chore(deps): bump the minor-and-patch group across 1 directory with 8 updates by dependabot[bot] · Pull Request #176 · ecomod-code/recapp

dependabot · 2026-09-04T01:38:23Z

Bumps the minor-and-patch group with 8 updates in the / directory:

Package	From	To
@types/luxon	`3.7.4`	`3.7.5`
multer	`2.2.0`	`2.3.0`
@uiw/react-md-editor	`4.1.1`	`4.1.2`
react-router-dom	`7.18.2`	`7.18.3`
@testing-library/react	`16.3.2`	`16.3.3`
eslint-plugin-react-refresh	`0.5.4`	`0.5.5`
sass	`1.102.0`	`1.103.1`
js-yaml	`4.3.1`	`4.3.2`

Updates @types/luxon from 3.7.4 to 3.7.5

Commits

See full diff in compare view

Updates multer from 2.2.0 to 2.3.0

Release notes

Sourced from multer's releases.

v2.3.0

Important

Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm)

Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf)

Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72)

Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)

What's Changed

Update busboy link pointing to nonexistent section by @krzysdz in expressjs/multer#1447

Update outdated links to Express error handling guide by @krzysdz in expressjs/multer#1405

chore(deps): bump GitHub Actions and dev dependencies by @sheplu in expressjs/multer#1445

chore(ci): npm-publish via reusable workflows by @sheplu in expressjs/multer#1364

fix(tests): keep Git from rewriting fixture line endings on Windows by @MohammedAlkindi in expressjs/multer#1450

docs: correct fieldNameSize default in limits table by @UlisesGascon in expressjs/multer#1432

feat: normalize package.json by @UlisesGascon in expressjs/multer#1322

fix(test): use path.sep for cross-platform path assertions by @kilisamemarisaaa in expressjs/multer#1452

docs(changelog): fix typo 'comaptible' to 'compatible' by @ayushshukla1807 in expressjs/multer#1383

doc: adds context for link to Chinese README by @sunsheeppoplar in expressjs/multer#1369

docs: use crypto.randomBytes in diskStorage README example by @Hashim1999164 in expressjs/multer#1436

docs: clarify preservePath behavior by @vibhor-aggr in expressjs/multer#1414

docs: clarify parts limit behavior by @vibhor-aggr in expressjs/multer#1430

chore: increase test coverage by @wojtekmaj in expressjs/multer#1355

chore: drop deep-equal devDependency by @wojtekmaj in expressjs/multer#1353

docs: fix Chinese README translation by @vibhor-aggr in expressjs/multer#1429

Test: Enhance cross-platform test reliability and update CI workflow by @ShubhamOulkar in expressjs/multer#1334

fix: fallback to error code when no message mapping exists by @sahilraut191685 in expressjs/multer#1448

test: add coverage for preservePath by @kory-kaai in expressjs/multer#1454

fix: prevent process crash when fileFilter calls its callback more than once by @spokodev in expressjs/multer#1427

fix: preserve async hooks context in supported environments by @ajhyndman in expressjs/multer#1124

fix: allow files at exact fileSize limit by @raashish1601 in expressjs/multer#1407

fix: decode WHATWG-escaped characters in file originalname by @webdevelopersrinu in expressjs/multer#1421

docs: add Indonesian translation for README by @Derylfabiensyah in expressjs/multer#1431

test: accept files exactly at fileSize limit by @abhu85 in expressjs/multer#1382

docs: add Japanese translation to README by @noritaka1166 in expressjs/multer#1354

Update 'README-zh-cn.md' up to now by @pbstar in expressjs/multer#1264

feat: add an opt-in fieldArrayIndexLimit by @arpitjain099 in expressjs/multer#1438

docs: refresh all README translations by @UlisesGascon in expressjs/multer#1462

2.3.0 by @UlisesGascon in expressjs/multer#1455

New Contributors

@krzysdz made their first contribution in expressjs/multer#1447

@sheplu made their first contribution in expressjs/multer#1445

@MohammedAlkindi made their first contribution in expressjs/multer#1450

@kilisamemarisaaa made their first contribution in expressjs/multer#1452

@ayushshukla1807 made their first contribution in expressjs/multer#1383

@sunsheeppoplar made their first contribution in expressjs/multer#1369

@Hashim1999164 made their first contribution in expressjs/multer#1436

@vibhor-aggr made their first contribution in expressjs/multer#1414

@sahilraut191685 made their first contribution in expressjs/multer#1448

... (truncated)

Changelog

Sourced from multer's changelog.

2.3.0

Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm)

Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf)

Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72)

Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)

Add MulterError codes INVALID_FIELD_NAME and STREAM_DESTROYED

Add opt-in limits.fieldArrayIndexLimit to bound numeric array indexes in field names (#1438)

Accept files whose size is exactly limits.fileSize (#1407)

Preserve the caller's async context (AsyncLocalStorage) when calling next() (#1124)

Decode WHATWG-escaped characters (%0A, %0D, %22) in file.originalname (#1421)

Do not crash when fileFilter invokes its callback more than once (#1427)

Use a fallback message for MulterError codes without a mapping (#1448)

Docs: clarify preservePath and parts, use crypto.randomBytes in the DiskStorage example (#1414, #1430, #1436)

Docs: add Indonesian, Japanese and Tamil translations and refresh all translations from the current README (#1431, #1354, #1462)

Internal: run the test suite on Windows (#1334)

Commits

4e8edf5 2.3.0 (#1455)
87a584e fix: reject invalid field names instead of crashing on append-field errors
ab6aeae fix: enforce file size limit with async fileFilter
eef7444 fix: destroy disk write stream on aborted uploads to prevent fd leak
25ec9bb docs: refresh all README translations (#1462)
73c1759 feat: add an opt-in fieldArrayIndexLimit (#1438)
ece6735 Update 'README-zh-cn.md' up to now (#1264)
3278e1b docs: add Japanese translation to README (#1354)
3c0bc5e test: accept files exactly at fileSize limit (#1382)
b6d84b0 docs: add Indonesian translation for README (#1431)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for multer since your current version.

Updates @uiw/react-md-editor from 4.1.1 to 4.1.2

Release notes

Sourced from @uiw/react-md-editor's releases.

v4.1.2

Documentation v4.1.2: https://raw.githack.com/uiwjs/react-md-editor/a279030/index.html
Comparing Changes: uiwjs/react-md-editor@v4.1.1...v4.1.2
npm i @uiw/react-md-editor@4.1.2
🐞 fix: keep bold markers when applying italic wrap (#710) 1e90010 @BetterAndBetterII

📖 doc: update core/README.md. 8e45d7c @github-actions-bot

Commits

04c2257 released v4.1.2 #710 #708
8e45d7c doc: update core/README.md.
1e90010 fix: keep bold markers when applying italic wrap (#710)
See full diff in compare view

Updates react-router-dom from 7.18.2 to 7.18.3

Changelog

Sourced from react-router-dom's changelog.

v7.18.3

Patch Changes

Updated dependencies:

react-router@7.18.3

Commits

23166df Release v7.18.3 (#15424)
See full diff in compare view

Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

Avoid act() re-entrant when dispatching events (#1468) (20ce75f)

Commits

20ce75f fix: Avoid act() re-entrant when dispatching events (#1468)
be9d81d docs: fix typos in comments and types (#1446)
See full diff in compare view

Updates eslint-plugin-react-refresh from 0.5.4 to 0.5.5

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.5

Fix SCREAMING_SNAKE_CASE constant exported via export { Name } incorrectly treated as React component #114 (fixes #113)

Add contentType and size to allowExportNames in Next config #115

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.5

Fix SCREAMING_SNAKE_CASE constant exported via export { Name } incorrectly treated as React component #114 (fixes #113)

Add contentType and size to allowExportNames in Next config #115

Commits

65c3172 [publish] v0.5.5
8411020 Bump deps
c28fa15 Fix SCREAMING_SNAKE_CASE constant exported via export { Name } incorrectly ...
554c764 [publish] add contentType and size to allowExportNames in Next config (#115)
See full diff in compare view

Updates sass from 1.102.0 to 1.103.1

Release notes

Sourced from sass's releases.

Dart Sass 1.103.1

To install Sass 1.103.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.103.0

To install Sass 1.103.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.103.1

No user-visible changes.

1.103.0

Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

Commits

62243d4 Set committer metadata when creating a tag (#2838)
ed4dcc7 Use more dot shorthands (#2837)
ac3d928 Support analogous sets of missing channels (#2810)
1e0cf28 Merge pull request #2834 from ntkme/fix-release
f3bd86a Merge pull request #2835 from sass/dart-sdk-version
287f9ba Code review
91831b8 Fix dartdoc error
0971ea9 Bump bufbuild/buf-action from 1.4.0 to 1.5.0 in /.github/util/initialize (#2826)
c45223b Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 (#2828)
cbb1db1 Bump dart-lang/setup-dart from 1.7.2 to 1.8.0 (#2829)
Additional commits viewable in compare view

Updates js-yaml from 4.3.1 to 4.3.2

Changelog

Sourced from js-yaml's changelog.

4.3.2 - 2026-08-26

Changed

[backport] Hard-limit merge sequence size to 100.

Security

[backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

Commits

79ca68d 4.3.2 released
d90b661 Backport merge limits from v5.4.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the minor-and-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/luxon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/luxon) | `3.7.4` | `3.7.5` | | [multer](https://github.com/expressjs/multer) | `2.2.0` | `2.3.0` | | [@uiw/react-md-editor](https://github.com/uiwjs/react-md-editor) | `4.1.1` | `4.1.2` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.3` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.4` | `0.5.5` | | [sass](https://github.com/sass/dart-sass) | `1.102.0` | `1.103.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.1` | `4.3.2` | Updates `@types/luxon` from 3.7.4 to 3.7.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/luxon) Updates `multer` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v2.2.0...v2.3.0) Updates `@uiw/react-md-editor` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/uiwjs/react-md-editor/releases) - [Commits](uiwjs/react-md-editor@v4.1.1...v4.1.2) Updates `react-router-dom` from 7.18.2 to 7.18.3 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.3/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.3/packages/react-router-dom) Updates `@testing-library/react` from 16.3.2 to 16.3.3 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3) Updates `eslint-plugin-react-refresh` from 0.5.4 to 0.5.5 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.4...v0.5.5) Updates `sass` from 1.102.0 to 1.103.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.102.0...1.103.1) Updates `js-yaml` from 4.3.1 to 4.3.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.3.1...4.3.2) --- updated-dependencies: - dependency-name: "@types/luxon" dependency-version: 3.7.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: multer dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@uiw/react-md-editor" dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-router-dom dependency-version: 7.18.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@testing-library/react" dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sass dependency-version: 1.103.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: js-yaml dependency-version: 4.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies label Sep 4, 2026

Navigation Menu

Uh oh!

chore(deps): bump the minor-and-patch group across 1 directory with 8 updates - #176

chore(deps): bump the minor-and-patch group across 1 directory with 8 updates#176
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-fb3653eac1

dependabot Bot commented on behalf of github Sep 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 4, 2026

v2.3.0

Important

What's Changed

New Contributors

2.3.0

v4.1.2

v7.18.3

Patch Changes

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

v0.5.5

0.5.5

Dart Sass 1.103.1

Changes

Dart Sass 1.103.0

Changes

1.103.1

1.103.0

4.3.2 - 2026-08-26

Changed

Security

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants