Skip to content

Bump the non-major group across 1 directory with 7 updates - #44

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/non-major-f942c9c535
Closed

Bump the non-major group across 1 directory with 7 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/non-major-f942c9c535

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the non-major group with 7 updates in the / directory:

Package From To
@types/openui5 1.142.0 1.148.0
@ui5/cli 4.0.53 4.0.55
@ui5/linter 1.21.1 1.21.2
typescript-eslint 8.59.4 8.60.1
ui5-middleware-livereload 3.3.0 3.3.1
ui5-middleware-simpleproxy 3.7.0 3.8.0
ui5-tooling-transpile 3.11.0 3.11.2

Updates @types/openui5 from 1.142.0 to 1.148.0

Commits

Updates @ui5/cli from 4.0.53 to 4.0.55

Release notes

Sourced from @​ui5/cli's releases.

v4.0.55

Dependency Updates

  • Bump @​ui5/fs from 4.0.5 to 4.0.6 1eb4306

All changes

v4.0.54...v4.0.55

v4.0.54

All changes

v4.0.53...v4.0.54

Changelog

Sourced from @​ui5/cli's changelog.

[v4.0.55] - 2026-05-26

Dependency Updates

[v4.0.54] - 2026-05-27

Commits
  • 7bd8d2d Release 4.0.55
  • dacedd5 [INTERNAL] Harden workflows
  • eff9979 [INTERNAL] Disallow npm dependencies from git
  • 40c944f [INTERNAL] Enable two-day cooldown for dependabot
  • 8f6cfff [INTERNAL] Pin actions to commit hash
  • 1eb4306 [DEPENDENCY] Bump @​ui5/fs from 4.0.5 to 4.0.6
  • 1341cef [INTERNAL] CI: Add Node.js 25 and 26 to test matrix
  • 586cdfb [INTERNAL] CI: Add check-engine script and replace --engine-strict
  • 63be78b [INTERNAL] CI: Migrate from Azure Pipelines to GitHub Actions
  • 157102b Release 4.0.54
  • Additional commits viewable in compare view

Updates @ui5/linter from 1.21.1 to 1.21.2

Release notes

Sourced from @​ui5/linter's releases.

v1.21.2

1.21.2 (2026-05-31)

Dependencies

  • lockfile: In-range update of npm dependencies (204f499)
  • lockfile: In-range update of npm dependencies (7f637c6)
  • lockfile: In-range update of npm dependencies (394f5fb)
  • lockfile: In-range update of npm dependencies (f2dc65a)
  • lockfile: In-range update of npm dependencies (2a1e684)
Changelog

Sourced from @​ui5/linter's changelog.

1.21.2 (2026-05-31)

Dependencies

  • lockfile: In-range update of npm dependencies (204f499)
  • lockfile: In-range update of npm dependencies (7f637c6)
  • lockfile: In-range update of npm dependencies (394f5fb)
  • lockfile: In-range update of npm dependencies (f2dc65a)
  • lockfile: In-range update of npm dependencies (2a1e684)
Commits
  • 5038d44 release: v1.21.2
  • 204f499 deps(lockfile): In-range update of npm dependencies
  • f09019f ci: Harden workflows
  • 7f637c6 deps(lockfile): In-range update of npm dependencies
  • 394f5fb deps(lockfile): In-range update of npm dependencies
  • e10d2ae ci(github-actions): Bump actions/stale from 10.2.0 to 10.3.0
  • e848322 ci(github-actions): Bump actions/stale from 10 to 10.2.0
  • a7b69a0 ci: Enable two-day cooldown for dependabot
  • 5dbfdae ci: Disallow npm dependencies from git
  • 3ce9b01 ci: Pin actions to commit hash
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.59.4 to 8.60.1

Release notes

Sourced from typescript-eslint's releases.

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

  • eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)
  • eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

  • rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

  • playground TS version selector is not working (#12326, #12325)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.60.1 (2026-06-01)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.0 (2026-05-25)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates ui5-middleware-livereload from 3.3.0 to 3.3.1

Release notes

Sourced from ui5-middleware-livereload's releases.

ui5-tooling-modules@3.37.1

Patch Changes

  • #1373 3c544b7 Thanks @​petermuessig! - Harden rewriteDep path-segment stripping to defeat crafted inputs like ....// that previously left a residual ../. Addresses CodeQL alert js/incomplete-multi-character-sanitization (#268).

cds-plugin-ui5@0.17.3

Patch Changes

ui5-middleware-cap@3.3.6

Patch Changes

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

ui5-tooling-transpile@3.11.2

Patch Changes

  • #1370 dd71c42 Thanks @​petermuessig! - Bump runtime dependencies to clear open dependabot alerts and pick up upstream patch releases:
    • cds-plugin-ui5: semver ^7.8.0 → ^7.8.1
    • ui5-middleware-approuter: @sap/approuter ^22.0.0 → ^22.0.1
    • ui5-middleware-serveframework: node-fetch ^2.7.0 → ^3.3.2
    • ui5-middleware-websocket: ws ^8.20.1 → ^8.21.0
    • ui5-task-copyright: @typescript-eslint/typescript-estree ^8.59.3 → ^8.60.0
    • ui5-tooling-transpile: @babel/core, @babel/preset-env, @babel/preset-typescript → ^7.29.7

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

ui5-middleware-simpleproxy@3.8.0

Minor Changes

  • #1370 dd71c42 Thanks @​petermuessig! - Upgrade http-proxy-middleware to v4. v4 ships as ESM-only and requires Node >= 22.15.0 (already the CI baseline). The exposed API surface used here (target, changeOrigin, secure, agent, auth, headers, pathFilter, pathRewrite, selfHandleResponse, xfwd, autoRewrite, on.proxyReq/proxyRes, responseInterceptor, proxyMiddleware.upgrade) is unchanged; the require() calls were switched to dynamic await import() inside the existing async scopes — same pattern already used for proxy-from-env and https-proxy-agent.

Patch Changes

  • #1370 dd71c42 Thanks @​petermuessig! - Bump minimatch from v7 to v10. v9 dropped the default export, so the five require("minimatch") sites were switched to the named export const { minimatch } = require("minimatch"). The runtime call shape minimatch(path, pattern) is unchanged. minimatch 8 raised the Node floor to 20+, which already matches the workspace engines (Node 22 in CI).

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

ui5-middleware-websocket@3.2.2

Patch Changes

  • #1370 dd71c42 Thanks @​petermuessig! - Bump runtime dependencies to clear open dependabot alerts and pick up upstream patch releases:
    • cds-plugin-ui5: semver ^7.8.0 → ^7.8.1
    • ui5-middleware-approuter: @sap/approuter ^22.0.0 → ^22.0.1

... (truncated)

Changelog

Sourced from ui5-middleware-livereload's changelog.

3.3.1 (2026-05-21)

Note: Version bump only for package ui5-middleware-livereload

Commits

Updates ui5-middleware-simpleproxy from 3.7.0 to 3.8.0

Changelog

Sourced from ui5-middleware-simpleproxy's changelog.

3.8.0

Minor Changes

  • #1370 dd71c42 Thanks @​petermuessig! - Upgrade http-proxy-middleware to v4. v4 ships as ESM-only and requires Node >= 22.15.0 (already the CI baseline). The exposed API surface used here (target, changeOrigin, secure, agent, auth, headers, pathFilter, pathRewrite, selfHandleResponse, xfwd, autoRewrite, on.proxyReq/proxyRes, responseInterceptor, proxyMiddleware.upgrade) is unchanged; the require() calls were switched to dynamic await import() inside the existing async scopes — same pattern already used for proxy-from-env and https-proxy-agent.

Patch Changes

  • #1370 dd71c42 Thanks @​petermuessig! - Bump minimatch from v7 to v10. v9 dropped the default export, so the five require("minimatch") sites were switched to the named export const { minimatch } = require("minimatch"). The runtime call shape minimatch(path, pattern) is unchanged. minimatch 8 raised the Node floor to 20+, which already matches the workspace engines (Node 22 in CI).

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

3.7.1 (2026-05-21)

Note: Version bump only for package ui5-middleware-simpleproxy

Commits
  • 5708388 chore(release): publish
  • 326d02a chore: bump minimatch from 7 to 10 across packages
  • e691042 feat(ui5-middleware-simpleproxy, ui5-middleware-approuter): upgrade http-prox...
  • 0e1de5b chore(release): publish
  • 804db50 chore: simplify LICENSE and standardize README license sections (#1350)
  • 153841c chore: update dependencies and bump OpenUI5 to 1.148.0 (#1349)
  • See full diff in compare view

Updates ui5-tooling-transpile from 3.11.0 to 3.11.2

Changelog

Sourced from ui5-tooling-transpile's changelog.

3.11.2

Patch Changes

  • #1370 dd71c42 Thanks @​petermuessig! - Bump runtime dependencies to clear open dependabot alerts and pick up upstream patch releases:
    • cds-plugin-ui5: semver ^7.8.0 → ^7.8.1
    • ui5-middleware-approuter: @sap/approuter ^22.0.0 → ^22.0.1
    • ui5-middleware-serveframework: node-fetch ^2.7.0 → ^3.3.2
    • ui5-middleware-websocket: ws ^8.20.1 → ^8.21.0
    • ui5-task-copyright: @typescript-eslint/typescript-estree ^8.59.3 → ^8.60.0
    • ui5-tooling-transpile: @babel/core, @babel/preset-env, @babel/preset-typescript → ^7.29.7

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

3.11.1 (2026-05-21)

Note: Version bump only for package ui5-tooling-transpile

Commits
  • 5708388 chore(release): publish
  • 04cbb7c chore: prepare for dependabot fixes and modernize bundling
  • 0e1de5b chore(release): publish
  • 804db50 chore: simplify LICENSE and standardize README license sections (#1350)
  • 153841c chore: update dependencies and bump OpenUI5 to 1.148.0 (#1349)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the non-major group across 1 directory with 7 updates
41852de 
Bumps the non-major group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/openui5](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/openui5) | `1.142.0` | `1.148.0` |
| [@ui5/cli](https://github.com/SAP/ui5-cli) | `4.0.53` | `4.0.55` |
| [@ui5/linter](https://github.com/UI5/linter) | `1.21.1` | `1.21.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.4` | `8.60.1` |
| [ui5-middleware-livereload](https://github.com/ui5-community/ui5-ecosystem-showcase/tree/HEAD/packages/ui5-middleware-livereload) | `3.3.0` | `3.3.1` |
| [ui5-middleware-simpleproxy](https://github.com/ui5-community/ui5-ecosystem-showcase/tree/HEAD/packages/ui5-middleware-simpleproxy) | `3.7.0` | `3.8.0` |
| [ui5-tooling-transpile](https://github.com/ui5-community/ui5-ecosystem-showcase/tree/HEAD/packages/ui5-tooling-transpile) | `3.11.0` | `3.11.2` |



Updates `@types/openui5` from 1.142.0 to 1.148.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/openui5)

Updates `@ui5/cli` from 4.0.53 to 4.0.55
- [Release notes](https://github.com/SAP/ui5-cli/releases)
- [Changelog](https://github.com/SAP/ui5-cli/blob/v4/CHANGELOG.md)
- [Commits](SAP/ui5-cli@v4.0.53...v4.0.55)

Updates `@ui5/linter` from 1.21.1 to 1.21.2
- [Release notes](https://github.com/UI5/linter/releases)
- [Changelog](https://github.com/UI5/linter/blob/main/CHANGELOG.md)
- [Commits](UI5/linter@v1.21.1...v1.21.2)

Updates `typescript-eslint` from 8.59.4 to 8.60.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/typescript-eslint)

Updates `ui5-middleware-livereload` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ui5-community/ui5-ecosystem-showcase/releases)
- [Changelog](https://github.com/ui5-community/ui5-ecosystem-showcase/blob/main/packages/ui5-middleware-livereload/CHANGELOG.md)
- [Commits](https://github.com/ui5-community/ui5-ecosystem-showcase/commits/ui5-middleware-livereload@3.3.1/packages/ui5-middleware-livereload)

Updates `ui5-middleware-simpleproxy` from 3.7.0 to 3.8.0
- [Release notes](https://github.com/ui5-community/ui5-ecosystem-showcase/releases)
- [Changelog](https://github.com/ui5-community/ui5-ecosystem-showcase/blob/main/packages/ui5-middleware-simpleproxy/CHANGELOG.md)
- [Commits](https://github.com/ui5-community/ui5-ecosystem-showcase/commits/ui5-middleware-simpleproxy@3.8.0/packages/ui5-middleware-simpleproxy)

Updates `ui5-tooling-transpile` from 3.11.0 to 3.11.2
- [Release notes](https://github.com/ui5-community/ui5-ecosystem-showcase/releases)
- [Changelog](https://github.com/ui5-community/ui5-ecosystem-showcase/blob/main/packages/ui5-tooling-transpile/CHANGELOG.md)
- [Commits](https://github.com/ui5-community/ui5-ecosystem-showcase/commits/ui5-tooling-transpile@3.11.2/packages/ui5-tooling-transpile)

---
updated-dependencies:
- dependency-name: "@types/openui5"
  dependency-version: 1.148.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: "@ui5/cli"
  dependency-version: 4.0.55
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: "@ui5/linter"
  dependency-version: 1.21.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: typescript-eslint
  dependency-version: 8.60.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: ui5-middleware-livereload
  dependency-version: 3.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: ui5-middleware-simpleproxy
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: ui5-tooling-transpile
  dependency-version: 3.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 10, 2026
@akudev

akudev commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/non-major-f942c9c535 branch June 10, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@akudev