Bump the npm-dependencies group across 1 directory with 24 updates - #3906
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
the
dependencies
dependabot
Bot
requested review from
KoolADE85,
camdecoster and
ndrezn
as code owners
July 20, 2026 16:51
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-ecdbe3587f
branch
from
July 21, 2026 15:38
c3ede0f to
1f9650e
Compare
Bumps the npm-dependencies group with 24 updates in the /dash/dash-renderer directory: | Package | From | To | | --- | --- | --- | | [cookie](https://github.com/jshttp/cookie) | `1.1.1` | `2.0.1` | | [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `7.29.7` | `8.0.4` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.7` | `8.0.1` | | [@babel/plugin-transform-optional-chaining](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-optional-chaining) | `7.29.7` | `8.0.1` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.7` | `8.0.2` | | [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.29.7` | `8.0.1` | | [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.29.7` | `8.0.1` | | [babel-loader](https://github.com/babel/babel-loader) | `9.2.1` | `10.1.1` | | [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.5.2` | `9.6.2` | | [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `7.0.2` | | [webpack](https://github.com/webpack/webpack) | `5.107.2` | `5.108.4` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `5.1.4` | `7.2.1` | | [@babel/plugin-transform-react-constant-elements](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-constant-elements) | `7.21.3` | `7.29.7` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.26.10` | `7.29.7` | | [@types/base16](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/base16) | `1.0.2` | `1.0.5` | | [@types/cors](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/cors) | `2.8.17` | `2.8.19` | | [@types/hoist-non-react-statics](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/hoist-non-react-statics) | `3.3.1` | `3.3.7` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.14.194` | `4.17.24` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.2.3` | `26.1.1` | | [@types/prop-types](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/prop-types) | `15.7.5` | `15.7.15` | | [@types/scheduler](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/scheduler) | `0.16.3` | `0.26.0` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.5.0` | `7.7.1` | | [@types/triple-beam](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/triple-beam) | `1.3.2` | `1.3.5` | | [webpack-sources](https://github.com/webpack/webpack-sources) | `3.5.0` | `3.5.1` | Updates `cookie` from 1.1.1 to 2.0.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v1.1.1...v2.0.1) Updates `@babel/cli` from 7.29.7 to 8.0.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-cli) Updates `@babel/core` from 7.29.7 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core) Updates `@babel/plugin-transform-optional-chaining` from 7.29.7 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-plugin-transform-optional-chaining) Updates `@babel/preset-env` from 7.29.7 to 8.0.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.2/packages/babel-preset-env) Updates `@babel/preset-react` from 7.29.7 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-preset-react) Updates `@babel/preset-typescript` from 7.29.7 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-preset-typescript) Updates `babel-loader` from 9.2.1 to 10.1.1 - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](babel/babel-loader@v9.2.1...v10.1.1) Updates `ts-loader` from 9.5.2 to 9.6.2 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.5.2...v9.6.2) Updates `typescript` from 5.8.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `webpack` from 5.107.2 to 5.108.4 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.107.2...v5.108.4) Updates `webpack-cli` from 5.1.4 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@5.1.4...webpack-cli@7.2.1) Updates `@babel/plugin-transform-react-constant-elements` from 7.21.3 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-constant-elements) Updates `@babel/runtime` from 7.26.10 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-runtime) Updates `@types/base16` from 1.0.2 to 1.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/base16) Updates `@types/cors` from 2.8.17 to 2.8.19 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cors) Updates `@types/hoist-non-react-statics` from 3.3.1 to 3.3.7 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/hoist-non-react-statics) Updates `@types/lodash` from 4.14.194 to 4.17.24 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `@types/node` from 20.2.3 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/prop-types` from 15.7.5 to 15.7.15 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/prop-types) Updates `@types/scheduler` from 0.16.3 to 0.26.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/scheduler) Updates `@types/semver` from 7.5.0 to 7.7.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `@types/triple-beam` from 1.3.2 to 1.3.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/triple-beam) Updates `webpack-sources` from 3.5.0 to 3.5.1 - [Release notes](https://github.com/webpack/webpack-sources/releases) - [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-sources@v3.5.0...v3.5.1) --- updated-dependencies: - dependency-name: "@babel/cli" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@babel/core" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@babel/plugin-transform-optional-chaining" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@babel/plugin-transform-react-constant-elements" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@babel/preset-react" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@babel/preset-typescript" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@babel/runtime" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/base16" dependency-version: 1.0.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/cors" dependency-version: 2.8.19 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/hoist-non-react-statics" dependency-version: 3.3.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/lodash" dependency-version: 4.17.24 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: indirect update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/prop-types" dependency-version: 15.7.15 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/scheduler" dependency-version: 0.26.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/semver" dependency-version: 7.7.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/triple-beam" dependency-version: 1.3.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: babel-loader dependency-version: 10.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: cookie dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: ts-loader dependency-version: 9.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: webpack dependency-version: 5.108.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: webpack-cli dependency-version: 7.2.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: webpack-sources dependency-version: 3.5.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-ecdbe3587f
branch
from
July 23, 2026 18:31
1f9650e to
01bfca8
Compare
|
Contributor
Author
|
Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-ecdbe3587f
branch
September 21, 2026 19:20
pull Bot
pushed a commit
to stungkit/dash
that referenced
this pull request
Sep 21, 2026
Regenerate all npm lockfiles to the latest versions within the existing semver ranges (node 24 / npm 11, lockfileVersion 2) across the root, dash-renderer, the three component packages, and dash-component-plugins. No direct dependency crosses a major boundary. This supersedes the stale, failing dependabot PRs, which had bundled breaking majors (eslint 9, typescript 6, webpack-cli 7, react-window 2, Babel 8). - renderer: pin transitive types-ramda to 0.29.2 via a scoped override. @types/ramda 0.29.1 pulls types-ramda, which within its range jumped to 0.29.10 and tightened keys() to `extends object`, breaking the type check with 37 tsc errors. Also bump webpack-cli to ^7 to match the component packages (verified building). - dash-table: webpack-dev-server 5.2.4 -> 5.2.6 (security, closes plotly#3868). - dependabot.yml: ignore the majors that break the build so stale red PRs stop reopening: typescript >=6, @babel/* >=8, babel-loader >=10, react-window >=2 (dcc), @types/ramda >=0.30 (renderer). Verified on node 24: renderer build/eslint/prettier/karma (85), dash-core-components build/es-check/eslint/jest (85), dash-table and dash-html-components build/es-check/eslint, dash-component-plugins build. Supersedes plotly#3868, plotly#3869, plotly#3890, plotly#3904, plotly#3905, plotly#3906, plotly#3910, plotly#3917-plotly#3920.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the npm-dependencies group with 24 updates in the /dash/dash-renderer directory:
1.1.12.0.17.29.78.0.47.29.78.0.17.29.78.0.17.29.78.0.27.29.78.0.17.29.78.0.19.2.110.1.19.5.29.6.25.8.37.0.25.107.25.108.45.1.47.2.17.21.37.29.77.26.107.29.71.0.21.0.52.8.172.8.193.3.13.3.74.14.1944.17.2420.2.326.1.115.7.515.7.150.16.30.26.07.5.07.7.11.3.21.3.53.5.03.5.1Updates
cookiefrom 1.1.1 to 2.0.1Release notes
Sourced from cookie's releases.
Commits
51c48542.0.184068f8Increment=index when parsingset-cookie(#280)e5164de2.0.0ddd3ad4Remove deprecations from README (#279)581e9dfApplyencodeto empty cookie values (#277)6a4ec43Upgrade deps (#278)f6d0482Switch to ESM (#273)b05ae23Add release workflow (#264)15d7996Remove deprecated code paths (#272)4f7c94aOptimizeencodeperformance (#269)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for cookie since your current version.
Updates
@babel/clifrom 7.29.7 to 8.0.4Release notes
Sourced from @babel/cli's releases.
... (truncated)
Changelog
Sourced from @babel/cli's changelog.
... (truncated)
Commits
8ed5db1v8.0.4b8e669fchore: bump chokidar to 5.0.0 (#18112)b4be199v8.0.1cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.0004f4b4Fallback to assuming ESM support withmodules: auto(#18069)73bceefv8.0.0-rc.6c6d71f3EnablestrictFunctionTypes(#17946)0e16971Do not emit source map names for identical names (#18005)3d34928Use Yarn catalog for source map dependencies (#18004)Updates
@babel/corefrom 7.29.7 to 8.0.1Release notes
Sourced from @babel/core's releases.
... (truncated)
Changelog
Sourced from @babel/core's changelog.
... (truncated)
Commits
b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)de007eaAvoid trailing zeroes in Babel 9 generated version (#18078)7dc825av8.0.0b71c35aperf: Only extract source map comments at the end of the file (#18039)e74b70dchore: Remove unused file (#18033)ae57969chore: consolidate upwards traversal to empathic (#18030)827d003Change jestsnapshotFormat(#18029)34cf24eUpdate deps (#18023)73bceefv8.0.0-rc.6Updates
@babel/plugin-transform-optional-chainingfrom 7.29.7 to 8.0.1Release notes
Sourced from @babel/plugin-transform-optional-chaining's releases.
... (truncated)
Changelog
Sourced from @babel/plugin-transform-optional-chaining's changelog.
... (truncated)
Commits
b4be199v8.0.1cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.073bceefv8.0.0-rc.6c6d71f3EnablestrictFunctionTypes(#17946)dc91f90v8.0.0-rc.57a3142cDeprecatespecandlooseplugin options (#17972)0e5a59dRequire Node.js^22.18.0 || >=24.11.0(#17969)7300a66v8.0.0-rc.431b3d95Prefert.buildUndefinedNode(#17884)Updates
@babel/preset-envfrom 7.29.7 to 8.0.2Release notes
Sourced from @babel/preset-env's releases.
... (truncated)
Changelog
Sourced from @babel/preset-env's changelog.
... (truncated)
Commits
73940a0v8.0.259a63a6Update@babel/preset-modulesand polyfill packages (#18081)b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.0004f4b4Fallback to assuming ESM support withmodules: auto(#18069)73bceefv8.0.0-rc.6c6d71f3EnablestrictFunctionTypes(#17946)dc91f90v8.0.0-rc.5Updates
@babel/preset-reactfrom 7.29.7 to 8.0.1Release notes
Sourced from @babel/preset-react's releases.
... (truncated)
Changelog
Sourced from @babel/preset-react's changelog.