mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-06 19:08:59 -05:00
[PR #20860] [CLOSED] chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates #41431
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/open-webui#41431
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/20860
Author: @dependabot[bot]
Created: 1/21/2026
Status: ❌ Closed
Base:
main← Head:dependabot/npm_and_yarn/npm_and_yarn-789701fbe7📝 Commits (1)
1985430chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates📊 Changes
2 files changed (+193 additions, -958 deletions)
View changed files
📝
package-lock.json(+191 -956)📝
package.json(+2 -2)📄 Description
Bumps the npm_and_yarn group with 7 updates in the / directory:
7.11.07.19.06.21.26.23.02.22.42.50.04.1.04.1.16.13.06.14.17.4.37.5.66.1.06.1.16.1.06.1.2Updates
undicifrom 7.11.0 to 7.19.0Release notes
Sourced from undici's releases.
... (truncated)
Commits
761fce9fix websocketstream open error (#4748)9ec9160Bumped v7.19.0 (#4751)491f760ci: test shared-builtin only on Node.js 24 and 25 (#4746)cc2ec56feat(cache): add origins option for whitelist filtering (#4739)8fd6c43chore: use testcontest for subresource integrity tests (#4575)2346cd2chore: use testcontext for test:cache (#4571)847419ffix(cache): regenerate stream from source when cache.match is called after GC...3388513fix websocket basic auth (#4747)250efc8Implement origin normalization in MockAgent for case-insensitivity and URL ha...5ebef90feat(client): expose HTTP/2 flow-control options (#4706)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.
Updates
undicifrom 6.21.2 to 6.23.0Release notes
Sourced from undici's releases.
... (truncated)
Commits
761fce9fix websocketstream open error (#4748)9ec9160Bumped v7.19.0 (#4751)491f760ci: test shared-builtin only on Node.js 24 and 25 (#4746)cc2ec56feat(cache): add origins option for whitelist filtering (#4739)8fd6c43chore: use testcontest for subresource integrity tests (#4575)2346cd2chore: use testcontext for test:cache (#4571)847419ffix(cache): regenerate stream from source when cache.match is called after GC...3388513fix websocket basic auth (#4747)250efc8Implement origin normalization in MockAgent for case-insensitivity and URL ha...5ebef90feat(client): expose HTTP/2 flow-control options (#4706)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.
Updates
@sveltejs/kitfrom 2.22.4 to 2.50.0Release notes
Sourced from
@sveltejs/kit's releases.... (truncated)
Changelog
Sourced from
@sveltejs/kit's changelog.... (truncated)
Commits
391c6f7Version Packages (#15177)36cb864Revert "Revert "breaking: removebuttonPropsfrom experimental remote form ...8a82859chore: fix lint errors (#15174)80ffb53Version Packages (#15162)8ed8155Merge commit from forkd9ae9b0Merge commit from forkec4596achore: Upgrade devalue (#15172)81cd545fix: avoid overriding Vite defaultbasewhen running Vitest 4 (#14866)6cf9491chore: remove unused is_http_method helper and method set to (#15152)3305022Revert "breaking: removebuttonPropsfrom experimental remote form function...Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@sveltejs/kitsince your current version.Updates
devaluefrom 5.1.1 to 5.6.2Release notes
Sourced from devalue's releases.
... (truncated)
Changelog
Sourced from devalue's changelog.
... (truncated)
Commits
fcf4e88fix tests1d8a5eaVersion Packages (#131)1175584Merge commit from forke46afa6Merge commit from fork5e07a67Version Packages (#129)aa09604Bump js-yaml from 3.14.1 to 3.14.2 (#125)2161d44fix: add hasOwn check before calling reviver (#128)83de81dVersion Packages (#127)a3d09d4Addvalueandrootproperties inDevalueErrorinstances (#126)f4b37f3Version Packages (#124)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for devalue since your current version.
Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
qsfrom 6.13.0 to 6.14.1Changelog
Sourced from qs's changelog.
Commits
3fa11a5v6.14.1a626704[Dev Deps] updatenpmignore3086902[Fix] ensure arrayLength applies to[]notation as wellfc7930e[Dev Deps] updateeslint,@ljharb/eslint-config0b06aac[Dev Deps] update@ljharb/eslint-config64951f6[Refactor]parse: extract key segment splitting helpere1bd259[Dev Deps] update@ljharb/eslint-configf4b3d39[eslint] add eslint 9 optional peer dep6e94d95[Dev Deps] updateeslint,@ljharb/eslint-config,npmignore973dc3c[actions] add workflow permissionsUpdates
tarfrom 7.4.3 to 7.5.6Changelog
Sourced from tar's changelog.
... (truncated)
Commits
394ece67.5.67d4cc17fix race puting a Link ahead of its target File26ab9047.5.5e9a1ddbfix: do not prevent valid linkpaths within archive911c8867.5.43b1abfanormalize out unicode ligaturesa43478cremove some unused files970c58fupdate depsbb21974update changelog03138447.5.3Maintainer changes
This version was pushed to npm by isaacs, a new releaser for tar since your current version.
Updates
vega-functionsfrom 6.1.0 to 6.1.1Release notes
Sourced from vega-functions's releases.
Commits
d67c1b7chore: bump to 6.1.1e574530chore: bump vega-cliMaintainer changes
This version was pushed to npm by hydrosquall, a new releaser for vega-functions since your current version.
Updates
vega-selectionsfrom 6.1.0 to 6.1.2Release notes
Sourced from vega-selections's releases.
Commits
18a55afchore: fix json of package.json38957ffchore: bump vegabb800e9chore: simplify gitignoreb737e03fix: runnpm pkg fixd67c1b7chore: bump to 6.1.1e574530chore: bump vega-cliMaintainer changes
This version was pushed to npm by hydrosquall, a new releaser for vega-selections since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.