Bump the npm_and_yarn group across 1 directory with 6 updates by dependabot[bot] · Pull Request #1595 · google/turbinia

dependabot · 2025-09-11T19:56:18Z

Bumps the npm_and_yarn group with 6 updates in the /web directory:

Package	From	To
axios	`1.7.4`	`1.8.2`
vite	`5.4.14`	`5.4.20`
esbuild	`0.21.5`	`0.25.9`
vite	`5.4.20`	`7.1.5`
@vitejs/plugin-vue	`5.1.2`	`5.2.4`
unplugin-fonts	`1.1.1`	`1.4.0`
form-data	`4.0.0`	`4.0.4`

Updates axios from 1.7.4 to 1.8.2

Release notes

Sourced from axios's releases.

Release v1.8.2

Release notes:

Bug Fixes

http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

Fasoro-Joseph Alexander

Release v1.8.1

Release notes:

Bug Fixes

utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

Dmitriy Mozgovoy

Release v1.8.0

Release notes:

Bug Fixes

examples: application crashed when navigating examples in browser (#5938) (1260ded)

missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)

utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

Add config for ignoring absolute URLs (#5902) (#6192) (32c7bcc)

Reverts

Revert "chore: expose fromDataToStream to be consumable (#6731)" (#6732) (1317261), closes #6731 #6732

BREAKING CHANGES

code relying on the above will now combine the URLs instead of prefer request URL

feat: add config option for allowing absolute URLs

fix: add default value for allowAbsoluteUrls in buildFullPath

fix: typo in flow control when setting allowAbsoluteUrls

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.8.2 (2025-03-07)

Bug Fixes

http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

Fasoro-Joseph Alexander

1.8.1 (2025-02-26)

Bug Fixes

utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

Dmitriy Mozgovoy

1.8.0 (2025-02-25)

Bug Fixes

examples: application crashed when navigating examples in browser (#5938) (1260ded)

missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)

utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

Add config for ignoring absolute URLs (#5902) (#6192) (32c7bcc)

Reverts

Revert "chore: expose fromDataToStream to be consumable (#6731)" (#6732) (1317261), closes #6731 #6732

BREAKING CHANGES

code relying on the above will now combine the URLs instead of prefer request URL

feat: add config option for allowing absolute URLs

fix: add default value for allowAbsoluteUrls in buildFullPath

... (truncated)

Commits

a9f7689 chore(release): v1.8.2 (#6812)
fb8eec2 fix(http-adapter): add allowAbsoluteUrls to path building (#6810)
9812045 chore(sponsor): update sponsor block (#6804)
72acf75 chore(sponsor): update sponsor block (#6794)
2e64afd chore(release): v1.8.1 (#6800)
36a5a62 fix(utils): move generateString to platform utils to avoid importing crypto...
cceb7b1 chore(release): v1.8.0 (#6795)
23a25af fix(utils): replace getRandomValues with crypto module (#6788)
32c7bcc feat: Add config for ignoring absolute URLs (#5902) (#6192)
4a3e26c chore(config): adjust rollup config to preserve license header to minified Ja...
Additional commits viewable in compare view

Updates vite from 5.4.14 to 5.4.20

Release notes

Sourced from vite's releases.

v5.4.20

Please refer to CHANGELOG.md for details.

v5.4.19

Please refer to CHANGELOG.md for details.

v5.4.18

Please refer to CHANGELOG.md for details.

v5.4.17

Please refer to CHANGELOG.md for details.

v5.4.16

Please refer to CHANGELOG.md for details.

v5.4.15

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.20 (2025-09-08)

fix: apply fs.strict check to HTML files (#20736) (482000f), closes #20736

5.4.19 (2025-04-30)

fix: backport #19965, check static serve file inside sirv (#19966) (766947e), closes #19965 #19966

5.4.18 (2025-04-10)

fix: backport #19830, reject requests with # in request-target (#19831) (823675b), closes #19830 #19831

5.4.17 (2025-04-03)

fix: backport #19782, fs check with svg and relative paths (#19784) (84b2b46), closes #19782 #19784

5.4.16 (2025-03-31)

fix: backport #19761, fs check in transform middleware (#19762) (b627c50), closes #19761 #19762

5.4.15 (2025-03-24)

fix: backport #19702, fs raw query with query separators (#19703) (807d7f0), closes #19702 #19703

Commits

997700f release: v5.4.20
482000f fix: apply fs.strict check to HTML files (#20736)
80a333a release: v5.4.19
766947e fix: backport #19965, check static serve file inside sirv (#19966)
731b77d release: v5.4.18
823675b fix: backport #19830, reject requests with # in request-target (#19831)
0a2518a release: v5.4.17
84b2b46 fix: backport #19782, fs check with svg and relative paths (#19784)
712cb71 release: v5.4.16
b627c50 fix: backport #19761, fs check in transform middleware (#19762)
Additional commits viewable in compare view

Updates esbuild from 0.21.5 to 0.25.9

Release notes

Sourced from esbuild's releases.

v0.25.9
Better support building projects that use Yarn on Windows (#3131, #3663)

With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive

Some developers put their projects on the D: drive

Yarn generates relative paths that use ../.. to get from the project directory to the cache directory

Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)

I didn't have access to a Windows machine for testing this edge case

Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.
Preserve parentheses around function expressions (#4252)

The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:
// Original code
const fn0 = () => 0
const fn1 = (() => 1)
console.log(fn0, function() { return fn1() }())
// Old output
const fn0 = () => 0;
const fn1 = () => 1;
console.log(fn0, function() {
return fn1();
}());
// New output
const fn0 = () => 0;
const fn1 = (() => 1);
console.log(fn0, (function() {
return fn1();
})());
Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.
Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.
v0.25.8

Fix another TypeScript parsing edge case (#4248)

This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the ?: operator. The regression specifically involves parsing an arrow function containing a #private identifier inside the middle of a ?: ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

Fix regression with --define and import.meta (#4010, #4012, #4013)

The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

This fix was contributed by @sapphi-red.

0.24.1
Allow es2024 as a target in tsconfig.json (#4004)

TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:
{
  "compilerOptions": {
    "target": "ES2024"
  }
}
As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

This fix was contributed by @billyjanitsch.
Allow automatic semicolon insertion after get/set

This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:
class Foo {
  get
  *x() {}
  set
  *y() {}
}
The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.
Allow quoted property names in --define and --pure (#4008)

The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits

195e05c publish 0.25.9 to npm
3dac33f fix #3131, fix #3663: yarnpnp + windows + D drive
0f2c5c8 mock fs now supports multiple volumes on windows
100a51e split out yarnpnp snapshot tests
13aace3 remove C: assumption from windows snapshot tests
f1f413f fix #4252: preserve parentheses around functions
1bc8091 fix #4257, close #4258: go 1.23.10 => 1.23.12
bc52135 move the go compiler version to go.version
a0af5d1 makefile: use ESBUILD_VERSION consistently
8c71947 publish 0.25.8 to npm
Additional commits viewable in compare view

Updates vite from 5.4.20 to 7.1.5

Release notes

Sourced from vite's releases.

v5.4.20

Please refer to CHANGELOG.md for details.

v5.4.19

Please refer to CHANGELOG.md for details.

v5.4.18

Please refer to CHANGELOG.md for details.

v5.4.17

Please refer to CHANGELOG.md for details.

v5.4.16

Please refer to CHANGELOG.md for details.

v5.4.15

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.20 (2025-09-08)

fix: apply fs.strict check to HTML files (#20736) (482000f), closes #20736

5.4.19 (2025-04-30)

fix: backport #19965, check static serve file inside sirv (#19966) (766947e), closes #19965 #19966

5.4.18 (2025-04-10)

fix: backport #19830, reject requests with # in request-target (#19831) (823675b), closes #19830 #19831

5.4.17 (2025-04-03)

fix: backport #19782, fs check with svg and relative paths (#19784) (84b2b46), closes #19782 #19784

5.4.16 (2025-03-31)

fix: backport #19761, fs check in transform middleware (#19762) (b627c50), closes #19761 #19762

5.4.15 (2025-03-24)

fix: backport #19702, fs raw query with query separators (#19703) (807d7f0), closes #19702 #19703

Commits

997700f release: v5.4.20
482000f fix: apply fs.strict check to HTML files (#20736)
80a333a release: v5.4.19
766947e fix: backport #19965, check static serve file inside sirv (#19966)
731b77d release: v5.4.18
823675b fix: backport #19830, reject requests with # in request-target (#19831)
0a2518a release: v5.4.17
84b2b46 fix: backport #19782, fs check with svg and relative paths (#19784)
712cb71 release: v5.4.16
b627c50 fix: backport #19761, fs check in transform middleware (#19762)
Additional commits viewable in compare view

Updates @vitejs/plugin-vue from 5.1.2 to 5.2.4

Release notes

Sourced from @vitejs/plugin-vue's releases.

plugin-vue@5.2.4

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.3

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.2

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.1

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.0

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.5

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.4

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @vitejs/plugin-vue's changelog.

5.2.4 (2025-05-09)

Features

plugin-vue: use transformWithOxc if rolldown-vite is detected (#584) (6ac8e3a)

Bug Fixes

plugin-vue: handle sourcemap with empty script code (#585) (7f73970)

plugin-vue: when the resource path contains chinese characters, dev/build is inconsistent (#550) (5f6affe)

Miscellaneous Chores

deps: update upstream (#542) (ef446fc)

deps: update upstream (#569) (98381b2)

fix types with Vite 6.3 (#559) (8002511)

use rollup types exposed from Vite (#583) (2e1287f)

5.2.3 (2025-03-17)

5.2.2 (2025-03-17)

Features

css: tree shake scoped styles (#533) (333094f)

pass descriptor vapor flag to compileTemplte (219e007)

Bug Fixes

deps: update all non-major dependencies (#482) (cdbae68)

deps: update all non-major dependencies (#488) (5d39582)

generate unique component id (#538) (2704e85)

index: move the if check earlier to avoid creating unnecessary ssr when entering return block (#523) (2135c84)

plugin-vue: default value for compile time flags (#495) (ae9d948)

plugin-vue: ensure HMR updates styles when SFC is treated as a type dependency (#541) (4abe3be)

plugin-vue: resolve sourcemap conflicts in build watch mode with cached modules (#505) (906cebb)

plugin-vue: support external import URLs for monorepos (#524) (cdd4922)

plugin-vue: support vapor template-only component (#529) (95be153)

plugin-vue: suppress warnings for non-recognized pseudo selectors form lightningcss (#521) (15c0eb0)

properly interpret boolean values in define (#545) (46d3d65)

Miscellaneous Chores

deps: update dependency rollup to ^4.27.4 (#479) (428320d)

deps: update dependency rollup to ^4.28.1 (#484) (388403f)

deps: update dependency rollup to ^4.29.1 (#493) (b092bc8)

deps: update upstream (#503) (8c12b9f)

deps: update upstream (#511) (d057351)

deps: update upstream (#526) (59946d3)

plugin-vue: simplify resolved declaration (7288a59)

5.2.1 (2024-11-26)

Miscellaneous Chores

... (truncated)

Commits

6027d40 release: plugin-vue@5.2.4
98381b2 chore(deps): update upstream (#569)
6ac8e3a feat(plugin-vue): use transformWithOxc if rolldown-vite is detected (#584)
7f73970 fix(plugin-vue): handle sourcemap with empty script code (#585)
2e1287f chore: use rollup types exposed from Vite (#583)
ef446fc chore(deps): update upstream (#542)
5f6affe fix(plugin-vue): when the resource path contains chinese characters, dev/buil...
8002511 chore: fix types with Vite 6.3 (#559)
b733b91 release: plugin-vue@5.2.3
4bc5517 Revert "fix: generate unique component id" (#548)
Additional commits viewable in compare view

Updates unplugin-fonts from 1.1.1 to 1.4.0

Release notes

Sourced from unplugin-fonts's releases.

v1.4.0

Features

add Vite 7 support (#87) (587f506)

allow using nuxt 4 (0b088c7)

Bug Fixes

improve vite 7 plugin typing (2b8f001)

loading custom font in nuxt module (d562a89)

v1.3.1

Full Changelog: cssninjaStudio/unplugin-fonts@v1.3.0...v1.3.1

v1.3.0

What's Changed

Introduce link tag filter hook by @BenBE in cssninjaStudio/unplugin-fonts#71

fix: google font missing injectTo by @chunlampang in cssninjaStudio/unplugin-fonts#75

New Contributors

@BenBE made their first contribution in cssninjaStudio/unplugin-fonts#71

@chunlampang made their first contribution in cssninjaStudio/unplugin-fonts#75

Full Changelog: cssninjaStudio/unplugin-fonts@v1.2.0...v1.3.0

v1.2.0

Features

add fontBaseUrl and preconnectUrl on google font provider (12684bc), closes #78

add fontBaseUrl on typekit font provider (724026b)

support vite 6.0 (#77) (38332ba)

add step for adding font links in svelte:head to sveltekit installation guide by @Mef45 in cssninjaStudio/unplugin-fonts#67

New Contributors

@Mef45 made their first contribution in cssninjaStudio/unplugin-fonts#67

@speg made their first contribution in cssninjaStudio/unplugin-fonts#77

Full Changelog: cssninjaStudio/unplugin-fonts@v1.1.1...v1.2.0

Changelog

Sourced from unplugin-fonts's changelog.

1.4.0 (2025-07-22)

Features

add Vite 7 support (#87) (587f506)

allow using nuxt 4 (0b088c7)

Bug Fixes

improve vite 7 plugin typing (2b8f001)

loading custom font in nuxt module (d562a89)

1.3.1 (2024-12-01)

Bug Fixes

link filter types (5881d7c)

1.3.0 (2024-12-01)

Features

introduce link tag filter hook (#71) (6b61890), closes #70 #7 #10

Bug Fixes

google font missing injectTo (#75) (4107af6)

1.2.0 (2024-12-01)

Features

add fontBaseUrl and preconnectUrl on google font provider (12684bc), closes #78

add fontBaseUrl on typekit font provider (724026b)

support vite 6.0 (#77) (38332ba)

Commits

e57cbdb chore(release): 1.4.0
0b088c7 feat: allow using nuxt 4
2b8f001 fix: improve vite 7 plugin typing
d562a89 fix: loading custom font in nuxt module
549872b chore: add astro-5 and vitepress-2 examples
bfe1121 chore: add vite-7 example
587f506 feat: add Vite 7 support (#87)
8bc315c chore(release): 1.3.1
5881d7c fix: link filter types
0b3fc3b chore(release): 1.3.0
Additional commits viewable in compare view

Updates form-data from 4.0.0 to 4.0.4

Release notes

Sourced from form-data's releases.

v4.0.4

v4.0.4 - 2025-07-16

Commits

[meta] add auto-changelog 811f682

[Tests] handle predict-v8-randomness failures in node < 17 and node > 23 1d11a76

[Fix] Switch to using crypto random for boundary values 3d17230

[Tests] fix linting errors 5e34080

[meta] actually ensure the readme backup isn’t published 316c82b

[Dev Deps] update @ljharb/eslint-config 58c25d7

[meta] fix readme capitalization 2300ca1

v4.0.3

v4.0.3 - 2025-06-05

Fixed

[Fix] append: avoid a crash on nullish values [#577](https://github.com/form-data/form-data/issues/577)

Commits

[eslint] use a shared config 426ba9a

[eslint] fix some spacing issues 2094191

[Refactor] use hasown 81ab41b

[Fix] validate boundary type in setBoundary() method 8d8e469

[Tests] add tests to check the behavior of getBoundary with non-strings 837b8a1

[Dev Deps] remove unused deps 870e4e6

[meta] remove local commit hooks e6e83cc

[Dev Deps] update eslint 4066fd6

[meta] fix scripts to use prepublishOnly c4bbb13

v4.0.2

v4.0.2 - 2025-02-14

Merged

[Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

[Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

fix (npmignore): ignore temporary build files [#532](https://github.com/form-data/form-data/issues/532)

fix (npmignore): ignore temporary build files [#532](https://github.com/form-data/form-data/issues/532)

Fixed

[Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

[Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

[Fix] set Symbol.toStringTag when available [#396](https://github.com/form-data/form-data/issues/396)

Commits

... (truncated)

Changelog

Sourced from form-data's changelog.

v4.0.4 - 2025-07-16

Commits

[meta] add auto-changelog 811f682

[Tests] handle predict-v8-randomness failures in node < 17 and node > 23 1d11a76

[Fix] Switch to using crypto random for boundary values 3d17230

[Tests] fix linting errors 5e34080

[meta] actually ensure the readme backup isn’t published 316c82b

[Dev Deps] update @ljharb/eslint-config 58c25d7

[meta] fix readme capitalization 2300ca1

v4.0.3 - 2025-06-05

Fixed

[Fix] append: avoid a crash on nullish values [#577](https://github.com/form-data/form-data/issues/577)

Commits

[eslint] use a shared config 426ba9a

[eslint] fix some spacing issues 2094191

[Refactor] use hasown 81ab41b

[Fix] validate boundary type in setBoundary()... Description has been truncated

Bumps the npm_and_yarn group with 6 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.7.4` | `1.8.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.14` | `5.4.20` | | [esbuild](https://github.com/evanw/esbuild) | `0.21.5` | `0.25.9` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.20` | `7.1.5` | | [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `5.1.2` | `5.2.4` | | [unplugin-fonts](https://github.com/cssninjaStudio/unplugin-fonts) | `1.1.1` | `1.4.0` | | [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.4` | Updates `axios` from 1.7.4 to 1.8.2 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.7.4...v1.8.2) Updates `vite` from 5.4.14 to 5.4.20 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.20/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.20/packages/vite) Updates `esbuild` from 0.21.5 to 0.25.9 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.21.5...v0.25.9) Updates `vite` from 5.4.20 to 7.1.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.20/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.20/packages/vite) Updates `@vitejs/plugin-vue` from 5.1.2 to 5.2.4 - [Release notes](https://github.com/vitejs/vite-plugin-vue/releases) - [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@5.2.4/packages/plugin-vue) Updates `unplugin-fonts` from 1.1.1 to 1.4.0 - [Release notes](https://github.com/cssninjaStudio/unplugin-fonts/releases) - [Changelog](https://github.com/cssninjaStudio/unplugin-fonts/blob/main/CHANGELOG.md) - [Commits](cssninjaStudio/unplugin-fonts@v1.1.1...v1.4.0) Updates `form-data` from 4.0.0 to 4.0.4 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.0...v4.0.4) --- updated-dependencies: - dependency-name: axios dependency-version: 1.8.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 5.4.20 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.25.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.1.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@vitejs/plugin-vue" dependency-version: 5.2.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: unplugin-fonts dependency-version: 1.4.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

aarontp · 2025-09-17T20:00:01Z

Filed #1596 for e2e test errors, but probably need to update npm.

aarontp · 2026-03-14T09:19:09Z

Closing to regenerate it.

dependabot · 2026-03-14T09:19:12Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 11, 2025

aarontp mentioned this pull request Sep 17, 2025

[Bug]: npm install fails with updated packages #1596

Closed

aarontp closed this Mar 14, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/web/npm_and_yarn-660d9aff8c branch March 14, 2026 09:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 6 updates#1595

Bump the npm_and_yarn group across 1 directory with 6 updates#1595
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/web/npm_and_yarn-660d9aff8c

dependabot Bot commented on behalf of github Sep 11, 2025

Uh oh!

aarontp commented Sep 17, 2025

Uh oh!

aarontp commented Mar 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 11, 2025

Release v1.8.2

Release notes:

Bug Fixes

Contributors to this release

Release v1.8.1

Release notes:

Bug Fixes

Contributors to this release

Release v1.8.0

Release notes:

Bug Fixes

Features

Reverts

BREAKING CHANGES

Contributors to this release

1.8.2 (2025-03-07)

Bug Fixes

Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes

Contributors to this release

1.8.0 (2025-02-25)

Bug Fixes

Features

Reverts

BREAKING CHANGES

v5.4.20

v5.4.19

v5.4.18

v5.4.17

v5.4.16

v5.4.15

5.4.20 (2025-09-08)

5.4.19 (2025-04-30)

5.4.18 (2025-04-10)

5.4.17 (2025-04-03)

5.4.16 (2025-03-31)

5.4.15 (2025-03-24)

v0.25.9

v0.25.8

Changelog: 2024

0.24.2

0.24.1

v5.4.20

v5.4.19

v5.4.18

v5.4.17

v5.4.16

v5.4.15

5.4.20 (2025-09-08)

5.4.19 (2025-04-30)

5.4.18 (2025-04-10)

5.4.17 (2025-04-03)

5.4.16 (2025-03-31)

5.4.15 (2025-03-24)

plugin-vue@5.2.4

plugin-vue@5.2.3

plugin-vue@5.2.2

plugin-vue@5.2.1

plugin-vue@5.2.0

plugin-vue@5.1.5

plugin-vue@5.1.4

plugin-vue@5.1.3

5.2.4 (2025-05-09)

Features

Bug Fixes

Miscellaneous Chores

5.2.3 (2025-03-17)

5.2.2 (2025-03-17)

Features

Bug Fixes

Miscellaneous Chores

5.2.1 (2024-11-26)

Miscellaneous Chores

v1.4.0

Features

Bug Fixes

v1.3.1