Skip to content

📦 [0.81]: Bump the all-dependencies group across 1 directory with 22 updates#16264

Open
dependabot[bot] wants to merge 1 commit into
0.81-stablefrom
dependabot/npm_and_yarn/0.81-stable/all-dependencies-a1c10675e0
Open

📦 [0.81]: Bump the all-dependencies group across 1 directory with 22 updates#16264
dependabot[bot] wants to merge 1 commit into
0.81-stablefrom
dependabot/npm_and_yarn/0.81-stable/all-dependencies-a1c10675e0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 20 updates in the / directory:

Package From To
beachball 2.60.1 2.65.5
lage 2.14.15 2.15.13
lodash 4.17.21 4.18.1
ts-jest 29.4.5 29.4.11
@types/react 19.2.14 19.2.17
sanitize-filename 1.6.3 1.6.4
simple-git 3.30.0 3.36.0
@types/lodash 4.17.20 4.17.24
metro-runtime 0.83.3 0.83.7
metro-source-map 0.83.3 0.83.7
envinfo 7.20.0 7.21.0
@types/shelljs 0.8.15 0.8.17
@microsoft/1ds-core-js 4.3.10 4.4.1
@microsoft/1ds-post-js 4.3.10 4.4.1
@microsoft/api-extractor 7.54.0 7.58.9
metro-transform-plugins 0.83.3 0.83.7
shell-quote 1.8.3 1.8.4
resolve 1.22.11 1.22.12
@rnx-kit/metro-config 2.2.0 2.2.4
screenshot-desktop 1.15.3 1.15.4

Updates beachball from 2.60.1 to 2.65.5

Changelog

Sourced from beachball's changelog.

2.65.5

Thu, 21 May 2026 00:59:31 GMT

Patches

2.65.4

Sat, 02 May 2026 01:47:50 GMT

Patches

2.65.3

Wed, 29 Apr 2026 22:36:53 GMT

Patches

  • Update readme with link to large repos performance info (elcraig@microsoft.com)
  • Include dependent bumps for workspace: and catalog: dependencies in the changelog (elcraig@microsoft.com)
  • Include catalog dependency changes when checking for changed packages (elcraig@microsoft.com)
  • Refactor internals for getting changed packages (elcraig@microsoft.com)
  • Fix deepening of shallow clones in latest git by being more specific about the comparison ref being fetched. Also reduce git operations for the case where the branch ref doesn't exist locally. (elcraig@microsoft.com)

2.65.1

Wed, 22 Apr 2026 23:20:37 GMT

Patches

2.65.0

Wed, 22 Apr 2026 04:13:00 GMT

Minor changes

  • Add support for providing npm token via NPM_TOKEN environment variable, and internally pass token to npm using an environment variable (elcraig@microsoft.com)

Patches

... (truncated)

Commits
  • 635c24d applying package updates
  • 2729111 (v2) Fetch with --no-tags (#1273)
  • 788abde (v2) Add link to change type help (#1271)
  • 28a44ff (v2) Change packStyle default to 'layer' (#1254)
  • 647adaf applying package updates
  • 725bbb9 Fix npm auth environment variables with yarn 4 (v2) (#1230)
  • 2eafde0 Fully fix iterative deepening for latest git (v2) (#1231)
  • 4b290c0 applying package updates
  • 3fb67d8 Add docs about optimizing performance in large monorepos (#1222)
  • 0f767eb Include catalog dependency changes when checking for changed packages (#1220)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for beachball since your current version.


Updates lage from 2.14.15 to 2.15.13

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lage since your current version.


Updates lodash from 4.17.21 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates ts-jest from 29.4.5 to 29.4.11

Release notes

Sourced from ts-jest's releases.

v29.4.11

Please refer to CHANGELOG.md for details.

v29.4.10

Please refer to CHANGELOG.md for details.

v29.4.9

Please refer to CHANGELOG.md for details.

v29.4.8

No release notes provided.

v29.4.7

Please refer to CHANGELOG.md for details.

v29.4.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.11 (2026-05-21)

Bug Fixes

  • preserve Bundler on the CJS path under TypeScript >= 6 (3941818), closes #4198

29.4.10 (2026-05-18)

Bug Fixes

  • pass resolutionMode to ts.resolveModuleName for hybrid module support (b557a85)
  • rebuild Program when consecutive compiles need different module kinds (a82a2b3), closes #4774
  • respect tsconfig moduleResolution instead of forcing Node10 (1bffffc)
  • transformer: transpile mjs files from node_modules for CJS mode (96d025d)
  • transformer: use a consistent comparator in hoist-jest sortStatements (8a8fd2f)

29.4.9 (2026-04-01)

Bug Fixes

  • use correct registry for npm OIDC trusted publishing (f8a9cc9)

29.4.8 (2026-04-01)

Bug Fixes

  • wrong published assets

29.4.7 (2026-04-01)

Features

29.4.6 (2025-12-01)

... (truncated)

Commits
  • bff2d64 chore(release): 29.4.11
  • 3941818 fix: preserve Bundler on the CJS path under TypeScript >= 6
  • efb3c2f build(deps): bump webpack-dev-server from 5.2.2 to 5.2.4 in /website
  • 4e46fad ci: refactor release workflow
  • 96b3ac0 chore(release): 29.4.10
  • e98ec64 build(deps): update github/codeql-action digest to 458d36d
  • 21ac58f build(deps): update jest packages
  • 0fdc96d build(deps): update dependency semver to ^7.8.0
  • 4b95551 build(deps): update dependency jest-environment-jsdom to ^30.4.1 (#5311)
  • 7b88447 build(deps): update eslint packages to ^8.59.3 (#5310)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ts-jest since your current version.


Updates @types/react from 19.2.14 to 19.2.17

Commits

Updates sanitize-filename from 1.6.3 to 1.6.4

Commits

Updates semver from 7.7.3 to 7.8.4

Release notes

Sourced from semver's releases.

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

Chores

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Changelog

Sourced from semver's changelog.

7.8.4 (2026-06-09)

Bug Fixes

7.8.3 (2026-06-08)

Bug Fixes

Chores

7.8.2 (2026-06-04)

Bug Fixes

7.8.1 (2026-05-21)

Bug Fixes

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Commits

Updates simple-git from 3.30.0 to 3.36.0

Release notes

Sourced from simple-git's releases.

simple-git@3.36.0

Minor Changes

  • 89a2294: Extend known exploitable configuration keys and per-task environment variables.

    Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

    Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

  • 1ad57e8: Remove conflicting node:buffer import
  • Updated dependencies [89a2294]
  • Updated dependencies [675570a]
    • @​simple-git/argv-parser@​1.1.0
    • @​simple-git/args-pathspec@​1.0.3

simple-git@3.35.2

Patch Changes

  • 0cf9d8c: Improvements for mono-repo publishing pipeline
  • Updated dependencies [0cf9d8c]
    • @​simple-git/args-pathspec@​1.0.2
    • @​simple-git/argv-parser@​1.0.3

simple-git@3.35.1

Patch Changes

  • 0de400e: Update monorepo version handling during publish
  • Updated dependencies [0de400e]
    • @​simple-git/argv-parser@​1.0.2

simple-git@3.33.0

Minor Changes

  • a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.

Patch Changes

  • e253a0d: Enhanced git -c checks in unsafe plugin.

    Thanks to @​JohannesLks for identifying the issue

simple-git@3.32.3

Patch Changes

  • f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

... (truncated)

Changelog

Sourced from simple-git's changelog.

3.36.0

Minor Changes

  • 89a2294: Extend known exploitable configuration keys and per-task environment variables.

    Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

    Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

  • 1ad57e8: Remove conflicting node:buffer import
  • Updated dependencies [89a2294]
  • Updated dependencies [675570a]
    • @​simple-git/argv-parser@​1.1.0
    • @​simple-git/args-pathspec@​1.0.3

3.35.2

Patch Changes

  • 0cf9d8c: Improvements for mono-repo publishing pipeline
  • Updated dependencies [0cf9d8c]
    • @​simple-git/args-pathspec@​1.0.2
    • @​simple-git/argv-parser@​1.0.3

3.35.1

Patch Changes

  • 0de400e: Update monorepo version handling during publish
  • Updated dependencies [0de400e]
    • @​simple-git/argv-parser@​1.0.2

3.35.0

Minor Changes

  • 3d8708b: Updating publish config

Patch Changes

  • Updated dependencies [3d8708b]
    • @​simple-git/args-pathspec@​1.0.1
    • @​simple-git/argv-parser@​1.0.1

3.34.0

... (truncated)

Commits
  • 7dc1a53 Version Packages
  • 76f5376 Merge pull request #1061 from Vinzent03/fix/buffer-import
  • 89a2294 Environment Parsing (#1156)
  • 1b91b76 fix: remove explicit node:buffer import
  • e390685 Version Packages
  • 3c9e4b8 Pin version of @​simple-git/args-pathspec
  • 94ee21f Export pathspec types through simple-git for backward compatibility
  • 6d7cb51 Version Packages
  • 0de400e Switch to semver from workspace revisions
  • 2264722 Version Packages
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for simple-git since your current version.


Updates @types/lodash from 4.17.20 to 4.17.24

Commits

Updates metro-runtime from 0.83.3 to 0.83.7

Release notes

Sourced from metro-runtime's releases.

v0.83.7

This release is on the 0.83.x branch

Full Changelog: react/metro@v0.83.6...v0.83.7

v0.83.6

This release is on the 0.83.x branch

NOTE: Experimental features are not covered by semver and can change at any time.

v0.83.5

This is a hotfix on the 0.83.x branch.

  • [Feature]: config.server.tls now sets Metro to be exposed as an https server (#1657 by @​vzaidman)
  • [Fix]: sync bundling progress between Metro cli and app hints (34ca6a6f621521a0780a54eeb32384b4f9c2f8ff by @​vzaidman)
  • [Types]: Restore accidentally removed publication of TypeScript types (#1662 by @​robhogan)

Full Changelog: react/metro@v0.83.4...v0.83.5

v0.83.4

Full Changelog: react/metro@v0.83.3...v0.83.4

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for metro-runtime since your current version.


Updates metro-source-map from 0.83.3 to 0.83.7

Release notes

Sourced from metro-source-map's releases.

v0.83.7

This release is on the 0.83.x branch

@dependabot
📦 [0.81]: Bump the all-dependencies group across 1 directory with 22 …
57bca2d 
…updates

Bumps the all-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [beachball](https://github.com/microsoft/beachball/tree/HEAD/packages/beachball) | `2.60.1` | `2.65.5` |
| [lage](https://github.com/microsoft/lage) | `2.14.15` | `2.15.13` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.11` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.17` |
| [sanitize-filename](https://github.com/parshap/node-sanitize-filename) | `1.6.3` | `1.6.4` |
| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.30.0` | `3.36.0` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.20` | `4.17.24` |
| [metro-runtime](https://github.com/facebook/metro/tree/HEAD/packages/metro-runtime) | `0.83.3` | `0.83.7` |
| [metro-source-map](https://github.com/facebook/metro/tree/HEAD/packages/metro-source-map) | `0.83.3` | `0.83.7` |
| [envinfo](https://github.com/tabrindle/envinfo) | `7.20.0` | `7.21.0` |
| [@types/shelljs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/shelljs) | `0.8.15` | `0.8.17` |
| [@microsoft/1ds-core-js](https://github.com/microsoft/ApplicationInsights-JS) | `4.3.10` | `4.4.1` |
| [@microsoft/1ds-post-js](https://github.com/microsoft/ApplicationInsights-JS) | `4.3.10` | `4.4.1` |
| [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.54.0` | `7.58.9` |
| [metro-transform-plugins](https://github.com/facebook/metro/tree/HEAD/packages/metro-transform-plugins) | `0.83.3` | `0.83.7` |
| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.8.4` |
| [resolve](https://github.com/browserify/resolve) | `1.22.11` | `1.22.12` |
| [@rnx-kit/metro-config](https://github.com/microsoft/rnx-kit/tree/HEAD/packages/metro-config) | `2.2.0` | `2.2.4` |
| [screenshot-desktop](https://github.com/bencevans/screenshot-desktop) | `1.15.3` | `1.15.4` |



Updates `beachball` from 2.60.1 to 2.65.5
- [Changelog](https://github.com/microsoft/beachball/blob/beachball_v2.65.5/packages/beachball/CHANGELOG.md)
- [Commits](https://github.com/microsoft/beachball/commits/beachball_v2.65.5/packages/beachball)

Updates `lage` from 2.14.15 to 2.15.13
- [Commits](microsoft/lage@lage_v2.14.15...lage_v2.15.13)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `ts-jest` from 29.4.5 to 29.4.11
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.11)

Updates `@types/react` from 19.2.14 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `sanitize-filename` from 1.6.3 to 1.6.4
- [Changelog](https://github.com/parshap/node-sanitize-filename/blob/master/Changelog.md)
- [Commits](parshap/node-sanitize-filename@v1.6.3...v1.6.4)

Updates `semver` from 7.7.3 to 7.8.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.3...v7.8.4)

Updates `simple-git` from 3.30.0 to 3.36.0
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git)

Updates `@types/lodash` from 4.17.20 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `metro-runtime` from 0.83.3 to 0.83.7
- [Release notes](https://github.com/facebook/metro/releases)
- [Changelog](https://github.com/react/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/metro/commits/v0.83.7/packages/metro-runtime)

Updates `metro-source-map` from 0.83.3 to 0.83.7
- [Release notes](https://github.com/facebook/metro/releases)
- [Changelog](https://github.com/react/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/metro/commits/v0.83.7/packages/metro-source-map)

Updates `envinfo` from 7.20.0 to 7.21.0
- [Release notes](https://github.com/tabrindle/envinfo/releases)
- [Changelog](https://github.com/tabrindle/envinfo/blob/main/CHANGELOG.md)
- [Commits](tabrindle/envinfo@v7.20.0...v7.21.0)

Updates `@types/shelljs` from 0.8.15 to 0.8.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/shelljs)

Updates `@microsoft/1ds-core-js` from 4.3.10 to 4.4.1
- [Release notes](https://github.com/microsoft/ApplicationInsights-JS/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-JS/blob/main/RELEASES.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-JS/commits)

Updates `@microsoft/1ds-post-js` from 4.3.10 to 4.4.1
- [Release notes](https://github.com/microsoft/ApplicationInsights-JS/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-JS/blob/main/RELEASES.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-JS/commits)

Updates `@microsoft/api-extractor` from 7.54.0 to 7.58.9
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/api-extractor_v7.58.9/apps/api-extractor)

Updates `debug` from 4.4.1 to 4.4.3
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.4.1...4.4.3)

Updates `metro-transform-plugins` from 0.83.3 to 0.83.7
- [Release notes](https://github.com/facebook/metro/releases)
- [Changelog](https://github.com/react/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/metro/commits/v0.83.7/packages/metro-transform-plugins)

Updates `shell-quote` from 1.8.3 to 1.8.4
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.8.3...v1.8.4)

Updates `resolve` from 1.22.11 to 1.22.12
- [Commits](browserify/resolve@v1.22.11...v1.22.12)

Updates `@rnx-kit/metro-config` from 2.2.0 to 2.2.4
- [Release notes](https://github.com/microsoft/rnx-kit/releases)
- [Changelog](https://github.com/microsoft/rnx-kit/blob/main/packages/metro-config/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/metro-config@2.2.4/packages/metro-config)

Updates `screenshot-desktop` from 1.15.3 to 1.15.4
- [Release notes](https://github.com/bencevans/screenshot-desktop/releases)
- [Commits](bencevans/screenshot-desktop@v1.15.3...v1.15.4)

---
updated-dependencies:
- dependency-name: beachball
  dependency-version: 2.65.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: lage
  dependency-version: 2.15.13
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ts-jest
  dependency-version: 29.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: sanitize-filename
  dependency-version: 1.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: semver
  dependency-version: 7.8.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: simple-git
  dependency-version: 3.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@types/lodash"
  dependency-version: 4.17.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: metro-runtime
  dependency-version: 0.83.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: metro-source-map
  dependency-version: 0.83.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: envinfo
  dependency-version: 7.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@types/shelljs"
  dependency-version: 0.8.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@microsoft/1ds-core-js"
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@microsoft/1ds-post-js"
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@microsoft/api-extractor"
  dependency-version: 7.58.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: debug
  dependency-version: 4.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: metro-transform-plugins
  dependency-version: 0.83.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: shell-quote
  dependency-version: 1.8.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: resolve
  dependency-version: 1.22.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@rnx-kit/metro-config"
  dependency-version: 2.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: screenshot-desktop
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 17, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 17, 2026 06:15
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants