Skip to content

Bump the npm_and_yarn group across 19 directories with 14 updates - #3

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/database/Bdash/npm_and_yarn-8723120749
Open

Bump the npm_and_yarn group across 19 directories with 14 updates#3
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/database/Bdash/npm_and_yarn-8723120749

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 2 updates in the /database/Bdash directory: electron-updater and mysql2.
Bumps the npm_and_yarn group with 1 update in the /database/BitShares directory: immutable.
Bumps the npm_and_yarn group with 1 update in the /database/BotFramework-Emulator directory: xmldom.
Bumps the npm_and_yarn group with 2 updates in the /database/CPod directory: electron-updater and sanitize-html.
Bumps the npm_and_yarn group with 1 update in the /database/Jan directory: pacote.
Bumps the npm_and_yarn group with 1 update in the /database/MyDeck directory: jsondiffpatch.
Bumps the npm_and_yarn group with 2 updates in the /database/ShuffleStudy directory: electron-updater and sanitize-html.
Bumps the npm_and_yarn group with 1 update in the /database/Tusk directory: decode-uri-component.
Bumps the npm_and_yarn group with 2 updates in the /database/Whalebird directory: sanitize-html and axios.
Bumps the npm_and_yarn group with 2 updates in the /database/cumulonimbus directory: electron-updater and sanitize-html.
Bumps the npm_and_yarn group with 2 updates in the /database/hubii-core directory: electron-updater and immutable.
Bumps the npm_and_yarn group with 2 updates in the /database/polar-bookshelf directory: electron-updater and sanitize-html.
Bumps the npm_and_yarn group with 3 updates in the /database/whu-library-seat directory: electron-updater, axios and node-notifier.
Bumps the npm_and_yarn group with 1 update in the /database/x-loc directory: materialize-css.
Bumps the npm_and_yarn group with 1 update in the /database/x32-mute-matrix directory: electron-updater.
Bumps the npm_and_yarn group with 1 update in the /database/youtube-music directory: electron-updater.
Bumps the npm_and_yarn group with 3 updates in the /database/youtube-music-desktop directory: electron-updater, axios and xml2js.
Bumps the npm_and_yarn group with 2 updates in the /database/zeltrez directory: axios and web3.
Bumps the npm_and_yarn group with 1 update in the /database/zmNinja directory: cordova-plugin-inappbrowser.

Updates electron-updater from 2.21.4 to 6.3.0

Changelog

Sourced from electron-updater's changelog.

6.3.0

Minor Changes

Patch Changes

6.3.0-alpha.8

Patch Changes

6.3.0-alpha.7

Patch Changes

6.3.0-alpha.6

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by onegoldfishh, a new releaser for electron-updater since your current version.


Updates mysql2 from 1.5.1 to 3.23.1

Release notes

Sourced from mysql2's releases.

v3.23.1

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)

v3.23.0

3.23.0 (2026-07-13)

Features

  • return unsafe integers inside JSON columns as exact strings with supportBigNumbers (#4388) (a26ff14)
  • sql-escaper: add Temporal support when escaping values (#4392) (6b933f6)
  • support MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (#4373) (5034e57)

v3.22.6

3.22.6 (2026-07-07)

Bug Fixes

  • sql-escaper: resolve multi statement and expand object regressions (#4380) (1b927a9)

v3.22.5

3.22.5 (2026-06-06)

Bug Fixes

  • keep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (#4327) (2af33a1)

v3.22.4

3.22.4 (2026-05-24)

Bug Fixes

v3.22.3

3.22.3 (2026-04-24)

Bug Fixes

  • allow resetOnRelease in connection config validation (#4278) (e72f923)

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)

3.23.0 (2026-07-13)

Features

  • return unsafe integers inside JSON columns as exact strings with supportBigNumbers (#4388) (a26ff14)
  • sql-escaper: add Temporal support when escaping values (#4392) (6b933f6)
  • support MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (#4373) (5034e57)

3.22.6 (2026-07-07)

Bug Fixes

  • sql-escaper: resolve multi statement and expand object regressions (#4380) (1b927a9)

3.22.5 (2026-06-06)

Bug Fixes

  • keep 00:00:00 time for TIMESTAMP in binary protocol with dateStrings (#4327) (2af33a1)

3.22.4 (2026-05-26)

Bug Fixes

3.22.3 (2026-04-24)

Bug Fixes

  • allow resetOnRelease in connection config validation (#4278) (e72f923)

3.22.2 (2026-04-21)

Bug Fixes

... (truncated)

Commits
  • 3de28fb chore(master): release 3.23.1 (#4408)
  • 01f1092 fix(parser): call typeCast for NULL values in the binary protocol (#3368) (#4...
  • 534c552 build(deps): bump lucide-react from 1.24.0 to 1.25.0 in /website (#4407)
  • 7c48343 Merge commit from fork
  • 3e13d7b docs: establish security charter (#4404)
  • 26c135b build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /website (#4403)
  • f86cfb1 chore(master): release 3.23.0 (#4387)
  • 6316492 build(deps): bump the docusaurus group in /website with 2 updates (#4396)
  • 6b933f6 feat(sql-escaper): add Temporal support when escaping values (#4392)
  • 457c316 build(deps): bump lucide-react from 1.23.0 to 1.24.0 in /website (#4391)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mysql2 since your current version.


Updates immutable from 3.8.2 to 4.3.9

Release notes

Sourced from immutable's releases.

v4.3.9

What's changed

Full Changelog: immutable-js/immutable-js@v4.3.8...v4.3.9

v4.3.8

Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

v4.3.7

What's Changed

Full Changelog: immutable-js/immutable-js@v4.3.6...v4.3.7

v4.3.6

What's Changed

Internals

New Contributors

Full Changelog: immutable-js/immutable-js@v4.3.5...v4.3.6

v4.3.5

What's Changed

New Contributors

Full Changelog: immutable-js/immutable-js@v4.3.4...v4.3.5

4.3.4

What's Changed

... (truncated)

Changelog

Sourced from immutable's changelog.

4.3.9

5.1.7

  • fix(Repeat): lastIndexOf returned size instead of size - 1 by @​chatman-media in immutable-js/immutable-js#2227. Fixes CVE CVE-2026-29063
  • fix(IndexedCollection): has(index) on a lazy Seq of unknown size now checks index existence instead of searching for a value equal to the index #2203
  • [TypeScript]: reduce/reduceRight without an initial value now infer the result type from the collection's values when the reducer returns a value (e.g. list.reduce((a, b) => a + b) infers number), matching Array#reduce. Previously an explicit type argument was required. #2205

5.1.6

  • fix(reverseFactory): read reversedSequence.size in __iterator instead of this #2196

5.1.5

  • Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

5.1.4

Documentation

Internal

5.1.3

TypeScript

Documentation

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for immutable since your current version.


Updates xmldom from 0.1.27 to 0.6.0

Release notes

Sourced from xmldom's releases.

0.6.0

0.6.0

Fixes

0.5.0

Fixes

  • Avoid misinterpretation of malicious XML input - GHSA-h6q6-9hqw-rwfv (CVE-2021-21366)

    • Improve error reporting; throw on duplicate attribute BREAKING CHANGE: It is currently not clear how to consistently deal with duplicate attributes, so it's also safer for our users to fail when detecting them. It's possible to configure the DOMParser.errorHandler before parsing, to handle those errors differently.

      To accomplish this and also be able to verify it in tests I needed to

      • create a new Error type ParseError and export it
      • Throw ParseError from errorHandler.fatalError and prevent those from being caught in XMLReader.
      • export DOMHandler constructor as __DOMHandler

    • Preserve quotes in DOCTYPE declaration Since the only purpose of parsing the DOCTYPE is to be able to restore it when serializing, we decided that it would be best to leave the parsed publicId and systemId as is, including any quotes. BREAKING CHANGE: If somebody relies on the actual unquoted values of those ids, they will need to take care of either single or double quotes and the right escaping. (Without this change this would not have been possible because the SAX parser already dropped the information about the quotes that have been used in the source.)

      https://www.w3.org/TR/2006/REC-xml11-20060816/#dtd https://www.w3.org/TR/2006/REC-xml11-20060816/#IDAX1KS (External Entity Declaration)

  • Fix breaking preprocessors' directives when parsing attributes [#171](https://github.com/xmldom/xmldom/issues/171)
  • fix(dom): Escape ]]> when serializing CharData [#181](https://github.com/xmldom/xmldom/issues/181)
  • Switch to (only) MIT license (drop problematic LGPL license option) [#178](https://github.com/xmldom/xmldom/issues/178)
  • Export DOMException; remove custom assertions; etc. [#174](https://github.com/xmldom/xmldom/issues/174)

Docs

0.4.0

Fixes

Docs

... (truncated)

Changelog

Sourced from xmldom's changelog.

0.6.0

Published to npm: 2021-04-17 16:41 UTC by @​karfau as xmldom

Fixes

0.5.0

Published to npm: 2021-03-09 03:59 UTC by @​brodybits as xmldom

Fixes

  • Avoid misinterpretation of malicious XML input - GHSA-h6q6-9hqw-rwfv (CVE-2021-21366)

    • Improve error reporting; throw on duplicate attribute
      BREAKING CHANGE: It is currently not clear how to consistently deal with duplicate attributes, so it's also safer for our users to fail when detecting them. It's possible to configure the DOMParser.errorHandler before parsing, to handle those errors differently.

      To accomplish this and also be able to verify it in tests I needed to

      • create a new Error type ParseError and export it
      • Throw ParseError from errorHandler.fatalError and prevent those from being caught in XMLReader.
      • export DOMHandler constructor as __DOMHandler

    • Preserve quotes in DOCTYPE declaration Since the only purpose of parsing the DOCTYPE is to be able to restore it when serializing, we decided that it would be best to leave the parsed publicId and systemId as is, including any quotes. BREAKING CHANGE: If somebody relies on the actual unquoted values of those ids, they will need to take care of either single or double quotes and the right escaping. (Without this change this would not have been possible because the SAX parser already dropped the information about the quotes that have been used in the source.)

      https://www.w3.org/TR/2006/REC-xml11-20060816/#dtd https://www.w3.org/TR/2006/REC-xml11-20060816/#IDAX1KS (External Entity Declaration)

  • Fix breaking preprocessors' directives when parsing attributes [#171](https://github.com/xmldom/xmldom/issues/171)

  • fix(dom): Escape ]]> when serializing CharData [#181](https://github.com/xmldom/xmldom/issues/181)

  • Switch to (only) MIT license (drop problematic LGPL license option) [#178](https://github.com/xmldom/xmldom/issues/178)

  • Export DOMException; remove custom assertions; etc. [#174](https://github.com/xmldom/xmldom/issues/174)

Docs

0.4.0

Published to npm: 2020-10-27 00:44 UTC by @​brodybits as xmldom

Fixes

... (truncated)

Commits
  • c80a161 xmldon version 0.6.0
  • bc36efd chore: regenerate package-lock.json
  • 8a92704 Update eslint -> ^7.23.0 - devDependencies (#202)
  • b12106e Update @​stryker-mutator/core -> ^4.5.1 - devDependencies (#192)
  • af4642e docs: Update Changelog (#197)
  • 5869d76 test(stryker): Replace line numbers by error index (#201)
  • a681852 fix: Escape < when serializing attribute values (#199)
  • bb12247 Update eslint-config-prettier -> 8 - devDependencies (#187)
  • 48c51b3 Update eslint -> ^7.22.0 - devDependencies (#185)
  • 82b0481 refactor!: Avoid empty namespace value like xmlns:ds="" (#168)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by karfau, a new releaser for xmldom since your current version.


Updates electron-updater from 2.23.3 to 6.8.9

Changelog

Sourced from electron-updater's changelog.

6.3.0

Minor Changes

Patch Changes

6.3.0-alpha.8

Patch Changes

6.3.0-alpha.7

Patch Changes

6.3.0-alpha.6

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by onegoldfishh, a new releaser for electron-updater since your current version.


Updates sanitize-html from 1.27.5 to 2.17.7

Changelog

Sourced from sanitize-html's changelog.

2.17.7 (2026-08-13)

Security

  • Fixed an XSS / URL scheme policy bypass affecting configurations that allow the SVG animation elements (animate, animateColor, animateMotion, animateTransform or set) together with attributeName and one of the animation value attributes. The default configuration was not affected, as these elements are not in the default allowedTags. apostrophecms was not affected. Thanks to koyokr for responsibly disclosing the vulnerability (GHSA-g8qq-57p8-ggw5).

2.17.6 (2026-07-10)

Fixes

  • Allow transformTags to emit text when textFilter is set, even if the tag is initially empty. This is consistent with the documentation. Thanks to spokodev for the fix.

Security

  • Fixed an XSS/allowlist bypass in which the contents of a raw-text element (textarea or xmp) nested inside an svg or math root were re-emitted without HTML-escaping. sanitize-html treated that content as inert raw text because htmlparser2 10.x classified raw-text elements by tag name and ignored the namespace, but a real HTML5 parser treats textarea/xmp as ordinary foreign elements inside SVG/MathML and re-parses their contents as live markup. As a result, markup and event-handler attributes that the allowlist never permitted (for example <svg><textarea><img src=x onerror=alert(1)>) could survive sanitization and execute in the browser. This is now fixed on two fronts: htmlparser2 was upgraded to 12.x, which is namespace-aware and parses textarea/xmp inside SVG/MathML as ordinary elements, so their non-allowlisted children (such as the injected img) are dropped by the allowlist instead of being preserved as raw text; and any raw-text content sanitize-html still emits for these tags (at HTML integration points such as foreignObject/mtext, or outside foreign content) is always HTML-escaped. The default configuration is not affected; the precondition is an allowedTags that includes svg or math together with textarea or xmp. Thanks to khoadb175 for responsibly disclosing the vulnerability.
  • Fixed a mutation-XSS / allowedTags bypass affecting configurations that allow the textarea or xmp raw-text tags. htmlparser2 10.x did not recognize an end tag with a trailing solidus (e.g. </textarea/>) as closing the element, so it kept the following markup as raw text, but a spec-compliant browser treats </textarea/> as a valid close and parses that markup as a live element. Because raw-text content was re-emitted without escaping, a payload such as <textarea></textarea/><img src=x onerror=...> could smuggle non-allowlisted, executable markup through the sanitizer. The default configuration was not affected. This is now defended at two layers: htmlparser2 was upgraded to 12.x, whose tokenizer closes these end tags correctly, and the raw text sanitize-html emits for these tags is always escaped so no < can reopen a tag when the output is re-parsed (textarea, an RCDATA element whose entities htmlparser2 decodes, is escaped like normal text, while xmp, a raw-text element, has only its angle brackets escaped to avoid double-encoding already-encoded entities). Because htmlparser2 is ESM-only from version 11 onward, sanitize-html now requires Node.js >=22.12.0 (the first 22.x release in which require() of an ES module is available unflagged). Thanks to bibu123456 for reporting the vulnerability and Kayiz-PT for coordinating the disclosure (GHSA-jxwj-j7wr-gfrw).

2.17.5 (2026-06-10)

Security

  • Added a number of new attributes to be protected against unsafe URLs, e.g. javascript: and similar. None of these are used in the default configuration of sanitize-html or apostrophe or likely to be used there, and some attributes, like an action for a form, are inherently unsafe to allow if XSS protection is your goal. Nevertheless it makes sense to block certain URL types where they are not appropriate. Some attributes are not supported at all by modern browsers but are included for completeness. Thanks to crattack for reporting the vulnerability.
  • Address a potential vulnerability when nonTextTags is configured in a nonstandard way. While it is never a good idea to remove known non-text tags from the standard list e.g. script, styles, etc., this change ensures that doing so does not result in nested tags being passed through without sanitization when they are not expressly allowed. (ApostropheCMS would never trigger this situation.) Thanks to Dipanshu singh for pointing out the issue and contributing the fix.

2.17.4

Changes

  • sanitize-html and launder now share a single implementation of naughtyHref, based on that which previously existed in sanitize-html.

Security

  • Security vulnerability: the xmp tag could be used to pass forbidden markup through sanitize-html, even when xmp itself is not explicitly allowed All users of sanitize-html should update immediately. Thanks to Vincenzo Turturro for reporting the vulnerability.

2.17.3 (2026-04-15)

Security

  • Fix vulnerability introduced in version 2.17.2 that allowed XSS attacks if the developer chose to permit option tags. There was no vulnerability when not explicitly allowing option tags.

2.17.2 (2026-03-19)

Changes

  • Upgrade htmlparser2 from 8.x to 10.1.0. This improves security by correctly decoding zero-padded numeric character references (e.g., &[#0000001](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html/issues/0000001)) that previously bypassed javascript: URL detection. Also fixes double-encoding of entities inside raw text elements like textarea and option.

2.17.1 (2026-02-18)

Fixes

... (truncated)

Commits

Updates pacote from 17.0.7 to 22.0.0

Release notes

Sourced from pacote's releases.

v22.0.0

22.0.0 (2026-06-15)

⚠️ BREAKING CHANGES

  • pacote now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • git specs using the https or git+https protocol now resolve to git+https URLs instead of being switched to git+ssh. Shortcut specs (e.g. github:user/repo, user/repo) and git+ssh/git:// specs are unchanged.

Features

Bug Fixes

@dependabot
Bump the npm_and_yarn group across 19 directories with 14 updates
9570e44 
Bumps the npm_and_yarn group with 2 updates in the /database/Bdash directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [mysql2](https://github.com/sidorares/node-mysql2).
Bumps the npm_and_yarn group with 1 update in the /database/BitShares directory: [immutable](https://github.com/immutable-js/immutable-js).
Bumps the npm_and_yarn group with 1 update in the /database/BotFramework-Emulator directory: [xmldom](https://github.com/xmldom/xmldom).
Bumps the npm_and_yarn group with 2 updates in the /database/CPod directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html).
Bumps the npm_and_yarn group with 1 update in the /database/Jan directory: [pacote](https://github.com/npm/pacote).
Bumps the npm_and_yarn group with 1 update in the /database/MyDeck directory: [jsondiffpatch](https://github.com/benjamine/jsondiffpatch).
Bumps the npm_and_yarn group with 2 updates in the /database/ShuffleStudy directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html).
Bumps the npm_and_yarn group with 1 update in the /database/Tusk directory: [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component).
Bumps the npm_and_yarn group with 2 updates in the /database/Whalebird directory: [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) and [axios](https://github.com/axios/axios).
Bumps the npm_and_yarn group with 2 updates in the /database/cumulonimbus directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html).
Bumps the npm_and_yarn group with 2 updates in the /database/hubii-core directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [immutable](https://github.com/immutable-js/immutable-js).
Bumps the npm_and_yarn group with 2 updates in the /database/polar-bookshelf directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) and [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html).
Bumps the npm_and_yarn group with 3 updates in the /database/whu-library-seat directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater), [axios](https://github.com/axios/axios) and [node-notifier](https://github.com/mikaelbr/node-notifier).
Bumps the npm_and_yarn group with 1 update in the /database/x-loc directory: [materialize-css](https://github.com/Dogfalo/materialize).
Bumps the npm_and_yarn group with 1 update in the /database/x32-mute-matrix directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater).
Bumps the npm_and_yarn group with 1 update in the /database/youtube-music directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater).
Bumps the npm_and_yarn group with 3 updates in the /database/youtube-music-desktop directory: [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater), [axios](https://github.com/axios/axios) and [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js).
Bumps the npm_and_yarn group with 2 updates in the /database/zeltrez directory: [axios](https://github.com/axios/axios) and [web3](https://github.com/ChainSafe/web3.js).
Bumps the npm_and_yarn group with 1 update in the /database/zmNinja directory: [cordova-plugin-inappbrowser](https://github.com/apache/cordova-plugin-inappbrowser).


Updates `electron-updater` from 2.21.4 to 6.3.0
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `mysql2` from 1.5.1 to 3.23.1
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v1.5.1...v3.23.1)

Updates `immutable` from 3.8.2 to 4.3.9
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v3.8.2...v4.3.9)

Updates `xmldom` from 0.1.27 to 0.6.0
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](xmldom/xmldom@0.1.27...0.6.0)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.7/packages/sanitize-html)

Updates `pacote` from 17.0.7 to 22.0.0
- [Release notes](https://github.com/npm/pacote/releases)
- [Changelog](https://github.com/npm/pacote/blob/main/CHANGELOG.md)
- [Commits](npm/pacote@v17.0.7...v22.0.0)

Updates `jsondiffpatch` from 0.4.1 to 0.7.6
- [Release notes](https://github.com/benjamine/jsondiffpatch/releases)
- [Commits](https://github.com/benjamine/jsondiffpatch/commits)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.7/packages/sanitize-html)

Updates `decode-uri-component` from 0.2.2 to 0.5.0
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.2...v0.5.0)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.7/packages/sanitize-html)

Updates `axios` from 0.19.2 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.7/packages/sanitize-html)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `immutable` from 3.8.2 to 4.3.9
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v3.8.2...v4.3.9)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `sanitize-html` from 1.27.5 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.7/packages/sanitize-html)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `axios` from 0.16.2 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `node-notifier` from 5.4.5 to 10.0.1
- [Changelog](https://github.com/mikaelbr/node-notifier/blob/master/CHANGELOG.md)
- [Commits](mikaelbr/node-notifier@v5.4.5...v10.0.1)

Updates `materialize-css` from 0.100.2 to 1.0.0
- [Release notes](https://github.com/Dogfalo/materialize/releases)
- [Changelog](https://github.com/Dogfalo/materialize/blob/v1-dev/CHANGELOG.md)
- [Commits](Dogfalo/materialize@v0.100.2...1.0.0)

Updates `electron-updater` from 2.23.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `electron-updater` from 4.6.5 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `electron-updater` from 3.2.3 to 6.8.9
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.3.0/packages/electron-updater)

Updates `axios` from 0.18.1 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `xml2js` from 0.4.23 to 0.6.2
- [Commits](https://github.com/Leonidas-from-XIV/node-xml2js/commits/0.6.2)

Updates `axios` from 0.16.2 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.19.2...v1.20.0)

Updates `web3` from 0.20.7 to 4.16.0
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md)
- [Commits](https://github.com/ChainSafe/web3.js/commits/v4.16.0)

Updates `cordova-plugin-inappbrowser` from 1.7.2 to 7.0.0
- [Release notes](https://github.com/apache/cordova-plugin-inappbrowser/releases)
- [Changelog](https://github.com/apache/cordova-plugin-inappbrowser/blob/master/RELEASENOTES.md)
- [Commits](apache/cordova-plugin-inappbrowser@1.7.2...rel/7.0.0)

---
updated-dependencies:
- dependency-name: electron-updater
  dependency-version: 6.3.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mysql2
  dependency-version: 3.23.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: immutable
  dependency-version: 4.3.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: xmldom
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: pacote
  dependency-version: 22.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: jsondiffpatch
  dependency-version: 0.7.6
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: decode-uri-component
  dependency-version: 0.5.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: immutable
  dependency-version: 4.3.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: node-notifier
  dependency-version: 10.0.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: materialize-css
  dependency-version: 1.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: xml2js
  dependency-version: 0.6.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: web3
  dependency-version: 4.16.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cordova-plugin-inappbrowser
  dependency-version: 7.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants