Skip to content

deps(deps): bump the other-patches group across 1 directory with 6 updates#870

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/SortVision/main/other-patches-2dc8581c64
May 18, 2026
Merged

deps(deps): bump the other-patches group across 1 directory with 6 updates#870
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/SortVision/main/other-patches-2dc8581c64

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the other-patches group with 6 updates in the /SortVision directory:

Package From To
dompurify 3.4.2 3.4.4
@vitest/coverage-v8 4.1.5 4.1.6
lint-staged 17.0.4 17.0.5
typescript-eslint 8.59.2 8.59.3
vitest 4.1.5 4.1.6
wait-on 9.0.6 9.0.10

Updates dompurify from 3.4.2 to 3.4.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.4

  • Added the selectedcontent element to default allow-list, thanks @​lukewarlow
  • Added the command and commandfor attributes to default allowed-list, thanks @​lukewarlow
  • Added better template scrubbing for IN_PLACE operations, thanks @​DEMON1A
  • Added stronger checks for cross-realm windows, thanks @​DEMON1A & @​fg0x0
  • Updated demo website and made sure it uses the latest from main
  • Updated existing workflows, fuzzer, dependabot, etc., added more tests
  • Bumped several dependencies where possible

DOMPurify 3.4.3

  • Fixed an issue with handling of nested Shadow DOM trees, thanks @​fishjojo1
  • Fixed the template regexes to be more robust against ReDoS attacks, thanks @​aleung27
  • Updated the node iteration code to catch more Shadow DOM related issues
  • Updated Playwright and added Node 26 to test matrix
  • Updated existing workflows, fuzzer, release signing, etc., added more tests
  • Bumped several dependencies where possible
Commits

Updates @vitest/coverage-v8 from 4.1.5 to 4.1.6

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates lint-staged from 17.0.4 to 17.0.5

Release notes

Sourced from lint-staged's releases.

v17.0.5

Patch Changes

  • #1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.
Changelog

Sourced from lint-staged's changelog.

17.0.5

Patch Changes

  • #1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.
Commits
  • cbd822e Merge pull request #1793 from lint-staged/changeset-release/main
  • 1911244 chore(changeset): release
  • 7339d7d Merge pull request #1792 from lint-staged/fix-max-arg-length-default
  • 1f67271 fix: default maxArgLength to undefined instead of NaN when parsing cli ...
  • See full diff in compare view

Updates typescript-eslint from 8.59.2 to 8.59.3

Release notes

Sourced from typescript-eslint's releases.

v8.59.3

8.59.3 (2026-05-11)

This was a version bump only, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.59.3 (2026-05-11)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vitest from 4.1.5 to 4.1.6

Release notes

Sourced from vitest's releases.

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • a8fd24c chore: release v4.1.6
  • 18af98c fix(browser): simplify orchestrator otel carrier (#10285)
  • 3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
  • See full diff in compare view

Updates wait-on from 9.0.6 to 9.0.10

Release notes

Sourced from wait-on's releases.

v9.0.10

Cleaned up unnecessary files from npm published package, added code coverage

Removed:

  • .fastembed_cache
  • .github
  • .nyc_output
  • coverage
  • .editorconfig
  • .nycrc.json
  • .prettierrc.js
  • eslint.config.mjs

Increased code coverage

Thanks @​aarongoldenthal

Commits

@dependabot dependabot Bot requested a review from alienx5499 as a code owner May 18, 2026 02:38
@dependabot dependabot Bot added automated dependencies Pull requests that update a dependency file npm labels May 18, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented May 18, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
sortvision Ready Ready Preview, Comment May 18, 2026 2:52am

@dependabot dependabot Bot changed the title deps(deps): bump the other-patches group in /SortVision with 6 updates deps(deps): bump the other-patches group across 1 directory with 6 updates May 18, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/SortVision/main/other-patches-2dc8581c64 branch from 9dc99d0 to df9604c Compare May 18, 2026 02:43
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 18, 2026

QA suite report

Metric Value
Total tests 655
Passed 655
Failed 0
Warnings 0
Pass rate 100.0%
Grade S+
Duration 5.00s

Result: passed.

View workflow run

QA vs main (last successful CI on base branch)

Baseline: last green Continuous integration on main @ b9649b2 (same test:ci suite).

Base This PR Δ passed
Passed 655 655 0
Failed 0 0
Total 655 655

Fixed (failed on base, passing on this PR)

None

New failures (failed on this PR; were not failing on base)

None

Still failing (failed on base and still failing on this PR)

None

@github-actions
Copy link
Copy Markdown

Dependabot auto-merge

Could not enable auto-merge after Continuous integration succeeded.

Common causes: auto-merge disabled in repo settings, branch protection (reviews / code owners), merge queue rules, or token permissions.

CLI output:

GraphQL: Auto merge is not allowed for this repository (enablePullRequestAutoMerge)

…dates

Bumps the other-patches group with 6 updates in the /SortVision directory:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.2` | `3.4.4` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.5` | `4.1.6` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.4` | `17.0.5` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.2` | `8.59.3` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.6` |
| [wait-on](https://github.com/jeffbski/wait-on) | `9.0.6` | `9.0.10` |



Updates `dompurify` from 3.4.2 to 3.4.4
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.2...3.4.4)

Updates `@vitest/coverage-v8` from 4.1.5 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8)

Updates `lint-staged` from 17.0.4 to 17.0.5
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.0.4...v17.0.5)

Updates `typescript-eslint` from 8.59.2 to 8.59.3
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.3/packages/typescript-eslint)

Updates `vitest` from 4.1.5 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest)

Updates `wait-on` from 9.0.6 to 9.0.10
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v9.0.6...v9.0.10)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-patches
- dependency-name: dompurify
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-patches
- dependency-name: lint-staged
  dependency-version: 17.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-patches
- dependency-name: typescript-eslint
  dependency-version: 8.59.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-patches
- dependency-name: vitest
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-patches
- dependency-name: wait-on
  dependency-version: 9.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/SortVision/main/other-patches-2dc8581c64 branch from df9604c to 5aa79ac Compare May 18, 2026 02:50
@github-actions github-actions Bot merged commit 92e9748 into main May 18, 2026
16 checks passed
@github-actions
Copy link
Copy Markdown

Dependabot auto-merge

Auto-merge is enabled (squash). GitHub will merge this PR once all required checks and reviews pass.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/SortVision/main/other-patches-2dc8581c64 branch May 18, 2026 02:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Pull requests that update a dependency file npm

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant