Skip to content

chore(deps): bump the all group across 1 directory with 22 updates - #96

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-4ae26b80a5
Closed

chore(deps): bump the all group across 1 directory with 22 updates#96
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-4ae26b80a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the all group with 22 updates in the / directory:

Package From To
@bbc/http-transport 4.5.0 4.6.2
commander 12.1.0 15.0.0
debug 4.3.6 4.4.3
@types/debug 4.1.12 4.1.13
joi 17.13.3 18.2.9
lodash 4.17.21 4.18.1
@types/lodash 4.17.7 4.17.25
node-fetch 2.7.0 3.3.2
picocolors 1.0.1 1.1.1
@types/debug 4.1.12 4.1.13
@types/lodash 4.17.7 4.17.25
@types/node 24.10.1 26.6.4
chai 5.1.1 6.3.0
eslint 8.57.0 10.12.0
eslint-config-iplayer 9.2.0 11.0.20
eslint-plugin-mocha 10.5.0 12.0.2
mocha 10.7.3 12.0.3
nock 13.5.4 14.0.17
nyc 17.1.0 18.0.0
prettier 3.3.3 3.9.9
sinon 18.0.0 22.1.0
@types/sinon 17.0.3 22.0.0
tsx 4.17.0 4.23.15
typescript 5.5.4 7.0.2

Updates @bbc/http-transport from 4.5.0 to 4.6.2

Release notes

Sourced from @​bbc/http-transport's releases.

v4.6.2

  • chore: added explicit any to err type 4ab58ad

bbc/http-transport@v4.6.1...v4.6.2

v4.6.1

  • chore: fix bad typescript declaration 1a4d1ee

bbc/http-transport@v4.6.0...v4.6.1

v4.6.0

New criticalErrorDetector configuration point for customising when retry logic should occur.

IPLAYER-45726

  • Merge pull request #52 from bbc/IPLAYER-45725-circuit-breaker-mware ce1a374
  • fix: added typings for criticalErrorDetector e675152
  • feat: allow criticalErrorDetector configuration in builder 3ab35a1
  • feat: circuit broken errors no longer retried 2d91c23

bbc/http-transport@v4.5.1...v4.6.0

v4.5.1

  • fix: client no longer delays when it wont retry (#51) 5958210

bbc/http-transport@v4.5.0...v4.5.1

Commits
  • 806b9eb 4.6.2
  • 4ab58ad chore: added explicit any to err type
  • 841aaea 4.6.1
  • 1a4d1ee chore: fix bad typescript declaration
  • 5b1671a 4.6.0
  • ce1a374 Merge pull request #52 from bbc/IPLAYER-45725-circuit-breaker-mware
  • e675152 fix: added typings for criticalErrorDetector
  • 3ab35a1 feat: allow criticalErrorDetector configuration in builder
  • 2d91c23 feat: circuit broken errors no longer retried
  • 34baa2a 4.5.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by chriss901, a new releaser for @​bbc/http-transport since your current version.


Updates commander from 12.1.0 to 15.0.0

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

Changed

  • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
  • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
  • dev: switch tests from Jest to node:test test runner (#2463)

Deleted

  • Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

Changed

  • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
  • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
  • dev: switch tests from Jest to node:test test runner (#2463)

Deleted

  • Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

[14.0.3] (2026-01-31)

Added

  • Release Policy document (#2462)

Changes

  • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
  • clarify typing for deprecated callback parameter to .outputHelp() (#2427)

... (truncated)

Commits

Updates debug from 4.3.6 to 4.4.3

Release notes

Sourced from debug's releases.

4.4.3

Functionally identical release to 4.4.1.

Version 4.4.2 is compromised. Please see debug-js/debug#1005.

4.4.1

What's Changed

New Contributors

Full Changelog: debug-js/debug@4.4.0...4.4.1

4.4.0

Fixes (hopefully) the inefficient regex warnings in .enable().

Minor version as this is invariably going to break certain users who misuse the .enable() API and expected it to work with regexes, which was never supported nor documented. That's on you, sorry - that functionality won't be added back.

Full Changelog: debug-js/debug@4.3.7...4.4.0

4.3.7

What's Changed

Full Changelog: debug-js/debug@4.3.6...4.3.7

Commits

Updates @types/debug from 4.1.12 to 4.1.13

Commits

Updates joi from 17.13.3 to 18.2.9

Commits
  • fc3f3bc 18.2.9
  • e7791cb Merge pull request #3152 from hapijs/chore/3151-cleanup
  • 7363128 chore: cleanup for #3151
  • 03a9543 Merge pull request #3151 from carfeii/fix/messages-flat-code-proto-pollution
  • 5b8333c Reject proto as a flat messages() code, closing a sibling of GHSA-gg4h-3h...
  • e30b50e 18.2.8
  • 1c9dede Merge pull request #3149 from hapijs/chore/optimize-schema-creation
  • cdad986 chore: optimize schema creation
  • 057dff2 18.2.7
  • a14051a Merge pull request #3148 from hapijs/chore/optimize-large-arrays
  • Additional commits viewable in compare view

Updates lodash from 4.17.21 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates @types/lodash from 4.17.7 to 4.17.25

Commits

Updates node-fetch from 2.7.0 to 3.3.2

Release notes

Sourced from node-fetch's releases.

v3.3.2

3.3.2 (2023-07-25)

Bug Fixes

v3.3.1

3.3.1 (2023-03-11)

Bug Fixes

  • release "Allow URL class object as an argument for fetch()" #1696 (#1716) (7b86e94)

v3.3.0

3.3.0 (2022-11-10)

Features

v3.2.10

3.2.10 (2022-07-31)

Bug Fixes

v3.2.9

3.2.9 (2022-07-18)

Bug Fixes

  • Headers: don't forward secure headers on protocol change (#1599) (e87b093)

v3.2.8

3.2.8 (2022-07-12)

Bug Fixes

... (truncated)

Commits

Updates picocolors from 1.0.1 to 1.1.1

Release notes

Sourced from picocolors's releases.

picocolors 1.1.1

What's new?

  • Moved TypeScript declarations to a d.ts file #82
  • Reworked color detection algorithm to properly work with empty strings in NO_COLOR and FORCE_COLOR env variables #87
  • Eliminated require() call to make the package compatible with some tools #87

picocolors 1.1.0

What's new?

  • Added bright color variants #55
Changelog

Sourced from picocolors's changelog.

v1.1.1

  • Moved TypeScript declarations to a d.ts file (#82)
  • Reworked color detection algorithm to properly work with empty strings in NO_COLOR and FORCE_COLOR env variables (#87)
  • Eliminated require() call to make the package compatible with some tools (#87)

v1.1.0

  • Added bright color variants (#55)
Commits
  • 7249f8c picocolors@1.1.1
  • 6f0a463 Add chalk v5 and yoctocolors to benchmarks (#88)
  • 5b01210 Rework color detection (#87)
  • ef5553b fix: usage of node12 in testing.yaml (#73)
  • 4c5e981 Use mitata, esbuild for benchmarking speed and size (#86)
  • 6a1eb72 fix(types): move types declaration into "real" types declaration file (.d.ts)...
  • 4e94689 picocolors@1.1.0
  • 6f60111 test: add test (shouldn't overflow when coloring already colored large text) ...
  • 1d7a86d feat: bright colors variants (#55)
  • 9dd71a0 misc
  • See full diff in compare view

Updates @types/debug from 4.1.12 to 4.1.13

Commits

Updates @types/lodash from 4.17.7 to 4.17.25

Commits

Updates @types/node from 24.10.1 to 26.6.4

Commits

Updates chai from 5.1.1 to 6.3.0

Release notes

Sourced from chai's releases.

v6.3.0

What's Changed

... (truncated)

Commits
  • d86de2a chore(deps): update dependency eslint-plugin-jsdoc to v65 (#1865)
  • 3173a3d build(deps-dev): bump ip-address from 10.4.0 to 10.7.2 (#1866)
  • a735838 chore(deps): update dependency prettier to v3.9.9 (#1864)
  • 8d42a17 fix: require callable iterators in iterable assertions (#1861)
  • 89c5d8b chore(deps): update dependencies (#1862)
  • 2873f60 fix: correct change JSDoc types & handle 0/empty string (#1860)
  • 0bd771b feat: correct some more types (#1859)
  • 812c57d fix: preserve literal template tags in assertion values (#1853)
  • 964d9a4 chore(deps): update dependencies (#1858)
  • e8f56fc chore(deps): update dependencies (#1852)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chai since your current version.


Updates eslint from 8.57.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
  • 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
  • f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
  • b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
  • 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits
  • a438ec3 10.12.0
  • 32a73f1 Build: changelog update for 10.12.0
  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)

@dependabot
chore(deps): bump the all group across 1 directory with 22 updates
992d830 
Bumps the all group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@bbc/http-transport](https://github.com/bbc/http-transport) | `4.5.0` | `4.6.2` |
| [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` |
| [debug](https://github.com/debug-js/debug) | `4.3.6` | `4.4.3` |
| [@types/debug](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/debug) | `4.1.12` | `4.1.13` |
| [joi](https://github.com/hapijs/joi) | `17.13.3` | `18.2.9` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.7` | `4.17.25` |
| [node-fetch](https://github.com/node-fetch/node-fetch) | `2.7.0` | `3.3.2` |
| [picocolors](https://github.com/alexeyraspopov/picocolors) | `1.0.1` | `1.1.1` |
| [@types/debug](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/debug) | `4.1.12` | `4.1.13` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.7` | `4.17.25` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `26.6.4` |
| [chai](https://github.com/chaijs/chai) | `5.1.1` | `6.3.0` |
| [eslint](https://github.com/eslint/eslint) | `8.57.0` | `10.12.0` |
| [eslint-config-iplayer](https://github.com/bbc/eslint-config-iplayer) | `9.2.0` | `11.0.20` |
| [eslint-plugin-mocha](https://github.com/lo1tuma/eslint-plugin-mocha) | `10.5.0` | `12.0.2` |
| [mocha](https://github.com/mochajs/mocha) | `10.7.3` | `12.0.3` |
| [nock](https://github.com/nock/nock) | `13.5.4` | `14.0.17` |
| [nyc](https://github.com/istanbuljs/nyc) | `17.1.0` | `18.0.0` |
| [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.9.9` |
| [sinon](https://github.com/sinonjs/sinon) | `18.0.0` | `22.1.0` |
| [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `17.0.3` | `22.0.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.17.0` | `4.23.15` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.5.4` | `7.0.2` |



Updates `@bbc/http-transport` from 4.5.0 to 4.6.2
- [Release notes](https://github.com/bbc/http-transport/releases)
- [Commits](bbc/http-transport@v4.5.0...v4.6.2)

Updates `commander` from 12.1.0 to 15.0.0
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v12.1.0...v15.0.0)

Updates `debug` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.6...4.4.3)

Updates `@types/debug` from 4.1.12 to 4.1.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/debug)

Updates `joi` from 17.13.3 to 18.2.9
- [Commits](hapijs/joi@v17.13.3...v18.2.9)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `@types/lodash` from 4.17.7 to 4.17.25
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `node-fetch` from 2.7.0 to 3.3.2
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.7.0...v3.3.2)

Updates `picocolors` from 1.0.1 to 1.1.1
- [Release notes](https://github.com/alexeyraspopov/picocolors/releases)
- [Changelog](https://github.com/alexeyraspopov/picocolors/blob/main/CHANGELOG.md)
- [Commits](alexeyraspopov/picocolors@v1.0.1...v1.1.1)

Updates `@types/debug` from 4.1.12 to 4.1.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/debug)

Updates `@types/lodash` from 4.17.7 to 4.17.25
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/node` from 24.10.1 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `chai` from 5.1.1 to 6.3.0
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v5.1.1...v6.3.0)

Updates `eslint` from 8.57.0 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.0...v10.12.0)

Updates `eslint-config-iplayer` from 9.2.0 to 11.0.20
- [Commits](https://github.com/bbc/eslint-config-iplayer/commits)

Updates `eslint-plugin-mocha` from 10.5.0 to 12.0.2
- [Release notes](https://github.com/lo1tuma/eslint-plugin-mocha/releases)
- [Changelog](https://github.com/lo1tuma/eslint-plugin-mocha/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lo1tuma/eslint-plugin-mocha/compare/10.5.0...eslint-plugin-mocha@12.0.2)

Updates `mocha` from 10.7.3 to 12.0.3
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.7.3...v12.0.3)

Updates `nock` from 13.5.4 to 14.0.17
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v13.5.4...v14.0.17)

Updates `nyc` from 17.1.0 to 18.0.0
- [Release notes](https://github.com/istanbuljs/nyc/releases)
- [Changelog](https://github.com/istanbuljs/nyc/blob/main/CHANGELOG.md)
- [Commits](istanbuljs/nyc@nyc-v17.1.0...nyc-v18.0.0)

Updates `prettier` from 3.3.3 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.3.3...3.9.9)

Updates `sinon` from 18.0.0 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v18.0.0...v22.1.0)

Updates `@types/sinon` from 17.0.3 to 22.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `tsx` from 4.17.0 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.17.0...v4.23.15)

Updates `typescript` from 5.5.4 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.5.4...v7.0.2)

---
updated-dependencies:
- dependency-name: "@bbc/http-transport"
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: debug
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/debug"
  dependency-version: 4.1.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: joi
  dependency-version: 18.2.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/lodash"
  dependency-version: 4.17.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: node-fetch
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: picocolors
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/debug"
  dependency-version: 4.1.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@types/lodash"
  dependency-version: 4.17.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: chai
  dependency-version: 6.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: eslint-config-iplayer
  dependency-version: 11.0.20
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: eslint-plugin-mocha
  dependency-version: 12.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: mocha
  dependency-version: 12.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: nock
  dependency-version: 14.0.17
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: nyc
  dependency-version: 18.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@types/sinon"
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 12, 2026 23:24
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 12, 2026
@dependabot
dependabot Bot requested review from JohnNewman1 and removed request for a team October 12, 2026 23:24
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/all-4ae26b80a5 branch October 19, 2026 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JohnNewman1 JohnNewman1 Awaiting requested review from JohnNewman1 JohnNewman1 is a code owner automatically assigned from bbc/ibl

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants