Skip to content

chore(deps): bump the minor-production-deps group across 1 directory with 5 updates#1139

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-production-deps-d05e726489
Open

chore(deps): bump the minor-production-deps group across 1 directory with 5 updates#1139
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-production-deps-d05e726489

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the minor-production-deps group with 5 updates in the / directory:

Package From To
ora 9.1.0 9.4.0
semver 7.7.3 7.7.4
ssri 13.0.0 13.0.1
nock 14.0.10 14.0.14
vitest 4.0.18 4.1.5

Updates ora from 9.1.0 to 9.4.0

Release notes

Sourced from ora's releases.

v9.4.0

  • Add successSymbol and failSymbol options to oraPromise 3d2e0a9

sindresorhus/ora@v9.3.0...v9.4.0

v9.3.0

  • Reduce flicker in rendering 2ab4f76

sindresorhus/ora@v9.2.0...v9.3.0

v9.2.0

  • Update stdin-discarder dependency (#251) 020eaba

sindresorhus/ora@v9.1.0...v9.2.0

Commits

Updates semver from 7.7.3 to 7.7.4

Release notes

Sourced from semver's releases.

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Changelog

Sourced from semver's changelog.

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Commits
  • 5993c2e chore: release 7.7.4 (#839)
  • 120968b deps: @​npmcli/template-oss@​4.29.0 (#840)
  • a29faa5 fix(cli): pass options to semver.valid() for loose version validation (#835)
  • 1d28d5e docs: fix typos and update -n CLI option documentation (#836)
  • 5816d4c chore: bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829)
  • ab9e28a chore: bump @​npmcli/template-oss from 4.27.1 to 4.28.0 (#827)
  • 44d7130 chore: bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824)
  • 7073576 chore: reorder parameters in invalid-versions.js test (#820)
  • 16a35f5 chore: bump @​npmcli/template-oss from 4.26.0 to 4.27.1 (#823)
  • 3a3459d chore: bump @​npmcli/template-oss from 4.25.1 to 4.26.0 (#818)
  • See full diff in compare view

Updates ssri from 13.0.0 to 13.0.1

Release notes

Sourced from ssri's releases.

v13.0.1

13.0.1 (2025-12-16)

Bug Fixes

Chores

Changelog

Sourced from ssri's changelog.

13.0.1 (2025-12-16)

Bug Fixes

Chores

Commits

Updates nock from 14.0.10 to 14.0.14

Release notes

Sourced from nock's releases.

v14.0.14

14.0.14 (2026-04-30)

Bug Fixes

  • backport: apply body delay before the response end (#2969) (215cd2a)

v14.0.13

14.0.13 (2026-04-20)

Bug Fixes

  • types: align Definition with runtime; add rawHeaders, drop headers (#2955) (07fbfab)

v14.0.12

14.0.12 (2026-04-05)

Bug Fixes

  • prevent crash when query params have conflicting dot-notation keys (#2958) (7ea9933)

v14.0.11

14.0.11 (2026-02-09)

Bug Fixes

Commits
  • 215cd2a fix(backport): apply body delay before the response end (#2969)
  • 07fbfab fix(types): align Definition with runtime; add rawHeaders, drop headers (#2955)
  • fe2c3ea chore(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#2961)
  • ee49b4f chore(deps-dev): bump flatted from 3.2.5 to 3.4.2
  • 11bf183 chore(deps-dev): bump undici from 6.23.0 to 6.24.1 (#2954)
  • 6b80154 chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#2960)
  • 4cbf6cc chore(deps): bump tar and npm (#2952)
  • 7ea9933 fix: prevent crash when query params have conflicting dot-notation keys (#2958)
  • d00d371 chore(deps): bump picomatch
  • e899c49 chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nock since your current version.


Updates vitest from 4.0.18 to 4.1.5

Release notes

Sourced from vitest's releases.

v4.1.5

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

... (truncated)

Commits
  • e399846 chore: release v4.1.5
  • 7dc6d54 Revert "fix: respect diff config options in soft assertions (#8696)"
  • 9787ded fix: respect diff config options in soft assertions (#8696)
  • 325463a fix(ast-collect): recognize _vi_import prefix in static test discovery (#10...
  • 0e0ff41 feat(coverage): istanbul to support instrumenter option (#10119)
  • 663b99f fix: alias agent reporter to minimal (#10157)
  • 122c25b fix: fix vi.defineHelper called as object method (#10163)
  • 6abd557 feat(api): make test-specification options writable (#10154)
  • 596f739 fix: project color label on html reporter (#10142)
  • 9423dc0 fix: --project negation excludes browser instances (#10131)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 1, 2026
@dependabot dependabot Bot requested a review from erunion as a code owner May 1, 2026 06:01
@erunion erunion removed their request for review May 1, 2026 18:03
@dependabot dependabot Bot changed the title chore(deps): bump the minor-production-deps group with 5 updates chore(deps): bump the minor-production-deps group across 1 directory with 5 updates May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-production-deps-d05e726489 branch from bd8209c to 6c628b7 Compare May 1, 2026 18:04
…with 5 updates

Bumps the minor-production-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ora](https://github.com/sindresorhus/ora) | `9.1.0` | `9.4.0` |
| [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.7.4` |
| [ssri](https://github.com/npm/ssri) | `13.0.0` | `13.0.1` |
| [nock](https://github.com/nock/nock) | `14.0.10` | `14.0.14` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.5` |



Updates `ora` from 9.1.0 to 9.4.0
- [Release notes](https://github.com/sindresorhus/ora/releases)
- [Commits](sindresorhus/ora@v9.1.0...v9.4.0)

Updates `semver` from 7.7.3 to 7.7.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.3...v7.7.4)

Updates `ssri` from 13.0.0 to 13.0.1
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md)
- [Commits](npm/ssri@v13.0.0...v13.0.1)

Updates `nock` from 14.0.10 to 14.0.14
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.10...v14.0.14)

Updates `vitest` from 4.0.18 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

---
updated-dependencies:
- dependency-name: nock
  dependency-version: 14.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
- dependency-name: ora
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-production-deps
- dependency-name: semver
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
- dependency-name: ssri
  dependency-version: 13.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-production-deps-d05e726489 branch from 6c628b7 to f00518a Compare May 1, 2026 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants