Skip to content

Bump the npm_and_yarn group across 1 directory with 12 updates#1

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/apps/api/npm_and_yarn-a678d471ed
Open

Bump the npm_and_yarn group across 1 directory with 12 updates#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/apps/api/npm_and_yarn-a678d471ed

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Aug 7, 2025 •
edited
Loading

Bumps the npm_and_yarn group with 12 updates in the /apps/api directory:

Package From To
express-handlebars 3.1.0 5.3.1
jsonwebtoken 8.5.1 9.0.0
multer 1.4.4 2.0.2
braces 2.3.2 3.0.3
nodemon 1.19.4 3.1.10
cookie 0.3.1 0.7.2
youch 2.2.2 3.3.4
@sentry/node 5.7.0 10.2.0
property-expr 1.5.1 2.0.6
yup 0.27.0 1.7.0
tmp 0.0.33 removed
eslint 6.8.0 9.32.0

Updates express-handlebars from 3.1.0 to 5.3.1

Release notes

Sourced from express-handlebars's releases.

v5.3.1

5.3.1 (2021-05-04)

Bug Fixes

  • add note about security (78c47a2)

v5.3.0

5.3.0 (2021-03-30)

Features

v5.2.1

5.2.1 (2021-02-16)

Bug Fixes

  • deps: update dependency handlebars to ^4.7.7 (1930523)

v5.2.0

5.2.0 (2020-10-23)

Features

  • allow views to be an array (a9f4aaa)

v5.1.0

5.1.0 (2020-07-16)

Features

v5.0.0

5.0.0 (2020-07-06)

Bug Fixes

... (truncated)

Changelog

Sourced from express-handlebars's changelog.

5.3.1 (2021-05-04)

Bug Fixes

  • add note about security (78c47a2)

5.3.0 (2021-03-30)

Features

5.2.1 (2021-02-16)

Bug Fixes

  • deps: update dependency handlebars to ^4.7.7 (1930523)

5.2.0 (2020-10-23)

Features

  • allow views to be an array (a9f4aaa)

5.1.0 (2020-07-16)

Features

5.0.0 (2020-07-06)

Bug Fixes

BREAKING CHANGES

  • Drop support for node versions below v10

4.0.6 (2020-07-06)

... (truncated)

Commits
  • 63e8010 chore(release): 5.3.1 [skip ci]
  • 78c47a2 fix: add note about security
  • 2cde11e chore: update package-lock.json
  • 9a6cf60 chore(deps): update devdependency eslint to ^7.25.0
  • fbc5681 Merge pull request #157 from express-handlebars/renovate/node-10.x
  • 1e2b967 chore(deps): update devdependency eslint-plugin-promise to ^5.1.0
  • 4bcc294 chore(deps): update devdependency eslint to ^7.24.0
  • 6ffb7ee chore(deps): update devdependency eslint-plugin-promise to v5
  • 8b9f920 chore(deps): update devdependency @​semantic-release/npm to ^7.1.1
  • b291a6b chore(deps): update node.js to >=v10.24.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by tonybrix, a new releaser for express-handlebars since your current version.


Updates jsonwebtoken from 8.5.1 to 9.0.0

Changelog

Sourced from jsonwebtoken's changelog.

9.0.0 - 2022-12-21

Breaking changes: See Migration from v8 to v9

Breaking changes

  • Removed support for Node versions 11 and below.
  • The verify() function no longer accepts unsigned tokens by default. ([834503079514b72264fd13023a3b8d648afd6a16]auth0/node-jsonwebtoken@8345030)
  • RSA key size must be 2048 bits or greater. ([ecdf6cc6073ea13a7e71df5fad043550f08d0fa6]auth0/node-jsonwebtoken@ecdf6cc)
  • Key types must be valid for the signing / verification algorithm

Security fixes

  • security: fixes Arbitrary File Write via verify function - CVE-2022-23529
  • security: fixes Insecure default algorithm in jwt.verify() could lead to signature validation bypass - CVE-2022-23540
  • security: fixes Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - CVE-2022-23541
  • security: fixes Unrestricted key type could lead to legacy keys usage - CVE-2022-23539
Commits
  • e1fa9dc Merge pull request from GHSA-8cf7-32gw-wr33
  • 5eaedbf chore(ci): remove github test actions job (#861)
  • cd4163e chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)
  • ecdf6cc fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...
  • 8345030 fix(sign&verify)!: Remove default none support from sign and verify met...
  • 7e6a86b Upload OpsLevel YAML (#849)
  • 74d5719 docs: update references vercel/ms references (#770)
  • d71e383 docs: document "invalid token" error
  • 3765003 docs: fix spelling in README.md: Peak -> Peek (#754)
  • a46097e docs: make decode impossible to discover before verify
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by julien.wollscheid, a new releaser for jsonwebtoken since your current version.


Updates multer from 1.4.4 to 2.0.2

Release notes

Sourced from multer's releases.

v2.0.2

Important

Full Changelog: expressjs/multer@v2.0.1...v2.0.2

v2.0.1

Important

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from multer's changelog.

2.0.2

2.0.1

2.0.0

1.4.5-lts.2

  • Fix out-of-band error event from busboy (#1177)

1.4.5-lts.1

  • No changes

1.4.4-lts.1

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for multer since your current version.


Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

  • The undocumented .makeRe method was removed
  • Require Node.js >= 8.3

Non-breaking changes

  • Caching was removed
Commits

Updates nodemon from 1.19.4 to 3.1.10

Release notes

Sourced from nodemon's releases.

v3.1.10

3.1.10 (2025-04-23)

Bug Fixes

v3.1.9

3.1.9 (2024-12-13)

Bug Fixes

  • maintain backward support for exitcrash (9c9de6e)

v3.1.8

3.1.8 (2024-12-13)

Bug Fixes

v3.1.7

3.1.7 (2024-09-20)

Bug Fixes

v3.1.6

3.1.6 (2024-09-19)

Bug Fixes

v3.1.5

3.1.5 (2024-09-17)

Bug Fixes

  • add missing ignore option to type defintion of config (#2224) (254c2ab)

v3.1.4

3.1.4 (2024-06-20)

... (truncated)

Commits

Updates cookie from 0.3.1 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse

0.4.2

  • pref: read value only when assigning in parse
  • pref: remove unnecessary regexp in parse

0.4.1

  • Fix maxAge option to reject invalid values

0.4.0

  • Add SameSite=None support
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates youch from 2.2.2 to 3.3.4

Commits

Updates @sentry/node from 5.7.0 to 10.2.0

Release notes

Sourced from @​sentry/node's releases.

10.2.0

Important Changes

  • feat(core): Add ignoreSpans option (#17078)

This release adds a new top-level Sentry.init option, ignoreSpans, that can be used as follows:

Sentry.init({
  ignoreSpans: [
    'partial match', // string matching on the span name
    /regex/, // regex matching on the span name
    {
      name: 'span name',
      op: /http.client/,
    },
  ],
});

Spans matching the filter criteria will not be recorded. Potential child spans of filtered spans will be re-parented, if possible.

  • feat(cloudflare,vercel-edge): Add support for OpenAI instrumentation (#17338)

Adds support for OpenAI manual instrumentation in @sentry/cloudflare and @sentry/vercel-edge.

To instrument the OpenAI client, wrap it with Sentry.instrumentOpenAiClient and set recording settings.

import * as Sentry from '@sentry/cloudflare';
import OpenAI from 'openai';
const openai = new OpenAI();
const client = Sentry.instrumentOpenAiClient(openai, { recordInputs: true, recordOutputs: true });
// use the wrapped client

  • ref(aws): Remove manual span creation (#17310)

The startTrace option is deprecated and will be removed in a future major version. If you want to disable tracing, set SENTRY_TRACES_SAMPLE_RATE to 0.0. instead. As of today, the flag does not affect traces anymore.

Other Changes

  • feat(astro): Streamline build logs (#17301)
  • feat(browser): Handles data URIs in chrome stack frames (#17292)
  • feat(core): Accumulate tokens for gen_ai.invoke_agent spans from child LLM calls (#17281)
  • feat(deps): Bump @​prisma/instrumentation from 6.12.0 to 6.13.0 (#17315)
  • feat(deps): Bump @​sentry/cli from 2.50.0 to 2.50.2 (#17316)
  • feat(deps): Bump @​sentry/rollup-plugin from 4.0.0 to 4.0.2 (#17317)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.2.0

Important Changes

  • feat(core): Add ignoreSpans option (#17078)

This release adds a new top-level Sentry.init option, ignoreSpans, that can be used as follows:

Sentry.init({
  ignoreSpans: [
    'partial match', // string matching on the span name
    /regex/, // regex matching on the span name
    {
      name: 'span name',
      op: /http.client/,
    },
  ],
});

Spans matching the filter criteria will not be recorded. Potential child spans of filtered spans will be re-parented, if possible.

  • feat(cloudflare,vercel-edge): Add support for OpenAI instrumentation (#17338)

Adds support for OpenAI manual instrumentation in @sentry/cloudflare and @sentry/vercel-edge.

To instrument the OpenAI client, wrap it with Sentry.instrumentOpenAiClient and set recording settings.

import * as Sentry from '@sentry/cloudflare';
import OpenAI from 'openai';
const openai = new OpenAI();
const client = Sentry.instrumentOpenAiClient(openai, { recordInputs: true, recordOutputs: true });
// use the wrapped client

  • ref(aws): Remove manual span creation (#17310)

The startTrace option is deprecated and will be removed in a future major version. If you want to disable tracing, set SENTRY_TRACES_SAMPLE_RATE to 0.0. instead. As of today, the flag does not affect traces anymore.

Other Changes

  • feat(astro): Streamline build logs (#17301)
  • feat(browser): Handles data URIs in chrome stack frames (#17292)
  • feat(core): Accumulate tokens for gen_ai.invoke_agent spans from child LLM calls (#17281)
  • feat(deps): Bump @​prisma/instrumentation from 6.12.0 to 6.13.0 (#17315)
  • feat(deps): Bump @​sentry/cli from 2.50.0 to 2.50.2 (#17316)

... (truncated)

Commits
  • 8e1c02a release: 10.2.0
  • 9a90e11 Merge pull request #17339 from getsentry/prepare-release/10.2.0
  • bcbb6af meta(changelog): Update changelog for 10.2.0
  • ed07836 feat(cloudflare,vercel-edge): Add support for OpenAI instrumentation (#17338)
  • ce66380 feat(react-router): Add support for Hydrogen with RR7 (#17145)
  • ac57eb1 ref(google-cloud-serverless): Add mechanism.type to captured errors (#17300)
  • 5ae054c ref(core): Add more specific exception mechanism for internal errors (#17253)
  • aab4276 feat(browser): Handles data URIs in chrome stack frames (#17292)
  • 82f0cf9 chore: Correct title for v8 changelog (#17329)
  • 50cce74 meta: Re-organize changelog to add v8 page (#17327)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by sentry-bot, a new releaser for @​sentry/node since your current version.


Updates property-expr from 1.5.1 to 2.0.6

Commits

Updates yup from 0.27.0 to 1.7.0

Release notes

Sourced from yup's releases.

v1 Because I finally got around to it

jquense/yup#1906

v1.0.0-beta.7

Fixes published artifacts for the main field

v1.0.0-beta.5 - partial fixes and cast migration path

Beta 5 fixes partial and deepPartial making it work correctly with lazy schema. Specifically the optionality is added after lazy is evaluated but before any other when conditions are added. This makes it consistent with other conditional schema, where runtime conditions always supersede previous schema configuration. This allows for optional overrides if necessary.

const person = object({
  name: string().required(),
  age: number().required(),
  legalGuardian:  string().when('age', {
    is: (age) => age != null && age < 18,
    then: (schema) => schema.required(),
  }),
});
const optionalPerson = person.partial()
person.cast({name: 'James', age: 6 }) // => TypeError legalGuardian required
// age is still required b/c it's applied after the partial
optionalPerson.cast({name: 'James',  age: 6 }) // => TypeError legalGuardian required

This works slightly differently for lazy which have no schema to "start" with:

const config = object({
  nameOrIdNumber:  lazy((value) => {
     if (typeof value === 'number') return number().required()
     return string().required()
  }),
});
const opti = config.partial()
config.cast({}) // => TypeError nameOrIdNumber is required
config.partial().cast({}) // => {}

Cast optionality migration path

A larger breaking change in v1 is the assertion of optionality during cast, making previous patterns like string().nullable().required() no longer possible. Generally this pattern is used when deserialized data is not valid to start, but will become valid through user input such as with an HTML form. v1 no longer allows this, but in order to make migration easier we've added an option to cast that mimics the previous behavior (not exactly but closely).

const name = string().required()
</tr></table>

... (truncated)

Changelog

Sourced from yup's changelog.

1.7.0 (2025-08-01)

Features

  • Implement standard schema interface (#2258) (ced5f51)
  • resolve ref params if present when describing (ef53030), closes #2276

1.6.1 (2024-12-17)

Bug Fixes

  • lazy validation errors thrown in builders should resolve async like other validations (c7d7f97)

1.6.0 (2024-12-16)

Features

1.5.0 (2024-12-03)

Bug Fixes

  • readme: some typos and update CustomizingErrors doc (#2163) (5c77e0d)

Features

  • Add exact and stripUnknown method to object() (adcdd8d)

... (truncated)

Commits
  • 12a8260 Publish v1.7.0
  • c042368 chore: patch release
  • ced5f51 feat: Implement standard schema interface (#2258)
  • 871a74f chore: fix CI
  • ef53030 feat: resolve ref params if present when describing
  • d00abc3 Publish v1.6.1
  • c7d7f97 fix: lazy validation errors thrown in builders should resolve async like othe...
  • f27fa44 Publish v1.6.0
  • 0d7c327 build: modernize stuff
  • 2b0f126 feat: expose LazySchema
  • Additional commits viewable in compare view

Removes tmp

Updates eslint from 6.8.0 to 9.32.0

Release notes

Sourced from eslint's releases.

v9.32.0

Features

  • 1245000 feat: support explicit resource management in core rules (#19828) (fnx)
  • 0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)

Bug Fixes

  • 960fd40 fix: Upgrade @​eslint/js (#19971) (Nicholas C. Zakas)
  • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
  • d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
  • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
  • 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)
  • 3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

Documentation

  • 86e7426 docs: Update README (GitHub Actions Bot)

Chores

  • 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
  • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
  • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
  • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
  • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
  • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)
  • e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)
  • 2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)
  • c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)

v9.31.0

Features

  • 35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)
  • a6a6325 feat: support explicit resource management in no-loop-func (#19895) (Milos Djermanovic)
  • 4682cdc feat: support explicit resource management in no-undef-init (#19894) (Milos Djermanovic)
  • 5848216 feat: support explicit resource management in init-declarations (#19893) (Milos Djermanovic)
  • bb370b8 feat: support explicit resource management in no-const-assign (#19892) (Milos Djermanovic)

Bug Fixes

  • 07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)
  • 28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)

Documentation

  • 664cb44 docs: Update README (GitHub Actions Bot)
  • 40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)
  • 5a0069d docs: Update README (GitHub Actions Bot)
  • fef04b5 docs: Update working on issues info (#19902) (Nicholas C. Zakas)

Chores

  • 3ddd454 chore: upgrade to @eslint/js@9.31.0 (#19935) (Francesco Trotta)
  • d5054e5 chore: package.json update for @​eslint/js release (Jenkins)
  • 0f4a378 chore: update eslint (#19933) (renovate[bot])
  • 76c2340 chore: bump mocha to v11 (#19917) (루밀LuMir)

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.32.0 - July 25, 2025

  • 960fd40 fix: Upgrade @​eslint/js (#19971) (Nicholas C. Zakas)
  • 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
  • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
  • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
  • d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
  • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
  • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
  • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
  • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
  • 86e7426 docs: Update README (GitHub Actions Bot)
  • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)

@dependabot
Bump the npm_and_yarn group across 1 directory with 12 updates
81fb4a1 
Bumps the npm_and_yarn group with 12 updates in the /apps/api directory:

| Package | From | To |
| --- | --- | --- |
| [express-handlebars](https://github.com/express-handlebars/express-handlebars) | `3.1.0` | `5.3.1` |
| [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `8.5.1` | `9.0.0` |
| [multer](https://github.com/expressjs/multer) | `1.4.4` | `2.0.2` |
| [braces](https://github.com/micromatch/braces) | `2.3.2` | `3.0.3` |
| [nodemon](https://github.com/remy/nodemon) | `1.19.4` | `3.1.10` |
| [cookie](https://github.com/jshttp/cookie) | `0.3.1` | `0.7.2` |
| [youch](https://github.com/poppinss/youch) | `2.2.2` | `3.3.4` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `5.7.0` | `10.2.0` |
| [property-expr](https://github.com/jquense/expr) | `1.5.1` | `2.0.6` |
| [yup](https://github.com/jquense/yup) | `0.27.0` | `1.7.0` |
| [tmp](https://github.com/raszi/node-tmp) | `0.0.33` | `removed` |
| [eslint](https://github.com/eslint/eslint) | `6.8.0` | `9.32.0` |



Updates `express-handlebars` from 3.1.0 to 5.3.1
- [Release notes](https://github.com/express-handlebars/express-handlebars/releases)
- [Changelog](https://github.com/express-handlebars/express-handlebars/blob/master/CHANGELOG.md)
- [Commits](express-handlebars/express-handlebars@v3.1.0...v5.3.1)

Updates `jsonwebtoken` from 8.5.1 to 9.0.0
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jsonwebtoken@v8.5.1...v9.0.0)

Updates `multer` from 1.4.4 to 2.0.2
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v1.4.4...v2.0.2)

Updates `braces` from 2.3.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/commits/3.0.3)

Updates `nodemon` from 1.19.4 to 3.1.10
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v1.19.4...v3.1.10)

Updates `cookie` from 0.3.1 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.3.1...v0.7.2)

Updates `youch` from 2.2.2 to 3.3.4
- [Release notes](https://github.com/poppinss/youch/releases)
- [Commits](https://github.com/poppinss/youch/commits)

Updates `@sentry/node` from 5.7.0 to 10.2.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@5.7.0...10.2.0)

Updates `property-expr` from 1.5.1 to 2.0.6
- [Changelog](https://github.com/jquense/expr/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jquense/expr/commits)

Updates `yup` from 0.27.0 to 1.7.0
- [Release notes](https://github.com/jquense/yup/releases)
- [Changelog](https://github.com/jquense/yup/blob/master/CHANGELOG.md)
- [Commits](jquense/yup@v0.27.0...v1.7.0)

Removes `tmp`

Updates `eslint` from 6.8.0 to 9.32.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v6.8.0...v9.32.0)

---
updated-dependencies:
- dependency-name: express-handlebars
  dependency-version: 5.3.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: jsonwebtoken
  dependency-version: 9.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: multer
  dependency-version: 2.0.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nodemon
  dependency-version: 3.1.10
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: youch
  dependency-version: 3.3.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/node"
  dependency-version: 10.2.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: property-expr
  dependency-version: 2.0.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: yup
  dependency-version: 1.7.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: tmp
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: eslint
  dependency-version: 9.32.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants