Skip to content

Bump the minor-updates group with 11 updates - #388

Open
dependabot[bot] wants to merge 1 commit into
testfrom
dependabot-npm_and_yarn-test-minor-updates-f68ee265b0
Open

Bump the minor-updates group with 11 updates#388
dependabot[bot] wants to merge 1 commit into
testfrom
dependabot-npm_and_yarn-test-minor-updates-f68ee265b0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-updates group with 11 updates:

Package From To
@natlibfi/melinda-backend-commons 3.0.5 3.0.6
body-parser 2.2.1 2.3.0
helmet 8.1.0 8.2.0
oidc-client-ts 3.4.1 3.5.0
react-oidc-context 3.3.0 3.3.1
babel-loader 10.0.0 10.1.1
eslint-plugin-prettier 5.5.4 5.5.6
html-webpack-plugin 5.6.5 5.6.7
nodemon 3.1.11 3.1.14
prettier 3.7.4 3.9.4
webpack 5.104.1 5.108.3

Updates @natlibfi/melinda-backend-commons from 3.0.5 to 3.0.6

Commits

Updates body-parser from 2.2.1 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

v2.2.2

What's Changed

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0

2.2.2 / 2026-01-07

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

Updates helmet from 8.1.0 to 8.2.0

Changelog

Sourced from helmet's changelog.

8.2.0 - 2026-05-21

  • Cross-Origin-Opener-Policy: support noopener-allow-popups. See #522
  • Improve error message when passing duplicate options
Commits

Updates oidc-client-ts from 3.4.1 to 3.5.0

Release notes

Sourced from oidc-client-ts's releases.

v3.5.0

oidc-client-ts v3.5.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #2295 add maxSilentRenewTimeoutRetries configuration
    • #2311 add nonce validation for ID tokens
  • Fixes;
    • #2369 reword misleading error messages for request_type check

thanks to @​ninadvadujkar, @​Osmose and @​ferdinand-varta

Commits
  • 9bea2d8 v3.5.0
  • e2f2a38 Merge pull request #2390 from authts/dependabot/npm_and_yarn/globals-17.4.0
  • 70d36c0 Merge pull request #2401 from authts/dependabot/npm_and_yarn/lint-staged-16.3.3
  • dd84fc5 Merge pull request #2402 from authts/dependabot/npm_and_yarn/microsoft/api-ex...
  • 104def8 build(deps-dev): bump @​microsoft/api-extractor from 7.57.6 to 7.57.7
  • cf0e029 build(deps-dev): bump lint-staged from 16.2.7 to 16.3.3
  • c23b00c build(deps-dev): bump globals from 17.3.0 to 17.4.0
  • fd7eb5c Merge pull request #2386 from authts/dependabot/npm_and_yarn/rollup-4.59.0
  • 1043ef4 Merge pull request #2387 from authts/dependabot/npm_and_yarn/multi-770cfcd984
  • d5a1b1e Merge pull request #2364 from authts/dependabot/npm_and_yarn/samples/Parcel/q...
  • Additional commits viewable in compare view

Updates react-oidc-context from 3.3.0 to 3.3.1

Release notes

Sourced from react-oidc-context's releases.

v3.3.1

react-oidc-context 3.3.1 is a bugfix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

thanks to @​williamsjokvist, @​dargmuesli, @​nvmnghia and @​Joshuajrodrigues

Commits
  • af7e8af v3.3.1
  • 2c217b2 Merge pull request #1944 from authts/dependabot/npm_and_yarn/microsoft/api-ex...
  • 51a32e3 build(deps-dev): bump @​microsoft/api-extractor from 7.57.6 to 7.57.7
  • 0350588 Merge pull request #1941 from authts/dependabot/npm_and_yarn/jest-30.3.0
  • debee72 build(deps-dev): bump jest from 30.2.0 to 30.3.0
  • c14c29e Merge pull request #1943 from authts/dependabot/npm_and_yarn/jest-mock-30.3.0
  • 2c59496 build(deps-dev): bump jest-mock from 30.2.0 to 30.3.0
  • 7057b3c Merge pull request #1947 from authts/dependabot/npm_and_yarn/jest-environment...
  • 41f5333 Merge pull request #1942 from authts/dependabot/npm_and_yarn/lint-staged-16.3.3
  • c3dc284 Merge pull request #1935 from authts/dependabot/npm_and_yarn/globals-17.4.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-oidc-context since your current version.


Updates babel-loader from 10.0.0 to 10.1.1

Release notes

Sourced from babel-loader's releases.

v10.1.1

What's Changed

Full Changelog: babel/babel-loader@v10.1.0...v10.1.1

v10.1.0

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v10.0.0...v10.1.0

Commits

Updates eslint-plugin-prettier from 5.5.4 to 5.5.6

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.6

Patch Changes

v5.5.5

Patch Changes

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.6

Patch Changes

5.5.5

Patch Changes

Commits
  • 4f33ea5 chore: release eslint-plugin-prettier (#792)
  • 4745b54 ci: declare workflow-level contents: read on 2 workflows (#790)
  • b5c96a3 chore: bump all (dev)Dependencies (#791)
  • e867680 chore(deps): update all dependencies (#766)
  • e8e2f7f chore: testing eslint v10 (#779)
  • ca076d9 chore: update dev dependencies (#780)
  • 42e6369 build(deps): Bump the actions group with 2 updates (#778)
  • 53ff214 Remove empty NPM_TOKEN from release.yml
  • e2c154a chore: release eslint-plugin-prettier (#773)
  • 6795c1a build(deps): Bump the actions group across 1 directory with 2 updates (#774)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-prettier since your current version.


Updates html-webpack-plugin from 5.6.5 to 5.6.7

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.7 (2026-04-17)

Bug Fixes

5.6.6 (2026-01-16)

Bug Fixes

Commits

Updates nodemon from 3.1.11 to 3.1.14

Release notes

Sourced from nodemon's releases.

v3.1.14

3.1.14 (2026-02-20)

Bug Fixes

v3.1.13

3.1.13 (2026-02-19)

Bug Fixes

  • TypeScript definition for 'restart' args (5c03715), closes #2265

v3.1.12

3.1.12 (2026-02-19)

Bug Fixes

Commits
  • cfebe2f fix: get watch working on windows
  • f34bfa9 chore: fix release to run after tests
  • 5c03715 fix: TypeScript definition for 'restart' args
  • 28de4b7 chore: semver-release wanted 22-24 🤦
  • 6217164 chore: move release workflow to node 20
  • 2c458de chore: bump semver-release + update workflow
  • 9376af3 fix: bump minimatch
  • e045423 chore: website
  • f7a4edd chore: website
  • f26223f chore: website
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nodemon since your current version.


Updates prettier from 3.7.4 to 3.9.4

Release notes

Sourced from prettier's releases.

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

3.8.3

🔗 Changelog

3.8.2

  • Support Angular v21.2

🔗 Changelog

3.8.1

🔗 Changelog

3.8.0

  • Support Angular v21.1

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.4

diff

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

<!-- Input -->
<FancyButton [label]="title">
  @content (icon) {
    <span>Icon!</span>
  }
  @content (description) {
    <span>Description text</span>
  }
  <span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.3 -->
<FancyButton [label]="title">
@​content(icon) {
<span>Icon!</span>
}
@​content(description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.4 -->
<FancyButton [label]="title">
@​content (icon) {
<span>Icon!</span>
}
@​content (description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

</tr></table>

... (truncated)

Commits
  • b693cb2 Release 3.9.4
  • 2e92ac0 Angular: Format @content(name) -> @content (name) to align with other blo...
  • abed2c2 Bump Prettier dependency to 3.9.3
  • 6cfbc00 Clean changelog_unreleased
  • 3732e1d Release 3.9.3
  • a74a7b0 Allow decorators to be used with declare on class fields (#19492)
  • bd9e11a Correct text identification in liquid syntax (#19489)
  • 269eee3 Bump Prettier dependency to 3.9.1
  • ec7ccd1 Clean changelog_unreleased
  • c47654c Release 3.9.1
  • Additional commits viewable in compare view

Updates webpack from 5.104.1 to 5.108.3

Release notes

Sourced from webpack's releases.

v5.108.3

Patch Changes

v5.108.2

Patch Changes

v5.108.1

Patch Changes

  • Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @​xiaoxiaojx in #21280)

  • Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @​alexander-akait in #21269)

v5.108.0

Minor Changes

  • Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @​alexander-akait in #21218)

  • Add a bun target that emits ESM and externalizes bun:* and node.js built-in modules. (by @​alexander-akait in #21248)

  • Support CommonJS reexports via Object.defineProperty value and getter descriptors. (by @​alexander-akait in #21129)

  • Support JSON Schema const when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Support JSON Schema if/then/else when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Skip import specifiers, require() and import() calls in dead conditional branches gated by inlined imported constants (isDEV ? A : B), evaluated via getCondition. (by @​hai-x in #21136)

  • CSS localIdentName [hash] now resolves to the local ident hash (matching css-loader); use [modulehash] for the module hash. (by @​alexander-akait in #21259)

  • Add CSS parser as option and resolve url() inside HTML style attributes. (by @​alexander-akait in #21157)

  • Add dedicated module classes for all built-in module types. (by @​alexander-akait in #21164)

  • Support .html/.css for the default ./src entry under the html/css experiments. (by @​alexander-akait in #21039)

  • Add defineConfig helper for typed configuration files. (by @​alexander-akait in #21169)

  • Add a deno target (with versions, e.g. deno, deno2, deno1.40) that emits ESM, resolves node.js built-ins via the required node: specifier, and keeps Deno's own import protocols (npm:, jsr:, node:, http(s)://) external. (by @​alexander-akait in #21247)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.108.3

Patch Changes

5.108.2

Patch Changes

5.108.1

Patch Changes

  • Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @​xiaoxiaojx in #21280)

  • Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @​alexander-akait in #21269)

5.108.0

Minor Changes

  • Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @​alexander-akait in #21218)

  • Add a bun target that emits ESM and externalizes bun:* and node.js built-in modules. (by @​alexander-akait in #21248)

  • Support CommonJS reexports via Object.defineProperty value and getter descriptors. (by @​alexander-akait in #21129)

  • Support JSON Schema const when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Support JSON Schema if/then/else when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Skip import specifiers, require() and import() calls in dead conditional branches gated by inlined imported constants (isDEV ? A : B), evaluated via getCondition. (by @​hai-x in #21136)

  • CSS localIdentName [hash] now resolves to the local ident hash (matching css-loader); use [modulehash] for the module hash. (by @​alexander-akait in #21259)

  • Add CSS parser as option and resolve url() inside HTML style attributes. (by @​alexander-akait in #21157)

  • Add dedicated module classes for all built-in module types. (by @​alexander-akait in #21164)

  • Support .html/.css for the default ./src entry under the html/css experiments. (by @​alexander-akait in #21039)

... (truncated)

Commits
  • 6844305 chore(release): new release (#21304)
  • 99286e2 fix: match harmony accept dependencies by module reference (#21303)
  • 0abec4d fix: guard HarmonyAcceptDependency against unresolved module ids (#21302)
  • 606712d perf(css): struct-of-arrays AST for the streaming CSS parser (#21285)
  • cf9c04e docs: update examples (#21293)
  • 4dfe770 chore(release)...

    Description has been truncated

@dependabot
Bump the minor-updates group with 11 updates
b3f336e 
Bumps the minor-updates group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@natlibfi/melinda-backend-commons](https://github.com/NatLibFi/melinda-backend-commons-js) | `3.0.5` | `3.0.6` |
| [body-parser](https://github.com/expressjs/body-parser) | `2.2.1` | `2.3.0` |
| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.2.0` |
| [oidc-client-ts](https://github.com/authts/oidc-client-ts) | `3.4.1` | `3.5.0` |
| [react-oidc-context](https://github.com/authts/react-oidc-context) | `3.3.0` | `3.3.1` |
| [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.6` |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.5` | `5.6.7` |
| [nodemon](https://github.com/remy/nodemon) | `3.1.11` | `3.1.14` |
| [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.9.4` |
| [webpack](https://github.com/webpack/webpack) | `5.104.1` | `5.108.3` |


Updates `@natlibfi/melinda-backend-commons` from 3.0.5 to 3.0.6
- [Release notes](https://github.com/NatLibFi/melinda-backend-commons-js/releases)
- [Commits](NatLibFi/melinda-backend-commons-js@v3.0.5...v3.0.6)

Updates `body-parser` from 2.2.1 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.1...v2.3.0)

Updates `helmet` from 8.1.0 to 8.2.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.1.0...v8.2.0)

Updates `oidc-client-ts` from 3.4.1 to 3.5.0
- [Release notes](https://github.com/authts/oidc-client-ts/releases)
- [Commits](authts/oidc-client-ts@v3.4.1...v3.5.0)

Updates `react-oidc-context` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/authts/react-oidc-context/releases)
- [Commits](authts/react-oidc-context@v3.3.0...v3.3.1)

Updates `babel-loader` from 10.0.0 to 10.1.1
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](babel/babel-loader@v10.0.0...v10.1.1)

Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.6
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.6)

Updates `html-webpack-plugin` from 5.6.5 to 5.6.7
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](jantimon/html-webpack-plugin@v5.6.5...v5.6.7)

Updates `nodemon` from 3.1.11 to 3.1.14
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v3.1.11...v3.1.14)

Updates `prettier` from 3.7.4 to 3.9.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.4...3.9.4)

Updates `webpack` from 5.104.1 to 5.108.3
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.104.1...v5.108.3)

---
updated-dependencies:
- dependency-name: "@natlibfi/melinda-backend-commons"
  dependency-version: 3.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: helmet
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: oidc-client-ts
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: react-oidc-context
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: babel-loader
  dependency-version: 10.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: html-webpack-plugin
  dependency-version: 5.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: nodemon
  dependency-version: 3.1.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: prettier
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: webpack
  dependency-version: 5.108.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 1, 2026 03:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants