Skip to content

Bump the npm_and_yarn group across 16 directories with 14 updates - #2

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/database/Bdash/npm_and_yarn-d78f688737
Open

Bump the npm_and_yarn group across 16 directories with 14 updates#2
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/database/Bdash/npm_and_yarn-d78f688737

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 2 updates in the /database/Bdash directory: electron-updater and mysql2.
Bumps the npm_and_yarn group with 2 updates in the /database/CPod directory: electron-updater and sanitize-html.
Bumps the npm_and_yarn group with 1 update in the /database/Jan directory: pacote.
Bumps the npm_and_yarn group with 2 updates in the /database/MyDeck directory: jsondiffpatch and uuid.
Bumps the npm_and_yarn group with 2 updates in the /database/ShuffleStudy directory: electron-updater and sanitize-html.
Bumps the npm_and_yarn group with 2 updates in the /database/Whalebird directory: sanitize-html and axios.
Bumps the npm_and_yarn group with 2 updates in the /database/cumulonimbus directory: electron-updater and sanitize-html.
Bumps the npm_and_yarn group with 4 updates in the /database/polar-bookshelf directory: electron-updater, sanitize-html, uuid and adm-zip.
Bumps the npm_and_yarn group with 4 updates in the /database/westeroscraftlauncher directory: electron-updater, uuid, adm-zip and ejs.
Bumps the npm_and_yarn group with 3 updates in the /database/whu-library-seat directory: electron-updater, axios and node-notifier.
Bumps the npm_and_yarn group with 1 update in the /database/x-loc directory: materialize-css.
Bumps the npm_and_yarn group with 1 update in the /database/x32-mute-matrix directory: electron-updater.
Bumps the npm_and_yarn group with 1 update in the /database/youtube-music directory: electron-updater.
Bumps the npm_and_yarn group with 3 updates in the /database/youtube-music-desktop directory: electron-updater, axios and xml2js.
Bumps the npm_and_yarn group with 2 updates in the /database/zeltrez directory: axios and web3.
Bumps the npm_and_yarn group with 1 update in the /database/zmNinja directory: cordova-plugin-inappbrowser.

Updates electron-updater from 2.21.4 to 6.3.0

Changelog

Sourced from electron-updater's changelog.

6.3.0

Minor Changes

Patch Changes

6.3.0-alpha.8

Patch Changes

6.3.0-alpha.7

Patch Changes

6.3.0-alpha.6

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by onegoldfishh, a new releaser for electron-updater since your current version.


Updates mysql2 from 1.5.1 to 3.22.0

Release notes

Sourced from mysql2's releases.

v3.22.0

3.22.0 (2026-04-10)

Features

  • disable mysql_clear_password plugin by default (#4236) (884bec5), closes #1617
  • implement COM_RESET_CONNECTION with pool integration (#4148) (49a64cc)

Performance Improvements

  • defer Error object creation to error handlers in promise wrappers (#4257) (ab131de)

v3.21.1

3.21.1 (2026-04-09)

Bug Fixes

  • limit client flags to server capabilities (#4227) (e1930b8)
  • use Number.isSafeInteger for supportBigNumbers boundary check (#4225) (295264b)

v3.21.0

3.21.0 (2026-04-09)

Features

  • add support for query attributes (#4223) (d732f78)
  • types: export ExecuteValues and QueryValues from entry point (9fafd6f)

v3.20.0

3.20.0 (2026-03-15)

Features

  • add TracingChannel support for native APM instrumentation (#4178) (c06afc2)

Bug Fixes

  • explicitly specify in auth plugins (#4175) (#4187) (5ac5563)
  • prevent double release from corrupting the connection pool (#4186) (7e57db6)
  • restore PoolConnection as subclass of Connection (#4183) (97855a6)

v3.19.1

3.19.1 (2026-03-09)

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.22.0 (2026-04-10)

Features

  • disable mysql_clear_password plugin by default (#4236) (884bec5), closes #1617
  • implement COM_RESET_CONNECTION with pool integration (#4148) (49a64cc)

Performance Improvements

  • defer Error object creation to error handlers in promise wrappers (#4257) (ab131de)

3.21.1 (2026-04-09)

Bug Fixes

  • limit client flags to server capabilities (#4227) (e1930b8)
  • use Number.isSafeInteger for supportBigNumbers boundary check (#4225) (295264b)

3.21.0 (2026-04-09)

Features

  • add support for query attributes (#4223) (d732f78)
  • types: export ExecuteValues and QueryValues from entry point (9fafd6f)

3.20.0 (2026-03-15)

Features

  • add TracingChannel support for native APM instrumentation (#4178) (c06afc2)

Bug Fixes

  • explicitly specify in auth plugins (#4175) (#4187) (5ac5563)
  • prevent double release from corrupting the connection pool (#4186) (7e57db6)
  • restore PoolConnection as subclass of Connection (#4183) (97855a6)

3.19.1 (2026-03-09)

Bug Fixes

  • bound null-terminated string read to packet end (fixes a potential OOB read reported by Doruk Tan Ozturk (peaktwilight)) (#4161) (91c5229)
  • handle malformed geometry payloads (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#4164) (1869215)

... (truncated)

Commits
  • 71bcbff chore(master): release 3.22.0 (#4237)
  • ab131de perf: defer Error object creation to error handlers in promise wrappers (#4257)
  • bb0100b build(deps-dev): bump the website-dev-dependencies group across 1 directory w...
  • 5f63557 build(deps-dev): bump the dev-dependencies group across 1 directory with 4 up...
  • 0b750e0 build(deps): bump the docusaurus group in /website with 2 updates (#4249)
  • 9566475 ci(dependabot): group dependency updates to reduce PR noise (#4248)
  • e4f3b42 build(deps): bump the react group in /website with 2 updates (#4247)
  • 53f9c9e ci(dependabot): group react and react-dom updates together (#4246)
  • 49a64cc feat: implement COM_RESET_CONNECTION with pool integration (#4148)
  • 884bec5 feat: disable mysql_clear_password plugin by default (#4236)
  • Additional commits viewable in compare view

Updates electron-updater from 2.23.3 to 6.8.9

Changelog

Sourced from electron-updater's changelog.

6.3.0

Minor Changes

Patch Changes

6.3.0-alpha.8

Patch Changes

6.3.0-alpha.7

Patch Changes

6.3.0-alpha.6

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by onegoldfishh, a new releaser for electron-updater since your current version.


Updates sanitize-html from 1.27.5 to 2.17.7

Changelog

Sourced from sanitize-html's changelog.

2.17.7 (2026-08-13)

Security

  • Fixed an XSS / URL scheme policy bypass affecting configurations that allow the SVG animation elements (animate, animateColor, animateMotion, animateTransform or set) together with attributeName and one of the animation value attributes. The default configuration was not affected, as these elements are not in the default allowedTags. apostrophecms was not affected. Thanks to koyokr for responsibly disclosing the vulnerability (GHSA-g8qq-57p8-ggw5).

2.17.6 (2026-07-10)

Fixes

  • Allow transformTags to emit text when textFilter is set, even if the tag is initially empty. This is consistent with the documentation. Thanks to spokodev for the fix.

Security

  • Fixed an XSS/allowlist bypass in which the contents of a raw-text element (textarea or xmp) nested inside an svg or math root were re-emitted without HTML-escaping. sanitize-html treated that content as inert raw text because htmlparser2 10.x classified raw-text elements by tag name and ignored the namespace, but a real HTML5 parser treats textarea/xmp as ordinary foreign elements inside SVG/MathML and re-parses their contents as live markup. As a result, markup and event-handler attributes that the allowlist never permitted (for example <svg><textarea><img src=x onerror=alert(1)>) could survive sanitization and execute in the browser. This is now fixed on two fronts: htmlparser2 was upgraded to 12.x, which is namespace-aware and parses textarea/xmp inside SVG/MathML as ordinary elements, so their non-allowlisted children (such as the injected img) are dropped by the allowlist instead of being preserved as raw text; and any raw-text content sanitize-html still emits for these tags (at HTML integration points such as foreignObject/mtext, or outside foreign content) is always HTML-escaped. The default configuration is not affected; the precondition is an allowedTags that includes svg or math together with textarea or xmp. Thanks to khoadb175 for responsibly disclosing the vulnerability.
  • Fixed a mutation-XSS / allowedTags bypass affecting configurations that allow the textarea or xmp raw-text tags. htmlparser2 10.x did not recognize an end tag with a trailing solidus (e.g. </textarea/>) as closing the element, so it kept the following markup as raw text, but a spec-compliant browser treats </textarea/> as a valid close and parses that markup as a live element. Because raw-text content was re-emitted without escaping, a payload such as <textarea></textarea/><img src=x onerror=...> could smuggle non-allowlisted, executable markup through the sanitizer. The default configuration was not affected. This is now defended at two layers: htmlparser2 was upgraded to 12.x, whose tokenizer closes these end tags correctly, and the raw text sanitize-html emits for these tags is always escaped so no < can reopen a tag when the output is re-parsed (textarea, an RCDATA element whose entities htmlparser2 decodes, is escaped like normal text, while xmp, a raw-text element, has only its angle brackets escaped to avoid double-encoding already-encoded entities). Because htmlparser2 is ESM-only from version 11 onward, sanitize-html now requires Node.js >=22.12.0 (the first 22.x release in which require() of an ES module is available unflagged). Thanks to bibu123456 for reporting the vulnerability and Kayiz-PT for coordinating the disclosure (GHSA-jxwj-j7wr-gfrw).

2.17.5 (2026-06-10)

Security

  • Added a number of new attributes to be protected against unsafe URLs, e.g. javascript: and similar. None of these are used in the default configuration of sanitize-html or apostrophe or likely to be used there, and some attributes, like an action for a form, are inherently unsafe to allow if XSS protection is your goal. Nevertheless it makes sense to block certain URL types where they are not appropriate. Some attributes are not supported at all by modern browsers but are included for completeness. Thanks to crattack for reporting the vulnerability.
  • Address a potential vulnerability when nonTextTags is configured in a nonstandard way. While it is never a good idea to remove known non-text tags from the standard list e.g. script, styles, etc., this change ensures that doing so does not result in nested tags being passed through without sanitization when they are not expressly allowed. (ApostropheCMS would never trigger this situation.) Thanks to Dipanshu singh for pointing out the issue and contributing the fix.

2.17.4

Changes

  • sanitize-html and launder now share a single implementation of naughtyHref, based on that which previously existed in sanitize-html.

Security

  • Security vulnerability: the xmp tag could be used to pass forbidden markup through sanitize-html, even when xmp itself is not explicitly allowed All users of sanitize-html should update immediately. Thanks to Vincenzo Turturro for reporting the vulnerability.

2.17.3 (2026-04-15)

Security

  • Fix vulnerability introduced in version 2.17.2 that allowed XSS attacks if the developer chose to permit option tags. There was no vulnerability when not explicitly allowing option tags.

2.17.2 (2026-03-19)

Changes

  • Upgrade htmlparser2 from 8.x to 10.1.0. This improves security by correctly decoding zero-padded numeric character references (e.g., &[#0000001](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html/issues/0000001)) that previously bypassed javascript: URL detection. Also fixes double-encoding of entities inside raw text elements like textarea and option.

2.17.1 (2026-02-18)

Fixes

... (truncated)

Commits

Updates pacote from 17.0.7 to 22.0.0

Release notes

Sourced from pacote's releases.

v22.0.0

22.0.0 (2026-06-15)

⚠️ BREAKING CHANGES

  • pacote now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • git specs using the https or git+https protocol now resolve to git+https URLs instead of being switched to git+ssh. Shortcut specs (e.g. github:user/repo, user/repo) and git+ssh/git:// specs are unchanged.

Features

Bug Fixes

Dependencies

Chores

v21.5.1

21.5.1 (2026-06-09)

Bug Fixes

Chores

v21.5.0

21.5.0 (2026-03-09)

... (truncated)

Changelog

Sourced from pacote's changelog.

22.0.0 (2026-06-15)

⚠️ BREAKING CHANGES

  • pacote now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • git specs using the https or git+https protocol now resolve to git+https URLs instead of being switched to git+ssh. Shortcut specs (e.g. github:user/repo, user/repo) and git+ssh/git:// specs are unchanged.

Features

Bug Fixes

Dependencies

Chores

21.5.0 (2026-03-09)

Features

Chores

21.4.0 (2026-02-24)

Features

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pacote since your current version.


Updates jsondiffpatch from 0.4.1 to 0.7.6

Release notes

Sourced from jsondiffpatch's releases.

v0.6.0

Breaking changes

  • This package is now pure ESM. For more info, please read Sindre Sorhus's FAQ (#350).
  • Supported Node versions are ^18.0.0 || >=20.0.0 (#350).
  • Requires ES6 support (#350).
  • There is no longer a default export. Import this package by using import * as jsondiffpatch from 'jsondiffpatch' or by importing individual methods (#350).
  • Formatters are no longer exported from the main entry-point and must be imported from subpaths (#350):
    • import * as annotatedFormatter from 'jsondiffpatch/formatters/annotated'
    • import * as baseFormatter from 'jsondiffpatch/formatters/base'
    • import * as consoleFormatter from 'jsondiffpatch/formatters/console'
    • import * as htmlFormatter from 'jsondiffpatch/formatters/html'
    • import * as jsonpatchFormatter from 'jsondiffpatch/formatters/jsonpatch'
  • Updated CSS imports (#350):
    • import 'jsondiffpatch/formatters/styles/html.css'
    • import 'jsondiffpatch/formatters/styles/annotated.css'
  • The main entry-point no longer includes text diffing by default. Either pass in the diff-match-patch library via the textDiff.diffMatchPatch option, or use the jsondiffpatch/with-text-diffs entry point that is included for convenience (#352).
  • Context.switchTo() has been removed (#345).
  • BaseFormatter.typeFormattterErrorFormatter() now throws an error instead of returning a string (#345).
  • The UMD browser bundle has been removed. If you were using a script tag to include jsondiffpatch in your project, you can now import it inside of your main script tag as show below. For a more complete example, see the Visual Diff example before and after this change.
<!doctype html>
<html>
  <head>
    <link
      rel="stylesheet"
      href="https://esm.sh/jsondiffpatch@0.6.0/lib/formatters/styles/html.css"
      type="text/css"
    />
    <link
      rel="stylesheet"
      href="https://esm.sh/jsondiffpatch@0.6.0/lib/formatters/styles/annotated.css"
      type="text/css"
    />
  </head>
  <body>
    <script type="module">
      import * as jsondiffpatch from 'https://esm.sh/jsondiffpatch@0.6.0';
      import * as annotatedFormatter from 'https://esm.sh/jsondiffpatch@0.6.0/formatters/annotated';
      import * as htmlFormatter from 'https://esm.sh/jsondiffpatch@0.6.0/formatters/html';
  ...
&lt;/script&gt;

</body>
</html>

Other changes

@dependabot
Bump the npm_and_yarn group across 16 directories with 14 updates
e9bf2c6 
Bumps the npm_and_yarn group with 2 updates in the /database/Bdash directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [mysql2](https://github.com/sidorares/node-mysql2).
Bumps the npm_and_yarn group with 2 updates in the /database/CPod directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html).
Bumps the npm_and_yarn group with 1 update in the /database/Jan directory: [pacote](https://github.com/npm/pacote).
Bumps the npm_and_yarn group with 2 updates in the /database/MyDeck directory: [jsondiffpatch](https://github.com/benjamine/jsondiffpatch) and [uuid](https://github.com/uuidjs/uuid).
Bumps the npm_and_yarn group with 2 updates in the /database/ShuffleStudy directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html).
Bumps the npm_and_yarn group with 2 updates in the /database/Whalebird directory: [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) and [axios](https://github.com/axios/axios).
Bumps the npm_and_yarn group with 2 updates in the /database/cumulonimbus directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html).
Bumps the npm_and_yarn group with 4 updates in the /database/polar-bookshelf directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater), [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html), [uuid](https://github.com/uuidjs/uuid) and [adm-zip](https://github.com/cthackers/adm-zip).
Bumps the npm_and_yarn group with 4 updates in the /database/westeroscraftlauncher directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater), [uuid](https://github.com/uuidjs/uuid), [adm-zip](https://github.com/cthackers/adm-zip) and [ejs](https://github.com/mde/ejs).
Bumps the npm_and_yarn group with 3 updates in the /database/whu-library-seat directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater), [axios](https://github.com/axios/axios) and [node-notifier](https://github.com/mikaelbr/node-notifier).
Bumps the npm_and_yarn group with 1 update in the /database/x-loc directory: [materialize-css](https://github.com/Dogfalo/materialize).
Bumps the npm_and_yarn group with 1 update in the /database/x32-mute-matrix directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater).
Bumps the npm_and_yarn group with 1 update in the /database/youtube-music directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater).
Bumps the npm_and_yarn group with 3 updates in the /database/youtube-music-desktop directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater), [axios](https://github.com/axios/axios) and [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js).
Bumps the npm_and_yarn group with 2 updates in the /database/zeltrez directory: [axios](https://github.com/axios/axios) and [web3](https://github.com/ChainSafe/web3.js).
Bumps the npm_and_yarn group with 1 update in the /database/zmNinja directory: [cordova-plugin-inappbrowser](https://github.com/apache/cordova-plugin-inappbrowser).


Updates `electron-updater` from 2.21.4 to 6.3.0
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `mysql2` from 1.5.1 to 3.22.0
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v1.5.1...v3.22.0)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `pacote` from 17.0.7 to 22.0.0
- [Release notes](https://github.com/npm/pacote/releases)
- [Changelog](https://github.com/npm/pacote/blob/main/CHANGELOG.md)
- [Commits](npm/pacote@v17.0.7...v22.0.0)

Updates `jsondiffpatch` from 0.4.1 to 0.7.6
- [Release notes](https://github.com/benjamine/jsondiffpatch/releases)
- [Commits](https://github.com/benjamine/jsondiffpatch/commits)

Updates `uuid` from 8.3.2 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.2)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `axios` from 0.19.2 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `uuid` from 3.4.0 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.2)

Updates `adm-zip` from 0.4.16 to 0.6.0
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.4.16...v0.6.0)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `uuid` from 3.4.0 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.2)

Updates `adm-zip` from 0.4.16 to 0.6.0
- [Release notes](https://github.com/cthackers/adm-zip/releases)
- [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md)
- [Commits](cthackers/adm-zip@v0.4.16...v0.6.0)

Updates `ejs` from 2.7.4 to 6.0.1
- [Release notes](https://github.com/mde/ejs/releases)
- [Changelog](https://github.com/mde/ejs/blob/main/RELEASE_NOTES_v5.md)
- [Commits](mde/ejs@v2.7.4...v6.0.1)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `axios` from 0.16.2 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `node-notifier` from 5.4.5 to 10.0.1
- [Changelog](https://github.com/mikaelbr/node-notifier/blob/master/CHANGELOG.md)
- [Commits](mikaelbr/node-notifier@v5.4.5...v10.0.1)

Updates `materialize-css` from 0.100.2 to 1.0.0
- [Release notes](https://github.com/Dogfalo/materialize/releases)
- [Changelog](https://github.com/Dogfalo/materialize/blob/v1-dev/CHANGELOG.md)
- [Commits](Dogfalo/materialize@v0.100.2...1.0.0)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `electron-updater` from 4.6.5 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `axios` from 0.18.1 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `xml2js` from 0.4.23 to 0.6.2
- [Commits](https://github.com/Leonidas-from-XIV/node-xml2js/commits/0.6.2)

Updates `axios` from 0.16.2 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `web3` from 0.20.7 to 4.16.0
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md)
- [Commits](https://github.com/ChainSafe/web3.js/commits/v4.16.0)

Updates `cordova-plugin-inappbrowser` from 1.7.2 to 7.0.0
- [Release notes](https://github.com/apache/cordova-plugin-inappbrowser/releases)
- [Changelog](https://github.com/apache/cordova-plugin-inappbrowser/blob/master/RELEASENOTES.md)
- [Commits](apache/cordova-plugin-inappbrowser@1.7.2...rel/7.0.0)

---
updated-dependencies:
- dependency-name: electron-updater
  dependency-version: 6.3.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mysql2
  dependency-version: 3.22.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: pacote
  dependency-version: 22.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: jsondiffpatch
  dependency-version: 0.7.6
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: adm-zip
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: adm-zip
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ejs
  dependency-version: 6.0.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: node-notifier
  dependency-version: 10.0.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: materialize-css
  dependency-version: 1.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: xml2js
  dependency-version: 0.6.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: web3
  dependency-version: 4.16.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cordova-plugin-inappbrowser
  dependency-version: 7.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants