Bump the production-dependencies group with 6 updates by dependabot[bot] · Pull Request #7 · Hexadecinull/UniSwitch

dependabot · 2026-07-30T15:50:18Z

Bumps the production-dependencies group with 6 updates:

Package	From	To
commander	`12.1.0`	`15.0.0`
@capacitor/android	`6.2.1`	`8.4.2`
@capacitor/core	`6.2.1`	`8.4.2`
@capacitor/ios	`6.2.1`	`8.4.2`
dotenv	`16.6.1`	`17.4.2`
express	`4.22.2`	`5.2.1`

Updates commander from 12.1.0 to 15.0.0

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

Changed

Breaking: migrated Commander implementation from CommonJS to ESM (#2464)

Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).

dev: switch tests from Jest to node:test test runner (#2463)

Deleted

Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

show excess command-arguments in error message (#2384)

Fixed

Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)

update example to use compatible character for MINGW64 (#2475)

Changed

Breaking: migrated Commander implementation from CommonJS to ESM (#2464)

Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).

dev: switch tests from Jest to node:test test runner (#2463)

Deleted

Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

[14.0.3] (2026-01-31)

Added

Release Policy document (#2462)

Changes

old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)

clarify typing for deprecated callback parameter to .outputHelp() (#2427)

... (truncated)

Commits

ba6d13d Fix release dates in changelog (#2523)
a752ed9 Pin GitHub actions with hash (#2521)
74d5dfe Drop EOL node 20 from test matrix, and add node 26 (#2520)
6df9b68 Update details for 15.0.0 release (#2519)
01ce5d0 Remove jest esm examples (#2517)
d785d8b Update dependencies (#2518)
9098b48 Update dependencies (#2506)
373f660 Use node:util stripVTControlCharacters instead of own code (#2486)
987f289 Use simple match in test (to avoid warning about expensive regex) (#2485)
0ea3bb3 Update dependecies and lint (#2489)
Additional commits viewable in compare view

Updates @capacitor/android from 6.2.1 to 8.4.2

Release notes

Sourced from @capacitor/android's releases.

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)

8.4.1

8.4.1 (2026-06-19)

Bug Fixes

cli: make SPM dependency patch work on prereleases (#8508) (6048e90)

cli: patch Capacitor SPM dependency version in plugins (#8492) (28bb2c6)

8.4.0

8.4.0 (2026-06-02)

Bug Fixes

android: show only the requested system bar (#8480) (4c6c321)

cli: revert live reload config on failure (#8485) (1d031a4)

SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)

SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

add method getDouble to plugin config (#7638) (93c72de)

cli: add experimental packageOptions (#8471) (258867b)

cli: capture ios_package_manager in telemetry (#8482) (b4b297a)

8.3.4

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3

8.3.3 (2026-05-08)

... (truncated)

Changelog

Sourced from @capacitor/android's changelog.

8.4.2 (2026-07-14)

Bug Fixes

android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)

8.4.1 (2026-06-19)

Bug Fixes

cli: make SPM dependency patch work on prereleases (#8508) (6048e90)

cli: patch Capacitor SPM dependency version in plugins (#8492) (28bb2c6)

8.4.0 (2026-06-02)

Bug Fixes

android: show only the requested system bar (#8480) (4c6c321)

cli: revert live reload config on failure (#8485) (1d031a4)

SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)

SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

add method getDouble to plugin config (#7638) (93c72de)

cli: add experimental packageOptions (#8471) (258867b)

cli: capture ios_package_manager in telemetry (#8482) (b4b297a)

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3 (2026-05-08)

Bug Fixes

cli: copy plugin files in CocoaPods projects (#8467) (b2d7719)

8.3.2 (2026-05-07)

Bug Fixes

cli: add cSettings support for compiler flags in generated Package.swift (#8448) (0bd0676)

cli: add system framework and weak framework support in SPM Package.swift (#8447) (3232f0f)

cli: correct Capacitor plugin SPM compat check (#8440) (e5ccc45)

cli: generate binaryTarget entries for custom xcframeworks in Package.swift (#8445) (1f7e33f)

cli: generate resource entries in Package.swift (#8455) (790bd27)

cli: handle Cordova plugins without iOS source files (#8443) (0da130e)

cli: link plugin dependencies in Package.swift (#8457) (b3c769e)

ios: support Cordova plugins with Package.swift (#8438) (139943b)

... (truncated)

Commits

1834b97 Release 8.4.2
6f2d328 fix(android): explicitly grant URI permissions for image capture intent (#8526)
b789b68 chore: run npm run fmt to fix lint errors (#8516)
7217b52 Release 8.4.1
6048e90 fix(cli): make SPM dependency patch work on prereleases (#8508)
28bb2c6 fix(cli): patch Capacitor SPM dependency version in plugins (#8492)
41fd9de Release 8.4.0
36b729d chore: Decrease timeout for CI jobs from 60 to 30 minutes (#8476)
4c6c321 fix(android): show only the requested system bar (#8480)
d4ad7ff fix(SystemBars): respect insetsHandling disable (#8481)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by capacitor-plugin-bot, a new releaser for @capacitor/android since your current version.

Updates @capacitor/core from 6.2.1 to 8.4.2

Release notes

Sourced from @capacitor/core's releases.

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)

8.4.1

8.4.1 (2026-06-19)

Bug Fixes

cli: make SPM dependency patch work on prereleases (#8508) (6048e90)

cli: patch Capacitor SPM dependency version in plugins (#8492) (28bb2c6)

8.4.0

8.4.0 (2026-06-02)

Bug Fixes

android: show only the requested system bar (#8480) (4c6c321)

cli: revert live reload config on failure (#8485) (1d031a4)

SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)

SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

add method getDouble to plugin config (#7638) (93c72de)

cli: add experimental packageOptions (#8471) (258867b)

cli: capture ios_package_manager in telemetry (#8482) (b4b297a)

8.3.4

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3

8.3.3 (2026-05-08)

... (truncated)

Changelog

Sourced from @capacitor/core's changelog.

8.4.2 (2026-07-14)

Bug Fixes

android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)

8.4.1 (2026-06-19)

Bug Fixes

cli: make SPM dependency patch work on prereleases (#8508) (6048e90)

cli: patch Capacitor SPM dependency version in plugins (#8492) (28bb2c6)

8.4.0 (2026-06-02)

Bug Fixes

android: show only the requested system bar (#8480) (4c6c321)

cli: revert live reload config on failure (#8485) (1d031a4)

SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)

SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

add method getDouble to plugin config (#7638) (93c72de)

cli: add experimental packageOptions (#8471) (258867b)

cli: capture ios_package_manager in telemetry (#8482) (b4b297a)

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3 (2026-05-08)

Bug Fixes

cli: copy plugin files in CocoaPods projects (#8467) (b2d7719)

8.3.2 (2026-05-07)

Bug Fixes

cli: add cSettings support for compiler flags in generated Package.swift (#8448) (0bd0676)

cli: add system framework and weak framework support in SPM Package.swift (#8447) (3232f0f)

cli: correct Capacitor plugin SPM compat check (#8440) (e5ccc45)

cli: generate binaryTarget entries for custom xcframeworks in Package.swift (#8445) (1f7e33f)

cli: generate resource entries in Package.swift (#8455) (790bd27)

cli: handle Cordova plugins without iOS source files (#8443) (0da130e)

cli: link plugin dependencies in Package.swift (#8457) (b3c769e)

ios: support Cordova plugins with Package.swift (#8438) (139943b)

... (truncated)

Commits

1834b97 Release 8.4.2
6f2d328 fix(android): explicitly grant URI permissions for image capture intent (#8526)
b789b68 chore: run npm run fmt to fix lint errors (#8516)
7217b52 Release 8.4.1
6048e90 fix(cli): make SPM dependency patch work on prereleases (#8508)
28bb2c6 fix(cli): patch Capacitor SPM dependency version in plugins (#8492)
41fd9de Release 8.4.0
36b729d chore: Decrease timeout for CI jobs from 60 to 30 minutes (#8476)
4c6c321 fix(android): show only the requested system bar (#8480)
d4ad7ff fix(SystemBars): respect insetsHandling disable (#8481)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by capacitor-plugin-bot, a new releaser for @capacitor/core since your current version.

Updates @capacitor/ios from 6.2.1 to 8.4.2

Release notes

Sourced from @capacitor/ios's releases.

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)

8.4.1

8.4.1 (2026-06-19)

Bug Fixes

cli: make SPM dependency patch work on prereleases (#8508) (6048e90)

cli: patch Capacitor SPM dependency version in plugins (#8492) (28bb2c6)

8.4.0

8.4.0 (2026-06-02)

Bug Fixes

android: show only the requested system bar (#8480) (4c6c321)

cli: revert live reload config on failure (#8485) (1d031a4)

SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)

SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

add method getDouble to plugin config (#7638) (93c72de)

cli: add experimental packageOptions (#8471) (258867b)

cli: capture ios_package_manager in telemetry (#8482) (b4b297a)

8.3.4

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3

8.3.3 (2026-05-08)

... (truncated)

Changelog

Sourced from @capacitor/ios's changelog.

8.4.2 (2026-07-14)

Bug Fixes

android: explicitly grant URI permissions for image capture intent (#8526) (6f2d328)

8.4.1 (2026-06-19)

Bug Fixes

cli: make SPM dependency patch work on prereleases (#8508) (6048e90)

cli: patch Capacitor SPM dependency version in plugins (#8492) (28bb2c6)

8.4.0 (2026-06-02)

Bug Fixes

android: show only the requested system bar (#8480) (4c6c321)

cli: revert live reload config on failure (#8485) (1d031a4)

SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)

SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

add method getDouble to plugin config (#7638) (93c72de)

cli: add experimental packageOptions (#8471) (258867b)

cli: capture ios_package_manager in telemetry (#8482) (b4b297a)

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3 (2026-05-08)

Bug Fixes

cli: copy plugin files in CocoaPods projects (#8467) (b2d7719)

8.3.2 (2026-05-07)

Bug Fixes

cli: add cSettings support for compiler flags in generated Package.swift (#8448) (0bd0676)

cli: add system framework and weak framework support in SPM Package.swift (#8447) (3232f0f)

cli: correct Capacitor plugin SPM compat check (#8440) (e5ccc45)

cli: generate binaryTarget entries for custom xcframeworks in Package.swift (#8445) (1f7e33f)

cli: generate resource entries in Package.swift (#8455) (790bd27)

cli: handle Cordova plugins without iOS source files (#8443) (0da130e)

cli: link plugin dependencies in Package.swift (#8457) (b3c769e)

ios: support Cordova plugins with Package.swift (#8438) (139943b)

... (truncated)

Commits

1834b97 Release 8.4.2
6f2d328 fix(android): explicitly grant URI permissions for image capture intent (#8526)
b789b68 chore: run npm run fmt to fix lint errors (#8516)
7217b52 Release 8.4.1
6048e90 fix(cli): make SPM dependency patch work on prereleases (#8508)
28bb2c6 fix(cli): patch Capacitor SPM dependency version in plugins (#8492)
41fd9de Release 8.4.0
36b729d chore: Decrease timeout for CI jobs from 60 to 30 minutes (#8476)
4c6c321 fix(android): show only the requested system bar (#8480)
d4ad7ff fix(SystemBars): respect insetsHandling disable (#8481)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by capacitor-plugin-bot, a new releaser for @capacitor/ios since your current version.

Updates dotenv from 16.6.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

Add a new README section on dotenv’s approach to the agentic future.

Changed

Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)

Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

17.2.3 (2025-09-29)

Changed

Fixed typescript error definition (#912)

... (truncated)

Commits

f116f70 17.4.2
3a81612 fix visual order of faq
13f55a8 Merge branch 'skill'
4bbbf73 reorganize faq
c3da64b Merge pull request #1009 from motdotla/skill
6f743b1 update source
fc2c624 update skill
972315b Tighten up skill
2795fce reorganize faq
d5495d4 adjust skill
Additional commits viewable in compare view

Updates express from 4.22.2 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 5.2.1 by @UlisesGascon in expressjs/express#6933

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by @dependabot[bot] in expressjs/express#6429

Refactor: simplify acceptsLanguages implementation using spread operator by @Ayoub-Mabrouk in expressjs/express#6137

increased code coverage of utils.js file by @ashish3011 in expressjs/express#6386

chore: remove duplicate word by @dufucun in expressjs/express#6456

build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by @dependabot[bot] in expressjs/express#6498

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/express#6497

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/express#6496

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6504

ci: update codeql config by @Phillip9587 in expressjs/express#6488

chore: wider range for query test skip by @jonchurch in expressjs/express#6512

chore: fix typos in test by @noritaka1166 in expressjs/express#6535

ci: disable credential persistence for checkout actions by @mertssmnoglu in expressjs/express#6522

ci: allow manual triggering of workflow by @shivarm in expressjs/express#6515

test: add coverage for app.listen() variants by @kgarg1 in expressjs/express#6476

docs: move documentation and charters to the discussions and .github … by @bjohansebas in expressjs/express#6427

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/express#6549

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/express#6548

chore: enforce explicit Buffer import and add lint rule by @shivarm in expressjs/express#6525

chore: use node protocol for querystring by @shivarm in expressjs/express#6520

chore: fix typo by @mountdisk in expressjs/express#6609

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/express#6618

add deprecation warnings for redirect arguments undefined by @bjohansebas in expressjs/express#6405

ci: run CI when the markdown changes by @bjohansebas in expressjs/express#6632

doc: fix CONTRIBUTING link by @jonchurch in expressjs/express#6653

doc: update contributing guidelines and code of conduct links by @ShubhamOulkar in expressjs/express#6601

build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by @dependabot[bot] in expressjs/express#6679

build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by @dependabot[bot] in expressjs/express#6678

lint: add --fix flag to automatic fix linting issue by @shivarm in expressjs/express#6644

chore: ignore yarn.lock file and update example by @shivarm in expressjs/express#6588

lib: use req.socket over deprecated req.connection by @bjohansebas in expressjs/express#6705

doc: update express app example by @shivarm in expressjs/express#6718

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/express#6675

Remove history.md from being packaged on publish by @sheplu in expressjs/express#6780

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: body-parser@^2.2.1

A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

5.1.0 / 2025-03-31

Add support for Uint8Array in res.send()

Add support for ETag option in res.sendFile()

Add support for multiple links with the same rel in res.links()

Add funding field to package.json

perf: use loop for acceptParams

refactor: prefix built-in node module imports

deps: remove setprototypeof

deps: remove safe-buffer

deps: remove utils-merge

deps: remove methods

deps: remove depd

deps: debug@^4.4.0

deps: body-parser@^2.2.0

deps: router@^2.2.0

deps: content-type@^1.0.5

deps: finalhandler@^2.1.0

deps: qs@^6.14.0

deps: server-static@2.2.0

deps: type-is@2.0.1

5.0.1 / 2024-10-08

Update cookie semver lock to address CVE-2024-47764

5.0.0 / 2024-09-10

remove:

path-is-absolute dependency - use path.isAbsolute instead

breaking:

res.status() accepts only integers, and input must be greater than 99 and less than 1000

will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range

will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs

deps: send@1.0.0

... (t...

Description has been truncated

Bumps the production-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [commander](https://github.com/tj/commander.js) | `12.1.0` | `15.0.0` | | [@capacitor/android](https://github.com/ionic-team/capacitor) | `6.2.1` | `8.4.2` | | [@capacitor/core](https://github.com/ionic-team/capacitor) | `6.2.1` | `8.4.2` | | [@capacitor/ios](https://github.com/ionic-team/capacitor) | `6.2.1` | `8.4.2` | | [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.4.2` | | [express](https://github.com/expressjs/express) | `4.22.2` | `5.2.1` | Updates `commander` from 12.1.0 to 15.0.0 - [Release notes](https://github.com/tj/commander.js/releases) - [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md) - [Commits](tj/commander.js@v12.1.0...v15.0.0) Updates `@capacitor/android` from 6.2.1 to 8.4.2 - [Release notes](https://github.com/ionic-team/capacitor/releases) - [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md) - [Commits](ionic-team/capacitor@6.2.1...8.4.2) Updates `@capacitor/core` from 6.2.1 to 8.4.2 - [Release notes](https://github.com/ionic-team/capacitor/releases) - [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md) - [Commits](ionic-team/capacitor@6.2.1...8.4.2) Updates `@capacitor/ios` from 6.2.1 to 8.4.2 - [Release notes](https://github.com/ionic-team/capacitor/releases) - [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md) - [Commits](ionic-team/capacitor@6.2.1...8.4.2) Updates `dotenv` from 16.6.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.6.1...v17.4.2) Updates `express` from 4.22.2 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v4.22.2...v5.2.1) --- updated-dependencies: - dependency-name: commander dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@capacitor/android" dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@capacitor/core" dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@capacitor/ios" dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-07-30T15:50:27Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Free

Run ID: 42a78ba1-4051-4475-b234-5c49a3a221ef

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added the dependencies label Jul 30, 2026

SSMG4 merged commit 712e824 into main Jul 30, 2026
1 of 5 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-28d2729e17 branch July 30, 2026 16:12

Navigation Menu

Uh oh!

Bump the production-dependencies group with 6 updates - #7

Bump the production-dependencies group with 6 updates#7
SSMG4 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-28d2729e17

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jul 30, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v15.0.0

Added

Fixed

Changed

Deleted

Migration Tips

v15.0.0-0

Added

Fixed

[15.0.0] (2026-05-29)

Added

Fixed

Changed

Deleted

Migration Tips

[15.0.0-0] (2026-02-22)

[14.0.3] (2026-01-31)

Added

Changes

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

8.4.1

8.4.1 (2026-06-19)

Bug Fixes

8.4.0

8.4.0 (2026-06-02)

Bug Fixes

Features

8.3.4

8.3.4 (2026-05-12)

8.3.3

8.3.3 (2026-05-08)

8.4.2 (2026-07-14)

Bug Fixes

8.4.1 (2026-06-19)

Bug Fixes

8.4.0 (2026-06-02)

Bug Fixes

Features

8.3.4 (2026-05-12)

8.3.3 (2026-05-08)

Bug Fixes

8.3.2 (2026-05-07)

Bug Fixes

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

8.4.1

8.4.1 (2026-06-19)

Bug Fixes

8.4.0

8.4.0 (2026-06-02)

Bug Fixes

Features

8.3.4

8.3.4 (2026-05-12)

8.3.3

8.3.3 (2026-05-08)

8.4.2 (2026-07-14)

Bug Fixes

8.4.1 (2026-06-19)

Bug Fixes

8.4.0 (2026-06-02)

Bug Fixes

Features

8.3.4 (2026-05-12)

8.3.3 (2026-05-08)

Bug Fixes

8.3.2 (2026-05-07)

Bug Fixes

8.4.2

8.4.2 (2026-07-14)

Bug Fixes

8.4.1

8.4.1 (2026-06-19)

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading