Bump the npm_and_yarn group across 1 directory with 4 updates #49

Open
dependabot[bot] wants to merge 1 commits from dependabot/npm_and_yarn/npm_and_yarn-501d00c4a0 into main
dependabot[bot] commented 2026-09-17 21:08:04 +00:00 (Migrated from github.com)

Bumps the npm_and_yarn group with 4 updates in the / directory: browserslist, fast-uri, ip-address and js-yaml.

Updates browserslist from 4.28.4 to 4.29.0

Release notes

Sourced from browserslist's releases.

4.29.0

  • Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

4.28.6

4.28.5

Changelog

Sourced from browserslist's changelog.

4.29.0

  • Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

4.28.6

4.28.5

Commits
  • e6dd578 Release 4.29.0 version
  • 8987b7d Typo
  • 47fefe6 Move from actions-up to pnpm
  • 17b1e23 Update dependencies
  • df16b26 Merge pull request #944 from fzlzjerry/fix/757-query-continuations
  • a2673d7 Support query continuations across entries
  • f46a5b7 Merge pull request #942 from agilgur5/fix-docs-typo-security-table
  • 989c8c9 docs: fix typo in table rendering for SECURITY.md
  • 12ed525 Release 4.28.9 version
  • b1d8cf9 Update dependencies
  • Additional commits viewable in compare view

Updates fast-uri from 3.1.3 to 3.1.8

Release notes

Sourced from fast-uri's releases.

v3.1.8

⚠️ Security Warning

This security release fixes the following medium-severity security advisory:

Users of the v3.x release line should upgrade to v3.1.8.

Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8

v3.1.7

⚠️ Security Warning

This is a security release that fixes the following high-severity security advisories:

Users of the v3.x release line should upgrade to v3.1.7.

Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7

v3.1.6

⚠️ Security Warning

This release addresses the following high-severity security advisories:

Users of the v3.x release line should upgrade to v3.1.6.

Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6

v3.1.5

⚠️ Security Warning

Fix for https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7

Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5

v3.1.4

⚠️ Security Release

Fix for https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx

Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4

Commits
  • ead3ab7 Bumped v3.1.8
  • c88b59e fix: normalize decoded reg-name case
  • 412e40a Bumped v3.1.7
  • 9f4c943 fix: backport port and IP-literal validation to v3.x (#216)
  • 1eb3ce4 fix: treat unterminated bracket hosts as reg-names again (#214)
  • 6f970b2 Bumped v3.1.6
  • d941579 fix: never run IDN canonicalization on bracketed IP literals
  • c0f0279 test: adapt decoded-scheme handler assertion to 3.x (no mailto scheme)
  • 37f3417 Merge commit from fork
  • 607bfbe Merge commit from fork
  • Additional commits viewable in compare view

Updates ip-address from 10.2.0 to 10.7.2

Release notes

Sourced from ip-address's releases.

v10.7.2

What's Changed

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.2

v10.7.1

What's Changed

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.7.0...v10.7.1

v10.7.0

What's Changed

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.6.0...v10.7.0

v10.6.0

What's Changed

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.5.1...v10.6.0

v10.5.1

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.5.1

v10.5.0

What's Changed

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.4.0...v10.5.0

v10.4.0

What's Changed

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0

v10.3.1

Full Changelog: https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1

... (truncated)

Commits
  • 974b48d 10.7.2
  • 4dfe8e5 Accept an arpa suffix in any case and without the root dot in fromArpa (#227)
  • f0c25df 10.7.1
  • 8b34a21 Merge commit from fork
  • 13b6155 Merge commit from fork
  • 469ead1 Reject an address longer than the family allows before parsing it
  • 1343629 Report an address of the other family as not contained
  • 4c2184a Bump js-yaml and brace-expansion in the lockfile (#226)
  • 2b7cab5 10.7.0
  • 87fae23 Add offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ip-address since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates js-yaml from 4.3.0 to 4.3.2

Changelog

Sourced from js-yaml's changelog.

4.3.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

4.3.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps the npm_and_yarn group with 4 updates in the / directory: [browserslist](https://github.com/browserslist/browserslist), [fast-uri](https://github.com/fastify/fast-uri), [ip-address](https://github.com/beaugunderson/ip-address) and [js-yaml](https://github.com/nodeca/js-yaml). Updates `browserslist` from 4.28.4 to 4.29.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/browserslist/browserslist/releases">browserslist's releases</a>.</em></p> <blockquote> <h2>4.29.0</h2> <ul> <li>Added query continuations across lines and array entries (by <a href="https://github.com/fzlzjerry"><code>@​fzlzjerry</code></a>).</li> </ul> <h2>4.28.9</h2> <ul> <li>Improve <code>or</code> parsing performance (by <a href="https://github.com/NotAFlightRisk"><code>@​NotAFlightRisk</code></a>).</li> </ul> <h2>4.28.8</h2> <ul> <li>Fixed <code>including kaios</code> in baseline queries (by <a href="https://github.com/Jaybhade"><code>@​Jaybhade</code></a>).</li> </ul> <h2>4.28.7</h2> <ul> <li>Improved parsing performance.</li> <li>Fixed unbounded memory growth (by <a href="https://github.com/alanturing881"><code>@​alanturing881</code></a>).</li> <li>Fixed prototype write issue (by <a href="https://github.com/alanturing881"><code>@​alanturing881</code></a>).</li> </ul> <h2>4.28.6</h2> <ul> <li>Fixed Electron version queries (by <a href="https://github.com/spokodev"><code>@​spokodev</code></a>).</li> </ul> <h2>4.28.5</h2> <ul> <li>Fixed <code>&gt;</code> and <code>&gt;=</code> queries (by <a href="https://github.com/spokodev"><code>@​spokodev</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md">browserslist's changelog</a>.</em></p> <blockquote> <h2>4.29.0</h2> <ul> <li>Added query continuations across lines and array entries (by <a href="https://github.com/fzlzjerry"><code>@​fzlzjerry</code></a>).</li> </ul> <h2>4.28.9</h2> <ul> <li>Improved <code>or</code> parsing performance (by <a href="https://github.com/NotAFlightRisk"><code>@​NotAFlightRisk</code></a>).</li> </ul> <h2>4.28.8</h2> <ul> <li>Fixed <code>including kaios</code> in baseline queries (by <a href="https://github.com/Jaybhade"><code>@​Jaybhade</code></a>).</li> </ul> <h2>4.28.7</h2> <ul> <li>Improved parsing performance.</li> <li>Fixed unbounded memory growth (by <a href="https://github.com/alanturing881"><code>@​alanturing881</code></a>).</li> <li>Fixed prototype write issue (by <a href="https://github.com/alanturing881"><code>@​alanturing881</code></a>).</li> </ul> <h2>4.28.6</h2> <ul> <li>Fixed Electron version queries (by <a href="https://github.com/spokodev"><code>@​spokodev</code></a>).</li> </ul> <h2>4.28.5</h2> <ul> <li>Fixed <code>&gt;</code> and <code>&gt;=</code> queries (by <a href="https://github.com/spokodev"><code>@​spokodev</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserslist/browserslist/commit/e6dd5787c2a650cca838c689823c1d55d0a1be1a"><code>e6dd578</code></a> Release 4.29.0 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/8987b7d81dcafb11788b2393ff2372ec4c596029"><code>8987b7d</code></a> Typo</li> <li><a href="https://github.com/browserslist/browserslist/commit/47fefe686ce866a3b2ccb7d3aadf9bb3207d8356"><code>47fefe6</code></a> Move from actions-up to pnpm</li> <li><a href="https://github.com/browserslist/browserslist/commit/17b1e232996bb890b465c6efdfbdc5c27bc65f45"><code>17b1e23</code></a> Update dependencies</li> <li><a href="https://github.com/browserslist/browserslist/commit/df16b268e6f29fb08c48e180332137498888dd3e"><code>df16b26</code></a> Merge pull request <a href="https://redirect.github.com/browserslist/browserslist/issues/944">#944</a> from fzlzjerry/fix/757-query-continuations</li> <li><a href="https://github.com/browserslist/browserslist/commit/a2673d7974c0228c562e78538888de55f0408976"><code>a2673d7</code></a> Support query continuations across entries</li> <li><a href="https://github.com/browserslist/browserslist/commit/f46a5b74e75fec2bda62c6520fc2296bda3c0fe3"><code>f46a5b7</code></a> Merge pull request <a href="https://redirect.github.com/browserslist/browserslist/issues/942">#942</a> from agilgur5/fix-docs-typo-security-table</li> <li><a href="https://github.com/browserslist/browserslist/commit/989c8c9abe52be4485af8e1570919ebdd65a2db2"><code>989c8c9</code></a> docs: fix typo in table rendering for <code>SECURITY.md</code></li> <li><a href="https://github.com/browserslist/browserslist/commit/12ed5252dabc14fee4e97b465894b2f90910ca62"><code>12ed525</code></a> Release 4.28.9 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/b1d8cf9d7a7dc76f6585425a8360218289194297"><code>b1d8cf9</code></a> Update dependencies</li> <li>Additional commits viewable in <a href="https://github.com/browserslist/browserslist/compare/4.28.4...4.29.0">compare view</a></li> </ul> </details> <br /> Updates `fast-uri` from 3.1.3 to 3.1.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastify/fast-uri/releases">fast-uri's releases</a>.</em></p> <blockquote> <h2>v3.1.8</h2> <h2>⚠️ Security Warning</h2> <p>This security release fixes the following medium-severity security advisory:</p> <ul> <li><a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj">GHSA-hrr3-gc8f-f4qj</a> — inconsistent host case normalization via percent-encoded octets</li> </ul> <p>Users of the v3.x release line should upgrade to v3.1.8.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8">https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8</a></p> <h2>v3.1.7</h2> <h2>⚠️ Security Warning</h2> <p>This is a security release that fixes the following high-severity security advisories:</p> <ul> <li><a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3">GHSA-qw65-cvwx-89v3</a> — authority injection via an unvalidated port in <code>serialize()</code></li> <li><a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g">GHSA-58mr-gqgx-xq4g</a> — host confusion via unbalanced or misplaced IP-literal brackets</li> </ul> <p>Users of the v3.x release line should upgrade to v3.1.7.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7">https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7</a></p> <h2>v3.1.6</h2> <h2>⚠️ Security Warning</h2> <p>This release addresses the following high-severity security advisories:</p> <ul> <li><a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8">GHSA-5jgf-p345-68v8</a> — host confusion via skipped IDN canonicalization on scheme-relative references</li> <li><a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf">GHSA-fph4-wmhf-6fwf</a> — server-side request forgery via repeated hostname percent-decoding</li> <li><a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc">GHSA-f65p-4m7j-42xc</a> — server-side request forgery via malformed IPv6 normalization</li> <li><a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp">GHSA-jqff-g426-hqxp</a> — host confusion via percent-encoded scheme normalization</li> </ul> <p>Users of the v3.x release line should upgrade to v3.1.6.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6">https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6</a></p> <h2>v3.1.5</h2> <h2>⚠️ Security Warning</h2> <p>Fix for <a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5</a></p> <h2>v3.1.4</h2> <h2>⚠️ Security Release</h2> <p>Fix for <a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx">https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4">https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastify/fast-uri/commit/ead3ab7bb134c989e972c8174632d0670023f269"><code>ead3ab7</code></a> Bumped v3.1.8</li> <li><a href="https://github.com/fastify/fast-uri/commit/c88b59e3e3a20af1d5d6e499f48908d0fb12a66d"><code>c88b59e</code></a> fix: normalize decoded reg-name case</li> <li><a href="https://github.com/fastify/fast-uri/commit/412e40abd4eb8beabfb952d80abf949a2baf27a3"><code>412e40a</code></a> Bumped v3.1.7</li> <li><a href="https://github.com/fastify/fast-uri/commit/9f4c943e4d2133e8d78e0941203879216255bb01"><code>9f4c943</code></a> fix: backport port and IP-literal validation to v3.x (<a href="https://redirect.github.com/fastify/fast-uri/issues/216">#216</a>)</li> <li><a href="https://github.com/fastify/fast-uri/commit/1eb3ce436fe050807caba79f886ab894f485a588"><code>1eb3ce4</code></a> fix: treat unterminated bracket hosts as reg-names again (<a href="https://redirect.github.com/fastify/fast-uri/issues/214">#214</a>)</li> <li><a href="https://github.com/fastify/fast-uri/commit/6f970b2951fd896aa0f3a7ff28eeb6640c137d33"><code>6f970b2</code></a> Bumped v3.1.6</li> <li><a href="https://github.com/fastify/fast-uri/commit/d941579a84273ec7e96bde596b1f7a8be447df2a"><code>d941579</code></a> fix: never run IDN canonicalization on bracketed IP literals</li> <li><a href="https://github.com/fastify/fast-uri/commit/c0f0279cf370cb89ee56b04bbcde2a7afbe81aba"><code>c0f0279</code></a> test: adapt decoded-scheme handler assertion to 3.x (no mailto scheme)</li> <li><a href="https://github.com/fastify/fast-uri/commit/37f3417c82994279656854f83ce938acd81c3862"><code>37f3417</code></a> Merge commit from fork</li> <li><a href="https://github.com/fastify/fast-uri/commit/607bfbe953f28a14c2e06ae64aff38c81ca2937f"><code>607bfbe</code></a> Merge commit from fork</li> <li>Additional commits viewable in <a href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.8">compare view</a></li> </ul> </details> <br /> Updates `ip-address` from 10.2.0 to 10.7.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/beaugunderson/ip-address/releases">ip-address's releases</a>.</em></p> <blockquote> <h2>v10.7.2</h2> <h2>What's Changed</h2> <ul> <li>Accept an arpa suffix in any case and without the root dot in fromArpa by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/227">beaugunderson/ip-address#227</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.2">https://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.2</a></p> <h2>v10.7.1</h2> <h2>What's Changed</h2> <ul> <li>Bump js-yaml and brace-expansion in the lockfile by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/226">beaugunderson/ip-address#226</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.7.0...v10.7.1">https://github.com/beaugunderson/ip-address/compare/v10.7.0...v10.7.1</a></p> <h2>v10.7.0</h2> <h2>What's Changed</h2> <ul> <li>Add offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct the IPv6 end-address docs by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/225">beaugunderson/ip-address#225</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.6.0...v10.7.0">https://github.com/beaugunderson/ip-address/compare/v10.6.0...v10.7.0</a></p> <h2>v10.6.0</h2> <h2>What's Changed</h2> <ul> <li>Add isGlobal() and pin the classifiers to the IANA special-purpose registries by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/224">beaugunderson/ip-address#224</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.5.1...v10.6.0">https://github.com/beaugunderson/ip-address/compare/v10.5.1...v10.6.0</a></p> <h2>v10.5.1</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.5.1">https://github.com/beaugunderson/ip-address/compare/v10.5.0...v10.5.1</a></p> <h2>v10.5.0</h2> <h2>What's Changed</h2> <ul> <li>Honor the fromURL graceful-failure contract for non-IPv6 hosts by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/218">beaugunderson/ip-address#218</a></li> <li>Correct the documentation where it disagreed with the library by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/219">beaugunderson/ip-address#219</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.4.0...v10.5.0">https://github.com/beaugunderson/ip-address/compare/v10.4.0...v10.5.0</a></p> <h2>v10.4.0</h2> <h2>What's Changed</h2> <ul> <li>Add GitHub Actions CI by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/213">beaugunderson/ip-address#213</a></li> <li>Keep the package loadable on node 12, and enforce it by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/216">beaugunderson/ip-address#216</a></li> <li>Validate the byte arrays Address6 is given by <a href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a> in <a href="https://redirect.github.com/beaugunderson/ip-address/pull/217">beaugunderson/ip-address#217</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0">https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0</a></p> <h2>v10.3.1</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1">https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/beaugunderson/ip-address/commit/974b48d9ade9348accdb377ba0a15feba4a11361"><code>974b48d</code></a> 10.7.2</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/4dfe8e5eb34fdb47698834b213526814234c0cb1"><code>4dfe8e5</code></a> Accept an arpa suffix in any case and without the root dot in fromArpa (<a href="https://redirect.github.com/beaugunderson/ip-address/issues/227">#227</a>)</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/f0c25dfd4fbf7886e45116ba0940207f81401e28"><code>f0c25df</code></a> 10.7.1</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/8b34a21e0839b37c094066816fb2c2c48a2adcf5"><code>8b34a21</code></a> Merge commit from fork</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/13b615554f129bdcdbd10f39b5918fef4bcf96c5"><code>13b6155</code></a> Merge commit from fork</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/469ead1231b4cc059f2150c626e1e0c2895c0134"><code>469ead1</code></a> Reject an address longer than the family allows before parsing it</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28"><code>1343629</code></a> Report an address of the other family as not contained</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/4c2184a0cbd8f913e15a64a2063afc9eef410bd2"><code>4c2184a</code></a> Bump js-yaml and brace-expansion in the lockfile (<a href="https://redirect.github.com/beaugunderson/ip-address/issues/226">#226</a>)</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/2b7cab51c7aec0cb56f820f192a38901614e5a9f"><code>2b7cab5</code></a> 10.7.0</li> <li><a href="https://github.com/beaugunderson/ip-address/commit/87fae235d95ab0ce18665ae5690f98f65e882d6a"><code>87fae23</code></a> Add offset() and nextNetwork(), accept prefix-length ip6.arpa names, correct ...</li> <li>Additional commits viewable in <a href="https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.7.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for ip-address since your current version.</p> </details> <details> <summary>Install script changes</summary> <p>This version adds <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> Updates `js-yaml` from 4.3.0 to 4.3.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md">js-yaml's changelog</a>.</em></p> <blockquote> <h2>4.3.2 - 2026-08-26</h2> <h3>Changed</h3> <ul> <li>[backport] Hard-limit merge sequence size to 100.</li> </ul> <h3>Security</h3> <ul> <li>[backport] Count empty mappings in merge sequences toward <code>maxTotalMergeKeys</code> to limit CPU usage, <a href="https://redirect.github.com/nodeca/js-yaml/issues/797">#797</a>.</li> </ul> <h2>4.3.1 - 2026-07-31</h2> <h3>Security</h3> <ul> <li>[backport] Remove quadratic complexity from <code>!!omap</code> duplicate key detection.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodeca/js-yaml/commit/79ca68d90f333fbe6d9e42827527e62636200191"><code>79ca68d</code></a> 4.3.2 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"><code>d90b661</code></a> Backport merge limits from v5.4.1</li> <li><a href="https://github.com/nodeca/js-yaml/commit/86e91b815b8794c3c73a179c1770871e37ec2df8"><code>86e91b8</code></a> 4.3.1 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/c3cc4b0bb9ddb9af2dd9b61e0d56f5ce7983cd4a"><code>c3cc4b0</code></a> Backport quadratic complexity fix for !!omap</li> <li>See full diff in <a href="https://github.com/nodeca/js-yaml/compare/4.3.0...4.3.2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/JMR-dev/LibreMail-Bug-Report-Ingest/network/alerts). </details>
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/npm_and_yarn/npm_and_yarn-501d00c4a0:dependabot/npm_and_yarn/npm_and_yarn-501d00c4a0
git checkout dependabot/npm_and_yarn/npm_and_yarn-501d00c4a0
Sign in to join this conversation.