Bump the npm_and_yarn group across 1 directory with 9 updates - #95

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open

Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 20, 2025

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 9 updates in the / directory:

PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1

Updates tar from 6.0.1 to 6.2.1

Release notes

Sourced from tar's releases.

v6.1.13

6.1.13 (2022-12-07)

Dependencies

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

Documentation

Changelog

Sourced from tar's changelog.

Changelog

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

6.2

  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively deep folders.

6.1

  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)

... (truncated)

Commits

Updates brace-expansion from 1.1.11 to 1.1.12

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Updates debug from 3.2.6 to 3.2.7

Commits
Maintainer changes

This version was pushed to npm by qix, a new releaser for debug since your current version.


Updates hosted-git-info from 2.7.1 to 2.8.9

Changelog

Sourced from hosted-git-info's changelog.

2.8.9 (2021-04-07)

Bug Fixes

2.8.8 (2020-02-29)

Bug Fixes

  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66

2.8.7 (2020-02-26)

Bug Fixes

  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60

2.8.6 (2020-02-25)

2.8.5 (2019-10-07)

Bug Fixes

  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)

2.8.4 (2019-08-12)

... (truncated)

Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.


Updates minimatch from 3.0.4 to 3.1.2

Commits

Updates path-parse from 1.0.6 to 1.0.7

Commits

Updates semver from 5.6.0 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates y18n from 3.2.1 to 3.2.2

Release notes

Sourced from y18n's releases.

y18n y18n-v4.0.3

Bug Fixes

  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)

y18n y18n-v4.0.2

Bug Fixes

  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.


Updates yargs-parser from 5.0.0 to 5.0.1

Changelog

Sourced from yargs-parser's changelog.

5.0.0 (2017-02-18)

Bug Fixes

  • environment variables should take precedence over config file (#81) (76cee1f)

BREAKING CHANGES

  • environment variables will now override config files (args, env, config-file, config-object)

5.0.1 (2021-03-10)

Bug Fixes

4.2.1 (2017-01-02)

Bug Fixes

4.2.0 (2016-12-01)

Bug Fixes

  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)

Features

  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)

4.1.0 (2016-11-07)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 20, 2025
This was referenced Aug 20, 2025
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Bump the npm_and_yarn group across 1 directory with 9 updates - #95
Open
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open
Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubAug 20, 2025

Copy link


Copy Markdown

Contributor
Bumps the npm_and_yarn group with 9 updates in the / directory:
PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1
Updates tar from 6.0.1 to 6.2.1
Release notes
Sourced from tar's releases.
v6.1.13
6.1.13 (2022-12-07)
Dependencies
v6.1.12
6.1.12 (2022-10-31)
Bug Fixes
Documentation
Changelog
Sourced from tar's changelog.
Changelog
7.4
  • Deprecate onentry in favor of onReadEntry for clarity.
7.3
  • Add onWriteEntry option
7.2
  • DRY the command definitions into a single makeCommand method,
and update the type signatures to more appropriately infer the
return type from the options and arguments provided.
7.1
  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on
Unpack and Parser classes to be compatible with the
NodeJS.WritableStream type in the latest versions of
@types/node.
7.0
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid
interface
  • Add tree-shake friendly exports, like import('tar/create')
and import('tar/read-entry') to get individual functions or
classes.
  • Add chmod option that defaults to false, and deprecate
noChmod. That is, reverse the default option regarding
explicitly setting file system modes to match tar entry
settings.
  • Add processUmask option to avoid having to call
process.umask() when chmod: true (or noChmod: false) is
set.
6.2
  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively
deep folders.
6.1
  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)
... (truncated)
Commits

Updates brace-expansion from 1.1.11 to 1.1.12
Release notes
Sourced from brace-expansion's releases.
v1.1.12
  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8
juliangruber/brace-expansion@v1.1.11...v1.1.12
Commits

Updates debug from 3.2.6 to 3.2.7
Commits
Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates hosted-git-info from 2.7.1 to 2.8.9
Changelog
Sourced from hosted-git-info's changelog.
2.8.9 (2021-04-07)
Bug Fixes
2.8.8 (2020-02-29)
Bug Fixes
  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66
2.8.7 (2020-02-26)
Bug Fixes
  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60
2.8.6 (2020-02-25)
2.8.5 (2019-10-07)
Bug Fixes
  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)
2.8.4 (2019-08-12)
... (truncated)
Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates minimatch from 3.0.4 to 3.1.2
Commits

Updates path-parse from 1.0.6 to 1.0.7
Commits

Updates semver from 5.6.0 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
5.7
  • Add minVersion method
5.6
  • Move boolean loose param to an options object, with
backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with
the includePrerelease option flag.
5.5
  • Add version coercion capabilities
5.4
  • Add intersection checking
5.3
  • Add minSatisfying method
5.2
  • Add prerelease(v) that returns prerelease components
5.1
  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods
5.0
  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates y18n from 3.2.1 to 3.2.2
Release notes
Sourced from y18n's releases.
y18n y18n-v4.0.3
Bug Fixes
  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)
y18n y18n-v4.0.2
Bug Fixes
  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 5.0.1
Changelog
Sourced from yargs-parser's changelog.
5.0.0 (2017-02-18)
Bug Fixes
  • environment variables should take precedence over config file (#81) (76cee1f)
BREAKING CHANGES
  • environment variables will now override config files (args, env, config-file, config-object)
5.0.1 (2021-03-10)
Bug Fixes
4.2.1 (2017-01-02)
Bug Fixes
4.2.0 (2016-12-01)
Bug Fixes
  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)
Features
  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)
4.1.0 (2016-11-07)
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
labels
Aug 20, 2025

This was referenced Aug 20, 2025
 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the npm_and_yarn group across 1 directory with 9 updates - #95
Open
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open
Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubAug 20, 2025

Copy link


Copy Markdown

Contributor
Bumps the npm_and_yarn group with 9 updates in the / directory:
PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1
Updates tar from 6.0.1 to 6.2.1
Release notes
Sourced from tar's releases.
v6.1.13
6.1.13 (2022-12-07)
Dependencies
v6.1.12
6.1.12 (2022-10-31)
Bug Fixes
Documentation
Changelog
Sourced from tar's changelog.
Changelog
7.4
  • Deprecate onentry in favor of onReadEntry for clarity.
7.3
  • Add onWriteEntry option
7.2
  • DRY the command definitions into a single makeCommand method,
and update the type signatures to more appropriately infer the
return type from the options and arguments provided.
7.1
  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on
Unpack and Parser classes to be compatible with the
NodeJS.WritableStream type in the latest versions of
@types/node.
7.0
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid
interface
  • Add tree-shake friendly exports, like import('tar/create')
and import('tar/read-entry') to get individual functions or
classes.
  • Add chmod option that defaults to false, and deprecate
noChmod. That is, reverse the default option regarding
explicitly setting file system modes to match tar entry
settings.
  • Add processUmask option to avoid having to call
process.umask() when chmod: true (or noChmod: false) is
set.
6.2
  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively
deep folders.
6.1
  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)
... (truncated)
Commits

Updates brace-expansion from 1.1.11 to 1.1.12
Release notes
Sourced from brace-expansion's releases.
v1.1.12
  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8
juliangruber/brace-expansion@v1.1.11...v1.1.12
Commits

Updates debug from 3.2.6 to 3.2.7
Commits
Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates hosted-git-info from 2.7.1 to 2.8.9
Changelog
Sourced from hosted-git-info's changelog.
2.8.9 (2021-04-07)
Bug Fixes
2.8.8 (2020-02-29)
Bug Fixes
  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66
2.8.7 (2020-02-26)
Bug Fixes
  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60
2.8.6 (2020-02-25)
2.8.5 (2019-10-07)
Bug Fixes
  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)
2.8.4 (2019-08-12)
... (truncated)
Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates minimatch from 3.0.4 to 3.1.2
Commits

Updates path-parse from 1.0.6 to 1.0.7
Commits

Updates semver from 5.6.0 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
5.7
  • Add minVersion method
5.6
  • Move boolean loose param to an options object, with
backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with
the includePrerelease option flag.
5.5
  • Add version coercion capabilities
5.4
  • Add intersection checking
5.3
  • Add minSatisfying method
5.2
  • Add prerelease(v) that returns prerelease components
5.1
  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods
5.0
  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates y18n from 3.2.1 to 3.2.2
Release notes
Sourced from y18n's releases.
y18n y18n-v4.0.3
Bug Fixes
  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)
y18n y18n-v4.0.2
Bug Fixes
  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 5.0.1
Changelog
Sourced from yargs-parser's changelog.
5.0.0 (2017-02-18)
Bug Fixes
  • environment variables should take precedence over config file (#81) (76cee1f)
BREAKING CHANGES
  • environment variables will now override config files (args, env, config-file, config-object)
5.0.1 (2021-03-10)
Bug Fixes
4.2.1 (2017-01-02)
Bug Fixes
4.2.0 (2016-12-01)
Bug Fixes
  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)
Features
  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)
4.1.0 (2016-11-07)
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
labels
Aug 20, 2025

This was referenced Aug 20, 2025
 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the npm_and_yarn group across 1 directory with 9 updates - #95
Open
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open
Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubAug 20, 2025

Copy link


Copy Markdown

Contributor
Bumps the npm_and_yarn group with 9 updates in the / directory:
PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1
Updates tar from 6.0.1 to 6.2.1
Release notes
Sourced from tar's releases.
v6.1.13
6.1.13 (2022-12-07)
Dependencies
v6.1.12
6.1.12 (2022-10-31)
Bug Fixes
Documentation
Changelog
Sourced from tar's changelog.
Changelog
7.4
  • Deprecate onentry in favor of onReadEntry for clarity.
7.3
  • Add onWriteEntry option
7.2
  • DRY the command definitions into a single makeCommand method,
and update the type signatures to more appropriately infer the
return type from the options and arguments provided.
7.1
  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on
Unpack and Parser classes to be compatible with the
NodeJS.WritableStream type in the latest versions of
@types/node.
7.0
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid
interface
  • Add tree-shake friendly exports, like import('tar/create')
and import('tar/read-entry') to get individual functions or
classes.
  • Add chmod option that defaults to false, and deprecate
noChmod. That is, reverse the default option regarding
explicitly setting file system modes to match tar entry
settings.
  • Add processUmask option to avoid having to call
process.umask() when chmod: true (or noChmod: false) is
set.
6.2
  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively
deep folders.
6.1
  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)
... (truncated)
Commits

Updates brace-expansion from 1.1.11 to 1.1.12
Release notes
Sourced from brace-expansion's releases.
v1.1.12
  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8
juliangruber/brace-expansion@v1.1.11...v1.1.12
Commits

Updates debug from 3.2.6 to 3.2.7
Commits
Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates hosted-git-info from 2.7.1 to 2.8.9
Changelog
Sourced from hosted-git-info's changelog.
2.8.9 (2021-04-07)
Bug Fixes
2.8.8 (2020-02-29)
Bug Fixes
  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66
2.8.7 (2020-02-26)
Bug Fixes
  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60
2.8.6 (2020-02-25)
2.8.5 (2019-10-07)
Bug Fixes
  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)
2.8.4 (2019-08-12)
... (truncated)
Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates minimatch from 3.0.4 to 3.1.2
Commits

Updates path-parse from 1.0.6 to 1.0.7
Commits

Updates semver from 5.6.0 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
5.7
  • Add minVersion method
5.6
  • Move boolean loose param to an options object, with
backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with
the includePrerelease option flag.
5.5
  • Add version coercion capabilities
5.4
  • Add intersection checking
5.3
  • Add minSatisfying method
5.2
  • Add prerelease(v) that returns prerelease components
5.1
  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods
5.0
  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates y18n from 3.2.1 to 3.2.2
Release notes
Sourced from y18n's releases.
y18n y18n-v4.0.3
Bug Fixes
  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)
y18n y18n-v4.0.2
Bug Fixes
  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 5.0.1
Changelog
Sourced from yargs-parser's changelog.
5.0.0 (2017-02-18)
Bug Fixes
  • environment variables should take precedence over config file (#81) (76cee1f)
BREAKING CHANGES
  • environment variables will now override config files (args, env, config-file, config-object)
5.0.1 (2021-03-10)
Bug Fixes
4.2.1 (2017-01-02)
Bug Fixes
4.2.0 (2016-12-01)
Bug Fixes
  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)
Features
  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)
4.1.0 (2016-11-07)
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
labels
Aug 20, 2025

This was referenced Aug 20, 2025
 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Bump the npm_and_yarn group across 1 directory with 9 updates - #95
Open
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open
Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubAug 20, 2025

Copy link


Copy Markdown

Contributor
Bumps the npm_and_yarn group with 9 updates in the / directory:
PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1
Updates tar from 6.0.1 to 6.2.1
Release notes
Sourced from tar's releases.
v6.1.13
6.1.13 (2022-12-07)
Dependencies
v6.1.12
6.1.12 (2022-10-31)
Bug Fixes
Documentation
Changelog
Sourced from tar's changelog.
Changelog
7.4
  • Deprecate onentry in favor of onReadEntry for clarity.
7.3
  • Add onWriteEntry option
7.2
  • DRY the command definitions into a single makeCommand method,
and update the type signatures to more appropriately infer the
return type from the options and arguments provided.
7.1
  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on
Unpack and Parser classes to be compatible with the
NodeJS.WritableStream type in the latest versions of
@types/node.
7.0
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid
interface
  • Add tree-shake friendly exports, like import('tar/create')
and import('tar/read-entry') to get individual functions or
classes.
  • Add chmod option that defaults to false, and deprecate
noChmod. That is, reverse the default option regarding
explicitly setting file system modes to match tar entry
settings.
  • Add processUmask option to avoid having to call
process.umask() when chmod: true (or noChmod: false) is
set.
6.2
  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively
deep folders.
6.1
  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)
... (truncated)
Commits

Updates brace-expansion from 1.1.11 to 1.1.12
Release notes
Sourced from brace-expansion's releases.
v1.1.12
  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8
juliangruber/brace-expansion@v1.1.11...v1.1.12
Commits

Updates debug from 3.2.6 to 3.2.7
Commits
Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates hosted-git-info from 2.7.1 to 2.8.9
Changelog
Sourced from hosted-git-info's changelog.
2.8.9 (2021-04-07)
Bug Fixes
2.8.8 (2020-02-29)
Bug Fixes
  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66
2.8.7 (2020-02-26)
Bug Fixes
  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60
2.8.6 (2020-02-25)
2.8.5 (2019-10-07)
Bug Fixes
  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)
2.8.4 (2019-08-12)
... (truncated)
Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates minimatch from 3.0.4 to 3.1.2
Commits

Updates path-parse from 1.0.6 to 1.0.7
Commits

Updates semver from 5.6.0 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
5.7
  • Add minVersion method
5.6
  • Move boolean loose param to an options object, with
backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with
the includePrerelease option flag.
5.5
  • Add version coercion capabilities
5.4
  • Add intersection checking
5.3
  • Add minSatisfying method
5.2
  • Add prerelease(v) that returns prerelease components
5.1
  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods
5.0
  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates y18n from 3.2.1 to 3.2.2
Release notes
Sourced from y18n's releases.
y18n y18n-v4.0.3
Bug Fixes
  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)
y18n y18n-v4.0.2
Bug Fixes
  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 5.0.1
Changelog
Sourced from yargs-parser's changelog.
5.0.0 (2017-02-18)
Bug Fixes
  • environment variables should take precedence over config file (#81) (76cee1f)
BREAKING CHANGES
  • environment variables will now override config files (args, env, config-file, config-object)
5.0.1 (2021-03-10)
Bug Fixes
4.2.1 (2017-01-02)
Bug Fixes
4.2.0 (2016-12-01)
Bug Fixes
  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)
Features
  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)
4.1.0 (2016-11-07)
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
labels
Aug 20, 2025

This was referenced Aug 20, 2025
 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the npm_and_yarn group across 1 directory with 9 updates - #95
Open
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open
Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubAug 20, 2025

Copy link


Copy Markdown

Contributor
Bumps the npm_and_yarn group with 9 updates in the / directory:
PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1
Updates tar from 6.0.1 to 6.2.1
Release notes
Sourced from tar's releases.
v6.1.13
6.1.13 (2022-12-07)
Dependencies
v6.1.12
6.1.12 (2022-10-31)
Bug Fixes
Documentation
Changelog
Sourced from tar's changelog.
Changelog
7.4
  • Deprecate onentry in favor of onReadEntry for clarity.
7.3
  • Add onWriteEntry option
7.2
  • DRY the command definitions into a single makeCommand method,
and update the type signatures to more appropriately infer the
return type from the options and arguments provided.
7.1
  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on
Unpack and Parser classes to be compatible with the
NodeJS.WritableStream type in the latest versions of
@types/node.
7.0
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid
interface
  • Add tree-shake friendly exports, like import('tar/create')
and import('tar/read-entry') to get individual functions or
classes.
  • Add chmod option that defaults to false, and deprecate
noChmod. That is, reverse the default option regarding
explicitly setting file system modes to match tar entry
settings.
  • Add processUmask option to avoid having to call
process.umask() when chmod: true (or noChmod: false) is
set.
6.2
  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively
deep folders.
6.1
  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)
... (truncated)
Commits

Updates brace-expansion from 1.1.11 to 1.1.12
Release notes
Sourced from brace-expansion's releases.
v1.1.12
  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8
juliangruber/brace-expansion@v1.1.11...v1.1.12
Commits

Updates debug from 3.2.6 to 3.2.7
Commits
Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates hosted-git-info from 2.7.1 to 2.8.9
Changelog
Sourced from hosted-git-info's changelog.
2.8.9 (2021-04-07)
Bug Fixes
2.8.8 (2020-02-29)
Bug Fixes
  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66
2.8.7 (2020-02-26)
Bug Fixes
  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60
2.8.6 (2020-02-25)
2.8.5 (2019-10-07)
Bug Fixes
  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)
2.8.4 (2019-08-12)
... (truncated)
Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates minimatch from 3.0.4 to 3.1.2
Commits

Updates path-parse from 1.0.6 to 1.0.7
Commits

Updates semver from 5.6.0 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
5.7
  • Add minVersion method
5.6
  • Move boolean loose param to an options object, with
backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with
the includePrerelease option flag.
5.5
  • Add version coercion capabilities
5.4
  • Add intersection checking
5.3
  • Add minSatisfying method
5.2
  • Add prerelease(v) that returns prerelease components
5.1
  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods
5.0
  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates y18n from 3.2.1 to 3.2.2
Release notes
Sourced from y18n's releases.
y18n y18n-v4.0.3
Bug Fixes
  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)
y18n y18n-v4.0.2
Bug Fixes
  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 5.0.1
Changelog
Sourced from yargs-parser's changelog.
5.0.0 (2017-02-18)
Bug Fixes
  • environment variables should take precedence over config file (#81) (76cee1f)
BREAKING CHANGES
  • environment variables will now override config files (args, env, config-file, config-object)
5.0.1 (2021-03-10)
Bug Fixes
4.2.1 (2017-01-02)
Bug Fixes
4.2.0 (2016-12-01)
Bug Fixes
  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)
Features
  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)
4.1.0 (2016-11-07)
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
labels
Aug 20, 2025

This was referenced Aug 20, 2025
 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the npm_and_yarn group across 1 directory with 9 updates - #95
Open
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open
Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubAug 20, 2025

Copy link


Copy Markdown

Contributor
Bumps the npm_and_yarn group with 9 updates in the / directory:
PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1
Updates tar from 6.0.1 to 6.2.1
Release notes
Sourced from tar's releases.
v6.1.13
6.1.13 (2022-12-07)
Dependencies
v6.1.12
6.1.12 (2022-10-31)
Bug Fixes
Documentation
Changelog
Sourced from tar's changelog.
Changelog
7.4
  • Deprecate onentry in favor of onReadEntry for clarity.
7.3
  • Add onWriteEntry option
7.2
  • DRY the command definitions into a single makeCommand method,
and update the type signatures to more appropriately infer the
return type from the options and arguments provided.
7.1
  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on
Unpack and Parser classes to be compatible with the
NodeJS.WritableStream type in the latest versions of
@types/node.
7.0
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid
interface
  • Add tree-shake friendly exports, like import('tar/create')
and import('tar/read-entry') to get individual functions or
classes.
  • Add chmod option that defaults to false, and deprecate
noChmod. That is, reverse the default option regarding
explicitly setting file system modes to match tar entry
settings.
  • Add processUmask option to avoid having to call
process.umask() when chmod: true (or noChmod: false) is
set.
6.2
  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively
deep folders.
6.1
  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)
... (truncated)
Commits

Updates brace-expansion from 1.1.11 to 1.1.12
Release notes
Sourced from brace-expansion's releases.
v1.1.12
  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8
juliangruber/brace-expansion@v1.1.11...v1.1.12
Commits

Updates debug from 3.2.6 to 3.2.7
Commits
Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates hosted-git-info from 2.7.1 to 2.8.9
Changelog
Sourced from hosted-git-info's changelog.
2.8.9 (2021-04-07)
Bug Fixes
2.8.8 (2020-02-29)
Bug Fixes
  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66
2.8.7 (2020-02-26)
Bug Fixes
  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60
2.8.6 (2020-02-25)
2.8.5 (2019-10-07)
Bug Fixes
  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)
2.8.4 (2019-08-12)
... (truncated)
Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates minimatch from 3.0.4 to 3.1.2
Commits

Updates path-parse from 1.0.6 to 1.0.7
Commits

Updates semver from 5.6.0 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
5.7
  • Add minVersion method
5.6
  • Move boolean loose param to an options object, with
backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with
the includePrerelease option flag.
5.5
  • Add version coercion capabilities
5.4
  • Add intersection checking
5.3
  • Add minSatisfying method
5.2
  • Add prerelease(v) that returns prerelease components
5.1
  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods
5.0
  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates y18n from 3.2.1 to 3.2.2
Release notes
Sourced from y18n's releases.
y18n y18n-v4.0.3
Bug Fixes
  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)
y18n y18n-v4.0.2
Bug Fixes
  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 5.0.1
Changelog
Sourced from yargs-parser's changelog.
5.0.0 (2017-02-18)
Bug Fixes
  • environment variables should take precedence over config file (#81) (76cee1f)
BREAKING CHANGES
  • environment variables will now override config files (args, env, config-file, config-object)
5.0.1 (2021-03-10)
Bug Fixes
4.2.1 (2017-01-02)
Bug Fixes
4.2.0 (2016-12-01)
Bug Fixes
  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)
Features
  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)
4.1.0 (2016-11-07)
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
labels
Aug 20, 2025

This was referenced Aug 20, 2025
 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Bump the npm_and_yarn group across 1 directory with 9 updates - #95
Open
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Open
Bump the npm_and_yarn group across 1 directory with 9 updates#95
dependabot[bot] wants to merge 1 commit into
masterfrom 
dependabot/npm_and_yarn/npm_and_yarn-3e900259e5
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubAug 20, 2025

Copy link


Copy Markdown

Contributor
Bumps the npm_and_yarn group with 9 updates in the / directory:
PackageFromTo
tar6.0.16.2.1
brace-expansion1.1.111.1.12
debug3.2.63.2.7
hosted-git-info2.7.12.8.9
minimatch3.0.43.1.2
path-parse1.0.61.0.7
semver5.6.05.7.2
y18n3.2.13.2.2
yargs-parser5.0.05.0.1
Updates tar from 6.0.1 to 6.2.1
Release notes
Sourced from tar's releases.
v6.1.13
6.1.13 (2022-12-07)
Dependencies
v6.1.12
6.1.12 (2022-10-31)
Bug Fixes
Documentation
Changelog
Sourced from tar's changelog.
Changelog
7.4
  • Deprecate onentry in favor of onReadEntry for clarity.
7.3
  • Add onWriteEntry option
7.2
  • DRY the command definitions into a single makeCommand method,
and update the type signatures to more appropriately infer the
return type from the options and arguments provided.
7.1
  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on
Unpack and Parser classes to be compatible with the
NodeJS.WritableStream type in the latest versions of
@types/node.
7.0
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid
interface
  • Add tree-shake friendly exports, like import('tar/create')
and import('tar/read-entry') to get individual functions or
classes.
  • Add chmod option that defaults to false, and deprecate
noChmod. That is, reverse the default option regarding
explicitly setting file system modes to match tar entry
settings.
  • Add processUmask option to avoid having to call
process.umask() when chmod: true (or noChmod: false) is
set.
6.2
  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively
deep folders.
6.1
  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)
... (truncated)
Commits

Updates brace-expansion from 1.1.11 to 1.1.12
Release notes
Sourced from brace-expansion's releases.
v1.1.12
  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8
juliangruber/brace-expansion@v1.1.11...v1.1.12
Commits

Updates debug from 3.2.6 to 3.2.7
Commits
Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates hosted-git-info from 2.7.1 to 2.8.9
Changelog
Sourced from hosted-git-info's changelog.
2.8.9 (2021-04-07)
Bug Fixes
2.8.8 (2020-02-29)
Bug Fixes
  • #61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66
2.8.7 (2020-02-26)
Bug Fixes
  • Do not attempt to use url.URL when unavailable (2d0bb66), closes #61#62
  • Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60
2.8.6 (2020-02-25)
2.8.5 (2019-10-07)
Bug Fixes
  • updated pathmatch for gitlab (e8325b5), closes #51
  • updated pathmatch for gitlab (ffe056f)
2.8.4 (2019-08-12)
... (truncated)
Commits
  • 8d4b369 chore(release): 2.8.9
  • 29adfe5 fix: backport regex fix from #76
  • afeaefd chore(release): 2.8.8
  • 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
  • 7440afa chore(release): 2.8.7
  • 2d0bb66 fix: Do not attempt to use url.URL when unavailable
  • f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
  • e1b83df chore(release): 2.8.6
  • ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
  • 624fd6f chore(release): 2.8.5
  • Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates minimatch from 3.0.4 to 3.1.2
Commits

Updates path-parse from 1.0.6 to 1.0.7
Commits

Updates semver from 5.6.0 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
5.7
  • Add minVersion method
5.6
  • Move boolean loose param to an options object, with
backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with
the includePrerelease option flag.
5.5
  • Add version coercion capabilities
5.4
  • Add intersection checking
5.3
  • Add minSatisfying method
5.2
  • Add prerelease(v) that returns prerelease components
5.1
  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods
5.0
  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates y18n from 3.2.1 to 3.2.2
Release notes
Sourced from y18n's releases.
y18n y18n-v4.0.3
Bug Fixes
  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)
y18n y18n-v4.0.2
Bug Fixes
  • security: ensure entry exists for backport (#120) (b22c0df)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 5.0.1
Changelog
Sourced from yargs-parser's changelog.
5.0.0 (2017-02-18)
Bug Fixes
  • environment variables should take precedence over config file (#81) (76cee1f)
BREAKING CHANGES
  • environment variables will now override config files (args, env, config-file, config-object)
5.0.1 (2021-03-10)
Bug Fixes
4.2.1 (2017-01-02)
Bug Fixes
4.2.0 (2016-12-01)
Bug Fixes
  • inner objects in configs had their keys appended to top-level key when dot-notation was disabled (#72) (0b1b5f9)
Features
  • allow multiple arrays to be provided, rather than always combining (#71) (0f0fb2d)
4.1.0 (2016-11-07)
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
@dependabot
Bump the npm_and_yarn group across 1 directory with 9 updates
1930d63
Bumps the npm_and_yarn group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [tar](https://github.com/isaacs/node-tar) | `6.0.1` | `6.2.1` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` |
| [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` |
| [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0` | `5.0.1` |
Updates `tar` from 6.0.1 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.1...v6.2.1)
Updates `brace-expansion` from 1.1.11 to 1.1.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12)
Updates `debug` from 3.2.6 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.2.6...3.2.7)
Updates `hosted-git-info` from 2.7.1 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.7.1...v2.8.9)
Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)
Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)
Updates `semver` from 5.6.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.6.0...v5.7.2)
Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)
Updates `yargs-parser` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v5.0.0...v5.0.1)
---
updated-dependencies:
- dependency-name: tar
dependency-version: 6.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: brace-expansion
dependency-version: 1.1.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: debug
dependency-version: 3.2.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
dependency-version: 2.8.9
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: minimatch
dependency-version: 3.1.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: path-parse
dependency-version: 1.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: semver
dependency-version: 5.7.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: y18n
dependency-version: 3.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: yargs-parser
dependency-version: 5.0.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
javascript
Pull requests that update javascript code
labels
Aug 20, 2025

This was referenced Aug 20, 2025
 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

 Closed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants