Skip to content

build(deps): bump the alldependencies group across 1 directory with 12 updates#21

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/master/alldependencies-315e5096e3
Closed

build(deps): bump the alldependencies group across 1 directory with 12 updates#21
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/master/alldependencies-315e5096e3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 15, 2025

Bumps the alldependencies group with 4 updates in the / directory: express, ramda, @types/ramda and dprint.

Updates express from 4.21.2 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

4.22.0 / 2025-12-01

Commits

Updates ramda from 0.30.1 to 0.32.0

Release notes

Sourced from ramda's releases.

v0.32.0

upgrade guide

v0.31.3

upgrade guide

Commits

Updates winston from 3.18.3 to 3.19.0

Release notes

Sourced from winston's releases.

v3.19.0

  • Run npm audit fix e7ccdc4
  • Don't include jest.config.js in npm package 5a63c8c
  • fix: append error cause when using logger.child() (#2467) e74a7ae
  • Bump rimraf from 5.0.1 to 5.0.10 (#2517) 8a956fd
  • fix: ensure File transport flushes all data before emitting finish (#2594) 86c890f
  • Bump actions/setup-node from 4 to 6 (#2589) 3b8be02
  • Bump @​babel/core from 7.28.0 to 7.28.5 (#2591) f4c3e2c
  • Bump actions/checkout from 4 to 6 (#2593) dd7906e
  • chore: migrate test runner from mocha to jest (#2567) 2e9eb18

winstonjs/winston@v3.18.3...v3.19.0

Commits

Updates @eslint/js from 9.39.1 to 9.39.2

Release notes

Sourced from @​eslint/js's releases.

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

  • 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
  • c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
  • 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)
Commits

Updates @swc/core from 1.15.0 to 1.15.5

Changelog

Sourced from @​swc/core's changelog.

[1.15.5] - 2025-12-15

Bug Fixes

  • (es/parser) Fix bump length (#11372) (ec5c1bc)

  • (es/transforms) Adjust import rewriter pass before inject helpers pass (#11371) (8516991)

[1.15.4] - 2025-12-13

Bug Fixes

  • (es/compat) Preserve return value for single-property object destructuring (#11334) (847ad22)

  • (es/compat) Fix generator transform for compound assignments, for-in, and labeled break (#11339) (9b6bedd)

  • (es/compat) Destructuring evaluation order (#11337) (49d04c7)

  • (es/compat) Fix parameter default value evaluation order with object rest (#11352) (2ebb261)

  • (es/fixer) Preserve parens around IFFE in binary expressions within sequences (#11324) (a4c84ea)

  • (es/helpers) Avoid extra trap calls on excluded keys in object rest spread (#11338) (4662caf)

  • (es/minifier) Fix debug cargo feature (#11325) (be86fad)

  • (es/minifier) Fix optimization pass for merge_imports (#11331) (ca2f7ed)

  • (es/parser) Don't call bump_bytes in the continue_if of byte_search! (#11328) (583619d)

  • (es/parser) Support type-only string literal in import specifiers (#11333) (07762f1)

  • (es/parser) Handle TypeScript expressions in destructuring patterns (#11353) (160ec34)

... (truncated)

Commits
  • bd5cb41 chore: Publish 1.15.5 with swc_core v50.2.3
  • f61bbcb chore: Update changelog
  • 905f8ab chore: Publish 1.15.5-nightly-20251215.1 with swc_core v50.2.3
  • 4912395 chore: Publish crates with swc_core v50.2.3
  • ec5c1bc fix(es/parser): Fix bump length (#11372)
  • 8516991 fix(es/transforms): Adjust import rewriter pass before inject helpers pass (#...
  • 0957612 chore: Update changelog
  • f34aa97 chore: Publish 1.15.4 with swc_core v50.2.2
  • d0c0ea4 chore: Update changelog
  • d818608 chore: Publish 1.15.4-nightly-20251213.1 with swc_core v50.2.2
  • Additional commits viewable in compare view

Updates @types/express from 5.0.5 to 5.0.6

Commits

Updates @types/node from 22.19.0 to 22.19.3

Commits

Updates @types/ramda from 0.30.2 to 0.31.1

Commits

Updates dprint from 0.49.1 to 0.50.2

Release notes

Sourced from dprint's releases.

0.50.2

Changes

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip 61becbf8d1b16540e364a4f00be704266ae322ee0ff3ba66a4a21033f66a8d55
dprint-aarch64-apple-darwin.zip f534bcc054947ab2a42c069b5f6027914d252729bd15c1109812313b35a662a5
dprint-x86_64-pc-windows-msvc.zip 2dbdb57106818acd930a00bc0c2c33370bd4c7265f78a6cda000e3621f2d3c1c
dprint-x86_64-pc-windows-msvc-installer.exe 0b2dab815dd68501b7418831157a907a4db89b84b623a71c1deb486a08244b83
dprint-x86_64-unknown-linux-gnu.zip 95c7e633a67531ffc4990c152d59ed0802e1c0caf7e27e424e9cea9ef3d499d4
dprint-x86_64-unknown-linux-musl.zip 4b0e7911262049ccb8e1ac5968bf7a66dc490968fe1552a123bb2d6dadf2ad95
dprint-aarch64-unknown-linux-gnu.zip 039d4dca4360cb6622a2b56c3fc29ea71c356cd954e0b9566bff1a70e75beda8
dprint-aarch64-unknown-linux-musl.zip a4982964a68aefc2720b4c79c51a57e49b32f8944c1641fd9e714503fcf01847
dprint-riscv64gc-unknown-linux-gnu.zip 6918c45b0070da1da137fa328c7ca82133c6ab0b49a651fa53513305611fe3a8

0.50.1

Changes

  • fix: update to wasmer v6 (#984)
  • perf: avoid traversing some non-matching directories when providing include globs on the command line (#999)
  • perf: avoid traversing more directories (#1000)

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip def8ae0eb100c91df7a3a05ff699c84cac3deb67b6e08ed186d70c669194e031
dprint-aarch64-apple-darwin.zip c92e1a8dddd9bc65391468265b2805cb2317e4490fd777bca2dfaf1ef716ac36
dprint-x86_64-pc-windows-msvc.zip 8102e7f79394cf71f2e9b63ca0cf791dddacc6e118f5a29c1c88777ecea37e3e
dprint-x86_64-pc-windows-msvc-installer.exe 0f66e0c39395985eb28f2a45bb2956298773e006de1eba2924123edaecb55297
dprint-x86_64-unknown-linux-gnu.zip 11d791a5da5178a6d1359f23ea00b2d47426672fe310c5f32da2c66e80e07675
dprint-x86_64-unknown-linux-musl.zip 82ddddc881bf8ec0b4c55e3f835a2dc3d81d8fff39aad79e6b5c017e4dff1d5e
dprint-aarch64-unknown-linux-gnu.zip 54e5d4bd3f186fb8acfcf6e40df15af7e53c12799ed21a1409d133868a66bb40
dprint-aarch64-unknown-linux-musl.zip a3e954bcd8e569812d4bb1f9c8001c9a6802ce38e33c0c0273ac51eb59cf5072
dprint-riscv64gc-unknown-linux-gnu.zip 841120bd28f9d3afdd89bab65a2cb676877c808a460507f1567d97604a111b61

0.50.0

... (truncated)

Commits
  • f2d93f7 0.50.2
  • 376eed3 docs: add python instructions (#1019)
  • 427a506 fix: upgrade wasmer to 6.1.0-rc.3 to fix build failure with Rust ≥ 1.89.0 (#1...
  • 93934db fix: ignore empty proxy env (#1014)
  • 35f43b9 docs: add lowercase proxy env vars to docs (#1011)
  • 2575a0b chore: update deps to help with homebrew build (#1003)
  • 087a19c 0.50.1
  • bd55431 perf: avoid traversing more directories (#1000)
  • b37b49a perf: avoid traversing some non-matching directories when providing include g...
  • 4d6d08f docs: change about markup_fmt (#995)
  • Additional commits viewable in compare view

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

  • 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

  • 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

  • 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
  • c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
  • 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)
Commits

Updates tsx from 4.20.6 to 4.21.0

Release notes

Sourced from tsx's releases.

v4.21.0

4.21.0 (2025-11-30)

Features


This release is also available on:

Commits

Updates typescript-eslint from 8.46.3 to 8.49.0

Release notes

Sourced from typescript-eslint's releases.

v8.49.0

8.49.0 (2025-12-08)

🚀 Features

  • eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

  • deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

  • eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

  • eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)
  • eslint-plugin: honor ignored base types on generic classes (#11767)
  • eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

  • eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)
  • rule-tester: remove workaround for jest circular structure error (#11772)
  • typescript-estree: gate all errors behind allowInvalidAST (#11693)
  • typescript-estree: replace fast-glob with tinyglobby (#11740)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.47.0 (2025-11-17)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.46.4 (2025-11-10)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
express [>= 5.a, < 6]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…2 updates

Bumps the alldependencies group with 4 updates in the / directory: [express](https://github.com/expressjs/express), [ramda](https://github.com/ramda/ramda), [@types/ramda](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ramda) and [dprint](https://github.com/dprint/dprint).


Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.1)

Updates `ramda` from 0.30.1 to 0.32.0
- [Release notes](https://github.com/ramda/ramda/releases)
- [Changelog](https://github.com/ramda/ramda/blob/master/CHANGELOG.md)
- [Commits](ramda/ramda@v0.30.1...v0.32.0)

Updates `winston` from 3.18.3 to 3.19.0
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.18.3...v3.19.0)

Updates `@eslint/js` from 9.39.1 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js)

Updates `@swc/core` from 1.15.0 to 1.15.5
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](swc-project/swc@v1.15.0...v1.15.5)

Updates `@types/express` from 5.0.5 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `@types/node` from 22.19.0 to 22.19.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/ramda` from 0.30.2 to 0.31.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ramda)

Updates `dprint` from 0.49.1 to 0.50.2
- [Release notes](https://github.com/dprint/dprint/releases)
- [Commits](dprint/dprint@0.49.1...0.50.2)

Updates `eslint` from 9.39.1 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.1...v9.39.2)

Updates `tsx` from 4.20.6 to 4.21.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.20.6...v4.21.0)

Updates `typescript-eslint` from 8.46.3 to 8.49.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: ramda
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: winston
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: "@eslint/js"
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: "@swc/core"
  dependency-version: 1.15.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: "@types/node"
  dependency-version: 22.19.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: "@types/ramda"
  dependency-version: 0.31.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: dprint
  dependency-version: 0.50.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: eslint
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: alldependencies
- dependency-name: tsx
  dependency-version: 4.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: alldependencies
- dependency-name: typescript-eslint
  dependency-version: 8.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: alldependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jan 12, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jan 12, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/master/alldependencies-315e5096e3 branch January 12, 2026 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant