deps: bump the security-updates group with 28 updates by dependabot[bot] · Pull Request #989 · suites-dev/suites

dependabot · 2026-03-27T17:49:50Z

Bumps the security-updates group with 28 updates:

Package	From	To
@babel/traverse	`7.28.3`	`7.29.0`
@eslint/js	`9.8.0`	`10.0.1`
@nestjs/common	`10.4.20`	`11.1.17`
@types/node	`22.19.1`	`25.5.0`
@typescript-eslint/eslint-plugin	`7.18.0`	`8.57.2`
@typescript-eslint/parser	`7.18.0`	`8.57.2`
axios	`1.8.2`	`1.13.6`
eslint	`9.8.0`	`10.1.0`
eslint-plugin-tsdoc	`0.5.0`	`0.5.2`
globals	`16.5.0`	`17.4.0`
husky	`8.0.3`	`9.1.7`
inversify	`6.0.1`	`8.1.0`
jest	`29.7.0`	`30.3.0`
@types/jest	`29.5.12`	`30.0.0`
jest-environment-node	`29.1.0`	`30.3.0`
lerna	`8.2.4`	`9.0.7`
lint-staged	`16.2.6`	`16.4.0`
madge	`7.0.0`	`8.0.0`
prettier	`3.6.2`	`3.8.1`
rimraf	`5.0.10`	`6.1.3`
sinon	`16.1.3`	`21.0.3`
@types/sinon	`10.0.20`	`21.0.0`
tar	`6.2.1`	`7.5.13`
ts-jest	`29.4.5`	`29.4.6`
typescript	`5.2.2`	`6.0.2`
@vitest/coverage-v8	`1.6.1`	`4.1.2`
@vitest/spy	`1.6.1`	`4.1.2`
vitest	`1.6.1`	`4.1.2`

Updates @babel/traverse from 7.28.3 to 7.29.0

Release notes

Sourced from @babel/traverse's releases.

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types

#17750 [7.x backport] Add attributes import declaration builder (@JLHwung)

babel-standalone

#17663 [7.x backport] feat(standalone): export async transform (@JLHwung)

#17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser

#17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)

#17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)

babel-traverse

#17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)

babel-plugin-transform-block-scoping, babel-traverse

#17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3

#17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

@magic-akari

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

... (truncated)

Commits

aa8394e v7.29.0
84366a8 fix(traverse): provide a hub when traversing a File or Program and no parentP...
229eb45 [7.x backport] fix: Rename switch discriminant references when body creates s...
d7f4008 v7.28.6
905bc22 fix: lint errors in main branch (#17612)
a03e2b6 fix: path.evaluate correctly returns confident (#17584)
aac2c37 chore: Use Gulpfile.mts (#17579)
65c4a6b [Babel 8] fix: Improve traverse types (#17574)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/traverse since your current version.

Updates @eslint/js from 9.8.0 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
b4b3127 chore: package.json update for @eslint/js release
0b14059 chore: package.json update for @eslint/js release
fa31a60 feat!: add name to configs (#20015)
1e2cad5 chore: package.json update for @eslint/js release
454a292 feat!: update eslint:recommended configuration (#20210)
c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
c7ebefc chore: package.json update for @eslint/js release
Additional commits viewable in compare view

Updates @nestjs/common from 10.4.20 to 11.1.17

Release notes

Sourced from @nestjs/common's releases.

v11.1.17 (2026-03-16)

Enhancements

microservices

#16218 feat(microservices): add redis driver identification (@vchomakov)

Bugs

platform-fastify

auto-run middleware for HEAD requests as fastify redirects them to GET handlers (effectively skipping middleware execution) nestjs/nest@cbdf737 (@kamilmysliwiec)

Dependencies

common

#16567 fix(deps): update dependency file-type to v21.3.2 (@renovate[bot])

platform-fastify

#16533 fix(deps): update dependency fastify to v5.8.2 (@renovate[bot])

Committers: 3

Rohan Santhosh Kumar (@Rohan5commit)

Vasil Chomakov (@vchomakov)

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.16 (2026-03-05)

Bug fixes

microservices

#16506 fix(microservices): fix double callback when isdisposed or err is truthy (@LhonRafaat)

Dependencies

platform-express

#16507 fix(deps): update dependency multer to v2.1.1 (@renovate[bot])

Committers: 2

Lhon (@LhonRafaat)

Shahnoor Mujawar (@shahnoormujawar)

v11.1.15

What's Changed

fix(microservices): if indexOf return 0 will if will be falsy by @cuiweixie in nestjs/nest#16401

fix(microservices): introuduce max pattern depth and object complexity by @kamilmysliwiec in nestjs/nest#16402

chore(@nestjs/core): allow override for initializeWildcardHandlersIfE… by @StNekroman in nestjs/nest#16468

chore(deps): update dependency @fastify/middie to v9.2.0 [security] by @renovate[bot] in nestjs/nest#16472

fix(deps): update dependency multer to v2.1.0 [security] by @renovate[bot] in nestjs/nest#16474

New Contributors

@cuiweixie made their first contribution in nestjs/nest#16401

@StNekroman made their first contribution in nestjs/nest#16468

Full Changelog: nestjs/nest@v11.1.14...v11.1.15

v11.1.14 (2026-02-17)

... (truncated)

Commits

447a373 chore(release): publish v11.1.17 release
99ed6e6 fix(deps): update dependency file-type to v21.3.2
268a283 fix(deps): update dependency file-type to v21.3.1
315e698 chore(release): publish v11.1.16 release
6add3d6 chore(release): publish v11.1.15 release
5d31df7 chore(release): publish v11.1.14 release
829d326 Merge pull request #16314 from SpencerKaiser/bugfix/cors-types
5058600 fix(common): change requestOrigin type
91212b2 fix: return type error
804d27b fix: invalid context when no stack trace is provided
Additional commits viewable in compare view

Updates @types/node from 22.19.1 to 25.5.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 7.18.0 to 8.57.2

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)

eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)

eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)

eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)

typescript-estree: skip createIsolatedProgram fallback for projectService (#12066, #12065)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

Konv Suu

mdm317

Newton Yuan @NewtonYuan

RyoheiYamamoto

SungHyun627 @SungHyun627

Tamashoo @Tamashoo

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#12126)

❤️ Thank You

Newton Yuan @NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

8.57.0 (2026-03-09)

🚀 Features

eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#12080)

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.57.2 (2026-03-23)

🩹 Fixes

eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)

eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)

eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)

eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

Konv Suu

mdm317

Newton Yuan @NewtonYuan

SungHyun627 @SungHyun627

Tamashoo @Tamashoo

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.1 (2026-03-16)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#12126)

❤️ Thank You

Newton Yuan @NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.0 (2026-03-09)

🚀 Features

eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#12080)

🩹 Fixes

eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#12089)

eslint-plugin: [prefer-promise-reject-errors] add allow TypeOrValueSpecifier to prefer-promise-reject-errors (#12094)

typescript-estree: if the template literal is tagged and the text has an invalid escape, cooked will be null (#11355)

eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#12077)

... (truncated)

Commits

be4d54d chore(release): publish 8.57.2
f68c8e4 fix(eslint-plugin): [prefer-readonly-parameter-types] preserve type alias inf...
73acd2e fix(eslint-plugin): [no-useless-default-assignment] skip reporting false posi...
3d21482 fix(eslint-plugin): [no-unsafe-return] false positive on unwrapping generic (...
e128548 fix(eslint-plugin): [no-restricted-types] flag banned generics in extends or ...
2b7f63f chore(eslint-plugin): correct tsutils.isTypeFlag usage post-merge
65175cd fix(eslint-plugin): [array-type] ignore Array and ReadonlyArray without type ...
9c9ab5e feat(eslint-plugin): [no-unnecessary-type-arguments] report inferred required...
42a1c89 fix(eslint-plugin): [prefer-optional-chain] remove dangling closing parenthes...
71855ff docs(eslint-plugin): [no-unnecessary-condition] add link to TS handbook (#12131)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @typescript-eslint/eslint-plugin since your current version.

Updates @typescript-eslint/parser from 7.18.0 to 8.57.2

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)

eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)

eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)

eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)

typescript-estree: skip createIsolatedProgram fallback for projectService (#12066, #12065)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

Konv Suu

mdm317

Newton Yuan @NewtonYuan

RyoheiYamamoto

SungHyun627 @SungHyun627

Tamashoo @Tamashoo

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#12126)

❤️ Thank You

Newton Yuan @NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

8.57.0 (2026-03-09)

🚀 Features

eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#12080)

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.57.2 (2026-03-23)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.1 (2026-03-16)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.0 (2026-03-09)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.56.1 (2026-02-23)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.56.0 (2026-02-16)

🚀 Features

support ESLint v10 (#12057)

❤️ Thank You

Brad Zacher @bradzacher

Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.55.0 (2026-02-09)

This was a version bump only for parser to align it with other projects, there were no code changes.

... (truncated)

Commits

be4d54d chore(release): publish 8.57.2
c7c38aa chore(release): publish 8.57.1
2c6aeee chore(release): publish 8.57.0
f696dad chore: use pnpm catalog (#12047)
a09921e chore: update vitest to 4.x (#12071)
96a04a9 chore(release): publish 8.56.1
8b8b68f chore(release): publish 8.56.0
68a074f feat: support ESLint v10 (#12057)
fedfe86 chore(release): publish 8.55.0
b931f8c chore: use workspace refs for workspace deps (#12018)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @typescript-eslint/parser since your current version.

Updates axios from 1.8.2 to 1.13.6

Release notes

Sourced from axios's releases.

v1.13.6

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

Breaking Changes: None identified in this release.

Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @moh3n9595 for the initial implementation. (#5764)

Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#7385)

🐛 Bug Fixes

Environment Compatibility:

Fixed module exports for React Native and Browserify environments. (#7386)

Added safe FormData detection for the WeChat Mini Program environment. (#7324)

Error Handling:

AxiosError.message is now correctly enumerable. (#7392)

AxiosError.from now correctly copies the status property from the source error, ensuring better error propagation. (#7403)

🔧 Maintenance & Chores

Dependencies: Updated the development_dependencies group (5 updates). (#7432)

Infrastructure: Migrated @rollup/plugin-babel from v5.3.1 to v6.1.0. (#7424)

Documentation: Added missing JSDoc comments to utilities. (#7427)

🌟 New Contributors

We are thrilled to welcome our new contributors! Thank you for helping improve the project:

@Gudahtt (#7386)

@ybbus (#7392)

@Shiwaangee (#7324)

@skrtheboss (#7403)

@Janaka66 (#7427)

@moh3n9595 (#5764)

@digital-wizard48 (#7424)

Full Changelog: v1.13.5...v1.13.6

v1.13.5

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)

Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

1.13.3 (2026-01-20)

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)

interceptor: handle the error in the same interceptor (#6269) (5945e40)

main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)

package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)

silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)

turn AxiosError into a native error (#5394) (#5558) (1c6a86d)

types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)

types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)

unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

add undefined as a value in AxiosRequestConfig (#5560) (095033c)

add automatic minor and patch upgrades to dependabot (#6053) (65a7584)

add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)

added copilot instructions (3f83143)

compatibility with frozen prototypes (#6265) (860e033)

enhance pipeFileToResponse with error handling (#7169) (88d7884)

types: Intellisense for string literals in a widened union (#6134) (f73474d), closes microsoft/TypeScript#33471

Reverts

Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298

deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

Ashvin Tiwari...
Description has been truncated

Bumps the security-updates group with 28 updates: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.28.3` | `7.29.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.8.0` | `10.0.1` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `10.4.20` | `11.1.17` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.1` | `25.5.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.57.2` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.57.2` | | [axios](https://github.com/axios/axios) | `1.8.2` | `1.13.6` | | [eslint](https://github.com/eslint/eslint) | `9.8.0` | `10.1.0` | | [eslint-plugin-tsdoc](https://github.com/microsoft/tsdoc/tree/HEAD/eslint-plugin) | `0.5.0` | `0.5.2` | | [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.4.0` | | [husky](https://github.com/typicode/husky) | `8.0.3` | `9.1.7` | | [inversify](https://github.com/inversify/monorepo) | `6.0.1` | `8.1.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.3.0` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` | | [jest-environment-node](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-node) | `29.1.0` | `30.3.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `8.2.4` | `9.0.7` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.6` | `16.4.0` | | [madge](https://github.com/pahen/madge) | `7.0.0` | `8.0.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.1` | | [rimraf](https://github.com/isaacs/rimraf) | `5.0.10` | `6.1.3` | | [sinon](https://github.com/sinonjs/sinon) | `16.1.3` | `21.0.3` | | [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `10.0.20` | `21.0.0` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.13` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.2.2` | `6.0.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `1.6.1` | `4.1.2` | | [@vitest/spy](https://github.com/vitest-dev/vitest/tree/HEAD/packages/spy) | `1.6.1` | `4.1.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.1` | `4.1.2` | Updates `@babel/traverse` from 7.28.3 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-traverse) Updates `@eslint/js` from 9.8.0 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@nestjs/common` from 10.4.20 to 11.1.17 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.17/packages/common) Updates `@types/node` from 22.19.1 to 25.5.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.57.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.18.0 to 8.57.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/parser) Updates `axios` from 1.8.2 to 1.13.6 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.8.2...v1.13.6) Updates `eslint` from 9.8.0 to 10.1.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.8.0...v10.1.0) Updates `eslint-plugin-tsdoc` from 0.5.0 to 0.5.2 - [Changelog](https://github.com/microsoft/tsdoc/blob/main/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/microsoft/tsdoc/commits/eslint-plugin-tsdoc_v0.5.2/eslint-plugin) Updates `globals` from 16.5.0 to 17.4.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.5.0...v17.4.0) Updates `husky` from 8.0.3 to 9.1.7 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v8.0.3...v9.1.7) Updates `inversify` from 6.0.1 to 8.1.0 - [Release notes](https://github.com/inversify/monorepo/releases) - [Changelog](https://github.com/inversify/monorepo/blob/main/docs/release.md) - [Commits](https://github.com/inversify/monorepo/compare/@inversifyjs/core@6.0.1...inversify@8.1.0) Updates `jest` from 29.7.0 to 30.3.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest) Updates `@types/jest` from 29.5.12 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `jest-environment-node` from 29.1.0 to 30.3.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest-environment-node) Updates `lerna` from 8.2.4 to 9.0.7 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v9.0.7/packages/lerna) Updates `lint-staged` from 16.2.6 to 16.4.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.2.6...v16.4.0) Updates `madge` from 7.0.0 to 8.0.0 - [Changelog](https://github.com/pahen/madge/blob/master/CHANGELOG.md) - [Commits](pahen/madge@v7.0.0...v8.0.0) Updates `prettier` from 3.6.2 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.8.1) Updates `rimraf` from 5.0.10 to 6.1.3 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v5.0.10...v6.1.3) Updates `sinon` from 16.1.3 to 21.0.3 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v16.1.3...v21.0.3) Updates `@types/sinon` from 10.0.20 to 21.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `tar` from 6.2.1 to 7.5.13 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.13) Updates `ts-jest` from 29.4.5 to 29.4.6 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.6) Updates `typescript` from 5.2.2 to 6.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.2.2...v6.0.2) Updates `@vitest/coverage-v8` from 1.6.1 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/coverage-v8) Updates `@vitest/spy` from 1.6.1 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/spy) Updates `vitest` from 1.6.1 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-version: 7.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@nestjs/common" dependency-version: 11.1.17 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/node" dependency-version: 25.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.57.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/parser" dependency-version: 8.57.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: axios dependency-version: 1.13.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: eslint dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: eslint-plugin-tsdoc dependency-version: 0.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: globals dependency-version: 17.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: husky dependency-version: 9.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: inversify dependency-version: 8.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest dependency-version: 30.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest-environment-node dependency-version: 30.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lerna dependency-version: 9.0.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lint-staged dependency-version: 16.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: madge dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: rimraf dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: sinon dependency-version: 21.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/sinon" dependency-version: 21.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: tar dependency-version: 7.5.13 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: ts-jest dependency-version: 29.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/spy" dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: vitest dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the security-updates group with 28 updates#989

deps: bump the security-updates group with 28 updates#989
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/security-updates-c1794223d3

dependabot bot commented on behalf of github Mar 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

v11.1.17 (2026-03-16)

Enhancements

Bugs

Dependencies

Committers: 3

v11.1.16 (2026-03-05)

Bug fixes

Dependencies

Committers: 2

v11.1.15

What's Changed

New Contributors

v11.1.14 (2026-02-17)

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

❤️ Thank You

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

❤️ Thank You

v8.57.0

8.57.0 (2026-03-09)

🚀 Features

8.57.2 (2026-03-23)

🩹 Fixes

❤️ Thank You

8.57.1 (2026-03-16)

🩹 Fixes

❤️ Thank You

8.57.0 (2026-03-09)

🚀 Features

🩹 Fixes

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

❤️ Thank You

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

❤️ Thank You

v8.57.0

8.57.0 (2026-03-09)

🚀 Features

8.57.2 (2026-03-23)

8.57.1 (2026-03-16)

8.57.0 (2026-03-09)

8.56.1 (2026-02-23)

8.56.0 (2026-02-16)

🚀 Features

❤️ Thank You

8.55.0 (2026-02-09)

v1.13.6

⚠️ Important Changes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.13.5

Release 1.13.5

dependabot bot commented on behalf of github Mar 27, 2026 •

edited

Loading