Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025

Bumps the dependencies group with 5 updates in the / directory:

Package From To
fastify 5.4.0 5.6.1
pino 9.7.0 9.11.0
pino-pretty 13.0.0 13.1.1
ua-parser-js 2.0.4 2.0.5
zod 3.25.75 4.1.11

Updates fastify from 5.4.0 to 5.6.1

Release notes

Sourced from fastify's releases.

v5.6.1

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.6.0...v5.6.1

v5.6.0

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.5.0...v5.6.0

v5.5.0

What's Changed

... (truncated)

Commits

Updates pino from 9.7.0 to 9.11.0

Release notes

Sourced from pino's releases.

v9.11.0

What's Changed

New Contributors

Full Changelog: pinojs/pino@v9.10.0...v9.11.0

v9.10.0

What's Changed

New Contributors

Full Changelog: pinojs/pino@v9.9.5...v9.10.0

v9.9.5

What's Changed

Full Changelog: pinojs/pino@v9.9.4...v9.9.5

v9.9.4

What's Changed

Full Changelog: pinojs/pino@v9.9.3...v9.9.4

v9.9.3

What's Changed

New Contributors

Full Changelog: pinojs/pino@v9.9.2...v9.9.3

v9.9.2

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for pino since your current version.


Updates pino-pretty from 13.0.0 to 13.1.1

Release notes

Sourced from pino-pretty's releases.

v13.1.1

What's Changed

Full Changelog: pinojs/pino-pretty@v13.1.0...v13.1.1

v13.1.0

What's Changed

... (truncated)

Commits

Updates ua-parser-js from 2.0.4 to 2.0.5

Release notes

Sourced from ua-parser-js's releases.

v2.0.5

Version 2.0.5

  • Add new browser: Zalo
  • Add new CPU arch: alpha
  • Add new device vendor: Philips
  • Improve device detection: Pico
  • Fix parsing error on pages with modified Array prototypes
  • Improve type declarations:
    • Replace node-fetch dependency with undici
    • Replace hardcoded string values with enum from enum submodule
  • enums submodule:
    • Add Extension enum for extensions submodule
    • Type declaration file now automatically generated using build script
    • Naming adjustments:
      • Browser => BrowserName
      • CPU => CPUArch
      • Device => DeviceType
      • Vendor => DeviceVendor
      • Engine => EngineName
      • OS => OSName
  • extensions submodule:
    • Add new crawlers: APIs-Google, Algolia Crawler, Algolia Crawler Renderscript, Baidu-ADS, BLEXBot, botify, Bravebot, Claude-Web, cohere-training-data-crawler, contxbot, Cotoyogi, Coveobot, CriteoBot, DeepSeekBot, DuckDuckGo-Favicons-Bot, Elastic, FirecrawlAgent, Freespoke, Google-CloudVertexBot, HuggingFace-Bot, Kagibot, Kangaroo Bot, marginalia, msnbot, OnCrawl, Replicate-Bot, RunPod-Bot, SBIntuitionsBot, SeekportBot, Siteimprove, Sogou Pic Spider, TikTokSpider, TwinAgent, v0bot, webzio, Webzio-Extended, xAI-Bot, YandexAccessibilityBot, YandexAdditionalBot, YandexAdNet, YandexBot MirrorDetector, YandexBlogs, YandexComBot, YandexFavicons, YandexImageResizer, YandexImages, YandexMarket, YandexMetrika, YandexMedia, YandexMobileBot, YandexMobileScreenShotBot, YandexNews, YandexOntoDB, YandexOntoDBAPI, YandexPartner, YandexRCA, YandexRenderResourcesBot, YandexScreenshotBot, YandexSpravBot, YandexTracker, YandexVertis, YandexVerticals, YandexVideo, YandexVideoParser, YandexWebmaster, YepBot, ZumBot
    • Add new fetchers: Asana, bitlybot, Blueno, BufferLinkPreviewBot, Chrome-Lighthouse, Gemini-Deep-Research, HubSpot Page Fetcher, kakaotalk-scrap, vercel-favicon-bot, vercel-screenshot-bot, vercelflags, verceltracing, YaDirectFetcher, YandexCalendar, YandexDirect, YandexDirectDyn, YandexForDomain, YandexPagechecker, YandexSearchShop, YandexSitelinks, YandexUserproxy
  • helpers submodule:
    • Add some crawler to isAIBot(): Bravebot, cohere-training-data-crawler, FirecrawlAgent, HuggingFace-Bot, Kangaroo Bot, PanguBot, Replicate-Bot, RunPod-Bot, TikTokSpider, Together-Bot, v0bot, xAI-Bot

v2.0.5-pro-enterprise

No release notes provided.

Changelog

Sourced from ua-parser-js's changelog.

Version 2.0.5

  • Add new browser: Zalo
  • Add new CPU arch: alpha
  • Add new device vendor: Philips
  • Improve device detection: Pico
  • Fix parsing error on pages with modified Array prototypes
  • Improve type declarations:
    • Replace node-fetch dependency with undici
    • Replace hardcoded string values with enum from enum submodule
  • enums submodule:
    • Add Extension enum for extensions submodule
    • Type declaration file now automatically generated using build script
    • Naming adjustments:
      • Browser => BrowserName
      • CPU => CPUArch
      • Device => DeviceType
      • Vendor => DeviceVendor
      • Engine => EngineName
      • OS => OSName
  • extensions submodule:
    • Add new crawlers: APIs-Google, Algolia Crawler, Algolia Crawler Renderscript, Baidu-ADS, BLEXBot, botify, Bravebot, Claude-Web, cohere-training-data-crawler, contxbot, Cotoyogi, Coveobot, CriteoBot, DeepSeekBot, DuckDuckGo-Favicons-Bot, Elastic, FirecrawlAgent, Freespoke, Google-CloudVertexBot, HuggingFace-Bot, Kagibot, Kangaroo Bot, marginalia, msnbot, OnCrawl, Replicate-Bot, RunPod-Bot, SBIntuitionsBot, SeekportBot, Siteimprove, Sogou Pic Spider, TikTokSpider, TwinAgent, v0bot, webzio, Webzio-Extended, xAI-Bot, YandexAccessibilityBot, YandexAdditionalBot, YandexAdNet, YandexBot MirrorDetector, YandexBlogs, YandexComBot, YandexFavicons, YandexImageResizer, YandexImages, YandexMarket, YandexMetrika, YandexMedia, YandexMobileBot, YandexMobileScreenShotBot, YandexNews, YandexOntoDB, YandexOntoDBAPI, YandexPartner, YandexRCA, YandexRenderResourcesBot, YandexScreenshotBot, YandexSpravBot, YandexTracker, YandexVertis, YandexVerticals, YandexVideo, YandexVideoParser, YandexWebmaster, YepBot, ZumBot
    • Add new fetchers: Asana, bitlybot, Blueno, BufferLinkPreviewBot, Chrome-Lighthouse, Gemini-Deep-Research, HubSpot Page Fetcher, kakaotalk-scrap, vercel-favicon-bot, vercel-screenshot-bot, vercelflags, verceltracing, YaDirectFetcher, YandexCalendar, YandexDirect, YandexDirectDyn, YandexForDomain, YandexPagechecker, YandexSearchShop, YandexSitelinks, YandexUserproxy
  • helpers submodule:
    • Add some crawler to isAIBot(): Bravebot, cohere-training-data-crawler, FirecrawlAgent, HuggingFace-Bot, Kangaroo Bot, PanguBot, Replicate-Bot, RunPod-Bot, TikTokSpider, Together-Bot, v0bot, xAI-Bot
Commits
  • 3ea5721 Bump version 2.0.5
  • a4342b0 [test] Utilize enum in test cases
  • 31bf36c [enums] enum names should be singular
  • 9bef871 [helpers] Update isAIBot() list using Crawlers enum
  • b1d9dca [test] Move UA-CH test data into its own file
  • 146f182 [extensions] Improve bot detection for ByteDance, Google, SB Intuitions, Webzio
  • ce242a3 [extensions][enums] Improve detection for Yandex bots
  • 2078b1e [enums] Clean up enum imports & create build script
  • 7dcbb8d [enums] Enum for CPU architecture should be CPUArch rather than CPUName
  • f810a6d Fix type mistake
  • Additional commits viewable in compare view

Updates undici from 7.11.0 to 7.16.0

Release notes

Sourced from undici's releases.

v7.16.0

What's Changed

... (truncated)

Commits
  • 7392d6f Bumped v7.16.0 (#4532)
  • 415c66d fix: make error symbols non enumerable (#4531)
  • f182ff1 Disable SIMD for PPC64 architecture, add UNDICI_NO_WASM_SIMD env to facilitat...
  • 95d835c example: use metcoders https-pem for the example (#4436)
  • 7c42918 fix: shell command built from environment values (#4392)
  • 51651a1 fix: wpt should use master branch (#4524)
  • 82ea8fc refactor: parseHttpDate (#4421)
  • 909a584 websocket: always emit error event (#4521)
  • d7bb09e fetch: process content-encoding header only if relevant (#4496)
  • e652f03 wpt: properly handle write permissions errors in wpt-runner setup (#4518)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.


Updates zod from 3.25.75 to 4.1.11

Release notes

Sourced from zod's releases.

v4.1.11

Commits:

  • 2bed4b39760d8e4d678203b5c8fcaf24c182fc9f 4.1.11

v4.1.10

Commits:

  • 7ffedd00169d8dc2e7cb7c6d878f29b03e05b3a3 Fix shape caching (#5263)
  • 82cd717a0e7ee4e1737a783c7be278fa93fd8104 v4.1.10

v4.1.9

Commits:

  • a78716d91da7649a61016b81c27f49fd9e79a81e Update zshy (#5249)
  • 923af801fde9f033cfd7e0e753b421a554fe3be8 Publish zod@4.1.9

v4.1.8

Commits:

  • 36c4ee354d0c1f47b7311e49f6dd4b7a11de04f5 Switch back to weakmap
  • a1726d53172ba52ecf90999df73778cf416264fd 4.1.8

v4.1.7

Commits:

  • 0cca351c8b152d7c4113ab7c2a44675efb060677 Fix variable name inconsistency in coercion documentation (#5188)
  • aa78c270f1b43f4665339f4b61e7cb88037b8c84 Add copy/edit buttons
  • 76452d4119d800a722b692755c1168627bc95f0f Update button txt
  • 937f73c90cac90bd3b99b12c792c289b50416510 Fix tsconfig issue in bench
  • 976b43657d4aff6d47c73c1c86125623ea08752d v4.1.6 (#5222)
  • 4309c61304daf40aab2124b5f513abe2b4df8637 Fix cidrv6 validation - cidrv6 should reject invalid strings with multiple slashes (#5196)
  • ef95a73b6d33299743e5ff4f0645b98c1b0d6f72 feat(locales): Add Lithuanian (lt) locale (#5210)
  • 3803f3f37168212f2178e8b8deceb7bad78ed904 docs: update wrong contents in codeblocks in api.mdx (#5209)
  • 8a47d5c6ba8e4fe2f934a8e55d0cba4d81d821de docs: update coerce example in api.mdx (#5207)
  • e87db1322f11ff6907e1789da28933d258ab75fd feat(locales): Add Georgian (ka) locale (#5203)
  • c54b123e399a6ab266504eb1389c724af31d5998 docs: adds @traversable/zod and @traversable/zod-test to v4 ecosystem (#5194)
  • c27a294f5b792f47b8e9dbb293a8ff8cfb287a3a Fix two tiny grammatical errors in the docs. (#5193)
  • 23a2d6692398e3dd1ad1cdb0491b271a9f989380 docs: fix broken links in async refinements and transforms references (#5190)
  • 845a230bb06bff679b5f00e10153f4dbbd50d2b6 fix(locales): Add type name translations to Spanish locale (#5187)
  • 27f13d62b98cf5c501b828ba8837ff73cd6263d2 Improve regex precision and eliminate duplicates in regexes.ts (#5181)
  • a8a52b3ba370b761be76953fa3986aa43c4172a4 fix(v4): fix Khmer and Ukrainian locales (#5177)
  • 887e37cd7568219c54f9c2f71bbfe0300ce48376 Update slugs
  • e1f19482bbed3fbaa563a0d8e09f1a577cc58ac7 fix(v4): ensure array defaults are shallow-cloned (#5173)
  • 9f650385644ae319f806a965b83f79ebd252e497 docs(ecosystem): add DRZL; fix Prisma Zod Generator placement (#5215)
  • aa6f0f02c2a92a266ff1495a8d2541ae46012fcb More fixes (#5223)
  • aab33566bdb44a651cc3e27fde729285e4312419 4.1.7

v4.1.5

Commits:

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 22, 2025
@socket-security
Copy link

socket-security bot commented Sep 22, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedua-parser-js@​2.0.4 ⏵ 2.0.6100 +110010087 -370
Updatedpino-pretty@​13.0.0 ⏵ 13.1.399 +110010092 +5100
Updatedundici@​7.11.0 ⏵ 7.16.099100100 +192100
Updatedfastify@​5.4.0 ⏵ 5.6.299 +110010093 +2100
Updatedpino@​9.7.0 ⏵ 10.1.099 +110010094100
Updatedzod@​3.25.75 ⏵ 4.1.1310010010095 -1100

View full report

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-9f8df171f6 branch 4 times, most recently from 30f943e to 2415df7 Compare October 6, 2025 21:12
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-9f8df171f6 branch from 2415df7 to 3c71d0b Compare October 13, 2025 21:11
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-9f8df171f6 branch from 3c71d0b to f430d40 Compare October 20, 2025 21:15
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-9f8df171f6 branch 3 times, most recently from 9bba9ea to 17af333 Compare November 3, 2025 21:10
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-9f8df171f6 branch 2 times, most recently from fc1c767 to 89ff441 Compare November 17, 2025 21:13
…dates

Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastify](https://github.com/fastify/fastify) | `5.4.0` | `5.6.1` |
| [pino](https://github.com/pinojs/pino) | `9.7.0` | `9.11.0` |
| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.0.0` | `13.1.1` |
| [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `2.0.4` | `2.0.5` |
| [zod](https://github.com/colinhacks/zod) | `3.25.75` | `4.1.11` |



Updates `fastify` from 5.4.0 to 5.6.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.4.0...v5.6.1)

Updates `pino` from 9.7.0 to 9.11.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v9.7.0...v9.11.0)

Updates `pino-pretty` from 13.0.0 to 13.1.1
- [Release notes](https://github.com/pinojs/pino-pretty/releases)
- [Commits](pinojs/pino-pretty@v13.0.0...v13.1.1)

Updates `ua-parser-js` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/faisalman/ua-parser-js/releases)
- [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md)
- [Commits](faisalman/ua-parser-js@2.0.4...2.0.5)

Updates `undici` from 7.11.0 to 7.16.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.11.0...v7.16.0)

Updates `zod` from 3.25.75 to 4.1.11
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.75...v4.1.11)

---
updated-dependencies:
- dependency-name: fastify
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pino
  dependency-version: 9.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pino-pretty
  dependency-version: 13.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ua-parser-js
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: undici
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: zod
  dependency-version: 4.1.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-9f8df171f6 branch from 89ff441 to 0ec62ef Compare December 2, 2025 00:53
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 8, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 8, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-9f8df171f6 branch December 8, 2025 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant