Skip to content

chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates - #75

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-13cb0cd84a
Open

chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates#75
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-13cb0cd84a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 3 updates in the / directory: vite, electron and undici.
Bumps the npm_and_yarn group with 3 updates in the /electron directory: vite, electron and undici.
Bumps the npm_and_yarn group with 3 updates in the /frontend directory: vite, electron and undici.

Updates vite from 6.4.3 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates electron from 43.7.0 to 43.8.1

Release notes

Sourced from electron's releases.

electron v43.8.1

Release Notes for v43.8.1

[!NOTE] This release contains the fix for GHSA-jr5w-w6x2-84p9, the mitigation for compromised eMudhra intermediate certificates

Fixes

  • Fixed link-opened windows not using the opener's session and webPreferences. #55049 (Also in 42, 44, 45)
  • Fixed setCertificateVerifyProc occasionally not being applied to a request issued concurrently with the first request to a host. #55047 (Also in 42, 44, 45)

electron v43.8.0

Release Notes for v43.8.0

Fixes

  • Fixed a crash on Linux at startup or on theme change with GTK modules loaded. #55016
  • Fixed a crash when creating a framed window on Wayland in environments where GTK could not initialize. #54893 (Also in 44, 45)
  • Fixed a Linux crash creating a window with a menu bar when GTK failed to load. #54884 (Also in 44, 45)
  • Fixed an issue where clicks posted to a background app were dropped on macOS. #54905 (Also in 42, 44, 45)
  • Fixed net.fetch and session.fetch failing permanently with net::ERR_FAILED after the Network Service process restarts. #54908 (Also in 42, 44, 45)
  • Fixed utilityProcess dropping messages posted with process.parentPort.postMessage() right before the process exits. #54962 (Also in 42, 45)

Other Changes

  • Backported fixes from upstream Chromium and V8. #55032
  • Updated Node.js to v24.22.0. #55003

electron v43.7.11

Release Notes for v43.7.11

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, PDFium and V8. #54899

Documentation

  • Documentation changes: #54881

electron v43.7.10

Release Notes for v43.7.10

Fixes

  • Fixed a crash when starting without an available display server on Linux. #54795 (Also in 45)
  • Fixed a renderer crash when a ResizeObserver loop-limit error handler modified layout. #54611 (Also in 42, 44, 45)

electron v43.7.9

Release Notes for v43.7.9

... (truncated)

Commits
  • 817c43f fix: apply the certificate SPKI blocklist to Node and add entries (43-x-y) (#...
  • 9afe078 docs: fix code block line highlighting after docs reformats (#55103)
  • 076d6db test: replace fix_crypto_tests_to_run_with_bssl.patch with upstream backport ...
  • 3b068bf test: re-enable Node.js tests that now pass with BoringSSL (#55094)
  • 60f928e build: stop overriding node GN declare_args defaults in patch (#55076)
  • 14c73d1 build: update PGO profiles (#55092)
  • 7ceb2c0 fix: avoid misaligned char16_t reads in crdtp string deserialization (#55063)
  • 06f1c1f ci: use Cloudflare DNS directly on macOS runners (#55068)
  • a68de91 fix: use the opener's session and webPreferences for windows opened from link...
  • 6a2b850 ci: skip native builds when installing deps for type generation (#55065)
  • Additional commits viewable in compare view

Updates undici from 6.28.1 to 6.29.1

Release notes

Sourced from undici's releases.

v6.29.1

Security fixes

High severity

Denial of service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018 · GHSA-qrxm-fqhp-jwvm

A malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.

TLS certificate validation bypass through dropped Agent options

CVE-2026-109383 · GHSA-2m5v-pch6-74hx

Agent used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as checkServerIdentity. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.

Denial of service through excessive Content-Encoding values

CVE-2026-109869 · GHSA-xjj6-f33q-929c

A malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although fetch() rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.

Medium severity

Denial of service through unbounded EventSource parser state

CVE-2026-109924 · GHSA-4qv8-2p9j-2685

A malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny data: fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.

Denial of service through unbounded automatic WebSocket PONG buffering

CVE-2026-109932 · GHSA-9fm3-97px-rjf6

A malicious WebSocket server could exhaust process memory by flooding the client with PING frames while not reading the automatic PONG responses. undici previously ignored socket backpressure and allowed the outbound queue to grow without bound. This release pauses frame parsing when PONG writes encounter backpressure and resumes after the socket drains.

What's Changed

Full Changelog: nodejs/undici@v6.29.0...v6.29.1

v6.29.0

What's Changed

... (truncated)

Commits
  • 8c57f6c [Release] v6.29.1 (#6023)
  • 39f93e1 fix(websocket): bound automatic PONG writes under backpressure
  • c43b23f fix(eventsource): bound retained SSE parser state
  • 1325a87 fix(fetch): abort excessive content encoding responses
  • 8c59f6b fix: preserve Agent connection options
  • b40fbfc fix: handle post-connect TLS certificate errors
  • 407630a [v6.x] fix(fetch): fix aborting Streams (#3754) (#6000)
  • e1d0501 Bumped v6.29.0 (#5888)
  • 57ac4de test: synchronize the issue-3356 body timeout (#5834)
  • 6d44174 Backport upgrade diagnostics lifecycle fixes to v6.x (#5833)
  • Additional commits viewable in compare view

Updates vite from 6.4.3 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates electron from 43.7.0 to 43.8.1

Release notes

Sourced from electron's releases.

electron v43.8.1

Release Notes for v43.8.1

[!NOTE] This release contains the fix for GHSA-jr5w-w6x2-84p9, the mitigation for compromised eMudhra intermediate certificates

Fixes

  • Fixed link-opened windows not using the opener's session and webPreferences. #55049 (Also in 42, 44, 45)
  • Fixed setCertificateVerifyProc occasionally not being applied to a request issued concurrently with the first request to a host. #55047 (Also in 42, 44, 45)

electron v43.8.0

Release Notes for v43.8.0

Fixes

  • Fixed a crash on Linux at startup or on theme change with GTK modules loaded. #55016
  • Fixed a crash when creating a framed window on Wayland in environments where GTK could not initialize. #54893 (Also in 44, 45)
  • Fixed a Linux crash creating a window with a menu bar when GTK failed to load. #54884 (Also in 44, 45)
  • Fixed an issue where clicks posted to a background app were dropped on macOS. #54905 (Also in 42, 44, 45)
  • Fixed net.fetch and session.fetch failing permanently with net::ERR_FAILED after the Network Service process restarts. #54908 (Also in 42, 44, 45)
  • Fixed utilityProcess dropping messages posted with process.parentPort.postMessage() right before the process exits. #54962 (Also in 42, 45)

Other Changes

  • Backported fixes from upstream Chromium and V8. #55032
  • Updated Node.js to v24.22.0. #55003

electron v43.7.11

Release Notes for v43.7.11

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, PDFium and V8. #54899

Documentation

  • Documentation changes: #54881

electron v43.7.10

Release Notes for v43.7.10

Fixes

  • Fixed a crash when starting without an available display server on Linux. #54795 (Also in 45)
  • Fixed a renderer crash when a ResizeObserver loop-limit error handler modified layout. #54611 (Also in 42, 44, 45)

electron v43.7.9

Release Notes for v43.7.9

... (truncated)

Commits
  • 817c43f fix: apply the certificate SPKI blocklist to Node and add entries (43-x-y) (#...
  • 9afe078 docs: fix code block line highlighting after docs reformats (#55103)
  • 076d6db test: replace fix_crypto_tests_to_run_with_bssl.patch with upstream backport ...
  • 3b068bf test: re-enable Node.js tests that now pass with BoringSSL (#55094)
  • 60f928e build: stop overriding node GN declare_args defaults in patch (#55076)
  • 14c73d1 build: update PGO profiles (#55092)
  • 7ceb2c0 fix: avoid misaligned char16_t reads in crdtp string deserialization (#55063)
  • 06f1c1f ci: use Cloudflare DNS directly on macOS runners (#55068)
  • a68de91 fix: use the opener's session and webPreferences for windows opened from link...
  • 6a2b850 ci: skip native builds when installing deps for type generation (#55065)
  • Additional commits viewable in compare view

Updates undici from 6.28.1 to 6.29.1

Release notes

Sourced from undici's releases.

v6.29.1

Security fixes

High severity

Denial of service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018 · GHSA-qrxm-fqhp-jwvm

A malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.

TLS certificate validation bypass through dropped Agent options

CVE-2026-109383 · GHSA-2m5v-pch6-74hx

Agent used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as checkServerIdentity. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.

Denial of service through excessive Content-Encoding values

CVE-2026-109869 · GHSA-xjj6-f33q-929c

A malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although fetch() rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.

Medium severity

Denial of service through unbounded EventSource parser state

CVE-2026-109924 · GHSA-4qv8-2p9j-2685

A malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny data: fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.

Denial of service through unbounded automatic WebSocket PONG buffering

CVE-2026-109932 · GHSA-9fm3-97px-rjf6

A malicious WebSocket server could exhaust process memory by flooding the client with PING frames while not reading the automatic PONG responses. undici previously ignored socket backpressure and allowed the outbound queue to grow without bound. This release pauses frame parsing when PONG writes encounter backpressure and resumes after the socket drains.

What's Changed

Full Changelog: nodejs/undici@v6.29.0...v6.29.1

v6.29.0

What's Changed

... (truncated)

Commits
  • 8c57f6c [Release] v6.29.1 (#6023)
  • 39f93e1 fix(websocket): bound automatic PONG writes under backpressure
  • c43b23f fix(eventsource): bound retained SSE parser state
  • 1325a87 fix(fetch): abort excessive content encoding responses
  • 8c59f6b fix: preserve Agent connection options
  • b40fbfc fix: handle post-connect TLS certificate errors
  • 407630a [v6.x] fix(fetch): fix aborting Streams (#3754) (#6000)
  • e1d0501 Bumped v6.29.0 (#5888)
  • 57ac4de test: synchronize the issue-3356 body timeout (#5834)
  • 6d44174 Backport upgrade diagnostics lifecycle fixes to v6.x (#5833)
  • Additional commits viewable in compare view

Updates vite from 6.4.3 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates electron from 43.7.0 to 43.8.1

Release notes

Sourced from electron's releases.

electron v43.8.1

Release Notes for v43.8.1

[!NOTE] This release contains the fix for GHSA-jr5w-w6x2-84p9, the mitigation for compromised eMudhra intermediate certificates

Fixes

  • Fixed link-opened windows not using the opener's session and webPreferences. #55049 (Also in 42, 44, 45)
  • Fixed setCertificateVerifyProc occasionally not being applied to a request issued concurrently with the first request to a host. #55047 (Also in 42, 44, 45)

electron v43.8.0

Release Notes for v43.8.0

Fixes

  • Fixed a crash on Linux at startup or on theme change with GTK modules loaded. #55016
  • Fixed a crash when creating a framed window on Wayland in environments where GTK could not initialize. #54893 (Also in 44, 45)
  • Fixed a Linux crash creating a window with a menu bar when GTK failed to load. #54884 (Also in 44, 45)
  • Fixed an issue where clicks posted to a background app were dropped on macOS. #54905 (Also in 42, 44, 45)
  • Fixed net.fetch and session.fetch failing permanently with net::ERR_FAILED after the Network Service process restarts. #54908 (Also in 42, 44, 45)
  • Fixed utilityProcess dropping messages posted with process.parentPort.postMessage() right before the process exits. #54962 (Also in 42, 45)

Other Changes

  • Backported fixes from upstream Chromium and V8. #55032
  • Updated Node.js to v24.22.0. #55003

electron v43.7.11

Release Notes for v43.7.11

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, PDFium and V8. #54899

Documentation

  • Documentation changes: #54881

electron v43.7.10

Release Notes for v43.7.10

Fixes

  • Fixed a crash when starting without an available display server on Linux. #54795 (Also in 45)
  • Fixed a renderer crash when a ResizeObserver loop-limit error handler modified layout. #54611 (Also in 42, 44, 45)

electron v43.7.9

Release Notes for v43.7.9

... (truncated)

Commits
  • 817c43f fix: apply the certificate SPKI blocklist to Node and add entries (43-x-y) (#...
  • 9afe078 docs: fix code block line highlighting after docs reformats (#55103)
  • 076d6db test: replace fix_crypto_tests_to_run_with_bssl.patch with upstream backport ...
  • 3b068bf test: re-enable Node.js tests that now pass with BoringSSL (#55094)
  • 60f928e build: stop overriding node GN declare_args defaults in patch (#55076)
  • 14c73d1 build: update PGO profiles (#55092)
  • 7ceb2c0 fix: avoid misaligned char16_t reads in crdtp string deserialization (#55063)
  • 06f1c1f ci: use Cloudflare DNS directly on macOS runners (#55068)
  • a68de91 fix: use the opener's session and webPreferences for windows opened from link...
  • 6a2b850 ci: skip native builds when installing deps for type generation (#55065)
  • Additional commits viewable in compare view

Updates undici from 6.28.1 to 6.29.1

Release notes

Sourced from undici's releases.

v6.29.1

Security fixes

High severity

Denial of service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018 · GHSA-qrxm-fqhp-jwvm

A malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.

TLS certificate validation bypass through dropped Agent options

CVE-2026-109383 · GHSA-2m5v-pch6-74hx

Agent used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as checkServerIdentity. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.

Denial of service through excessive Content-Encoding values

CVE-2026-109869 · GHSA-xjj6-f33q-929c

A malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although fetch() rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.

Medium severity

Denial of service through unbounded EventSource parser state

CVE-2026-109924 · GHSA-4qv8-2p9j-2685

A malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny data: fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.

Denial of service through unbounded automatic WebSocket PONG buffering

CVE-2026-109932 · GHSA-9fm3-97px-rjf6

A malicious WebSocket server could exhaust process memory by flooding the client with PING frames while not reading the automatic PONG responses. undici previously ignored socket backpressure and allowed the outbound queue to grow without bound. This release pauses frame parsing when PONG writes encounter backpressure and resumes after the socket drains.

What's Changed

Full Changelog: nodejs/undici@v6.29.0...v6.29.1

v6.29.0

What's Changed

... (truncated)

Commits
  • 8c57f6c [Release] v6.29.1 (#6023)
  • 39f93e1 fix(websocket): bound automatic PONG writes under backpressure
  • c43b23f fix(eventsource): bound retained SSE parser state
  • 1325a87 fix(fetch): abort excessive content encoding responses
  • 8c59f6b fix: preserve Agent connection options
  • b40fbfc fix: handle post-connect TLS certificate errors
  • 407630a [v6.x] fix(fetch): fix aborting Streams (#3754) (#6000)
  • e1d0501 Bumped v6.29.0 (#5888)
  • 57ac4de test: synchronize the issue-3356 body timeout (#5834)
  • 6d44174 Backport upgrade diagnostics lifecycle fixes to v6.x (#5833)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump the npm_and_yarn group across 3 directories with 3 …
d5d9bf1 
…updates

Bumps the npm_and_yarn group with 3 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [electron](https://github.com/electron/electron) and [undici](https://github.com/nodejs/undici).
Bumps the npm_and_yarn group with 3 updates in the /electron directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [electron](https://github.com/electron/electron) and [undici](https://github.com/nodejs/undici).
Bumps the npm_and_yarn group with 3 updates in the /frontend directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [electron](https://github.com/electron/electron) and [undici](https://github.com/nodejs/undici).


Updates `vite` from 6.4.3 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `electron` from 43.7.0 to 43.8.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.7.0...v43.8.1)

Updates `undici` from 6.28.1 to 6.29.1
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.28.1...v6.29.1)

Updates `vite` from 6.4.3 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `electron` from 43.7.0 to 43.8.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.7.0...v43.8.1)

Updates `undici` from 6.28.1 to 6.29.1
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.28.1...v6.29.1)

Updates `vite` from 6.4.3 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `electron` from 43.7.0 to 43.8.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v43.7.0...v43.8.1)

Updates `undici` from 6.28.1 to 6.29.1
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.28.1...v6.29.1)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: electron
  dependency-version: 43.8.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 6.29.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 6.4.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: electron
  dependency-version: 43.8.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 6.29.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 6.4.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: electron
  dependency-version: 43.8.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 6.29.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 31, 2026
@coderabbitai

coderabbitai Bot commented Oct 31, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 74c6bf1d-28bb-43fc-a8f7-63af126673d4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants