Skip to content

deps: bump the production-deps group across 1 directory with 56 updates - #616

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-deps-3ade56ad3f
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-deps-3ade56ad3f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •

Copy link
Copy Markdown

Bumps the production-deps group with 56 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.844.0 3.1147.0
@aws-sdk/lib-storage 3.844.0 3.1147.0
@aws-sdk/s3-request-presigner 3.844.0 3.1147.0
@ladjs/shared-config 10.0.0 10.0.1
@lancedb/lancedb 0.22.3 0.40.0
@node-rs/argon2 2.1.0 2.2.2
@scalar/api-reference 1.32.6 1.73.0
@tkrotoff/bootstrap-floating-label 0.8.0 0.12.2
@zone-eu/mobileconfig 2.4.6 2.4.7
@zone-eu/wildduck 1.48.0 1.52.0
adm-zip 0.6.0 0.6.1
async-ratelimiter 1.5.2 1.6.10
bree 9.2.7 9.2.9
browserslist 4.25.1 4.29.3
bufferutil 4.0.9 4.1.0
countries-and-timezones 3.8.0 3.10.0
country-list 2.2.0 2.4.1
dayjs 1.11.13 1.11.23
fast-csv 5.0.7 5.0.8
fast-xml-parser 5.11.1 5.11.2
github-markdown-css 5.8.1 5.9.0
gulp-rename 2.0.0 2.1.0
htmlhint 1.4.0 1.9.2
ical.js 2.2.0 2.2.1
js-confetti 0.12.0 0.13.1
js-yaml 5.4.1 5.4.3
libmime 5.4.3 5.4.7
mailparser 3.9.16 3.9.36
markdown-it-highlightjs 4.2.0 4.3.0
mongoose-common-plugin 4.0.0 4.0.1
multer 2.0.2 2.4.0
openpgp 6.3.1 6.3.2
out-of-character 2.0.1 2.3.0
pkijs 3.4.0 3.4.1
preview-email 3.4.0 3.4.1
qs 6.15.3 6.16.0
re2 1.22.1 1.27.0
sanitize-html 2.17.5 2.18.0
sharp 0.34.2 0.35.5
smtp-server 3.19.3 3.19.17
snappy 7.3.3 7.4.3
superagent 10.3.0 10.4.1
tldts 7.4.11 7.4.16
tsdav 2.1.2 2.4.0
ws 8.17.1 8.22.0
browserify 17.0.0 17.0.1
get-port 7.1.0 7.2.0
gulp-babel 8.0.0 8.1.0
gulp-imagemin 9.1.0 9.2.0
gulp-xo 0.25.0 0.26.0
node-pop3 0.9.1 0.15.3
nodemon 3.1.10 3.1.14
postcss 8.5.26 8.5.29
sass 1.89.2 1.105.1
stylelint-declaration-strict-value 1.10.6 1.12.1
supertest 7.2.2 7.3.1

Updates @aws-sdk/client-s3 from 3.844.0 to 3.1147.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

For list of updated packages, view updated-packages.md in assets-3.1147.0.zip

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/client-s3

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/client-s3

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1144.0 (2026-09-30)

Features

  • client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdc)

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/client-s3

3.1142.0 (2026-09-28)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

Updates @aws-sdk/lib-storage from 3.844.0 to 3.1147.0

Release notes

Sourced from @​aws-sdk/lib-storage's releases.

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

For list of updated packages, view updated-packages.md in assets-3.1147.0.zip

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)

... (truncated)

Changelog

Sourced from @​aws-sdk/lib-storage's changelog.

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1144.0 (2026-09-30)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1142.0 (2026-09-28)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1141.0 (2026-09-25)

... (truncated)

Commits

Updates @aws-sdk/s3-request-presigner from 3.844.0 to 3.1147.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

For list of updated packages, view updated-packages.md in assets-3.1147.0.zip

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1144.0 (2026-09-30)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1142.0 (2026-09-28)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1141.0 (2026-09-25)

... (truncated)

Commits

Updates @ladjs/shared-config from 10.0.0 to 10.0.1

Release notes

Sourced from @​ladjs/shared-config's releases.

v10.0.1

  • fix: reorder compat cipher list and add ordering tests 05559a1

ladjs/shared-config@v10.0.0...v10.0.1

Commits

Updates @lancedb/lancedb from 0.22.3 to 0.40.0

Release notes

Sourced from @​lancedb/lancedb's releases.

LanceDB v0.40.0

This stable release uses Lance 13.0.0 and is maintained on release/v0.40.

Java packaging: Use com.lancedb:lancedb-core:0.40.0. The Maven artifacts were built from release-branch commit 711deef7, which corrects version serialization in the tag's Maven POMs. The Java runtime code is unchanged.

🛠 Breaking Changes

🎉 New Features

... (truncated)

Commits
  • b1b080b Bump version: 0.40.0-beta.13 → 0.40.0
  • ec92dfc Bump version: 0.40.0-beta.12 → 0.40.0-beta.13
  • 03dd419 test: avoid tied rankings in hybrid default limit coverage
  • 1ee95c3 chore: prepare LanceDB 0.40 release with Lance 13.0.0
  • 1a02a9e test: match the RC external blob validation error
  • 0f62894 chore: validate Lance v13.0.0-rc.1
  • 4730f90 Bump version: 0.40.0-beta.11 → 0.40.0-beta.12
  • 82d3948 feat(functions): address Functions by namespace path (#4341)
  • 0a1c1a0 feat(node): accept an AbortSignal to cancel blob reads (#4350)
  • ad79112 fix(node): support LargeUtf8 and LargeBinary Arrow columns (#4287)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​lancedb/lancedb since your current version.


Updates @node-rs/argon2 from 2.1.0 to 2.2.2

Commits
  • b706e30 chore(release): publish
  • d907346 chore(deps): update dependency @​napi-rs/cli to ^3.10.8
  • 22926d9 chore(deps): update dependency oxfmt to ^0.72.0 (#1221)
  • fe73c75 feat!: redesign bcrypt API while preserving stored hash verification (#1207)
  • 9814527 chore(deps): lock file maintenance (#1220)
  • c6632df chore(deps): update rust to v1.99.0 (#1219)
  • c1d8de4 chore(deps): lock file maintenance (#1215)
  • c118471 chore(deps): update dependency oxfmt to ^0.71.0 (#1218)
  • c14dee2 chore(deps): update yarn to v4.18.1 (#1217)
  • 84d621a chore(deps): update dependency oxfmt to ^0.70.0 (#1216)
  • Additional commits viewable in compare view

Updates @scalar/api-reference from 1.32.6 to 1.73.0

Changelog

Sourced from @​scalar/api-reference's changelog.

1.73.0

Minor Changes

  • #10473: Add featuredClients to choose which clients are shown as tabs in the "Client Libraries" block, and in which order.
  • #10449: Add hideModelNames to show structural types instead of model names in schema type labels and operation headings.
  • #10443: Add a showExtensions allowlist to display OpenAPI extensions on operations, parameters, response headers, and schema fields without a custom plugin, with a schema-style value tree from the blocks package.
  • #10420: Add maxVisibleRequestBodyProperties to control the initial request body property limit (default 12, or 0 for unlimited) independently of nested schema expansion. Show the number of hidden properties in the overflow control.

Patch Changes

  • #10462: Keep nested allOf object fields and choice groups inside their named property. Recursive references render as leaves without repeating composition choices.

  • #10452: Autofill the OAuth2 redirect URL on initial load when configured authentication flows have no scopes.

  • #10468: Stop the schema property copy-link button from taking width from a collapsed preview such as { compound, percentage }. Its 24px hit box now overhangs the end of the line, so the row gives up only the icon and its gap, however the consuming app orders its stylesheets.

  • #10397: Extract the schema renderer into @​scalar/blocks so other Scalar surfaces can reuse the schema tree while preserving API Reference behavior.

    Keep the public API Reference Schema and SchemaProperty exports connected to extension plugins and deep-link navigation when mounted outside ApiReference.

    Expose shared presentation components through @​scalar/blocks/shared, group host integration APIs under schema/helpers and schema/expansion, and keep schema stories and visual regression coverage with Blocks.

    Preserve literal toolbar icon types so Storybook previews can be type checked.

    Pass schema navigation, extension rendering, and shared expansion state explicitly through props instead of providing or injecting host context.

  • #10448: Expose an actions slot on the Operation component to replace its default copy control in embedded layouts.

  • #10441: Truncate long composition picker labels while keeping the full text available on hover and in the dropdown.

  • #10467: Use the design system border, shadow, and extra-large radius for all floating surfaces. Backdrops now inherit their radius from the floating element, and the lifted brightness no longer brightens the border.

1.72.4

Patch Changes

  • #10372: fix: improve keyboard and screen reader access to code blocks and multiselect comboboxes

    • The code block scroller is exposed as a named group ("Code sample: Shell cURL" in the API Reference, localizable via operation.codeSample) so screen readers announce it when it receives focus
    • The code block copy button now has a stable accessible name ("Copy Shell code") in every state, including while its visible label is hidden
    • In multiselect comboboxes such as the auth scheme picker, Space toggles the active option while the search query is empty instead of hiding the whole list
  • #10437: Stop a discriminator oneOf variant that composes its base with allOf from rendering a second selector, its fields twice, or a repeated variant description.

  • #10439: Fix missing chunks after a release when a cached ESM entry point is loaded from an unversioned npm CDN URL. The generated loader selects its own exact release using a relative package URL, preserving the CDN hostname and path prefix. This supports jsDelivr, UNPKG, and other hosts with versioned npm package paths while keeping latest as the default. Custom self-hosted paths continue loading the bundle next to the entry point.

1.72.3

Patch Changes

  • #10421: Collect schema search fields in one traversal and reuse extraction within each search index build.
  • #10422: Avoid computing unused character match ranges when searching API references.
  • #10381: Restore indentation for nested properties of expanded object and array query parameters.
  • #10400: Hide the authentication dropdown in the API Reference when only one required option is active, while retaining authentication and deletion controls in the API Client.
  • #10416: Skip unchanged document subtrees when checking configuration updates for content changes.
  • #10403: Correct MIME type normalization return types and accept optional content types without unsafe casts. Remove original keys after normalization and preserve distinct response examples when selecting media types.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​scalar/api-reference since your current version.


Updates @tkrotoff/bootstrap-floating-label from 0.8.0 to 0.12.2

Release notes

Sourced from @​tkrotoff/bootstrap-floating-label's releases.

v0.12.2

  • Fix z-index with Bootstrap >= 5.2.1

v0.12.1

  • Publish only src/ to npm

v0.12.0

  • Fix "Error: Undefined operation "var(--bs-border-width) * 2"" with Bootstrap 5.3
  • Old browsers not tested anymore

v0.11.5

v0.11.4

  • Update npm packages, switch to Parcel 2
  • Examples with validation

v0.11.3

  • Fix "Deprecation Warning: Using / for division is deprecated and will be removed in Dart Sass 2.0.0"
  • Update npm packages

v0.11.2

  • Update npm packages
  • Bootstrap 5.0.0 (instead of 5.0.0-beta3)

v0.11.1

  • Fix label line-height

v0.11.0

  • Remove label's disabled background-color: doesn't play nice with transition
  • Smaller line-height for the label

v0.10.0

  • Switch from Bootstrap 4 to Bootstrap 5 (5.0.0-beta3)
  • Handle input-group cleanly
  • Remove old Edge hack
Changelog

Sourced from @​tkrotoff/bootstrap-floating-label's changelog.

0.12.2 (2023/03/11)

  • Fix z-index with Bootstrap >= 5.2.1

0.12.1 (2023/03/11)

  • Publish only src/ to npm

0.12.0 (2023/03/10)

  • Fix "Error: Undefined operation "var(--bs-border-width) * 2"" with Bootstrap 5.3
  • Old browsers not tested anymore

0.11.5 (2021/04/20)

0.11.4 (2021/04/11)

  • Update npm packages, switch to Parcel 2
  • Examples with validation

0.11.3 (2021/11/26)

  • Fix "Deprecation Warning: Using / for division is deprecated and will be removed in Dart Sass 2.0.0"
  • Update npm packages

0.11.2 (2021/05/08)

  • Update npm packages
  • Bootstrap 5.0.0 (instead of 5.0.0-beta3)

0.11.1 (2021/05/07)

  • Fix label line-height

0.11.0 (2021/04/29)

  • Remove label's disabled background-color: doesn't play nice with transition
  • Smaller line-height for the label

0.10.0 (2021/04/18)

  • Switch from Bootstrap 4 to Bootstrap 5 (5.0.0-beta3)
  • Handle input-group cleanly
  • Remove old Edge hack
Commits

Updates @zone-eu/mobileconfig from 2.4.6 to 2.4.7

Release notes

Sourced from @​zone-eu/mobileconfig's releases.

v2.4.7

2.4.7 (2026-09-24)

Bug Fixes

  • bump deps to latest, fix all vulnerabilities (#56) (372d98c)
Changelog

Sourced from @​zone-eu/mobileconfig's changelog.

2.4.7 (2026-09-24)

Bug Fixes

  • bump deps to latest, fix all vulnerabilities (#56) (372d98c)
Commits

Updates @zone-eu/wildduck from 1.48.0 to 1.52.0

Release notes

Sourced from @​zone-eu/wildduck's releases.

v1.52.0

1.52.0 (2026-10-06)

Features

Bug Fixes

  • fix old submit endpoint passing wrong data to messagehandler delete (#1194) (1ea4201)
  • imap: accept a sequence set that ends at a closing parenthesis (d261d4f)
  • imap: accept astring and number forms the parser rejected (1bfa4b1)
  • imap: accept unquoted LIST patterns that contain a wildcard (b7fd068)
  • imap: announce the real octet count of a literal and survive empty values (dfc72fc)
  • imap: answer NO [SERVERBUG] instead of crashing when a command handler throws (92f374d)
  • imap: answer NO for an unsupported AUTHENTICATE mechanism (f5582c9)
  • imap: compare SENT keys on the calendar date in the in-memory matcher (3610ab5)
  • imap: compare SENT search keys against the calendar date of the Date header (d4d2084)
  • imap: create the mailbox when CREATE declares a trailing hierarchy delimiter (7464717)
  • imap: decode the APPEND mailbox name like every other mailbox command (02ac5b7)
  • imap: do not crash the process on LSUB with an empty mailbox name (3a09521)
  • imap: do not send EXPUNGE while responding to SEARCH (c7413c6)
  • imap: do not trim the password supplied to LOGIN or AUTHENTICATE PLAIN (47e18f9)
  • imap: emit a trailing partial line in the normal command shape (c25a436)
  • imap: fail a conditional STORE with UNCHANGEDSINCE 0 (676be05)
  • imap: give every journal batc...

    Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 10, 2026
Bumps the production-deps group with 56 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.844.0` | `3.1147.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.844.0` | `3.1147.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.844.0` | `3.1147.0` |
| [@ladjs/shared-config](https://github.com/ladjs/shared-config) | `10.0.0` | `10.0.1` |
| [@lancedb/lancedb](https://github.com/lancedb/lancedb) | `0.22.3` | `0.40.0` |
| [@node-rs/argon2](https://github.com/napi-rs/node-rs) | `2.1.0` | `2.2.2` |
| [@scalar/api-reference](https://github.com/scalar/scalar/tree/HEAD/packages/api-reference) | `1.32.6` | `1.73.0` |
| [@tkrotoff/bootstrap-floating-label](https://github.com/tkrotoff/bootstrap-floating-label) | `0.8.0` | `0.12.2` |
| [@zone-eu/mobileconfig](https://github.com/zone-eu/mobileconfig) | `2.4.6` | `2.4.7` |
| [@zone-eu/wildduck](https://github.com/zone-eu/wildduck) | `1.48.0` | `1.52.0` |
| [adm-zip](https://github.com/cthackers/adm-zip) | `0.6.0` | `0.6.1` |
| [async-ratelimiter](https://github.com/microlinkhq/async-ratelimiter) | `1.5.2` | `1.6.10` |
| [bree](https://github.com/breejs/bree) | `9.2.7` | `9.2.9` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.25.1` | `4.29.3` |
| [bufferutil](https://github.com/websockets/bufferutil) | `4.0.9` | `4.1.0` |
| [countries-and-timezones](https://github.com/manuelmhtr/countries-and-timezones) | `3.8.0` | `3.10.0` |
| [country-list](https://github.com/fannarsh/country-list) | `2.2.0` | `2.4.1` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.13` | `1.11.23` |
| [fast-csv](https://github.com/C2FO/fast-csv/tree/HEAD/packages/fast-csv) | `5.0.7` | `5.0.8` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.11.1` | `5.11.2` |
| [github-markdown-css](https://github.com/sindresorhus/github-markdown-css) | `5.8.1` | `5.9.0` |
| [gulp-rename](https://github.com/hparra/gulp-rename) | `2.0.0` | `2.1.0` |
| [htmlhint](https://github.com/htmlhint/HTMLHint) | `1.4.0` | `1.9.2` |
| [ical.js](https://github.com/kewisch/ical.js) | `2.2.0` | `2.2.1` |
| [js-confetti](https://github.com/loonywizard/js-confetti) | `0.12.0` | `0.13.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.1` | `5.4.3` |
| [libmime](https://github.com/nodemailer/libmime) | `5.4.3` | `5.4.7` |
| [mailparser](https://github.com/nodemailer/mailparser) | `3.9.16` | `3.9.36` |
| [markdown-it-highlightjs](https://github.com/valeriangalliat/markdown-it-highlightjs) | `4.2.0` | `4.3.0` |
| [mongoose-common-plugin](https://github.com/ladjs/mongoose-common-plugin) | `4.0.0` | `4.0.1` |
| [multer](https://github.com/expressjs/multer) | `2.0.2` | `2.4.0` |
| [openpgp](https://github.com/openpgpjs/openpgpjs) | `6.3.1` | `6.3.2` |
| [out-of-character](https://github.com/spencermountain/out-of-character) | `2.0.1` | `2.3.0` |
| [pkijs](https://github.com/PeculiarVentures/PKI.js) | `3.4.0` | `3.4.1` |
| [preview-email](https://github.com/forwardemail/test-preview-emails-cross-browsers-ios-simulator-nodejs-javascript) | `3.4.0` | `3.4.1` |
| [qs](https://github.com/ljharb/qs) | `6.15.3` | `6.16.0` |
| [re2](https://github.com/uhop/node-re2) | `1.22.1` | `1.27.0` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.5` | `2.18.0` |
| [sharp](https://github.com/lovell/sharp) | `0.34.2` | `0.35.5` |
| [smtp-server](https://github.com/nodemailer/smtp-server) | `3.19.3` | `3.19.17` |
| [snappy](https://github.com/Brooooooklyn/snappy) | `7.3.3` | `7.4.3` |
| [superagent](https://github.com/ladjs/superagent) | `10.3.0` | `10.4.1` |
| [tldts](https://github.com/remusao/tldts) | `7.4.11` | `7.4.16` |
| [tsdav](https://github.com/natelindev/tsdav) | `2.1.2` | `2.4.0` |
| [ws](https://github.com/websockets/ws) | `8.17.1` | `8.22.0` |
| [browserify](https://github.com/browserify/browserify) | `17.0.0` | `17.0.1` |
| [get-port](https://github.com/sindresorhus/get-port) | `7.1.0` | `7.2.0` |
| [gulp-babel](https://github.com/babel/gulp-babel) | `8.0.0` | `8.1.0` |
| [gulp-imagemin](https://github.com/sindresorhus/gulp-imagemin) | `9.1.0` | `9.2.0` |
| [gulp-xo](https://github.com/xojs/gulp-xo) | `0.25.0` | `0.26.0` |
| [node-pop3](https://github.com/lianxh/node-pop3) | `0.9.1` | `0.15.3` |
| [nodemon](https://github.com/remy/nodemon) | `3.1.10` | `3.1.14` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.29` |
| [sass](https://github.com/sass/dart-sass) | `1.89.2` | `1.105.1` |
| [stylelint-declaration-strict-value](https://github.com/AndyOGo/stylelint-declaration-strict-value) | `1.10.6` | `1.12.1` |
| [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.1` |



Updates `@aws-sdk/client-s3` from 3.844.0 to 3.1147.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/clients/client-s3)

Updates `@aws-sdk/lib-storage` from 3.844.0 to 3.1147.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/lib/lib-storage)

Updates `@aws-sdk/s3-request-presigner` from 3.844.0 to 3.1147.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/packages/s3-request-presigner)

Updates `@ladjs/shared-config` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/ladjs/shared-config/releases)
- [Commits](ladjs/shared-config@v10.0.0...v10.0.1)

Updates `@lancedb/lancedb` from 0.22.3 to 0.40.0
- [Release notes](https://github.com/lancedb/lancedb/releases)
- [Changelog](https://github.com/lancedb/lancedb/blob/main/release_process.md)
- [Commits](lancedb/lancedb@v0.22.3...v0.40.0)

Updates `@node-rs/argon2` from 2.1.0 to 2.2.2
- [Release notes](https://github.com/napi-rs/node-rs/releases)
- [Commits](https://github.com/napi-rs/node-rs/compare/@node-rs/argon2@2.1.0...@node-rs/argon2@2.2.2)

Updates `@scalar/api-reference` from 1.32.6 to 1.73.0
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/packages/api-reference/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/packages/api-reference)

Updates `@tkrotoff/bootstrap-floating-label` from 0.8.0 to 0.12.2
- [Release notes](https://github.com/tkrotoff/bootstrap-floating-label/releases)
- [Changelog](https://github.com/tkrotoff/bootstrap-floating-label/blob/master/CHANGELOG.md)
- [Commits](tkrotoff/bootstrap-floating-label@v0.8.0...v0.12.2)

Updates `@zone-eu/mobileconfig` from 2.4.6 to 2.4.7
- [Release notes](https://github.com/zone-eu/mobileconfig/releases)
- [Changelog](https://github.com/zone-eu/mobileconfig/blob/master/CHANGELOG.md)
- [Commits](zone-eu/mobileconfig@v2.4.6...v2.4.7)

Updates `@zone-eu/wildduck` from 1.48.0 to 1.52.0
- [Release notes](https://github.com/zone-eu/wildduck/releases)
- [Changelog](https://github.com/zone-eu/wildduck/blob/master/CHANGELOG.md)
- [Commits](zone-eu/wildduck@v1.48.0...v1.52.0)

Updates `adm-zip` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.6.0...v0.6.1)

Updates `async-ratelimiter` from 1.5.2 to 1.6.10
- [Release notes](https://github.com/microlinkhq/async-ratelimiter/releases)
- [Changelog](https://github.com/microlinkhq/async-ratelimiter/blob/master/CHANGELOG.md)
- [Commits](microlinkhq/async-ratelimiter@v1.5.2...v1.6.10)

Updates `bree` from 9.2.7 to 9.2.9
- [Release notes](https://github.com/breejs/bree/releases)
- [Commits](breejs/bree@v9.2.7...v9.2.9)

Updates `browserslist` from 4.25.1 to 4.29.3
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.25.1...4.29.3)

Updates `bufferutil` from 4.0.9 to 4.1.0
- [Release notes](https://github.com/websockets/bufferutil/releases)
- [Commits](websockets/bufferutil@v4.0.9...v4.1.0)

Updates `countries-and-timezones` from 3.8.0 to 3.10.0
- [Release notes](https://github.com/manuelmhtr/countries-and-timezones/releases)
- [Changelog](https://github.com/manuelmhtr/countries-and-timezones/blob/dev/CHANGELOG.md)
- [Commits](manuelmhtr/countries-and-timezones@v3.8.0...v3.10.0)

Updates `country-list` from 2.2.0 to 2.4.1
- [Release notes](https://github.com/fannarsh/country-list/releases)
- [Commits](fannarsh/country-list@v2.2.0...v2.4.1)

Updates `dayjs` from 1.11.13 to 1.11.23
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/v1.11.23/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.13...v1.11.23)

Updates `fast-csv` from 5.0.7 to 5.0.8
- [Release notes](https://github.com/C2FO/fast-csv/releases)
- [Changelog](https://github.com/C2FO/fast-csv/blob/main/packages/fast-csv/CHANGELOG.md)
- [Commits](https://github.com/C2FO/fast-csv/commits/v5.0.8/packages/fast-csv)

Updates `fast-xml-parser` from 5.11.1 to 5.11.2
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.11.1...v5.11.2)

Updates `github-markdown-css` from 5.8.1 to 5.9.0
- [Release notes](https://github.com/sindresorhus/github-markdown-css/releases)
- [Commits](sindresorhus/github-markdown-css@v5.8.1...v5.9.0)

Updates `gulp-rename` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/hparra/gulp-rename/releases)
- [Changelog](https://github.com/hparra/gulp-rename/blob/master/CHANGELOG.md)
- [Commits](hparra/gulp-rename@v2.0.0...v2.1.0)

Updates `htmlhint` from 1.4.0 to 1.9.2
- [Release notes](https://github.com/htmlhint/HTMLHint/releases)
- [Commits](htmlhint/HTMLHint@v1.4.0...v1.9.2)

Updates `ical.js` from 2.2.0 to 2.2.1
- [Release notes](https://github.com/kewisch/ical.js/releases)
- [Changelog](https://github.com/kewisch/ical.js/blob/main/CHANGELOG.md)
- [Commits](kewisch/ical.js@v2.2.0...v2.2.1)

Updates `js-confetti` from 0.12.0 to 0.13.1
- [Release notes](https://github.com/loonywizard/js-confetti/releases)
- [Commits](https://github.com/loonywizard/js-confetti/commits)

Updates `js-yaml` from 5.4.1 to 5.4.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.1...5.4.3)

Updates `libmime` from 5.4.3 to 5.4.7
- [Release notes](https://github.com/nodemailer/libmime/releases)
- [Changelog](https://github.com/nodemailer/libmime/blob/master/CHANGELOG.md)
- [Commits](nodemailer/libmime@v5.4.3...v5.4.7)

Updates `mailparser` from 3.9.16 to 3.9.36
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v3.9.16...v3.9.36)

Updates `markdown-it-highlightjs` from 4.2.0 to 4.3.0
- [Changelog](https://github.com/valeriangalliat/markdown-it-highlightjs/blob/master/CHANGELOG.md)
- [Commits](valeriangalliat/markdown-it-highlightjs@v4.2.0...v4.3.0)

Updates `mongoose-common-plugin` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/ladjs/mongoose-common-plugin/releases)
- [Commits](ladjs/mongoose-common-plugin@v4.0.0...v4.0.1)

Updates `multer` from 2.0.2 to 2.4.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.0.2...v2.4.0)

Updates `openpgp` from 6.3.1 to 6.3.2
- [Release notes](https://github.com/openpgpjs/openpgpjs/releases)
- [Commits](openpgpjs/openpgpjs@v6.3.1...v6.3.2)

Updates `out-of-character` from 2.0.1 to 2.3.0
- [Release notes](https://github.com/spencermountain/out-of-character/releases)
- [Changelog](https://github.com/spencermountain/out-of-character/blob/main/changelog.md)
- [Commits](spencermountain/out-of-character@v2.0.1...2.3.0)

Updates `pkijs` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/PeculiarVentures/PKI.js/releases)
- [Commits](PeculiarVentures/PKI.js@v3.4.0...v3.4.1)

Updates `preview-email` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/forwardemail/test-preview-emails-cross-browsers-ios-simulator-nodejs-javascript/releases)
- [Commits](forwardemail/preview-email@v3.4.0...v3.4.1)

Updates `qs` from 6.15.3 to 6.16.0
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.3...v6.16.0)

Updates `re2` from 1.22.1 to 1.27.0
- [Release notes](https://github.com/uhop/node-re2/releases)
- [Commits](uhop/node-re2@1.22.1...1.27.0)

Updates `sanitize-html` from 2.17.5 to 2.18.0
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.18.0/packages/sanitize-html)

Updates `sharp` from 0.34.2 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.2...v0.35.5)

Updates `smtp-server` from 3.19.3 to 3.19.17
- [Release notes](https://github.com/nodemailer/smtp-server/releases)
- [Changelog](https://github.com/nodemailer/smtp-server/blob/master/CHANGELOG.md)
- [Commits](nodemailer/smtp-server@v3.19.3...v3.19.17)

Updates `snappy` from 7.3.3 to 7.4.3
- [Release notes](https://github.com/Brooooooklyn/snappy/releases)
- [Changelog](https://github.com/Brooooooklyn/snappy/blob/main/CHANGELOG.md)
- [Commits](Brooooooklyn/snappy@v7.3.3...v7.4.3)

Updates `superagent` from 10.3.0 to 10.4.1
- [Release notes](https://github.com/ladjs/superagent/releases)
- [Changelog](https://github.com/forwardemail/superagent/blob/master/HISTORY.md)
- [Commits](forwardemail/superagent@v10.3.0...v10.4.1)

Updates `tldts` from 7.4.11 to 7.4.16
- [Release notes](https://github.com/remusao/tldts/releases)
- [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md)
- [Commits](remusao/tldts@v7.4.11...v7.4.16)

Updates `tsdav` from 2.1.2 to 2.4.0
- [Release notes](https://github.com/natelindev/tsdav/releases)
- [Changelog](https://github.com/natelindev/tsdav/blob/main/CHANGELOG.md)
- [Commits](natelindev/tsdav@v2.1.2...v2.4.0)

Updates `ws` from 8.17.1 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.17.1...8.22.0)

Updates `browserify` from 17.0.0 to 17.0.1
- [Release notes](https://github.com/browserify/browserify/releases)
- [Changelog](https://github.com/browserify/browserify/blob/master/changelog.markdown)
- [Commits](browserify/browserify@v17.0.0...v17.0.1)

Updates `get-port` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/sindresorhus/get-port/releases)
- [Commits](sindresorhus/get-port@v7.1.0...v7.2.0)

Updates `gulp-babel` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/babel/gulp-babel/releases)
- [Changelog](https://github.com/babel/gulp-babel/blob/main/CHANGELOG.md)
- [Commits](babel/gulp-babel@v8.0.0...v8.1.0)

Updates `gulp-imagemin` from 9.1.0 to 9.2.0
- [Release notes](https://github.com/sindresorhus/gulp-imagemin/releases)
- [Commits](sindresorhus/gulp-imagemin@v9.1.0...v9.2.0)

Updates `gulp-xo` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/xojs/gulp-xo/releases)
- [Commits](https://github.com/xojs/gulp-xo/commits)

Updates `node-pop3` from 0.9.1 to 0.15.3
- [Changelog](https://github.com/node-pop3/node-pop3/blob/main/CHANGES.md)
- [Commits](https://github.com/lianxh/node-pop3/commits)

Updates `nodemon` from 3.1.10 to 3.1.14
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v3.1.10...v3.1.14)

Updates `postcss` from 8.5.26 to 8.5.29
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.29)

Updates `sass` from 1.89.2 to 1.105.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.89.2...1.105.1)

Updates `stylelint-declaration-strict-value` from 1.10.6 to 1.12.1
- [Changelog](https://github.com/AndyOGo/stylelint-declaration-strict-value/blob/master/CHANGELOG.md)
- [Commits](AndyOGo/stylelint-declaration-strict-value@v1.10.6...v1.12.1)

Updates `supertest` from 7.2.2 to 7.3.1
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.2.2...v7.3.1)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1147.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1147.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1147.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@ladjs/shared-config"
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@lancedb/lancedb"
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@node-rs/argon2"
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@scalar/api-reference"
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@tkrotoff/bootstrap-floating-label"
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@zone-eu/mobileconfig"
  dependency-version: 2.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@zone-eu/wildduck"
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: adm-zip
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: async-ratelimiter
  dependency-version: 1.6.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: bree
  dependency-version: 9.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: browserify
  dependency-version: 17.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: browserslist
  dependency-version: 4.29.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: bufferutil
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: countries-and-timezones
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: country-list
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: dayjs
  dependency-version: 1.11.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: fast-csv
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: fast-xml-parser
  dependency-version: 5.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: get-port
  dependency-version: 7.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: github-markdown-css
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: gulp-babel
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: gulp-imagemin
  dependency-version: 9.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: gulp-rename
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: gulp-xo
  dependency-version: 0.26.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: htmlhint
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: ical.js
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: js-confetti
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: js-yaml
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: libmime
  dependency-version: 5.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: mailparser
  dependency-version: 3.9.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: markdown-it-highlightjs
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: mongoose-common-plugin
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: multer
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: node-pop3
  dependency-version: 0.15.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: nodemon
  dependency-version: 3.1.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: openpgp
  dependency-version: 6.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: out-of-character
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: pkijs
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: postcss
  dependency-version: 8.5.29
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: preview-email
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: qs
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: re2
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: sanitize-html
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: sass
  dependency-version: 1.105.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: smtp-server
  dependency-version: 3.19.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: snappy
  dependency-version: 7.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: stylelint-declaration-strict-value
  dependency-version: 1.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: superagent
  dependency-version: 10.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: supertest
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: tldts
  dependency-version: 7.4.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: tsdav
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-deps-3ade56ad3f branch from b56b923 to 2a6714f Compare October 10, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants