Skip to content

Bump the npm_and_yarn group across 1 directory with 4 updates - #3399

Merged
jkueloc merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm_and_yarn-4d339734d8
Sep 16, 2026
Merged

jkueloc merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm_and_yarn-4d339734d8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 4 updates in the /frontend directory: @humanfs/node, brace-expansion, js-yaml and react-router.

Updates @humanfs/node from 0.16.7 to 0.16.8

Release notes

Sourced from @​humanfs/node's releases.

node: v0.16.8

0.16.8 (2026-04-17)

Bug Fixes

  • Include type dependencies at runtime (956ce7a), closes #145

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​humanfs/core bumped from ^0.19.1 to ^0.19.2
Changelog

Sourced from @​humanfs/node's changelog.

0.16.8 (2026-04-17)

Bug Fixes

  • Ensure symlinks are copied as symlinks in copy() and copyAll() (22bbaa44)
  • Include type dependencies at runtime (956ce7a), closes #145

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​humanfs/core bumped from ^0.19.1 to ^0.19.2
Commits

Updates brace-expansion from 1.1.13 to 1.1.21

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

Commits

Updates js-yaml from 4.3.1 to 4.3.2

Changelog

Sourced from js-yaml's changelog.

4.3.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.
Commits

Updates react-router from 7.18.1 to 7.18.4

Release notes

Sourced from react-router's releases.

v7.18.4

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184

v7.18.3

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7183

v7.18.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182

Changelog

Sourced from react-router's changelog.

v7.18.4

Patch Changes

  • Correctly escape streamed RSC redirect locations in meta tag attributes (#15492)
  • Avoid unintended document.startViewTransition calls during initial hydration and router.revalidate() calls (#15485)

v7.18.3

Patch Changes

  • Improve route matching performance for long paths (#15423)
  • Improve validation of action request origins (#15420)
  • Add additional URL validation on client side navigations/redirects (#15446)

v7.18.2

Patch Changes

  • Harden RSC CSRF codepaths. (#15353)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 10, 2026
@jkueloc

jkueloc commented Sep 16, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

Bumps the npm_and_yarn group with 4 updates in the /frontend directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node), [brace-expansion](https://github.com/juliangruber/brace-expansion), [js-yaml](https://github.com/nodeca/js-yaml) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).


Updates `@humanfs/node` from 0.16.7 to 0.16.8
- [Release notes](https://github.com/humanwhocodes/humanfs/releases)
- [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node)

Updates `brace-expansion` from 1.1.13 to 1.1.21
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.13...v1.1.21)

Updates `js-yaml` from 4.3.1 to 4.3.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.1...4.3.2)

Updates `react-router` from 7.18.1 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router@7.18.4/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.18.4/packages/react-router)

---
updated-dependencies:
- dependency-name: "@humanfs/node"
  dependency-version: 0.16.8
  dependency-type: indirect
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
- dependency-name: js-yaml
  dependency-version: 4.3.2
  dependency-type: indirect
- dependency-name: react-router
  dependency-version: 7.18.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/npm_and_yarn-4d339734d8 branch from 5bd1ac3 to 096feb1 Compare September 16, 2026 13:50
@jkueloc
jkueloc merged commit f6127c4 into main Sep 16, 2026
6 of 7 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/npm_and_yarn-4d339734d8 branch September 16, 2026 14:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant