Bump the minor-and-patch group across 1 directory with 6 updates #188

Closed
dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/minor-and-patch-e729e09d0b into master
dependabot[bot] commented 2026-03-13 07:26:05 +00:00 (Migrated from github.com)

Bumps the minor-and-patch group with 6 updates in the / directory:

Package From To
@sats-connect/core 0.17.1 0.17.2
framer-motion 12.34.4 12.36.0
pg 8.19.0 8.20.0
undici 7.22.0 7.24.0
@eslint/eslintrc 3.3.4 3.3.5
@types/node 25.3.3 25.5.0

Updates @sats-connect/core from 0.17.1 to 0.17.2

Commits

Updates framer-motion from 12.34.4 to 12.36.0

Changelog

Sourced from framer-motion's changelog.

[12.36.0] 2026-03-09

Added

  • Allow dragSnapToOrigin to accept "x" or "y" for per-axis snapping.
  • Added axis-locked layout animations with layout="x" and layout="y".
  • Added skipInitialAnimation to useSpring.

Fixed

  • Fixed height and width: auto animations with box-sizing: border-box.
  • Reset component values when exit animation finishes.
  • Ensure anticipate easing returns 1 at p === 1.
  • Fix @emotion/is-prop-valid resolve error in Storybook.
  • Remove data-pop-layout-id from exiting elements when animation interrupted.
  • Ensure we skip WAAPI for non-animatable keyframes.
  • Ensure we skip WAAPI for SVG transforms.
  • Ensure MotionValue props are not passed to SVG.
  • AnimatePresence: Prevent mode="wait" elements from getting stuck when switched rapidly.

[12.35.2] 2026-03-09

Fixed

  • Reduced filesize of styleEffect.
  • Fix rounding from popLayout.
  • opacity animations in React Strict Mode in development.
  • Ensure useSpring is not affected by monitor framerate.
  • Updating animations sequence segment types to exclude lifecycle handlers.
  • Fix layout animations with parents offset by a %-based translation.
  • Fix autoplay: false with WAAPI animations.
  • Fix layout jump in React Strict Mode in development.
  • Detect divide-by-zero in CSS calc() values before making animatable templates.

[12.35.1] 2026-03-06

Fixed

  • Fixing combination of string keyframes, spring and delay.
  • Gracefully handle negative scroll values.
  • Fix one-frame visual gap when rapidly switching WAAPI animations.
  • animation.time = 0 on a finished animation sets the playhead in a paused state.

[12.35.0] 2026-03-03

Added

  • ViewTimeline support for scroll and useScroll.

[12.34.6] 2026-03-03

... (truncated)

Commits
  • ea66e17 v12.36.0
  • db5726d Adding tests for exit animations
  • 5ccc21a Updating changelog
  • 06159b3 Latest
  • ed64e5f Merge pull request #3625 from motiondivision/worktree-fix-issue-3141
  • 5fad98c Merge pull request #3627 from motiondivision/worktree-fix-issue-3103
  • f084bb2 Simplify axis-snap logic: use copyAxisInto, remove redundant isShared block
  • 3204711 Merge pull request #3626 from motiondivision/audit/motion-dom-frameloop
  • 25bf593 Merge pull request #3629 from motiondivision/worktree-fix-issue-3082
  • 0dad36b Merge pull request #3634 from motiondivision/worktree-fix-issue-3102
  • Additional commits viewable in compare view

Updates pg from 8.19.0 to 8.20.0

Changelog

Sourced from pg's changelog.

pg@8.20.0

  • Add onConnect callback to pg.Pool constructor options allowing for async initialization of newly created & connected pooled clients.
Commits

Updates undici from 7.22.0 to 7.24.0

Release notes

Sourced from undici's releases.

v7.24.0

Undici v7.24.0 Security Release Notes

This release addresses multiple security vulnerabilities in Undici.

Upgrade guidance

All users on v7 should upgrade to v7.24.0 or later.

Fixed advisories

  • GHSA-2mjp-6q6p-2qxm / CVE-2026-1525 (Medium)
    Inconsistent interpretation of HTTP requests (request/response smuggling class issue).

  • GHSA-f269-vfmq-vjvj / CVE-2026-1528 (High)
    Malicious WebSocket 64-bit frame length handling could crash the client.

  • GHSA-phc3-fgpg-7m6h / CVE-2026-2581 (Medium)
    Unbounded memory consumption in deduplication interceptor response buffering (DoS risk).

  • GHSA-4992-7rv2-5pvq / CVE-2026-1527 (Medium)
    CRLF injection via the upgrade option.

  • GHSA-v9p9-hfj2-hcw8 / CVE-2026-2229 (High)
    Unhandled exception from invalid server_max_window_bits in WebSocket permessage-deflate negotiation.

  • GHSA-vrm6-8vpv-qv8q / CVE-2026-1526 (High)
    Unbounded memory consumption in WebSocket permessage-deflate decompression.

Affected and patched ranges

  • CVE-2026-1525: affected 7.0.0 < 7.24.0, patched 7.24.0
  • CVE-2026-1528: affected 7.0.0 < 7.24.0, patched 7.24.0
  • CVE-2026-2581: affected >= 7.17.0 < 7.24.0, patched 7.24.0
  • CVE-2026-1527: affected 7.0.0 < 7.24.0, patched 7.24.0
  • CVE-2026-2229: affected 7.0.0 < 7.24.0, patched 7.24.0
  • CVE-2026-1526: affected 7.0.0 < 7.24.0, patched 7.24.0

References

v7.23.0

What's Changed

... (truncated)

Commits
  • 07a3906 Bumped v7.24.0 (#4887)
  • 74495c6 fix: reject duplicate content-length and host headers
  • 84235c6 Fix websocket 64-bit length overflow
  • 77594f9 fix: validate upgrade header to prevent CRLF injection
  • cb79c57 fix: validate server_max_window_bits range in permessage-deflate
  • 4147ce2 Merge commit '2ee00cb3'
  • 2ee00cb fix(websocket): add maxDecompressedMessageSize limit for permessage-deflate
  • 5890c7b fix(deduplicate): stream response chunks to waiting handlers
  • fbda3c1 Bumped v7.23.0 (#4884)
  • 07276c9 fix: remove unused kSocketPath symbol
  • Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.3.4 to 3.3.5

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.5

3.3.5 (2026-03-04)

Bug Fixes

  • update dependency minimatch to ^3.1.5 (#227) (3dc2381)
Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.5 (2026-03-04)

Bug Fixes

  • update dependency minimatch to ^3.1.5 (#227) (3dc2381)
Commits

Updates @types/node from 25.3.3 to 25.5.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Bumps the minor-and-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sats-connect/core](https://github.com/secretkeylabs/sats-connect-core) | `0.17.1` | `0.17.2` | | [framer-motion](https://github.com/motiondivision/motion) | `12.34.4` | `12.36.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.19.0` | `8.20.0` | | [undici](https://github.com/nodejs/undici) | `7.22.0` | `7.24.0` | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.4` | `3.3.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.5.0` | Updates `@sats-connect/core` from 0.17.1 to 0.17.2 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/secretkeylabs/sats-connect-core/commits">compare view</a></li> </ul> </details> <br /> Updates `framer-motion` from 12.34.4 to 12.36.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motiondivision/motion/blob/main/CHANGELOG.md">framer-motion's changelog</a>.</em></p> <blockquote> <h2>[12.36.0] 2026-03-09</h2> <h3>Added</h3> <ul> <li>Allow <code>dragSnapToOrigin</code> to accept <code>&quot;x&quot;</code> or <code>&quot;y&quot;</code> for per-axis snapping.</li> <li>Added axis-locked layout animations with <code>layout=&quot;x&quot;</code> and <code>layout=&quot;y&quot;</code>.</li> <li>Added <code>skipInitialAnimation</code> to <code>useSpring</code>.</li> </ul> <h3>Fixed</h3> <ul> <li>Fixed <code>height</code> and <code>width: auto</code> animations with <code>box-sizing: border-box</code>.</li> <li>Reset component values when exit animation finishes.</li> <li>Ensure <code>anticipate</code> easing returns <code>1</code> at <code>p === 1</code>.</li> <li>Fix <code>@emotion/is-prop-valid</code> resolve error in Storybook.</li> <li>Remove <code>data-pop-layout-id</code> from exiting elements when animation interrupted.</li> <li>Ensure we skip WAAPI for non-animatable keyframes.</li> <li>Ensure we skip WAAPI for SVG transforms.</li> <li>Ensure <code>MotionValue</code> props are not passed to SVG.</li> <li><code>AnimatePresence</code>: Prevent <code>mode=&quot;wait&quot;</code> elements from getting stuck when switched rapidly.</li> </ul> <h2>[12.35.2] 2026-03-09</h2> <h3>Fixed</h3> <ul> <li>Reduced filesize of <code>styleEffect</code>.</li> <li>Fix rounding from <code>popLayout</code>.</li> <li><code>opacity</code> animations in React Strict Mode in development.</li> <li>Ensure <code>useSpring</code> is not affected by monitor framerate.</li> <li>Updating animations sequence segment types to exclude lifecycle handlers.</li> <li>Fix layout animations with parents offset by a <code>%</code>-based translation.</li> <li>Fix <code>autoplay: false</code> with WAAPI animations.</li> <li>Fix layout jump in React Strict Mode in development.</li> <li>Detect divide-by-zero in CSS <code>calc()</code> values before making animatable templates.</li> </ul> <h2>[12.35.1] 2026-03-06</h2> <h3>Fixed</h3> <ul> <li>Fixing combination of string keyframes, spring and <code>delay</code>.</li> <li>Gracefully handle negative scroll values.</li> <li>Fix one-frame visual gap when rapidly switching WAAPI animations.</li> <li><code>animation.time = 0</code> on a finished animation sets the playhead in a paused state.</li> </ul> <h2>[12.35.0] 2026-03-03</h2> <h3>Added</h3> <ul> <li><code>ViewTimeline</code> support for <code>scroll</code> and <code>useScroll</code>.</li> </ul> <h2>[12.34.6] 2026-03-03</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motiondivision/motion/commit/ea66e177f27fc2329295c353abd3907bb48bff60"><code>ea66e17</code></a> v12.36.0</li> <li><a href="https://github.com/motiondivision/motion/commit/db5726dcb5f48c714f31d33d4805e85d588ba50c"><code>db5726d</code></a> Adding tests for exit animations</li> <li><a href="https://github.com/motiondivision/motion/commit/5ccc21a3386b48e75379d540bc5a5a1f6a4c3c40"><code>5ccc21a</code></a> Updating changelog</li> <li><a href="https://github.com/motiondivision/motion/commit/06159b33403c5a1567cdbe2ab5492affb4bfbc5c"><code>06159b3</code></a> Latest</li> <li><a href="https://github.com/motiondivision/motion/commit/ed64e5fc398fd075e8fd19e32cebf2d6df0c4234"><code>ed64e5f</code></a> Merge pull request <a href="https://redirect.github.com/motiondivision/motion/issues/3625">#3625</a> from motiondivision/worktree-fix-issue-3141</li> <li><a href="https://github.com/motiondivision/motion/commit/5fad98c757808d9f49691ca0cadd77259cdc459a"><code>5fad98c</code></a> Merge pull request <a href="https://redirect.github.com/motiondivision/motion/issues/3627">#3627</a> from motiondivision/worktree-fix-issue-3103</li> <li><a href="https://github.com/motiondivision/motion/commit/f084bb2e1d98dd40e0d66d277fee2c3a7ebf9912"><code>f084bb2</code></a> Simplify axis-snap logic: use copyAxisInto, remove redundant isShared block</li> <li><a href="https://github.com/motiondivision/motion/commit/32047118ff4177e2ae5f7e0f0a19147375be17b2"><code>3204711</code></a> Merge pull request <a href="https://redirect.github.com/motiondivision/motion/issues/3626">#3626</a> from motiondivision/audit/motion-dom-frameloop</li> <li><a href="https://github.com/motiondivision/motion/commit/25bf593faa34de862c7088e3478acae0124e0643"><code>25bf593</code></a> Merge pull request <a href="https://redirect.github.com/motiondivision/motion/issues/3629">#3629</a> from motiondivision/worktree-fix-issue-3082</li> <li><a href="https://github.com/motiondivision/motion/commit/0dad36bd8d0de94f447495b56067d1589bf42f41"><code>0dad36b</code></a> Merge pull request <a href="https://redirect.github.com/motiondivision/motion/issues/3634">#3634</a> from motiondivision/worktree-fix-issue-3102</li> <li>Additional commits viewable in <a href="https://github.com/motiondivision/motion/compare/v12.34.4...v12.36.0">compare view</a></li> </ul> </details> <br /> Updates `pg` from 8.19.0 to 8.20.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md">pg's changelog</a>.</em></p> <blockquote> <h2>pg@8.20.0</h2> <ul> <li>Add <a href="https://redirect.github.com/brianc/node-postgres/pull/3620">onConnect</a> callback to pg.Pool constructor options allowing for async initialization of newly created &amp; connected pooled clients.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/brianc/node-postgres/commit/c9070cc8d526fca65780cedc25c1966b57cf7532"><code>c9070cc</code></a> Publish</li> <li><a href="https://github.com/brianc/node-postgres/commit/ad36e3c9e80fae771d636328420cebe7d544baae"><code>ad36e3c</code></a> fix: typo in deprecation notice for <code>client.query()</code> (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3618">#3618</a>)</li> <li>See full diff in <a href="https://github.com/brianc/node-postgres/commits/pg@8.20.0/packages/pg">compare view</a></li> </ul> </details> <br /> Updates `undici` from 7.22.0 to 7.24.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nodejs/undici/releases">undici's releases</a>.</em></p> <blockquote> <h2>v7.24.0</h2> <h1>Undici v7.24.0 Security Release Notes</h1> <p>This release addresses multiple security vulnerabilities in Undici.</p> <h2>Upgrade guidance</h2> <p>All users on v7 should upgrade to <strong>v7.24.0</strong> or later.</p> <h2>Fixed advisories</h2> <ul> <li> <p><a href="https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm">GHSA-2mjp-6q6p-2qxm</a> / CVE-2026-1525 (Medium)<br /> Inconsistent interpretation of HTTP requests (request/response smuggling class issue).</p> </li> <li> <p><a href="https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj">GHSA-f269-vfmq-vjvj</a> / CVE-2026-1528 (High)<br /> Malicious WebSocket 64-bit frame length handling could crash the client.</p> </li> <li> <p><a href="https://github.com/nodejs/undici/security/advisories/GHSA-phc3-fgpg-7m6h">GHSA-phc3-fgpg-7m6h</a> / CVE-2026-2581 (Medium)<br /> Unbounded memory consumption in deduplication interceptor response buffering (DoS risk).</p> </li> <li> <p><a href="https://github.com/nodejs/undici/security/advisories/GHSA-4992-7rv2-5pvq">GHSA-4992-7rv2-5pvq</a> / CVE-2026-1527 (Medium)<br /> CRLF injection via the <code>upgrade</code> option.</p> </li> <li> <p><a href="https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8">GHSA-v9p9-hfj2-hcw8</a> / CVE-2026-2229 (High)<br /> Unhandled exception from invalid <code>server_max_window_bits</code> in WebSocket permessage-deflate negotiation.</p> </li> <li> <p><a href="https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q">GHSA-vrm6-8vpv-qv8q</a> / CVE-2026-1526 (High)<br /> Unbounded memory consumption in WebSocket permessage-deflate decompression.</p> </li> </ul> <h2>Affected and patched ranges</h2> <ul> <li>CVE-2026-1525: affected <code>7.0.0 &lt; 7.24.0</code>, patched <code>7.24.0</code></li> <li>CVE-2026-1528: affected <code>7.0.0 &lt; 7.24.0</code>, patched <code>7.24.0</code></li> <li>CVE-2026-2581: affected <code>&gt;= 7.17.0 &lt; 7.24.0</code>, patched <code>7.24.0</code></li> <li>CVE-2026-1527: affected <code>7.0.0 &lt; 7.24.0</code>, patched <code>7.24.0</code></li> <li>CVE-2026-2229: affected <code>7.0.0 &lt; 7.24.0</code>, patched <code>7.24.0</code></li> <li>CVE-2026-1526: affected <code>7.0.0 &lt; 7.24.0</code>, patched <code>7.24.0</code></li> </ul> <h2>References</h2> <ul> <li>GitHub Security Advisories: <a href="https://github.com/nodejs/undici/security/advisories">https://github.com/nodejs/undici/security/advisories</a></li> <li>NVD CVE-2026-1525: <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1525">https://nvd.nist.gov/vuln/detail/CVE-2026-1525</a></li> <li>NVD CVE-2026-1528: <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1528">https://nvd.nist.gov/vuln/detail/CVE-2026-1528</a></li> <li>NVD CVE-2026-2581: <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-2581">https://nvd.nist.gov/vuln/detail/CVE-2026-2581</a></li> <li>NVD CVE-2026-1527: <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1527">https://nvd.nist.gov/vuln/detail/CVE-2026-1527</a></li> <li>NVD CVE-2026-2229: <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-2229">https://nvd.nist.gov/vuln/detail/CVE-2026-2229</a></li> <li>NVD CVE-2026-1526: <a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1526">https://nvd.nist.gov/vuln/detail/CVE-2026-1526</a></li> </ul> <h2>v7.23.0</h2> <h2>What's Changed</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodejs/undici/commit/07a39067a0485c1953196f500d945fe09378a176"><code>07a3906</code></a> Bumped v7.24.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4887">#4887</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/74495c63ab23ef39be99983ed6de81df5d203d45"><code>74495c6</code></a> fix: reject duplicate content-length and host headers</li> <li><a href="https://github.com/nodejs/undici/commit/84235c62e0fe7494cec13f81d5732db0859df417"><code>84235c6</code></a> Fix websocket 64-bit length overflow</li> <li><a href="https://github.com/nodejs/undici/commit/77594f923cef4c27ee0bad365e7b4c44a199edae"><code>77594f9</code></a> fix: validate upgrade header to prevent CRLF injection</li> <li><a href="https://github.com/nodejs/undici/commit/cb79c5704ac47e42ce01a72269994fc70e377536"><code>cb79c57</code></a> fix: validate server_max_window_bits range in permessage-deflate</li> <li><a href="https://github.com/nodejs/undici/commit/4147ce21277b3566d02d3be789e5f7a490089db2"><code>4147ce2</code></a> Merge commit '2ee00cb3'</li> <li><a href="https://github.com/nodejs/undici/commit/2ee00cb322c76b0bf56829462d7c1dc53d1cbe3d"><code>2ee00cb</code></a> fix(websocket): add maxDecompressedMessageSize limit for permessage-deflate</li> <li><a href="https://github.com/nodejs/undici/commit/5890c7b7076894d00402f0c23c0fe72e59c72ff4"><code>5890c7b</code></a> fix(deduplicate): stream response chunks to waiting handlers</li> <li><a href="https://github.com/nodejs/undici/commit/fbda3c166860772dd80b2577175617d9dddcdb81"><code>fbda3c1</code></a> Bumped v7.23.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4884">#4884</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/07276c90545bd66b075a7002875fcfa7f8d9fd04"><code>07276c9</code></a> fix: remove unused kSocketPath symbol</li> <li>Additional commits viewable in <a href="https://github.com/nodejs/undici/compare/v7.22.0...v7.24.0">compare view</a></li> </ul> </details> <br /> Updates `@eslint/eslintrc` from 3.3.4 to 3.3.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslintrc/releases"><code>@​eslint/eslintrc</code>'s releases</a>.</em></p> <blockquote> <h2>eslintrc: v3.3.5</h2> <h2><a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.4...eslintrc-v3.3.5">3.3.5</a> (2026-03-04)</h2> <h3>Bug Fixes</h3> <ul> <li>update dependency minimatch to ^3.1.5 (<a href="https://redirect.github.com/eslint/eslintrc/issues/227">#227</a>) (<a href="https://github.com/eslint/eslintrc/commit/3dc2381e3e063f41e6b135650d05cdfe4045804e">3dc2381</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md"><code>@​eslint/eslintrc</code>'s changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.4...eslintrc-v3.3.5">3.3.5</a> (2026-03-04)</h2> <h3>Bug Fixes</h3> <ul> <li>update dependency minimatch to ^3.1.5 (<a href="https://redirect.github.com/eslint/eslintrc/issues/227">#227</a>) (<a href="https://github.com/eslint/eslintrc/commit/3dc2381e3e063f41e6b135650d05cdfe4045804e">3dc2381</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslintrc/commit/5135df1a5388ebb2e340a631c69f0d3ce9f2432f"><code>5135df1</code></a> chore: release 3.3.5 🚀 (<a href="https://redirect.github.com/eslint/eslintrc/issues/228">#228</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/c109d69371e8544823637b708a16735e9136536c"><code>c109d69</code></a> docs: Update README sponsors</li> <li><a href="https://github.com/eslint/eslintrc/commit/3dc2381e3e063f41e6b135650d05cdfe4045804e"><code>3dc2381</code></a> fix: update dependency minimatch to ^3.1.5 (<a href="https://redirect.github.com/eslint/eslintrc/issues/227">#227</a>)</li> <li><a href="https://github.com/eslint/eslintrc/commit/81385b67f04cac42ab068dc78e3ee1ce6668ef5c"><code>81385b6</code></a> ci: pin Node.js 25.6.1 (<a href="https://redirect.github.com/eslint/eslintrc/issues/226">#226</a>)</li> <li>See full diff in <a href="https://github.com/eslint/eslintrc/compare/eslintrc-v3.3.4...eslintrc-v3.3.5">compare view</a></li> </ul> </details> <br /> Updates `@types/node` from 25.3.3 to 25.5.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>
dependabot[bot] commented 2026-03-16 07:27:36 +00:00 (Migrated from github.com)

Looks like these dependencies are updatable in another way, so this is no longer needed.

Looks like these dependencies are updatable in another way, so this is no longer needed.

Pull request closed

Sign in to join this conversation.
No description provided.