Skip to content

chore(deps): bump the minor-deps-updates-main group across 1 directory with 5 updates#683

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-deps-updates-main-5545f44c28
Closed

chore(deps): bump the minor-deps-updates-main group across 1 directory with 5 updates#683
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-deps-updates-main-5545f44c28

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2025

Copy link
Copy Markdown
Contributor

Bumps the minor-deps-updates-main group with 5 updates in the / directory:

Package From To
@zip.js/zip.js 2.7.73 2.8.7
modern-tar 0.3.4 0.5.1
@types/node 24.3.1 24.7.2
eslint 9.36.0 9.37.0
webdriverio 9.19.2 9.20.0

Updates @zip.js/zip.js from 2.7.73 to 2.8.7

Release notes

Sourced from @​zip.js/zip.js's releases.

v2.8.7

Improved bugfix of v2.8.6 when enqueuing sub-array of Uint8Array instances into a WritableStream (with web workers enabled).

v2.8.6

Fixed bug when enqueuing sub-array of Uint8Array instances into a WritableStream in environments supporting web workers and transferable objects (see gildas-lormeau/zip.js#606)

v2.8.5

  • Optimized size of built files (approx 7%) when using native (i.e. pure JS) compression/decompression (see files/exports suffixed with-native). The code of web workers is now compressed at built time with the mini-compressor used to compress the code of the WASM module (see mini-lz.js), and decompressed at runtime.
  • Fixed path to the WASM module in the default configuration

v2.8.4

What's Changed

  • Added export of web workers and WASM module files in the package.json file by @​jschwartzbeck in gildas-lormeau/zip.js#607
  • Fixed potential race condition when initializing the WASM module in the main thread (i.e. with web workers disabled)

New Contributors

v2.8.3

  • Added support of JavaScript-based implementation (based on zlib) of Compression Streams API (see https://github.com/gildas-lormeau/zlib-streams-ts) as an alternative to the default WASM-based implementation. See the new exports property in the package.json file and files in the /dist folder, JavaScript-based implementations are suffixed with -native (e.g. ./index-native.js).
  • Fixed malloc error in environments not fully supporting WASM (see gildas-lormeau/zip.js#605)

v2.8.2

New in version 2.8

  1. WebAssembly Integration
  • Replaced JavaScript compression and decompression implementation with WebAssembly zlib module (https://github.com/gildas-lormeau/zlib-streams. This improves security and performance when native CompressionStream and DecompressionStream APIs are not used (for example, when using custom compression levels or decompressing deflate64 data) or unavailable.
  • Added the wasmURI configuration property to provide the module URI if necessary (for example, when the CSP blocks data URIs).
  1. Deflate64 Decompression Support
  • Added support of proprietary Deflate64 decompression algorithm which can be used by Windows when compressing large files (see gildas-lormeau/zip.js#517)
  1. Simplified Configuration
  • Replaced the complex workerScripts configuration with a single workerURI property, making it easier to set up web workers.
  • Default values for workerURI and wasmURI are provided, reducing the need for manual configuration when building code.
  1. Improved Type Safety and Clarity
  • Refined TypeScript definitions, including clearer distinctions between DirectoryEntry and FileEntry.
  • Deprecated and removed legacy APIs and classes, streamlining the library for current use cases.

Breaking Changes

  1. Worker Configuration Changes:
  • The workerScripts property in the configuration was removed and replaced with workerURI (and wasmURI for the WASM module).
  1. Stream Implementation Updates:
  • The Deflate and Inflate properties in the configuration were removed and replaced with CompressionStream and DecompressionStream.
  1. Deprecated Classes Removed:
  • The deprecated classes SplitZipReader and SplitZipWriter were removed.

... (truncated)

Commits

Updates modern-tar from 0.3.4 to 0.5.1

Release notes

Sourced from modern-tar's releases.

v0.5.1

Overview

packTar now supports overriding any metadata when using sources 🧷

import { packTar } from 'modern-tar/fs';
const sources = [
{
type: "file",
source: "./package.json",
target: "project/package.json",
mtime: new Date("2024-01-01T00:00:00Z"),
uid: 1001,
gid: 1002,
uname: "builder",
gname: "ci",
mode: 0o644
}
];
const tarStream = packTar(sources);

Full Changelog: ayuhito/modern-tar@v0.5.0...v0.5.1

v0.5.0

Overview

This adds a new StreamSource type for packTar to use. It can accept Readable or ReadableStream types 🗃️

import { packTar, type TarSource } from 'modern-tar/fs';
import { createWriteStream } from 'node:fs';
import { pipeline } from 'node:stream/promises';
// Pack multiple sources
const sources: TarSource[] = [
{ type: 'file', source: './package.json', target: 'project/package.json' },
{ type: 'directory', source: './src', target: 'project/src' },
{ type: 'content', content: 'Hello World!', target: 'project/hello.txt' },
{ type: 'content', content: '#!/bin/bash\necho "Executable"', target: 'bin/script.sh', mode: 0o755 },
{ type: 'stream', content: createReadStream('./large-file.bin'), target: 'project/data.bin', size: 1048576 },
{ type: 'stream', content: fetch('/api/data').then(r => r.body!), target: 'project/remote.json', size: 2048 }
];
const archiveStream = packTar(sources);
</tr></table>

... (truncated)

Commits
  • cf6182c feat(pack): allow overriding more metadata on tar sources (#78)
  • aed639e chore: bump version to 0.5.0
  • 2ab8c5e fix(unpack): handle base 256 bigint numeric headers (#77)
  • 3e547ab feat(pack): new stream source for fs packer (#76)
  • 916a755 feat(pack): accept node readable (#75)
  • 8ab5650 chore: bump version to 0.4.2
  • 641b99a perf(unpack): make passthrough hwm match read stream hwm (#74)
  • 5348264 perf(pack): read into buffer for small files (#73)
  • f16e68c perf(pack): implement concurrent writer (#72)
  • fdfcc92 chore: bump version to 0.4.1
  • Additional commits viewable in compare view

Updates @types/node from 24.3.1 to 24.7.2

Commits

Updates eslint from 9.36.0 to 9.37.0

Release notes

Sourced from eslint's releases.

v9.37.0

Features

  • 39f7fb4 feat: preserve-caught-error should recognize all static "cause" keys (#20163) (Pixel998)
  • f81eabc feat: support TS syntax in no-restricted-imports (#19562) (Nitin Kumar)

Bug Fixes

  • a129cce fix: correct no-loss-of-precision false positives for leading zeros (#20164) (Francesco Trotta)
  • 09e04fc fix: add missing AST token types (#20172) (Pixel998)
  • 861c6da fix: correct ESLint typings (#20122) (Pixel998)

Documentation

  • b950359 docs: fix typos across the docs (#20182) (루밀LuMir)
  • 42498a2 docs: improve ToC accessibility by hiding non-semantic character (#20181) (Percy Ma)
  • 29ea092 docs: Update README (GitHub Actions Bot)
  • 5c97a04 docs: show availableUntil in deprecated rule banner (#20170) (Pixel998)
  • 90a71bf docs: update README files to add badge and instructions (#20115) (루밀LuMir)
  • 1603ae1 docs: update references from master to main (#20153) (루밀LuMir)

Chores

  • afe8a13 chore: update @eslint/js dependency to version 9.37.0 (#20183) (Francesco Trotta)
  • abee4ca chore: package.json update for @​eslint/js release (Jenkins)
  • fc9381f chore: fix typos in comments (#20175) (overlookmotel)
  • e1574a2 chore: unpin jiti (#20173) (renovate[bot])
  • e1ac05e refactor: mark ESLint.findConfigFile() as async, add missing docs (#20157) (Pixel998)
  • 347906d chore: update eslint (#20149) (renovate[bot])
  • 0cb5897 test: remove tmp dir created for circular fixes in multithread mode test (#20146) (Milos Djermanovic)
  • bb99566 ci: pin jiti to version 2.5.1 (#20151) (Pixel998)
  • 177f669 perf: improve worker count calculation for "auto" concurrency (#20067) (Francesco Trotta)
  • 448b57b chore: Mark deprecated formatting rules as available until v11.0.0 (#20144) (Milos Djermanovic)
Commits

Updates webdriverio from 9.19.2 to 9.20.0

Release notes

Sourced from webdriverio's releases.

v9.20.0 (2025-09-27)

🚀 New Feature

  • wdio-allure-reporter

🐛 Bug Fix

  • webdriver
    • #14760 fix(webdriver): Fix no retrying requests when unexpected token on responses occurs (like on HTML responses) (@​Nyaran)
  • wdio-cucumber-framework
    • #14763 feat(cucumber): Fix skipping tests with skip tag using complex regular expressions (@​Nyaran)
  • wdio-allure-reporter
  • webdriverio
  • wdio-utils
    • #14750 feat(utils): Fix reduce function to use the initial value parameter (@​Nyaran)

💅 Polish

📝 Documentation

🏠 Internal

Committers: 15

... (truncated)

Changelog

Sourced from webdriverio's changelog.

v9.20.0 (2025-09-27)

🚀 New Feature

  • wdio-allure-reporter

🐛 Bug Fix

  • webdriver
    • #14760 fix(webdriver): Fix no retrying requests when unexpected token on responses occurs (like on HTML responses) (@​Nyaran)
  • wdio-cucumber-framework
    • #14763 feat(cucumber): Fix skipping tests with skip tag using complex regular expressions (@​Nyaran)
  • wdio-allure-reporter
  • webdriverio
  • wdio-utils
    • #14750 feat(utils): Fix reduce function to use the initial value parameter (@​Nyaran)

💅 Polish

📝 Documentation

🏠 Internal

Committers: 15

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 13, 2025
…y with 5 updates

Bumps the minor-deps-updates-main group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@zip.js/zip.js](https://github.com/gildas-lormeau/zip.js) | `2.7.73` | `2.8.7` |
| [modern-tar](https://github.com/ayuhito/modern-tar) | `0.3.4` | `0.5.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.3.1` | `24.7.2` |
| [eslint](https://github.com/eslint/eslint) | `9.36.0` | `9.37.0` |
| [webdriverio](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/webdriverio) | `9.19.2` | `9.20.0` |



Updates `@zip.js/zip.js` from 2.7.73 to 2.8.7
- [Release notes](https://github.com/gildas-lormeau/zip.js/releases)
- [Commits](gildas-lormeau/zip.js@v2.7.73...v2.8.7)

Updates `modern-tar` from 0.3.4 to 0.5.1
- [Release notes](https://github.com/ayuhito/modern-tar/releases)
- [Commits](ayuhito/modern-tar@v0.3.4...v0.5.1)

Updates `@types/node` from 24.3.1 to 24.7.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 9.36.0 to 9.37.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.36.0...v9.37.0)

Updates `webdriverio` from 9.19.2 to 9.20.0
- [Release notes](https://github.com/webdriverio/webdriverio/releases)
- [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webdriverio/webdriverio/commits/v9.20.0/packages/webdriverio)

---
updated-dependencies:
- dependency-name: "@zip.js/zip.js"
  dependency-version: 2.8.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-deps-updates-main
- dependency-name: modern-tar
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-deps-updates-main
- dependency-name: "@types/node"
  dependency-version: 24.7.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-deps-updates-main
- dependency-name: eslint
  dependency-version: 9.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-deps-updates-main
- dependency-name: webdriverio
  dependency-version: 9.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-deps-updates-main
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-deps-updates-main-5545f44c28 branch from 722e9c6 to d1671b0 Compare October 27, 2025 01:07
@dependabot @github

dependabot Bot commented on behalf of github Nov 17, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot @github

dependabot Bot commented on behalf of github Nov 21, 2025

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/minor-deps-updates-main-5545f44c28 branch November 21, 2025 05:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant