Skip to content

chore(deps): bump the dependencies group with 5 updates - #752

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-af442df462
Open

chore(deps): bump the dependencies group with 5 updates#752
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-af442df462

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates:

Package From To
@openally/mutex 2.0.0 3.0.0
@openally/result 2.0.0 3.1.0
ipaddr.js 2.4.0 2.5.0
@npmcli/arborist 10.0.1 10.0.2
@openally/config 1.2.0 2.0.0

Updates @openally/mutex from 2.0.0 to 3.0.0

Release notes

Sourced from @​openally/mutex's releases.

@​openally/mutex@​3.0.0

Major Changes

Changelog

Sourced from @​openally/mutex's changelog.

3.0.0

Major Changes

Commits
  • 25865b9 chore: update versions (#299)
  • f9e607f refactor: drop CJS support for all packages and remove tsup (#304)
  • c7b4b55 chore: support TypeScript 6.x (#288)
  • 65c706d fix(workspaces): add missing repository configuration for workspaces manifest
  • 7ccae39 chore: add publish configuration to each workspaces
  • 082d7dc ci: drop Node.js v22.x
  • b9d4034 refactor: use Node.js native type striping
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openally/mutex since your current version.


Updates @openally/result from 2.0.0 to 3.1.0

Release notes

Sourced from @​openally/result's releases.

@​openally/result@​3.1.0

Minor Changes

  • #307 3227a4f Thanks @​fraxken! - Introduce Option.from to collapse value to either Some(value) or None for undefined and null primitive.

@​openally/result@​3.0.0

Major Changes

Changelog

Sourced from @​openally/result's changelog.

3.1.0

Minor Changes

  • #307 3227a4f Thanks @​fraxken! - Introduce Option.from to collapse value to either Some(value) or None for undefined and null primitive.

3.0.0

Major Changes

Commits
  • bda26fc chore: update versions (#308)
  • 3227a4f feat(result): implement Option.from to collapse value to Some/None (#307)
  • 25865b9 chore: update versions (#299)
  • f9e607f refactor: drop CJS support for all packages and remove tsup (#304)
  • ca75a16 feat(result): implement missing APIs for Ok and Err + useful helpers (#298)
  • c7b4b55 chore: support TypeScript 6.x (#288)
  • See full diff in compare view

Updates ipaddr.js from 2.4.0 to 2.5.0

Changelog

Sourced from ipaddr.js's changelog.

2.5.0 - 2026-08-04

  • remove ipaddr.min.js, end users must provide own minification/bundling
  • fix: compress the leftmost zero run in toString (RFC 5952, 4.2.3)
  • fix: strict IPv6 validation — reject :: with zero compression and hextets >4 hex digits
  • fix: reject non-numeric prefix length in subnetMaskFromPrefixLength
  • fix: compress trailing zero run in toString when a zoneIndex is present
  • fix: throw a descriptive error for malformed input in IPv6.parse
Commits

Updates @npmcli/arborist from 10.0.1 to 10.0.2

Release notes

Sourced from @​npmcli/arborist's releases.

arborist: v10.0.2

10.0.2 (2026-07-27)

Bug Fixes

Chores

libnpmpack: v10.0.2

Dependencies

Changelog

Sourced from @​npmcli/arborist's changelog.

10.0.2 (2026-07-27)

Bug Fixes

Chores

Commits
  • b888cc9 chore: release 12.0.2
  • 74eff59 fix(arborist): avoid crash when peer back-off detaches a node (#9770)
  • 882d0b2 fix(arborist): allow audit fix to install safe downgrades (#9761)
  • ddd50e9 chore(arborist): add missing registry mock in bin links reify test (#9746)
  • 72a6088 chore: release 12.0.1
  • 47fc8b1 fix: correct bundled sigstore from dev dependency conflict (#9740)
  • 4403f05 chore: release 12.0.0
  • fb304e7 chore: release 12.0.0-pre.2
  • b51d156 feat(arborist): extend replace-registry-host with URL prefix matching (#6110)...
  • 86416a6 feat: graduate the linked install strategy from experimental to stable (#9674)
  • Additional commits viewable in compare view

Updates @openally/config from 1.2.0 to 2.0.0

Release notes

Sourced from @​openally/config's releases.

@​openally/config@​2.0.0

Major Changes

Changelog

Sourced from @​openally/config's changelog.

2.0.0

Major Changes

Commits
  • 25865b9 chore: update versions (#299)
  • f9e607f refactor: drop CJS support for all packages and remove tsup (#304)
  • c7b4b55 chore: support TypeScript 6.x (#288)
  • 65c706d fix(workspaces): add missing repository configuration for workspaces manifest
  • 7ccae39 chore: add publish configuration to each workspaces
  • 082d7dc ci: drop Node.js v22.x
  • b9d4034 refactor: use Node.js native type striping
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openally/config since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the dependencies group with 5 updates
2738ea8 
Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@openally/mutex](https://github.com/OpenAlly/npm-packages/tree/HEAD/src/mutex) | `2.0.0` | `3.0.0` |
| [@openally/result](https://github.com/OpenAlly/npm-packages/tree/HEAD/src/result) | `2.0.0` | `3.1.0` |
| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.4.0` | `2.5.0` |
| [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist) | `10.0.1` | `10.0.2` |
| [@openally/config](https://github.com/OpenAlly/npm-packages/tree/HEAD/src/config) | `1.2.0` | `2.0.0` |


Updates `@openally/mutex` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/OpenAlly/npm-packages/releases)
- [Changelog](https://github.com/OpenAlly/npm-packages/blob/main/src/mutex/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/npm-packages/commits/@openally/mutex@3.0.0/src/mutex)

Updates `@openally/result` from 2.0.0 to 3.1.0
- [Release notes](https://github.com/OpenAlly/npm-packages/releases)
- [Changelog](https://github.com/OpenAlly/npm-packages/blob/main/src/result/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/npm-packages/commits/@openally/result@3.1.0/src/result)

Updates `ipaddr.js` from 2.4.0 to 2.5.0
- [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md)
- [Commits](https://github.com/whitequark/ipaddr.js/commits)

Updates `@npmcli/arborist` from 10.0.1 to 10.0.2
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/arborist/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/arborist-v10.0.2/workspaces/arborist)

Updates `@openally/config` from 1.2.0 to 2.0.0
- [Release notes](https://github.com/OpenAlly/npm-packages/releases)
- [Changelog](https://github.com/OpenAlly/npm-packages/blob/main/src/config/CHANGELOG.md)
- [Commits](https://github.com/OpenAlly/npm-packages/commits/@openally/config@2.0.0/src/config)

---
updated-dependencies:
- dependency-name: "@openally/mutex"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@openally/result"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ipaddr.js
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@npmcli/arborist"
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@openally/config"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 10, 2026 09:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026
@changeset-bot

changeset-bot Bot commented Aug 10, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 2738ea8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Aug 10, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​@​openally/​mutex@​3.0.0751009988100
Addednpm/​@​openally/​config@​2.0.0751009188100
Updatednpm/​@​npmcli/​arborist@​10.0.1 ⏵ 10.0.275 -1100100 +198100
Addednpm/​@​openally/​result@​3.1.08110010091100
Addednpm/​ipaddr.js@​2.5.010010010081100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants