Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 4 updates #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the production-dependencies group across 1 directory with 4 updates #8

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps the production-dependencies group with 4 updates in the / directory: express, moment-timezone, mysql2 and nodemailer.

Updates express from 4.21.2 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

4.22.0 / 2025-12-01

Commits

Updates moment-timezone from 0.5.48 to 0.6.0

Release notes

Sourced from moment-timezone's releases.

Release 0.6.0

  • Fixed and updated TypeScript definitions. #1132
    • Updated types to more accurately match the code implementation.
    • Added definitions for pre-built files (e.g. moment-timezone-with-data.js).

This release is a potential breaking change for TypeScript projects only. The types are now more accurate, but consumers might hit errors if they were relying on the more relaxed types.

No implementation code has changed in this release.

Changelog

Sourced from moment-timezone's changelog.

0.6.0 2025-05-25

  • Fixed and updated TypeScript definitions. #1132
    • Updated types to more accurately match the code implementation.
    • Added definitions for pre-built files (e.g. moment-timezone-with-data.js).

This release is a potential breaking change for TypeScript projects only. The types are now more accurate, but consumers might hit errors if they were relying on the more relaxed types.

No implementation code has changed in this release.

Commits
  • 92c6a36 Build moment-timezone 0.6.0
  • d2618cf Bump version to 0.6.0
  • d084bec changelog: Add missing PR links for data updates
  • 83784ed Merge pull request #1132 from moment/typescript-fixes
  • f159a57 Remove any type from input params definition
  • c6d84e9 Add type definitions for built files
  • c1215d4 Update type definitions to match the code implementation
  • a2ea5b6 Update typing tests to include missing use cases
  • See full diff in compare view

Updates mysql2 from 3.15.3 to 3.16.0

Release notes

Sourced from mysql2's releases.

v3.16.0

3.16.0 (2025-12-16)

Features

  • BaseConnection: add state getter to track connection lifecycle (#3958) (a394487)
Changelog

Sourced from mysql2's changelog.

3.16.0 (2025-12-16)

Features

  • BaseConnection: add state getter to track connection lifecycle (#3958) (a394487)
Commits
  • 45b9ff2 chore(master): release 3.16.0 (#3979)
  • a394487 feat(BaseConnection): add state getter to track connection lifecycle (#3958)
  • 79bdd46 build(deps): bump sass from 1.96.0 to 1.97.0 in /website (#3976)
  • b6c44a0 build(deps-dev): bump @​types/node from 25.0.1 to 25.0.2 in /website (#3977)
  • fb21e95 build(deps-dev): bump @​typescript-eslint/eslint-plugin (#3974)
  • 640513d build(deps): bump named-placeholders from 1.1.4 to 1.1.6 (#3973)
  • 279f97d build(deps-dev): bump @​types/node from 24.10.2 to 25.0.2 (#3972)
  • 815d057 build(deps-dev): bump @​eslint/js from 9.39.1 to 9.39.2 (#3971)
  • 632fef8 build(deps): bump iconv-lite from 0.7.0 to 0.7.1 (#3966)
  • 33bdee9 build(deps-dev): bump @​types/node from 24.10.2 to 25.0.1 in /website (#3969)
  • Additional commits viewable in compare view

Updates nodemailer from 7.0.11 to 7.0.12

Release notes

Sourced from nodemailer's releases.

v7.0.12

7.0.12 (2025-12-22)

Bug Fixes

  • added support for REQUIRETLS (#1793) (053ce6a)
  • use 8bit encoding for message/rfc822 attachments (adf8611)
Changelog

Sourced from nodemailer's changelog.

7.0.12 (2025-12-22)

Bug Fixes

  • added support for REQUIRETLS (#1793) (053ce6a)
  • use 8bit encoding for message/rfc822 attachments (adf8611)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
458e1fd 
…y with 4 updates

Bumps the production-dependencies group with 4 updates in the / directory: [express](https://github.com/expressjs/express), [moment-timezone](https://github.com/moment/moment-timezone), [mysql2](https://github.com/sidorares/node-mysql2) and [nodemailer](https://github.com/nodemailer/nodemailer).


Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.1)

Updates `moment-timezone` from 0.5.48 to 0.6.0
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.48...0.6.0)

Updates `mysql2` from 3.15.3 to 3.16.0
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.15.3...v3.16.0)

Updates `nodemailer` from 7.0.11 to 7.0.12
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v7.0.11...v7.0.12)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: moment-timezone
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mysql2
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nodemailer
  dependency-version: 7.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 29, 2025

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant