Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 15 updates - #126

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-e4268e7aa7
Open

build(deps): bump the minor-and-patch group across 1 directory with 15 updates#126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-e4268e7aa7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 15 updates in the / directory:

Package From To
dotenv 18.0.6 18.0.8
nodemailer 10.0.16 10.1.7
puppeteer 25.12.0 25.14.0
@remotion/bundler 4.0.534 4.0.536
@remotion/cli 4.0.534 4.0.536
@remotion/player 4.0.534 4.0.536
@remotion/renderer 4.0.534 4.0.536
@vitest/coverage-v8 5.0.3 5.0.5
eslint 10.12.0 10.13.0
jsdom 30.1.2 30.1.3
marked 18.1.0 18.1.1
remotion 4.0.534 4.0.536
vitest 5.0.3 5.0.5
@atproto/api 0.23.1 0.28.0
viem 2.57.3 2.57.7

Updates dotenv from 18.0.6 to 18.0.8

Changelog

Sourced from dotenv's changelog.

18.0.8 (2026-10-14)

Changed

  • Fast parser should strip appended extra quotes (#1073)
  • Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)
Commits
  • e2fe95e 18.0.8
  • 7aa712a type detail improvement
  • 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
  • 0b4843a changelog
  • 55855ab Merge pull request #1073 from xiehuanyi/fix/unicode-unquoting-parity
  • f757811 fix(types): allow undefined values in populate output
  • fde5db2 Keep fast-parser unquoting consistent at Unicode line boundaries
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • Additional commits viewable in compare view

Updates nodemailer from 10.0.16 to 10.1.7

Release notes

Sourced from nodemailer's releases.

v10.1.7

10.1.7 (2026-10-18)

Bug Fixes

  • mime-funcs: encode parameter values that look like encoded words (651d79b)

v10.1.6

10.1.6 (2026-10-18)

Bug Fixes

  • addressparser: read groups in the same pass as the rest of the list (ddf0de1)

v10.1.5

10.1.5 (2026-10-18)

Bug Fixes

  • addressparser: handle an address list without copying it per address (6bd09b3)
  • addressparser: tokenize into offsets instead of an object per token (3fd3f50)

v10.1.4

10.1.4 (2026-10-18)

Bug Fixes

  • addressparser: apply the unexpected "<" rule outside quotes and comments (ee35f57)
  • addressparser: bound group nesting at ten levels (ce63303)
  • addressparser: drop the obsolete route from an angle-addr (3dbc730)
  • addressparser: end a comment only at the ")" that closes the outermost one (0a87617)
  • addressparser: honour quoted strings and comments inside an angle-addr and a group (1cd57d2)
  • addressparser: never read a mailbox out of a comment (a1538ea)
  • addressparser: read CFWS beside the "@" of an addr-spec as nothing (ba3c095)
  • addressparser: read the first addr-spec of the display text (038940a)
  • split a domain literal off at the "@" in front of it (d5983b0)

v10.1.3

10.1.3 (2026-10-18)

Bug Fixes

  • format References and strip URLs in linear time, release any number of streams (2f18641)

v10.1.2

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.1.7 (2026-10-18)

Bug Fixes

  • mime-funcs: encode parameter values that look like encoded words (651d79b)

10.1.6 (2026-10-18)

Bug Fixes

  • addressparser: read groups in the same pass as the rest of the list (ddf0de1)

10.1.5 (2026-10-18)

Bug Fixes

  • addressparser: handle an address list without copying it per address (6bd09b3)
  • addressparser: tokenize into offsets instead of an object per token (3fd3f50)

10.1.4 (2026-10-18)

Bug Fixes

  • addressparser: apply the unexpected "<" rule outside quotes and comments (ee35f57)
  • addressparser: bound group nesting at ten levels (ce63303)
  • addressparser: drop the obsolete route from an angle-addr (3dbc730)
  • addressparser: end a comment only at the ")" that closes the outermost one (0a87617)
  • addressparser: honour quoted strings and comments inside an angle-addr and a group (1cd57d2)
  • addressparser: never read a mailbox out of a comment (a1538ea)
  • addressparser: read CFWS beside the "@" of an addr-spec as nothing (ba3c095)
  • addressparser: read the first addr-spec of the display text (038940a)
  • split a domain literal off at the "@" in front of it (d5983b0)

10.1.3 (2026-10-18)

Bug Fixes

  • format References and strip URLs in linear time, release any number of streams (2f18641)

10.1.2 (2026-10-16)

Bug Fixes

  • bound the work a message can make the mailer do and keep per-message auth off the transport's token endpoint (e347fa2)

... (truncated)

Commits
  • 7613a86 chore(master): release 10.1.7 (#1900)
  • 651d79b fix(mime-funcs): encode parameter values that look like encoded words
  • 84849fa test(addressparser): pin how an angle-addr followed by a group is read
  • a13654e chore(master): release 10.1.6 (#1899)
  • ddf0de1 fix(addressparser): read groups in the same pass as the rest of the list
  • 7ab9ac1 chore(master): release 10.1.5 (#1898)
  • 3fd3f50 fix(addressparser): tokenize into offsets instead of an object per token
  • 6bd09b3 fix(addressparser): handle an address list without copying it per address
  • 2a7e952 chore(master): release 10.1.4 (#1897)
  • 038940a fix(addressparser): read the first addr-spec of the display text
  • Additional commits viewable in compare view

Updates puppeteer from 25.12.0 to 25.14.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.14.0

25.14.0 (2026-10-14)

🎉 Features

  • migrate network emulation to Network.emulateNetworkConditionsByRule (#15508) (2952199)
  • network: accept Headers instances for request interception and extra headers (#15530) (b20d03b)
  • roll to Firefox 158.0 (#15582) (3902129)

🛠️ Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.4 to 3.2.5

puppeteer: v25.14.0

25.14.0 (2026-10-14)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.4 to 3.2.5
      • puppeteer-core bumped from 25.13.0 to 25.14.0

puppeteer-core: v25.13.0

25.13.0 (2026-10-08)

🎉 Features

  • add page, frame and worker methods on ConsoleMessage (#15515) (82e1fee)
  • allow configuring the WebSocket max payload (#15532) (c91da4f)
  • network: add asFetchRequest method to HTTPRequest (#15518) (f891aaa)
  • network: add asFetchResponse method to HTTPResponse (#15446) (6ab0419)

... (truncated)

Commits
  • d1b9a21 chore: release main (#15577)
  • 414231a fix: enforce blocklist/allowlist for service worker requests (#15586)
  • 2952199 feat: migrate network emulation to Network.emulateNetworkConditionsByRule (#1...
  • 9478d60 chore(deps-dev): bump the dev-dependencies group with 5 updates (#15571)
  • b20d03b feat(network): accept Headers instances for request interception and extra he...
  • 9ea69c1 fix: roll to Chrome 155.0.8059.79 (#15584)
  • 198c333 fix(browsers): persist alias removal when uninstalling a browser (#15463)
  • 3902129 feat: roll to Firefox 158.0 (#15582)
  • d8e4e36 fix(browsers): prevent symlink chain escapes during zip extraction (#15578)
  • 04dee98 fix: don't allow path traversal from buildId (#15565)
  • Additional commits viewable in compare view

Updates @remotion/bundler from 4.0.534 to 4.0.536

Release notes

Sourced from @​remotion/bundler's releases.

v4.0.536

What's Changed

... (truncated)

Commits
  • d16a341 v4.0.536
  • f8cf6ad @remotion/codemods: Name imported canvas capture layers
  • eec27ee Internal testbed: Name canvas capture layer
  • 637495a remotion.dev/brand: Name canvas capture layers
  • b098931 @remotion/studio: Show item count in multi-selection delete action
  • fb63655 @remotion/studio: Fix folder drop targets with alphabetical sorting
  • e26adcb @remotion/studio: Add Match current time duration preset
  • c3bfd9d remotion.dev/brand: Add perspective and blur to audio rolling edit demo
  • 5082bef remotion: Fix cursor desynchronization when moving sequences in Studio
  • b162568 @remotion/codemods: Preserve custom cursor keyframes when importing captures
  • Additional commits viewable in compare view

Updates @remotion/cli from 4.0.534 to 4.0.536

Release notes

Sourced from @​remotion/cli's releases.

v4.0.536

What's Changed

... (truncated)

Commits
  • d16a341 v4.0.536
  • f8cf6ad @remotion/codemods: Name imported canvas capture layers
  • eec27ee Internal testbed: Name canvas capture layer
  • 637495a remotion.dev/brand: Name canvas capture layers
  • b098931 @remotion/studio: Show item count in multi-selection delete action
  • fb63655 @remotion/studio: Fix folder drop targets with alphabetical sorting
  • e26adcb @remotion/studio: Add Match current time duration preset
  • c3bfd9d remotion.dev/brand: Add perspective and blur to audio rolling edit demo
  • 5082bef remotion: Fix cursor desynchronization when moving sequences in Studio
  • b162568 @remotion/codemods: Preserve custom cursor keyframes when importing captures
  • Additional commits viewable in compare view

Updates @remotion/player from 4.0.534 to 4.0.536

Release notes

Sourced from @​remotion/player's releases.

v4.0.536

What's Changed

@dependabot
build(deps): bump the minor-and-patch group across 1 directory with 1…
46f59af 
…5 updates

Bumps the minor-and-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.8` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.16` | `10.1.7` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `25.12.0` | `25.14.0` |
| [@remotion/bundler](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.536` |
| [@remotion/cli](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.536` |
| [@remotion/player](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.536` |
| [@remotion/renderer](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.536` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [marked](https://github.com/markedjs/marked) | `18.1.0` | `18.1.1` |
| [remotion](https://github.com/remotion-dev/remotion) | `4.0.534` | `4.0.536` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |
| [@atproto/api](https://github.com/bluesky-social/atproto/tree/HEAD/packages/api) | `0.23.1` | `0.28.0` |
| [viem](https://github.com/wevm/viem) | `2.57.3` | `2.57.7` |



Updates `dotenv` from 18.0.6 to 18.0.8
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.6...v18.0.8)

Updates `nodemailer` from 10.0.16 to 10.1.7
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.16...v10.1.7)

Updates `puppeteer` from 25.12.0 to 25.14.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v25.12.0...puppeteer-v25.14.0)

Updates `@remotion/bundler` from 4.0.534 to 4.0.536
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.536)

Updates `@remotion/cli` from 4.0.534 to 4.0.536
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.536)

Updates `@remotion/player` from 4.0.534 to 4.0.536
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.536)

Updates `@remotion/renderer` from 4.0.534 to 4.0.536
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.536)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `marked` from 18.1.0 to 18.1.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.1.0...v18.1.1)

Updates `remotion` from 4.0.534 to 4.0.536
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.534...v4.0.536)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `@atproto/api` from 0.23.1 to 0.28.0
- [Release notes](https://github.com/bluesky-social/atproto/releases)
- [Changelog](https://github.com/bluesky-social/atproto/blob/main/packages/api/CHANGELOG.md)
- [Commits](https://github.com/bluesky-social/atproto/commits/@atproto/api@0.28.0/packages/api)

Updates `viem` from 2.57.3 to 2.57.7
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.57.3...viem@2.57.7)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 10.1.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: puppeteer
  dependency-version: 25.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@remotion/bundler"
  dependency-version: 4.0.536
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@remotion/cli"
  dependency-version: 4.0.536
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@remotion/player"
  dependency-version: 4.0.536
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@remotion/renderer"
  dependency-version: 4.0.536
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: marked
  dependency-version: 18.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: remotion
  dependency-version: 4.0.536
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@atproto/api"
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: viem
  dependency-version: 2.57.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from nirholas as a code owner October 22, 2026 14:36
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nirholas nirholas Awaiting requested review from nirholas nirholas is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants