Skip to content

build(deps): bump the routine group across 3 directories with 5 updates - #51

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/routine-dca5a30354
Open

build(deps): bump the routine group across 3 directories with 5 updates#51
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/routine-dca5a30354

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the routine group with 1 update in the / directory: eslint-plugin-vue.
Bumps the routine group with 3 updates in the /client directory: @openvue/themes, axios and openvue.
Bumps the routine group with 1 update in the /server directory: express-rate-limit.

Updates eslint-plugin-vue from 10.11.1 to 10.12.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.12.0

New rules

New rule options

Fixed false negatives (may result in more lint issues)

Fixed false positives (may result in fewer lint issues)

Other changes

Changelog

Sourced from eslint-plugin-vue's changelog.

10.12.0

New rules

New rule options

Fixed false negatives (may result in more lint issues)

Fixed false positives (may result in fewer lint issues)

Other changes

Commits
  • f2a0cb5 Version Packages (#3153)
  • 9814050 fix(no-dupe-keys): detect defineModel() name collisions (#3163)
  • 1741d59 fix(no-multi-spaces): check tags of all top-level blocks (#3162)
  • d743582 fix(no-unused-properties): report unused non-props along $props (#3161)
  • d2a1f76 fix(padding-lines-in-component-definition): check every property pair when `w...
  • 2a7ad86 fix: recognize useTemplateRef() (#3154)
  • 515614e fix(attributes-order): change unsafe autofix to suggestion (#3145)
  • 9175cc5 feat: remove Reactivity Transform support (#3126)
  • f115fd6 refactor: migrate block-lang to TypeScript (#3209)
  • 30a2a53 refactor: migrate class name and valid-next-tick rules to TypeScript (#3202)
  • Additional commits viewable in compare view

Updates @openvue/themes from 1.0.0 to 1.1.0

Release notes

Sourced from @​openvue/themes's releases.

1.1.0

See CHANGELOG.md

Changelog

Sourced from @​openvue/themes's changelog.

[1.1.0] - 2026-10-29

Added

  • New openvolt-vue CLI. npx openvolt-vue add Button copies OpenVolt components into your project. The components ship inside the package, so they always match your openvue version.
  • Showcase: the Theme Builder at /theme, a quicker way into theming than the Designer. Pick one of a dozen curated styles that span all five base presets, or set the base, primary and surface colours (including any hex colour, expanded to a full palette), font and root size, corner radius, density, input variant, focus ring, motion, ripple, shadows, backdrop and disabled opacity yourself, previewed in light and dark mode. The whole page is the preview: a grid of components and the landing page's sample applications restyle as you change settings, and the theme you choose then dresses the whole documentation site. The curated styles are also one click away in the top bar's colour configurator, and a compact version of the builder in the home page hero changes the base, colour, font and corners in place. The export is three small files (the preset as a diff against its base, main.js or nuxt.config.ts, and a stylesheet for typography), with copy, download, a share link whose URL is the complete theme, and Copy for AI agent, a short prompt with the theme files and the one setup change, for a coding agent adding the theme to an existing project. Refine in the Theme Designer hands the result to the Theme Designer for token-level edits. Everything runs in the browser; the only requests that leave the page are for fonts, from Google Fonts.
  • Nide, a fifth theme preset: a neutral palette with a near-black primary (near-white in dark mode), hairline borders, soft 3px focus rings, segmented Tabs and SelectButton, card-style toasts and bordered messages. Controls are compact (14px text in 36px buttons and fields at the default 16px root), so Nide renders smaller than the other presets; checkboxes and radio buttons are 18px, and 16px in the small size. Use it like any other preset with import Nide from '@openvue/themes/nide', or as a foundation in the Theme Designer. It is layered on Aura's tokens and comes from @openuxkit/themes 1.2.0, so both @openvue/themes and @openuxkit/themes include it (umd/nide.min.js for CDN use).

Fixed

  • Fix populating time in DatePicker when using 24-hour format
  • DatePicker previous and next buttons now tell screen reader users where they navigate to, e.g. "Next Month, November 2026" instead of just "Next Month". The labels reuse existing locale keys, so translations need no changes. (#679)
  • DatePicker time picker now announces the new time to screen readers when the hour, minute, second or AM/PM changes. (#679)
  • InputChips no longer types the separator into the input when a duplicate chip is rejected. (#602)
  • InputNumber no longer changes the number you type after an initial 0. With a suffix such as " kg" the second digit cleared the field, and in currency fields typing 1250 into $0.00 gave $1.25. Contributed by @​AntekOlszewski. (#665)
  • Fix InputMask update:modelValue emitting stale value upon clearing when unmask is set to true.
  • Inputs inside a Form with initialValues no longer jump back to the initial value when cleared. (#686)
  • Pressing tab no longer toggles options in MultiSelect. Tabbing past a MultiSelect after mount doesn't toggle the first option anymore either.
  • The RadioButton dot no longer sits a pixel off-centre at fractional display scaling such as 125% or 175%. The dot is now drawn at the icon's font-size (the radiobutton.icon.size tokens) on a layer covering the whole ring. Custom CSS that sizes .p-radiobutton-icon with width and height keeps working for dots up to the token size; to make the dot larger than that, set font-size or the tokens instead.
  • Tree lazy loading now works while filtering: node-expand and node-collapse pass the node from value instead of a filtered copy. (#585)
Commits

Updates axios from 1.20.0 to 1.21.0

Release notes

Sourced from axios's releases.

v1.21.0 — October 21, 2026

This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.

⚠️ Breaking Changes & Deprecations

  • Header Defaults: Only plain objects, null-prototype maps, and compatible AxiosHeaders instances are treated as common or method-specific defaults; literal headers such as Link are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example { post: { ...customDefaults } }, or compatible AxiosHeaders. Otherwise, those instances become literal header values, including on requests using other methods. (#11156)

🚀 New Features

  • Response Timing: Added response.duration, in milliseconds, including on error.response when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing duration value supplied by a custom adapter. (#11214)
  • UTF-8 Basic Authentication: Added transitional.encodeBasicAuthUsername: true to support Unicode usernames in XHR and Fetch requests. The option defaults to false, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (#11159)

🐛 Bug Fixes

  • Fetch Compatibility: Restored requests in runtimes such as Cloudflare Workers that reject the implicit cache: 'default', while preserving explicit caller settings. Response-size failures now retain their original ERR_BAD_RESPONSE and request context when runtime wrappers replace the underlying stream error. (#11194, #11179)
  • Runtime Consistency: Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with ERR_BAD_OPTION_VALUE, and sparse or non-index numeric form fields serialize as keyed objects. With proxy: false, native proxyEnv agents using unsupported pool-management or TLS-session lifecycle overrides now reject with ERR_BAD_OPTION_VALUE; construct those agents without proxyEnv. (#11242)
  • Header Handling: Preserved headers named __proto__ using safe casing without changing the AxiosHeaders instance prototype. Function matchers in has(), delete(), and clear() now receive the headers instance as this, matching their declared contract. (#11134, #11216)
  • URL and Data URL Parsing: Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (#11138, #11163, #11294)
  • Error Diagnostics: Preserved short reconstructed request stacks and appended wrapped error stacks under Caused by: so tooling that reads only error.stack retains the original failure context. (#11132, #11142)
  • Interceptor Removal: Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (#11139)
  • Proxy TLS: HTTPS CONNECT tunnels now apply current origin TLS options from an explicit httpsAgent, or from https.globalAgent when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (#11178)
  • XHR Lifecycle: Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (#11166, #11225)
  • HTTP/2 Sessions: Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (#11210)
  • TypeScript Declarations: Exposed the response-default marker as a public type to resolve TS2527 when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (#11125)

🔧 Maintenance & Chores

  • Configuration Performance: Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (#11208)
  • Same-Origin Checks: Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (#11174)
  • Dependencies: Updated follow-redirects to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused dayjs from the docs package, root chalk, and chai from CJS module tests. (#11169, #11188, #11189, #11195, #11212, #11213, #11218, #11220, #11221, #11230, #11234, #11244, #11245, #11266, #11267, #11268, #11269, #11270, #11271, #11272, #11298, #11302, #11303, #11304, #11305, #11306, #11313, #11321, #11322, #11323, #11342)
  • Documentation: Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (#11228, #11149, #11335)
  • Contributor Workflow: Consolidated agent instructions in AGENTS.md, standardized PR labels, required prerelease notes and validation evidence, and clarified that npm test requires installed Playwright browsers. (#11238, #11273, #11223, #11284)
  • Sponsors and Support: Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (#11222, #11249, #11252, #11341)
  • Proxy Regression Coverage: Added a long dotted request-hostname test for NO_PROXY handling, extending coverage of an existing denial-of-service fix. (#11235)
  • Release Preparation: Updated package version metadata for 1.21.0. (#11346)

🌟 New Contributors

Welcome to our 24 new contributors. Thank you for helping improve Axios:

... (truncated)

Changelog

Sourced from axios's changelog.

v1.21.0 — October 21, 2026

This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.

⚠️ Breaking Changes & Deprecations

  • Header Defaults: Only plain objects, null-prototype maps, and compatible AxiosHeaders instances are treated as common or method-specific defaults; literal headers such as Link are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example { post: { ...customDefaults } }, or compatible AxiosHeaders. Otherwise, those instances become literal header values, including on requests using other methods. (#11156)

🚀 New Features

  • Response Timing: Added response.duration, in milliseconds, including on error.response when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing duration value supplied by a custom adapter. (#11214)
  • UTF-8 Basic Authentication: Added transitional.encodeBasicAuthUsername: true to support Unicode usernames in XHR and Fetch requests. The option defaults to false, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (#11159)

🐛 Bug Fixes

  • Fetch Compatibility: Restored requests in runtimes such as Cloudflare Workers that reject the implicit cache: 'default', while preserving explicit caller settings. Response-size failures now retain their original ERR_BAD_RESPONSE and request context when runtime wrappers replace the underlying stream error. (#11194, #11179)
  • Runtime Consistency: Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with ERR_BAD_OPTION_VALUE, and sparse or non-index numeric form fields serialize as keyed objects. With proxy: false, native proxyEnv agents using unsupported pool-management or TLS-session lifecycle overrides now reject with ERR_BAD_OPTION_VALUE; construct those agents without proxyEnv. (#11242)
  • Header Handling: Preserved headers named __proto__ using safe casing without changing the AxiosHeaders instance prototype. Function matchers in has(), delete(), and clear() now receive the headers instance as this, matching their declared contract. (#11134, #11216)
  • URL and Data URL Parsing: Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (#11138, #11163, #11294)
  • Error Diagnostics: Preserved short reconstructed request stacks and appended wrapped error stacks under Caused by: so tooling that reads only error.stack retains the original failure context. (#11132, #11142)
  • Interceptor Removal: Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (#11139)
  • Proxy TLS: HTTPS CONNECT tunnels now apply current origin TLS options from an explicit httpsAgent, or from https.globalAgent when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (#11178)
  • XHR Lifecycle: Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (#11166, #11225)
  • HTTP/2 Sessions: Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (#11210)
  • TypeScript Declarations: Exposed the response-default marker as a public type to resolve TS2527 when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (#11125)

🔧 Maintenance & Chores

  • Configuration Performance: Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (#11208)
  • Same-Origin Checks: Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (#11174)
  • Dependencies: Updated follow-redirects to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused dayjs from the docs package, root chalk, and chai from CJS module tests. (#11169, #11188, #11189, #11195, #11212, #11213, #11218, #11220, #11221, #11230, #11234, #11244, #11245, #11266, #11267, #11268, #11269, #11270, #11271, #11272, #11298, #11302, #11303, #11304, #11305, #11306, #11313, #11321, #11322, #11323, #11342)
  • Documentation: Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (#11228, #11149, #11335)
  • Contributor Workflow: Consolidated agent instructions in AGENTS.md, standardized PR labels, required prerelease notes and validation evidence, and clarified that npm test requires installed Playwright browsers. (#11238, #11273, #11223, #11284)
  • Sponsors and Support: Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (#11222, #11249, #11252, #11341)
  • Proxy Regression Coverage: Added a long dotted request-hostname test for NO_PROXY handling, extending coverage of an existing denial-of-service fix. (#11235)
  • Release Preparation: Updated package version metadata for 1.21.0. (#11346)

🌟 New Contributors

Welcome to our 24 new contributors. Thank you for helping improve Axios:

... (truncated)

Commits
  • aa54a5e docs: remove cancelled sponsors from README (#11369)
  • e6b79d9 chore(release): prepare release 1.21.0 (#11346)
  • fceeb10 chore(deps-dev): bump the development_dependencies group with 4 updates (#11342)
  • 7d15df3 docs: refresh sponsor data (#11341)
  • 8d8e844 docs: correct interceptor options and request lifecycle guide (#11335)
  • 326843a test(no-proxy): cover the request-hostname path with a long dotted host (#11235)
  • e5195ec feat(core): expose request duration on the response (#11214)
  • 8d415e6 fix(headers): bind matcher callbacks to the headers instance (#11216)
  • b16dd77 fix(xhr): remove progress event listeners on request completion (#11225)
  • 790b2ca chore(deps): bump the github-actions group with 3 updates (#11323)
  • Additional commits viewable in compare view

Updates openvue from 1.0.0 to 1.1.0

Release notes

Sourced from openvue's releases.

1.1.0

See CHANGELOG.md

Changelog

Sourced from openvue's changelog.

[1.1.0] - 2026-10-29

Added

  • New openvolt-vue CLI. npx openvolt-vue add Button copies OpenVolt components into your project. The components ship inside the package, so they always match your openvue version.
  • Showcase: the Theme Builder at /theme, a quicker way into theming than the Designer. Pick one of a dozen curated styles that span all five base presets, or set the base, primary and surface colours (including any hex colour, expanded to a full palette), font and root size, corner radius, density, input variant, focus ring, motion, ripple, shadows, backdrop and disabled opacity yourself, previewed in light and dark mode. The whole page is the preview: a grid of components and the landing page's sample applications restyle as you change settings, and the theme you choose then dresses the whole documentation site. The curated styles are also one click away in the top bar's colour configurator, and a compact version of the builder in the home page hero changes the base, colour, font and corners in place. The export is three small files (the preset as a diff against its base, main.js or nuxt.config.ts, and a stylesheet for typography), with copy, download, a share link whose URL is the complete theme, and Copy for AI agent, a short prompt with the theme files and the one setup change, for a coding agent adding the theme to an existing project. Refine in the Theme Designer hands the result to the Theme Designer for token-level edits. Everything runs in the browser; the only requests that leave the page are for fonts, from Google Fonts.
  • Nide, a fifth theme preset: a neutral palette with a near-black primary (near-white in dark mode), hairline borders, soft 3px focus rings, segmented Tabs and SelectButton, card-style toasts and bordered messages. Controls are compact (14px text in 36px buttons and fields at the default 16px root), so Nide renders smaller than the other presets; checkboxes and radio buttons are 18px, and 16px in the small size. Use it like any other preset with import Nide from '@openvue/themes/nide', or as a foundation in the Theme Designer. It is layered on Aura's tokens and comes from @openuxkit/themes 1.2.0, so both @openvue/themes and @openuxkit/themes include it (umd/nide.min.js for CDN use).

Fixed

  • Fix populating time in DatePicker when using 24-hour format
  • DatePicker previous and next buttons now tell screen reader users where they navigate to, e.g. "Next Month, November 2026" instead of just "Next Month". The labels reuse existing locale keys, so translations need no changes. (#679)
  • DatePicker time picker now announces the new time to screen readers when the hour, minute, second or AM/PM changes. (#679)
  • InputChips no longer types the separator into the input when a duplicate chip is rejected. (#602)
  • InputNumber no longer changes the number you type after an initial 0. With a suffix such as " kg" the second digit cleared the field, and in currency fields typing 1250 into $0.00 gave $1.25. Contributed by @​AntekOlszewski. (#665)
  • Fix InputMask update:modelValue emitting stale value upon clearing when unmask is set to true.
  • Inputs inside a Form with initialValues no longer jump back to the initial value when cleared. (#686)
  • Pressing tab no longer toggles options in MultiSelect. Tabbing past a MultiSelect after mount doesn't toggle the first option anymore either.
  • The RadioButton dot no longer sits a pixel off-centre at fractional display scaling such as 125% or 175%. The dot is now drawn at the icon's font-size (the radiobutton.icon.size tokens) on a layer covering the whole ring. Custom CSS that sizes .p-radiobutton-icon with width and height keeps working for dots up to the token size; to make the dot larger than that, set font-size or the tokens instead.
  • Tree lazy loading now works while filtering: node-expand and node-collapse pass the node from value instead of a filtered copy. (#585)
Commits

Updates express-rate-limit from 8.7.1 to 8.7.2

Release notes

Sourced from express-rate-limit's releases.

v8.7.2

You can view the changelog here.

Commits
  • 3fa4577 8.7.2
  • 7427a5c v8.7.2 changelog
  • da5b115 fix: don't un-count requests that complete after the window resets (#707)
  • 28331a7 docs: Restore hyphenated anchor links for error codes (#705)
  • 404bc3a docs: show how to reset the key of an IPv6 client (#704)
  • e0b3886 docs: fix inverted skipSuccessfulRequests and ipv6Subnet descriptions (#703)
  • 97bc073 chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 (#702)
  • 991c16d chore(deps): bump ip-address from 10.7.1 to 10.7.3 (#699)
  • a6ace2a chore(deps-dev): bump the development-dependencies group with 9 updates (#698)
  • 518a0d5 chore(deps): bump ip-address from 10.7.0 to 10.7.1 (#696)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • `@dependabot ignore ...

Description has been truncated

@dependabot
build(deps): bump the routine group across 3 directories with 5 updates
738f29d 
Bumps the routine group with 1 update in the / directory: [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue).
Bumps the routine group with 3 updates in the /client directory: [@openvue/themes](https://github.com/openvi-foundation/openvue/tree/HEAD/packages/themes), [axios](https://github.com/axios/axios) and [openvue](https://github.com/openvi-foundation/openvue/tree/HEAD/packages/primevue).
Bumps the routine group with 1 update in the /server directory: [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit).


Updates `eslint-plugin-vue` from 10.11.1 to 10.12.0
- [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases)
- [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md)
- [Commits](vuejs/eslint-plugin-vue@v10.11.1...v10.12.0)

Updates `@openvue/themes` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/openvi-foundation/openvue/releases)
- [Changelog](https://github.com/openvi-foundation/openvue/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openvi-foundation/openvue/commits/1.1.0/packages/themes)

Updates `axios` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.20.0...v1.21.0)

Updates `openvue` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/openvi-foundation/openvue/releases)
- [Changelog](https://github.com/openvi-foundation/openvue/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openvi-foundation/openvue/commits/1.1.0/packages/primevue)

Updates `express-rate-limit` from 8.7.1 to 8.7.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.7.1...v8.7.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-vue
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: "@openvue/themes"
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: axios
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: openvue
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: express-rate-limit
  dependency-version: 8.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants