Skip to content

build(deps): bump js-cookie from 3.0.5 to 3.0.8 in /chat2db-community-client#1994

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chat2db-community-client/js-cookie-3.0.8
Closed

build(deps): bump js-cookie from 3.0.5 to 3.0.8 in /chat2db-community-client#1994
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chat2db-community-client/js-cookie-3.0.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps js-cookie from 3.0.5 to 3.0.8.

Release notes

Sourced from js-cookie's releases.

v3.0.8

  • Restore ES5 compatibility, inadvertently broken in 3.0.7 - #959
  • Lift Node version restriction, inadvertently restricted to >= 20 in 3.0.7 - #956

v3.0.7

  • Prevent cookie attribute injection: CVE-2026-46625 (eb3c40e)
  • Add Partitioned attribute to readme (b994768)
  • Publish to npm registry via trusted publisher exclusively (4dc71be)
  • Ensure consistent behaviour for get('name') + get() (1953d30)
Commits
  • d7a1096 Craft v3.0.8 release
  • 248e685 Use existing Chrome with puppeteer
  • fc04269 Remove QUnit related workaround in Grunt config
  • 265a685 Tidy up package lock file
  • 478e591 Disable Node deprecation DEP0044 for release workflow
  • 331d524 Fix node version config for E2E test job
  • 11d773d Ensure ECMAScript compatibility
  • d788646 Remove engines property from package
  • e7d9a4d Fix typo in test assertion message
  • b5fca24 Make credentials use explicit in release workflow
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for js-cookie since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@dependabot
dependabot Bot requested a review from openai0229 as a code owner July 24, 2026 04:20
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@openai0229 openai0229 moved this to In Review in Chat2DB Community Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/js-cookie-3.0.8 branch 2 times, most recently from 9723fd3 to a1bd192 Compare July 24, 2026 18:15
@dependabot dependabot Bot changed the title chore(deps): bump js-cookie from 3.0.5 to 3.0.8 in /chat2db-community-client build(deps): bump js-cookie from 3.0.5 to 3.0.8 in /chat2db-community-client Jul 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/js-cookie-3.0.8 branch 2 times, most recently from fc6dd51 to f5cbe55 Compare July 26, 2026 05:50
Bumps [js-cookie](https://github.com/js-cookie/js-cookie) from 3.0.5 to 3.0.8.
- [Release notes](https://github.com/js-cookie/js-cookie/releases)
- [Commits](js-cookie/js-cookie@v3.0.5...v3.0.8)

---
updated-dependencies:
- dependency-name: js-cookie
  dependency-version: 3.0.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/js-cookie-3.0.8 branch from f5cbe55 to 55809ac Compare July 26, 2026 07:23
@openai0229

Copy link
Copy Markdown
Contributor

Superseded by the repository-wide Dependabot security grouping configured in #2208. Closing this legacy per-dependency PR so Dependabot can regenerate security updates from the current .github/dependabot.yml. The underlying security alert remains open until a replacement update is merged.

@openai0229 openai0229 closed this Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/chat2db-community-client/js-cookie-3.0.8 branch July 27, 2026 04:53
@openai0229 openai0229 moved this from In Review to Done in Chat2DB Community Jul 27, 2026
@openai0229

Copy link
Copy Markdown
Contributor

Replacement created: #2232 contains the exact Dependabot head change from this PR as part of the npm security rollup tracked by #2231.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant