Skip to content

📦 [0.81]: Bump the all-dependencies group across 1 directory with 26 updates - #16473

Closed
dependabot[bot] wants to merge 1 commit into
0.81-stablefrom
dependabot/npm_and_yarn/0.81-stable/all-dependencies-a2f880e96f
Closed

📦 [0.81]: Bump the all-dependencies group across 1 directory with 26 updates#16473
dependabot[bot] wants to merge 1 commit into
0.81-stablefrom
dependabot/npm_and_yarn/0.81-stable/all-dependencies-a2f880e96f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 26 updates in the / directory:

Package From To
beachball 2.60.1 2.66.0
lage 2.14.15 2.17.0
lodash 4.17.21 4.18.1
ts-jest 29.4.5 29.4.15
@types/react 19.2.14 19.2.18
sanitize-filename 1.6.3 1.6.4
semver 7.7.3 7.8.5
@types/async 3.2.25 3.2.26
@types/lodash 4.17.20 4.17.26
@types/react-test-renderer 19.1.0 19.3.0
metro-runtime 0.83.3 0.83.8
metro-source-map 0.83.3 0.83.8
@xmldom/xmldom 0.8.13 0.8.15
envinfo 7.20.0 7.21.0
@types/shelljs 0.8.15 0.8.17
@microsoft/1ds-core-js 4.3.10 4.4.5
@microsoft/1ds-post-js 4.3.10 4.4.5
@microsoft/api-extractor 7.54.0 7.59.4
debug 4.4.1 4.4.3
eslint-plugin-react 7.37.2 7.37.5
metro-babel-register 0.83.3 0.83.8
metro-transform-plugins 0.83.3 0.83.8
shell-quote 1.10.0 1.12.0
resolve 1.22.11 1.22.13
@rnx-kit/metro-config 2.2.0 2.2.6
screenshot-desktop 1.15.3 1.15.7

Updates beachball from 2.60.1 to 2.66.0

Changelog

Sourced from beachball's changelog.

2.66.0

Wed, 09 Sep 2026 03:05:57 GMT

Minor changes

2.65.6

Tue, 25 Aug 2026 01:40:36 GMT

Patches

2.65.5

Thu, 21 May 2026 00:59:31 GMT

Patches

2.65.4

Sat, 02 May 2026 01:47:50 GMT

Patches

2.65.3

Wed, 29 Apr 2026 22:36:53 GMT

Patches

  • Update readme with link to large repos performance info (elcraig@microsoft.com)
  • Include dependent bumps for workspace: and catalog: dependencies in the changelog (elcraig@microsoft.com)
  • Include catalog dependency changes when checking for changed packages (elcraig@microsoft.com)
  • Refactor internals for getting changed packages (elcraig@microsoft.com)
  • Fix deepening of shallow clones in latest git by being more specific about the comparison ref being fetched. Also reduce git operations for the case where the branch ref doesn't exist locally. (elcraig@microsoft.com)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for beachball since your current version.


Updates lage from 2.14.15 to 2.17.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lage since your current version.


Updates lodash from 4.17.21 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates ts-jest from 29.4.5 to 29.4.15

Release notes

Sourced from ts-jest's releases.

v29.4.15

Please refer to CHANGELOG.md for details.

v29.4.14

Please refer to CHANGELOG.md for details.

v29.4.13

Please refer to CHANGELOG.md for details.

v29.4.12

Please refer to CHANGELOG.md for details.

v29.4.11

Please refer to CHANGELOG.md for details.

v29.4.10

Please refer to CHANGELOG.md for details.

v29.4.9

Please refer to CHANGELOG.md for details.

v29.4.8

No release notes provided.

v29.4.7

Please refer to CHANGELOG.md for details.

v29.4.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.15 (2026-10-15)

Bug Fixes

  • compiler: resolve modules with tsconfig options regardless of cache state (268746c), closes #5216
  • support .cjs config files in config:migrate (4001b4e), closes #4485

29.4.14 (2026-09-25)

Reverts

29.4.13 (2026-09-22)

Features

Performance Improvements

29.4.12 (2026-07-22)

Features

  • compiler: support TypeScript 7 projects through compatibility aliases (#5386)

29.4.11 (2026-05-21)

Bug Fixes

  • preserve Bundler on the CJS path under TypeScript >= 6 (3941818), closes #4198

29.4.10 (2026-05-18)

Bug Fixes

... (truncated)

Commits
  • 197d4de chore(release): 29.4.15
  • ebad800 build(deps): update dependency node to v24.22.0
  • e5f6e98 test(compiler): clean up temp dirs from module resolution tests
  • 77dbb18 test(compiler): make module resolution tests path-independent on Windows
  • 268746c fix(compiler): resolve modules with tsconfig options regardless of cache state
  • 1536201 build(deps): update dependency vite to ^8.3.4
  • 141e39c build(deps): update dependency @​babel/core to ^8.0.7
  • 6a6686e build(deps-dev): bump shell-quote from 1.10.0 to 1.12.0 in /examples
  • 98e6e50 build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /website
  • d2439ff build(deps): bump compression from 1.8.1 to 1.8.2 in /website
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ts-jest since your current version.


Updates @types/react from 19.2.14 to 19.2.18

Commits

Updates sanitize-filename from 1.6.3 to 1.6.4

Commits

Updates semver from 7.7.3 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

Chores

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

... (truncated)

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

7.8.4 (2026-06-09)

Bug Fixes

7.8.3 (2026-06-08)

Bug Fixes

Chores

7.8.2 (2026-06-04)

Bug Fixes

7.8.1 (2026-05-21)

Bug Fixes

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

7.7.4 (2026-01-16)

Bug Fixes

Documentation

Dependencies

Chores

Commits

Updates @types/async from 3.2.25 to 3.2.26

Commits

Updates @types/lodash from 4.17.20 to 4.17.26

Commits

Updates @types/react-test-renderer from 19.1.0 to 19.3.0

Commits

Updates metro-runtime from 0.83.3 to 0.83.8

Release notes

Sourced from metro-runtime's releases.

v0.83.8

This release is on the 0.83.x branch

Full Changelog: react/metro@v0.83.7...v0.83.8

v0.83.7

This release is on the 0.83.x branch

Full Changelog: react/metro@v0.83.6...v0.83.7

v0.83.6

This release is on the 0.83.x branch

NOTE: Experimental features are not covered by semver and can change at any time.

v0.83.5

This is a hotfix on the 0.83.x branch.

  • [Feature]: config.server.tls now sets Metro to be exposed as an https server (#1657 by @​vzaidman)
  • [Fix]: sync bundling progress between Metro cli and app hints (34ca6a6f621521a0780a54eeb32384b4f9c2f8ff by @​vzaidman)
  • [Types]: Restore accidentally removed publication of TypeScript types (#1662 by @​robhogan)

Full Changelog: react/metro@v0.83.4...v0.83.5

v0.83.4

... (truncated)

Commits
  • 2ede29b Update facebook/metro -> react/metro for trusted publish
  • b3328ce Publish 0.83.8
  • 0126614 Publish 0.83.7
  • 3eecb5a Publish hotfix 0.83.6
  • 7da3861 Add keepalive "heartbeat" message to Fast Refresh connections (#1685)
  • b6e3989 Add changeId on HMRClient update-done message
  • 41a2713 fix console errors thrown about not wrapping renders in act during tests
  • c81087f Add SignedSource (@​generated) to generated TS types, use @​noformat
  • 5a62201 Publish 0.83.5
  • 4154554 Add/normalise package.json#repository field for all packages
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for metro-runtime since your current version.


Updates metro-source-map from 0.83.3 to 0.83.8

Release notes

Sourced from metro-source-map's releases.

v0.83.8

This release is on the 0.83.x branch

Full Changelog: react/metro@v0.83.7...v0.83.8

v0.83.7

This release is on the 0.83.x branch

Full Changelog: react/metro@v0.83.6...v0.83.7

v0.83.6

This release is on the 0.83.x branch

NOTE: Experimental features are not covered by semver and can change at any time.

v0.83.5

This is a hotfix on the 0.83.x branch.

  • [Feature]: config.server.tls now sets Metro to be exposed as an https server (#1657 by @​vzaidman)
  • [Fix]: sync bundling progress between Metro cli and app hints (34ca6a6f621521a0780a54eeb32384b4f9c2f8ff by @​vzaidman)
  • [Types]: Restore accidentally removed publication of TypeScript types (#1662 by @​robhogan)

Full Changelog: react/metro@v0.83.4...v0.83.5

v0.83.4

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 7, 2026
Copilot AI balanced review requested due to automatic review settings October 7, 2026 12:25
@dependabot
dependabot Bot requested a review from a team as a code owner October 7, 2026 12:25
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 7, 2026
Copilot AI reviewed Oct 7, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@azure-pipelines

azure-pipelines Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@vmoroz
Vladimir Morozov (vmoroz) enabled auto-merge (squash) October 8, 2026 15:05
@vmoroz

Vladimir Morozov (vmoroz) commented Oct 8, 2026

Copy link
Copy Markdown
Member

/azp run

@azure-pipelines

azure-pipelines Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor
Azure Pipelines:
Successfully started running 1 pipeline(s).

Copilot AI balanced review requested due to automatic review settings October 14, 2026 20:55
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/0.81-stable/all-dependencies-a2f880e96f branch from f7b85cc to c641cf4 Compare October 14, 2026 20:55
Copilot AI reviewed Oct 14, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@vmoroz

Vladimir Morozov (vmoroz) commented Oct 23, 2026

Copy link
Copy Markdown
Member

Dependabot (@dependabot) recreate

Copilot AI balanced review requested due to automatic review settings October 23, 2026 16:56
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/0.81-stable/all-dependencies-a2f880e96f branch from c641cf4 to 1d660b7 Compare October 23, 2026 16:56
Copilot AI reviewed Oct 23, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@vmoroz

Vladimir Morozov (vmoroz) commented Oct 23, 2026

Copy link
Copy Markdown
Member

/azp run

@azure-pipelines

azure-pipelines Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor
Azure Pipelines:
Successfully started running 1 pipeline(s).

@vmoroz

Vladimir Morozov (vmoroz) commented Oct 24, 2026

Copy link
Copy Markdown
Member

Dependabot (@dependabot) recreate

@dependabot
📦 [0.81]: Bump the all-dependencies group across 1 directory with 26 …
3c867ed 
…updates

Bumps the all-dependencies group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [beachball](https://github.com/microsoft/beachball/tree/HEAD/packages/beachball) | `2.60.1` | `2.66.0` |
| [lage](https://github.com/microsoft/lage) | `2.14.15` | `2.17.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.15` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.14` | `19.2.18` |
| [sanitize-filename](https://github.com/parshap/node-sanitize-filename) | `1.6.3` | `1.6.4` |
| [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.8.5` |
| [@types/async](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/async) | `3.2.25` | `3.2.26` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.20` | `4.17.26` |
| [@types/react-test-renderer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-test-renderer) | `19.1.0` | `19.3.0` |
| [metro-runtime](https://github.com/react/metro/tree/HEAD/packages/metro-runtime) | `0.83.3` | `0.83.8` |
| [metro-source-map](https://github.com/react/metro/tree/HEAD/packages/metro-source-map) | `0.83.3` | `0.83.8` |
| [@xmldom/xmldom](https://github.com/xmldom/xmldom) | `0.8.13` | `0.8.15` |
| [envinfo](https://github.com/tabrindle/envinfo) | `7.20.0` | `7.21.0` |
| [@types/shelljs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/shelljs) | `0.8.15` | `0.8.17` |
| [@microsoft/1ds-core-js](https://github.com/microsoft/ApplicationInsights-JS) | `4.3.10` | `4.4.5` |
| [@microsoft/1ds-post-js](https://github.com/microsoft/ApplicationInsights-JS) | `4.3.10` | `4.4.5` |
| [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.54.0` | `7.59.4` |
| [debug](https://github.com/debug-js/debug) | `4.4.1` | `4.4.3` |
| [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.37.2` | `7.37.5` |
| [metro-babel-register](https://github.com/react/metro/tree/HEAD/packages/metro-babel-register) | `0.83.3` | `0.83.8` |
| [metro-transform-plugins](https://github.com/react/metro/tree/HEAD/packages/metro-transform-plugins) | `0.83.3` | `0.83.8` |
| [shell-quote](https://github.com/ljharb/shell-quote) | `1.10.0` | `1.12.0` |
| [resolve](https://github.com/browserify/resolve) | `1.22.11` | `1.22.13` |
| [@rnx-kit/metro-config](https://github.com/microsoft/rnx-kit/tree/HEAD/packages/metro-config) | `2.2.0` | `2.2.6` |
| [screenshot-desktop](https://github.com/bencevans/screenshot-desktop) | `1.15.3` | `1.15.7` |



Updates `beachball` from 2.60.1 to 2.66.0
- [Changelog](https://github.com/microsoft/beachball/blob/beachball_v2.66.0/packages/beachball/CHANGELOG.md)
- [Commits](https://github.com/microsoft/beachball/commits/beachball_v2.66.0/packages/beachball)

Updates `lage` from 2.14.15 to 2.17.0
- [Commits](microsoft/lage@lage_v2.14.15...lage_v2.17.0)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `ts-jest` from 29.4.5 to 29.4.15
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.15)

Updates `@types/react` from 19.2.14 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `sanitize-filename` from 1.6.3 to 1.6.4
- [Changelog](https://github.com/parshap/node-sanitize-filename/blob/master/Changelog.md)
- [Commits](parshap/node-sanitize-filename@v1.6.3...v1.6.4)

Updates `semver` from 7.7.3 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.3...v7.8.5)

Updates `@types/async` from 3.2.25 to 3.2.26
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/async)

Updates `@types/lodash` from 4.17.20 to 4.17.26
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/react-test-renderer` from 19.1.0 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-test-renderer)

Updates `metro-runtime` from 0.83.3 to 0.83.8
- [Release notes](https://github.com/react/metro/releases)
- [Changelog](https://github.com/react/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/metro/commits/v0.83.8/packages/metro-runtime)

Updates `metro-source-map` from 0.83.3 to 0.83.8
- [Release notes](https://github.com/react/metro/releases)
- [Changelog](https://github.com/react/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/metro/commits/v0.83.8/packages/metro-source-map)

Updates `@xmldom/xmldom` from 0.8.13 to 0.8.15
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](xmldom/xmldom@0.8.13...0.8.15)

Updates `envinfo` from 7.20.0 to 7.21.0
- [Release notes](https://github.com/tabrindle/envinfo/releases)
- [Changelog](https://github.com/tabrindle/envinfo/blob/main/CHANGELOG.md)
- [Commits](tabrindle/envinfo@v7.20.0...v7.21.0)

Updates `@types/shelljs` from 0.8.15 to 0.8.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/shelljs)

Updates `@microsoft/1ds-core-js` from 4.3.10 to 4.4.5
- [Release notes](https://github.com/microsoft/ApplicationInsights-JS/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-JS/blob/main/RELEASES.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-JS/commits)

Updates `@microsoft/1ds-post-js` from 4.3.10 to 4.4.5
- [Release notes](https://github.com/microsoft/ApplicationInsights-JS/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-JS/blob/main/RELEASES.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-JS/commits)

Updates `@microsoft/api-extractor` from 7.54.0 to 7.59.4
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/api-extractor)

Updates `debug` from 4.4.1 to 4.4.3
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.4.1...4.4.3)

Updates `eslint-plugin-react` from 7.37.2 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.37.2...v7.37.5)

Updates `metro-babel-register` from 0.83.3 to 0.83.8
- [Release notes](https://github.com/react/metro/releases)
- [Changelog](https://github.com/react/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/metro/commits/v0.83.8/packages/metro-babel-register)

Updates `metro-transform-plugins` from 0.83.3 to 0.83.8
- [Release notes](https://github.com/react/metro/releases)
- [Changelog](https://github.com/react/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/metro/commits/v0.83.8/packages/metro-transform-plugins)

Updates `shell-quote` from 1.10.0 to 1.12.0
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.10.0...v1.12.0)

Updates `resolve` from 1.22.11 to 1.22.13
- [Commits](browserify/resolve@v1.22.11...v1.22.13)

Updates `@rnx-kit/metro-config` from 2.2.0 to 2.2.6
- [Release notes](https://github.com/microsoft/rnx-kit/releases)
- [Changelog](https://github.com/microsoft/rnx-kit/blob/main/packages/metro-config/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/metro-config@2.2.6/packages/metro-config)

Updates `screenshot-desktop` from 1.15.3 to 1.15.7
- [Release notes](https://github.com/bencevans/screenshot-desktop/releases)
- [Commits](bencevans/screenshot-desktop@v1.15.3...v1.15.7)

---
updated-dependencies:
- dependency-name: "@microsoft/1ds-core-js"
  dependency-version: 4.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@microsoft/1ds-post-js"
  dependency-version: 4.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@microsoft/api-extractor"
  dependency-version: 7.59.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@rnx-kit/metro-config"
  dependency-version: 2.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/async"
  dependency-version: 3.2.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/lodash"
  dependency-version: 4.17.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/react-test-renderer"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@types/shelljs"
  dependency-version: 0.8.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@xmldom/xmldom"
  dependency-version: 0.8.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: beachball
  dependency-version: 2.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: debug
  dependency-version: 4.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: envinfo
  dependency-version: 7.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-react
  dependency-version: 7.37.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: lage
  dependency-version: 2.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: metro-babel-register
  dependency-version: 0.83.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: metro-runtime
  dependency-version: 0.83.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: metro-source-map
  dependency-version: 0.83.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: metro-transform-plugins
  dependency-version: 0.83.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: resolve
  dependency-version: 1.22.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: sanitize-filename
  dependency-version: 1.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: screenshot-desktop
  dependency-version: 1.15.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: shell-quote
  dependency-version: 1.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ts-jest
  dependency-version: 29.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/0.81-stable/all-dependencies-a2f880e96f branch from 1d660b7 to 3c867ed Compare October 24, 2026 19:50
Copilot AI balanced review requested due to automatic review settings October 24, 2026 19:50
Copilot AI reviewed Oct 24, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@vmoroz

Vladimir Morozov (vmoroz) commented Oct 24, 2026

Copy link
Copy Markdown
Member

/azp run

@azure-pipelines

azure-pipelines Bot commented Oct 24, 2026

Copy link
Copy Markdown
Contributor
Azure Pipelines:
Successfully started running 1 pipeline(s).

@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 27, 2026
auto-merge was automatically disabled October 27, 2026 19:49

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/0.81-stable/all-dependencies-a2f880e96f branch October 27, 2026 19:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@vmoroz Vladimir Morozov (vmoroz) vmoroz approved these changes

Assignees

Copilot code review Copilot

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@vmoroz