Bump the npm_and_yarn group across 1 directory with 12 updates - #34
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
This was referenced Mar 24, 2026
Bumps the npm_and_yarn group with 11 updates in the /idm-framework-src/gui/admin-gui directory: | Package | From | To | | --- | --- | --- | | [bootstrap-multiselect](https://github.com/davidstutz/bootstrap-multiselect) | `1.1.0` | `2.0.0` | | [jquery-validation](https://github.com/jquery-validation/jquery-validation) | `1.19.5` | `1.22.1` | | [webpack](https://github.com/webpack/webpack) | `5.76.0` | `5.105.4` | | [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `6.14.0` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `6.0.5` | `6.0.6` | | [immutable](https://github.com/immutable-js/immutable-js) | `4.0.0` | `4.3.8` | | [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` | | [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.11` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.0` | `7.0.4` | | [summernote](https://github.com/summernote/summernote) | `0.8.20` | `removed` | | [tmp](https://github.com/raszi/node-tmp) | `0.0.33` | `0.2.5` | Updates `bootstrap-multiselect` from 1.1.0 to 2.0.0 - [Release notes](https://github.com/davidstutz/bootstrap-multiselect/releases) - [Commits](davidstutz/bootstrap-multiselect@v1.1.0...v2.0.0) Updates `jquery-validation` from 1.19.5 to 1.22.1 - [Release notes](https://github.com/jquery-validation/jquery-validation/releases) - [Changelog](https://github.com/jquery-validation/jquery-validation/blob/master/changelog.md) - [Commits](jquery-validation/jquery-validation@1.19.5...1.22.1) Updates `webpack` from 5.76.0 to 5.105.4 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.76.0...v5.105.4) Updates `ajv` from 6.12.6 to 6.14.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v6.14.0) Updates `cross-spawn` from 6.0.5 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `immutable` from 4.0.0 to 4.3.8 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v4.0.0...v4.3.8) Updates `minimatch` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Updates `nanoid` from 3.3.7 to 3.3.11 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.7...3.3.11) Updates `serialize-javascript` from 6.0.0 to 7.0.4 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.0...v7.0.4) Removes `summernote` Updates `svgo` from 2.8.0 to 4.0.1 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v2.8.0...v4.0.1) Updates `tmp` from 0.0.33 to 0.2.5 - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.0.33...v0.2.5) --- updated-dependencies: - dependency-name: bootstrap-multiselect dependency-version: 2.0.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: jquery-validation dependency-version: 1.22.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.105.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 6.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-version: 6.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 4.3.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-version: 7.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: summernote dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: svgo dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmp dependency-version: 0.2.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/idm-framework-src/gui/admin-gui/npm_and_yarn-b889dda254
branch
from
March 24, 2026 11:46
50693db to
44675d1
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 11 updates in the /idm-framework-src/gui/admin-gui directory:
1.1.02.0.01.19.51.22.15.76.05.105.46.12.66.14.06.0.56.0.64.0.04.3.83.1.23.1.53.3.73.3.116.0.07.0.40.8.20removed0.0.330.2.5Updates
bootstrap-multiselectfrom 1.1.0 to 2.0.0Release notes
Sourced from bootstrap-multiselect's releases.
Commits
a335ff1Final changes for the 2.0.0 release with some more documentation in the getti...6732f42Few fixes for bootstrap 5 2.0.0 release:d35f314Merge pull request #1265 from hdwills/master7da45deMerge pull request #1287 from marcoris/master5d5b779Merge pull request #1288 from derikb/develop-bs526c2d3aminify and bump version99fbb8drefactor: more bs5 fixups650869ffeat(bootstrap): update classes for bs588c1f9dMerge pull request #1 from marcoris/marcoris-remove-post.php4f17795Delete post.phpUpdates
jquery-validationfrom 1.19.5 to 1.22.1Release notes
Sourced from jquery-validation's releases.
... (truncated)
Changelog
Sourced from jquery-validation's changelog.
... (truncated)
Commits
568fd2e1.22.11ae2d92Fix TypeError when form contains input with name="id" (#2528)3730881Build: Updating the master version to 1.22.1-pre.15e2a56Chore: set version to 1.22.0-pree509711Add jQuery 4.0.0 support (#2524)4a25a8fCore: Add support for HTML5 form attribute on elements outside form (#2521)94418e4Additional: Replace deprecated substr() with slice() and charAt() in cifES.js...6eb2df0Core: Unnecessary aria-describedby (#2410)707623aLocalization: Additional string translations for messages_nl.js (#2517)07d2594Chore: downgrade ubuntu (#2518)Updates
webpackfrom 5.76.0 to 5.105.4Release notes
Sourced from webpack's releases.
... (truncated)
Changelog
Sourced from webpack's changelog.
... (truncated)
Commits
27c13b4chore(release): new release (#20550)9b2f41echore: bump terser plugin (#20569)eafe060fix: narrow the export presence guard detection (#20561)75d605crefactor: add AppendOnlyStackedSet iteration support and tests (#20560)afa607drefactor: remove unused code (#20562)4098902test: add source files for web-webworker and web-webworker-auto-public-path (...f97be67refactor: fix duplicated word in Compilation JSDoc (#20547)9d76fffrefactor: add Module.getSourceBasicTypes for basic JS type detection (#20546)a3d7839fix: types for multi stats (#20556)b8e9b05fix: updateenhanced-resolveto support new features fortsconfig.json(#...Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for webpack since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
ajvfrom 6.12.6 to 6.14.0Commits
e3af0a76.14.0b552ed6add regExp option to address $data exploit via a regular expression (CVE-2025...72f2286docs: update v7 info231e52bMerge pull request #1320 from philsturgeon/patch-1d3475fcAdd spectral, an AJV util from a sponsor413afe0docs: v7.0.0-beta.311e997bupdate readme for v7Updates
cross-spawnfrom 6.0.5 to 6.0.6Changelog
Sourced from cross-spawn's changelog.
Commits
d35c865chore(release): 6.0.65a37e19chore: update package.json and package.lockba5aaeffix: disable regexp backtracking (#160)f4af31cfix(core): support worker threads (#127)Updates
immutablefrom 4.0.0 to 4.3.8Release notes
Sourced from immutable's releases.
... (truncated)
Changelog
Sourced from immutable's changelog.
... (truncated)
Commits
485cbe04.3.86ed4eb6Merge commit from fork94bcd3cfix new proto key injectionfaeb58bfix Prototype Pollution in mergeDeep, toJS, etc.37ca417release 4.3.7 (#2007)23daf26Fix issue with slice negative of filtered sequence (#2006)493afbarelease 4.3.6 (#1997)be3cb9aFix Repeat(<value>).equals(undefined) incorrectly returning true (#1994)d7664bfgenerate sitemap in path that will be deployedf8327b1upgrade next sitemap (#1978)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for immutable since your current version.
Updates
minimatchfrom 3.1.2 to 3.1.5Commits
7bba9783.1.5bd25942docs: add warning about ReDoS1a9c27cfix partial matching of globstar patterns1a2e0843.1.4ae24656update lockfileb100374limit recursion for **, improve perf considerably26ffeaalockfile update9eca892lock node version to 1400c323b3.1.330486b2update CI matrix and actionsUpdates
nanoidfrom 3.3.7 to 3.3.11Release notes
Sourced from nanoid's releases.
Changelog
Sourced from nanoid's changelog.
Commits
37289ceRelease 3.3.11 version23690b7Fix CIc147962Fix RN supporta83734eMove to manually ESM/CJS dual packagebb12e8aRelease 3.3.10 version8f44264Fix Expo supportadf9b0cRelease 3.3.9 version1c6f088Remove dev file from npm package3044cd5Release 3.3.8 version4fe3495Update size limitUpdates
serialize-javascriptfrom 6.0.0 to 7.0.4Release notes
Sourced from serialize-javascript's releases.
... (truncated)
Commits
eec32e0release: v7.0.4d5057157.0.32e609d0fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207)42b7cdbbuild(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206)44f544brelease: v7.0.2 (#205)bba0dddci: setup trusted publishing workflow (#204)235f6eaci: bump GitHub Actions to latest versions (#203)f7fff15release: v7.0.1 (#202)b4abd4cdocs: tweak README (#201)738a8e9security: sanitize function bodies (#199)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for serialize-javascript since your current version.
Removes
summernoteUpdates
svgofrom 2.8.0 to 4.0.1Release notes
Sourced from svgo's releases.
... (truncated)
Commits
e691f5fMerge commit from forkb1d9f1achore(deps): bump actions/upload-artifact from 6 to 7 (#2202)d724af1chore(deps): bump actions/checkout from 5 to 6 (#2195)4114b32chore(deps): bump actions/upload-artifact from 4 to 6 (#2196)