By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
Description
updated dependencies
added dependabot.yml
Please let me know if you want to use dependabot. It's easy to enable Settings->Advanced Security see docs
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/819
**Author:** [@Lokowitz](https://github.com/Lokowitz)
**Created:** 6/1/2025
**Status:** ✅ Merged
**Merged:** 6/2/2025
**Merged by:** [@oschwartz10612](https://github.com/oschwartz10612)
**Base:** `dev` ← **Head:** `main`
---
### 📝 Commits (10+)
- [`a23d437`](https://github.com/fosrl/pangolin/commit/a23d437bd312cbd01b9458b9d7a38d97778a9e95) Create dependabot.yml
- [`10ff2c8`](https://github.com/fosrl/pangolin/commit/10ff2c8a653dd99b07d2c3b4a090ee7be2193381) Bump the prod-patch-updates group with 19 updates (#120)
- [`858c809`](https://github.com/fosrl/pangolin/commit/858c809514d022c4f2b706b72699d1c8f680c371) Bump the dev-patch-updates group with 8 updates (#117)
- [`be0c744`](https://github.com/fosrl/pangolin/commit/be0c7444e91e4bcf501f30c43a350d7d56828497) Bump node from 20-alpine to 24-alpine in the major-updates group (#111)
- [`ea1cd4b`](https://github.com/fosrl/pangolin/commit/ea1cd4b0d4b9da0c13257309d766e6a00f93b686) Bump the prod-minor-updates group with 27 updates (#121)
- [`fa365fb`](https://github.com/fosrl/pangolin/commit/fa365fb7b8799c0dfe4ab0d30b900b1b78f9ad8c) Bump the dev-minor-updates group with 4 updates (#118)
- [`d03bee9`](https://github.com/fosrl/pangolin/commit/d03bee98f51ed55f5427a630b786ac79bcf6f54f) Bump yargs from 17.7.2 to 18.0.0 in the dev-major-updates group (#119)
- [`30e8b1f`](https://github.com/fosrl/pangolin/commit/30e8b1f0fe09e5f1a0e1edad0481797b7879cd2f) Update dependabot.yml
- [`ab79720`](https://github.com/fosrl/pangolin/commit/ab797203eb4cd999a442274e2ed737c6bcc94d1d) Update dependabot.yml
- [`34c6b59`](https://github.com/fosrl/pangolin/commit/34c6b590d70c3a4f3bc5db92ba070feb350c9e86) Update dependabot.yml
### 📊 Changes
**4 files changed** (+4736 additions, -4410 deletions)
<details>
<summary>View changed files</summary>
➕ `.github/dependabot.yml` (+46 -0)
📝 `Dockerfile` (+2 -2)
📝 `package-lock.json` (+4633 -4353)
📝 `package.json` (+55 -55)
</details>
### 📄 Description
## Community Contribution License Agreement
By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
## Description
- updated dependencies
- added dependabot.yml
Please let me know if you want to use dependabot. It's easy to enable Settings->Advanced Security [see docs](https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide#enabling-dependabot-for-your-repository)
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/819
Author: @Lokowitz
Created: 6/1/2025
Status: ✅ Merged
Merged: 6/2/2025
Merged by: @oschwartz10612
Base:
dev← Head:main📝 Commits (10+)
a23d437Create dependabot.yml10ff2c8Bump the prod-patch-updates group with 19 updates (#120)858c809Bump the dev-patch-updates group with 8 updates (#117)be0c744Bump node from 20-alpine to 24-alpine in the major-updates group (#111)ea1cd4bBump the prod-minor-updates group with 27 updates (#121)fa365fbBump the dev-minor-updates group with 4 updates (#118)d03bee9Bump yargs from 17.7.2 to 18.0.0 in the dev-major-updates group (#119)30e8b1fUpdate dependabot.ymlab79720Update dependabot.yml34c6b59Update dependabot.yml📊 Changes
4 files changed (+4736 additions, -4410 deletions)
View changed files
➕
.github/dependabot.yml(+46 -0)📝
Dockerfile(+2 -2)📝
package-lock.json(+4633 -4353)📝
package.json(+55 -55)📄 Description
Community Contribution License Agreement
By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
Description
Please let me know if you want to use dependabot. It's easy to enable Settings->Advanced Security see docs
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.