Skip to content

Bump the dependencies group across 1 directory with 7 updates - #317

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/dependencies-80d56ee25a
Closed

Bump the dependencies group across 1 directory with 7 updates#317
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/dependencies-80d56ee25a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 7 updates in the / directory:

Package From To
cacache 20.0.3 20.0.4
@types/cacache 20.0.0 20.0.1
csv-parse 6.1.0 6.2.1
dayjs 1.11.19 1.11.20
dotenv 17.2.3 17.3.1
yahoo-finance2 3.11.2 3.13.2
jest 30.2.0 30.3.0

Updates cacache from 20.0.3 to 20.0.4

Release notes

Sourced from cacache's releases.

v20.0.4

20.0.4 (2026-03-18)

Dependencies

Chores

Changelog

Sourced from cacache's changelog.

20.0.4 (2026-03-18)

Dependencies

Chores

Commits
  • 35d6f44 chore: release 20.0.4 (#329)
  • 1cf5e0c chore: bump @​npmcli/template-oss from 4.28.1 to 4.29.0 (#326)
  • dd3ff61 deps: remove unique-filename
  • 256f6b4 fix: replace unique-filename with crypto.randomUUID()
  • d171fe9 chore: bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#325)
  • See full diff in compare view

Updates @types/cacache from 20.0.0 to 20.0.1

Commits

Updates csv-parse from 6.1.0 to 6.2.1

Changelog

Sourced from csv-parse's changelog.

6.2.1 (2026-03-20)

Bug Fixes

  • csv-parse: prototype pollution with objname option (fix #479)

6.2.0 (2026-03-17)

Features

  • csv-parse: alig info interfaces with js api
  • csv-parse: info bytes_records (fix #446)
  • csv-parse: remove non-existing ts function declaration
  • csv-parse: remove ts usage of all in error type
  • csv-parse: returned type generic for on_record (fix #461 #464 #466) (#468)

Bug Fixes

  • csv-parse: delimiter inherited type
  • csv-parse: support number columns with cast (fix #477)
Commits
  • df244e9 chore(release): publish
  • cd17465 fix(csv-parse): prototype pollution with objname option (fix #479)
  • bec87d1 chore(release): publish
  • 067922f chore: latest dependencies
  • cb1a2d9 refactor: tsconfig json format
  • 08b85ce build: remove all eslint errors
  • 38b3d67 test: convert sample demo script to js
  • bd1c611 test: support n 16 test after latest changes
  • a068ec0 fix(csv-parse): support number columns with cast (fix #477)
  • da7ca03 build: check ts compilation before tests
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for csv-parse since your current version.


Updates dayjs from 1.11.19 to 1.11.20

Release notes

Sourced from dayjs's releases.

v1.11.20

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118
Changelog

Sourced from dayjs's changelog.

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for dayjs since your current version.


Updates dotenv from 17.2.3 to 17.3.1

Changelog

Sourced from dotenv's changelog.

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.
Commits

Updates yahoo-finance2 from 3.11.2 to 3.13.2

Release notes

Sourced from yahoo-finance2's releases.

v3.13.2

3.13.2 (2026-03-04)

Bug Fixes

  • search: lowercase typeDisp to match yahoo change (fixes #988) (0ca9618)

v3.13.1

3.13.1 (2026-02-25)

Bug Fixes

  • fundamentals: don't infer type, use request type (fixes #986) (0a62766)

v3.13.0

3.13.0 (2026-01-24)

Features

  • versions,cli: use correct version string, cli improvements (623fec3), closes #968

Bug Fixes

  • actions/test-release: install semantic-release/exec (503132f)
  • actions: better version fix flow (#968) (3a50c26)

v3.12.0

3.12.0 (2026-01-22)

Features

  • constructor: runtime schema check on options (closes #980) (6bab7bd)
  • quote: add extended market quote data (#983) (b5c33e6)

Bug Fixes

  • lib/options: don't json-schema validate cookieJar, etc. (3115ce0)
Commits
  • 0ca9618 fix(search): lowercase typeDisp to match yahoo change (fixes #988)
  • 02f46a3 chore(tests): recache failing search tests (#988)
  • 0a62766 fix(fundamentals): don't infer type, use request type (fixes #986)
  • cdf2a6a chore(ci): bump node in actions/setup/action.yml
  • e6f790b chore(ci): use OIDC for npm
  • 3a50c26 fix(actions): better version fix flow (#968)
  • 503132f fix(actions/test-release): install semantic-release/exec
  • 623fec3 feat(versions,cli): use correct version string, cli improvements
  • feb90ca chore(CONTRIBUTING): mention jest too :)
  • b5c33e6 feat(quote): add extended market quote data (#983)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for yahoo-finance2 since your current version.


Updates @types/cacache from 20.0.0 to 20.0.1

Commits

Updates jest from 30.2.0 to 30.3.0

Release notes

Sourced from jest's releases.

v30.3.0

Features

  • [jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#15844)
  • [jest-fake-timers] Add setTimerTickMode to configure how timers advance
  • [*] Reduce token usage when run through LLMs (3f17932)

Fixes

  • [jest-config] Keep CLI coverage output when using --json with --outputFile (#15918)
  • [jest-mock] Use Symbol from test environment (#15858)
  • [jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#15864)
  • [jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#15842)
  • [jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#15851)
  • [jest-util] Make sure process.features.require_module is false (#15867)

Chore & Maintenance

  • [*] Replace remaining micromatch uses with picomatch
  • [deps] Update to sinon/fake-timers v15
  • [docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#15849)
  • Updated Twitter icon to match the latest brand guidelines (#15869)
Changelog

Sourced from jest's changelog.

30.3.0

Features

  • [jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#15844)
  • [jest-fake-timers] Add setTimerTickMode to configure how timers advance
  • [*] Reduce token usage when run through LLMs (3f17932)

Fixes

  • [jest-config] Keep CLI coverage output when using --json with --outputFile (#15918)
  • [jest-mock] Use Symbol from test environment (#15858)
  • [jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#15864)
  • [jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#15842)
  • [jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#15851)
  • [jest-util] Make sure process.features.require_module is false (#15867)

Chore & Maintenance

  • [*] Replace remaining micromatch uses with picomatch
  • [deps] Update to sinon/fake-timers v15
  • [docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#15849)
  • Updated Twitter icon to match the latest brand guidelines (#15869)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cacache](https://github.com/npm/cacache) | `20.0.3` | `20.0.4` |
| [@types/cacache](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/cacache) | `20.0.0` | `20.0.1` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `6.1.0` | `6.2.1` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.19` | `1.11.20` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.3.1` |
| [yahoo-finance2](https://github.com/gadicc/yahoo-finance2) | `3.11.2` | `3.13.2` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.3.0` |



Updates `cacache` from 20.0.3 to 20.0.4
- [Release notes](https://github.com/npm/cacache/releases)
- [Changelog](https://github.com/npm/cacache/blob/main/CHANGELOG.md)
- [Commits](npm/cacache@v20.0.3...v20.0.4)

Updates `@types/cacache` from 20.0.0 to 20.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cacache)

Updates `csv-parse` from 6.1.0 to 6.2.1
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@6.2.1/packages/csv-parse)

Updates `dayjs` from 1.11.19 to 1.11.20
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.19...v1.11.20)

Updates `dotenv` from 17.2.3 to 17.3.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.3...v17.3.1)

Updates `yahoo-finance2` from 3.11.2 to 3.13.2
- [Release notes](https://github.com/gadicc/yahoo-finance2/releases)
- [Changelog](https://github.com/gadicc/yahoo-finance2/blob/dev/release.config.mjs)
- [Commits](gadicc/yahoo-finance2@v3.11.2...v3.13.2)

Updates `@types/cacache` from 20.0.0 to 20.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cacache)

Updates `jest` from 30.2.0 to 30.3.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest)

---
updated-dependencies:
- dependency-name: cacache
  dependency-version: 20.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/cacache"
  dependency-version: 20.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: csv-parse
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: dayjs
  dependency-version: 1.11.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dotenv
  dependency-version: 17.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: yahoo-finance2
  dependency-version: 3.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/cacache"
  dependency-version: 20.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jest
  dependency-version: 30.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Updated dependencies label Mar 23, 2026
@dependabot
dependabot Bot requested a review from dickwolff as a code owner March 23, 2026 12:06
@dependabot dependabot Bot added the Dependencies Updated dependencies label Mar 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 30, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-80d56ee25a branch March 30, 2026 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Updated dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants