Skip to content

Bump the npm group across 1 directory with 7 updates - #13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-2112d0dcf3
Open

Bump the npm group across 1 directory with 7 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-2112d0dcf3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the npm group with 7 updates in the / directory:

Package From To
papaparse 5.2.0 5.7.0
query-string 6.13.1 6.14.1
react 16.12.0 16.14.0
react-dom 16.12.0 16.14.0
react-router-dom 5.2.0 5.3.4
react-scripts 3.0.1 3.4.4
typescript 3.8.3 3.9.10

Updates papaparse from 5.2.0 to 5.7.0

Release notes

Sourced from papaparse's releases.

5.7.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

Add the `downloadTimeout` option to abort slow remote requests after a configurable duration (https://github.com/mholt/PapaParse/pull/1138)

Thanks @​Kocayilmaz for contributing it

5.6.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

  • Remove jQuery as dependency (#1137)

Thanks @​Kocayilmaz for contributing it

5.4.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

Handle parsing utf-8 bom encoded files (See #961) Rename duplicate headers (See #956) Improve iso-date regex (See #959)

Thanks to @​peteruithoven @​fortydegrees @​ChALkeR for contributing such features

5.3.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

  • Allow to escape formulae for safer opening on spreedsheet software (See: mholt/PapaParse#793 for full details)
Changelog

Sourced from papaparse's changelog.

5.7.0

Features

  • Add the downloadTimeout option to abort slow remote requests after a configurable duration (#1138, #786)

5.6.1

Bug Fixes

  • Call transformHeader only once per header in streaming mode (#1130)
  • Prevent header de-duplication from running again after resuming parsing (#1135)

5.6.0

Features

  • Remove the optional jQuery plugin integration (#1137)

5.5.5

Bug Fixes

  • Improve automatic delimiter detection by prioritizing row consistency over field count (#1128, #1077)
  • Serialize dates with Date.toISOString(), preserving expanded years and writing invalid dates as empty fields (#1140)

5.5.4

Bug Fixes

  • Strip the byte order mark (BOM) from header column names
  • Correctly quote and escape custom quote characters when unparsing (#1124, #1068)

Maintenance

  • Update supported Node.js versions in CI (#1097)
  • Document Papa.BYTE_ORDER_MARK (#1096)
  • Add regression coverage for renamedHeaders with duplicate headers (#1024, #1102)
  • Use HTTPS for README links (#1104)

5.5.3

Bug Fixes

  • Avoid infinite loop with duplicate header counting (#1095)

5.5.2

Bug Fixes

... (truncated)

Commits
  • 555c1c1 Minor version bump
  • a5cc2dc Patch version bump
  • 29e3a09 Add downloadTimeout option to abort slow remote requests (#1138)
  • 2e20001 Use tabs for identation on comment
  • b98bd0e Simplify comments
  • a869cd9 Fix header de-duplication re-running on every resumed row (#1135)
  • b3b6a64 Remove coment describing old behaviour
  • 8dd3318 call transformHeader once per header in streaming mode (#1130)
  • e6c2b7b Update CHANGELOG
  • bc382b7 Minor version bump
  • Additional commits viewable in compare view

Updates query-string from 6.13.1 to 6.14.1

Release notes

Sourced from query-string's releases.

v6.14.1

  • Fix TypeScript type for stringifyUrl() a6d4a3f

sindresorhus/query-string@v6.14.0...v6.14.1

v6.14.0

sindresorhus/query-string@v6.13.8...v6.14.0

v6.13.8

  • Work around TypeScript bug 94ebcd4

sindresorhus/query-string@v6.13.7...v6.13.8

v6.13.7

  • Allow readonly Stringifiable[] in StringifiableRecord (#291) 71d84b7

sindresorhus/query-string@v6.13.6...v6.13.7

v6.13.6

  • When only receiving values with encoded array value, decode values (#287) b38f06c

sindresorhus/query-string@v6.13.5...v6.13.6

v6.13.5

  • Allow null and undefined in Stringifiable TypeScript type (#281) df4cbb3

sindresorhus/query-string@v6.13.4...v6.13.5

v6.13.4

  • Fix the TypeScript types for .stringify() and .stringifyUrl() (#279) 38906bc

sindresorhus/query-string@v6.13.3...v6.13.4

v6.13.3

  • Fix the TypeScript type for the .stringifyUrl() method b15f945

sindresorhus/query-string@v6.13.2...v6.13.3

v6.13.2

  • Fix the ParsedQuery TypeScript type 56d2923

sindresorhus/query-string@v6.13.1...v6.13.2

Commits

Updates react from 16.12.0 to 16.14.0

Release notes

Sourced from react's releases.

16.14.0 (October 14, 2020)

React

16.13.1 (March 19, 2020)

React DOM

  • Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@​acdlite in #18238)
  • Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@​gaearon in #18330)

Artifacts

16.13.0 (February 26, 2020)

React

React DOM

Concurrent Mode (Experimental)

Artifacts

... (truncated)

Changelog

Sourced from react's changelog.

16.14.0 (October 14, 2020)

React

16.13.1 (March 19, 2020)

React DOM

  • Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@​acdlite in #18238)
  • Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@​gaearon in #18330)

16.13.0 (February 26, 2020)

React

React DOM

Concurrent Mode (Experimental)

Commits

Updates react-dom from 16.12.0 to 16.14.0

Release notes

Sourced from react-dom's releases.

16.14.0 (October 14, 2020)

React

16.13.1 (March 19, 2020)

React DOM

  • Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@​acdlite in #18238)
  • Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@​gaearon in #18330)

Artifacts

16.13.0 (February 26, 2020)

React

React DOM

Concurrent Mode (Experimental)

Artifacts

... (truncated)

Changelog

Sourced from react-dom's changelog.

16.14.0 (October 14, 2020)

React

16.13.1 (March 19, 2020)

React DOM

  • Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@​acdlite in #18238)
  • Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@​gaearon in #18330)

16.13.0 (February 26, 2020)

React

React DOM

Concurrent Mode (Experimental)

Commits

Updates react-router-dom from 5.2.0 to 5.3.4

Commits

Updates react-scripts from 3.0.1 to 3.4.4

Changelog

Sourced from react-scripts's changelog.

3.4.4 (2020-10-20)

v3.4.4 release bumps resolve-url-loader to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.3 to 3.4.4

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.4

or

yarn add --exact react-scripts@3.4.4

3.4.3 (2020-08-12)

v3.4.3 release bumps terser-webpack-plugin to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.2 to 3.4.3

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.3

or

yarn add --exact react-scripts@3.4.3

3.4.2 (2020-08-11)

v3.4.2 release bumps webpack-dev-server to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.1 to 3.4.2

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.2

or

... (truncated)

Commits

Updates typescript from 3.8.3 to 3.9.10

Release notes

Sourced from typescript's releases.

TypeScript 3.9.10

This release ships both an overall performance improvement, along with a mitigation for a performance regression when upgrading to Node.js 16. See the change for more details.

TypeScript 3.9.9

This release contains a fix for an issue when language service plugins have no specified name.

TypeScript 3.9.8

This release contains fixes for a security risk involving language service plugin loading. More details are available here.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
@coderabbitai

coderabbitai Bot commented Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8a11493c-c1a9-4184-9ee2-034b9b9edfbc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
Bump the npm group across 1 directory with 7 updates
96fd243 
Bumps the npm group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [papaparse](https://github.com/mholt/PapaParse) | `5.2.0` | `5.7.0` |
| [query-string](https://github.com/sindresorhus/query-string) | `6.13.1` | `6.14.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `16.12.0` | `16.14.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `16.12.0` | `16.14.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `5.2.0` | `5.3.4` |
| [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts) | `3.0.1` | `3.4.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `3.8.3` | `3.9.10` |



Updates `papaparse` from 5.2.0 to 5.7.0
- [Release notes](https://github.com/mholt/PapaParse/releases)
- [Changelog](https://github.com/mholt/PapaParse/blob/master/CHANGELOG.md)
- [Commits](mholt/PapaParse@5.2.0...5.7.0)

Updates `query-string` from 6.13.1 to 6.14.1
- [Release notes](https://github.com/sindresorhus/query-string/releases)
- [Commits](sindresorhus/query-string@v6.13.1...v6.14.1)

Updates `react` from 16.12.0 to 16.14.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v16.14.0/packages/react)

Updates `react-dom` from 16.12.0 to 16.14.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v16.14.0/packages/react-dom)

Updates `react-router-dom` from 5.2.0 to 5.3.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Commits](https://github.com/remix-run/react-router/commits/v5.3.4/packages/react-router-dom)

Updates `react-scripts` from 3.0.1 to 3.4.4
- [Release notes](https://github.com/facebook/create-react-app/releases)
- [Changelog](https://github.com/react/create-react-app/blob/main/CHANGELOG-3.x.md)
- [Commits](https://github.com/facebook/create-react-app/commits/v3.4.4/packages/react-scripts)

Updates `typescript` from 3.8.3 to 3.9.10
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v3.8.3...v3.9.10)

---
updated-dependencies:
- dependency-name: papaparse
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: query-string
  dependency-version: 6.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: react
  dependency-version: 16.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: react-dom
  dependency-version: 16.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: react-router-dom
  dependency-version: 5.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: react-scripts
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: typescript
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-2112d0dcf3 branch from 3a72014 to 96fd243 Compare September 14, 2026 06:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants