Bump the npm_and_yarn group across 1 directory with 22 updates by dependabot[bot] · Pull Request #1 · RailDevOps/waveterm

dependabot · 2026-03-14T21:37:51Z

Bumps the npm_and_yarn group with 22 updates in the / directory:

Package	From	To
electron	`34.0.2`	`35.7.5`
storybook	`8.5.8`	`8.6.17`
vite	`6.1.0`	`6.4.1`
vite-plugin-static-copy	`2.2.0`	`2.3.2`
@babel/runtime	`7.26.0`	`7.28.6`
ajv	`6.12.6`	`6.14.0`
diff	`4.0.2`	`4.0.4`
estree-util-value-to-estree	`3.2.1`	`3.5.0`
form-data	`4.0.1`	`4.0.5`
http-proxy-middleware	`2.0.7`	`2.0.9`
image-size	`1.1.1`	`1.2.1`
immutable	`5.0.3`	`5.1.5`
js-yaml	`3.14.1`	`3.14.2`
lodash	`4.17.21`	`4.17.23`
mdast-util-to-hast	`13.2.0`	`13.2.1`
node-forge	`1.3.1`	`1.3.3`
prismjs	`1.29.0`	`1.30.0`
rollup	`4.27.4`	`4.59.0`
svgo	`3.3.2`	`3.3.3`
tar-fs	`2.1.1`	`2.1.4`
tmp	`0.2.3`	`0.2.5`
webpack	`5.96.1`	`5.105.4`

Updates electron from 34.0.2 to 35.7.5

Commits

86d839a build: correct CHECK syntax (#48106)
5be0be7 fix: ensure snapshot is valid (#48105)
df232d1 ci: cleanup use new arc cluster (#48007)
ab51554 ci: fixup mac runner hang (#47992)
203abdd ci: use new arc cluster (#47913)
ea17e83 build: fix ffmpeg generation on Windows non-x64 (#47845)
7b5d411 build(dev-deps): drop unused @types/webpack dep (#47806)
def6203 build: deep update brace-expansion to resolve an audit alert (#47719)
28d8ed0 test: cleanup RenderFrame lifespan tests (#47795)
ee8942d build: drop eslint-plugin-unicorn (#47690)
Additional commits viewable in compare view

Updates storybook from 8.5.8 to 8.6.17

Release notes

Sourced from storybook's releases.

v8.6.17

8.6.17

Harden websocket connection

v8.6.16

8.6.16

No-op release. No changes.

v8.6.15

8.6.15

Core: Fix .env-file parsing, thanks @jreinhold!

Changelog

Sourced from storybook's changelog.

8.6.17

Harden websocket connection

8.6.16

No-op release. No changes.

8.6.14

CLI: Add skip onboarding, recommended/minimal config - #30930, thanks @shilman!

Core: Fix using dates in expect statements - #28413, thanks @yann-combarnous!

React Native Web: Fix expo router by setting JSX to automatic - #31484, thanks @dannyhw!

Test: Make sure that lit arrays are not cloned - #31435, thanks @kasperpeulen!

8.6.13

Controls: Fix boxShadow on empty controls - #27193, thanks @H0onnn!

React Native Web: Update react-native-web - #31324, thanks @ndelangen!

8.6.12

CLI: Only install Visual Test Addon if test feature is selected - #30966, thanks @ghengeveld!

Core: Fix telemetry error on Storybook UI - #30953, thanks @yannbf!

Ember: Fix ember-template-compiler import for ember 6+ - #30682, thanks @leoeuclids!

Next: Update vite-plugin-storybook-nextjs to 2.0.0--canary.33.17a2310.0 - #30997, thanks @kasperpeulen!

Svelte: Exclude node_modules from docgen - #30981, thanks @JReinhold!

8.6.11

Angular: Fix zone.js support for Angular libraries - #30941, thanks @valentinpalkovic!

8.6.10

Addon-docs: Fix non-string handling in Stories block - #30913, thanks @JamesIves!

Nextjs: Fix styled-jsx optimize vite warnings - #30932, thanks @kasperpeulen!

React: Fix actImplementation is not a function - #30929, thanks @kasperpeulen!

8.6.9

Next: Fix react aliases in next vite plugin - #30914, thanks @kasperpeulen!

8.6.8

Angular: Export all files in Angular package.json - #30849, thanks @kasperpeulen!

CLI: Don't add packageManager entry to package.json automatically - #30855, thanks @kasperpeulen!

React: Allow portable stories to be used in SSR - #30847, thanks @kasperpeulen!

Svelte: Adjust Svelte typings to include Svelte 5 function components - #30852, thanks @dummdidumm!

Telemetry: Make sure that telemetry doesn't fail on init - #30857, thanks @kasperpeulen!

Vite: Update HMR filter to target specific story file types - #30845, thanks @kasperpeulen!

... (truncated)

Commits

c6e550a Bump version from "8.6.16" to "8.6.17" [skip ci]
9cf9d89 Core: Require token for websocket connections
7e51515 Bump version from "8.6.15" to "8.6.16" [skip ci]
3812b43 Bump version from 8.6.14 to 8.6.15 MANUALLY
4a04cb2 filter env vars from .env files
ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
b210eed Update frameworks.ts
fe5ea89 Fix lint
8c12257 Merge branch 'latest-release'
8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for storybook since your current version.

Updates vite from 6.1.0 to 6.4.1

Release notes

Sourced from vite's releases.

v6.4.1

Please refer to CHANGELOG.md for details.

v6.4.0

Please refer to CHANGELOG.md for details.

v6.3.7

Please refer to CHANGELOG.md for details.

v6.3.6

Please refer to CHANGELOG.md for details.

v6.3.5

Please refer to CHANGELOG.md for details.

v6.3.4

Please refer to CHANGELOG.md for details.

v6.2.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.0 (2026-03-12)

Today, we're thrilled to announce the release of the next Vite major:

Vite 8.0 announcement blog post

Docs (translations: 简体中文, 日本語, Español, Português, 한국어, Deutsch, فارسی)

Migration Guide

⚠ BREAKING CHANGES

remove import.meta.hot.accept resolution fallback (#21382)

update default browser target (#21193)

the epic rolldown-vite merge (#21189)

Features

update rolldown to 1.0.0-rc.9 (#21813) (f05be0e)

warn when vite-tsconfig-paths plugin is detected (#21781) (ada493e)

css: support es2025 build target for lightningcss (#21769) (08906e7)

forward browser console logs and errors to dev server terminal (#20916) (2540ed0)

update rolldown to 1.0.0-rc.8 (#21790) (a0c950e)

export Visitor and ESTree from rolldown/utils (#21664) (45de31e)

update rolldown to 1.0.0-rc.6 (#21714) (37a65f8)

use util.inspect for CLI error display (#21668) (5f425a9)

update rolldown to 1.0.0-rc.5 (#21660) (b3ddbc5)

update rolldown to 1.0.0-rc.4 (#21617) (1ee5c7f)

wasm: add SSR support for .wasm?init (#21102) (216a3b5)

integrate devtools (#21331) (acbf507)

update rolldown to 1.0.0-rc.3 (#21554) (43358e9)

manifest: add assets field for standalone CSS entry points (#21015) (f289b9b)

update rolldown to 1.0.0-rc.2 (#21512) (fa136a9)

bundled-dev: support worker in initial bundle (#21415) (f3d3149)

dev: detect port conflicts on wildcard hosts (#21381) (b0dd5a9)

shortcuts case insensitive (#21224) (7796ade)

update rolldown to 1.0.0-rc.1 (#21463) (ff9dd7f)

warn if envPrefix contains spaces (#21292) (9fcde3c)

update rolldown to 1.0.0-beta.60 (#21408) (c33aa7c)

update rolldown to 1.0.0-beta.59 (#21374) (0037943)

add ignoreOutdatedRequests option to optimizeDeps (#21364) (b2e75aa)

add ios to default esbuild targets (#21342) (daae6e9)

update rolldown to 1.0.0-beta.58 (#21354) (ba40cef)

update rolldown to 1.0.0-beta.57 (#21335) (d5412ef)

css: support es2024 build target for lightningcss (#21294) (bd33b8e)

update rolldown to 1.0.0-beta.56 (#21323) (9847a63)

introduce v2 native plugins and enable it by default (#21268) (42f2ab3)

ssr: avoid errors when rewriting already rewritten stacktrace (#21269) (98d9a33)

update rolldown to 1.0.0-beta.55 (#21300) (2c8db85)

update rolldown to 1.0.0-beta.54 (#21267) (c751172)

... (truncated)

Commits

a7349ef release: v6.3.1
a152b7c fix: backward compat for internal plugin transform calls (#19878)
35c7f35 fix: avoid using Promise.allSettled in preload function (#19805)
5fdcfe7 release: v6.3.0
d4ee5e8 fix(hmr): avoid infinite loop happening with hot.invalidate in circular dep...
5003434 fix(preview): use host url to open browser (#19836)
bf9728e release: v6.3.0-beta.2
380c10e fix(hmr): run HMR handler sequentially (#19793)
8bed1de fix: addWatchFile doesn't work if base is specified (fixes #19792) (#19794)
0a0c50a refactor: simplify pluginFilter implementation (#19828)
Additional commits viewable in compare view

Updates vite-plugin-static-copy from 2.2.0 to 2.3.2

Release notes

Sourced from vite-plugin-static-copy's releases.

vite-plugin-static-copy@2.3.2

Patch Changes

4627afb Thanks @sapphi-red! - Files not included in src was possible to acess with a crafted request. See GHSA-pp7p-q8fx-2968 for more details.

vite-plugin-static-copy@2.3.1

Patch Changes

#152 6aee6a3 Thanks @sapphi-red! - improve performance of internal isSubdirectoryOrEqual function

vite-plugin-static-copy@2.3.0

Minor Changes

281f5b2 Thanks @sapphi-red! - improve performance by coping files concurrently when possible

Patch Changes

#149 a9f35c9 Thanks @sapphi-red! - ensure .[cm]?[tj]sx? static assets are JS mime to align with Vite. vitejs/vite#19453

Changelog

Sourced from vite-plugin-static-copy's changelog.

2.3.2

Patch Changes

4627afb Thanks @sapphi-red! - Files not included in src was possible to acess with a crafted request. See GHSA-pp7p-q8fx-2968 for more details.

2.3.1

Patch Changes

#152 6aee6a3 Thanks @sapphi-red! - improve performance of internal isSubdirectoryOrEqual function

2.3.0

Minor Changes

281f5b2 Thanks @sapphi-red! - improve performance by coping files concurrently when possible

Patch Changes

#149 a9f35c9 Thanks @sapphi-red! - ensure .[cm]?[tj]sx? static assets are JS mime to align with Vite. vitejs/vite#19453

Commits

326a79f chore: update versions (#197)
0f39cad ci: run release against v* branches
4627afb fix: only serve files under src (#195)
08cafec chore: update versions (#154)
6aee6a3 perf: improve isSubdirectoryOrEqual performance (#152)
5f707b6 chore: update versions (#147)
26cbffe chore: update pnpm to v10
a9f35c9 fix: ensure .[cm]?[tj]sx? static assets are JS mime (#149)
94b04d5 chore: update packages (#148)
281f5b2 chore: add changeset for #146
Additional commits viewable in compare view

Updates @babel/runtime from 7.26.0 to 7.28.6

Release notes

Sourced from @babel/runtime's releases.

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-plugin-transform-react-jsx

#17555 perf: Use lighter traversal for jsx __source,__self (@liuxingbaoyu)

Committers: 7

Babel Bot (@babel-bot)

Eliot Pontarelli (@kolvian)

Huáng Jùnliàng (@JLHwung)

Kadhirash Sivakumar (@kadhirash)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

coderaiser (@coderaiser)

v7.28.5 (2025-10-23)

Thank you @CO0Ki3, @Olexandr88, and @youthfulhps for your first PRs!

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

... (truncated)

Commits

d7f4008 v7.28.6
35055e3 v7.28.4
ef155f5 v7.28.3
cac0ff4 v7.28.2
f68ac51 chore: Avoid CITGM errors (#17382)
baa4cb8 v7.27.6
7d06930 v7.27.4
5b9468d Reduce regenerator size more (#17287)
cb78b5b [babel 8] Do not replace global regeneratorRuntime references in regenerato...
a0690e3 Split regeneratorRuntime into multiple helpers (#17238)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/runtime since your current version.

Updates ajv from 6.12.6 to 6.14.0

Commits

e3af0a7 6.14.0
b552ed6 add regExp option to address $data exploit via a regular expression (CVE-2025...
72f2286 docs: update v7 info
231e52b Merge pull request #1320 from philsturgeon/patch-1
d3475fc Add spectral, an AJV util from a sponsor
413afe0 docs: v7.0.0-beta.3
11e997b update readme for v7
See full diff in compare view

Updates diff from 4.0.2 to 4.0.4

Changelog

Sourced from diff's changelog.

v4.0.4 - January 2026

Only change from 4.0.2 is a backport of the fix to GHSA-73rr-hh4g-fpgx.

v4.0.3 (deprecated)

Accidental release - do not use.

Commits

f06f3e4 v4.0.4
0179a48 v4.0.3
4568cae Backport kpdecker/jsdiff#649
4de0ffa Backport kpdecker/jsdiff#647
See full diff in compare view

Maintainer changes

This version was pushed to npm by explodingcabbage, a new releaser for diff since your current version.

Updates estree-util-value-to-estree from 3.2.1 to 3.5.0

Release notes

Sourced from estree-util-value-to-estree's releases.

v3.5.0

af5a2bd Add support for serializing custom values in remcohaszing/estree-util-value-to-estree#6

ec6da00 Allow passing undefined as any option

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.4.1...v3.5.0

v3.4.1

87309dc Use OIDC for publishing

8b3ea8d Update Temporal support

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.4.0...v3.4.1

v3.4.0

23b636f Declare there are no side effects in package.json

471b4fe Add support for Float16Array

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.3.3...v3.4.0

v3.3.3

652e019 Use singular Object.defineProperty if possible

d0c394f Fix __proto__ property emit

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.3.2...v3.3.3

v3.3.2

6ecf349 Move @js-temporal/polyfill to devDependencies

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.3.1...v3.3.2

v3.3.1

1c1eb66 Don’t crash if Temporal is undefined

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.3.0...v3.3.1

v3.3.0

014536b Add support for Temporal types

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.2.1...v3.3.0

Commits

c845e04 3.5.0
2f6a020 Stricten tsconfig.json
ec6da00 Allow passing undefined as any option
af5a2bd Add support for serializing custom values (#6)
ecac810 Fix a typo
aa90de2 3.4.1
87309dc Use OIDC for publishing
db5911c Use Node.js 24 in CI
4e2914e Update the readme
8b3ea8d Update Temporal support
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for estree-util-value-to-estree since your current version.

Updates form-data from 4.0.1 to 4.0.5

Release notes

Sourced from form-data's releases.

v4.0.4

v4.0.4 - 2025-07-16

Commits

[meta] add auto-changelog 811f682

[Tests] handle predict-v8-randomness failures in node < 17 and node > 23 1d11a76

[Fix] Switch to using crypto random for boundary values 3d17230

[Tests] fix linting errors 5e34080

[meta] actually ensure the readme backup isn’t published 316c82b

[Dev Deps] update @ljharb/eslint-config 58c25d7

[meta] fix readme capitalization 2300ca1

v4.0.3

v4.0.3 - 2025-06-05

Fixed

[Fix] append: avoid a crash on nullish values [#577](https://github.com/form-data/form-data/issues/577)

Commits

[eslint] use a shared config 426ba9a

[eslint] fix some spacing issues 2094191

[Refactor] use hasown 81ab41b

[Fix] validate boundary type in setBoundary() method 8d8e469

[Tests] add tests to check the behavior of getBoundary with non-strings 837b8a1

[Dev Deps] remove unused deps 870e4e6

[meta] remove local commit hooks e6e83cc

[Dev Deps] update eslint 4066fd6

[meta] fix scripts to use prepublishOnly c4bbb13

v4.0.2

v4.0.2 - 2025-02-14

Merged

[Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

[Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

fix (npmignore): ignore temporary build files [#532](https://github.com/form-data/form-data/issues/532)

fix (npmignore): ignore temporary build files [#532](https://github.com/form-data/form-data/issues/532)

Fixed

[Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

[Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

[Fix] set Symbol.toStringTag when available [#396](https://github.com/form-data/form-data/issues/396)

Commits

... (truncated)

Changelog

Sourced from form-data's changelog.

v4.0.5 - 2025-11-17

Commits

[Tests] Switch to newer v8 prediction library; enable node 24 testing 16e0076

[Dev Deps] update @ljharb/eslint-config, eslint 5822467

[Fix] set Symbol.toStringTag in the proper place 76d0dee

v4.0.4 - 2025-07-16

Commits

[meta] add auto-changelog 811f682

[Tests] handle predict-v8-randomness failures in node < 17 and node > 23 1d11a76

[Fix] Switch to using crypto random for boundary values 3d17230

[Tests] fix linting errors 5e34080

[meta] actually ensure the readme backup isn’t published 316c82b

[Dev Deps] update @ljharb/eslint-config 58c25d7

[meta] fix readme capitalization 2300ca1

v4.0.3 - 2025-06-05

Fixed

[Fix] append: avoid a crash on nullish values [#577](https://github.com/form-data/form-data/issues/577)

Commits

[eslint] use a shared config 426ba9a

[eslint] fix some spacing issues 2094191

[Refactor] use hasown 81ab41b

[Fix] validate boundary type in setBoundary() method 8d8e469

[Tests] add tests to check the behavior of getBoundary with non-strings 837b8a1

[Dev Deps] remove unused deps 870e4e6

[meta] remove local commit hooks e6e83cc

[Dev Deps] update eslint 4066fd6

[meta] fix scripts to use prepublishOnly c4bbb13

v4.0.2 - 2025-02-14

Merged

[Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

[Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

fix (npmignore): ignore temporary build files [#532](https://github.com/form-data/form-data/issues/532)

fix (npmignore): ignore temporary build files [#532](https://github.com/form-data/form-data/issues/532)

Fixed

[Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

... (truncated)

Commits

68ff7dd v4.0.5
5822467 [Dev Deps] update @ljharb/eslint-config, eslint
76d0dee [Fix] set Symbol.toStringTag in the proper place
16e0076 [Tests] Switch to newer v8 prediction library; enable node 24 testing
41996f5 v4.0.4
316c82b [meta] actually ensure the readme backup isn’t published
2300ca1 [meta] fix readme capitalization
811f682 [meta] add auto-changelog
5e34080 [Tests] fix linting errors
1d11a76 [Tests] handle predict-v8-randomness failures in node < 17 and node > 23
Additional commits viewable in compare view

Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.

Updates http-proxy-middleware from 2.0.7 to 2.0.9

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.9

What's Changed

fix(fixRequestBody): check readableLength by @chimurai in chimurai/http-proxy-middleware#1097

chore(package): v2.0.9 by @chimurai in chimurai/http-proxy-middleware#1099

Full Changelog: chimurai/http-proxy-middleware@v2.0.8...v2.0.9

v2.0.8

What's Changed

fix(fixRequestBody): prevent multiple .write() calls by @chimurai in chimurai/http-proxy-middleware#1090

fix(fixRequestBody): ha...
Description has been truncated

Bumps the npm_and_yarn group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [electron](https://github.com/electron/electron) | `34.0.2` | `35.7.5` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `8.5.8` | `8.6.17` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.1.0` | `6.4.1` | | [vite-plugin-static-copy](https://github.com/sapphi-red/vite-plugin-static-copy) | `2.2.0` | `2.3.2` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.26.0` | `7.28.6` | | [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `6.14.0` | | [diff](https://github.com/kpdecker/jsdiff) | `4.0.2` | `4.0.4` | | [estree-util-value-to-estree](https://github.com/remcohaszing/estree-util-value-to-estree) | `3.2.1` | `3.5.0` | | [form-data](https://github.com/form-data/form-data) | `4.0.1` | `4.0.5` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.7` | `2.0.9` | | [image-size](https://github.com/image-size/image-size) | `1.1.1` | `1.2.1` | | [immutable](https://github.com/immutable-js/immutable-js) | `5.0.3` | `5.1.5` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [mdast-util-to-hast](https://github.com/syntax-tree/mdast-util-to-hast) | `13.2.0` | `13.2.1` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.3` | | [prismjs](https://github.com/PrismJS/prism) | `1.29.0` | `1.30.0` | | [rollup](https://github.com/rollup/rollup) | `4.27.4` | `4.59.0` | | [svgo](https://github.com/svg/svgo) | `3.3.2` | `3.3.3` | | [tar-fs](https://github.com/mafintosh/tar-fs) | `2.1.1` | `2.1.4` | | [tmp](https://github.com/raszi/node-tmp) | `0.2.3` | `0.2.5` | | [webpack](https://github.com/webpack/webpack) | `5.96.1` | `5.105.4` | Updates `electron` from 34.0.2 to 35.7.5 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v34.0.2...v35.7.5) Updates `storybook` from 8.5.8 to 8.6.17 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.17/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.6.17/code/core) Updates `vite` from 6.1.0 to 6.4.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@6.4.1/packages/vite) Updates `vite-plugin-static-copy` from 2.2.0 to 2.3.2 - [Release notes](https://github.com/sapphi-red/vite-plugin-static-copy/releases) - [Changelog](https://github.com/sapphi-red/vite-plugin-static-copy/blob/vite-plugin-static-copy@2.3.2/CHANGELOG.md) - [Commits](https://github.com/sapphi-red/vite-plugin-static-copy/compare/vite-plugin-static-copy@2.2.0...vite-plugin-static-copy@2.3.2) Updates `@babel/runtime` from 7.26.0 to 7.28.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.6/packages/babel-runtime) Updates `ajv` from 6.12.6 to 6.14.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v6.14.0) Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v4.0.2...v4.0.4) Updates `estree-util-value-to-estree` from 3.2.1 to 3.5.0 - [Release notes](https://github.com/remcohaszing/estree-util-value-to-estree/releases) - [Commits](remcohaszing/estree-util-value-to-estree@v3.2.1...v3.5.0) Updates `form-data` from 4.0.1 to 4.0.5 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.1...v4.0.5) Updates `http-proxy-middleware` from 2.0.7 to 2.0.9 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.7...v2.0.9) Updates `image-size` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/image-size/image-size/releases) - [Commits](image-size/image-size@v1.1.1...v1.2.1) Updates `immutable` from 5.0.3 to 5.1.5 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v5.0.3...v5.1.5) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `mdast-util-to-hast` from 13.2.0 to 13.2.1 - [Release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases) - [Commits](syntax-tree/mdast-util-to-hast@13.2.0...13.2.1) Updates `node-forge` from 1.3.1 to 1.3.3 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.3) Updates `prismjs` from 1.29.0 to 1.30.0 - [Release notes](https://github.com/PrismJS/prism/releases) - [Changelog](https://github.com/PrismJS/prism/blob/v2/CHANGELOG.md) - [Commits](PrismJS/prism@v1.29.0...v1.30.0) Updates `rollup` from 4.27.4 to 4.59.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.27.4...v4.59.0) Updates `svgo` from 3.3.2 to 3.3.3 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v3.3.2...v3.3.3) Updates `tar-fs` from 2.1.1 to 2.1.4 - [Commits](mafintosh/tar-fs@v2.1.1...v2.1.4) Updates `tmp` from 0.2.3 to 0.2.5 - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.3...v0.2.5) Updates `webpack` from 5.96.1 to 5.105.4 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.96.1...v5.105.4) --- updated-dependencies: - dependency-name: electron dependency-version: 35.7.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: storybook dependency-version: 8.6.17 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 6.4.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite-plugin-static-copy dependency-version: 2.3.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-version: 7.28.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 6.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: estree-util-value-to-estree dependency-version: 3.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: image-size dependency-version: 1.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mdast-util-to-hast dependency-version: 13.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: prismjs dependency-version: 1.30.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.59.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: svgo dependency-version: 3.3.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar-fs dependency-version: 2.1.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmp dependency-version: 0.2.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.105.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 14, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 22 updates#1

Bump the npm_and_yarn group across 1 directory with 22 updates#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-ea3fe42f03

dependabot bot commented on behalf of github Mar 14, 2026

Labels

0 participants

Conversation

dependabot bot commented on behalf of github Mar 14, 2026

v8.6.17

8.6.17

v8.6.16

8.6.16

v8.6.15

8.6.15

8.6.17

8.6.16

8.6.14

8.6.13

8.6.12

8.6.11

8.6.10

8.6.9

8.6.8

v6.4.1

v6.4.0

v6.3.7

v6.3.6

v6.3.5

v6.3.4

v6.2.7

8.0.0 (2026-03-12)

⚠ BREAKING CHANGES

Features

vite-plugin-static-copy@2.3.2

Patch Changes

vite-plugin-static-copy@2.3.1

Patch Changes

vite-plugin-static-copy@2.3.0

Minor Changes

Patch Changes

2.3.2

Patch Changes

2.3.1

Patch Changes

2.3.0

Minor Changes

Patch Changes

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 7

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

v4.0.4 - January 2026

v4.0.3 (deprecated)

v3.5.0

v3.4.1

v3.4.0

v3.3.3

v3.3.2

v3.3.1

v3.3.0

v4.0.4

v4.0.4 - 2025-07-16

Commits

v4.0.3

v4.0.3 - 2025-06-05

Fixed

Commits

v4.0.2

v4.0.2 - 2025-02-14

Merged

Fixed

Commits

v4.0.5 - 2025-11-17

Commits

v4.0.4 - 2025-07-16

Commits

v4.0.3 - 2025-06-05

Fixed

Commits

v4.0.2 - 2025-02-14

Merged