Skip to content

Bump ip-address and socks - #369

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8b8c83898a
Closed

Bump ip-address and socks#369
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8b8c83898a

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMay 6, 2026

Copy link
Copy Markdown
Contributor

Bumps ip-address and socks. These dependencies needed to be updated together.
Updates ip-address from 9.0.5 to 10.2.0

Commits
  • 80fccaa 10.2.0
  • abaeb4d Type Address4.addressMinusSuffix as non-nilable (closes #143)
  • 2878c29 Preserve subnet prefix through Address6.to4() (closes #123) (#203)
  • 586666e Reject trailing junk in Address6.fromURL (closes #158) (#202)
  • 80bc76e Validate static factories instead of silently overflowing (#201)
  • 98927be Clarify isValid() accepts CIDRs with host bits set (#81)
  • a0eb073 Fix getScope() and broaden getType() classification (closes #122) (#200)
  • ec52105 Add networkForm() for CIDR network-address strings (#199)
  • a9443a7 Add isMapped4() predicate for IPv4-mapped IPv6 addresses (closes #62) (#198)
  • f01d742 Add address-property predicates (private, ULA, loopback, link-local, etc.) (#...
  • Additional commits viewable in compare view

Updates socks from 2.7.3 to 2.8.9

Release notes

Sourced from socks's releases.

2.8.9

No release notes provided.

2.8.8

No release notes provided.

2.8.6

No release notes provided.

2.8.5

No release notes provided.

2.8.4

No release notes provided.

2.8.3

No release notes provided.

2.8.2

No release notes provided.

2.8.1

Fixes issue with lock file in 2.7.3 and 2.8.0

Commits
Install script changes

This version adds prepublish script that runs during installation. Review the package contents before updating.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 6, 2026
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-8b8c83898a branch from e121b03 to 05eafccCompareMay 7, 2026 06:26
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-8b8c83898a branch from 05eafcc to 3e3c0a7CompareMay 26, 2026 04:38
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-8b8c83898a branch from 3e3c0a7 to 551c81eCompareMay 26, 2026 07:34
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-8b8c83898a branch from 551c81e to 4189e2eCompareJune 1, 2026 06:29
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-8b8c83898a branch from 4189e2e to fb351e7CompareJune 1, 2026 17:07
Bumps [ip-address](https://github.com/beaugunderson/ip-address) and [socks](https://github.com/JoshGlazebrook/socks). These dependencies needed to be updated together.
Updates `ip-address` from 9.0.5 to 10.2.0
- [Commits](beaugunderson/ip-address@v9.0.5...v10.2.0)
Updates `socks` from 2.7.3 to 2.8.9
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](JoshGlazebrook/socks@2.7.3...2.8.9)
---
updated-dependencies:
- dependency-name: ip-address
dependency-version: 10.2.0
dependency-type: indirect
- dependency-name: socks
dependency-version: 2.8.8
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-8b8c83898a branch from fb351e7 to 506dec3CompareJune 2, 2026 15:02
@vikrantpuppala

Copy link
Copy Markdown
Collaborator

Superseded by #390 (merged): overrides now pins ip-address: ^10.1.1 (the socks parent caps below the fix, so an override is required — see SECURITY-OVERRIDES.md). Already applied; closing.

@dependabot@github

dependabotBot commented on behalf of githubJul 14, 2026

Copy link
Copy Markdown
ContributorAuthor

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabotBot deleted the dependabot/npm_and_yarn/multi-8b8c83898a branch July 14, 2026 08:42
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@vikrantpuppala