Skip to content

Bump the production-dependencies group across 1 directory with 6 updates - #50

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-c219602b6f
Open

Bump the production-dependencies group across 1 directory with 6 updates#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-c219602b6f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
@octokit/core 7.0.6 7.0.7
@octokit/plugin-retry 8.1.0 8.1.1
@octokit/plugin-throttling 11.0.3 11.0.5
p-limit 7.3.0 7.3.1
yargs 18.0.0 18.1.0

Updates @octokit/core from 7.0.6 to 7.0.7

Release notes

Sourced from @​octokit/core's releases.

v7.0.7

7.0.7 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#797) (087a093)
Commits
  • 087a093 fix(deps): update dependency @​octokit/types to v17 (#797)
  • e8c8789 ci(action): update actions/create-github-app-token action to v3 (#770)
  • a648383 chore(deps): bump postcss from 8.5.15 to 8.5.23 (#790)
  • 57516b7 chore(deps-dev): bump undici from 7.24.0 to 7.28.0 (#785)
  • c1d1bef chore(deps): bump picomatch from 4.0.3 to 4.0.4 (#772)
  • c60ac22 chore(deps): bump postcss from 8.5.3 to 8.5.15 (#778)
  • 8a9fb20 chore(deps): update dependency esbuild to ^0.28.0 [security] (#782)
  • 83550e2 chore(deps-dev): bump minimatch from 9.0.5 to 9.0.9 (#766)
  • dd8908c chore(deps): bump rollup from 4.41.0 to 4.59.0 (#765)
  • e265d99 chore(deps-dev): bump undici from 7.10.0 to 7.24.0 (#768)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/core since your current version.


Updates @octokit/graphql from 9.0.3 to 9.0.4

Release notes

Sourced from @​octokit/graphql's releases.

v9.0.4

9.0.4 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#705) (245ee6e)
Commits
  • af94a01 chore(deps): update dependency prettier to v3.9.6 (#686)
  • 2b24525 build(deps): lock file maintenance (#704)
  • 245ee6e fix(deps): update dependency @​octokit/types to v17 (#705)
  • 9d55053 ci(action): update actions/add-to-project action to v2 (#695)
  • c92e5e3 ci(action): update actions/checkout action to v7 (#700)
  • 1d10b42 chore(deps): update dependency typescript to v7 (#701)
  • 25587cf ci(action): update actions/setup-node action to v7 (#702)
  • 9fef990 ci(action): update actions/create-github-app-token action to v3 (#688)
  • 5ef2ab4 build(deps): lock file maintenance (#699)
  • 7018c70 chore(deps): update dependency esbuild to ^0.28.0 [security] (#698)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/graphql since your current version.


Updates @octokit/plugin-retry from 8.1.0 to 8.1.1

Release notes

Sourced from @​octokit/plugin-retry's releases.

v8.1.1

8.1.1 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#685) (a323a9a)
Commits
  • ed95dae ci(action): update actions/checkout action to v7 (#680)
  • a323a9a fix(deps): update dependency @​octokit/types to v17 (#685)
  • 944c701 ci(action): update actions/setup-node action to v7 (#682)
  • 3a4e3d0 build(deps): lock file maintenance (#684)
  • bae11ba build(deps): lock file maintenance (#679)
  • 433e259 chore(deps): update dependency esbuild to ^0.28.0 [security] (#678)
  • 03ed096 build(deps): lock file maintenance (#669)
  • 5a0d924 build(deps): lock file maintenance (#664)
  • f8773e4 tests: correct the errorRequest tests due not testing the right thing (#662)
  • 4447fd3 chore(deps): update dependency esbuild to ^0.27.0 (#652)
  • Additional commits viewable in compare view

Updates @octokit/plugin-throttling from 11.0.3 to 11.0.5

Release notes

Sourced from @​octokit/plugin-throttling's releases.

v11.0.5

11.0.5 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#860) (4859cd1)

v11.0.4

11.0.4 (2026-08-01)

Bug Fixes

  • defer Bottleneck instantiation until first request (CF Workers compat) (#850) (d711c52)
Commits
  • 54030a4 ci(action): update actions/setup-node action to v7 (#857)
  • 4859cd1 fix(deps): update dependency @​octokit/types to v17 (#860)
  • d711c52 fix: defer Bottleneck instantiation until first request (CF Workers compat) (...
  • 003e302 chore(deps): update dependency typescript to v7 (#856)
  • d218863 build(deps): lock file maintenance (#859)
  • 0c6f81f build(deps): lock file maintenance (#853)
  • e064466 chore(deps): update dependency esbuild to ^0.28.0 [security] (#852)
  • cb71e45 build(deps): lock file maintenance (#841)
  • 1a64804 build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#835)
  • 07c8297 build(deps): lock file maintenance (#833)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/plugin-throttling since your current version.


Updates p-limit from 7.3.0 to 7.3.1

Release notes

Sourced from p-limit's releases.

v7.3.1

  • Fix detached limit.map calls (#108) ef37eb2

sindresorhus/p-limit@v7.3.0...v7.3.1

Commits

Updates yargs from 18.0.0 to 18.1.0

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

  • ignore bun when getting bin name (b77831c)

Bug Fixes

  • lang: 'count' for de locale (#2476) (971e351)
  • local prototype pollution vulnerability in apply-extends (437f3a4)
  • locale: add Georgian translation (#2474) (086aeaa)

17.7.3 (2026-06-19)

Bug Fixes

  • fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

  • fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)
Commits
Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.6` | `7.0.7` |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.1.0` | `8.1.1` |
| [@octokit/plugin-throttling](https://github.com/octokit/plugin-throttling.js) | `11.0.3` | `11.0.5` |
| [p-limit](https://github.com/sindresorhus/p-limit) | `7.3.0` | `7.3.1` |
| [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.1.0` |



Updates `@octokit/core` from 7.0.6 to 7.0.7
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v7.0.6...v7.0.7)

Updates `@octokit/graphql` from 9.0.3 to 9.0.4
- [Release notes](https://github.com/octokit/graphql.js/releases)
- [Commits](octokit/graphql.js@v9.0.3...v9.0.4)

Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](octokit/plugin-retry.js@v8.1.0...v8.1.1)

Updates `@octokit/plugin-throttling` from 11.0.3 to 11.0.5
- [Release notes](https://github.com/octokit/plugin-throttling.js/releases)
- [Commits](octokit/plugin-throttling.js@v11.0.3...v11.0.5)

Updates `p-limit` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/sindresorhus/p-limit/releases)
- [Commits](sindresorhus/p-limit@v7.3.0...v7.3.1)

Updates `yargs` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.1.0)

---
updated-dependencies:
- dependency-name: "@octokit/core"
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@octokit/graphql"
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@octokit/plugin-retry"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@octokit/plugin-throttling"
  dependency-version: 11.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: p-limit
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: aegilops. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants