Skip to content

Bump the npm-minor-patch group with 14 updates - #503

Merged
dannystaple merged 2 commits into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-7fa81b750b
Sep 22, 2026
Merged

dannystaple merged 2 commits into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-7fa81b750b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 14 updates:

Package From To
@types/node 26.5.1 26.6.1
markdown-it 15.0.1 15.0.2
moment 2.30.1 2.31.0
sass 1.104.0 1.104.1
webpack 5.110.3 5.111.0
webpack-bundle-analyzer 5.3.2 5.3.3
array-includes 3.1.9 3.2.0
baseline-browser-mapping 2.11.21 2.11.25
browserslist 4.28.9 4.29.0
electron-to-chromium 1.5.425 1.5.430
enhanced-resolve 5.24.5 5.25.1
schema-utils 4.4.0 4.5.0
update-browserslist-db 1.3.2 1.3.3
yaml 2.9.0 2.9.1

Updates @types/node from 26.5.1 to 26.6.1

Commits

Updates markdown-it from 15.0.1 to 15.0.2

Changelog

Sourced from markdown-it's changelog.

[15.0.2] - 2026-09-11

Security

  • Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.
Commits
  • 3c51991 15.0.2 released
  • cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
  • 1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
  • See full diff in compare view

Updates moment from 2.30.1 to 2.31.0

Release notes

Sourced from moment's releases.

2.31.0

Released Sep 14, 2026

Security fixes

Bug fixes

  • #6376 Prevent object prototype properties from being used as format tokens
  • #6386 Normalize lazy-loaded locale names
  • #6404 Fix parsing issue with eHHmm format
  • #6433 Ignore non-Moment arguments in min and max
  • #6434 Fix inherited lowercase long date formats
  • #6436 Reset locale parsing caches after updates
  • #6437 Fix weekday mismatch when the format only has part of a date
  • #6442 Fix locale('__proto__') corrupting the global locale
  • #6443 Avoid Object.assign in duration.humanize
  • #6446 Validate range when parsing a time zone offset
  • #6447 Include metadata in all-locales bundle
  • #6448 Apply postformat to locale relative time methods
  • #6450 Add stack traces to conditional deprecation warnings

New features

  • #6451 Add internal date-default hook for Moment Timezone
New locales

Updates to existing locales

  • #5404 Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time
  • #6197 Indonesian ('id'): Correct the abbreviation for August
  • #6217 Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct L date formats
  • #6289 Swedish ('sv'): Correct the abbreviation for Thursday
  • #6306 Catalan ('ca'): Use typographic apostrophes in relative time
  • #6347 Swahili ('sw'): Correct the spelling of hour in calendar output
  • #6360 Ukrainian ('uk'): Use ISO week numbering
  • #6370 Ukrainian ('uk'): Use U+02BC apostrophes in Friday names
  • #6371 Hungarian ('hu'): Preserve numeric values in relative seconds
  • #6391 Swahili ('sw'): Fix weekday and relative-time grammar
  • #6396 German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots
  • #6409 Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting
  • #6410 Polish ('pl'): Use genitive month names in dotted day formats
Changelog

Sourced from moment's changelog.

2.31.0

Released Sep 14, 2026

Security fixes

Bug fixes

  • #6376 Prevent object prototype properties from being used as format tokens
  • #6386 Normalize lazy-loaded locale names
  • #6404 Fix parsing issue with eHHmm format
  • #6433 Ignore non-Moment arguments in min and max
  • #6434 Fix inherited lowercase long date formats
  • #6436 Reset locale parsing caches after updates
  • #6437 Fix weekday mismatch when the format only has part of a date
  • #6442 Fix locale('__proto__') corrupting the global locale
  • #6443 Avoid Object.assign in duration.humanize
  • #6446 Validate range when parsing a time zone offset
  • #6447 Include metadata in all-locales bundle
  • #6448 Apply postformat to locale relative time methods
  • #6450 Add stack traces to conditional deprecation warnings

New features

  • #6451 Add internal date-default hook for Moment Timezone
New locales

Updates to existing locales

  • #5404 Portuguese (Brazil) ('pt-br'): Fix wrong plural usage for time
  • #6197 Indonesian ('id'): Correct the abbreviation for August
  • #6217 Georgian ('ka') and Dutch (Belgium) ('nl-be'): Correct L date formats
  • #6289 Swedish ('sv'): Correct the abbreviation for Thursday
  • #6306 Catalan ('ca'): Use typographic apostrophes in relative time
  • #6347 Swahili ('sw'): Correct the spelling of hour in calendar output
  • #6360 Ukrainian ('uk'): Use ISO week numbering
  • #6370 Ukrainian ('uk'): Use U+02BC apostrophes in Friday names
  • #6371 Hungarian ('hu'): Preserve numeric values in relative seconds
  • #6391 Swahili ('sw'): Fix weekday and relative-time grammar
  • #6396 German ('de', 'de-at', 'de-ch'): Parse short months without trailing dots
  • #6409 Uzbek ('uz', 'uz-latn'): Fix past relative-time formatting
  • #6410 Polish ('pl'): Use genitive month names in dotted day formats
Commits
  • 15b45d4 [pkg] Build 2.31.0 (#6452)
  • 631cd81 [pkg] Update changelog for upcoming release (#6394)
  • 6caff9e Merge commit from fork
  • 710703b [feature] Add internal date-default hook for Moment Timezone (#6451)
  • 863ed94 [bugfix] Add stack traces to conditional deprecation warnings (#6450)
  • 2c7abe1 [bugfix] Apply postformat to locale relative time methods (#6448)
  • 9c45ac3 [bugfix] Include metadata in all-locales bundle (#6447)
  • f6eefc5 [bugfix] Validate timezone offset range (#6446)
  • 136b441 [bugfix] Avoid Object.assign in duration.humanize (#6443)
  • 0d10504 [bugfix] Fix locale('proto') corrupting the global locale (#6442)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for moment since your current version.


Updates sass from 1.104.0 to 1.104.1

Release notes

Sourced from sass's releases.

Dart Sass 1.104.1

To install Sass 1.104.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

  • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

  • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

  • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.104.1

  • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

  • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

  • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

  • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

Commits
  • da84fb5 Fix --watch not recompiling sources modified during a compilation (#2850)
  • 8a287a7 Merge pull request #2859 from sass/fix-auto-merge
  • 6033b46 Add explicit versions to .github/util actions
  • cc71d43 Only auto-merge dependabot PRs once the tests pass
  • 49ddc4f Revert "Bump dart-lang/setup-dart in /.github/util/initialize"
  • 71a127d Avoid duplicating loud comments that appear before @use (#2854)
  • f19baab Merge pull request #2857 from sass/dependabot/github_actions/dot-github/util/...
  • f5263e2 Bump dart-lang/setup-dart in /.github/util/initialize
  • 3018c0d Merge pull request #2856 from sass/dependabot/github_actions/dart-lang/setup-...
  • 5d74adb Bump dart-lang/setup-dart from 1.8.0 to 1.8.1
  • Additional commits viewable in compare view

Updates webpack from 5.110.3 to 5.111.0

Release notes

Sourced from webpack's releases.

v5.111.0

Minor Changes

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.0

Minor Changes

Patch Changes

... (truncated)

Commits
  • 9256118 chore(release): new release (#21914)
  • 3ef9663 refactor: consolidate getter and value format of export fragment (#22100)
  • aff7c4c perf: emit less chunk-loading runtime (#22094)
  • e954b81 build(html): sweep the HTML printer for spelling-dependent output (#22097)
  • da4ad13 fix(css): replace a @​value named in an at-rule prelude only once (#22036)
  • df72840 perf(runtime): test the spec namespace cache slot for truthiness (#22098)
  • 4c80c99 fix(html): minify an attribute by what it says, not how it was spelled (#22095)
  • f6fd097 fix: release stale compilation data from nested children and idle watches (#2...
  • 55c9808 refactor(js): own the ECMAScript parser and drop the acorn dependency (#22042)
  • e1ab6f2 fix(html): escape a text run the tag after it would fuse with (#22086)
  • Additional commits viewable in compare view

Updates webpack-bundle-analyzer from 5.3.2 to 5.3.3

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.3.3

Patch Changes

  • Scope parsed module sources to the asset they were parsed from, so assets that reuse the same module IDs, or that share a module, no longer report each other's parsed and compressed sizes. (by @​Menny1337 in #734)
Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.3.3

Patch Changes

  • Scope parsed module sources to the asset they were parsed from, so assets that reuse the same module IDs, or that share a module, no longer report each other's parsed and compressed sizes. (by @​Menny1337 in #734)
Commits

Updates array-includes from 3.1.9 to 3.2.0

Changelog

Sourced from array-includes's changelog.

v3.2.0 - 2026-09-09

Commits

  • [Dev Deps] update eslint 08a42b9
  • [actions] update workflows 62cae6d
  • [New] add TypeScript type declarations fd446bc
  • [Fix] avoid relying on indexOf's HasProperty+Get semantics, unlike includes's bare Get 70ef118
  • [Tests] add some passing tests 50a2f40
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, epickvalmd, npmignore, tape a8702dc
  • [Fix] add includes to Array.prototype[Symbol.unscopables] 205cd61
  • [Dev Deps] update @arethetypeswrong/cli, @es-shims/api, @ljharb/eslint-config, auto-changelog, eslint, hasown 4cb3dec
  • [Deps] update call-bind, es-abstract, es-object-atoms 5b4468e
  • [Refactor] use math-intrinsics/max directly, instead of get-intrinsic e50a7ff
  • [readme] replace runkit CI badge with shields.io check-runs badge 5aed2b7
  • [Dev Deps] update @ljharb/eslint-config 2b23666
Commits
  • f5f45e2 v3.2.0
  • 08a42b9 [Dev Deps] update eslint
  • 4cb3dec [Dev Deps] update @arethetypeswrong/cli, @es-shims/api, `@ljharb/eslint-c...
  • 50a2f40 [Tests] add some passing tests
  • 205cd61 [Fix] add includes to Array.prototype[Symbol.unscopables]
  • fd446bc [New] add TypeScript type declarations
  • 70ef118 [Fix] avoid relying on indexOf's HasProperty+Get semantics, unlike `inc...
  • 62cae6d [actions] update workflows
  • 5b4468e [Deps] update call-bind, es-abstract, es-object-atoms
  • a8702dc [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, `epick...
  • Additional commits viewable in compare view

Updates baseline-browser-mapping from 2.11.21 to 2.11.25

Commits
  • 719bf7a Patch to 2.11.25 because browser or feature data changed
  • c4f5b49 Browser or feature data changed
  • aa194af Updating static site
  • 0d33c4a Patch to 2.11.24 because browser or feature data changed
  • 1dac891 Browser or feature data changed
  • aff3369 Updating static site
  • ebdc72f Patch to 2.11.23 because browser or feature data changed
  • 55fa3a1 Browser or feature data changed
  • 5ac60db Updating static site
  • af7c3c4 Patch to 2.11.22 because browser or feature data changed
  • Additional commits viewable in compare view

Updates browserslist from 4.28.9 to 4.29.0

Release notes

Sourced from browserslist's releases.

4.29.0

  • Added query continuations across lines and array entries (by @​fzlzjerry).
Changelog

Sourced from browserslist's changelog.

4.29.0

  • Added query continuations across lines and array entries (by @​fzlzjerry).
Commits
  • e6dd578 Release 4.29.0 version
  • 8987b7d Typo
  • 47fefe6 Move from actions-up to pnpm
  • 17b1e23 Update dependencies
  • df16b26 Merge pull request #944 from fzlzjerry/fix/757-query-continuations
  • a2673d7 Support query continuations across entries
  • f46a5b7 Merge pull request #942 from agilgur5/fix-docs-typo-security-table
  • 989c8c9 docs: fix typo in table rendering for SECURITY.md
  • See full diff in compare view

Updates electron-to-chromium from 1.5.425 to 1.5.430

Commits

Updates enhanced-resolve from 5.24.5 to 5.25.1

Release notes

Sourced from enhanced-resolve's releases.

v5.25.1

Patch Changes

v5.25.0

Minor Changes

Changelog

Sourced from enhanced-resolve's changelog.

5.25.1

Patch Changes

5.25.0

Minor Changes

Commits
  • e913bc5 chore(release): new release (#671)
  • a00ff09 fix: treat only a whole file: URL as one when parsing a request (#670)
  • 835c4fe chore(release): new release (#669)
  • 90e5106 feat: accept file: URL strings where a path is expected (#668)
  • b51c806 ci: fix the flaky "database is locked" failure in the Deno job (#666)
  • c3eee53 chore(deps): update dependencies and migrate to changesets v3 (#665)
  • 70f60e7 chore(deps): bump js-yaml (#664)
  • 1aa1fc3 chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0 (#663)
  • 3ad59cb chore(deps): bump the dependencies group across 1 directory with 2 updates (#...
  • 7070c25 chore(deps-dev): bump browserslist from 4.28.2 to 4.28.8 (#662)
  • Additional commits viewable in compare view

Updates schema-utils from 4.4.0 to 4.5.0

Release notes

Sourced from schema-utils's releases.

v4.5.0

Minor Changes

  • The absolutePath keyword reads a file: URL the way Node's own URL parser does: the scheme may be followed by any number of slashes, so file:/directory is accepted alongside file:///directory, and it is matched case-insensitively, so FILE:///directory is too. A scheme with no slash after it — file:directory — still names no absolute path and is rejected. (by @​alexander-akait in #226)
Changelog

Sourced from schema-utils's changelog.

4.5.0

Minor Changes

  • The absolutePath keyword reads a file: URL the way Node's own URL parser does: the scheme may be followed by any number of slashes, so file:/directory is accepted alongside file:///directory, and it is matched case-insensitively, so FILE:///directory is too. A scheme with no slash after it — file:directory — still names no absolute path and is rejected. (by @​alexander-akait in #226)
Commits

Updates update-browserslist-db from 1.3.2 to 1.3.3

Release notes

Sourced from update-browserslist-db's releases.

1.3.3

  • Fixed pnpm minimumReleaseAge compatibility.
Changelog

Sourced from update-browserslist-db's changelog.

1.3.3

  • Fixed pnpm minimumReleaseAge compatibility.
Commits

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

  • Limit recursive merge aliases (#685, #713)
  • Simplify line unfolding during quoted string parsing (#714)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.1` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.1` | `15.0.2` |
| [moment](https://github.com/moment/moment) | `2.30.1` | `2.31.0` |
| [sass](https://github.com/sass/dart-sass) | `1.104.0` | `1.104.1` |
| [webpack](https://github.com/webpack/webpack) | `5.110.3` | `5.111.0` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.3.2` | `5.3.3` |
| [array-includes](https://github.com/es-shims/array-includes) | `3.1.9` | `3.2.0` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.21` | `2.11.25` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.9` | `4.29.0` |
| [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) | `1.5.425` | `1.5.430` |
| [enhanced-resolve](https://github.com/webpack/enhanced-resolve) | `5.24.5` | `5.25.1` |
| [schema-utils](https://github.com/webpack/schema-utils) | `4.4.0` | `4.5.0` |
| [update-browserslist-db](https://github.com/browserslist/update-db) | `1.3.2` | `1.3.3` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |


Updates `@types/node` from 26.5.1 to 26.6.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `markdown-it` from 15.0.1 to 15.0.2
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@15.0.1...15.0.2)

Updates `moment` from 2.30.1 to 2.31.0
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.30.1...2.31.0)

Updates `sass` from 1.104.0 to 1.104.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.104.0...1.104.1)

Updates `webpack` from 5.110.3 to 5.111.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.110.3...v5.111.0)

Updates `webpack-bundle-analyzer` from 5.3.2 to 5.3.3
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.3.2...v5.3.3)

Updates `array-includes` from 3.1.9 to 3.2.0
- [Changelog](https://github.com/es-shims/array-includes/blob/main/CHANGELOG.md)
- [Commits](es-shims/array-includes@v3.1.9...v3.2.0)

Updates `baseline-browser-mapping` from 2.11.21 to 2.11.25
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.11.21...v2.11.25)

Updates `browserslist` from 4.28.9 to 4.29.0
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.9...4.29.0)

Updates `electron-to-chromium` from 1.5.425 to 1.5.430
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.425...v1.5.430)

Updates `enhanced-resolve` from 5.24.5 to 5.25.1
- [Release notes](https://github.com/webpack/enhanced-resolve/releases)
- [Changelog](https://github.com/webpack/enhanced-resolve/blob/main/CHANGELOG.md)
- [Commits](webpack/enhanced-resolve@v5.24.5...v5.25.1)

Updates `schema-utils` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/webpack/schema-utils/releases)
- [Changelog](https://github.com/webpack/schema-utils/blob/main/CHANGELOG.md)
- [Commits](webpack/schema-utils@v4.4.0...v4.5.0)

Updates `update-browserslist-db` from 1.3.2 to 1.3.3
- [Release notes](https://github.com/browserslist/update-db/releases)
- [Changelog](https://github.com/browserslist/update-db/blob/main/CHANGELOG.md)
- [Commits](browserslist/update-db@1.3.2...1.3.3)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: markdown-it
  dependency-version: 15.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: moment
  dependency-version: 2.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: sass
  dependency-version: 1.104.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: webpack
  dependency-version: 5.111.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: array-includes
  dependency-version: 3.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.25
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: browserslist
  dependency-version: 4.29.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: electron-to-chromium
  dependency-version: 1.5.430
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: enhanced-resolve
  dependency-version: 5.25.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: schema-utils
  dependency-version: 4.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: update-browserslist-db
  dependency-version: 1.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 19, 2026
@github-actions

github-actions Bot commented Sep 19, 2026 •

Copy link
Copy Markdown
Contributor

🔨 Webpack Bundle Smoke Test

Status ✅ Passed
Build Time 00:05.93
Bundle Size 485.9 KB

Updated: Tue, 22 Sep 2026 09:39:45 GMT

@github-actions

github-actions Bot commented Sep 19, 2026 •

Copy link
Copy Markdown
Contributor

✅⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 7 0 0 0.13s
⚠️ ACTION zizmor 7 1 0 0.42s
✅ BASH bash-exec 2 0 0 0.02s
✅ BASH shellcheck 2 0 0 0.14s
⚠️ BASH shfmt 2 1 0 0.01s
⚠️ C cppcheck 8 8 0 0.1s
⚠️ CPP cppcheck 8 8 0 0.1s
✅ JSON npm-package-json-lint yes no no 0.65s
✅ JSON v8r 17 0 0 8.19s
✅ REPOSITORY betterleaks yes no no 1.06s
✅ REPOSITORY git_diff yes no no 0.54s
✅ REPOSITORY grype yes no no 55.95s
✅ REPOSITORY osv-scanner yes no no 1.29s
✅ REPOSITORY secretlint yes no no 11.34s
✅ REPOSITORY syft yes no no 2.33s
✅ REPOSITORY trivy-sbom yes no no 1.37s
✅ REPOSITORY trufflehog yes no no 7.05s
✅ TYPESCRIPT ts-standard 3 0 0 5.52s
✅ XML xmllint 1 0 0 8.44s
✅ YAML v8r 15 0 0 8.35s

Detailed Issues

⚠️ C / cppcheck - 8 errors
Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
1/8 files checked 12% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
2/8 files checked 19% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
3/8 files checked 31% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
4/8 files checked 49% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
5/8 files checked 62% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
6/8 files checked 69% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
7/8 files checked 81% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
8/8 files checked 100% done
⚠️ CPP / cppcheck - 8 errors
Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
1/8 files checked 12% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
2/8 files checked 19% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
3/8 files checked 31% done
Checking assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
assets/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
4/8 files checked 49% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
5/8 files checked 62% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/alternative_demo/Motors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
6/8 files checked 69% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/DistanceSensor.h:3:1: error: Code 'classSR04{' is invalid C code. [syntaxError]
class SR04 {
^
7/8 files checked 81% done
Checking galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h ...
galleries/2013-11-14-explorer-wall-avoider-kit/demo_sketch/TurtleMotors.h:3:1: error: Code 'classMotor{' is invalid C code. [syntaxError]
class Motor {
^
8/8 files checked 100% done
⚠️ BASH / shfmt - 1 error
diff .github/scripts/validate-local-build.sh.orig .github/scripts/validate-local-build.sh
--- .github/scripts/validate-local-build.sh.orig
+++ .github/scripts/validate-local-build.sh
@@ -30,9 +30,9 @@
 echo ""
 echo "=== Step 1: Checking http_serve is running ==="
 if ! docker ps --format '{{.Names}}' | grep -q "^${HTTP_SERVE_CONTAINER}$"; then
-  echo "ERROR: ${HTTP_SERVE_CONTAINER} is not running."
-  echo "Start it with: docker compose --profile manual up -d http_serve"
-  exit 1
+    echo "ERROR: ${HTTP_SERVE_CONTAINER} is not running."
+    echo "Start it with: docker compose --profile manual up -d http_serve"
+    exit 1
 fi
 
 # ─── Step 2: Quick HTTP smoke check from host ─────────────────────────────────
@@ -39,17 +39,17 @@
 echo ""
 echo "=== Step 2: HTTP smoke checks (host -> port ${HOST_PORT}) ==="
 for path in "/" "/construction_guide.html" "/tags/arduino/"; do
-  status=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${HOST_PORT}${path}")
-  if [[ "$status" == "200" ]]; then
-    echo "  OK  ${path} -> ${status}"
-  else
-    echo "  FAIL ${path} -> ${status}"
-    SMOKE_FAILED=1
-  fi
+    status=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${HOST_PORT}${path}")
+    if [[ "$status" == "200" ]]; then
+        echo "  OK  ${path} -> ${status}"
+    else
+        echo "  FAIL ${path} -> ${status}"
+        SMOKE_FAILED=1
+    fi
 done
 if [[ -n "${SMOKE_FAILED:-}" ]]; then
-  echo "ERROR: Smoke checks failed."
-  exit 1
+    echo "ERROR: Smoke checks failed."
+    exit 1
 fi
 
 # ─── Step 3: Verify AVIF images are generated ────────────────────────────────
@@ -62,8 +62,8 @@
 echo "  Post body WebP: ${webp_count}"
 echo "  Thumbnail AVIF: ${thumb_avif}"
 if [[ "$avif_count" -eq 0 ]]; then
-  echo "ERROR: No AVIF images found in _site/assets/images. Was the build run?"
-  exit 1
+    echo "ERROR: No AVIF images found in _site/assets/images. Was the build run?"
+    exit 1
 fi
 
 # ─── Step 4: BDD tests ─────────────────────────────────────────────────────
@@ -71,14 +71,14 @@
 echo "=== Step 4: BDD tests (via Docker, network: ${DOCKER_NETWORK}) ==="
 
 docker run --rm \
-  --network "${DOCKER_NETWORK}" \
-  -e BASE_URL="${BASE_URL}" \
-  -v "${PROJECT_ROOT}/tests:/app/src/tests" \
-  -v "${PROJECT_ROOT}/package.json:/app/src/package.json" \
-  -v "${PROJECT_ROOT}/package-lock.json:/app/src/package-lock.json" \
-  -v "${PROJECT_ROOT}/cucumber.js:/app/src/cucumber.js" \
-  "${TEST_IMAGE}" \
-  npm run test:bdd
+    --network "${DOCKER_NETWORK}" \
+    -e BASE_URL="${BASE_URL}" \
+    -v "${PROJECT_ROOT}/tests:/app/src/tests" \
+    -v "${PROJECT_ROOT}/package.json:/app/src/package.json" \
+    -v "${PROJECT_ROOT}/package-lock.json:/app/src/package-lock.json" \
+    -v "${PROJECT_ROOT}/cucumber.js:/app/src/cucumber.js" \
+    "${TEST_IMAGE}" \
+    npm run test:bdd
 
 echo ""
 echo "=== Validation complete ==="
⚠️ ACTION / zizmor - 1 error
INFO zizmor: 🌈 zizmor v1.25.0
 WARN audit:audit{input=Workflow(file://.github/workflows/on_call_build_site.yaml)}: zizmor::audit::unpinned_uses: failed to look up commit for docker/setup-buildx-action@v4.3.0: couldn't list branches for docker/setup-buildx-action
fatal: no audit was performed
'artipacked' audit failed on file://.github/workflows/on_call_build_site.yaml

Caused by:
    0: error in 'artipacked' audit
    1: couldn't list tags for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)


[ACTION_ZIZMOR_ERROR_GITHUB_API_UNREACHABLE] Zizmor could not access a repository referenced by a `uses:` clause via the GitHub API (missing token, insufficient scope, or cross-repo private access).
To allow zizmor to authenticate with GITHUB_TOKEN (or a PAT with `Contents: read-only`), whitelist the variable in your .mega-linter.yml:
ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES:
  - GITHUB_TOKEN
If the referenced workflow is in a private repo outside the current one, provide a PAT with cross-repo access instead of the default GITHUB_TOKEN, or run zizmor in offline mode.

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,C_CPPCHECK,CPP_CPPCHECK,JSON_V8R,JSON_NPM_PACKAGE_JSON_LINT,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,TYPESCRIPT_STANDARD,XML_XMLLINT,YAML_V8R

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Sep 19, 2026 •

Copy link
Copy Markdown
Contributor

🏗️ Eleventy Site Build Smoke Test

Status ✅ Passed
Build Time 08:57.14
Site Size 341.2 MB
HTML Files 1418

Updated: Tue, 22 Sep 2026 09:48:51 GMT

@github-actions

Copy link
Copy Markdown
Contributor

🐳 Docker Base Image Available

A new base Docker image has been built and pushed for this PR:

Image: ghcr.io/orionrobots/orionrobots-site.base:503

How to use this image:

# Pull the image
docker pull ghcr.io/orionrobots/orionrobots-site.base:503

# Run with the image
docker run -it ghcr.io/orionrobots/orionrobots-site.base:503 bash

For local development:

You can use this image as a base for testing changes without rebuilding dependencies.

This comment is automatically updated when the base image is rebuilt.

@dannystaple
dannystaple merged commit 3620b35 into master Sep 22, 2026
13 checks passed
@dannystaple
dannystaple deleted the dependabot/npm_and_yarn/npm-minor-patch-7fa81b750b branch September 22, 2026 13:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant