Bump the npm_and_yarn group across 9 directories with 7 updates by dependabot[bot] · Pull Request #1452 · hyperledger/fabric-samples

dependabot · 2026-09-08T15:32:39Z

Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-basic/application-gateway-typescript directory: @humanfs/node and protobufjs.
Bumps the npm_and_yarn group with 5 updates in the /asset-transfer-basic/rest-api-typescript directory:

Package	From	To
protobufjs	`7.4.0`	`7.6.6`
@babel/core	`7.22.20`	`7.29.7`
js-yaml	`3.14.2`	`3.15.2`
body-parser	`2.2.2`	`2.3.0`
uuid	`9.0.1`	`removed`

Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-events/application-gateway-typescript directory: @humanfs/node and protobufjs.
Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-private-data/application-gateway-typescript directory: @humanfs/node and protobufjs.
Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-secured-agreement/application-gateway-typescript directory: @humanfs/node and protobufjs.
Bumps the npm_and_yarn group with 2 updates in the /full-stack-asset-transfer-guide/applications/conga-cards directory: @humanfs/node and protobufjs.
Bumps the npm_and_yarn group with 2 updates in the /full-stack-asset-transfer-guide/applications/trader-typescript directory: @humanfs/node and protobufjs.
Bumps the npm_and_yarn group with 2 updates in the /hardware-security-module/application-typescript directory: @humanfs/node and protobufjs.
Bumps the npm_and_yarn group with 2 updates in the /off_chain_data/application-typescript directory: @humanfs/node and protobufjs.

Updates @humanfs/node from 0.16.7 to 0.16.8

Release notes

Sourced from @humanfs/node's releases.

node: v0.16.8

0.16.8 (2026-04-17)

Bug Fixes

Include type dependencies at runtime (956ce7a), closes #145

Dependencies

The following workspace dependencies were updated

dependencies

@humanfs/core bumped from ^0.19.1 to ^0.19.2

Changelog

Sourced from @humanfs/node's changelog.

0.16.8 (2026-04-17)

Bug Fixes

Ensure symlinks are copied as symlinks in copy() and copyAll() (22bbaa44)

Include type dependencies at runtime (956ce7a), closes #145

Dependencies

The following workspace dependencies were updated

dependencies

@humanfs/core bumped from ^0.19.1 to ^0.19.2

Commits

e96070e chore: release main (#146)
22bbaa4 Merge commit from fork
956ce7a fix: Include type dependencies at runtime
See full diff in compare view

Updates protobufjs from 7.5.4 to 7.6.6

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.6.6

7.6.6 (2026-08-27)

Bug Fixes

Backport recent 8.x fixes to 7.x (#2422) (d3db676)

protobufjs: v7.6.5

7.6.5 (2026-07-04)

Bug Fixes

handle EOF during options parsing (#2352) (#2356) (10fba6d)

protobufjs: v7.6.4

7.6.4 (2026-06-12)

Bug Fixes

Reconfigure and speed up CI (#2329) (574f761)

Remove inquire submodule (#2327) (06ddd07)

protobufjs: v7.6.3

7.6.3 (2026-06-09)

Bug Fixes

Avoid name collisions in generated code (#2311) (78a9576)

Preserve null conversion behavior for fieldless messages (#2312) (df91652)

protobufjs: v7.6.2

7.6.2 (2026-05-30)

Bug Fixes

Backport consistency and correctness fixes (#2294) (a92f72e)

protobufjs: v7.6.1

7.6.1 (2026-05-22)

Bug Fixes

Backport misc utility hardening (#2280) (8a45c13)

Treat fixed64 as unsigned in converters (#2266) (479dfdc)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

7.6.6 (2026-08-27)

Bug Fixes

Backport recent 8.x fixes to 7.x (#2422) (d3db676)

7.6.5 (2026-07-04)

Bug Fixes

handle EOF during options parsing (#2352) (#2356) (10fba6d)

7.6.4 (2026-06-12)

Bug Fixes

Reconfigure and speed up CI (#2329) (574f761)

Remove inquire submodule (#2327) (06ddd07)

7.6.3 (2026-06-09)

Bug Fixes

Avoid name collisions in generated code (#2311) (78a9576)

Preserve null conversion behavior for fieldless messages (#2312) (df91652)

7.6.2 (2026-05-30)

Bug Fixes

Backport consistency and correctness fixes (#2294) (a92f72e)

7.6.1 (2026-05-22)

Bug Fixes

Backport misc utility hardening (#2280) (8a45c13)

Treat fixed64 as unsigned in converters (#2266) (479dfdc)

7.6.0 (2026-05-18)

Features

... (truncated)

Commits

795704d chore: release protobufjs-v7.x (#2423)
d3db676 fix: Backport recent 8.x fixes to 7.x (#2422)
fe82f72 chore: Update micromodule repository urls (#2362)
d29ff67 chore: release protobufjs-v7.x (#2361)
d1ae3ce perf: Batch String.fromCharCode in @protobufjs/utf8 read (#2355)
89048ba chore: release protobufjs-v7.x (#2357)
10fba6d fix: handle EOF during options parsing (#2352) (#2356)
f8f64ef chore: release protobufjs-v7.x (#2330)
574f761 fix: Reconfigure and speed up CI (#2329)
06ddd07 fix: Remove inquire submodule (#2327)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for protobufjs since your current version.

Updates protobufjs from 7.4.0 to 7.6.6

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.6.6

7.6.6 (2026-08-27)

Bug Fixes

Backport recent 8.x fixes to 7.x (#2422) (d3db676)

protobufjs: v7.6.5

7.6.5 (2026-07-04)

Bug Fixes

handle EOF during options parsing (#2352) (#2356) (10fba6d)

protobufjs: v7.6.4

7.6.4 (2026-06-12)

Bug Fixes

Reconfigure and speed up CI (#2329) (574f761)

Remove inquire submodule (#2327) (06ddd07)

protobufjs: v7.6.3

7.6.3 (2026-06-09)

Bug Fixes

Avoid name collisions in generated code (#2311) (78a9576)

Preserve null conversion behavior for fieldless messages (#2312) (df91652)

protobufjs: v7.6.2

7.6.2 (2026-05-30)

Bug Fixes

Backport consistency and correctness fixes (#2294) (a92f72e)

protobufjs: v7.6.1

7.6.1 (2026-05-22)

Bug Fixes

Backport misc utility hardening (#2280) (8a45c13)

Treat fixed64 as unsigned in converters (#2266) (479dfdc)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

7.6.6 (2026-08-27)

Bug Fixes

Backport recent 8.x fixes to 7.x (#2422) (d3db676)

7.6.5 (2026-07-04)

Bug Fixes

handle EOF during options parsing (#2352) (#2356) (10fba6d)

7.6.4 (2026-06-12)

Bug Fixes

Reconfigure and speed up CI (#2329) (574f761)

Remove inquire submodule (#2327) (06ddd07)

7.6.3 (2026-06-09)

Bug Fixes

Avoid name collisions in generated code (#2311) (78a9576)

Preserve null conversion behavior for fieldless messages (#2312) (df91652)

7.6.2 (2026-05-30)

Bug Fixes

Backport consistency and correctness fixes (#2294) (a92f72e)

7.6.1 (2026-05-22)

Bug Fixes

Backport misc utility hardening (#2280) (8a45c13)

Treat fixed64 as unsigned in converters (#2266) (479dfdc)

7.6.0 (2026-05-18)

Features

... (truncated)

Commits

795704d chore: release protobufjs-v7.x (#2423)
d3db676 fix: Backport recent 8.x fixes to 7.x (#2422)
fe82f72 chore: Update micromodule repository urls (#2362)
d29ff67 chore: release protobufjs-v7.x (#2361)
d1ae3ce perf: Batch String.fromCharCode in @protobufjs/utf8 read (#2355)
89048ba chore: release protobufjs-v7.x (#2357)
10fba6d fix: handle EOF during options parsing (#2352) (#2356)
f8f64ef chore: release protobufjs-v7.x (#2330)
574f761 fix: Reconfigure and speed up CI (#2329)
06ddd07 fix: Remove inquire submodule (#2327)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for protobufjs since your current version.

Updates @babel/core from 7.22.20 to 7.29.7

Release notes

Sourced from @babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
04ea6b2 v7.29.6
99f498a [7.x packport]Improve input source map handling (#18001)
feba0a3 Preserve original identifier names from input sourcemaps (#17992) (#17998)
aa8394e v7.29.0
ad0d03f [7.x backport] feat: Allow specifying startLine in code frame (#17739)
d7f4008 v7.28.6
e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/core since your current version.

Updates js-yaml from 3.14.2 to 3.15.2

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

[backport] Hard-limit merge sequence size to 100.

Security

[backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

3.15.1 - 2026-07-31

Security

[backport] Remove quadratic complexity from !!omap duplicate key detection.

3.15.0 - 2026-06-27

Added

Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one safeLoad() / safeLoadAll() call.

Commits

5c45bd6 3.15.2 released
5a708f9 dist rebuild
3485bc0 Backport merge limits from v5.4.1
f34812f Update .gitignore
ab85ae2 3.15.1 released
30a5e76 dist rebuild
22a8071 Backport quadratic complexity fix for !!omap
c34b6c4 3.15.0 released
21e13d3 dist rebuild
4165c62 Add v3-legacy tag for publish
Additional commits viewable in compare view

Updates body-parser from 2.2.2 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)

What's Changed

build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#681

build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in expressjs/body-parser#682

build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in expressjs/body-parser#683

build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/body-parser#685

build(deps): bump github/codeql-action from 4.31.2 to 4.31.9 by @dependabot[bot] in expressjs/body-parser#684

perf(urlencoded): move empty-body guard to avoid extra function closure by @Phillip9587 in expressjs/body-parser#647

Improve ESM compatibility by @Phillip9587 in expressjs/body-parser#697

docs: add recommendations for configuring payload limits by @bjohansebas in expressjs/body-parser#699

build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in expressjs/body-parser#701

build(deps): bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in expressjs/body-parser#702

build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in expressjs/body-parser#700

chore: add explicit type commonjs to package.json by @Phillip9587 in expressjs/body-parser#711

deps: update dependencies to latest versions by @Phillip9587 in expressjs/body-parser#708

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in expressjs/body-parser#712

build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by @dependabot[bot] in expressjs/body-parser#713

build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#714

fix: improve limit option validation by @Phillip9587 in expressjs/body-parser#698

build(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by @dependabot[bot] in expressjs/body-parser#719

build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in expressjs/body-parser#718

build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in expressjs/body-parser#717

perf: eliminate conditional check in json strict mode hot path by @Phillip9587 in expressjs/body-parser#651

ci: add node.js 26 to text matrix by @Phillip9587 in expressjs/body-parser#726

build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in expressjs/body-parser#725

build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in expressjs/body-parser#724

build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by @dependabot[bot] in expressjs/body-parser#723

Upgrade "content-type" by @blakeembrey in expressjs/body-parser#728

refactor: switch to const/let and enable eslint no-var rule by @Phillip9587 in expressjs/body-parser#729

Update outdated reference to MDN docs by @krzysdz in expressjs/body-parser#730

build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 by @dependabot[bot] in expressjs/body-parser#731

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in expressjs/body-parser#732

chore: updated deps to latest by @Phillip9587 in expressjs/body-parser#733

2.3.0 by @UlisesGascon in expressjs/body-parser#735

New Contributors

@krzysdz made their first contribution in expressjs/body-parser#730

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

Security fix for GHSA-v422-hmwv-36x6

fix: use static exports instead of lazy getters to improve ESM compatibility

feat: add subpath exports for individual parsers

fix: improve limit option validation (#698)

Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement

null and undefined fall back to the default 100kb limit

deps:

content-type@^2.0.0

http-errors@^2.0.1

iconv-lite^0.7.2

qs@^6.15.2

raw-body@^3.0.2

type-is@^2.1.0

Commits

d0f2ace 2.3.0 (#735)
7d03f2f chore: updated deps to latest (#733)
8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
ff0f6b9 docs: update outdated reference to MDN docs (#730)
14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
37f36a2 deps: update content-type and type-is (#728)
e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
Additional commits viewable in compare view

Updates browserslist from 4.21.10 to 4.28.9

Release notes

Sourced from browserslist's releases.

4.28.9

Improve or parsing performance (by @NotAFlightRisk).

4.28.8

Fixed including kaios in baseline queries (by @Jaybhade).

4.28.7

Improved parsing performance.

Fixed unbounded memory growth (by @alanturing881).

Fixed prototype write issue (by @alanturing881).

4.28.6

Fixed Electron version queries (by @spokodev).

4.28.5

Fixed > and >= queries (by @spokodev).

4.28.4

Fixed SyntaxError regression of 4.28.3.

4.28.3

Fixed baseline query case-insensitivity (by @swwind).

4.28.2

Fix prototype pollution (by @chluo1997).

4.28.1

Removed Baseline warning since we have it own warning.

4.27.0

Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

Fixed throwOnMissing with extends query (by @alexander-akait).

4.26.2

Fixed baseline-browser-mapping version requirement.

4.26.1

Updated Firefox ESR.

4.26.0

Added Baseline queries (by @tonypconway).

4.25.4

Fixed Windows support for custom stats (by @torgeilo).

4.25.3

Fixed ReDoS (by @ericcornelissen).

... (truncated)

Changelog

Sourced from browserslist's changelog.

4.28.9

Improve or parsing performance (by @NotAFlightRisk).

4.28.8

Fixed including kaios in baseline queries (by @Jaybhade).

4.28.7

Improved parsing performance.

Fixed unbounded memory growth (by @alanturing881).

Fixed prototype write issue (by @alanturing881).

4.28.6

Fixed Electron version queries (by @spokodev).

4.28.5

Fixed > and >= queries (by @spokodev).

4.28.4

Fixed SyntaxError regression of 4.28.3.

4.28.3

Fixed baseline query case-insensitivity (by @swwind).

4.28.2

Fix prototype pollution (by @chluo1997).

4.28.1

Removed Baseline warning since we have it own warning.

4.48.0

Added firefox >= esr query support (by @SethFalco).

Fixed docs (by @SethFalco).

4.27.0

Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

Fixed throwOnMissing with extends query (by @alexander-akait).

... (truncated)

Commits

12ed525 Release 4.28.9 version
b1d8cf9 Update dependencies
21517b6 Improve or parsing performance
f2f2e6c Release 4.28.8 version
d0787c8 Update dependencies
fcf8fa9 Merge pull request #939 from Jaybhade/fix/baseline-kaios-without-downstream
57ecd64 fix: support "including kaios" without downstream
093a0f6 Update EM banner
b637868 Release 4.28.7 version
313f465 Update dependencies
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for browserslist since your current version.

Removes uuid

Updates @humanfs/node from 0.16.7 to 0.16.8

Release notes

Sourced from @humanfs/node's releases.

node: v0.16.8

0.16.8 (2026-04-17)

Bug Fixes

Include type dependencies at runtime (956ce7a), closes #145

Dependencies

The following workspace dependencies were updated

dependencies

@humanfs/core bumped from ^0.19.1 to ^0.19.2

Changelog

Sourced from @humanfs/node's changelog.

0.16.8 (2026-04-17)

Bug Fixes

Ensure symlinks are copied as symlinks in copy() and copyAll() (22bbaa44)

Include type dependencies at runtime (956ce7a), closes #145

Dependencies

The following workspace dependencies were updated

dependencies

@humanfs/core bumped from ^0.19.1 to ^0.19.2

Commits

e96070e chore: release main (#146)
22bbaa4 Merge commit from fork
956ce7a fix: Include type dependencies at runtime
See full diff in compare view

Updates protobufjs from 7.5.4 to 7.6.6

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.6.6

7.6.6 (2026-08-27)

Bug Fixes

Backport recent 8.x fixes to 7.x (#2422) (d3db676)

protobufjs: v7.6.5

7.6.5 (2026-07-04)

Bug Fixes

handle EOF during options parsing (#2352) (#2356) (10fba6d)

protobufjs: v7.6.4

7.6.4 (2026-06-12)

Bug Fixes

Reconfigure and speed up CI (#2329) (574f761)

Remove inquire submodule (#2327) (06ddd07)

protobufjs: v7.6.3

7.6.3 (2026-06-09)

Bug Fixes

Avoid name collisions in generated code (#2311) (78a9576)

Preserve null conversion behavior for fieldless messages (#2312) (df91652)

protobufjs: v7.6.2

7.6.2 (2026-05-30)

Bug Fixes

Backport consistency and correctness fixes (#2294) (a92f72e)

protobufjs: v7.6.1

7.6.1 (2026-05-22)

Bug Fixes

Backport misc utility hardening (#2280) (8a45c13)

Treat fixed64 as unsigned in converters (#2266) (479dfdc)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

7.6.6 (2026-08-27)

Bug Fixes

Backport recent 8.x fixes to 7.x (#2422) (d3db676)

7.6.5 (2026-07-04)

Bug Fixes

handle EOF during options parsing (#2352) (#2356) (10fba6d)

7.6.4 (2026-06-12)

Bug Fixes

Reconfigure and speed up CI (#2329) (574f761)

Remove inquire submodule (#2327) (06ddd07)

7.6.3 (2026-06-09)

Bug Fixes

Avoid name collisions in generated code (#2311) (78a9576)

Preserve null conversion behavior for fieldless messages (#2312) (df91652)

7.6.2 (2026-05-30)

Bug Fixes

Backport consistency and correctness fixes (#2294) (a92f72e)

7.6.1 (2026-05-22)

Bug Fixes

Backport misc utility hardening (#2280) (8a45c13)

Treat fixed64 as unsigned in converters (#2266) (479dfdc)

7.6.0 (2026-05-18)

Features

... (truncated)

Commits

795704d chore: release protobufjs-v7.x (#2423)
d3db676 fix: Backport recent 8.x fixes to 7.x (

Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-basic/application-gateway-typescript directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Bumps the npm_and_yarn group with 5 updates in the /asset-transfer-basic/rest-api-typescript directory: | Package | From | To | | --- | --- | --- | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.4.0` | `7.6.6` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.22.20` | `7.29.7` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.2` | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` | | [uuid](https://github.com/uuidjs/uuid) | `9.0.1` | `removed` | Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-events/application-gateway-typescript directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-private-data/application-gateway-typescript directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Bumps the npm_and_yarn group with 2 updates in the /asset-transfer-secured-agreement/application-gateway-typescript directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Bumps the npm_and_yarn group with 2 updates in the /full-stack-asset-transfer-guide/applications/conga-cards directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Bumps the npm_and_yarn group with 2 updates in the /full-stack-asset-transfer-guide/applications/trader-typescript directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Bumps the npm_and_yarn group with 2 updates in the /hardware-security-module/application-typescript directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Bumps the npm_and_yarn group with 2 updates in the /off_chain_data/application-typescript directory: [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) and [protobufjs](https://github.com/protobufjs/protobuf.js). Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `protobufjs` from 7.4.0 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `@babel/core` from 7.22.20 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core) Updates `js-yaml` from 3.14.2 to 3.15.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.2...3.15.2) Updates `body-parser` from 2.2.2 to 2.3.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.2...v2.3.0) Updates `browserslist` from 4.21.10 to 4.28.9 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.21.10...4.28.9) Removes `uuid` Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) Updates `@humanfs/node` from 0.16.7 to 0.16.8 - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) Updates `protobufjs` from 7.5.4 to 7.6.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.6.6) --- updated-dependencies: - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/core" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.15.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 2.3.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserslist dependency-version: 4.28.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.6 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

bestbeforetoday · 2026-09-08T18:05:05Z

@dependabot rebase

dependabot · 2026-09-08T18:05:09Z

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 8, 2026

dependabot Bot requested a review from a team as a code owner September 8, 2026 15:32

dependabot Bot added javascript Pull requests that update Javascript code dependencies Pull requests that update a dependency file labels Sep 8, 2026

Navigation Menu

Bump the npm_and_yarn group across 9 directories with 7 updates - #1452

Bump the npm_and_yarn group across 9 directories with 7 updates#1452
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/asset-transfer-basic/application-gateway-typescript/npm_and_yarn-4fe0996e5c

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

bestbeforetoday commented Sep 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 8, 2026

node: v0.16.8

0.16.8 (2026-04-17)

Bug Fixes

Dependencies

0.16.8 (2026-04-17)

Bug Fixes

Dependencies

protobufjs: v7.6.6

7.6.6 (2026-08-27)

Bug Fixes

protobufjs: v7.6.5

7.6.5 (2026-07-04)

Bug Fixes

protobufjs: v7.6.4

7.6.4 (2026-06-12)

Bug Fixes

protobufjs: v7.6.3

7.6.3 (2026-06-09)

Bug Fixes

protobufjs: v7.6.2

7.6.2 (2026-05-30)

Bug Fixes

protobufjs: v7.6.1

7.6.1 (2026-05-22)

Bug Fixes

7.6.6 (2026-08-27)

Bug Fixes

7.6.5 (2026-07-04)

Bug Fixes

7.6.4 (2026-06-12)

Bug Fixes

7.6.3 (2026-06-09)

Bug Fixes

7.6.2 (2026-05-30)

Bug Fixes

7.6.1 (2026-05-22)

Bug Fixes

7.6.0 (2026-05-18)

Features

protobufjs: v7.6.6

7.6.6 (2026-08-27)

Bug Fixes

protobufjs: v7.6.5

7.6.5 (2026-07-04)

Bug Fixes

protobufjs: v7.6.4

7.6.4 (2026-06-12)

Bug Fixes

protobufjs: v7.6.3

7.6.3 (2026-06-09)

Bug Fixes

protobufjs: v7.6.2

7.6.2 (2026-05-30)

Bug Fixes

protobufjs: v7.6.1

7.6.1 (2026-05-22)

Bug Fixes

7.6.6 (2026-08-27)

Bug Fixes

7.6.5 (2026-07-04)

Bug Fixes

7.6.4 (2026-06-12)

Bug Fixes

7.6.3 (2026-06-09)

Bug Fixes

7.6.2 (2026-05-30)

Bug Fixes

7.6.1 (2026-05-22)

Bug Fixes

7.6.0 (2026-05-18)

Features

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)