chore(deps): (deps): bump the production group across 1 directory with 33 updates by dependabot[bot] · Pull Request #949 · tidev/titanium-cli

dependabot · 2026-05-27T04:51:25Z

Bumps the production group with 5 updates in the / directory:

Package	From	To
fs-extra	`11.3.4`	`11.3.5`
semver	`7.7.4`	`7.8.1`
undici	`8.0.2`	`8.3.0`
which	`6.0.1`	`7.0.0`
yauzl	`3.3.0`	`3.3.1`

Updates fs-extra from 11.3.4 to 11.3.5

Changelog

Sourced from fs-extra's changelog.

11.3.5 / 2026-05-06

Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)

Fix error handling in timestamp preservation code (#1065, #1069)

Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)

Commits

8a88f58 11.3.5
81a1311 Mirror all utimesMillis() tests for utimesMillisSync() (#1070)
b7ab7f8 Properly handle close errors in utimesMillis*() (#1069)
1c248ed Fix file descriptor leak in utimesMillisSync (#1066)
a4000d6 Ensure all usages of areIdentical receive bigint stats (#1068)
1e9c57d Fix error handling in utimesMillis (#1065)
See full diff in compare view

Updates semver from 7.7.4 to 7.8.1

Release notes

Sourced from semver's releases.

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

17aa702 #869 strip build metadata before comparator trimming (#869) (@owlstronaut)

5f3ca13 #867 handle prerelease bounds in subset (#867) (@puneetdixit200, Puneet Dixit)

v7.8.0

7.8.0 (2026-05-08)

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)

37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)

937bc2c #860 template-oss-apply@5.0.0 (@owlstronaut)

6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

Changelog

Sourced from semver's changelog.

7.8.1 (2026-05-21)

Bug Fixes

17aa702 #869 strip build metadata before comparator trimming (#869) (@owlstronaut)

5f3ca13 #867 handle prerelease bounds in subset (#867) (@puneetdixit200, Puneet Dixit)

7.8.0 (2026-05-08)

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)

37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)

937bc2c #860 template-oss-apply@5.0.0 (@owlstronaut)

6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

Commits

7641608 chore: release 7.8.1 (#868)
17aa702 fix: strip build metadata before comparator trimming (#869)
5f3ca13 fix: handle prerelease bounds in subset (#867)
efa4be6 chore: release 7.8.0 (#847)
9542e09 chore: template-oss-apply
937bc2c chore: template-oss-apply@5.0.0
3905343 fix: Warn when defaulting to --inc=patch in CLI
0d0a0a2 feat: Add truncate function (#855)
c368af6 docs: fix typos in documentation (#853)
6946fef chore: bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852)
Additional commits viewable in compare view

Updates undici from 8.0.2 to 8.3.0

Release notes

Sourced from undici's releases.

v8.3.0

What's Changed

fix: preserve pool capacity after removing stale client by @trivikr in nodejs/undici#5151

build(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in nodejs/undici#5157

build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.1 by @dependabot[bot] in nodejs/undici#5162

build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in nodejs/undici#5156

chore(http2): collapse duplicate request stream setup by @trivikr in nodejs/undici#5140

perf(client): cache HTTP/2 authority by @trivikr in nodejs/undici#5141

build(deps-dev): bump borp from 0.20.2 to 1.0.0 by @dependabot[bot] in nodejs/undici#4819

types: add TOpaque to client connect options by @samuel871211 in nodejs/undici#4928

build(deps): bump tinybench from 5.1.0 to 6.0.1 in /benchmarks by @dependabot[bot] in nodejs/undici#4688

build(deps): bump codecov/codecov-action from 5.5.1 to 6.0.0 by @dependabot[bot] in nodejs/undici#4950

build(deps): bump actions/dependency-review-action from 4.8.1 to 4.9.0 by @dependabot[bot] in nodejs/undici#4951

test(fetch): add userinfo coverage for issue-4897 URLs by @mcollina in nodejs/undici#4901

perf: avoid duplicate pool dispatcher selection on backpressure by @trivikr in nodejs/undici#5149

build(deps): bump actions/setup-node from 6.2.0 to 6.4.0 by @dependabot[bot] in nodejs/undici#5163

build(deps): bump step-security/harden-runner from 2.14.1 to 2.19.1 by @dependabot[bot] in nodejs/undici#5160

build(deps): bump cronometro from 5.3.0 to 6.0.3 in /benchmarks by @dependabot[bot] in nodejs/undici#4687

build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by @dependabot[bot] in nodejs/undici#5161

build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in nodejs/undici#4853

build(deps): bump hendrikmuhs/ccache-action from 1.2.22 to 1.2.23 by @dependabot[bot] in nodejs/undici#5158

build(deps): bump fastify/github-action-merge-dependabot from 3.11.2 to 3.12.0 by @dependabot[bot] in nodejs/undici#5159

build(deps-dev): bump c8 from 10.1.3 to 11.0.0 by @dependabot[bot] in nodejs/undici#4854

build(deps): bump uWebSockets.js from v20.64.0 to v20.66.0 in /benchmarks by @dependabot[bot] in nodejs/undici#5130

docs: mention install() also installs WebSocket globals by @mcollina in nodejs/undici#5174

types: stop interfering with @types/node by @Renegade334 in nodejs/undici#5173

fix: align h2 empty body content-length methods with h1 by @trivikr in nodejs/undici#5172

build(deps-dev): bump fast-check from 4.6.0 to 4.7.0 by @dependabot[bot] in nodejs/undici#5192

build(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in nodejs/undici#5191

test: move cleanup from finally to after hooks by @trivikr in nodejs/undici#5194

test: resolve flaky timeout in issue-3356 by @trivikr in nodejs/undici#5188

SnapshotAgent: Add normalizeBody and normalizeQuery by @GeoffreyBooth in nodejs/undici#5121

fix(socks5): use configured connector in Socks5ProxyAgent by @trivikr in nodejs/undici#5168

perf(http2): avoid isArray checks for common headers by @trivikr in nodejs/undici#5170

fix(test): make deduplicate body-streaming test non-flaky by @mcollina in nodejs/undici#5196

test(retry): add regression test for RetryAgent + HTTP/2 stream timeout (#5137) by @mcollina in nodejs/undici#5176

fix(socks5): preserve dispatch backpressure return value by @trivikr in nodejs/undici#5166

perf(http2): end zero-length request bodies with headers by @trivikr in nodejs/undici#5169

fix(test): make issue-2898-comment.js assertion robust against flakiness by @mcollina in nodejs/undici#5208

test: disable timeouts in h2 high concurrency regression by @trivikr in nodejs/undici#5205

test: deflake stream compat coverage by @mcollina in nodejs/undici#5209

fix(dispatcher): remove unreachable assert in writeBlob by @SAY-5 in nodejs/undici#5231

fix: clean up benchmark resources before worker exit by @trivikr in nodejs/undici#5225

test: avoid per-chunk assertions in diagnostics get by @trivikr in nodejs/undici#5224

test: capture cache test worker stderr and preserve failures by @trivikr in nodejs/undici#5206

chore: gitignore benchmarks/package-lock.json by @trivikr in nodejs/undici#5228

perf(proxy-agent): avoid extra header allocations in auth guard by @trivikr in nodejs/undici#5164

test(wpt): retry WPT server startup on port conflicts or timeout by @trivikr in nodejs/undici#5215

test: make websocket diagnostics ping-pong ordering deterministic by @trivikr in nodejs/undici#5222

test(websocket): fix flaky send test by @mcollina in nodejs/undici#5232

... (truncated)

Commits

aa33b19 Bumped v8.3.0 (#5305)
f33a6cb test: fix flaky http2-dispatcher WebSocket upgrade tests (#5304)
ca0cb16 build(deps): bump uWebSockets.js in /benchmarks (#5299)
e1f9035 build(deps-dev): bump jest from 30.3.0 to 30.4.2 (#5297)
314ba6a perf(client-h2): reuse request upgrade stream handlers (#5293)
be9a544 Add Node 26 to the matrix (#5271)
45f7bd3 test: retry crashed cache-test workers once (#5294)
08cf765 build(deps-dev): bump fast-check from 4.7.0 to 4.8.0 (#5298)
df5ded9 cache formdata boundary (#5292)
e101dcb test: include after in parser-issues (#5284)
Additional commits viewable in compare view

Updates which from 6.0.1 to 7.0.0

Release notes

Sourced from which's releases.

v7.0.0

7.0.0 (2026-05-08)

⚠️ BREAKING CHANGES

which now supports node ^22.22.2 || ^24.15.0 || >=26.0.0

template-oss-apply

Features

471d90b #176 bump to new node engine range (@owlstronaut)

8aac36f #176 template-oss-apply (@owlstronaut)

Chores

9bdf003 #176 template-oss-apply (@owlstronaut)

Changelog

Sourced from which's changelog.

7.0.0 (2026-05-08)

⚠️ BREAKING CHANGES

which now supports node ^22.22.2 || ^24.15.0 || >=26.0.0

template-oss-apply

Features

471d90b #176 bump to new node engine range (@owlstronaut)

8aac36f #176 template-oss-apply (@owlstronaut)

Chores

9bdf003 #176 template-oss-apply (@owlstronaut)

Commits

297db11 chore: release 7.0.0 (#177)
9bdf003 chore: template-oss-apply
471d90b feat!: bump to new node engine range
8aac36f feat!: template-oss-apply
4824908 deps & engine update
See full diff in compare view

Updates yauzl from 3.3.0 to 3.3.1

Commits

84df2f2 version 3.3.1
cd9bd23 Fix destroy() usage in fd-slicer (#170)
bac0725 add tests for unusual compression method
See full diff in compare view

Updates @rollup/rollup-android-arm-eabi from 4.60.3 to 4.60.4

Release notes

Sourced from @rollup/rollup-android-arm-eabi's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Changelog

Sourced from @rollup/rollup-android-arm-eabi's changelog.

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Commits

d311a84 4.60.4
6aa3248 fix: stabilize chunk assignment across parallel file reads (#6362)
82a0fe7 Resolve vulnerabilities (#6375)
71f5ebc chore(deps): update dependency lru-cache to v11 (#6371)
af91d77 chore(deps): lock file maintenance (#6373)
65e7b94 chore(deps): update react monorepo to v19 (major) (#6372)
642587f fix(deps): update minor/patch updates (#6370)
See full diff in compare view

Updates @rollup/rollup-android-arm64 from 4.60.3 to 4.60.4

Release notes

Sourced from @rollup/rollup-android-arm64's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Changelog

Sourced from @rollup/rollup-android-arm64's changelog.

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Commits

d311a84 4.60.4
6aa3248 fix: stabilize chunk assignment across parallel file reads (#6362)
82a0fe7 Resolve vulnerabilities (#6375)
71f5ebc chore(deps): update dependency lru-cache to v11 (#6371)
af91d77 chore(deps): lock file maintenance (#6373)
65e7b94 chore(deps): update react monorepo to v19 (major) (#6372)
642587f fix(deps): update minor/patch updates (#6370)
See full diff in compare view

Updates @rollup/rollup-darwin-arm64 from 4.60.3 to 4.60.4

Release notes

Sourced from @rollup/rollup-darwin-arm64's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Changelog

Sourced from @rollup/rollup-darwin-arm64's changelog.

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Commits

d311a84 4.60.4
6aa3248 fix: stabilize chunk assignment across parallel file reads (#6362)
82a0fe7 Resolve vulnerabilities (#6375)
71f5ebc chore(deps): update dependency lru-cache to v11 (#6371)
af91d77 chore(deps): lock file maintenance (#6373)
65e7b94 chore(deps): update react monorepo to v19 (major) (#6372)
642587f fix(deps): update minor/patch updates (#6370)
See full diff in compare view

Updates @rollup/rollup-darwin-x64 from 4.60.3 to 4.60.4

Release notes

Sourced from @rollup/rollup-darwin-x64's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Changelog

Sourced from @rollup/rollup-darwin-x64's changelog.

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Commits

d311a84 4.60.4
6aa3248 fix: stabilize chunk assignment across parallel file reads (#6362)
82a0fe7 Resolve vulnerabilities (#6375)
71f5ebc chore(deps): update dependency lru-cache to v11 (#6371)
af91d77 chore(deps): lock file maintenance (#6373)
65e7b94 chore(deps): update react monorepo to v19 (major) (#6372)
642587f fix(deps): update minor/patch updates (#6370)
See full diff in compare view

Updates @rollup/rollup-freebsd-arm64 from 4.60.3 to 4.60.4

Release notes

Sourced from @rollup/rollup-freebsd-arm64's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Changelog

Sourced from @rollup/rollup-freebsd-arm64's changelog.

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Commits

d311a84 4.60.4
6aa3248 fix: stabilize chunk assignment across parallel file reads (#6362)
82a0fe7 Resolve vulnerabilities (#6375)
71f5ebc chore(deps): update dependency lru-cache to v11 (#6371)
af91d77 chore(deps): lock file maintenance (#6373)
65e7b94 chore(deps): update react monorepo to v19 (major) (#6372)
642587f fix(deps): update minor/patch updates (#6370)
See full diff in compare view

Updates @rollup/rollup-freebsd-x64 from 4.60.3 to 4.60.4

Release notes

Sourced from @rollup/rollup-freebsd-x64's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Changelog

Sourced from @rollup/rollup-freebsd-x64's changelog.

4.60.4

2026-05-14

Bug Fixes

Improve stability of chunk hashes (#6362)

Pull Requests

#6362: fix: stabilize chunk assignment across parallel file reads (@sonukapoor, @Sonu Kapoor, @TrickyPi, @lukastaegert)

#6370: fix(deps): update minor/patch updates (@renovate[bot])

#6371: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6372: chore(deps): update react monorepo to v19 (major) (@renovate[bot])

#6373: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

#6375: Resolve vulnerabilities (@lukastaegert)

Commits

d311a84 4.60.4

…h 33 updates Bumps the production group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.4` | `11.3.5` | | [semver](https://github.com/npm/node-semver) | `7.7.4` | `7.8.1` | | [undici](https://github.com/nodejs/undici) | `8.0.2` | `8.3.0` | | [which](https://github.com/npm/node-which) | `6.0.1` | `7.0.0` | | [yauzl](https://github.com/thejoshwolfe/yauzl) | `3.3.0` | `3.3.1` | Updates `fs-extra` from 11.3.4 to 11.3.5 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.4...11.3.5) Updates `semver` from 7.7.4 to 7.8.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.4...v7.8.1) Updates `undici` from 8.0.2 to 8.3.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.0.2...v8.3.0) Updates `which` from 6.0.1 to 7.0.0 - [Release notes](https://github.com/npm/node-which/releases) - [Changelog](https://github.com/npm/node-which/blob/main/CHANGELOG.md) - [Commits](npm/node-which@v6.0.1...v7.0.0) Updates `yauzl` from 3.3.0 to 3.3.1 - [Commits](thejoshwolfe/yauzl@3.3.0...3.3.1) Updates `@rollup/rollup-android-arm-eabi` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-android-arm64` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-darwin-arm64` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-darwin-x64` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-freebsd-arm64` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-freebsd-x64` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-arm-gnueabihf` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-arm-musleabihf` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-arm64-gnu` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-arm64-musl` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-loong64-gnu` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-loong64-musl` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-ppc64-gnu` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-ppc64-musl` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-riscv64-gnu` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-riscv64-musl` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-s390x-gnu` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-x64-gnu` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-linux-x64-musl` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-openbsd-x64` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-openharmony-arm64` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-win32-arm64-msvc` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-win32-ia32-msvc` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-win32-x64-gnu` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `@rollup/rollup-win32-x64-msvc` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) Updates `jsonfile` from 6.2.0 to 6.2.1 - [Changelog](https://github.com/jprichardson/node-jsonfile/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-jsonfile@6.2.0...6.2.1) Updates `postcss` from 8.5.14 to 8.5.15 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.14...8.5.15) Updates `rollup` from 4.60.3 to 4.60.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.3...v4.60.4) --- updated-dependencies: - dependency-name: fs-extra dependency-version: 11.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: semver dependency-version: 7.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: undici dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: which dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production - dependency-name: yauzl dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-android-arm-eabi" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-android-arm64" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-darwin-arm64" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-darwin-x64" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-freebsd-arm64" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-freebsd-x64" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm-gnueabihf" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm-musleabihf" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm64-gnu" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-arm64-musl" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-loong64-gnu" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-loong64-musl" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-ppc64-gnu" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-ppc64-musl" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-riscv64-gnu" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-riscv64-musl" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-s390x-gnu" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-linux-x64-musl" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-openbsd-x64" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-openharmony-arm64" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-arm64-msvc" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-ia32-msvc" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-x64-gnu" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: "@rollup/rollup-win32-x64-msvc" dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: jsonfile dependency-version: 6.2.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: postcss dependency-version: 8.5.15 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production - dependency-name: rollup dependency-version: 4.60.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-05-27T04:52:22Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	undici@8.3.0
	which@6.0.1 ⏵ 7.0.0
	fs-extra@11.3.5
	yauzl@3.3.1
	semver@7.8.1

View full report

dependabot Bot added the dependencies Pull requests that update a dependency file label May 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): (deps): bump the production group across 1 directory with 33 updates#949

chore(deps): (deps): bump the production group across 1 directory with 33 updates#949
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-ab960ac14c

dependabot Bot commented on behalf of github May 27, 2026

Uh oh!

socket-security Bot commented May 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 27, 2026

11.3.5 / 2026-05-06

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

7.8.1 (2026-05-21)

Bug Fixes

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

v8.3.0

What's Changed

v7.0.0

7.0.0 (2026-05-08)

⚠️ BREAKING CHANGES

Features

Chores

7.0.0 (2026-05-08)

⚠️ BREAKING CHANGES

Features

Chores

v4.60.4

4.60.4

Bug Fixes

Pull Requests

4.60.4

Bug Fixes

Pull Requests

v4.60.4

4.60.4

Bug Fixes

Pull Requests

4.60.4

Bug Fixes

Pull Requests

v4.60.4

4.60.4

Bug Fixes

Pull Requests

4.60.4

Bug Fixes

Pull Requests

v4.60.4

4.60.4

Bug Fixes

Pull Requests

4.60.4

Bug Fixes

Pull Requests

v4.60.4

4.60.4

Bug Fixes

Pull Requests

4.60.4

Bug Fixes

Pull Requests

v4.60.4

4.60.4

Bug Fixes

Pull Requests

4.60.4

Bug Fixes

Pull Requests

Uh oh!

socket-security Bot commented May 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects