Skip to content

Comments

Bump qs, chromedriver, cypress, http-server, jsdom, json-server, less, nightwatch and node-sass in /public/swagger-ui#97

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/public/swagger-ui/multi-f1665cda77
Open

Bump qs, chromedriver, cypress, http-server, jsdom, json-server, less, nightwatch and node-sass in /public/swagger-ui#97
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/public/swagger-ui/multi-f1665cda77

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 14, 2026

Bumps qs to 6.14.2 and updates ancestor dependencies qs, chromedriver, cypress, http-server, jsdom, json-server, less, nightwatch and node-sass. These dependencies need to be updated together.

Updates qs from 6.14.0 to 6.14.2

Changelog

Sourced from qs's changelog.

6.14.2

  • [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
  • [Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
  • [Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)
  • [Fix] parse: enforce arrayLimit on comma-parsed values
  • [Fix] parse: fix error message to reflect arrayLimit as max index; remove extraneous comments (#545)
  • [Robustness] avoid .push, use void
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [meta] fix changelog typo (arrayLength → arrayLimit)
  • [actions] fix rebase workflow permissions

6.14.1

  • [Fix] ensure arrayLimit applies to [] notation as well
  • [Fix] parse: when a custom decoder returns null for a key, ignore that key
  • [Refactor] parse: extract key segment splitting helper
  • [meta] add threat model
  • [actions] add workflow permissions
  • [Tests] stringify: increase coverage
  • [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect
Commits
  • bdcf0c7 v6.14.2
  • 294db90 [readme] document that addQueryPrefix does not add ? to empty output
  • 5c308e5 [readme] clarify parseArrays and arrayLimit documentation
  • 6addf8c [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit
  • cfc108f [Fix] arrayLimit means max count, not max index, in combine/merge/`pars...
  • febb644 [Fix] parse: throw on arrayLimit exceeded with indexed notation when `thr...
  • f6a7abf [Fix] parse: enforce arrayLimit on comma-parsed values
  • fbc5206 [Fix] parse: fix error message to reflect arrayLimit as max index; remove e...
  • 1b9a8b4 [actions] fix rebase workflow permissions
  • 2a35775 [meta] fix changelog typo (arrayLength → arrayLimit)
  • Additional commits viewable in compare view

Updates chromedriver from 2.46.0 to 145.0.3

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chromedriver since your current version.

Install script changes

This version adds install script that runs during installation. Review the package contents before updating.


Updates cypress from 3.6.0 to 15.10.0

Release notes

Sourced from cypress's releases.

v15.10.0

Changelog: https://docs.cypress.io/app/references/changelog#15-10-0

v15.9.0

Changelog: https://docs.cypress.io/app/references/changelog#15-9-0

v15.8.2

Changelog: https://docs.cypress.io/app/references/changelog#15-8-2

v15.8.1

Changelog: https://docs.cypress.io/app/references/changelog#15-8-1

v15.8.0

Changelog: https://docs.cypress.io/app/references/changelog#15-8-0

v15.7.1

Changelog: https://docs.cypress.io/app/references/changelog#15-7-1

v15.7.0

Changelog: https://docs.cypress.io/app/references/changelog#15-7-0

v15.6.0

Changelog: https://docs.cypress.io/app/references/changelog#15-6-0

v15.5.0

Changelog: https://docs.cypress.io/app/references/changelog#15-5-0

v15.4.0

Changelog: https://docs.cypress.io/app/references/changelog#15-4-0

v15.3.0

Changelog: https://docs.cypress.io/app/references/changelog#15-3-0

v15.2.0

Changelog: https://docs.cypress.io/app/references/changelog#15-2-0

v15.1.0

Changelog: https://docs.cypress.io/app/references/changelog#15-1-0

v15.0.0

Changelog: https://docs.cypress.io/app/references/changelog#15-0-0

v14.5.4

Changelog: https://docs.cypress.io/app/references/changelog#14-5-4

v14.5.3

Changelog: https://docs.cypress.io/app/references/changelog#14-5-3

v14.5.2

Changelog: https://docs.cypress.io/app/references/changelog#14-5-2

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by cypress-npm-publisher, a new releaser for cypress since your current version.

Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.


Updates http-server from 0.11.1 to 0.11.2

Release notes

Sourced from http-server's releases.

v0.11.2: Security update

Upgrades several dependencies to avoid security vulnerabilities, especially as mentioned in #707.

Commits
Maintainer changes

This version was pushed to npm by thornjad, a new releaser for http-server since your current version.


Updates jsdom from 11.12.0 to 28.0.0

Release notes

Sourced from jsdom's releases.

Version 28.0.0

  • Overhauled resource loading customization. See the new README for details on the new API.
  • Added MIME type sniffing to <iframe> and <frame> loads.
  • Regression: WebSockets are no longer correctly throttled to one connection per origin. This is a result of the bug at nodejs/undici#4743.
  • Fixed decoding of the query components of <a> and <area> elements in non-UTF-8 documents.
  • Fixed XMLHttpRequest fetches and WebSocket upgrade requests to be interceptable by the new customizable resource loading. (Except synchronous XMLHttpRequests.)
  • Fixed the referrer of a document to be set correctly when redirects are involved; it is now the initiating page, not the last hop in the redirect chain.
  • Fixed correctness bugs when passing ArrayBuffers or typed arrays to various APIs, where they would not correctly snapshot the data.
  • Fixed require("url").parse() deprecation warning when using WebSockets.
  • Fixed <iframe>, <frame>, and <img> (when canvas is installed) to fire load events, not error events, on non-OK HTTP responses.
  • Fixed many small issues in XMLHttpRequest.

Version 27.4.0

  • Added TextEncoder and TextDecoder.
  • Improved decoding of HTML bytes by using the new @exodus/bytes package; it is now much more correct. (ChALkeR)
  • Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <meta charset> or using the parent frame's encoding.
  • Fixed a memory leak when Ranges were used and then the elements referred to by those ranges were removed.

Version 27.3.0

  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)

Version 27.2.0

  • Added CSSGroupingRule, CSSNestedDeclarations, CSSConditionRule, CSSContainerRule, CSSScopeRule, CSSSupportsRule, CSSLayerBlockRule, and CSSLayerStatementRule to jsdom Windows. (acemir)
  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)
  • Fixed @import-ed stylesheets to be properly exposed to CSSOM, and not to overwrite the sheet created from the <link> or <style> element. (acemir)

Version 27.1.0

  • Improved CSS parsing by switching to @acemir/cssom, including support for nested selectors, nested declarations, layer statements, and improved at-rule validation. (acemir)
  • Fixed some selector cache invalidation issues where changes to attributes were not being picked up. (asamuzaK)
  • Fixed package.json "engines" field to reflect the new minimum Node.js versions needed to run jsdom, as noted in the changelog for v27.0.1.

Version 27.0.1

This release inadvertently raised the minimum Node.js version from v20.0.0 to v20.19.0+, v22.12.0+, v24.0.0+. (This happened via a dependency update.) This probably should have been a breaking (major) change, instead of happening in a patch version, since it prevents using earlier Node.js versions.

After further testing, we found that most of our development dependencies also require these versions, and so it's not feasible for the jsdom project to support earlier Node.js versions. (For example, our testing frameworks will not run on them.) If you need to use such earlier versions, or otherwise are working in an environment which gives related errors such as ERR_REQUIRE_ESM, then please stick with the v26.1.0 release of jsdom. (Noting, of course, that such versions are unsupported, and we will not respond to bug reports opened against them.)

Subsequent jsdom releases will explicitly require these minimum Node.js versions, and will have CI testing to ensure that the minimum version is not accidentally raised again.

Normal changelog:

  • Fixed some regressions in CSS selectors. Most such regression fixes were done in a minor update of a dependency, and thus available for all fresh installs of v27.0.0. However, one related to class="" attribute changes is only possible with a new version of jsdom. (asamuzaK)

Version 27.0.0

Changes since 26.1.0

  • Node.js v20 is now the minimum supported version.
  • Added a variety of event constructors, even though we do not implement their associated specifications or ever fire them: BeforeUnloadEvent, BlobEvent, DeviceMotionEvent (omitting requestPermission()), DeviceOrientationEvent (omitting requestPermission()), PointerEvent, PromiseRejectionEvent, and TransitionEvent.
  • Added movementX and movementY to MouseEvent. (These are from the Pointer Lock specification, the rest of which is not implemented.)
  • Added customElements.getName(). (mash-graz)
  • Updated the virtual console:

... (truncated)

Changelog

Sourced from jsdom's changelog.

28.0.0

  • Overhauled resource loading customization. See the new README for details on the new API.
  • Added MIME type sniffing to <iframe> and <frame> loads.
  • Regression: WebSockets are no longer correctly throttled to one connection per origin. This is a result of the bug at nodejs/undici#4743.
  • Fixed decoding of the query components of <a> and <area> elements in non-UTF-8 documents.
  • Fixed XMLHttpRequest fetches and WebSocket upgrade requests to be interceptable by the new customizable resource loading. (Except synchronous XMLHttpRequests.)
  • Fixed the referrer of a document to be set correctly when redirects are involved; it is now the initiating page, not the last hop in the redirect chain.
  • Fixed correctness bugs when passing ArrayBuffers or typed arrays to various APIs, where they would not correctly snapshot the data.
  • Fixed require("url").parse() deprecation warning when using WebSockets.
  • Fixed <iframe>, <frame>, and <img> (when canvas is installed) to fire load events, not error events, on non-OK HTTP responses.
  • Fixed many small issues in XMLHttpRequest.

27.4.0

  • Added TextEncoder and TextDecoder.
  • Improved decoding of HTML bytes by using the new @exodus/bytes package; it is now much more correct. (ChALkeR)
  • Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <meta charset> or using the parent frame's encoding.
  • Fixed a memory leak when Ranges were used and then the elements referred to by those ranges were removed.

27.3.0

  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)

27.2.0

  • Added CSSGroupingRule, CSSNestedDeclarations, CSSConditionRule, CSSContainerRule, CSSScopeRule, CSSSupportsRule, CSSLayerBlockRule, and CSSLayerStatementRule to jsdom Windows. (acemir)
  • Improved CSS parsing and CSSOM object APIs via updates to @acemir/cssom. (acemir)
  • Fixed @import-ed stylesheets to be properly exposed to CSSOM, and not to overwrite the sheet created from the <link> or <style> element. (acemir)

27.1.0

  • Improved CSS parsing by switching to @acemir/cssom, including support for nested selectors, nested declarations, layer statements, and improved at-rule validation. (acemir)
  • Fixed some selector cache invalidation issues where changes to attributes were not being picked up. (asamuzaK)
  • Fixed package.json "engines" field to reflect the new minimum Node.js versions needed to run jsdom, as noted in the changelog for v27.0.1.

27.0.1

This release inadvertently raised the minimum Node.js version from v20.0.0 to v20.19.0+, v22.12.0+, v24.0.0+. (This happened via a dependency update.) This probably should have been a breaking (major) change, instead of happening in a patch version, since it prevents using earlier Node.js versions.

After further testing, we found that most of our development dependencies also require these versions, and so it's not feasible for the jsdom project to support earlier Node.js versions. (For example, our testing frameworks will not run on them.) If you need to use such earlier versions, or otherwise are working in an environment which gives related errors such as ERR_REQUIRE_ESM, then please stick with the v26.1.0 release of jsdom. (Noting, of course, that such versions are unsupported, and we will not respond to bug reports opened against them.)

Subsequent jsdom releases will explicitly require these minimum Node.js versions, and will have CI testing to ensure that the minimum version is not accidentally raised again.

Normal changelog:

  • Fixed some regressions in CSS selectors. Most such regression fixes were done in a minor update of a dependency, and thus available for all fresh installs of v27.0.0. However, one related to class="" attribute changes is only possible with a new version of jsdom. (asamuzaK)

27.0.0

... (truncated)

Commits
  • 20f614d Version 28.0.0
  • 2b65c6a Replace the resource loader API
  • 638bd68 Decode <a> and <area> query strings using document's encoding
  • 457bd4b Add AGENTS.md (and CLAUDE.md)
  • bf1dc15 Mark header-values tests as fail-slow due to Node.js bug
  • 92f269e Update dependencies and dev dependencies
  • 7d6e667 Improve spec alignment of Headers and header type tests
  • 2c29aed Fix Windows-specific task kill timeouts
  • d941216 Add failing regression test for animation-name case-sensitivity
  • 56a833d Update style benchmark
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates json-server from 0.15.0 to 1.0.0-beta.5

Release notes

Sourced from json-server's releases.

v1.0.0-beta.5

What's Changed

Full Changelog: typicode/json-server@v1.0.0-beta.4...v1.0.0-beta.5

v1.0.0-beta.4

What's Changed

New Contributors

Full Changelog: typicode/json-server@v1.0.0-beta.3...v1.0.0-beta.4

v1.0.0-beta.3

  • fix: allow any request header in CORS
  • chore: update all dependencies

v1.0.0-beta.2

  • fix: allow multiple conditions for filtering (e.g. views_gt=100&views_lt=500)

v1.0.0-beta.1

What's Changed

New Contributors

Full Changelog: typicode/json-server@v1.0.0-beta.0...v1.0.0-beta.1

v1.0.0-beta.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for json-server since your current version.


Updates less from 3.9.0 to 3.13.1

Changelog

Sourced from less's changelog.

v3.13.1 (2020-12-18)

v3.13.0 (2020-12-12)

v3.12.2 (2020-07-16)

v3.12.1 (2020-07-16)

v3.12.0 (2020-07-13)

v3.11.3 (2020-06-05)

v3.11.2 (2020-06-01)

v3.11.1 (2020-02-11)

v3.11.0 (2020-02-09)

... (truncated)

Commits

Updates nightwatch from 1.7.13 to 3.15.0

Release notes

Sourced from nightwatch's releases.

v3.15.0

What's Changed

New Contributors

Full Changelog: nightwatchjs/nightwatch@v3.14.0...v3.15.0

v3.14.0

What's Changed

New Contributors

Full Changelog: nightwatchjs/nightwatch@v3.13.0...v3.14.0

v3.13.0

What's Changed

New Contributors

Full Changelog: nightwatchjs/nightwatch@v3.12.3...v3.13.0

v3.12.3

What's Changed

New Contributors

Full Changelog: nightwatchjs/nightwatch@v3.12.2...v3.12.3

v3.12.2

What's Changed

New Contributors

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by garg3133, a new releaser for nightwatch since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates node-sass from 7.0.0 to 9.0.0

Release notes

Sourced from node-sass's releases.

v9.0.0

What's Changed

Breaking changes

Supported Environments

OS Architecture Node
Windows x86 & x64 16, 18, 19, 20
OSX x64 16, 18, 19, 20
Linux* x64 16, 18, 19, 20
Alpine Linux x64 16, 18, 19, 20

*Linux support refers to major distributions like Ubuntu, and Debian

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

  • Bump true-case-path@2.2.1
  • Bump node-gyp @​9.0.0
  • Bump nan@^2.17.0
  • Bump sass-graph@^4.0.1

Misc

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency ...

Description has been truncated

@dependabot
Bump qs, chromedriver, cypress, http-server, jsdom, json-server, less…
6db09a6 
…, nightwatch and node-sass

Bumps [qs](https://github.com/ljharb/qs) to 6.14.2 and updates ancestor dependencies [qs](https://github.com/ljharb/qs), [chromedriver](https://github.com/giggio/node-chromedriver), [cypress](https://github.com/cypress-io/cypress), [http-server](https://github.com/http-party/http-server), [jsdom](https://github.com/jsdom/jsdom), [json-server](https://github.com/typicode/json-server), [less](https://github.com/less/less.js), [nightwatch](https://github.com/nightwatchjs/nightwatch) and [node-sass](https://github.com/sass/node-sass). These dependencies need to be updated together.


Updates `qs` from 6.14.0 to 6.14.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.0...v6.14.2)

Updates `chromedriver` from 2.46.0 to 145.0.3
- [Commits](giggio/node-chromedriver@2.46.0...145.0.3)

Updates `cypress` from 3.6.0 to 15.10.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/cypress-io/cypress/compare/@cypress/webpack-dev-server-v3.6.0...v15.10.0)

Updates `http-server` from 0.11.1 to 0.11.2
- [Release notes](https://github.com/http-party/http-server/releases)
- [Commits](http-party/http-server@0.11.1...v0.11.2)

Updates `jsdom` from 11.12.0 to 28.0.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](jsdom/jsdom@11.12.0...28.0.0)

Updates `json-server` from 0.15.0 to 1.0.0-beta.5
- [Release notes](https://github.com/typicode/json-server/releases)
- [Commits](typicode/json-server@v0.15.0...v1.0.0-beta.5)

Updates `less` from 3.9.0 to 3.13.1
- [Release notes](https://github.com/less/less.js/releases)
- [Changelog](https://github.com/less/less.js/blob/master/CHANGELOG.md)
- [Commits](less/less.js@v3.9.0...v3.13.1)

Updates `nightwatch` from 1.7.13 to 3.15.0
- [Release notes](https://github.com/nightwatchjs/nightwatch/releases)
- [Commits](nightwatchjs/nightwatch@v1.7.13...v3.15.0)

Updates `node-sass` from 7.0.0 to 9.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v7.0.0...v9.0.0)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
- dependency-name: chromedriver
  dependency-version: 145.0.3
  dependency-type: direct:development
- dependency-name: cypress
  dependency-version: 15.10.0
  dependency-type: direct:development
- dependency-name: http-server
  dependency-version: 0.11.2
  dependency-type: direct:development
- dependency-name: jsdom
  dependency-version: 28.0.0
  dependency-type: direct:development
- dependency-name: json-server
  dependency-version: 1.0.0-beta.5
  dependency-type: direct:development
- dependency-name: less
  dependency-version: 3.13.1
  dependency-type: direct:development
- dependency-name: nightwatch
  dependency-version: 3.15.0
  dependency-type: direct:development
- dependency-name: node-sass
  dependency-version: 9.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants