Skip to content

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates#13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-87292cff51
Open

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-87292cff51

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 21, 2026

Bumps the npm_and_yarn group with 2 updates in the / directory: @adonisjs/core and basic-ftp.

Updates @adonisjs/core from 7.0.1 to 7.3.1

Release notes

Sourced from @​adonisjs/core's releases.

Preventing open-redirect vulnerabilities during referer based redirects

7.3.1 (2026-04-09)

Full Changelog: adonisjs/core@v7.3.0...v7.3.1

Allow make commands to override existing files via --force flag

7.3.0 (2026-03-28)

Features

  • add --force flag to all make commands (bb90a45)

Full Changelog: adonisjs/core@v7.2.0...v7.3.0

Safe timing helpers, vine.create usage in validator stub and create building using custom tsconfig file

7.2.0 (2026-03-26)

Bug Fixes

  • replace vine.compile with vine.create in validator stub (#5082) (487246a)
  • update validator test to use vine.create (9d7c8fc)

Features

  • allow passing custom tsconfig path to the build command (7e12fa4), closes #5083
  • allow passing custom ui instance to codemods (8cbb2c1)
  • safe timing helper (#5080) (5793b1f)

What's Changed

New Contributors

Full Changelog: adonisjs/core@v7.1.1...v7.2.0

Fix indexEntities to create manifest file when manifest.enabled is true

7.1.1 (2026-03-18)

Bug Fixes

  • enable manifest explicitly (038fc87)

Full Changelog: adonisjs/core@v7.1.0...v7.1.1

... (truncated)

Commits
  • d02d79a chore(release): 7.3.1
  • bc79082 chore: update dependencies
  • 1920429 chore(release): 7.3.0
  • bb90a45 feat: add --force flag to all make commands
  • 9eff2e1 chore(release): 7.2.0
  • 9bf1000 test: fix breaking tests
  • 949d207 style: reformat source code
  • 5793b1f feat: safe timing helper (#5080)
  • 7e12fa4 feat: allow passing custom tsconfig path to the build command
  • 7034377 chore: upgrade to TypeScript 6.0
  • Additional commits viewable in compare view

Updates basic-ftp from 5.2.2 to 5.3.0

Release notes

Sourced from basic-ftp's releases.

5.3.0

  • Changed: Introduced an upper bound for total bytes of directory listing, fixes GHSA-rp42-5vxx-qpwr.
  • Added: Option to increase the upper bound for total bytes of directory listing in Client constructor.
Changelog

Sourced from basic-ftp's changelog.

5.3.0

  • Changed: Introduced an upper bound for total bytes of directory listing, fixes GHSA-rp42-5vxx-qpwr.
  • Added: Option to increase the upper bound for total bytes of directory listing in Client constructor.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates

Bumps the npm_and_yarn group with 2 updates in the / directory: [@adonisjs/core](https://github.com/adonisjs/core) and [basic-ftp](https://github.com/patrickjuchli/basic-ftp).


Updates `@adonisjs/core` from 7.0.1 to 7.3.1
- [Release notes](https://github.com/adonisjs/core/releases)
- [Commits](adonisjs/core@v7.0.1...v7.3.1)

Updates `basic-ftp` from 5.2.2 to 5.3.0
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)
- [Commits](patrickjuchli/basic-ftp@v5.2.2...v5.3.0)

---
updated-dependencies:
- dependency-name: "@adonisjs/core"
  dependency-version: 7.3.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: basic-ftp
  dependency-version: 5.3.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor labels Apr 21, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 21, 2026

Version Preview

Current version v0.3.6
Next version v0.3.7
Bump type patch

To override the bump type, add a label: major, minor, or patch
Or use conventional commits: feat: → minor, fix: → patch, BREAKING CHANGE → major

1 similar comment
@github-actions
Copy link
Copy Markdown

Version Preview

Current version v0.3.6
Next version v0.3.7
Bump type patch

To override the bump type, add a label: major, minor, or patch
Or use conventional commits: feat: → minor, fix: → patch, BREAKING CHANGE → major

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants