Skip to content

Bump the npm_and_yarn group across 1 directory with 34 updates#1

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-ad03aeeed7
Open

Bump the npm_and_yarn group across 1 directory with 34 updates#1
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-ad03aeeed7

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 8, 2026

Bumps the npm_and_yarn group with 21 updates in the / directory:

Package From To
@feathersjs/socketio 4.5.11 4.5.18
mongodb 4.1.0 4.17.0
mongoose 5.13.7 9.1.2
axios 0.21.1 0.30.2
serverless-offline 8.0.0 8.1.0
semver 5.7.1 5.7.2
@babel/traverse 7.15.0 7.28.5
async 3.2.1 3.2.6
async 2.6.3 2.6.4
body-parser 1.19.0 1.20.4
express 4.17.1 4.22.1
engine.io 3.5.0 3.6.2
socket.io 2.4.1 2.5.1
form-data 3.0.1 3.0.4
got 9.6.0 11.8.6
js-yaml 3.14.1 3.14.2
json5 2.2.0 2.2.3
jsonpath-plus 5.1.0 10.3.0
on-headers 1.0.2 1.1.0
parseuri 0.0.6 removed
tough-cookie 4.0.0 4.1.4
ws 7.4.6 7.5.10

Updates @feathersjs/socketio from 4.5.11 to 4.5.18

Release notes

Sourced from @​feathersjs/socketio's releases.

v4.5.18

4.5.18 (2023-07-19)

Bug Fixes

  • transport-commons: Handle invalid service paths on socket lookups (#3242) (0b9a6b1)

v4.5.17

4.5.17 (2023-07-17)

Bug Fixes

  • core: Ensure .service does not access Object properties (#3240) (7969334)

v4.5.16

4.5.16 (2023-02-24)

Bug Fixes

  • dependencies: Update dependencies (70335c4)
  • transport-commons: Crow - fix array dispatching (#3073) (1936c64)

v4.5.15

4.5.15 (2022-05-17)

Note: Version bump only for package feathers

v4.5.14

4.5.14 (2022-04-13)

Bug Fixes

  • rest-client: Import errors from @​feathers/errors (#2591) (445e804)
  • transport-commons: Ensure socket queries are always plain objects (#2598) (5ec2ec8)

v4.5.13

4.5.13 (2022-01-10)

Bug Fixes

v4.5.12

4.5.12 (2022-01-06)

... (truncated)

Changelog

Sourced from @​feathersjs/socketio's changelog.

4.5.18 (2023-07-19)

Note: Version bump only for package @​feathersjs/socketio

4.5.17 (2023-07-17)

Note: Version bump only for package @​feathersjs/socketio

4.5.16 (2023-02-24)

Note: Version bump only for package @​feathersjs/socketio

4.5.15 (2022-05-17)

Note: Version bump only for package @​feathersjs/socketio

4.5.14 (2022-04-13)

Note: Version bump only for package @​feathersjs/socketio

4.5.13 (2022-01-10)

Bug Fixes

... (truncated)

Commits

Updates mongodb from 4.1.0 to 4.17.0

Release notes

Sourced from mongodb's releases.

v4.17.0

4.17.0 (2023-08-17)

The MongoDB Node.js team is pleased to announce version 4.17.0 of the mongodb package!

Release Notes

mongodb-js/saslprep is now installed by default

Until v6, the driver included the saslprep package as an optional dependency for SCRAM-SHA-256 authentication. saslprep breaks when bundled with webpack because it attempted to read a file relative to the package location and consequently the driver would throw errors when using SCRAM-SHA-256 if it were bundled.

The driver now depends on mongodb-js/saslprep, a fork of saslprep that can be bundled with webpack because it includes the necessary saslprep data in memory upon loading. This will be installed by default but will only be used if SCRAM-SHA-256 authentication is used.

Remove credential availability on ConnectionPoolCreatedEvent

In order to avoid mistakenly printing credentials the ConnectionPoolCreatedEvent will replace the credentials option with an empty object. The credentials are still accessble via MongoClient options: client.options.credentials.

Features

  • NODE-5272: do not create or drop ecc collections (#3678) (d26ad61)
  • NODE-5398: use mongodb-js/saslprep instead of saslprep (#3820) (5244711)

Bug Fixes

  • NODE-5262: AWS Lambda metadata detection logic is too permissive (#3683) (c0c3d99)
  • NODE-5311: construct error messages for AggregateErrors in Node16+ (#3683) (98b7bdf)
  • NODE-5316: prevent parallel topology creation in MongoClient.connect (#3696) (e13038d)
    • Thank you @​clemclx for contributing this fix! 🎉
  • NODE-5356: prevent scram auth from throwing TypeError if saslprep is not a function (#3732) (2d028af)
  • NODE-5536: remove credentials from ConnectionPoolCreatedEvent options (#3812) (2910dca)

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v4.16.0

The MongoDB Node.js team is pleased to announce version 4.16.0 of the mongodb package!

... (truncated)

Changelog

Sourced from mongodb's changelog.

4.17.0 (2023-08-17)

Features

  • NODE-5272: do not create or drop ecc collections (#3678) (d26ad61)
  • NODE-5398: use mongodb-js/saslprep instead of saslprep (#3820) (5244711)

Bug Fixes

  • NODE-5262: AWS Lambda metadata detection logic is too permissive (#3683) (c0c3d99)
  • NODE-5311: construct error messages for AggregateErrors in Node16+ (#3683) (98b7bdf)
  • NODE-5316: prevent parallel topology creation in MongoClient.connect (#3696) (e13038d)
  • NODE-5356: prevent scram auth from throwing TypeError if saslprep is not a function (#3732) (2d028af)
  • NODE-5536: remove credentials from ConnectionPoolCreatedEvent options (#3812) (2910dca)

4.16.0 (2023-04-18)

Features

  • NODE-5159: add FaaS env information to client metadata (#3639) (e0b20f1)
  • NODE-5199: add alternative runtime detection to client metadata (#3647) (fba16ad)

Bug Fixes

  • NODE-5161: metadata duplication in handshake (#3628) (b790142)
  • NODE-5200: relax SRV record validation to account for a dot suffix (#3640) (4272c43)

4.15.0 (2023-04-04)

Features

  • NODE-5054: add AssumeRoleWithWebIdentity support to 4x driver (#3566) (8a8c386)

Bug Fixes

  • NODE-5097: set timeout on write and reset on message (#3590) (2d3576b)

4.14.0 (2023-02-07)

Features

  • NODE-4992: Deprecate methods and options that reference legacy logger (#3532) (6c94b4a)

... (truncated)

Commits
  • c83a801 chore(4.x): release 4.17.0 [skip-ci] (#3763)
  • 1b59955 chore: update release automation scripts 4.x (#3824)
  • 5244711 feat(NODE-5398): use mongodb-js/saslprep instead of saslprep (#3820)
  • 2910dca fix(NODE-5536): remove credentials from ConnectionPoolCreatedEvent options (#...
  • 0c1b654 chore(NODE-5400): add @​octokit/core as a devDep (#3750)
  • 4adff37 chore(NODE-5382): backport release automation scripts (#3747)
  • 2d028af fix(NODE-5356): prevent scram auth from throwing TypeError if saslprep is not...
  • 0e1afc0 ci(Node 5335): clean up instance profile from instance after CI runs (#3719)
  • 7f5b334 ci(NODE-5334): install npm to node_artifacts directory in CI (#3709)
  • e13038d fix(NODE-5316): prevent parallel topology creation in MongoClient.connect (#3...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by dbx-node, a new releaser for mongodb since your current version.


Updates mongoose from 5.13.7 to 9.1.2

Release notes

Sourced from mongoose's releases.

9.1.2 / 2025-01-05

9.1.1 / 2025-12-30

  • fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #15928
  • docs: update default search version to 9.x #15926 #15925

9.1.0 / 2025-12-29

  • feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
  • feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
  • feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
  • perf: optimize Object.keys() checks and optional chaining #15865 AbdelrahmanHafez
  • fix: add support for typescript style enums #15914 #15913 mjfwebb
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910
  • types: allow calling create() with TRawDocType for better generics support #15903 #15902
  • types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #15906 #15900
  • docs(schema): add lean to list of schema options #15907 #15894 #12081

9.0.2 / 2025-12-17

9.0.1 / 2025-12-05

  • perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
  • fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
  • fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
  • fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
  • fix: clear timeout in collection operations #15852 techcodie
  • types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
  • docs(migrating_to_9): clarify removing next() from pre middleware #15813
  • docs: add dark mode support and CSS improvements #15753
  • docs: Mongoose compatibility page updates #15797 alexbevi
  • docs: Add closing backticks to code block in migration guide #15783 isnifer
  • docs: fix documentation link in connection.js #15804 salittle0

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.1.2 / 2025-01-05

9.1.1 / 2025-12-30

  • fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #15928
  • docs: update default search version to 9.x #15926 #15925

9.1.0 / 2025-12-29

  • feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
  • feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
  • feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
  • perf: optimize Object.keys() checks and optional chaining #15865 AbdelrahmanHafez
  • fix: add support for typescript style enums #15914 #15913 mjfwebb
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910
  • types: allow calling create() with TRawDocType for better generics support #15903 #15902
  • types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #15906 #15900
  • docs(schema): add lean to list of schema options #15907 #15894 #12081

8.21.0 / 2025-12-29

  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
  • feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
  • fix: add support for typescript style enums #15914 #15913 mjfwebb

8.20.4 / 2025-12-18

  • fix(model): ensure $isDeleted is set after calling doc.deleteOne() successfully #15898
  • fix(document): use bitwise OR to accumulate version mode flags #15893 #15888 AbdelrahmanHafez

9.0.2 / 2025-12-17

8.20.3 / 2025-12-15

... (truncated)

Commits
  • cdcc308 chore: release 9.1.2
  • 18fc24c Merge pull request #15937 from Automattic/dependabot/npm_and_yarn/master/sino...
  • 25bee06 Merge pull request #15936 from Automattic/dependabot/npm_and_yarn/master/esli...
  • b1d02f4 Merge pull request #15935 from Automattic/dependabot/npm_and_yarn/master/mark...
  • f715d44 Merge pull request #15934 from Automattic/dependabot/github_actions/master/ac...
  • 36260d8 fix markdown lint
  • 3bfb91a Merge pull request #15933 from Automattic/dependabot/npm_and_yarn/master/mong...
  • 5a8522d Merge pull request #15932 from Automattic/dependabot/github_actions/master/ac...
  • 54e2e2a chore(deps): bump actions/checkout from 6.0.0 to 6.0.1
  • d36de4e Merge pull request #15931 from Automattic/dependabot/npm_and_yarn/master/ark/...
  • Additional commits viewable in compare view

Updates axios from 0.21.1 to 0.30.2

Release notes

Sourced from axios's releases.

v0.30.2

What's Changed

New Contributors

Full Changelog: axios/axios@v0.30.1...v0.30.2

Release v0.30.1

Release notes:

Bug Fixes

Contributors to this release

Full Changelog: axios/axios@v0.30.0...v0.30.1

Release v0.30.0

Release notes:

Bug Fixes

Contributors to this release

Full Changelog: axios/axios@v0.29.0...v0.30.0

v0.29.0

Release notes:

Bug Fixes

Contributors to this release

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.


Updates serverless-offline from 8.0.0 to 8.1.0

Release notes

Sourced from serverless-offline's releases.

v8.1.0

New feature:

Commits

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates @babel/traverse from 7.15.0 to 7.28.5

Release notes

Sourced from @​babel/traverse's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

  • babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • babel-plugin-transform-regenerator

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

v7.28.4 (2025-09-05)

🏠 Internal

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

... (truncated)

Commits
  • 61647ae v7.28.5
  • e579cb0 Enable strictNullChecks for traverse (#17499)
  • 7385eae [Babel 8] Improve scope information collection performance (#17043)
  • 26bc651 [Babel 8] Better node type definitions for computed (#17500)
  • e626523 Fix JSXIdentifier handling in isReferencedIdentifier (#17503)
  • 19c9126 fix: ensure scope.push register in anonymous fn (#17504)Description has been truncated

@dependabot
Bump the npm_and_yarn group across 1 directory with 34 updates
19400e7 
Bumps the npm_and_yarn group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@feathersjs/socketio](https://github.com/feathersjs/feathers/tree/HEAD/packages/socketio) | `4.5.11` | `4.5.18` |
| [mongodb](https://github.com/mongodb/node-mongodb-native) | `4.1.0` | `4.17.0` |
| [mongoose](https://github.com/Automattic/mongoose) | `5.13.7` | `9.1.2` |
| [axios](https://github.com/axios/axios) | `0.21.1` | `0.30.2` |
| [serverless-offline](https://github.com/dherault/serverless-offline) | `8.0.0` | `8.1.0` |
| [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.15.0` | `7.28.5` |
| [async](https://github.com/caolan/async) | `3.2.1` | `3.2.6` |
| [async](https://github.com/caolan/async) | `2.6.3` | `2.6.4` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.4` |
| [express](https://github.com/expressjs/express) | `4.17.1` | `4.22.1` |
| [engine.io](https://github.com/socketio/socket.io) | `3.5.0` | `3.6.2` |
| [socket.io](https://github.com/socketio/socket.io) | `2.4.1` | `2.5.1` |
| [form-data](https://github.com/form-data/form-data) | `3.0.1` | `3.0.4` |
| [got](https://github.com/sindresorhus/got) | `9.6.0` | `11.8.6` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` |
| [json5](https://github.com/json5/json5) | `2.2.0` | `2.2.3` |
| [jsonpath-plus](https://github.com/s3u/JSONPath) | `5.1.0` | `10.3.0` |
| [on-headers](https://github.com/jshttp/on-headers) | `1.0.2` | `1.1.0` |
| [parseuri](https://github.com/slevithan/parseuri) | `0.0.6` | `removed` |
| [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.0.0` | `4.1.4` |
| [ws](https://github.com/websockets/ws) | `7.4.6` | `7.5.10` |



Updates `@feathersjs/socketio` from 4.5.11 to 4.5.18
- [Release notes](https://github.com/feathersjs/feathers/releases)
- [Changelog](https://github.com/feathersjs/feathers/blob/v4.5.18/packages/socketio/CHANGELOG.md)
- [Commits](https://github.com/feathersjs/feathers/commits/v4.5.18/packages/socketio)

Updates `mongodb` from 4.1.0 to 4.17.0
- [Release notes](https://github.com/mongodb/node-mongodb-native/releases)
- [Changelog](https://github.com/mongodb/node-mongodb-native/blob/v4.17.0/HISTORY.md)
- [Commits](mongodb/node-mongodb-native@v4.1.0...v4.17.0)

Updates `mongoose` from 5.13.7 to 9.1.2
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@5.13.7...9.1.2)

Updates `axios` from 0.21.1 to 0.30.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.21.1...v0.30.2)

Updates `serverless-offline` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/dherault/serverless-offline/releases)
- [Changelog](https://github.com/dherault/serverless-offline/blob/master/CHANGELOG.md)
- [Commits](dherault/serverless-offline@v8.0.0...v8.1.0)

Updates `semver` from 5.7.1 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

Updates `@babel/traverse` from 7.15.0 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-traverse)

Updates `ansi-regex` from 4.1.0 to 2.1.1
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v4.1.0...2.1.1)

Updates `async` from 3.2.1 to 3.2.6
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.1...v3.2.6)

Updates `async` from 2.6.3 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.1...v3.2.6)

Updates `body-parser` from 1.19.0 to 1.20.4
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.19.0...1.20.4)

Updates `express` from 4.17.1 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.17.1...v4.22.1)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Changelog](https://github.com/jshttp/cookie/blob/v0.4.1/HISTORY.md)
- [Commits](jshttp/cookie@v0.4.0...v0.4.1)

Updates `engine.io` from 3.5.0 to 3.6.2
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/commits)

Updates `socket.io` from 2.4.1 to 2.5.1
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/2.5.1/CHANGELOG.md)
- [Commits](socketio/socket.io@2.4.1...2.5.1)

Updates `express` from 4.17.1 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.17.1...v4.22.1)

Updates `follow-redirects` from 1.14.2 to 1.15.11
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.14.2...v1.15.11)

Updates `form-data` from 3.0.1 to 3.0.4
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v3.0.1...v3.0.4)

Updates `got` from 9.6.0 to 11.8.6
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v9.6.0...v11.8.6)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.14.2)

Updates `json5` from 2.2.0 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.2.0...v2.2.3)

Updates `jsonpath-plus` from 5.1.0 to 10.3.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](JSONPath-Plus/JSONPath@v5.1.0...v10.3.0)

Updates `jszip` from 3.7.1 to 3.10.1
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.7.1...v3.10.1)

Updates `mpath` from 0.8.3 to 0.9.0
- [Changelog](https://github.com/mongoosejs/mpath/blob/master/History.md)
- [Commits](https://github.com/aheckmann/mpath/commits)

Updates `node-fetch` from 2.6.1 to 3.3.2
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.1...v3.3.2)

Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](jshttp/on-headers@v1.0.2...v1.1.0)

Removes `parseuri`

Updates `path-to-regexp` from 0.1.7 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12)

Updates `qs` from 6.7.0 to 6.14.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.7.0...v6.14.1)

Updates `send` from 0.17.1 to 0.19.2
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.17.1...0.19.2)

Updates `serve-static` from 1.14.1 to 1.16.3
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](expressjs/serve-static@v1.14.1...v1.16.3)

Updates `socket.io` from 2.4.1 to 4.8.3
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/2.5.1/CHANGELOG.md)
- [Commits](socketio/socket.io@2.4.1...2.5.1)

Updates `socket.io-parser` from 3.3.2 to 4.2.5
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/commits/socket.io-parser@4.2.5)

Updates `tough-cookie` from 4.0.0 to 4.1.4
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.0.0...v4.1.4)

Updates `ws` from 7.4.6 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.4.6...7.5.10)

Updates `xml2js` from 0.4.19 to 0.6.2
- [Commits](Leonidas-from-XIV/node-xml2js@0.4.19...0.6.2)

---
updated-dependencies:
- dependency-name: "@feathersjs/socketio"
  dependency-version: 4.5.18
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mongodb
  dependency-version: 4.17.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mongoose
  dependency-version: 9.1.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 0.30.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: serverless-offline
  dependency-version: 8.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-version: 5.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-version: 7.28.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ansi-regex
  dependency-version: 2.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-version: 3.2.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-version: 2.6.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-version: 1.20.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: engine.io
  dependency-version: 3.6.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io
  dependency-version: 2.5.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: follow-redirects
  dependency-version: 1.15.11
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: form-data
  dependency-version: 3.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-version: 11.8.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: json5
  dependency-version: 2.2.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: jsonpath-plus
  dependency-version: 10.3.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: jszip
  dependency-version: 3.10.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mpath
  dependency-version: 0.9.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-fetch
  dependency-version: 3.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: parseuri
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-version: 0.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-version: 0.19.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-version: 1.16.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io
  dependency-version: 4.8.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io-parser
  dependency-version: 4.2.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tough-cookie
  dependency-version: 4.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-version: 7.5.10
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: xml2js
  dependency-version: 0.6.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants