Bump the npm_and_yarn group across 1 directory with 14 updates #1

dependabot · 2025-06-29T04:26:13Z

Bumps the npm_and_yarn group with 13 updates in the / directory:

Package	From	To
jquery	`3.2.1`	`3.5.0`
atob	`2.0.3`	`2.1.2`
css	`2.2.1`	`2.2.4`
concat-with-sourcemaps	`1.0.5`	`1.1.0`
deap	`1.0.0`	`1.0.1`
decode-uri-component	`0.2.0`	`0.2.2`
ini	`1.3.5`	`1.3.8`
lodash	`1.0.2`	`removed`
gulp	`3.9.1`	`5.0.1`
merge	`1.2.0`	`removed`
gulp-coffee	`2.3.5`	`3.0.3`
send	`0.16.1`	`0.19.0`
serve-static	`1.13.1`	`1.16.2`

Updates jquery from 3.2.1 to 3.5.0

Release notes

Sourced from jquery's releases.

jQuery 3.5.0 Released!

See the blog post: https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ and the upgrade guide: https://jquery.com/upgrade-guide/3.5/

NOTE: Despite being a minor release, this update includes a breaking change that we had to make to fix a security issue ( CVE-2020-11022). Please follow the blog post & the upgrade guide for more details.

Commits

7a0a850 3.5.0
8570a08 Release: Update AUTHORS.txt
da3dd85 Ajax: Do not execute scripts for unsuccessful HTTP responses
065143c Ajax: Overwrite s.contentType with content-type header value, if any
1a4f10d Tests: Blacklist one focusin test in IE
9e15d6b Event: Use only one focusin/out handler per matching window & document
966a709 Manipulation: Skip the select wrapper for <option> outside of IE 9
1d61fd9 Manipulation: Make jQuery.htmlPrefilter an identity function
04bf577 Selector: Update Sizzle from 2.3.4 to 2.3.5
7506c9c Build: Resolve Travis config warnings
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by mgol, a new releaser for jquery since your current version.

Updates atob from 2.0.3 to 2.1.2

Commits

See full diff in compare view

Updates css from 2.2.1 to 2.2.4

Commits

64910e8 2.2.4
042922e Upgrade dependencies (#115)
5b0e0cd 2.2.3
4653d81 Allow the readme into the npm dist
438bd11 2.2.2
e91bb74 upgrade source-map-resolve (#112)
0f5ad51 Merge pull request #86 from dominicbarnes/master
a70d6aa include optional source on returned stylesheet object (fixes #85)
dd81540 Update History.md
See full diff in compare view

Maintainer changes

This version was pushed to npm by slexaxton, a new releaser for css since your current version.

Updates concat-with-sourcemaps from 1.0.5 to 1.1.0

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by floridoo, a new releaser for concat-with-sourcemaps since your current version.

Updates deap from 1.0.0 to 1.0.1

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by prestaul, a new releaser for deap since your current version.

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

a0eea46 0.2.2
980e0bf Prevent overwriting previously decoded tokens
3c8a373 0.2.1
76abc93 Switch to GitHub workflows
746ca5d Fix issue where decode throws - fixes #6
486d7e2 Update license (#1)
a650457 Tidelift tasks
66e1c28 Meta tweaks
See full diff in compare view

Updates ini from 1.3.5 to 1.3.8

Commits

a2c5da8 1.3.8
af5c6bb Do not use Object.create(null)
8b648a1 don't test where our devdeps don't even work
c74c8af 1.3.7
024b8b5 update deps, add linting
032fbaf Use Object.create(null) to avoid default object property hazards
2da9039 1.3.6
cfea636 better git push script, before publish instead of after
56d2805 do not allow invalid hazardous string as section name
See full diff in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for ini since your current version.

Removes lodash

Updates gulp from 3.9.1 to 5.0.1

Release notes

Sourced from gulp's releases.

gulp v5.0.1

Bug Fixes

Avoid globbing before read stream is opened (#2839) (19122f3)

Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)

Support top-level await on Node 22.12+ (#2836) (04b4a74)

gulp v5.0.0

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

Drop support for Node.js <10.13

Default stream encoding to UTF-8

Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!

Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream

All globs and paths are normalized to unix-like filepaths

Only allow JS variants for .gulp.* config files

Removed support for alpha releases of v4 from gulp-cli

Removed the --verify flag

Renamed the --require flag to --preload to avoid conflicting with Node.js flags

Removed many legacy and deprecated loaders

Upgrade to chokidar v3

Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data

Stop using process.umask() to make directories, instead falling back to Node's default mode

Throw on non-function, non-string option coercers

Drop support of Node.js snake_case flags

Use a Symbol for attaching the gulplog namespace to the store

Use a Symbol for attaching the gulplog store to the global

Use sha256 to hash the v8flags cache into a filename

Features

Streamlined the dependency tree

Switch all streams implementation to Streamx

Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation

Implement translation support for all CLI messages and all messages passing through gulplog

Allow users to customize or remove the timestamp from their logs

Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5

Added support for gulpile.cjs and gulpfile.mjs

Add support for swc, esbuild, sucrase, and mdx loaders

Provide an ESM export (#2760) (b00de68)

Support sourcemap handling on streaming Vinyl contents

... (truncated)

Changelog

Sourced from gulp's changelog.

5.0.1 (2025-06-01)

Bug Fixes

Avoid globbing before read stream is opened (#2839) (19122f3)

Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)

Support top-level await on Node 22.12+ (#2836) (04b4a74)

5.0.0 (2024-03-29)

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

Drop support for Node.js <10.13

Default stream encoding to UTF-8

Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!

Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream

All globs and paths are normalized to unix-like filepaths

Only allow JS variants for .gulp.* config files

Removed support for alpha releases of v4 from gulp-cli

Removed the --verify flag

Renamed the --require flag to --preload to avoid conflicting with Node.js flags

Removed many legacy and deprecated loaders

Upgrade to chokidar v3

Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data

Stop using process.umask() to make directories, instead falling back to Node's default mode

Throw on non-function, non-string option coercers

Drop support of Node.js snake_case flags

Use a Symbol for attaching the gulplog namespace to the store

Use a Symbol for attaching the gulplog store to the global

Use sha256 to hash the v8flags cache into a filename

Features

Streamlined the dependency tree

Switch all streams implementation to Streamx

Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation

Implement translation support for all CLI messages and all messages passing through gulplog

Allow users to customize or remove the timestamp from their logs

Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5

Added support for gulpile.cjs and gulpfile.mjs

Add support for swc, esbuild, sucrase, and mdx loaders

Provide an ESM export (#2760) (b00de68)

Support sourcemap handling on streaming Vinyl contents

... (truncated)

Commits

0003e9f chore: release 5.0.1 (#2837)
19122f3 fix: Avoid globbing before read stream is opened (#2839)
69a5d0e fix: Avoid Node.js deprecation warning for fs.Stats (#2838)
04b4a74 fix: Support top-level await on Node 22.12+ (#2836)
c90e79e chore: Fix CI (#2835)
5412605 chore(docs): Update async completion document for newer RxJS (#2831)
2fa4981 chore: Update glob docs with replacement to ordered globs (#2788)
fe9dee6 chore: Remove locale docs (#2787)
a85eddb chore: Remove node-glob options from docs (#2786)
9c818e6 chore: update src.md docs to add encoding parameter
Additional commits viewable in compare view

Removes merge

Updates gulp-coffee from 2.3.5 to 3.0.3

Commits

See full diff in compare view

Updates minimist from 0.0.8 to 1.2.0

Changelog

Sourced from minimist's changelog.

v1.2.0 - 2015-08-24

Commits

failing -k=v short test 63416b8

kv short fix 6bbe145

failing kv short test f72ab7f

fixed kv test f5a48c3

enforce space between arg key and value 86b321a

v1.1.3 - 2015-08-06

Commits

add failing test - boolean alias array 0fa3c5b

fix boolean values with multiple aliases 9c0a6e7

v1.1.2 - 2015-07-22

Commits

Convert boolean arguments to boolean values 8f3dc27

use non-ancient npm, node 0.12 and iojs 61ed1d0

an older npm for 0.8 25cf778

v1.1.1 - 2015-03-10

Commits

check that they type of a value is a boolean, not just that it is currently set to a boolean 6863198

upgrade tape, fix type issues from old tape version 806712d

test for setting a boolean to a null default 8c444fe

if the previous value was a boolean, without an default (or with an alias) don't make an array either e5f419a

v1.1.0 - 2014-08-10

Commits

add support for handling "unknown" options not registered with the parser. 6f3cc5d

reformat package.json 02ed371

coverage script e5531ba

extra fn to get 100% coverage again a6972da

v1.0.0 - 2014-08-10

Commits

added stopEarly option 471c7e4

fix list fef6ae7

... (truncated)

Commits

dc62448 1.2.0
f5a48c3 fixed kv test
f72ab7f failing kv short test
6bbe145 kv short fix
63416b8 failing -k=v short test
86b321a enforce space between arg key and value
8a5d94c 1.1.3
9c0a6e7 fix boolean values with multiple aliases
0fa3c5b add failing test - boolean alias array
a8e2fe1 1.1.2
Additional commits viewable in compare view

Updates send from 0.16.1 to 0.19.0

Release notes

Sourced from send's releases.

0.19.0

What's Changed

Remove link renderization in html while redirecting (pillarjs/send#235)

New Contributors

@UlisesGascon made their first contribution in pillarjs/send#235

Full Changelog: pillarjs/send@0.18.0...0.19.0

Changelog

Sourced from send's changelog.

0.19.0 / 2024-09-10

Remove link renderization in html while redirecting

0.18.0 / 2022-03-23

Fix emitted 416 error missing headers property

Limit the headers removed for 304 response

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: destroy@1.2.0

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: statuses@2.0.1

0.17.2 / 2021-12-11

pref: ignore empty http tokens

deps: http-errors@1.8.1

deps: inherits@2.0.4

deps: toidentifier@1.0.1

deps: setprototypeof@1.2.0

deps: ms@2.1.3

0.17.1 / 2019-05-10

Set stricter CSP header in redirect & error responses

deps: range-parser@~1.2.1

0.17.0 / 2019-05-03

deps: http-errors@~1.7.2

Set constructor name when possible

Use toidentifier module to make class names

deps: depd@~1.1.2

deps: setprototypeof@1.1.1

deps: statuses@'>= 1.5.0 < 2'

deps: mime@1.6.0

Add extensions for JPEG-2000 images

Add new font/* types from IANA

Add WASM mapping

Update .bdoc to application/bdoc

... (truncated)

Commits

9d2db99 0.19.0
ae4f298 Merge commit from fork
b69cbb3 0.18.0
f53edbb Limit the headers removed for 304 response
706d6dd docs: add security policy
b690ba4 docs: fix linux build badge link
fed09ff docs: update copyright
aee1a65 deps: destroy@1.2.0
6060bda deps: on-finished@2.4.1
8055f78 build: Node.js@17.7
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.

Updates serve-static from 1.13.1 to 1.16.2

Release notes

Sourced from serve-static's releases.

v1.16.2

What's Changed

encodeurl@~2.0.0 by @wesleytodd in expressjs/serve-static#180

Full Changelog: expressjs/serve-static@v1.16.1...v1.16.2

v1.16.1

What's Changed

bump send to 0.19 by @tommasini in expressjs/serve-static#176

New Contributors

@tommasini made their first contribution in expressjs/serve-static#176

Full Changelog: expressjs/serve-static@1.16.0...v1.16.1

1.16.0

What's Changed

Remove link renderization in html while redirecting (expressjs/serve-static#173)

New Contributors

@UlisesGascon made their first contribution in expressjs/serve-static#173

Full Changelog: expressjs/serve-static@v1.15.0...1.16.0

1.15.0

deps: send@0.18.0

Fix emitted 416 error missing headers property

Limit the headers removed for 304 response

deps: depd@2.0.0

deps: destroy@1.2.0

deps: http-errors@2.0.0

deps: on-finished@2.4.1

deps: statuses@2.0.1

1.14.2

deps: send@0.17.2

deps: http-errors@1.8.1

deps: ms@2.1.3

pref: ignore empty http tokens

1.14.1

Set stricter CSP header in redirect response

deps: send@0.17.1

deps: range-parser@~1.2.1

1.14.0

deps: parseurl@~1.3.3

deps: send@0.17.0

... (truncated)

Changelog

Sourced from serve-static's changelog.

1.16.2 / 2024-09-11

deps: encodeurl@~2.0.0

1.16.1 / 2024-09-11

deps: send@0.19.0

1.16.0 / 2024-09-10

Remove link renderization in html while redirecting

1.15.0 / 2022-03-24

deps: send@0.18.0

Fix emitted 416 error missing headers property

Limit the headers removed for 304 response

deps: depd@2.0.0

deps: destroy@1.2.0

deps: http-errors@2.0.0

deps: on-finished@2.4.1

deps: statuses@2.0.1

1.14.2 / 2021-12-15

deps: send@0.17.2

deps: http-errors@1.8.1

deps: ms@2.1.3

pref: ignore empty http tokens

1.14.1 / 2019-05-10

Set stricter CSP header in redirect response

deps: send@0.17.1

deps: range-parser@~1.2.1

1.14.0 / 2019-05-07

deps: parseurl@~1.3.3

deps: send@0.17.0

deps: http-errors@~1.7.2

deps: mime@1.6.0

... (truncated)

Commits

ec9c5ec 1.16.2
f454d37 fix(deps): encodeurl@~2.0.0
77a8255 1.16.1
4263f49 fix(deps): send@0.19.0
48c7397 1.16.0
0c11fad Merge commit from fork
9b5a12a 1.15.0
a39a0df docs: update CI link
d702ea2 build: Node.js@17.8
ff1510a deps: send@0.18.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for serve-static since your current version.

Updates serve-static from 1.13.1 to 1.16.2

Release notes

Sourced from serve-static's releases.

v1.16.2

What's Changed

encodeurl@~2.0.0 by @wesleytodd in expressjs/serve-static#180

Full Changelog: expressjs/serve-static@v1.16.1...v1.16.2

v1.16.1

What's Changed

bump send to 0.19 by @tommasini in expressjs/serve-static#176

New Contributors

@tommasini made their first contribution in expressjs/serve-static#176

Full Changelog: expressjs/serve-static@1.16.0...v1.16.1

1.16.0

What's Changed

Remove link renderization in html while redirecting (expressjs/serve-static#173)

New Contributors

@UlisesGascon made their first contribution in expressjs/serve-static#173

Full Changelog: expressjs/serve-static@v1.15.0...1.16.0

1.15.0

deps: send@0.18.0

Fix emitted 416 error missing headers property

Limit the headers removed for 304 response

deps: depd@2.0.0

deps: destroy@1.2.0

deps: http-errors@2.0.0

deps: on-finished@2.4.1

deps: statuses@2.0.1

1.14.2

deps: send@0.17.2

deps: http-errors@1.8.1

deps: ms@2.1.3

pref: ignore empty http tokens

1.14.1

Set stricter CSP header in redirect response

deps: send@0.17.1

deps: range-parser@~1.2.1

1.14.0

deps: parseurl@~1.3.3

deps: send@0.17.0

... (truncated)

Changelog

Sourced from serve-static's changelog.

1.16.2 / 2024-09-11

deps: encodeurl@~2.0.0

1.16.1 / 2024-09-11

deps: send@0.19.0

1.16.0 / 2024-09-10

Remove link renderization in html while redirecting

1.15.0 / 2022-03-24

deps: send@0.18.0

Fix emitted 416 error missing headers property

Limit the headers removed for 304 response

deps: depd@2.0.0

deps: destroy@1.2.0

deps: http-errors@2.0.0

deps: on-finished@2.4.1

deps: statuses@2.0.1

1.14.2 / 2021-12-15

deps: send@0.17.2

deps: http-errors@1.8.1

deps: ms@2.1.3

pref: ignore empty http tokens

1.14.1 / 2019-05-10

Set stricter CSP header in redirect response

deps: send@0.17.1

deps: range-parser@~1.2.1

1.14.0 / 2019-05-07

deps: parseurl@~1.3.3

deps: send@0.17.0

deps: http-errors@~1.7.2

deps: mime@1.6.0

... (truncated)

Commits

ec9c5ec 1.16.2
f454d37 fix(deps): encodeurl@~2.0.0
77a8255 1.16.1
4263f49 fix(deps): send@0.19.0
48c7397 1.16.0
0c11fad Merge commit from fork
9b5a12a 1.15.0
a39a0df docs: update CI link
d702ea2 build: Node.js@17.8
ff1510a deps: send@0.18.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for serve-static since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [jquery](https://github.com/jquery/jquery) | `3.2.1` | `3.5.0` | | [atob](https://github.com/coolaj86/node-browser-compat) | `2.0.3` | `2.1.2` | | [css](https://github.com/reworkcss/css) | `2.2.1` | `2.2.4` | | [concat-with-sourcemaps](https://github.com/floridoo/concat-with-sourcemaps) | `1.0.5` | `1.1.0` | | [deap](https://github.com/selfcontained/deap) | `1.0.0` | `1.0.1` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [lodash](https://github.com/lodash/lodash) | `1.0.2` | `removed` | | [gulp](https://github.com/gulpjs/gulp) | `3.9.1` | `5.0.1` | | [merge](https://github.com/yeikos/js.merge) | `1.2.0` | `removed` | | [gulp-coffee](https://github.com/gulp-community/gulp-coffee) | `2.3.5` | `3.0.3` | | [send](https://github.com/pillarjs/send) | `0.16.1` | `0.19.0` | | [serve-static](https://github.com/expressjs/serve-static) | `1.13.1` | `1.16.2` | Updates `jquery` from 3.2.1 to 3.5.0 - [Release notes](https://github.com/jquery/jquery/releases) - [Changelog](https://github.com/jquery/jquery/blob/main/changelog.md) - [Commits](jquery/jquery@3.2.1...3.5.0) Updates `atob` from 2.0.3 to 2.1.2 - [Commits](https://github.com/coolaj86/node-browser-compat/commits) Updates `css` from 2.2.1 to 2.2.4 - [Changelog](https://github.com/reworkcss/css/blob/master/History.md) - [Commits](reworkcss/css@v2.2.1...v2.2.4) Updates `concat-with-sourcemaps` from 1.0.5 to 1.1.0 - [Commits](https://github.com/floridoo/concat-with-sourcemaps/commits) Updates `deap` from 1.0.0 to 1.0.1 - [Commits](https://github.com/selfcontained/deap/commits) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.8) Removes `lodash` Updates `gulp` from 3.9.1 to 5.0.1 - [Release notes](https://github.com/gulpjs/gulp/releases) - [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md) - [Commits](gulpjs/gulp@v3.9.1...v5.0.1) Removes `merge` Updates `gulp-coffee` from 2.3.5 to 3.0.3 - [Commits](https://github.com/gulp-community/gulp-coffee/commits) Updates `minimist` from 0.0.8 to 1.2.0 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.8...v1.2.0) Updates `send` from 0.16.1 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.16.1...0.19.0) Updates `serve-static` from 1.13.1 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.13.1...v1.16.2) Updates `serve-static` from 1.13.1 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.13.1...v1.16.2) --- updated-dependencies: - dependency-name: jquery dependency-version: 3.5.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: atob dependency-version: 2.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: css dependency-version: 2.2.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: concat-with-sourcemaps dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: deap dependency-version: 1.0.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-version: 0.2.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-version: 1.3.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: gulp dependency-version: 5.0.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: merge dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: gulp-coffee dependency-version: 3.0.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: minimist dependency-version: 1.2.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-version: 0.19.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 29, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 14 updates #1

Bump the npm_and_yarn group across 1 directory with 14 updates #1

Uh oh!

dependabot bot commented on behalf of github Jun 29, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the npm_and_yarn group across 1 directory with 14 updates #1

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 14 updates #1

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 29, 2025

jQuery 3.5.0 Released!

v0.2.2

v0.2.1

gulp v5.0.1

Bug Fixes

gulp v5.0.0

⚠ BREAKING CHANGES

Features

5.0.1 (2025-06-01)

Bug Fixes

5.0.0 (2024-03-29)

⚠ BREAKING CHANGES

Features

v1.2.0 - 2015-08-24

Commits

v1.1.3 - 2015-08-06

Commits

v1.1.2 - 2015-07-22

Commits

v1.1.1 - 2015-03-10

Commits

v1.1.0 - 2014-08-10

Commits

v1.0.0 - 2014-08-10

Commits

0.19.0

What's Changed

New Contributors

0.19.0 / 2024-09-10

0.18.0 / 2022-03-23

0.17.2 / 2021-12-11

0.17.1 / 2019-05-10

0.17.0 / 2019-05-03

v1.16.2

What's Changed

v1.16.1

What's Changed

New Contributors

1.16.0

What's Changed

New Contributors

1.15.0

1.14.2

1.14.1

1.14.0

1.16.2 / 2024-09-11

1.16.1 / 2024-09-11

1.16.0 / 2024-09-10

1.15.0 / 2022-03-24

1.14.2 / 2021-12-15

1.14.1 / 2019-05-10

1.14.0 / 2019-05-07

v1.16.2

What's Changed

v1.16.1

What's Changed

New Contributors

1.16.0

What's Changed

New Contributors

1.15.0

1.14.2

1.14.1

1.14.0

1.16.2 / 2024-09-11

1.16.1 / 2024-09-11

1.16.0 / 2024-09-10

1.15.0 / 2022-03-24

1.14.2 / 2021-12-15

1.14.1 / 2019-05-10

1.14.0 / 2019-05-07

Uh oh!

Reviewers

Assignees