deps: bump the security-updates group with 27 updates by dependabot[bot] · Pull Request #975 · suites-dev/suites

dependabot · 2026-02-17T17:49:35Z

Bumps the security-updates group with 27 updates:

Package	From	To
@babel/traverse	`7.28.3`	`7.29.0`
@eslint/js	`9.8.0`	`10.0.1`
@nestjs/common	`10.4.20`	`11.1.14`
@types/node	`22.19.1`	`25.2.3`
@typescript-eslint/eslint-plugin	`7.18.0`	`8.56.0`
@typescript-eslint/parser	`7.18.0`	`8.56.0`
axios	`1.8.2`	`1.13.5`
eslint	`9.8.0`	`10.0.0`
globals	`16.5.0`	`17.3.0`
husky	`8.0.3`	`9.1.7`
inversify	`6.0.1`	`7.11.0`
jest	`29.7.0`	`30.2.0`
@types/jest	`29.5.12`	`30.0.0`
jest-environment-node	`29.1.0`	`30.2.0`
lerna	`8.2.4`	`9.0.4`
lint-staged	`16.2.6`	`16.2.7`
madge	`7.0.0`	`8.0.0`
prettier	`3.6.2`	`3.8.1`
rimraf	`5.0.10`	`6.1.3`
sinon	`16.1.3`	`21.0.1`
@types/sinon	`10.0.20`	`21.0.0`
tar	`6.2.1`	`7.5.9`
ts-jest	`29.4.5`	`29.4.6`
typescript	`5.2.2`	`5.9.3`
@vitest/coverage-v8	`1.6.1`	`4.0.18`
@vitest/spy	`1.6.1`	`4.0.18`
vitest	`1.6.1`	`4.0.18`

Updates @babel/traverse from 7.28.3 to 7.29.0

Release notes

Sourced from @babel/traverse's releases.

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types

#17750 [7.x backport] Add attributes import declaration builder (@JLHwung)

babel-standalone

#17663 [7.x backport] feat(standalone): export async transform (@JLHwung)

#17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser

#17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)

#17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)

babel-traverse

#17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)

babel-plugin-transform-block-scoping, babel-traverse

#17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3

#17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

@magic-akari

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

... (truncated)

Commits

aa8394e v7.29.0
84366a8 fix(traverse): provide a hub when traversing a File or Program and no parentP...
229eb45 [7.x backport] fix: Rename switch discriminant references when body creates s...
d7f4008 v7.28.6
905bc22 fix: lint errors in main branch (#17612)
a03e2b6 fix: path.evaluate correctly returns confident (#17584)
aac2c37 chore: Use Gulpfile.mts (#17579)
65c4a6b [Babel 8] fix: Improve traverse types (#17574)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/traverse since your current version.

Updates @eslint/js from 9.8.0 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

f0cafe5 feat: rule tester add assertion option requireData (#20409) (fnx)

f7ab693 feat: output RuleTester test case failure index (#19976) (ST-DDT)

7cbcbf9 feat: add countThis option to max-params (#20236) (Gerkin)

f148a5e feat: add error assertion options (#20247) (ST-DDT)

09e6654 feat: update error loc of require-yield and no-useless-constructor (#20267) (Tanuj Kanti)

Bug Fixes

436b82f fix: update eslint (#20473) (renovate[bot])

1d29d22 fix: detect default this binding in Array.fromAsync callbacks (#20456) (Francesco Trotta)

727451e fix: fix regression of global mode report range in strict rule (#20462) (ntnyq)

e80485f fix: remove fake FlatESLint and LegacyESLint exports (#20460) (Francesco Trotta)

9eeff3b fix: update esquery (#20423) (cryptnix)

b34b938 fix: use Error.prepareStackTrace to estimate failing test location (#20436) (Francesco Trotta)

51aab53 fix: update eslint (#20443) (renovate[bot])

23490b2 fix: handle space before colon in RuleTester location estimation (#20433) (Francesco Trotta)

f244dbf fix: use MessagePlaceholderData type from @eslint/core (#20348) (루밀LuMir)

d186f8c fix: update eslint (#20427) (renovate[bot])

2332262 fix: error location should not modify error message in RuleTester (#20421) (Milos Djermanovic)

ab99b21 fix: ensure filename is passed as third argument to verifyAndFix() (#20405) (루밀LuMir)

8a60f3b fix: remove ecmaVersion and sourceType from ParserOptions type (#20415) (Pixel998)

eafd727 fix: remove TDZ scope type (#20231) (jaymarvelz)

... (truncated)

Commits

See full diff in compare view

Updates @nestjs/common from 10.4.20 to 11.1.14

Release notes

Sourced from @nestjs/common's releases.

v11.1.14 (2026-02-17)

Bug fixes

platform-fastify

#16384 fix(fastify): fastify middleware bypass cve (@kamilmysliwiec)

common

#16307 fix: logger print invalid context when no stack trace provided (@JulienDuf)

Enhancements

common

#16314 fix(common): change requestOrigin type (@SpencerKaiser)

Committers: 5

Julien Dufresne (@JulienDuf)

Kamil Mysliwiec (@kamilmysliwiec)

Mykhailo Skrypsky (@mixator)

Spencer Kaiser (@SpencerKaiser)

조수민 (@suuuuuuminnnnnn)

v11.1.13 (2026-02-03)

Bug fixes

common

#16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

microservices

#16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)

#16262 Feat/microservices configurable max buffer size (@jobnow)

common

#16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

platform-fastify

#16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])

platform-express

#16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

Lee Donghyun (@devizi0)

Mykhailo Skrypsky (@mixator)

Neo (@chojs23)

Praveen Somasundaram (@som14062005)

Ricardo Gomes (@jobnow)

조수민 (@suuuuuuminnnnnn)

v11.1.12 (2026-01-15)

Bug fixes

common

... (truncated)

Commits

5d31df7 chore(release): publish v11.1.14 release
829d326 Merge pull request #16314 from SpencerKaiser/bugfix/cors-types
5058600 fix(common): change requestOrigin type
91212b2 fix: return type error
804d27b fix: invalid context when no stack trace is provided
8d1c16c chore: update readme
e3a958a chore(release): publish v11.1.13 release
d88856c test(common): add unit tests for class serializer interceptor
a1f6162 Merge pull request #16202 from som14062005/fix/issue-16195
8222634 refactor: move built-in types to module-level constant
Additional commits viewable in compare view

Updates @types/node from 22.19.1 to 25.2.3

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 7.18.0 to 8.56.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

support ESLint v10 (#12057)

🩹 Fixes

use parser options from context.languageOptions (#12043)

❤️ Thank You

Brad Zacher @bradzacher

fnx @DMartens

Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

8.55.0 (2026-02-09)

🚀 Features

utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)

eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)

eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)

eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)

typescript-estree: forbid invalid modifier in object expression (#11931)

❤️ Thank You

Christian Rose @chrros95

fisker Cheung @fisker

Josh Goldberg

Maria Solano @MariaSolOs

Minyeong Kim @minyeong981

SungHyun627 @SungHyun627

Yukihiro Hasegawa @y-hsgw

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.56.0 (2026-02-16)

🚀 Features

support ESLint v10 (#12057)

🩹 Fixes

use parser options from context.languageOptions (#12043)

❤️ Thank You

Brad Zacher @bradzacher

fnx @DMartens

Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.55.0 (2026-02-09)

🚀 Features

utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)

eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)

eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)

eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)

❤️ Thank You

Christian Rose @chrros95

Josh Goldberg

Maria Solano @MariaSolOs

Minyeong Kim @minyeong981

SungHyun627 @SungHyun627

Yukihiro Hasegawa @y-hsgw

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.54.0 (2026-01-26)

🚀 Features

... (truncated)

Commits

8b8b68f chore(release): publish 8.56.0
68a074f feat: support ESLint v10 (#12057)
c0a359d fix: use parser options from context.languageOptions (#12043)
fedfe86 chore(release): publish 8.55.0
8a95834 fix(eslint-plugin): [no-useless-default-assignment] reduce param index to ts ...
4ba1e72 fix(eslint-plugin): [no-useless-default-assignment] report unnecessary defaul...
a1f8617 feat(utils): deprecate defaultOptions in favor of meta.defaultOptions (#11992)
3f0ce54 fix(eslint-plugin): [no-useless-default-assignment] require strictNullChecks ...
3df0002 fix(eslint-plugin): [no-unused-vars] remove trailing newline when removing en...
b931f8c chore: use workspace refs for workspace deps (#12018)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @typescript-eslint/eslint-plugin since your current version.

Updates @typescript-eslint/parser from 7.18.0 to 8.56.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

support ESLint v10 (#12057)

🩹 Fixes

use parser options from context.languageOptions (#12043)

❤️ Thank You

Brad Zacher @bradzacher

fnx @DMartens

Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

8.55.0 (2026-02-09)

🚀 Features

utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)

eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)

eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)

eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)

typescript-estree: forbid invalid modifier in object expression (#11931)

❤️ Thank You

Christian Rose @chrros95

fisker Cheung @fisker

Josh Goldberg

Maria Solano @MariaSolOs

Minyeong Kim @minyeong981

SungHyun627 @SungHyun627

Yukihiro Hasegawa @y-hsgw

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.56.0 (2026-02-16)

🚀 Features

support ESLint v10 (#12057)

❤️ Thank You

Brad Zacher @bradzacher

Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.55.0 (2026-02-09)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.54.0 (2026-01-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.1 (2026-01-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.0 (2026-01-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.52.0 (2026-01-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

... (truncated)

Commits

8b8b68f chore(release): publish 8.56.0
68a074f feat: support ESLint v10 (#12057)
fedfe86 chore(release): publish 8.55.0
b931f8c chore: use workspace refs for workspace deps (#12018)
1f17a79 chore: migrate to pnpm (#11248)
d423e57 chore(release): publish 8.54.0
9940e53 chore(release): publish 8.53.1
3021ede chore(release): publish 8.53.0
9ddd571 chore(release): publish 8.52.0
95c7c73 chore: update deps to latest minor/patch (#11921)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @typescript-eslint/parser since your current version.

Updates axios from 1.8.2 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)

Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

Fix/5657. (PR #7313)

Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

Add input validation to isAbsoluteURL. (PR #7326)

Refactor: bump minor package versions. (PR #7356)

Documentation

Clarify object-check comment. (PR #7323)

Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

Chore: fix issues with YAML. (PR #7355)

CI: update workflow YAMLs. (PR #7372)

CI: fix run condition. (PR #7373)

Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)

Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

@sachin11063 (first contribution — PR #7323)

@asmitha-16 (first contribution — PR #7326)

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

fix: issues with version 1.13.3 (#7352) (ee90dfc)

Fixed issues discovered in v1.13.3 release

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

1.13.3 (2026-01-20)

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)

interceptor: handle the error in the same interceptor (#6269) (5945e40)

main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)

package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)

silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)

turn AxiosError into a native error (#5394) (#5558) (1c6a86d)

types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)

types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)

unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

add undefined as a value in AxiosRequestConfig (#5560) (095033c)

add automatic minor and patch upgrades to dependabot (#6053) (65a7584)

add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)

added copilot instructions (3f83143)

compatibility with frozen prototypes (#6265) (860e033)

enhance pipeFileToResponse with error handling (#7169) (88d7884)

types: Intellisense for string literals in a widened union (#6134) (f73474d), closes microsoft/TypeScript#33471

Reverts

Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298

deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

Ashvin Tiwari

Nikunj Mochi

Anchal Singh

jasonsaayman

Julian Dax

Akash Dhar Dubey

Madhumita

Tackoil

Justin Dhillon

Rudransh

WuMingDao

codenomnom

Nandan Acharya

Eric Dubé

Tibor Pilz

Gabriel Quaresma

Turadg Aleahmad

... (truncated)

Commits

29f7542 chore(release): prepare release 1.13.5 (#7379)
431c3a3 ci: fix run condition (#7373)
9ff3a78 ci: update ymls (#7372)
...
Description has been truncated

Bumps the security-updates group with 27 updates: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.28.3` | `7.29.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.8.0` | `10.0.1` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `10.4.20` | `11.1.14` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.1` | `25.2.3` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.56.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.56.0` | | [axios](https://github.com/axios/axios) | `1.8.2` | `1.13.5` | | [eslint](https://github.com/eslint/eslint) | `9.8.0` | `10.0.0` | | [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.3.0` | | [husky](https://github.com/typicode/husky) | `8.0.3` | `9.1.7` | | [inversify](https://github.com/inversify/monorepo) | `6.0.1` | `7.11.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.2.0` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` | | [jest-environment-node](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-node) | `29.1.0` | `30.2.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `8.2.4` | `9.0.4` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.6` | `16.2.7` | | [madge](https://github.com/pahen/madge) | `7.0.0` | `8.0.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.8.1` | | [rimraf](https://github.com/isaacs/rimraf) | `5.0.10` | `6.1.3` | | [sinon](https://github.com/sinonjs/sinon) | `16.1.3` | `21.0.1` | | [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `10.0.20` | `21.0.0` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.2.2` | `5.9.3` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `1.6.1` | `4.0.18` | | [@vitest/spy](https://github.com/vitest-dev/vitest/tree/HEAD/packages/spy) | `1.6.1` | `4.0.18` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.1` | `4.0.18` | Updates `@babel/traverse` from 7.28.3 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-traverse) Updates `@eslint/js` from 9.8.0 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/HEAD/packages/js) Updates `@nestjs/common` from 10.4.20 to 11.1.14 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.14/packages/common) Updates `@types/node` from 22.19.1 to 25.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.56.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.18.0 to 8.56.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/parser) Updates `axios` from 1.8.2 to 1.13.5 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.8.2...v1.13.5) Updates `eslint` from 9.8.0 to 10.0.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.8.0...v10.0.0) Updates `globals` from 16.5.0 to 17.3.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.5.0...v17.3.0) Updates `husky` from 8.0.3 to 9.1.7 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v8.0.3...v9.1.7) Updates `inversify` from 6.0.1 to 7.11.0 - [Release notes](https://github.com/inversify/monorepo/releases) - [Changelog](https://github.com/inversify/monorepo/blob/main/docs/release.md) - [Commits](https://github.com/inversify/monorepo/compare/@inversifyjs/core@6.0.1...inversify@7.11.0) Updates `jest` from 29.7.0 to 30.2.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest) Updates `@types/jest` from 29.5.12 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `jest-environment-node` from 29.1.0 to 30.2.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest-environment-node) Updates `lerna` from 8.2.4 to 9.0.4 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v9.0.4/packages/lerna) Updates `lint-staged` from 16.2.6 to 16.2.7 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.2.6...v16.2.7) Updates `madge` from 7.0.0 to 8.0.0 - [Changelog](https://github.com/pahen/madge/blob/master/CHANGELOG.md) - [Commits](pahen/madge@v7.0.0...v8.0.0) Updates `prettier` from 3.6.2 to 3.8.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.8.1) Updates `rimraf` from 5.0.10 to 6.1.3 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v5.0.10...v6.1.3) Updates `sinon` from 16.1.3 to 21.0.1 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v16.1.3...v21.0.1) Updates `@types/sinon` from 10.0.20 to 21.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `ts-jest` from 29.4.5 to 29.4.6 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.6) Updates `typescript` from 5.2.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.2.2...v5.9.3) Updates `@vitest/coverage-v8` from 1.6.1 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8) Updates `@vitest/spy` from 1.6.1 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/spy) Updates `vitest` from 1.6.1 to 4.0.18 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-version: 7.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@nestjs/common" dependency-version: 11.1.14 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/node" dependency-version: 25.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.56.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/parser" dependency-version: 8.56.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: axios dependency-version: 1.13.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: eslint dependency-version: 10.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: globals dependency-version: 17.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: husky dependency-version: 9.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: inversify dependency-version: 7.11.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest dependency-version: 30.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest-environment-node dependency-version: 30.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lerna dependency-version: 9.0.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lint-staged dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: madge dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: prettier dependency-version: 3.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: rimraf dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: sinon dependency-version: 21.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/sinon" dependency-version: 21.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: tar dependency-version: 7.5.9 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: ts-jest dependency-version: 29.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/spy" dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: vitest dependency-version: 4.0.18 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-02-18T11:39:59Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 17, 2026

omermorad closed this Feb 18, 2026

dependabot bot deleted the dependabot/npm_and_yarn/security-updates-a6e0fadc01 branch February 18, 2026 11:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Comments

deps: bump the security-updates group with 27 updates#975

deps: bump the security-updates group with 27 updates#975
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/security-updates-a6e0fadc01

dependabot bot commented on behalf of github Feb 17, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Comments

Conversation

dependabot bot commented on behalf of github Feb 17, 2026

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

v10.0.0

Breaking Changes

Features

Bug Fixes

v11.1.14 (2026-02-17)

Bug fixes

Enhancements

Committers: 5

v11.1.13 (2026-02-03)

Bug fixes

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.55.0

8.55.0 (2026-02-09)

🚀 Features

🩹 Fixes

❤️ Thank You

8.56.0 (2026-02-16)

🚀 Features

🩹 Fixes

❤️ Thank You

8.55.0 (2026-02-09)

🚀 Features

🩹 Fixes

❤️ Thank You

8.54.0 (2026-01-26)

🚀 Features

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.55.0

8.55.0 (2026-02-09)

🚀 Features

🩹 Fixes

❤️ Thank You

8.56.0 (2026-02-16)

🚀 Features

❤️ Thank You

8.55.0 (2026-02-09)

8.54.0 (2026-01-26)

8.53.1 (2026-01-19)

8.53.0 (2026-01-12)

8.52.0 (2026-01-05)

8.51.0 (2025-12-29)

v1.13.5

Release 1.13.5

Highlights

Changes

Security

Fixes

Features / Improvements

Documentation

CI / Maintenance

New Contributors

v1.13.4

Overview

What's New in v1.13.4