Skip to content

build(deps): bump node-forge, @lhci/cli and lighthouse#9

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-65f67944f0
Open

build(deps): bump node-forge, @lhci/cli and lighthouse#9
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-65f67944f0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Nov 27, 2025

Removes node-forge. It's no longer used after updating ancestor dependencies node-forge, @lhci/cli and lighthouse. These dependencies need to be updated together.

Removes node-forge

Updates @lhci/cli from 0.6.1 to 0.15.1

Release notes

Sourced from @​lhci/cli's releases.

v0.15.1

What's Changed

New Contributors

Full Changelog: GoogleChrome/lighthouse-ci@v0.15.0...v0.15.1

v0.15.0

v0.15.0 (2025-06-09)

BREAKING CHANGE

  • upgrade to lighthouse 12.6.1

v0.14.0

v0.14.0 (2024-06-20)

  • feat: upgrade to lighthouse 12.0.0 (#1035) (cc564a6), closes #1035
  • feat: support .htm files in fallback server (#1033) (2ed3b31), closes #1033
  • feat: increase column width for project name (#1006) (8fe7e8d), closes #1006
  • feat: upgrade to lighthouse 12.1.0 (#1046) (8a0e3dc), closes #1046
  • feat(cli): add --lhr to assert command to load LHRs from anywhere (#1024) (19c7ca6), closes #1024
  • fix(cli): use ProxyAgent instead of HttpsProxyAgent (#1038) (cdf4605), closes #1038
  • chore: bump lhci references to 0.13 (083d639)
  • misc(release): remove hulk from release process (mostly) (36e629e)

... (truncated)

Commits
  • 76a49c7 fix: use viewer origin as string instead of object (#1109)
  • 602bf7d chore: bump lhci references to 0.15
  • d2cdea9 chore: update docker images with latest version
  • 6b3b50e feat: upgrade to lighthouse 12.6.1 (#1103)
  • 912d985 chore: update versions in ci (#1104)
  • e83b2f6 fix(cli): improve filename sanitization for hash routes (#1084)
  • d04aba1 feat(cli): change wizard default branch to main (#1069)
  • 115818a chore: Heroku Postgres Hobby plan doesn't exist anymore (#1077)
  • ef83477 chore: update versions in heroku-server recipe (#1078)
  • 3cac9eb docs: update GitHub Actions versions in README.md (#1086)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by hoten, a new releaser for @​lhci/cli since your current version.


Updates lighthouse from 6.5.0 to 12.6.1

Release notes

Sourced from lighthouse's releases.

v12.6.1

Full Changelog

We expect this release to ship in the DevTools of Chrome 139, and to PageSpeed Insights within a couple days.

New contributors

Thanks to our new contributor 👽🐷🐰🐯🐻!

Ian Kerins @​isker

Core

  • emulation: bump chrome UA to m136 (#16489)
  • insights: add a bunch of debugData (#16472)
  • inspector-issues: remove trusted types csp issue filter (#16514)
  • inspector-issues: add userReidentificationIssue to artifact (#16497)

Report

  • remove innerHTML usage from insights announce icon (#16469)

Deps

  • upgrade deps (#16515)
  • upgrade trace_engine to 0.0.53 (#16496)
  • bump chrome-launcher to 1.2.0 (#16479)

Clients

  • lr: disable modern-http-insight (#16471)

Tests

  • fix some lantern test failures (#16498)
  • use newer trace in metrics test (#16492)

Misc

  • import i18n messages as JSON modules (#16500)
  • scripts: add bytes-in-trace script (#16477)
  • treemap: hide unused-bytes view mode when missing data (#16478)
  • treemap: highlight many nodes on hover in duplicate modules table (#16470)

v12.6.0

Full Changelog

We expect this release to ship in the DevTools of Chrome 137, and to PageSpeed Insights within a few days.

New contributors

... (truncated)

Changelog

Sourced from lighthouse's changelog.

Pre-10.0 Changelog

See the newer changelog for newer revisions.

9.6.8 (2022-10-31)

Full Changelog

We expect this release to ship in the DevTools of Chrome 109, and to PageSpeed Insights within 2 weeks.

Core

  • deprecations: use translated strings from devtools repo (#13961)
  • network-request: backport rendererStartTime (#14481)

9.6.7 (2022-09-01)

Full Changelog

This is an npm-only release. We have no plans to release this specific version to DevTools or PSI, but the changes will be rolled up into the next release in those clients.

Core

  • core(trace-elements): include LCP type in artifact (#14344)
  • core: add priority to network-requests debug audit (#14340)

9.6.6 (2022-08-16)

Full Changelog

We expect this release to ship in the DevTools of Chrome 106, and to PageSpeed Insights within 2 weeks.

New Contributors

Thanks to our new contributor 👽🐷🐰🐯🐻!

Core

  • unsized-images: ignore non-network SVGs (#13737)

Deps

  • upgrade csp-evaluator (#14281)

9.6.5 (2022-08-01)

Full Changelog

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [node-forge](https://github.com/digitalbazaar/forge). It's no longer used after updating ancestor dependencies [node-forge](https://github.com/digitalbazaar/forge), [@lhci/cli](https://github.com/GoogleChrome/lighthouse-ci) and [lighthouse](https://github.com/GoogleChrome/lighthouse). These dependencies need to be updated together.


Removes `node-forge`

Updates `@lhci/cli` from 0.6.1 to 0.15.1
- [Release notes](https://github.com/GoogleChrome/lighthouse-ci/releases)
- [Commits](GoogleChrome/lighthouse-ci@v0.6.1...v0.15.1)

Updates `lighthouse` from 6.5.0 to 12.6.1
- [Release notes](https://github.com/GoogleChrome/lighthouse/releases)
- [Changelog](https://github.com/GoogleChrome/lighthouse/blob/main/changelog-pre10.md)
- [Commits](GoogleChrome/lighthouse@v6.5.0...v12.6.1)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@lhci/cli"
  dependency-version: 0.15.1
  dependency-type: direct:development
- dependency-name: lighthouse
  dependency-version: 12.6.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants