Skip to content

Bump the npm_and_yarn group across 6 directories with 8 updates#6

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/dot-github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/generateToken/npm_and_yarn-6e2821deaa
Open

Bump the npm_and_yarn group across 6 directories with 8 updates#6
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/dot-github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/generateToken/npm_and_yarn-6e2821deaa

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 8, 2026

Bumps the npm_and_yarn group with 1 update in the /.github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/generateToken directory: octokit.
Bumps the npm_and_yarn group with 1 update in the /.github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/monitorRunnersStatus directory: octokit.
Bumps the npm_and_yarn group with 1 update in the /.github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/removeOfflineRunners directory: octokit.
Bumps the npm_and_yarn group with 1 update in the /scripts/ci/issue-report directory: nodemailer.
Bumps the npm_and_yarn group with 3 updates in the /scripts/ci/pr-bot directory: @octokit/plugin-paginate-rest, minimatch and picomatch.
Bumps the npm_and_yarn group with 1 update in the /website/www directory: ansi-regex.

Updates octokit from 1.8.1 to 5.0.5

Release notes

Sourced from octokit's releases.

v5.0.5

5.0.5 (2025-10-31)

Bug Fixes

v5.0.4

5.0.4 (2025-10-17)

Bug Fixes

  • deps: update dependency @​octokit/types to v15 (#2880) (b84c9d4)

v5.0.3

5.0.3 (2025-05-27)

Bug Fixes

  • deps: update dependency @​octokit/plugin-rest-endpoint-methods to v16 (#2855) (310e4cb)

v5.0.2

5.0.2 (2025-05-20)

Bug Fixes

v5.0.1

5.0.1 (2025-05-20)

Bug Fixes

v5.0.0

5.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

... (truncated)

Commits
  • 45c56ff fix(deps): update octokit monorepo (major) (#2903)
  • 823c506 chore(deps): update vitest monorepo to v4 (major) (#2900)
  • 768ac1b build(deps): lock file maintenance (#2899)
  • dcca43c chore(deps): update dependency @​types/node to v24 (#2901)
  • d1ddfe8 ci(action): update peter-evans/create-or-update-comment action to v5 (#2889)
  • 791d318 chore(deps): update dependency prettier to v3.6.2 (#2863)
  • 362cce8 build(deps): lock file maintenance (#2861)
  • b84c9d4 fix(deps): update dependency @​octokit/types to v15 (#2880)
  • 011e821 ci(action): update github/codeql-action action to v4 (#2891)
  • 93055b6 ci(action): update actions/setup-node action to v6 (#2895)
  • Additional commits viewable in compare view

Updates octokit from 1.8.1 to 5.0.5

Release notes

Sourced from octokit's releases.

v5.0.5

5.0.5 (2025-10-31)

Bug Fixes

v5.0.4

5.0.4 (2025-10-17)

Bug Fixes

  • deps: update dependency @​octokit/types to v15 (#2880) (b84c9d4)

v5.0.3

5.0.3 (2025-05-27)

Bug Fixes

  • deps: update dependency @​octokit/plugin-rest-endpoint-methods to v16 (#2855) (310e4cb)

v5.0.2

5.0.2 (2025-05-20)

Bug Fixes

v5.0.1

5.0.1 (2025-05-20)

Bug Fixes

v5.0.0

5.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

... (truncated)

Commits
  • 45c56ff fix(deps): update octokit monorepo (major) (#2903)
  • 823c506 chore(deps): update vitest monorepo to v4 (major) (#2900)
  • 768ac1b build(deps): lock file maintenance (#2899)
  • dcca43c chore(deps): update dependency @​types/node to v24 (#2901)
  • d1ddfe8 ci(action): update peter-evans/create-or-update-comment action to v5 (#2889)
  • 791d318 chore(deps): update dependency prettier to v3.6.2 (#2863)
  • 362cce8 build(deps): lock file maintenance (#2861)
  • b84c9d4 fix(deps): update dependency @​octokit/types to v15 (#2880)
  • 011e821 ci(action): update github/codeql-action action to v4 (#2891)
  • 93055b6 ci(action): update actions/setup-node action to v6 (#2895)
  • Additional commits viewable in compare view

Updates octokit from 1.8.1 to 5.0.5

Release notes

Sourced from octokit's releases.

v5.0.5

5.0.5 (2025-10-31)

Bug Fixes

v5.0.4

5.0.4 (2025-10-17)

Bug Fixes

  • deps: update dependency @​octokit/types to v15 (#2880) (b84c9d4)

v5.0.3

5.0.3 (2025-05-27)

Bug Fixes

  • deps: update dependency @​octokit/plugin-rest-endpoint-methods to v16 (#2855) (310e4cb)

v5.0.2

5.0.2 (2025-05-20)

Bug Fixes

v5.0.1

5.0.1 (2025-05-20)

Bug Fixes

v5.0.0

5.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

... (truncated)

Commits
  • 45c56ff fix(deps): update octokit monorepo (major) (#2903)
  • 823c506 chore(deps): update vitest monorepo to v4 (major) (#2900)
  • 768ac1b build(deps): lock file maintenance (#2899)
  • dcca43c chore(deps): update dependency @​types/node to v24 (#2901)
  • d1ddfe8 ci(action): update peter-evans/create-or-update-comment action to v5 (#2889)
  • 791d318 chore(deps): update dependency prettier to v3.6.2 (#2863)
  • 362cce8 build(deps): lock file maintenance (#2861)
  • b84c9d4 fix(deps): update dependency @​octokit/types to v15 (#2880)
  • 011e821 ci(action): update github/codeql-action action to v4 (#2891)
  • 93055b6 ci(action): update actions/setup-node action to v6 (#2895)
  • Additional commits viewable in compare view

Updates nodemailer from 7.0.11 to 8.0.5

Release notes

Sourced from nodemailer's releases.

v8.0.5

8.0.5 (2026-04-07)

Bug Fixes

  • decode SMTP server responses as UTF-8 at line boundary (95876b1)
  • sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)

v8.0.4

8.0.4 (2026-03-25)

Bug Fixes

  • sanitize envelope size to prevent SMTP command injection (2d7b971)

v8.0.3

8.0.3 (2026-03-18)

Bug Fixes

  • clean up addressparser and fix group name fallback producing undefined (9d55877)
  • fix cookie bugs, remove dead code, and improve hot-path efficiency (e8c8b92)
  • refactor smtp-connection for clarity and add Node.js 6 syntax compat test (c5b48ea)
  • remove familySupportCache that broke DNS resolution tests (c803d90)

v8.0.2

8.0.2 (2026-03-09)

Bug Fixes

  • merge fragmented display names with unquoted commas in addressparser (fe27f7f)

v8.0.1

8.0.1 (2026-02-07)

Bug Fixes

  • absorb TLS errors during socket teardown (7f8dde4)
  • absorb TLS errors during socket teardown (381f628)
  • Add Gmail Workspace service configuration (#1787) (dc97ede)

v8.0.0

8.0.0 (2026-02-04)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

8.0.5 (2026-04-07)

Bug Fixes

  • decode SMTP server responses as UTF-8 at line boundary (95876b1)
  • sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)

8.0.4 (2026-03-25)

Bug Fixes

  • sanitize envelope size to prevent SMTP command injection (2d7b971)

8.0.3 (2026-03-18)

Bug Fixes

  • clean up addressparser and fix group name fallback producing undefined (9d55877)
  • fix cookie bugs, remove dead code, and improve hot-path efficiency (e8c8b92)
  • refactor smtp-connection for clarity and add Node.js 6 syntax compat test (c5b48ea)
  • remove familySupportCache that broke DNS resolution tests (c803d90)

8.0.2 (2026-03-09)

Bug Fixes

  • merge fragmented display names with unquoted commas in addressparser (fe27f7f)

8.0.1 (2026-02-07)

Bug Fixes

  • absorb TLS errors during socket teardown (7f8dde4)
  • absorb TLS errors during socket teardown (381f628)
  • Add Gmail Workspace service configuration (#1787) (dc97ede)

8.0.0 (2026-02-04)

⚠ BREAKING CHANGES

  • Error code 'NoAuth' renamed to 'ENOAUTH'

Bug Fixes

... (truncated)

Commits
  • 202cfb3 chore(master): release 8.0.5 (#1809)
  • b634abf docs: add CLAUDE.md with project conventions and release process
  • 95876b1 fix: decode SMTP server responses as UTF-8 at line boundary
  • 0a43876 fix: sanitize CRLF in transport name option to prevent SMTP command injection...
  • 08e59e6 chore: update dev dependencies
  • 2d31975 chore(master): release 8.0.4 (#1806)
  • 2d7b971 fix: sanitize envelope size to prevent SMTP command injection
  • 4e702e9 chore(master): release 8.0.3 (#1804)
  • c803d90 fix: remove familySupportCache that broke DNS resolution tests
  • e8c8b92 fix: fix cookie bugs, remove dead code, and improve hot-path efficiency
  • Additional commits viewable in compare view

Updates @octokit/plugin-paginate-rest from 2.17.0 to 14.0.0

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v14.0.0

14.0.0 (2025-10-31)

Features

  • add immutable releases, enterprise team membership, enterprise team organization endpoints (413e899)

BREAKING CHANGES

  • Remove GET /projects/{project_id}/columns
  • Remove GET /enterprises/{enterprise}/secret-scanning/alerts

v13.2.1

13.2.1 (2025-10-20)

Bug Fixes

v13.2.0

13.2.0 (2025-09-29)

Features

  • new Projects v2 endpoints, new code scanning dismissal endpoints, many other endpoints (#690) (0e236cb)

v13.1.1

13.1.1 (2025-06-27)

Bug Fixes

  • handle url in response when using pagination with compareCommits (#686) (8e5da25)

v13.1.0

13.1.0 (2025-06-16)

Features

  • add paginatantion support for compareCommits and compareCommitsWithBasehead (#678) (6d8ea8a)

v13.0.1

13.0.1 (2025-05-25)

... (truncated)

Commits
  • 413e899 feat: add immutable releases, enterprise team membership, enterprise team org...
  • 3d311d6 chore(deps): update dependency @​types/node to v24 (#701)
  • ba56fbc fix(deps): update @octokit/types (#698)
  • 80745be ci(action): update actions/checkout action to v5 (#687)
  • 0e236cb feat: new Projects v2 endpoints, new code scanning dismissal endpoints, many ...
  • bf19e3e chore(deps): update dependency prettier to v3.6.2 (#685)
  • 4f9fc56 ci(action): update actions/setup-node action to v5 (#688)
  • 8e5da25 fix: handle url in response when using pagination with compareCommits (#686)
  • 6d8ea8a feat: add paginatantion support for compareCommits and `compareCommitsWith...
  • 8ec2713 fix(deps): update @octokit/types - no new paginated endpoints (#680)
  • Additional commits viewable in compare view

Updates @octokit/request from 5.6.3 to 10.0.8

Release notes

Sourced from @​octokit/request's releases.

v10.0.8

10.0.8 (2026-02-20)

Bug Fixes

  • use json-with-bigint instead of built-in JSON methods in order to properly support int64's (#798) (f13f5d9)

v10.0.7

10.0.7 (2025-11-13)

Bug Fixes

  • readme: properly structure the options for custom agent (#786) (f17c1c1), closes #785

v10.0.6

10.0.6 (2025-10-30)

Bug Fixes

  • deps: update dependency @​octokit/types to v16 (#783) (1aeac56)

v10.0.5

10.0.5 (2025-09-29)

Bug Fixes

v10.0.4

10.0.4 (2025-09-29)

Bug Fixes

  • deps: update dependency @​octokit/types to v15 (#775) (ad78b4c)

v10.0.3

10.0.3 (2025-06-20)

Bug Fixes

  • pkg: unreplaced version number in dist-bundle/ (#765) (5b181af)

v10.0.2

10.0.2 (2025-05-20)

... (truncated)

Commits
  • f13f5d9 fix: use json-with-bigint instead of built-in JSON methods in order to prop...
  • 9ba6ae0 Document that unsuccessful HTTP status code result in an exception (#795)
  • 7160b82 chore(deps): replace glob with tinyglobby (#791)
  • ab8018b ci(action): update peter-evans/create-or-update-comment action to v5 (#776)
  • fb916e4 build(deps): bump vite from 6.3.4 to 6.4.1 (#780)
  • e1eb769 chore(deps): update dependency esbuild to ^0.27.0 (#784)
  • f17c1c1 fix(readme): properly structure the options for custom agent (#786)
  • ea46fa9 ci(action): update github/codeql-action action to v4 (#778)
  • 8166d28 chore(deps): update vitest monorepo to v4 (major) (#781)
  • 1aeac56 fix(deps): update dependency @​octokit/types to v16 (#783)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/request since your current version.


Updates @octokit/request-error from 2.1.0 to 7.1.0

Release notes

Sourced from @​octokit/request-error's releases.

v7.1.0

7.1.0 (2025-11-13)

Features

  • inherit options from base Error class to add support for the cause property (#535/#536) (2ea2780)

v7.0.2

7.0.2 (2025-10-30)

Bug Fixes

  • deps: update dependency @​octokit/types to v16 (#533) (e5a75ef)

v7.0.1

7.0.1 (2025-09-29)

Bug Fixes

  • deps: update dependency @​octokit/types to v15 (#522) (4a453f2)

v7.0.0

7.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

v6.1.8

6.1.8 (2025-04-10)

Bug Fixes

  • deps: update dependency @​octokit/types to v14 (#505) (ab4ea7b)

v6.1.7

... (truncated)

Commits
  • 2ea2780 feat: inherit options from base Error class to add support for the cause ...
  • ac7b309 chore(deps): update vitest monorepo to v4 (major) (#531)
  • dadc76d ci(action): update peter-evans/create-or-update-comment action to v5 (#525)
  • f57f2e6 build(deps): lock file maintenance (#534)
  • e5a75ef fix(deps): update dependency @​octokit/types to v16 (#533)
  • e5d5de2 chore(deps): update dependency @​types/node to v24 (#532)
  • 8cc127b ci(action): update actions/setup-node action to v6 (#529)
  • b3a876b build(deps): lock file maintenance (#527)
  • cf1817b ci(action): update github/codeql-action action to v4 (#528)
  • 61f1e87 chore(deps): update dependency tinybench to v5 (#519)
  • Additional commits viewable in compare view

Updates minimatch from 9.0.5 to 9.0.9

Commits

Updates minimatch from 5.1.6 to 5.1.9

Commits

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Updates ansi-regex from 5.0.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

  • Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @​yetingli for the patch and reproduction case!

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the /.github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/generateToken directory: [octokit](https://github.com/octokit/octokit.js).
Bumps the npm_and_yarn group with 1 update in the /.github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/monitorRunnersStatus directory: [octokit](https://github.com/octokit/octokit.js).
Bumps the npm_and_yarn group with 1 update in the /.github/gh-actions-self-hosted-runners/helper-functions/cloud-functions/removeOfflineRunners directory: [octokit](https://github.com/octokit/octokit.js).
Bumps the npm_and_yarn group with 1 update in the /scripts/ci/issue-report directory: [nodemailer](https://github.com/nodemailer/nodemailer).
Bumps the npm_and_yarn group with 3 updates in the /scripts/ci/pr-bot directory: [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js), [minimatch](https://github.com/isaacs/minimatch) and [picomatch](https://github.com/micromatch/picomatch).
Bumps the npm_and_yarn group with 1 update in the /website/www directory: [ansi-regex](https://github.com/chalk/ansi-regex).


Updates `octokit` from 1.8.1 to 5.0.5
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](octokit/octokit.js@v1.8.1...v5.0.5)

Updates `octokit` from 1.8.1 to 5.0.5
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](octokit/octokit.js@v1.8.1...v5.0.5)

Updates `octokit` from 1.8.1 to 5.0.5
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](octokit/octokit.js@v1.8.1...v5.0.5)

Updates `nodemailer` from 7.0.11 to 8.0.5
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v7.0.11...v8.0.5)

Updates `@octokit/plugin-paginate-rest` from 2.17.0 to 14.0.0
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v2.17.0...v14.0.0)

Updates `@octokit/request` from 5.6.3 to 10.0.8
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v5.6.3...v10.0.8)

Updates `@octokit/request-error` from 2.1.0 to 7.1.0
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](octokit/request-error.js@v2.1.0...v7.1.0)

Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v9.0.5...v9.0.9)

Updates `minimatch` from 5.1.6 to 5.1.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v9.0.5...v9.0.9)

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `ansi-regex` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v5.0.0...v5.0.1)

---
updated-dependencies:
- dependency-name: octokit
  dependency-version: 5.0.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: octokit
  dependency-version: 5.0.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: octokit
  dependency-version: 5.0.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: nodemailer
  dependency-version: 8.0.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 14.0.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-version: 10.0.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
  dependency-version: 7.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 5.1.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ansi-regex
  dependency-version: 5.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code typescript website

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants