aligns more with hermes-parser: ArrayExpression gains a trailingComma field, optional chaining is wrapped in a ChainExpression, AssertNonnull (expr!) emits a NonNullExpression instead of an optional node, type-position this emits ThisTypeAnnotation, and TypeParameter.bound is now a bare type node without the TypeAnnotation wrapper.

0.312.1

  • Fix in saved state checks after a rebase

0.312.0

Likely to cause new Flow errors:

  • Flow will now error on variance modifiers (+T, -T, in T, out T) on interface method type parameters, matching the existing rejection on class methods and function types

New Features:

  • Declaration merging between declare class and interface of the same name in the same scope.
  • Flow now separates value namespace and type namespace, so code like const A = 1; interface A {} is now accepted.

0.311.0

New Features:

  • Added support for string and number literal properties in declare class and interface

Library Definitions:

  • Change the Record<K, T> utility type's key bound from K: string to K: PropertyKey, allowing number and symbol keys in addition to string
  • Added some TS built-in types that were missing from Flow's core lib

Parser:

  • Added support for writeonly property variance keyword

Misc:

  • When experimental.allow_variance_keywords is set to true, we support the keywords in / out / readonly / writeonly along with +/- for variance

0.310.0

New Features:

  • Support constructor type signatures (new (...) => Type) in interfaces and declare class

Misc:

  • When allow_variance_keywords is set to true, Flow stops erroring for in / out / readonly

0.309.0

No significant changes.

... (truncated)

Commits
  • ce66023 [flow] v0.313.0
  • 499f444 [flow][oxidation] Mark expensive.md and command_runner.ml as not needed
  • 42f82df [flow][oxidation] Port procFS.ml in the right place
  • 96d14d6 [flow][oxidation] Port over a few unit tests
  • 98aeeb4 [flow] Fix registry url
  • cf2656c [flow][oxidation] Mark things as not needed in rust_port_status.md
  • c30333c [flow][oxidation] Fully port flow_lsp.rs
  • f80c536 [flow][oxidation] Port source_test.rs
  • a4114f9 [flow][oxidation] Faithfully port all of rechecker.ml
  • 23d2df4 [flow][oxidation] Move renameModule.ml port into rename_module.rs
  • Additional commits viewable in compare view

Updates is-core-module from 2.16.1 to 2.16.2

Changelog

Sourced from is-core-module's changelog.

v2.16.2 - 2026-05-05

Commits

  • [Tests] increase coverage 1fc59fe
  • [actions] update workflows 0f6217b
  • [Fix] node 26 drops stream* modules 3acff68
  • [Dev Deps] update @ljharb/eslint-config, eslint, npmignore f06678c
  • [Deps] update hasown d9eae68
  • [Dev Deps] update @ljharb/eslint-config 8273701
  • [readme] replace runkit CI badge with shields.io check-runs badge 6b86754
Commits
  • a1633e0 v2.16.2
  • 0f6217b [actions] update workflows
  • 3acff68 [Fix] node 26 drops stream* modules
  • d9eae68 [Deps] update hasown
  • 8273701 [Dev Deps] update @ljharb/eslint-config
  • f06678c [Dev Deps] update @ljharb/eslint-config, eslint, npmignore
  • 1fc59fe [Tests] increase coverage
  • 6b86754 [readme] replace runkit CI badge with shields.io check-runs badge
  • See full diff in compare view

Updates minipass-flush from 1.0.6 to 1.0.7

Commits

Updates plist from 3.1.0 to 3.1.1

Commits

Updates safe-array-concat from 1.1.3 to 1.1.4

Changelog

Sourced from safe-array-concat's changelog.

v1.1.4 - 2026-04-19

Commits

  • [actions] update workflows 6747b8f
  • [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @ljharb/tsconfig, @types/isarray, @types/tape, eslint, npmignore aa30c94
  • [types] improve types 21276eb
  • [Deps] update call-bound, get-intrinsic efb5138
  • [Deps] update call-bind dbe4255
  • [Dev Deps] update @ljharb/eslint-config 470988c
  • [Dev Deps] update @ljharb/eslint-config 8a8f4ec
Commits
  • 255e625 v1.1.4
  • 6747b8f [actions] update workflows
  • 21276eb [types] improve types
  • dbe4255 [Deps] update call-bind
  • 470988c [Dev Deps] update @ljharb/eslint-config
  • 8a8f4ec [Dev Deps] update @ljharb/eslint-config
  • efb5138 [Deps] update call-bound, get-intrinsic
  • aa30c94 [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `@ljharb/...
  • See full diff in compare view

Updates slugify from 1.6.8 to 1.6.9

Changelog

Sourced from slugify's changelog.

v1.6.9 (2026-04-01)

  • #171 fix: correct CommonJS export for "module": "node16" + ESM (171) (@​karlhorky)
Commits
Maintainer changes

This version was pushed to npm by joshuakgoldberg, a new releaser for slugify since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the patch-updates group across 1 directory with 21 …
16aa40f 
…updates

Bumps the patch-updates group with 4 updates in the / directory: [@libsql/client](https://github.com/tursodatabase/libsql-client-ts/tree/HEAD/packages/libsql-client), [drizzle-orm](https://github.com/drizzle-team/drizzle-orm), [didwebvh-ts](https://github.com/decentralized-identity/didwebvh-ts) and [nock](https://github.com/nock/nock).


Updates `@libsql/client` from 0.17.2 to 0.17.3
- [Release notes](https://github.com/tursodatabase/libsql-client-ts/releases)
- [Changelog](https://github.com/tursodatabase/libsql-client-ts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tursodatabase/libsql-client-ts/commits/v0.17.3/packages/libsql-client)

Updates `drizzle-orm` from 0.45.1 to 0.45.2
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.45.1...0.45.2)

Updates `didwebvh-ts` from 2.7.2 to 2.7.4
- [Release notes](https://github.com/decentralized-identity/didwebvh-ts/releases)
- [Changelog](https://github.com/decentralized-identity/didwebvh-ts/blob/main/CHANGELOG.md)
- [Commits](decentralized-identity/didwebvh-ts@v2.7.2...v2.7.4)

Updates `nock` from 14.0.11 to 14.0.15
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.11...v14.0.15)

Updates `@babel/plugin-transform-modules-systemjs` from 7.29.0 to 7.29.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

Updates `@babel/register` from 7.28.6 to 7.29.3
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.3/packages/babel-register)

Updates `@expo/osascript` from 2.4.2 to 2.4.3
- [Changelog](https://github.com/expo/expo/blob/main/packages/@expo/osascript/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/@expo/osascript)

Updates `@expo/package-manager` from 1.10.3 to 1.10.5
- [Changelog](https://github.com/expo/expo/blob/main/packages/@expo/package-manager/CHANGELOG.md)
- [Commits](https://github.com/expo/expo/commits/HEAD/packages/@expo/package-manager)

Updates `@expo/xcpretty` from 4.4.1 to 4.4.4
- [Changelog](https://github.com/expo/expo-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/expo/expo-cli/compare/expo-cli@4.4.1...expo-cli@4.4.4)

Updates `@libsql/core` from 0.17.2 to 0.17.3
- [Release notes](https://github.com/tursodatabase/libsql-client-ts/releases)
- [Changelog](https://github.com/tursodatabase/libsql-client-ts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tursodatabase/libsql-client-ts/commits/v0.17.3/packages/libsql-core)

Updates `@libsql/hrana-client` from 0.9.0 to 0.10.0
- [Changelog](https://github.com/libsql/hrana-client-ts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/libsql/hrana-client-ts/commits/v0.10.0)

Updates `@mswjs/interceptors` from 0.41.3 to 0.41.8
- [Release notes](https://github.com/mswjs/interceptors/releases)
- [Commits](mswjs/interceptors@v0.41.3...v0.41.8)

Updates `brace-expansion` from 1.1.12 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.14)

Updates `call-bind` from 1.0.8 to 1.0.9
- [Changelog](https://github.com/ljharb/call-bind/blob/main/CHANGELOG.md)
- [Commits](ljharb/call-bind@v1.0.8...v1.0.9)

Updates `es-abstract` from 1.24.1 to 1.24.2
- [Changelog](https://github.com/ljharb/es-abstract/blob/main/CHANGELOG.md)
- [Commits](ljharb/es-abstract@v1.24.1...v1.24.2)

Updates `flow-parser` from 0.307.0 to 0.313.0
- [Release notes](https://github.com/facebook/flow/releases)
- [Changelog](https://github.com/facebook/flow/blob/main/Changelog.md)
- [Commits](facebook/flow@v0.307.0...v0.313.0)

Updates `is-core-module` from 2.16.1 to 2.16.2
- [Changelog](https://github.com/inspect-js/is-core-module/blob/main/CHANGELOG.md)
- [Commits](inspect-js/is-core-module@v2.16.1...v2.16.2)

Updates `minipass-flush` from 1.0.6 to 1.0.7
- [Commits](isaacs/minipass-flush@v1.0.6...v1.0.7)

Updates `plist` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/TooTallNate/plist.js/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/plist.js/commits)

Updates `safe-array-concat` from 1.1.3 to 1.1.4
- [Changelog](https://github.com/ljharb/safe-array-concat/blob/main/CHANGELOG.md)
- [Commits](ljharb/safe-array-concat@v1.1.3...v1.1.4)

Updates `slugify` from 1.6.8 to 1.6.9
- [Changelog](https://github.com/simov/slugify/blob/master/CHANGELOG.md)
- [Commits](https://github.com/simov/slugify/commits)

---
updated-dependencies:
- dependency-name: "@libsql/client"
  dependency-version: 0.17.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: drizzle-orm
  dependency-version: 0.45.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: didwebvh-ts
  dependency-version: 2.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: nock
  dependency-version: 14.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@babel/register"
  dependency-version: 7.29.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@expo/osascript"
  dependency-version: 2.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@expo/package-manager"
  dependency-version: 1.10.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@expo/xcpretty"
  dependency-version: 4.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@libsql/core"
  dependency-version: 0.17.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@libsql/hrana-client"
  dependency-version: 0.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: "@mswjs/interceptors"
  dependency-version: 0.41.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: brace-expansion
  dependency-version: 1.1.14
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: call-bind
  dependency-version: 1.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: es-abstract
  dependency-version: 1.24.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: flow-parser
  dependency-version: 0.313.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: patch-updates
- dependency-name: is-core-module
  dependency-version: 2.16.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: minipass-flush
  dependency-version: 1.0.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: plist
  dependency-version: 3.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: safe-array-concat
  dependency-version: 1.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: slugify
  dependency-version: 1.6.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm labels May 11, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 11, 2026 09:17
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm labels May 11, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 11, 2026

⚠️ No Changeset found

Latest commit: 16aa40f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 18, 2026

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 25, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 25, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/patch-updates-ac195581d3 branch May 25, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file npm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants