Skip to content

chore(deps): bump the dependencies group across 1 directory with 2 updates - #5778

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-d28e00e6f2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-d28e00e6f2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates in the / directory: schema-utils and execa.

Updates schema-utils from 4.5.0 to 4.8.1

Release notes

Sourced from schema-utils's releases.

v4.8.1

Patch Changes

  • Bundle schema-utils without errors or warnings: precompile requires the ajv helpers it inlines by name and loads webpack's minifier with Node.js's own require, so minify works from a webpack bundle too. (by @​alexander-akait in #238)

v4.8.0

Minor Changes

  • schema-utils precompile --minify (and the minify option of precompile) writes a smaller check that loads faster, minified with webpack's minifier (webpack 5.112.0 or later). (by @​alexander-akait in #235)

v4.7.0

Minor Changes

  • schema-utils precompile writes an ES module check for a package with "type": "module", and precompile takes an esm option. (by @​alexander-akait in #233)

v4.6.0

Minor Changes

  • perf: add schema-utils precompile to compile a schema ahead of time into a check that validate takes as its fourth argument, so valid options are validated without loading ajv (by @​alexander-akait in #231)
Changelog

Sourced from schema-utils's changelog.

4.8.1

Patch Changes

  • Bundle schema-utils without errors or warnings: precompile requires the ajv helpers it inlines by name and loads webpack's minifier with Node.js's own require, so minify works from a webpack bundle too. (by @​alexander-akait in #238)

4.8.0

Minor Changes

  • schema-utils precompile --minify (and the minify option of precompile) writes a smaller check that loads faster, minified with webpack's minifier (webpack 5.112.0 or later). (by @​alexander-akait in #235)

4.7.0

Minor Changes

  • schema-utils precompile writes an ES module check for a package with "type": "module", and precompile takes an esm option. (by @​alexander-akait in #233)

4.6.0

Minor Changes

  • perf: add schema-utils precompile to compile a schema ahead of time into a check that validate takes as its fourth argument, so valid options are validated without loading ajv (by @​alexander-akait in #231)
Commits
  • 17b5696 chore(release): new release (#239)
  • 518887b fix: bundle schema-utils without errors or warnings (#238)
  • b4b44eb build(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 (#237)
  • f25ba52 build(deps-dev): bump shell-quote from 1.10.0 to 1.12.0 (#230)
  • 2f15afa chore(release): new release (#236)
  • 898f9a0 feat: minify a precompiled check (#235)
  • f0e381d chore(release): new release (#234)
  • d2a27ef feat: precompile into an ES module for a "type": "module" package (#233)
  • a6e125a chore(release): new release (#232)
  • 576fa35 feat: precompile a schema into a check for validate (#231)
  • Additional commits viewable in compare view

Updates execa from 10.1.1 to 10.2.0

Release notes

Sourced from execa's releases.

v10.2.0

Behavior changes

These are bug fixes, but they might affect code that relied on the previous incorrect behavior.

  • Exceeding maxBuffer now terminates the subprocess with killSignal, instead of leaving it running and the promise pending f6de9be
  • maxBuffer: 0 now limits the output of synchronous methods, like asynchronous methods 224dd20
  • Options of $ set to undefined now use $'s defaults, such as inheriting stdin f61a6e9

Fixes

  • Fix invalid file descriptor objects, such as closed file handles, crashing the current process instead of throwing d0a5968
  • Fix synchronous transforms: errors being hidden, filtered output being returned on failure, mixed text and byte chunks being reordered, and final() being skipped without input 0ba2b6e ed80079 9c54833
  • Fix result.all changing objects when only stdout or stderr is buffered 8629132
  • Fix writing objects to a web WritableStream 5ea2900
  • Fix an invalid subprocess.duplex() option making later stream conversions hang 5e4345b
  • Fix execaNode() not running its file when the current process uses --print e747872

Types

  • Fix result and subprocess types when the options are a union, including IPC f5772f3 355d917 cb8aaf6
  • Fix result types when options bound with execa(options) are overridden or reset with undefined 708fed7
  • Fix subprocess.stdin types with the input and inputFile options 236c831
  • Fix chunk types of subprocess.iterable() with object-mode transforms a2912e5
  • Fix fd-specific option types, and execaNode() types with node: undefined 80b01e9 523cf9b

sindresorhus/execa@v10.1.1...v10.2.0

Commits
  • a605753 10.2.0
  • b87aab7 Fix link check in type tests
  • cb8aaf6 Fix IPC types for option unions
  • 80b01e9 Fix fd-specific option types
  • 355d917 Fix subprocess stream types for option unions
  • 523cf9b Fix execaNode() result types when the node option is undefined
  • 580b250 Add type tests for $'s stdin
  • 236c831 Fix subprocess.stdin and options.stdin types when an input source is prov...
  • f5772f3 Fix result types for fd-specific and union options
  • 708fed7 Fix result types for options bound with execa(options)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the dependencies group with 2 updates in the / directory: [schema-utils](https://github.com/webpack/schema-utils) and [execa](https://github.com/sindresorhus/execa).


Updates `schema-utils` from 4.5.0 to 4.8.1
- [Release notes](https://github.com/webpack/schema-utils/releases)
- [Changelog](https://github.com/webpack/schema-utils/blob/main/CHANGELOG.md)
- [Commits](webpack/schema-utils@v4.5.0...v4.8.1)

Updates `execa` from 10.1.1 to 10.2.0
- [Release notes](https://github.com/sindresorhus/execa/releases)
- [Commits](sindresorhus/execa@v10.1.1...v10.2.0)

---
updated-dependencies:
- dependency-name: schema-utils
  dependency-version: 4.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: execa
  dependency-version: 10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
@changeset-bot

changeset-bot Bot commented Oct 22, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 97d11c2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedexeca@​10.1.1 ⏵ 10.2.098100100 +192100
Updatedschema-utils@​4.5.0 ⏵ 4.8.19910010096100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants