chore(deps): Bump the npm group across 1 directory with 26 updates by dependabot[bot] · Pull Request #58 · anchildress1/commit-chronicles

dependabot · 2026-10-22T04:16:18Z

Bumps the npm group with 26 updates in the / directory:

Package	From	To
@google-cloud/storage	`8.1.0`	`8.4.0`
@google-cloud/tasks	`7.1.0`	`7.3.0`
@hono/node-server	`2.1.1`	`2.1.5`
google-auth-library	`11.0.2`	`11.3.0`
hono	`4.13.7`	`4.13.13`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
snowflake-sdk	`3.3.0`	`3.4.0`
@commitlint/cli	`21.2.2`	`21.2.3`
@commitlint/config-conventional	`21.2.2`	`21.2.3`
@playwright/test	`1.63.0`	`1.64.1`
@testing-library/user-event	`14.6.7`	`14.6.8`
@types/node	`26.5.1`	`26.6.5`
@vitejs/plugin-react	`6.1.1`	`6.1.2`
@vitest/coverage-v8	`5.0.0`	`5.0.4`
commitlint-plugin-rai	`1.0.2`	`1.0.3`
concurrently	`10.0.5`	`10.0.6`
eslint	`10.10.0`	`10.12.0`
jsdom	`30.0.1`	`30.1.2`
lefthook	`2.1.12`	`2.2.2`
prettier	`3.9.6`	`3.9.10`
tsx	`4.23.13`	`4.23.15`
typescript	`6.0.3`	`7.0.2`
typescript-eslint	`8.70.0`	`8.71.2`
vite	`8.2.2`	`8.3.4`
vitest	`5.0.0`	`5.0.4`

Updates @google-cloud/storage from 8.1.0 to 8.4.0

Release notes

Sourced from @google-cloud/storage's releases.

storage: v8.4.0

8.4.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

dialogflow: v8.4.0

8.4.0 (2026-10-21)

Features

Update API sources and regenerate (#9683) (b5aabd8)

gaxios: v8.3.1

8.3.1 (2026-10-14)

Bug Fixes

gaxios: Exclude compiled tests and .tsbuildinfo from published tarball (#9612) (7394a38)

gaxios: Normalize TimeoutError in _request and propagate retry timeout (#9582) (1b10df0)

gaxios: Remove --abort-signal-timeout-shim (#9555) (29d8a5e)

gaxios: Remove --bun-plugin-shim and support Bun fetch natively (#9561) (93b426d)

cloud-profiler: v8.2.1

8.2.1 (2026-10-09)

Bug Fixes

Use npm in prepare/compile lifecycle scripts (#9587) (64c3a2b)

common: v8.2.1

8.2.1 (2026-10-19)

Bug Fixes

tools: Export test-utils types and exempt cloud-profiler on Bun (#9611) (ec74599)

recommender: v8.2.0

8.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

... (truncated)

Changelog

Sourced from @google-cloud/storage's changelog.

8.4.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

8.3.0 (2026-10-07)

Features

tools: Add individual CLI flags for Bun monkey patches (#9533) (a5eec89)

8.2.1 (2026-10-06)

Bug Fixes

storage: Re-enable docs check and update linkinator (#9257) (6f9d967)

storage: Upgrade google-auth-library to v11, gaxios to v7 and align auth client types (#9289) (c6c946d)

8.2.0 (2026-09-17)

Features

PNPM workspace (#8973) (1ea27c9)

Commits

27d6be6 chore(main): release storage 8.4.0 (#9576)
5250db6 chore(main): release storage 8.3.0 (#9552)
a5eec89 feat(tools): add individual CLI flags for Bun monkey patches (#9533)
c0239c8 chore(main): release storage 8.2.1 (#9527)
c6c946d fix(storage): upgrade google-auth-library to v11, gaxios to v7 and align auth...
6f9d967 fix(storage): re-enable docs check and update linkinator (#9257)
f11413c test(storage): adopt run-test runner and fix Bun shim caching and mocking for...
fd32884 chore(main): release storage 8.2.0 (#9297)
b880f66 refactor(storage): dynamically import mime and p-limit with module caching (#...
3ff5ae9 chore: update .nycrc, Contributing.md, and .gitignore across packages (#9144)
Additional commits viewable in compare view

Updates @google-cloud/tasks from 7.1.0 to 7.3.0

Release notes

Sourced from @google-cloud/tasks's releases.

tasks: v7.3.0

7.3.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

dataproc: v7.3.0

7.3.0 (2026-10-19)

Features

Update API sources and regenerate (#9620) (c812bc3)

resource-manager: v7.2.0

7.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

secret-manager: v7.2.0

7.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

service-directory: v7.2.0

7.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

text-to-speech: v7.2.0

7.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

video-intelligence: v7.2.0

7.2.0 (2026-10-08)

... (truncated)

Changelog

Sourced from @google-cloud/tasks's changelog.

7.3.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

7.2.1 (2026-09-28)

Bug Fixes

Update package.json and .gitignore across packages (#9378) (9c54cec)

7.2.0 (2026-09-23)

Features

Update API sources and regenerate (#9427) (5cd945d)

7.1.1 (2026-09-16)

Bug Fixes

Remove unintentionally added file (#9356) (99f6657)

Commits

703154b chore: release main (#9584)
6375767 chore(packages): migrate generated packages to runtime-agnostic test runner (...
27c2f65 chore: release main (#9442)
9c54cec fix: update package.json and .gitignore across packages (#9378)
ebd25a5 chore: release main (#9428)
5cd945d feat: update API sources and regenerate (#9427)
cd8400f chore: upgrade to latest version of gapic-generator-typescript (#9374)
eea8578 chore: revert accidental proto bundle changes from #9365 (#9382)
7085e03 perf(spanner): remove rest-parameter allocations in wrappedRequestFn (#9365)
63d5fe9 chore: release main (#9348)
Additional commits viewable in compare view

Updates @hono/node-server from 2.1.1 to 2.1.5

Release notes

Sourced from @hono/node-server's releases.

v2.1.5

What's Changed

fix(listener): abort the request signal when an HTTP/2 client resets the stream by @affanmomin in honojs/node-server#404

fix(serve-static): only serve GET and HEAD requests by @usualoma in honojs/node-server#405

New Contributors

@affanmomin made their first contribution in honojs/node-server#404

Full Changelog: honojs/node-server@v2.1.4...v2.1.5

v2.1.4

What's Changed

chore: allow hono v5 as a peer dependency by @yusukebe in honojs/node-server#406

Full Changelog: honojs/node-server@v2.1.3...v2.1.4

v2.1.3

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

Affects: @hono/node-server/serve-static. Fixes serveStatic decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-rmxm-3fg6-px4f

serveStatic now rejects request paths that still contain % after decoding. To serve files whose names contain a literal %, set allowPercentInPath: true.

The same fix ships in hono v4.13.11.

v2.1.2

What's Changed

ci: add autofix.ci by @yusukebe in honojs/node-server#392

fix: type error in early hints and add typecheck to CI by @BlankParticle in honojs/node-server#390

chore: add better benchmarks by @BlankParticle in honojs/node-server#391

docs(readme): update the benchmark by @yusukebe in honojs/node-server#394

test(request): accept asynchronous body read errors by @usualoma in honojs/node-server#403

fix(listener): avoid mutating response headers when setting Content-Length by @usualoma in honojs/node-server#402

Full Changelog: honojs/node-server@v2.1.1...v2.1.2

Commits

4b47a0d 2.1.5
e77824a fix(serve-static): only serve GET and HEAD requests (#405)
1b6e6bf fix(listener): abort the request signal when an HTTP/2 client resets the stre...
d57ed9b 2.1.4
92b014c chore: allow hono v5 as a peer dependency (#406)
720ac78 2.1.3
9821792 Merge commit from fork
35bca95 2.1.2
90a2600 fix(listener): avoid mutating response headers when setting Content-Length (#...
fe7467c test(request): accept asynchronous body read errors (#403)
Additional commits viewable in compare view

Updates google-auth-library from 11.0.2 to 11.3.0

Changelog

Sourced from google-auth-library's changelog.

11.3.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

11.2.0 (2026-10-07)

Features

tools: Add individual CLI flags for Bun monkey patches (#9533) (a5eec89)

11.1.0 (2026-09-15)

Features

PNPM workspace (#8973) (1ea27c9)

Commits

703154b chore: release main (#9584)
d07cb88 chore: release main (#9547)
a5eec89 feat(tools): add individual CLI flags for Bun monkey patches (#9533)
4fd60d3 ci: run all unit tests including handwritten libraries in bun runtime with --...
6375767 chore(packages): migrate generated packages to runtime-agnostic test runner (...
fff47fb feat(tools): add runtime-agnostic test runner and Bun mocha hooks
3cc13fe chore: release main (#9295)
3ff5ae9 chore: update .nycrc, Contributing.md, and .gitignore across packages (#9144)
1ea27c9 feat: PNPM workspace (#8973)
de587e3 chore: linter eslint fix (#9088)
See full diff in compare view

Updates hono from 4.13.7 to 4.13.13

Release notes

Sourced from hono's releases.

v4.13.13

Mount Middleware

app.mount() is now available as the Mount Middleware, hono/mount. It is just a handler, so you register it with app.all():
import { Router as IttyRouter } from 'itty-router'
import { Hono } from 'hono'
import { mount } from 'hono/mount'
const ittyRouter = IttyRouter()
ittyRouter.get('/hello', () => new Response('Hello from itty-router'))
const app = new Hono()
app.all('/itty-router/*', mount(ittyRouter.handle))
app.mount() still works in v4 but is deprecated and will be removed in v5. Migrating is a one-line change:
- app.mount('/itty-router', ittyRouter.handle)
+ app.all('/itty-router/*', mount(ittyRouter.handle))
What's Changed

test(client): simulate network error for undefined route in parseResponse test in honojs/hono#5439

docs(request): fix jsdoc comments for some getters in honojs/hono#5445

fix(jsx): allow JSXNode function component results in honojs/hono#5476

feat(mount): introduce Mount Middleware and deprecate app.mount in honojs/hono#5221

Full Changelog: honojs/hono@v4.13.12...v4.13.13

v4.13.12

What's Changed

fix(build): keep internal types private in bundled d.ts and avoid a self-referencing JSX.IntrinsicElements in honojs/hono#5485

test(build): type-check the bundled declarations from a consumer project in honojs/hono#5486

fix(etag): correctly match mixed-case header name in retainedHeader option in honojs/hono#5475

fix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap in honojs/hono#5487

fix(combine): return a Response from a short-circuiting middleware in some() in honojs/hono#5391

chore(deps): upgrade vite-plus to 1.0.0 in honojs/hono#5464

Full Changelog: honojs/hono@v4.13.11...v4.13.12

v4.13.11

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

Affects: hono/serve-static and the adapters built on it (hono/bun, hono/deno, hono/cloudflare-workers, @hono/bun, @hono/deno, @hono/cloudflare-workers). Fixes serveStatic decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-5r4p-p66f-jhc7

... (truncated)

Commits

08a023c 4.13.13
ae595de feat(mount): introduce Mount Middleware and deprecate app.mount (#5221)
f23b146 fix(jsx): allow JSXNode function component results (#5476)
6d73a74 docs(request): fix jsdoc comments for some getters (#5445)
deff529 test(client): simulate network error for undefined route in parseResponse tes...
6abd35b 4.13.12
95eb860 chore(deps): upgrade vite-plus to 1.0.0 (#5464)
afb2068 fix(combine): return a Response from a short-circuiting middleware in some() ...
e5bb206 fix(jsx): add px to numeric gridGap, gridRowGap and gridColumnGap (#5487)
c3053cc fix(etag): correctly match mixed-case header name in retainedHeader option (#...
Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates snowflake-sdk from 3.3.0 to 3.4.0

Release notes

Sourced from snowflake-sdk's releases.

Release

Please check our Node.js Driver page for release notes.

Changelog

Sourced from snowflake-sdk's changelog.

3.4.0

New features:

Added the workloadIdentityHostsnowflakedb/snowflake-connector-nodejs#1479

Changes:

Turned OCSP off by default and marked it as @deprecated. OCSP support will be removed in the next major release; use CRL validation (certRevocationCheckModesnowflakedb/snowflake-connector-nodejs#1482snowflakedb/snowflake-connector-nodejs#1485, snowflakedb/snowflake-connector-nodejs#1489)

To keep using OCSP, call snowflake.configure({ disableOCSPChecks: false }) or snowflake.configure({ ocspFailOpen: true|false }). disableOCSPChecks: true always turns OCSP off, even when ocspFailOpen is set. CRL still takes precedence when certRevocationCheckMode is enabled

Deprecated APIs: OCSP options (disableOCSPChecks, ocspFailOpen, useConnectionConfigProxyForOCSP), connection.setupOcspPrivateLink(), ocspModes, and OCSP error codes

Bugfixes:

Fixed failed PUT operations reporting Unknown Error in uploading a filesnowflakedb/snowflake-connector-nodejs#1478

Hardened external-browser authentication: the local callback listener now binds to 127.0.0.1, rejects requests whose Originsnowflakedb/snowflake-connector-nodejs#1493

Dependencies:

Bumped toml dependency to ^5.0.0snowflakedb/snowflake-connector-nodejs#1477

Commits

099fb93 3.4.0 release (#1492)
93765b5 SNOW-3649847: Accept external-browser callback Origin only from the Snowflake...
9f05690 [SNOW-4108955] Reqs changed: disableocsp should triumph over fail-open settin...
df3e57a SNOW-4108955 Code Review Polishing (#1485)
4499225 SNOW-4108955-ocsp by default (#1482)
b3d150d SNOW-4017205 - Polish sts endpoint logic (#1484)
6384740 SNOW-4017203 Add tests for min TLS version, fix propagating errors from file ...
c528630 SNOW-4017205 Make STS hostname configurable (#1479)
19bfce7 SNOW-4065118 Update toml dependency to 5.x (#1477)
See full diff in compare view

Updates @commitlint/cli from 21.2.2 to 21.2.3

Release notes

Sourced from @commitlint/cli's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

fix(types): correct breaking-change-exclamation-mark rule config type by @lazerg in conventional-changelog/commitlint#4954

fix(config-nx-scopes): read scopes from the nx project graph by @dylanpulver in conventional-changelog/commitlint#4957

fix(lint): trim trailing whitespace off the message handed to ignore matchers by @dylanpulver in conventional-changelog/commitlint#4960

fix(load): detect dynamic await support on node majors above 20 by @dylanpulver in conventional-changelog/commitlint#4961

fix(rules): report the case that matched in case rule failure messages by @dylanpulver in conventional-changelog/commitlint#4962

fix(load): run the parser factory of scoped conventional-changelog presets by @maximilliangrand in conventional-changelog/commitlint#4968

Refactor

refactor(load): drop the node version check gating cosmiconfig loaders by @dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

build: install pnpm via npm instead of corepack by @escapedcat in conventional-changelog/commitlint#4948

build: retire the docker compose dev environment by @escapedcat in conventional-changelog/commitlint#4949

build: verify pnpm tarball against the packageManager sha512 pin by @escapedcat in conventional-changelog/commitlint#4952

ci: stabilize Windows CI by raising Vitest default timeout by @escapedcat with @Copilot in conventional-changelog/commitlint#4959

docs: drop the Node 24 config-loading workaround note by @escapedcat in conventional-changelog/commitlint#4976

chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @escapedcat in conventional-changelog/commitlint#4977

chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @escapedcat in conventional-changelog/commitlint#4984

New Contributors

@lazerg made their first contribution in conventional-changelog/commitlint#4954

@escapedcat with @Copilot made their first contribution in conventional-changelog/commitlint#4959

@dylanpulver made their first contribution in conventional-changelog/commitlint#4957

@maximilliangrand made their first contribution in conventional-changelog/commitlint#4968

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

Changelog

Sourced from @commitlint/cli's changelog.

21.2.3 (2026-09-19)

Bug Fixes

lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)

Commits

95d4056 v21.2.3
a6f279b fix(lint): trim trailing whitespace off the message handed to ignore matchers...
See full diff in compare view

Updates @commitlint/config-conventional from 21.2.2 to 21.2.3

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

fix(types): correct breaking-change-exclamation-mark rule config type by @lazerg in conventional-changelog/commitlint#4954

fix(config-nx-scopes): read scopes from the nx project graph by @dylanpulver in conventional-changelog/commitlint#4957

fix(lint): trim trailing whitespace off the message handed to ignore matchers by @dylanpulver in conventional-changelog/commitlint#4960

fix(load): detect dynamic await support on node majors above 20 by @dylanpulver in conventional-changelog/commitlint#4961

fix(rules): report the case that matched in case rule failure messages by @dylanpulver in conventional-changelog/commitlint#4962

fix(load): run the parser factory of scoped conventional-changelog presets by @maximilliangrand in conventional-changelog/commitlint#4968

Refactor

refactor(load): drop the node version check gating cosmiconfig loaders by @dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

build: install pnpm via npm instead of corepack by @escapedcat in conventional-changelog/commitlint#4948

build: retire the docker compose dev environment by @escapedcat in conventional-changelog/commitlint#4949

build: verify pnpm tarball against the packageManager sha512 pin by @escapedcat in conventional-changelog/commitlint#4952

ci: stabilize Windows CI by raising Vitest default timeout by @escapedcat with @Copilot in conventional-changelog/commitlint#4959

docs: drop the Node 24 config-loading workaround note by @escapedcat in conventional-changelog/commitlint#4976

chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @escapedcat in conventional-changelog/commitlint#4977

chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @escapedcat in conventional-changelog/commitlint#4984

New Contributors

@lazerg made their first contribution in conventional-changelog/commitlint#4954

@escapedcat with @Copilot made their first contribution in conventional-changelog/commitlint#4959

@dylanpulver made their first contribution in conventional-changelog/commitlint#4957

@maximilliangrand made their first contribution in conventional-changelog/commitlint#4968

Full Changelog: conventional-changelog/commitlint@v21.2.2...v21.2.3

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.2.3 (2026-09-19)

Bug Fixes

rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)

Commits

95d4056 v21.2.3
9f5f7bc fix(rules): report the case that matched in case rule failure messages (#4962)
See full diff in compare view

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @playwright/test's releases.

v1.64.1

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0

#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:
const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"
Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:
playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'
🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:
// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
866cbb8 chore: mark v1.64.1 (#43354)
1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
Additional commits viewable in compare view

Updates @testing-library/user-event from 14.6.7 to 14.6.8

Release notes

Sourced from @testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

treat programmatic null input values as empty string (#1329) (1951eb7)

Commits

1951eb7 fix: treat programmatic null input values as empty string (#1329)
See full diff in compare view

Updates @types/node from 26.5.1 to 26.6.5

Commits

See full diff in compare view

Description has been truncated

Bumps the npm group with 26 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `8.1.0` | `8.4.0` | | [@google-cloud/tasks](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-tasks) | `7.1.0` | `7.3.0` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.1.1` | `2.1.5` | | [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `11.0.2` | `11.3.0` | | [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.13` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [snowflake-sdk](https://github.com/snowflakedb/snowflake-connector-nodejs) | `3.3.0` | `3.4.0` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.2` | `21.2.3` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.2` | `21.2.3` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.1` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.7` | `14.6.8` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.5` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.0` | `5.0.4` | | [commitlint-plugin-rai](https://github.com/anchildress1/rai-lint/tree/HEAD/packages/node-commitlint) | `1.0.2` | `1.0.3` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.5` | `10.0.6` | | [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.12.0` | | [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.2` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.1.12` | `2.2.2` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.71.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.4` | Updates `@google-cloud/storage` from 8.1.0 to 8.4.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/storage/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/storage-v8.4.0/handwritten/storage) Updates `@google-cloud/tasks` from 7.1.0 to 7.3.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-tasks/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/data-v7.3.0/packages/google-cloud-tasks) Updates `@hono/node-server` from 2.1.1 to 2.1.5 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.1.1...v2.1.5) Updates `google-auth-library` from 11.0.2 to 11.3.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.3.0/core/packages/google-auth-library-nodejs) Updates `hono` from 4.13.7 to 4.13.13 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.7...v4.13.13) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `snowflake-sdk` from 3.3.0 to 3.4.0 - [Release notes](https://github.com/snowflakedb/snowflake-connector-nodejs/releases) - [Changelog](https://github.com/snowflakedb/snowflake-connector-nodejs/blob/master/CHANGELOG.md) - [Commits](snowflakedb/snowflake-connector-nodejs@v3.3.0...v3.4.0) Updates `@commitlint/cli` from 21.2.2 to 21.2.3 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.3/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.2 to 21.2.3 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.3/@commitlint/config-conventional) Updates `@playwright/test` from 1.63.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.63.0...v1.64.1) Updates `@testing-library/user-event` from 14.6.7 to 14.6.8 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.7...v14.6.8) Updates `@types/node` from 26.5.1 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react) Updates `@vitest/coverage-v8` from 5.0.0 to 5.0.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8) Updates `commitlint-plugin-rai` from 1.0.2 to 1.0.3 - [Release notes](https://github.com/anchildress1/rai-lint/releases) - [Changelog](https://github.com/anchildress1/rai-lint/blob/main/packages/node-commitlint/CHANGELOG.md) - [Commits](https://github.com/anchildress1/rai-lint/commits/commitlint-plugin-rai-v1.0.3/packages/node-commitlint) Updates `concurrently` from 10.0.5 to 10.0.6 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v10.0.5...v10.0.6) Updates `eslint` from 10.10.0 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.10.0...v10.12.0) Updates `jsdom` from 30.0.1 to 30.1.2 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.0.1...v30.1.2) Updates `lefthook` from 2.1.12 to 2.2.2 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.1.12...v2.2.2) Updates `prettier` from 3.9.6 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.10) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `typescript-eslint` from 8.70.0 to 8.71.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint) Updates `vite` from 8.2.2 to 8.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite) Updates `vitest` from 5.0.0 to 5.0.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest) --- updated-dependencies: - dependency-name: "@google-cloud/storage" dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@google-cloud/tasks" dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@hono/node-server" dependency-version: 2.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: google-auth-library dependency-version: 11.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: hono dependency-version: 4.13.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: snowflake-sdk dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@commitlint/cli" dependency-version: 21.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@playwright/test" dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@testing-library/user-event" dependency-version: 14.6.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/coverage-v8" dependency-version: 5.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: commitlint-plugin-rai dependency-version: 1.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: concurrently dependency-version: 10.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: jsdom dependency-version: 30.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: lefthook dependency-version: 2.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: typescript-eslint dependency-version: 8.71.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: vitest dependency-version: 5.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>

anchildress1 · 2026-10-22T13:32:10Z

Closing by owner instruction: this project is confirmed idle and dependency upgrades are intentionally paused. This update will not be merged; dependencies remain unchanged.

dependabot · 2026-10-22T13:32:14Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot requested a review from anchildress1 as a code owner October 22, 2026 04:16

dependabot Bot added dependencies javascript labels Oct 22, 2026

anchildress1 closed this Oct 22, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-89e445ab95 branch October 22, 2026 13:32

Navigation Menu

Repository navigation

chore(deps): Bump the npm group across 1 directory with 26 updates - #58

chore(deps): Bump the npm group across 1 directory with 26 updates#58
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-89e445ab95

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

anchildress1 commented Oct 22, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026

storage: v8.4.0

8.4.0 (2026-10-08)

Features

dialogflow: v8.4.0

8.4.0 (2026-10-21)

Features

gaxios: v8.3.1

8.3.1 (2026-10-14)

Bug Fixes

cloud-profiler: v8.2.1

8.2.1 (2026-10-09)

Bug Fixes

common: v8.2.1

8.2.1 (2026-10-19)

Bug Fixes

recommender: v8.2.0

8.2.0 (2026-10-08)

Features

8.4.0 (2026-10-08)

Features

8.3.0 (2026-10-07)

Features

8.2.1 (2026-10-06)

Bug Fixes

8.2.0 (2026-09-17)

Features

tasks: v7.3.0

7.3.0 (2026-10-08)

Features

dataproc: v7.3.0

7.3.0 (2026-10-19)

Features

resource-manager: v7.2.0

7.2.0 (2026-10-08)

Features

secret-manager: v7.2.0

7.2.0 (2026-10-08)

Features

service-directory: v7.2.0

7.2.0 (2026-10-08)

Features

text-to-speech: v7.2.0

7.2.0 (2026-10-08)

Features

video-intelligence: v7.2.0

7.2.0 (2026-10-08)

7.3.0 (2026-10-08)

Features

7.2.1 (2026-09-28)

Bug Fixes

7.2.0 (2026-09-23)

Features

7.1.1 (2026-09-16)

Bug Fixes

v2.1.5

What's Changed

New Contributors

v2.1.4

What's Changed

v2.1.3

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

v2.1.2

What's Changed

11.3.0 (2026-10-08)

Features

11.2.0 (2026-10-07)

Features

11.1.0 (2026-09-15)

Features

v4.13.13

Mount Middleware

What's Changed

v4.13.12

What's Changed

v4.13.11

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

`serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths

`serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths