Skip to content

SERVER: Bump the npm group across 1 directory with 11 updates #235

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 21, 2025

Bumps the npm group with 11 updates in the /server directory:

Package From To
@azure/identity 4.9.1 4.10.2
@azure/keyvault-secrets 4.9.0 4.10.0
compression 1.8.0 1.8.1
@types/compression 1.7.5 1.8.1
express-session 1.18.1 1.18.2
@types/express-session 1.18.1 1.18.2
morgan 1.10.0 1.10.1
@types/morgan 1.9.9 1.9.10
pdfmake 0.2.19 0.2.20
pg 8.15.6 8.16.3
puppeteer-cluster 0.23.0 0.24.0

Updates @azure/identity from 4.9.1 to 4.10.2

Commits

Updates @azure/keyvault-secrets from 4.9.0 to 4.10.0

Commits
  • 4ff2c18 [core-client-rest] Delete dom.d.ts (#34753)
  • 95b5fc6 [eventgrid-systemevents] re-generate June 2025 (#34759)
  • d25f710 [EngSys] upgrade typescript-eslint* dev dependencies to ~8.34.0 (#34116)
  • c3aaf5a [ServiceBus] reduce max count of messages to delete (#34719)
  • f1861c9 Release peraparation for communication.identity package (#34745)
  • f3f8beb [keyvault] Add missing key wrap algos (#34768)
  • 05fc344 [Monitor OpenTelemetry Exporter][Monitor OpenTelemetry] Release Distro 1.12.0...
  • d837415 Use common publish for partner-release (#34601)
  • 50da1a3 Sync eng/common directory with azure-sdk-tools for PR 10835 (#34760)
  • 5ec071f Ignore various eng files en masse with cspell (#34706)
  • Additional commits viewable in compare view

Updates compression from 1.8.0 to 1.8.1

Release notes

Sourced from compression's releases.

v1.8.1

What's Changed

New Contributors

Full Changelog: expressjs/compression@1.8.0...v1.8.1

Changelog

Sourced from compression's changelog.

1.8.1 / 2025-07-17

Commits
  • 83a0c45 1.8.1
  • ce62713 deps: [email protected] (#246)
  • f4acb23 build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (#244)
  • 6eaebe6 build(deps): bump actions/checkout from 4.1.1 to 4.2.2 (#241)
  • 37e0623 build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#240)
  • bc436b2 build(deps): bump actions/upload-artifact from 4.3.1 to 4.6.2 (#239)
  • 2f9f572 build(deps): bump github/codeql-action from 3.28.15 to 3.29.2 (#243)
  • 5f13b14 [StepSecurity] ci: Harden GitHub Actions (#235)
  • 76e0945 build(deps-dev): bump supertest from 6.2.3 to 6.3.4 (#231)
  • ae6ee80 build(deps-dev): bump eslint-plugin-import from 2.26.0 to 2.31.0 (#230)
  • Additional commits viewable in compare view

Updates @types/compression from 1.7.5 to 1.8.1

Commits

Updates express-session from 1.18.1 to 1.18.2

Release notes

Sourced from express-session's releases.

v1.18.2

What's Changed

New Contributors

Full Changelog: expressjs/session@v1.18.1...v1.18.2

Changelog

Sourced from express-session's changelog.

1.18.2 / 2025-07-17

Commits

Updates @types/express-session from 1.18.1 to 1.18.2

Commits

Updates morgan from 1.10.0 to 1.10.1

Release notes

Sourced from morgan's releases.

1.10.1

What's Changed

New Contributors

Full Changelog: expressjs/morgan@1.10.0...1.10.1

Changelog

Sourced from morgan's changelog.

1.10.1 / 2025-07-17

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for morgan since your current version.


Updates @types/morgan from 1.9.9 to 1.9.10

Commits

Updates pdfmake from 0.2.19 to 0.2.20

Release notes

Sourced from pdfmake's releases.

0.2.20

  • Fixed text overflow with some non-wrappable texts
Changelog

Sourced from pdfmake's changelog.

0.2.20 - 2025-05-09

  • Fixed text overflow with some non-wrappable texts
Commits

Updates pg from 8.15.6 to 8.16.3

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

[email protected]

[email protected]

  • Add support for esm importing. CommonJS importing is still also supported.

[email protected]

[email protected]

[email protected]

[email protected]

  • Emit release event when client is returned to the pool.

[email protected]

[email protected]

[email protected]

[email protected]

... (truncated)

Commits

Updates puppeteer-cluster from 0.23.0 to 0.24.0

Release notes

Sourced from puppeteer-cluster's releases.

v0.24.0

Note: Use a version older than 0.24.0 if you want to use a puppeteer version older than 22.0.0.

Changed

  • Updated all dependencies to their latest versions
  • Added a missing timeout case when closing the browser
  • Removed package-lock.json as otherwise yarn complains (warning package-lock.json found. Your project contains lock files generated by tools other than Yarn. It is advised not to mix package managers in order to avoid resolution inconsistencies caused by unsynchronized lock files. To clear this warning, remove package-lock.json.).
  • Dropped support (in tests) for Node.js <=16 as puppeteer also support for these versions

Fixed

  • Fixed breaking puppeteer changes introduced in version 22 (renamed createIncognitoBrowserContext to createBrowserContext)
Changelog

Sourced from puppeteer-cluster's changelog.

[0.24.0] - 2024-03-17

Note: Use a version older than 0.24.0 if you want to use a puppeteer version older than 22.0.0.

Changed

  • Updated all dependencies to their latest versions
  • Added a missing timeout case when closing the browser
  • Removed package-lock.json as otherwise yarn complains (warning package-lock.json found. Your project contains lock files generated by tools other than Yarn. It is advised not to mix package managers in order to avoid resolution inconsistencies caused by unsynchronized lock files. To clear this warning, remove package-lock.json.).
  • Dropped support (in tests) for Node.js <=16 as puppeteer also support for these versions

Fixed

  • Fixed breaking puppeteer changes introduced in version 22 (renamed createIncognitoBrowserContext to createBrowserContext)
Commits
  • 85e739d v0.24.0
  • 7dc68c0 Updated changelog
  • b684284 Upgraded typescript
  • dcedf4a Upgraded non-critical dependencies
  • b190afa Updated Node.js types (NodeJS.Timer -> NodeJS.Timeout)
  • c5341a3 Updated actions for most recent node.js version
  • e4bfd62 Updated actions script for most recent puppeteer/node versions
  • a567e09 Updated required dependencies
  • c0db68c Added missing timeout to improve browser repair
  • 7e24cba Removed package-lock.json as otherwise yarn will complain when installing
  • Additional commits viewable in compare view

Updates @types/compression from 1.7.5 to 1.8.1

Commits

Updates @types/express-session from 1.18.1 to 1.18.2

Commits

Updates @types/morgan from 1.9.9 to 1.9.10

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 11 updates in the /server directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/identity](https://github.com/Azure/azure-sdk-for-js) | `4.9.1` | `4.10.2` |
| [@azure/keyvault-secrets](https://github.com/Azure/azure-sdk-for-js) | `4.9.0` | `4.10.0` |
| [compression](https://github.com/expressjs/compression) | `1.8.0` | `1.8.1` |
| [@types/compression](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/compression) | `1.7.5` | `1.8.1` |
| [express-session](https://github.com/expressjs/session) | `1.18.1` | `1.18.2` |
| [@types/express-session](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-session) | `1.18.1` | `1.18.2` |
| [morgan](https://github.com/expressjs/morgan) | `1.10.0` | `1.10.1` |
| [@types/morgan](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/morgan) | `1.9.9` | `1.9.10` |
| [pdfmake](https://github.com/bpampuch/pdfmake) | `0.2.19` | `0.2.20` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.15.6` | `8.16.3` |
| [puppeteer-cluster](https://github.com/thomasdondorf/puppeteer-cluster) | `0.23.0` | `0.24.0` |



Updates `@azure/identity` from 4.9.1 to 4.10.2
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_4.9.1...@azure/identity_4.10.2)

Updates `@azure/keyvault-secrets` from 4.9.0 to 4.10.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/keyvault-secrets_4.9.0...@azure/keyvault-secrets_4.10.0)

Updates `compression` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](expressjs/compression@1.8.0...v1.8.1)

Updates `@types/compression` from 1.7.5 to 1.8.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/compression)

Updates `express-session` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/expressjs/session/releases)
- [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md)
- [Commits](expressjs/session@v1.18.1...v1.18.2)

Updates `@types/express-session` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express-session)

Updates `morgan` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.10.0...1.10.1)

Updates `@types/morgan` from 1.9.9 to 1.9.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/morgan)

Updates `pdfmake` from 0.2.19 to 0.2.20
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/0.2.20/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.2.19...0.2.20)

Updates `pg` from 8.15.6 to 8.16.3
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/[email protected]/packages/pg)

Updates `puppeteer-cluster` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/thomasdondorf/puppeteer-cluster/releases)
- [Changelog](https://github.com/thomasdondorf/puppeteer-cluster/blob/master/CHANGELOG.md)
- [Commits](thomasdondorf/puppeteer-cluster@v0.23.0...v0.24.0)

Updates `@types/compression` from 1.7.5 to 1.8.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/compression)

Updates `@types/express-session` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express-session)

Updates `@types/morgan` from 1.9.9 to 1.9.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/morgan)

---
updated-dependencies:
- dependency-name: "@azure/identity"
  dependency-version: 4.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@azure/keyvault-secrets"
  dependency-version: 4.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: compression
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/compression"
  dependency-version: 1.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: express-session
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/express-session"
  dependency-version: 1.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: morgan
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/morgan"
  dependency-version: 1.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: pdfmake
  dependency-version: 0.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: pg
  dependency-version: 8.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: puppeteer-cluster
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/compression"
  dependency-version: 1.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/express-session"
  dependency-version: 1.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/morgan"
  dependency-version: 1.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 21, 2025
@github-actions github-actions bot added the chore label Jul 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants