chore(deps): bump the npm-minor-patch group with 5 updates by dependabot[bot] · Pull Request #18 · OctopusGarage/telegram-bridge

dependabot · 2026-07-22T05:10:02Z

Bumps the npm-minor-patch group with 5 updates:

Package	From	To
grammy	`1.44.0`	`1.45.1`
undici	`8.7.0`	`8.8.0`
@biomejs/biome	`2.5.4`	`2.5.5`
lint-staged	`17.0.8`	`17.1.0`
vite	`8.1.4`	`8.1.5`

Updates grammy from 1.44.0 to 1.45.1

Release notes

Sourced from grammy's releases.

v1.45.1

What's Changed

fix: bad subscription narrowing by @KnorpelSenf in grammyjs/grammY#923

Full Changelog: grammyjs/grammY@v1.45.0...v1.45.1

v1.45.0

What's Changed

fix(platform): set default fetch duplex to "half" for all API requests by @KnightNiwrem in grammyjs/grammY#913

feat: support Bot API 10.2 by @KnorpelSenf in grammyjs/grammY#921

fix: narrow down ctx.subscription by @KnorpelSenf in grammyjs/grammY#922

Full Changelog: grammyjs/grammY@v1.44.0...v1.45.0

Commits

f9f7578 1.45.1
3360f9a fix: bad subscription narrowing (#923)
fcfc659 1.45.0
021ce0d fix: narrow down ctx.subscription (#922)
e771013 feat: support Bot API 10.2 (#921)
5c49d3e docs: fix typos (#919)
d417713 fix(platform): set default fetch duplex to "half" for all API requests (#913)
See full diff in compare view

Updates undici from 8.7.0 to 8.8.0

Release notes

Sourced from undici's releases.

v8.8.0

What's Changed

fetch: use ReadableStreamTee for cloning streams by @KhafraDev in nodejs/undici#5517

fix(benchmarks): adjust got after v15 upgrade by @slagiewka in nodejs/undici#5526

feat(mock): support asynchronous reply options callbacks by @Develop-KIM in nodejs/undici#5534

docs: clarify proxy threat model by @mcollina in nodejs/undici#5530

docs: clarify MockAgent pool usage by @vibhor-aggr in nodejs/undici#5542

docs: clarify parser timeout precision by @vibhor-aggr in nodejs/undici#5543

fix: handle flat alternating header arrays in cache normalizeHeaders by @mcollina in nodejs/undici#5536

chore(benchmarks): require(esm) on ESM-only packages by @slagiewka in nodejs/undici#5527

fix: run idle socket validation off setImmediate instead of setTimeout by @carlotestor in nodejs/undici#5499

docs: add custom interceptor example by @vibhor-aggr in nodejs/undici#5548

fix(h1): ignore type of service errors by @mcollina in nodejs/undici#5547

fix(fetch): convert null init in Response.json by @Ram-blip in nodejs/undici#5540

fix(redirect): remove body headers after POST-to-GET by @Ram-blip in nodejs/undici#5551

build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @dependabot[bot] in nodejs/undici#5556

fix(h2): allow stream-bodied requests to multiplex on a busy session by @GiHoon1123 in nodejs/undici#5538

fix(h2): destroy aborted stream synchronously instead of via setImmediate by @staylor in nodejs/undici#5559

fix(decompress): skip HEAD responses by @Ram-blip in nodejs/undici#5564

ci: build undici with node.js v26 by @shivarm in nodejs/undici#5237

docs: clarify top-level request option url fields by @vibhor-aggr in nodejs/undici#5545

test: add unexpected disconnect guards to http2 tests by @Develop-KIM in nodejs/undici#5533

fix: track origins by client map key in Agent teardown by @emmayusufu in nodejs/undici#5537

fix: enforce must-revalidate and proxy-revalidate over max-stale and stale-if-error by @jeswr in nodejs/undici#5511

fix(retry): handle Retry-After zero delay by @Ram-blip in nodejs/undici#5519

fix: honor stale-if-error on connection errors during revalidation by @jeswr in nodejs/undici#5513

fix: store revalidation-only responses so etag revalidation can engage by @jeswr in nodejs/undici#5515

fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefined kClient by @mcollina in nodejs/undici#5546

fix(h2): complete request stream on 'end' instead of waiting for 'close' by @staylor in nodejs/undici#5560

fix: invalidate Location and Content-Location URIs on unsafe methods by @jeswr in nodejs/undici#5514

test: deflake invalid websocket close status test by @mcollina in nodejs/undici#5550

refactor: replace tspl with node:test t.plan in connect-timeout tests by @mcollina in nodejs/undici#5518

fix(h2): release completed requests from queue by @staylor in nodejs/undici#5569

New Contributors

@Develop-KIM made their first contribution in nodejs/undici#5534

@carlotestor made their first contribution in nodejs/undici#5499

@GiHoon1123 made their first contribution in nodejs/undici#5538

@emmayusufu made their first contribution in nodejs/undici#5537

Full Changelog: nodejs/undici@v8.7.0...v8.8.0

Commits

1760faa Bumped v8.8.0 (#5575)
f87273e fix(h2): release completed requests from queue (#5569)
1383989 refactor: replace tspl with node:test t.plan in connect-timeout tests (#5518)
c6d37d2 test: deflake invalid websocket close status test (#5550)
1ca0912 fix: invalidate Location and Content-Location URIs on unsafe methods (#5514)
87270e4 fix(h2): complete request stream on 'end' instead of waiting for 'close' (#5560)
85b35e7 fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefine...
de01bab fix: store revalidation-only responses so etag revalidation can engage (#5515)
e1cc0d4 fix: honor stale-if-error on connection errors during revalidation (#5513)
dc7c044 fix(retry): handle Retry-After zero delay (#5519)
Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.4 to 2.5.5

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes
#10972 ab8c21b Thanks @ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:
declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}
#10972 ab8c21b Thanks @ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:
type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";
#10977 0bf7486 Thanks @ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

#10957 cf263c4 Thanks @dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

#10983 edc0ed7 Thanks @ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.
#10889 89526e3 Thanks @denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.
- A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }
#10964 794ccd0 Thanks @denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.
-a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.5

Patch Changes
#10972 ab8c21b Thanks @ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:
declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}
#10972 ab8c21b Thanks @ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:
type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";
#10977 0bf7486 Thanks @ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

#10957 cf263c4 Thanks @dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

#10983 edc0ed7 Thanks @ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.
#10889 89526e3 Thanks @denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.
- A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }
#10964 794ccd0 Thanks @denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.
-a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

412a0e9 ci: release (#10948)
b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
9a66bc7 chore: add latitude to sponsors (#10947)
See full diff in compare view

Updates lint-staged from 17.0.8 to 17.1.0

Release notes

Sourced from lint-staged's releases.

v17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

#1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

Changelog

Sourced from lint-staged's changelog.

17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

... (truncated)

Commits

dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
aad7f3b chore(changeset): release
11b1d5c Merge pull request #1818 from lint-staged/fixes
efb23a2 fix: enable colors globally based on option
26112a1 fix: function task failure kills other tasks, unless --continue-on-error wa...
9b98b7f fix: handle error when calculating hash of unstaged changes
d43432b fix: do not allow NaN concurrency
bd4dcbf fix: do not drop backup stash when restoring unstaged changes fails and using...
9153a77 Merge pull request #1816 from lint-staged/replace-listr2
290e618 refactor: use common identity function
Additional commits viewable in compare view

Updates vite from 8.1.4 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

bundled-dev: avoid duplicated buildEnd (#22931) (8100320)

client: overlay error message format align rolldown (#22869) (5a72b87)

deps: update all non-major dependencies (#22921) (fef682d)

deps: update rolldown-related dependencies (#22922) (3c345e4)

module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)

optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)

ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

build: fix incorrect @default for build.cssMinify (#22948) (c88c236)

build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

avoid scanner scanning all files under __tests__ (#22912) (c961cae)

Commits

5e7fe12 release: v8.1.5
6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
5a72b87 fix(client): overlay error message format align rolldown (#22869)
f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
fef682d fix(deps): update all non-major dependencies (#22921)
3c345e4 fix(deps): update rolldown-related dependencies (#22922)
369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch group with 5 updates: | Package | From | To | | --- | --- | --- | | [grammy](https://github.com/grammyjs/grammY) | `1.44.0` | `1.45.1` | | [undici](https://github.com/nodejs/undici) | `8.7.0` | `8.8.0` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.4` | `2.5.5` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.8` | `17.1.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.4` | `8.1.5` | Updates `grammy` from 1.44.0 to 1.45.1 - [Release notes](https://github.com/grammyjs/grammY/releases) - [Commits](grammyjs/grammY@v1.44.0...v1.45.1) Updates `undici` from 8.7.0 to 8.8.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.7.0...v8.8.0) Updates `@biomejs/biome` from 2.5.4 to 2.5.5 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.5/packages/@biomejs/biome) Updates `lint-staged` from 17.0.8 to 17.1.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.8...v17.1.0) Updates `vite` from 8.1.4 to 8.1.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite) --- updated-dependencies: - dependency-name: grammy dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: undici dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@biomejs/biome" dependency-version: 2.5.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: lint-staged dependency-version: 17.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: vite dependency-version: 8.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026

github-actions Bot merged commit 9884752 into dev Jul 22, 2026
6 of 7 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/dev/npm-minor-patch-ae06d8c9e0 branch July 22, 2026 05:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm-minor-patch group with 5 updates - #18

chore(deps): bump the npm-minor-patch group with 5 updates#18
github-actions[bot] merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/npm-minor-patch-ae06d8c9e0

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026

v1.45.1

What's Changed

v1.45.0

What's Changed

v8.8.0

What's Changed

New Contributors

Biome CLI v2.5.5

2.5.5

Patch Changes

2.5.5

Patch Changes

v17.1.0

Minor Changes

Patch Changes

17.1.0

Minor Changes

Patch Changes

v8.1.5

8.1.5 (2026-07-16)

Bug Fixes

Documentation

Tests

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants