chore(deps): bump the dependencies group across 1 directory with 7 updates #5611

dependabot · 2025-12-04T03:03:43Z

Bumps the dependencies group with 7 updates in the / directory:

Package	From	To
express	`4.21.2`	`4.22.1`
ipaddr.js	`2.2.0`	`2.3.0`
body-parser	`1.20.3`	`1.20.4`
memfs	`4.51.0`	`4.51.1`
prettier	`3.6.2`	`3.7.4`
puppeteer	`24.31.0`	`24.32.0`
typescript-eslint	`8.48.0`	`8.48.1`

Updates express from 4.21.2 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 4.22.1 by @UlisesGascon in expressjs/express#6934

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

Refactor: improve readability by @sazk07 in expressjs/express#6190

ci: add support for Node.js@23.0 by @UlisesGascon in expressjs/express#6080

Method functions with no path should error by @wesleytodd in expressjs/express#5957

ci: updated github actions ci workflow by @Phillip9587 in expressjs/express#6323

ci: reorder npm i steps to fix ci for older node versions by @Phillip9587 in expressjs/express#6336

Backport: ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6506

chore(4.x): wider range for query test skip by @jonchurch in expressjs/express#6513

use tilde notation for certain dependencies by @UlisesGascon in expressjs/express#6905

deps: qs@6.14.0 by @UlisesGascon in expressjs/express#6909

deps: use tilde notation for qs by @Phillip9587 in expressjs/express#6919

Release: 4.22.0 by @UlisesGascon in expressjs/express#6921

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

4.22.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: use tilde notation for dependencies

deps: qs@6.14.0

Commits

12fae14 4.22.1
5ddf311 Revert "sec: security patch for CVE-2024-51999"
49744ab 4.22.0 (#6921)
6e97452 sec: security patch for CVE-2024-51999
6a23d34 deps: use tilde notation for qs (#6919)
8c12cdf deps: qs@6.14.0 (#6909)
7fea74f deps: use tilde notation for certain dependencies (#6905)
dac7a04 chore: wider range for query test skip (#6513)
997919b ci: add node.js 24 to test matrix (#6506)
36fb59c fix(ci): reorder npm i steps to fix ci for older node versions (#6336)
Additional commits viewable in compare view

Updates ipaddr.js from 2.2.0 to 2.3.0

Changelog

Sourced from ipaddr.js's changelog.

2.3.0 - 2025-11-27

add isValidCIDRFourPartDecimal helper for IPv4 CIDR in four-part decimal form

upgrade eslint dev dependency to v9

remove duplicated LICENSE entry from published files list

Commits

e373b4e Bump version to 2.3.0
d564b1d Add IPv4 CIDR four-part decimal validator
08c2cd4 dep(eslint): upgrade to v9
e6438fe remove LICENSE from files, redundant, always included
See full diff in compare view

Updates body-parser from 1.20.3 to 1.20.4

Release notes

Sourced from body-parser's releases.

1.20.4

What's Changed

Remove redundant depth check by @blakeembrey in expressjs/body-parser#538

ci: add support for Node.js v23 by @Phillip9587 in expressjs/body-parser#553

ci: restore CI for 1.x branch by @bjohansebas in expressjs/body-parser#665

deps: qs@^6.14.0 by @bjohansebas in expressjs/body-parser#664

deps: use tilde notation and update certain dependencies by @Phillip9587 in expressjs/body-parser#668

chore: remove SECURITY.md by @Phillip9587 in expressjs/body-parser#669

ci: add CodeQL (SAST) by @Phillip9587 in expressjs/body-parser#670

Release: 1.20.4 by @UlisesGascon in expressjs/body-parser#672

Full Changelog: expressjs/body-parser@1.20.3...1.20.4

Changelog

Sourced from body-parser's changelog.

1.20.4 / 2025-12-01

deps: qs@~6.14.0

deps: use tilde notation for dependencies

deps: http-errors@~2.0.1

deps: raw-body@~2.5.3

Commits

7db202c 1.20.4 (#672)
d8f8adb ci: add CodeQL (SAST) (#670)
6d133c1 chore: remove SECURITY.md (#669)
fcd1535 deps: use tilde notation and update certain dependencies (#668)
ec5fa29 deps: qs@~6.14.0 (#664)
ffb95c1 ci: restore CI for 1.x branch (#665)
48a5f07 ci: add support for Node.js v23 (#553)
f20f6ad Remove redundant depth check (#538)
See full diff in compare view

Updates memfs from 4.51.0 to 4.51.1

Release notes

Sourced from memfs's releases.

v4.51.1

4.51.1 (2025-11-30)

Bug Fixes

add glob functions to API lists (445f337)

Changelog

Sourced from memfs's changelog.

4.51.1 (2025-11-30)

Bug Fixes

add glob functions to API lists (445f337)

Commits

d6a6853 chore(release): 4.51.1 [skip ci]
bdaf01b Merge pull request #1216 from DMartens/add-glob-API-to-list
445f337 fix: add glob functions to API lists
See full diff in compare view

Updates prettier from 3.6.2 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

Fix comment in union type gets duplicated by @fisker in prettier/prettier#18393

Fix unstable comment print in union type by @fisker in prettier/prettier#18395

Avoid quote around LWC interpolations by @kovsu in prettier/prettier#18383

🔗 Changelog

3.7.3

What's Changed

Fix prettier.getFileInfo() change that breaks VSCode extension by @fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

Fix string print when switching quotes by @fisker in prettier/prettier#18351

Preserve quote for embedded HTML attribute values by @kovsu in prettier/prettier#18352

Fix comment in empty type literal by @fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

Fix performance regression in doc printer (#18342 by @fisker)

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by `@fisker`)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits

7848357 Release 3.7.4
7686c59 Release @prettier/plugin-hermes & @prettier/plugin-oxc v0.1.3
fe49434 Remove dead code checking union/intersection types length (#18396)
ca02b37 Fix unstable comment print (#18395)
7efb988 Fix comment in union type get duplicated (#18393)
cfa92c1 Update dependency @angular/compiler to v21.0.2 (#18392)
1de2737 Update dependency yaml to v2.8.2 (#18391)
706aa4e Switch js parse postprocess to onEnter (#18382)
d3eb2b2 Reuse arrays in visitor keys (#18386)
c45fef1 Fix LWC attribute with --embedded-language-formatting off (#18383)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.

Updates puppeteer from 24.31.0 to 24.32.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.32.0

24.32.0 (2025-12-03)

🎉 Features

add browser.screens, .addScreen and .removeScreen methods (#14445) (98ae5e7)

bluetooth emulation (#14448) (e181c1b)

roll to Chrome 143.0.7499.40 (#14476) (b0e15af)

support channel in puppeteer.connect (#14466) (bc3a521)

support new page window positioning (#14446) (20881f8)

webdriver: bluetooth emulation via WebDriver BiDi (#14455) (e17263c)

🛠️ Fixes

ignore non-page DevTools targets when handleDevToolsAsPage=true (#14472) (11bf1d2)

prevent accessibility nodes attributes with false from being ignored (#14475) (086a8ab)

roll to Firefox 145.0.2 (#14462) (97ca894)

webdriver: allow for scripts to throw platform objects (#14456) (7c0d3d9)

Dependencies

The following workspace dependencies were updated

dependencies

@puppeteer/browsers bumped from 2.10.13 to 2.11.0

puppeteer: v24.32.0

24.32.0 (2025-12-03)

🎉 Features

roll to Chrome 143.0.7499.40 (#14476) (b0e15af)

Dependencies

The following workspace dependencies were updated

dependencies

@puppeteer/browsers bumped from 2.10.13 to 2.11.0

puppeteer-core bumped from 24.31.0 to 24.32.0

Changelog

Sourced from puppeteer's changelog.

24.32.0 (2025-12-03)

🎉 Features

add browser.screens, .addScreen and .removeScreen methods (#14445) (98ae5e7)

bluetooth emulation (#14448) (e181c1b)

roll to Chrome 143.0.7499.40 (#14476) (b0e15af)

support channel in puppeteer.connect (#14466) (bc3a521)

support new page window positioning (#14446) (20881f8)

webdriver: bluetooth emulation via WebDriver BiDi (#14455) (e17263c)

Dependencies

The following workspace dependencies were updated

dependencies

@puppeteer/browsers bumped from 2.10.13 to 2.11.0

🛠️ Fixes

ignore non-page DevTools targets when handleDevToolsAsPage=true (#14472) (11bf1d2)

prevent accessibility nodes attributes with false from being ignored (#14475) (086a8ab)

roll to Firefox 145.0.2 (#14462) (97ca894)

webdriver: allow for scripts to throw platform objects (#14456) (7c0d3d9)

Commits

c324e1b chore: release main (#14454)
b0e15af feat: roll to Chrome 143.0.7499.40 (#14476)
086a8ab fix: prevent accessibility nodes attributes with false from being ignored (#1...
11bf1d2 fix: ignore non-page DevTools targets when handleDevToolsAsPage=true (#14472)
bc3a521 feat: support channel in puppeteer.connect (#14466)
4913b9b test: update canary expectations (#14467)
45f82af test: fix more path related issues in tests (#14465)
372b280 fix: avoid hard-coded separators in chrome.ts (#14464)
e17263c feat(webdriver): bluetooth emulation via WebDriver BiDi (#14455)
97ca894 fix: roll to Firefox 145.0.2 (#14462)
Additional commits viewable in compare view

Updates typescript-eslint from 8.48.0 to 8.48.1

Release notes

Sourced from typescript-eslint's releases.

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

eslint-plugin: revert "[no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)" (#11812)

🩹 Fixes

eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)

eslint-plugin: honor ignored base types on generic classes (#11767)

eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)

❤️ Thank You

Josh Goldberg

OleksandraKordonets

SangheeSon @Higangssh

tao

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.48.1 (2025-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

8fe3445 chore(release): publish 8.48.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.21.2` | `4.22.1` | | [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.2.0` | `2.3.0` | | [body-parser](https://github.com/expressjs/body-parser) | `1.20.3` | `1.20.4` | | [memfs](https://github.com/streamich/memfs) | `4.51.0` | `4.51.1` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `24.31.0` | `24.32.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.48.0` | `8.48.1` | Updates `express` from 4.21.2 to 4.22.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](expressjs/express@4.21.2...v4.22.1) Updates `ipaddr.js` from 2.2.0 to 2.3.0 - [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md) - [Commits](whitequark/ipaddr.js@v2.2.0...v2.3.0) Updates `body-parser` from 1.20.3 to 1.20.4 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.3...1.20.4) Updates `memfs` from 4.51.0 to 4.51.1 - [Release notes](https://github.com/streamich/memfs/releases) - [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md) - [Commits](streamich/memfs@v4.51.0...v4.51.1) Updates `prettier` from 3.6.2 to 3.7.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.7.4) Updates `puppeteer` from 24.31.0 to 24.32.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](puppeteer/puppeteer@puppeteer-v24.31.0...puppeteer-v24.32.0) Updates `typescript-eslint` from 8.48.0 to 8.48.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: express dependency-version: 4.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ipaddr.js dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: body-parser dependency-version: 1.20.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: memfs dependency-version: 4.51.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: prettier dependency-version: 3.7.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: puppeteer dependency-version: 24.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: typescript-eslint dependency-version: 8.48.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 7 updates #5611

chore(deps): bump the dependencies group across 1 directory with 7 updates #5611

Uh oh!

dependabot bot commented on behalf of github Dec 4, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 7 updates #5611

Are you sure you want to change the base?

chore(deps): bump the dependencies group across 1 directory with 7 updates #5611

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.22.1

What's Changed

4.22.0

Important: Security

What's Changed

4.22.1 / 2025-12-01

4.22.0 / 2025-12-01

2.3.0 - 2025-11-27

1.20.4

What's Changed

1.20.4 / 2025-12-01

v4.51.1

4.51.1 (2025-11-30)

Bug Fixes

4.51.1 (2025-11-30)

Bug Fixes

3.7.4

What's Changed

3.7.3

What's Changed

3.7.2

What's Changed

3.7.1

3.7.0

3.7.4

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

puppeteer-core: v24.32.0

24.32.0 (2025-12-03)

🎉 Features

🛠️ Fixes

Dependencies

puppeteer: v24.32.0

24.32.0 (2025-12-03)

🎉 Features

Dependencies

24.32.0 (2025-12-03)

🎉 Features

Dependencies

🛠️ Fixes

v8.48.1

8.48.1 (2025-12-02)

⏪ Reverts

🩹 Fixes

❤️ Thank You

8.48.1 (2025-12-02)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 4, 2025 •

edited

Loading

LWC: Avoid quote around interpolations (#18383 by `@kovsu`)

TypeScript: Fix comment inside union type gets duplicated (#18393 by `@fisker`)

TypeScript: Fix unstable comment print in union type comments (#18395 by `@fisker`)