Skip to content

CCM-9336: Bump the major group across 2 directories with 31 updates - #708

Open
dependabot[bot] wants to merge 12 commits into
mainfrom
dependabot/npm_and_yarn/major-9e6a96723c
Open

CCM-9336: Bump the major group across 2 directories with 31 updates#708
dependabot[bot] wants to merge 12 commits into
mainfrom
dependabot/npm_and_yarn/major-9e6a96723c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the major group with 26 updates in the / directory:

Package From To
@pact-foundation/pact 16.5.0 17.1.4
@pact-foundation/pact-core 19.2.0 20.2.0
@types/node 25.9.2 26.6.2
chai 4.5.0 6.2.2
chai-as-promised 7.1.2 8.0.2
esbuild 0.25.12 0.28.2
eslint 9.39.4 10.11.0
eslint-plugin-json 4.0.1 5.0.0
eslint-plugin-security 3.0.1 4.0.1
eslint-plugin-unicorn 62.0.0 76.0.0
glob 11.1.0 13.0.6
lcov-result-merger 5.0.1 6.0.0
mocha 11.3.0 12.0.2
typescript 5.9.3 7.0.2
typescript-eslint 8.61.0 8.70.1
zod 3.25.76 4.4.3
pino 9.14.0 10.3.1
@asyncapi/bundler 0.6.4 1.0.2
date-fns 3.6.0 4.4.0
yargs 17.7.2 18.2.0
dotenv 17.4.2 18.0.3
express 4.22.2 5.2.1
graphql 16.14.2 17.0.2
undici-types 7.27.2 8.11.0
@babel/core 7.29.7 8.0.6
@babel/preset-env 7.29.7 8.0.6
express 4.22.2 5.2.1
chai 4.5.0 6.2.2
chai-as-promised 7.1.2 8.0.2
eslint 9.39.4 10.11.0
mocha 11.3.0 12.0.2

Bumps the major group with 10 updates in the /sandbox directory:

Package From To
chai 4.5.0 6.2.2
chai-as-promised 7.1.2 8.0.2
eslint 9.39.5 10.11.0
mocha 11.8.0 12.0.2
express 4.22.3 5.2.1
body-parser 1.20.8 2.3.0
camelcase 5.3.1 9.0.0
express-openapi-validator 4.13.9 5.6.2
ono 5.1.0 7.1.3
swagger-ui-express 4.6.3 5.0.1

Updates @pact-foundation/pact from 16.5.0 to 17.1.4

Release notes

Sourced from @​pact-foundation/pact's releases.

Release v17.1.4

17.1.4 (2026-09-07)

Fixes and Improvements

  • deps-dev: bump fast-xml-parser from 4.5.6 to 5.7.0 in /examples/xml (1cc3cbc)
  • deps: update to pact-core 20.1.1 (#1936) (f7dd6de)

Release v17.1.3

17.1.3 (2026-08-26)

Fixes and Improvements

  • verifier: accept lifecycle state handlers (#1876) (15bea78)

Release v17.1.2

17.1.2 (2026-08-11)

Fixes and Improvements

Release v17.1.1

17.1.1 (2026-08-10)

Fixes and Improvements

  • deps: bump qs from 6.15.1 to 6.15.3 in /examples/xml (#1817) (8756f55)
  • Downgrade https-proxy-agent to v7 to avoid esm #1915

Release v17.1.0

17.1.0 (2026-08-06)

Features

  • matchers: add V2 convenience matchers to V3 (#1875) (187e9b9)
  • verifier: support mTLS client certificates (#1871) (674e5e3)

Fixes and Improvements

  • deps: update dependency chalk to v6 (#1899) (5300d09)
  • deps: update dependency https-proxy-agent to v9 (b615a14)
  • deps: update to pact-core 20.1.0 (8b8888f)
  • deps: update to pact-core 20.1.0 (0b54d29)
  • pact-core imports now in dist not src (bdaeddf)
  • pact-core imports now in dist not src (bd9e7a4)

Release v17.0.1

17.0.1 (2026-07-01)

... (truncated)

Changelog

Sourced from @​pact-foundation/pact's changelog.

17.1.4 (2026-09-07)

Fixes and Improvements

  • deps-dev: bump fast-xml-parser from 4.5.6 to 5.7.0 in /examples/xml (1cc3cbc)
  • deps: update to pact-core 20.1.1 (#1936) (f7dd6de)

17.1.3 (2026-08-26)

Fixes and Improvements

  • verifier: accept lifecycle state handlers (#1876) (15bea78)

17.1.2 (2026-08-11)

Fixes and Improvements

17.1.1 (2026-08-10)

Fixes and Improvements

  • deps: bump qs from 6.15.1 to 6.15.3 in /examples/xml (#1817) (8756f55)

17.1.0 (2026-08-06)

Features

  • matchers: add V2 convenience matchers to V3 (#1875) (187e9b9)
  • verifier: support mTLS client certificates (#1871) (674e5e3)

Fixes and Improvements

  • deps: update dependency chalk to v6 (#1899) (5300d09)
  • deps: update dependency https-proxy-agent to v9 (b615a14)
  • deps: update to pact-core 20.1.0 (8b8888f)
  • deps: update to pact-core 20.1.0 (0b54d29)
  • pact-core imports now in dist not src (bdaeddf)
  • pact-core imports now in dist not src (bd9e7a4)

17.0.1 (2026-07-01)

Fixes and Improvements

  • verifier: run beforeEach/afterEach once per interaction without desyncing on hook failure (#1865) (fed47e2), closes #1864

17.0.0 (2026-06-25)

⚠ BREAKING CHANGES

  • drop node 20, test against node 26 (#1813)

... (truncated)

Commits
  • 03df116 chore(release): 17.1.4
  • f7dd6de fix(deps): update to pact-core 20.1.1 (#1936)
  • 6bc29a2 chore(deps): update pact-foundation/.github digest to f8fd527 (#1934)
  • 1cc3cbc fix(deps-dev): bump fast-xml-parser from 4.5.6 to 5.7.0 in /examples/xml
  • 5d2df28 chore(deps): update dependency mocha to v12 (#1933)
  • 314da2b chore(deps): update dependency graphql to v15.10.3 (#1931)
  • 40358cb chore(deps): update dependency absolute-version to v3 (#1932)
  • 678b0bf chore(deps): lock file maintenance (#1930)
  • 1f40f76 chore(deps): update dependency fast-xml-parser to v5.11.1 (#1929)
  • f9693e4 chore(deps): update dependency serverless to v4.41.1 (#1928)
  • Additional commits viewable in compare view

Updates @pact-foundation/pact-core from 19.2.0 to 20.2.0

Release notes

Sourced from @​pact-foundation/pact-core's releases.

Release v20.2.0

20.2.0 (2026-09-16)

Features

Release v20.1.1

20.1.1 (2026-09-07)

Fixes and Improvements

  • surface errors from pactffiPluginInteractionContents (rebuild) (#956) (b51bc7f)

Release v20.1.0

20.1.0 (2026-08-05)

Features

  • wire up FFI functions that were never exposed (a65f708)

Fixes and Improvements

  • build: set rootDir explicitly for the build config (f66d0b0)
  • ci: build against Visual Studio 2026 on Windows (5eefc9b)
  • ci: survive transient failures when publishing release assets (349b6d5)
  • deps: pact-ffi 0.5.5 (rebuild) (08a1c18)
  • package: point the entry points at the compiled output (939e704)
  • test: make the MATT TCP helper survive a not-yet-listening server (7fe2d28)
  • types: resolve type errors in the test suite (9e2f07e)

Release v20.0.0

20.0.0 (2026-05-29)

⚠ BREAKING CHANGES

  • drop Node 18/20 support, target Node 22+ (#885)

  • drop Node 18/20 support, target Node 22+ (#885) (60313ee)

Changelog

Sourced from @​pact-foundation/pact-core's changelog.

20.2.0 (2026-09-16)

Features

20.1.1 (2026-09-07)

Fixes and Improvements

  • surface errors from pactffiPluginInteractionContents (rebuild) (#956) (b51bc7f)

20.1.0 (2026-08-05)

Features

  • wire up FFI functions that were never exposed (a65f708)

Fixes and Improvements

  • build: set rootDir explicitly for the build config (f66d0b0)
  • ci: build against Visual Studio 2026 on Windows (5eefc9b)
  • ci: survive transient failures when publishing release assets (349b6d5)
  • deps: pact-ffi 0.5.5 (rebuild) (08a1c18)
  • package: point the entry points at the compiled output (939e704)
  • test: make the MATT TCP helper survive a not-yet-listening server (7fe2d28)
  • types: resolve type errors in the test suite (9e2f07e)

20.0.0 (2026-05-29)

⚠ BREAKING CHANGES

  • drop Node 18/20 support, target Node 22+ (#885)

  • drop Node 18/20 support, target Node 22+ (#885) (60313ee)

Commits
  • d12bf4a chore(release): 20.2.0
  • 1ee88f3 Merge pull request #957 from frudisch/feat/interaction-result-pact-details
  • fcd52de feat(ffi): update pact-ffi to 0.5.8 and assert per-interaction pact details
  • d388743 chore(deps): lock file maintenance (#961)
  • 67e871a chore(deps): update pact-foundation/.github digest to f8fd527 (#955)
  • c5620ba chore(deps): update dependency @​biomejs/biome to v2.5.13 (#960)
  • db09d0f chore(deps): update dependency @​types/node to v24.13.4 (#959)
  • c7f0615 chore(deps): update dependency commit-and-tag-version to v13.2.0 (#958)
  • 3faea74 chore(deps): update vitest monorepo to v5 (#954)
  • ae295d0 chore(release): 20.1.1
  • Additional commits viewable in compare view

Updates @types/node from 25.9.2 to 26.6.2

Commits

Updates chai from 4.5.0 to 6.2.2

Release notes

Sourced from chai's releases.

v6.2.2

What's Changed

New Contributors

Full Changelog: chaijs/chai@v6.2.1...v6.2.2

v6.2.1

What's Changed

New Contributors

Full Changelog: chaijs/chai@v6.2.0...v6.2.1

... (truncated)

Commits
  • 814172d chore(deps): update dependency esbuild to v0.27.2 (#1759)
  • b38c22b chore: add legal-comments=none option (#1756)
  • 180d4cc chore(deps): update dependencies to v9.39.2 (#1757)
  • 678cd00 chore(deps): update dependencies (#1755)
  • c8fb100 chore(deps): update dependency prettier to v3.7.3 (#1754)
  • d63c74e chore(deps): update dependency eslint-plugin-jsdoc to v61.4.1 (#1751)
  • 243bf86 fix: avoid BigInt literal in closeTo for runtime compat (#1748)
  • d8b0395 chore(deps): update actions/checkout action to v6 (#1749)
  • 7e1e247 build(deps): bump glob from 10.4.5 to 10.5.0 (#1747)
  • b25e5d8 chore(deps): update dependency eslint-plugin-jsdoc to v61.2.1 (#1746)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chai since your current version.


Updates chai-as-promised from 7.1.2 to 8.0.2

Release notes

Sourced from chai-as-promised's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: chaijs/chai-as-promised@v8.0.1...v8.0.2

v8.0.1

What's Changed

Full Changelog: chaijs/chai-as-promised@v8.0.0...v8.0.1

v8.0.0

What's Changed

... (truncated)

Commits

Updates esbuild from 0.25.12 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2

  • Allow import path specifiers starting with #/ (#4361)

    Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

    This change was contributed by @​hybrist.

  • Automatically add the -webkit-mask prefix (#4357, #4358)

    This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

    /* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}

    This change was contributed by @​BPJEnnova.

  • Additional minification of switch statements (#4176, #4359)

    This release contains additional minification patterns for reducing switch statements. Here is an example:

    // Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}

... (truncated)

Commits
  • 609683d publish 0.28.2 to npm
  • 11b1fe4 add to release notes
  • ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
  • 04627b6 fix #4498: async TLA checks need a worklist
  • 5c15177 disable gopls in the go folder
  • fc2ee9b css: adjust parser to allow --foo: {...}
  • 209db54 release notes for css nesting bugfix
  • c625d31 fix #4497: preserve nested ampersands during minification (#4500)
  • 34474e2 better isolation of current part in js parser
  • 07f6e8c fix #4507: import assignment tree-shaking bug
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.


Updates eslint from 9.39.4 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)

@dependabot
CCM-9336: Bump the major group across 2 directories with 31 updates
4e3ab04 
Bumps the major group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@pact-foundation/pact](https://github.com/pact-foundation/pact-js) | `16.5.0` | `17.1.4` |
| [@pact-foundation/pact-core](https://github.com/pact-foundation/pact-js-core) | `19.2.0` | `20.2.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.6.2` |
| [chai](https://github.com/chaijs/chai) | `4.5.0` | `6.2.2` |
| [chai-as-promised](https://github.com/chaijs/chai-as-promised) | `7.1.2` | `8.0.2` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.12` | `0.28.2` |
| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.11.0` |
| [eslint-plugin-json](https://github.com/azeemba/eslint-plugin-json) | `4.0.1` | `5.0.0` |
| [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) | `3.0.1` | `4.0.1` |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `62.0.0` | `76.0.0` |
| [glob](https://github.com/isaacs/node-glob) | `11.1.0` | `13.0.6` |
| [lcov-result-merger](https://github.com/mweibel/lcov-result-merger) | `5.0.1` | `6.0.0` |
| [mocha](https://github.com/mochajs/mocha) | `11.3.0` | `12.0.2` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.0` | `8.70.1` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` |
| [pino](https://github.com/pinojs/pino) | `9.14.0` | `10.3.1` |
| [@asyncapi/bundler](https://github.com/asyncapi/bundler) | `0.6.4` | `1.0.2` |
| [date-fns](https://github.com/date-fns/date-fns) | `3.6.0` | `4.4.0` |
| [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.2.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.3` |
| [express](https://github.com/expressjs/express) | `4.22.2` | `5.2.1` |
| [graphql](https://github.com/graphql/graphql-js) | `16.14.2` | `17.0.2` |
| [undici-types](https://github.com/nodejs/undici) | `7.27.2` | `8.11.0` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.7` | `8.0.6` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.7` | `8.0.6` |
| [express](https://github.com/expressjs/express) | `4.22.2` | `5.2.1` |
| [chai](https://github.com/chaijs/chai) | `4.5.0` | `6.2.2` |
| [chai-as-promised](https://github.com/chaijs/chai-as-promised) | `7.1.2` | `8.0.2` |
| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.11.0` |
| [mocha](https://github.com/mochajs/mocha) | `11.3.0` | `12.0.2` |

Bumps the major group with 10 updates in the /sandbox directory:

| Package | From | To |
| --- | --- | --- |
| [chai](https://github.com/chaijs/chai) | `4.5.0` | `6.2.2` |
| [chai-as-promised](https://github.com/chaijs/chai-as-promised) | `7.1.2` | `8.0.2` |
| [eslint](https://github.com/eslint/eslint) | `9.39.5` | `10.11.0` |
| [mocha](https://github.com/mochajs/mocha) | `11.8.0` | `12.0.2` |
| [express](https://github.com/expressjs/express) | `4.22.3` | `5.2.1` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.20.8` | `2.3.0` |
| [camelcase](https://github.com/sindresorhus/camelcase) | `5.3.1` | `9.0.0` |
| [express-openapi-validator](https://github.com/cdimascio/express-openapi-validator) | `4.13.9` | `5.6.2` |
| [ono](https://github.com/JS-DevTools/ono) | `5.1.0` | `7.1.3` |
| [swagger-ui-express](https://github.com/scottie1984/swagger-ui-express) | `4.6.3` | `5.0.1` |



Updates `@pact-foundation/pact` from 16.5.0 to 17.1.4
- [Release notes](https://github.com/pact-foundation/pact-js/releases)
- [Changelog](https://github.com/pact-foundation/pact-js/blob/master/CHANGELOG.md)
- [Commits](pact-foundation/pact-js@v16.5.0...v17.1.4)

Updates `@pact-foundation/pact-core` from 19.2.0 to 20.2.0
- [Release notes](https://github.com/pact-foundation/pact-js-core/releases)
- [Changelog](https://github.com/pact-foundation/pact-js-core/blob/master/CHANGELOG.md)
- [Commits](pact-foundation/pact-js-core@v19.2.0...v20.2.0)

Updates `@types/node` from 25.9.2 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `chai` from 4.5.0 to 6.2.2
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v4.5.0...v6.2.2)

Updates `chai-as-promised` from 7.1.2 to 8.0.2
- [Release notes](https://github.com/chaijs/chai-as-promised/releases)
- [Commits](chaijs/chai-as-promised@v7.1.2...v8.0.2)

Updates `esbuild` from 0.25.12 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](evanw/esbuild@v0.25.12...v0.28.2)

Updates `eslint` from 9.39.4 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.11.0)

Updates `eslint-plugin-json` from 4.0.1 to 5.0.0
- [Release notes](https://github.com/azeemba/eslint-plugin-json/releases)
- [Commits](https://github.com/azeemba/eslint-plugin-json/commits)

Updates `eslint-plugin-security` from 3.0.1 to 4.0.1
- [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-security@v3.0.1...eslint-plugin-security-v4.0.1)

Updates `eslint-plugin-unicorn` from 62.0.0 to 76.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v62.0.0...v76.0.0)

Updates `glob` from 11.1.0 to 13.0.6
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v11.1.0...v13.0.6)

Updates `lcov-result-merger` from 5.0.1 to 6.0.0
- [Release notes](https://github.com/mweibel/lcov-result-merger/releases)
- [Changelog](https://github.com/mweibel/lcov-result-merger/blob/master/CHANGELOG.md)
- [Commits](mweibel/lcov-result-merger@v5.0.1...v6.0.0)

Updates `mocha` from 11.3.0 to 12.0.2
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.3.0...v12.0.2)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

Updates `typescript-eslint` from 8.61.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

Updates `zod` from 3.25.76 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.4.3)

Updates `pino` from 9.14.0 to 10.3.1
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v9.14.0...v10.3.1)

Updates `@asyncapi/bundler` from 0.6.4 to 1.0.2
- [Release notes](https://github.com/asyncapi/bundler/releases)
- [Commits](asyncapi/bundler@v0.6.4...v1.0.2)

Updates `date-fns` from 3.6.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v3.6.0...v4.4.0)

Updates `yargs` from 17.7.2 to 18.2.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v17.7.2...v18.2.0)

Updates `dotenv` from 17.4.2 to 18.0.3
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.3)

Updates `express` from 4.22.2 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.2...v5.2.1)

Updates `graphql` from 16.14.2 to 17.0.2
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.14.2...v17.0.2)

Updates `undici-types` from 7.27.2 to 8.11.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.27.2...v8.11.0)

Updates `@babel/core` from 7.29.7 to 8.0.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.6/packages/babel-core)

Updates `@babel/preset-env` from 7.29.7 to 8.0.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.6/packages/babel-preset-env)

Updates `express` from 4.22.2 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.2...v5.2.1)

Updates `chai` from 4.5.0 to 6.2.2
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v4.5.0...v6.2.2)

Updates `chai-as-promised` from 7.1.2 to 8.0.2
- [Release notes](https://github.com/chaijs/chai-as-promised/releases)
- [Commits](chaijs/chai-as-promised@v7.1.2...v8.0.2)

Updates `eslint` from 9.39.4 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.11.0)

Updates `mocha` from 11.3.0 to 12.0.2
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.3.0...v12.0.2)

Updates `chai` from 4.5.0 to 6.2.2
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v4.5.0...v6.2.2)

Updates `chai-as-promised` from 7.1.2 to 8.0.2
- [Release notes](https://github.com/chaijs/chai-as-promised/releases)
- [Commits](chaijs/chai-as-promised@v7.1.2...v8.0.2)

Updates `eslint` from 9.39.5 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.11.0)

Updates `mocha` from 11.8.0 to 12.0.2
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.3.0...v12.0.2)

Updates `express` from 4.22.3 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.2...v5.2.1)

Updates `body-parser` from 1.20.8 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.8...v2.3.0)

Updates `camelcase` from 5.3.1 to 9.0.0
- [Release notes](https://github.com/sindresorhus/camelcase/releases)
- [Commits](sindresorhus/camelcase@v5.3.1...v9.0.0)

Updates `express-openapi-validator` from 4.13.9 to 5.6.2
- [Release notes](https://github.com/cdimascio/express-openapi-validator/releases)
- [Commits](https://github.com/cdimascio/express-openapi-validator/commits/v5.6.2)

Updates `ono` from 5.1.0 to 7.1.3
- [Release notes](https://github.com/JS-DevTools/ono/releases)
- [Changelog](https://github.com/JS-DevTools/ono/blob/master/CHANGELOG.md)
- [Commits](JS-DevTools/ono@v5.1.0...v7.1.3)

Updates `swagger-ui-express` from 4.6.3 to 5.0.1
- [Release notes](https://github.com/scottie1984/swagger-ui-express/releases)
- [Commits](scottie1984/swagger-ui-express@4.6.3...5.0.1)

---
updated-dependencies:
- dependency-name: "@pact-foundation/pact"
  dependency-version: 17.1.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@pact-foundation/pact-core"
  dependency-version: 20.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: chai
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: chai-as-promised
  dependency-version: 8.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: eslint-plugin-json
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: eslint-plugin-security
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: eslint-plugin-unicorn
  dependency-version: 76.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: lcov-result-merger
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: mocha
  dependency-version: 12.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: major
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: pino
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@asyncapi/bundler"
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: yargs
  dependency-version: 18.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: dotenv
  dependency-version: 18.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: graphql
  dependency-version: 17.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: undici-types
  dependency-version: 8.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@babel/core"
  dependency-version: 8.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@babel/preset-env"
  dependency-version: 8.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: chai
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: chai-as-promised
  dependency-version: 8.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: mocha
  dependency-version: 12.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: chai
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: chai-as-promised
  dependency-version: 8.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: mocha
  dependency-version: 12.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: camelcase
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: express-openapi-validator
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: ono
  dependency-version: 7.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: swagger-ui-express
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 04:04
@dependabot dependabot Bot added javascript Pull requests that update javascript code dependencies Pull requests that update a dependency file labels Oct 1, 2026
@stevebux
stevebux requested a review from a team as a code owner October 1, 2026 14:17

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@stevebux