Bump the minor-and-patch group across 1 directory with 3 updates #155

Merged

dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/minor-and-patch-45dad9b868 into master

2026-02-17 20:23:28 +00:00

dependabot[bot] commented

2026-02-16 07:29:25 +00:00

(Migrated from github.com)

Bumps the minor-and-patch group with 3 updates in the / directory: dotenv, undici and @types/react.

Updates dotenv from 17.2.4 to 17.3.1

Changelog

Sourced from dotenv's changelog.

17.3.1 (2026-02-12)

Changed

Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

Add a new README section on dotenv’s approach to the agentic future.

Changed

Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

Commits

7bc16a4 17.3.1
27303fd update README-es
6379eb2 update README
b6d7339 fix spelling
5febe35 17.3.0
f61f383 changelog 🪵
dec94ad update README
4856950 update README
6351887 update README
23bd017 update README
Additional commits viewable in compare view

Updates undici from 7.21.0 to 7.22.0

Release notes

Sourced from undici's releases.

v7.22.0

What's Changed

docs: fix syntax highlighting in WebSocket.md by @styfle in nodejs/undici#4814

fix: use OR operator in includesCredentials per WHATWG URL Standard by @jackhax in nodejs/undici#4816

feat(dispatcher/env-http-proxy-agent): strip leading dot and asterisk by @SuperOleg39 in nodejs/undici#4676

fix: route WebSocket upgrades through onRequestUpgrade by @mcollina in nodejs/undici#4787

build(deps-dev): bump esbuild from 0.25.12 to 0.27.3 by @dependabot[bot] in nodejs/undici#4821

fix(deduplicate): do not deduplicate non-safe methods by default by @mcollina in nodejs/undici#4818

feat: Support async cache stores in revalidation by @marcopiraccini in nodejs/undici#4826

New Contributors

@jackhax made their first contribution in nodejs/undici#4816

@marcopiraccini made their first contribution in nodejs/undici#4826

Full Changelog: https://github.com/nodejs/undici/compare/v7.21.0...v7.22.0

Commits

0a23610 Bumped v7.22.0 (#4829)
f3c5c61 feat: Support async cache stores in revalidation (#4826)
9b78a44 fix(deduplicate): avoid deduping methods not in methods option (#4818)
0ce57ba build(deps-dev): bump esbuild from 0.25.12 to 0.27.3 (#4821)
2453caf fix: route websocket upgrades through new handler API (#4787)
4658cdf feat(dispatcher/env-http-proxy-agent): strip leading dot and asterisk (#4676)
a821c56 fix: use OR operator in includesCredentials per WHATWG URL Standard (#4816)
b3326b5 docs: fix syntax highlighting in WebSocket.md (#4814)
See full diff in compare view

Updates @types/react from 19.2.13 to 19.2.14

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 3 updates in the / directory: [dotenv](https://github.com/motdotla/dotenv), [undici](https://github.com/nodejs/undici) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). Updates `dotenv` from 17.2.4 to 17.3.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/motdotla/dotenv/compare/v17.3.0...v17.3.1">17.3.1</a> (2026-02-12)</h2> <h3>Changed</h3> <ul> <li>Fix as2 example command in README and update spanish README</li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v17.2.4...v17.3.0">17.3.0</a> (2026-02-12)</h2> <h3>Added</h3> <ul> <li>Add a new README section on dotenv’s approach to the agentic future.</li> </ul> <h3>Changed</h3> <ul> <li>Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motdotla/dotenv/commit/7bc16a41c9efd4cf4ab8a4614d0ace7fd240b27b"><code>7bc16a4</code></a> 17.3.1</li> <li><a href="https://github.com/motdotla/dotenv/commit/27303fd56321a166d698f0482e0f4d0c51e51c1e"><code>27303fd</code></a> update README-es</li> <li><a href="https://github.com/motdotla/dotenv/commit/6379eb2cae43c27656df8d93509b2c14366811ec"><code>6379eb2</code></a> update README</li> <li><a href="https://github.com/motdotla/dotenv/commit/b6d7339fd085a290669af8e601331c13b4dd2920"><code>b6d7339</code></a> fix spelling</li> <li><a href="https://github.com/motdotla/dotenv/commit/5febe352d4dd499bfaa73de808a56bf03a268b6b"><code>5febe35</code></a> 17.3.0</li> <li><a href="https://github.com/motdotla/dotenv/commit/f61f3832c438078fc5d6552f59fac0c0205eca98"><code>f61f383</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/dec94ad828acba99e3a8570ecf12a1081f9c189c"><code>dec94ad</code></a> update README</li> <li><a href="https://github.com/motdotla/dotenv/commit/485695052c82c26024fbb8568babb0770756dd06"><code>4856950</code></a> update README</li> <li><a href="https://github.com/motdotla/dotenv/commit/6351887077957c5ee74c3528bccbf5512b184b2e"><code>6351887</code></a> update README</li> <li><a href="https://github.com/motdotla/dotenv/commit/23bd017381f1ab5e4fcdeaebe2e134aaef644a4c"><code>23bd017</code></a> update README</li> <li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v17.2.4...v17.3.1">compare view</a></li> </ul> </details> <br /> Updates `undici` from 7.21.0 to 7.22.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nodejs/undici/releases">undici's releases</a>.</em></p> <blockquote> <h2>v7.22.0</h2> <h2>What's Changed</h2> <ul> <li>docs: fix syntax highlighting in WebSocket.md by <a href="https://github.com/styfle"><code>@styfle</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4814">nodejs/undici#4814</a></li> <li>fix: use OR operator in includesCredentials per WHATWG URL Standard by <a href="https://github.com/jackhax"><code>@jackhax</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4816">nodejs/undici#4816</a></li> <li>feat(dispatcher/env-http-proxy-agent): strip leading dot and asterisk by <a href="https://github.com/SuperOleg39"><code>@SuperOleg39</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4676">nodejs/undici#4676</a></li> <li>fix: route WebSocket upgrades through onRequestUpgrade by <a href="https://github.com/mcollina"><code>@mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4787">nodejs/undici#4787</a></li> <li>build(deps-dev): bump esbuild from 0.25.12 to 0.27.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/nodejs/undici/pull/4821">nodejs/undici#4821</a></li> <li>fix(deduplicate): do not deduplicate non-safe methods by default by <a href="https://github.com/mcollina"><code>@mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4818">nodejs/undici#4818</a></li> <li>feat: Support async cache stores in revalidation by <a href="https://github.com/marcopiraccini"><code>@marcopiraccini</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4826">nodejs/undici#4826</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jackhax"><code>@jackhax</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4816">nodejs/undici#4816</a></li> <li><a href="https://github.com/marcopiraccini"><code>@marcopiraccini</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4826">nodejs/undici#4826</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.21.0...v7.22.0">https://github.com/nodejs/undici/compare/v7.21.0...v7.22.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodejs/undici/commit/0a236106a3a3e1b0aab424f71de2a68ca2c1d37b"><code>0a23610</code></a> Bumped v7.22.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4829">#4829</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/f3c5c614901e4ba29f2f60730c3d4f28e60a5186"><code>f3c5c61</code></a> feat: Support async cache stores in revalidation (<a href="https://redirect.github.com/nodejs/undici/issues/4826">#4826</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/9b78a44eb21cabe0451263ef8e3cfc7ad8e40876"><code>9b78a44</code></a> fix(deduplicate): avoid deduping methods not in methods option (<a href="https://redirect.github.com/nodejs/undici/issues/4818">#4818</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/0ce57bad2c171a16c043c8234317ef5383f86e0b"><code>0ce57ba</code></a> build(deps-dev): bump esbuild from 0.25.12 to 0.27.3 (<a href="https://redirect.github.com/nodejs/undici/issues/4821">#4821</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/2453caf93824997c24383e5a84fddbfa783113b0"><code>2453caf</code></a> fix: route websocket upgrades through new handler API (<a href="https://redirect.github.com/nodejs/undici/issues/4787">#4787</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/4658cdf5eacf3f6692ec96811a0e49e6b9bc060a"><code>4658cdf</code></a> feat(dispatcher/env-http-proxy-agent): strip leading dot and asterisk (<a href="https://redirect.github.com/nodejs/undici/issues/4676">#4676</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/a821c5669fa653364649d8fb7b36957702c548f5"><code>a821c56</code></a> fix: use OR operator in includesCredentials per WHATWG URL Standard (<a href="https://redirect.github.com/nodejs/undici/issues/4816">#4816</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/b3326b58969e2370a7da77d80dbad4df2f36ca1e"><code>b3326b5</code></a> docs: fix syntax highlighting in WebSocket.md (<a href="https://redirect.github.com/nodejs/undici/issues/4814">#4814</a>)</li> <li>See full diff in <a href="https://github.com/nodejs/undici/compare/v7.21.0...v7.22.0">compare view</a></li> </ul> </details> <br /> Updates `@types/react` from 19.2.13 to 19.2.14 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>