Skip to content

Bump minimatch, aws-iot-device-sdk, bcrypt, express-handlebars and nodemon in /src/Docker-compose-files/composetest/MiniProject#35

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/Docker-compose-files/composetest/MiniProject/multi-bc995aa0ce
Open

Bump minimatch, aws-iot-device-sdk, bcrypt, express-handlebars and nodemon in /src/Docker-compose-files/composetest/MiniProject#35
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/Docker-compose-files/composetest/MiniProject/multi-bc995aa0ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 22, 2026

Copy link
Copy Markdown

Bumps minimatch to 10.2.2 and updates ancestor dependencies minimatch, aws-iot-device-sdk, bcrypt, express-handlebars and nodemon. These dependencies need to be updated together.

Updates minimatch from 3.0.4 to 10.2.2

Changelog

Sourced from minimatch's changelog.

change log

10.2

  • Add braceExpandMax option

10.1

  • Add magicalBraces option for escape
  • Fix makeRe when partial: true is set.
  • Fix makeRe when pattern ends in a final ** path part.

10.0

  • Require node 20 or 22 and higher

9.0

  • No default export, only named exports.

8.0

  • Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
  • Bump required Node.js version

7.4

  • Add escape() method
  • Add unescape() method
  • Add Minimatch.hasMagic() method

7.3

  • Add support for posix character classes in a unicode-aware way.

7.2

  • Add windowsNoMagicRoot option

7.1

  • Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates aws-iot-device-sdk from 2.2.4 to 2.2.16

Release notes

Sourced from aws-iot-device-sdk's releases.

Test Release with ephemeral npm auth token

Flushing the pipeline with a new auth token now that npm forbids non-expiring tokens. Substantial chance of failure.

v2.2.15

What's Changed

Full Changelog: aws/aws-iot-device-sdk-js@v2.2.14...v2.2.15

Fix region validation, allow Gov Cloud and other aws regions

What's Changed

New Contributors

Full Changelog: aws/aws-iot-device-sdk-js@v2.2.13...v2.2.14

Dependency Update and Bug Fixes

What's Changed

New Contributors

Full Changelog: aws/aws-iot-device-sdk-js@v2.2.12...v2.2.13

Dependency Update

  • Updated minimist version

Restore examples in npm

  • Adds examples folder back to npm package

Custom auth query support

  • Add support for custom auth connections via query params, intended for browser environments
  • Bind and propagate mqtt-js 'end' event
  • Misc unit test wording and reliability fixes

... (truncated)

Changelog

Sourced from aws-iot-device-sdk's changelog.

2.2.12 (July 30 2021)

Bugfixes/Improvements

  • Updated minimist version

2.2.11 (July 30 2021)

Bugfixes/Improvements

  • Added examples back into npm package

2.2.10 (July 9 2021)

Bugfixes/Improvements

  • Merged support for custom auth connections via query parameters
  • Bound/propagated the mqtt-js 'end' event
  • Unit test reliability and wording updates

2.2.9 (July 8, 2021)

Bugfixes/Improvements

  • Updated crypto-js version
  • Updated mqtt-js version
  • Removed reserved topic checks from subscribe calls

2.2.8 (May 20, 2021)

Bugfixes/Improvements

  • Updated mqtt dependency to latest version

2.2.7 (Sep 15, 2020)

Bugfixes/Improvements

  • send SNI string while connecting to AWS IoT
  • README warns about MacOS storing certificate in keychain

2.2.6 (May 18, 2020)

Bugfixes/Improvements

  • Require only the necessary modules from crypto-js to optimize bundle

2.2.5 (Apr 7, 2020)

Bugfixes/Improvements

  • Re-adding github related templates and readme change.
Commits

Updates bcrypt from 3.0.6 to 6.0.0

Release notes

Sourced from bcrypt's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: kelektiv/node.bcrypt.js@v5.1.1...v6.0.0

v5.1.1

What's Changed

New Contributors

Full Changelog: kelektiv/node.bcrypt.js@v5.1.0...v5.1.1

v5.1.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from bcrypt's changelog.

6.0.0 (2025-02-28)

  • Drop support for NodeJS <= 16
  • Remove node-pre-gyp in favor of prebuildify, prebuilt binaries are now shipped with the package
  • Update node-addon-api to 8.3.0
  • Update JS code to newer ES syntax

5.1.1 (2022-10-06)

  • Update node-pre-gyp to 1.0.11

5.1.0 (2022-10-06)

  • Update node-pre-gyp to 1.0.10
  • Replace nodeunit with jest as the testing library

5.0.1 (2021-02-22)

  • Update node-pre-gyp to 1.0.0

5.0.0 (2020-06-02)

  • Fix the bcrypt "wrap-around" bug. It affects passwords with lengths >= 255. It is uncommon but it's a bug nevertheless. Previous attempts to fix the bug was unsuccessful.
  • Experimental support for z/OS
  • Fix a bug related to NUL in password input
  • Update node-pre-gyp to 0.15.0

4.0.1 (2020-02-27)

  • Fix compilation errors in Alpine linux

4.0.0 (2020-02-17)

  • Switch to NAPI bcrypt
  • Drop support for NodeJS 8

3.0.8 (2019-12-31)

  • Update node-pre-gyp to 0.14
  • Pre-built binaries for NodeJS 13

3.0.7 (2019-10-18)

  • Update nan to 2.14.0
  • Update node-pre-gyp to 0.13
Commits
Install script changes

This version adds install script that runs during installation. Review the package contents before updating.


Updates express-handlebars from 4.0.0 to 8.0.6

Release notes

Sourced from express-handlebars's releases.

v8.0.6

8.0.6 (2026-02-10)

Bug Fixes

v8.0.5

8.0.5 (2026-02-04)

Bug Fixes

v8.0.4

8.0.4 (2025-11-19)

Bug Fixes

v8.0.3

8.0.3 (2025-04-23)

Bug Fixes

  • deps: update dependency glob to ^11.0.2 (#982) (def7c02)

v8.0.2

8.0.2 (2025-04-17)

Bug Fixes

  • deps: update dependency glob to ^11.0.1 (#928) (b4b9cd3)

v8.0.1

8.0.1 (2024-08-07)

Bug Fixes

v8.0.0

8.0.0 (2024-08-07)

... (truncated)

Changelog

Sourced from express-handlebars's changelog.

8.0.6 (2026-02-10)

Bug Fixes

8.0.5 (2026-02-04)

Bug Fixes

8.0.4 (2025-11-19)

Bug Fixes

8.0.3 (2025-04-23)

Bug Fixes

  • deps: update dependency glob to ^11.0.2 (#982) (def7c02)

8.0.2 (2025-04-17)

Bug Fixes

  • deps: update dependency glob to ^11.0.1 (#928) (b4b9cd3)

8.0.1 (2024-08-07)

Bug Fixes

8.0.0 (2024-08-07)

Bug Fixes

... (truncated)

Commits
  • 003f109 chore(release): 8.0.6 [skip ci]
  • 0c8f3a1 fix(deps): update dependency glob to ^13.0.2 (#1165)
  • fd23087 chore(deps): update devdependency typescript-eslint to ^8.55.0 (#1164)
  • b7b142e chore(deps): update semantic-release monorepo (#1162)
  • db19376 chore(release): 8.0.5 [skip ci]
  • 3397c8d fix(deps): update dependency glob to ^13.0.1 (#1160)
  • 9b2aba1 chore(deps): bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 (#1161)
  • 48d8777 chore(deps): update devdependency globals to ^17.3.0 (#1159)
  • aa0254f chore(deps): update semantic-release monorepo (#1158)
  • ae5b376 chore(deps): update devdependency globals to ^17.2.0 (#1157)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for express-handlebars since your current version.


Updates nodemon from 1.19.1 to 3.1.14

Release notes

Sourced from nodemon's releases.

v3.1.14

3.1.14 (2026-02-20)

Bug Fixes

v3.1.13

3.1.13 (2026-02-19)

Bug Fixes

  • TypeScript definition for 'restart' args (5c03715), closes #2265

v3.1.12

3.1.12 (2026-02-19)

Bug Fixes

v3.1.11

3.1.11 (2025-11-11)

Bug Fixes

v3.1.10

3.1.10 (2025-04-23)

Bug Fixes

v3.1.9

3.1.9 (2024-12-13)

Bug Fixes

  • maintain backward support for exitcrash (9c9de6e)

v3.1.8

3.1.8 (2024-12-13)

... (truncated)

Commits
  • cfebe2f fix: get watch working on windows
  • f34bfa9 chore: fix release to run after tests
  • 5c03715 fix: TypeScript definition for 'restart' args
  • 28de4b7 chore: semver-release wanted 22-24 🤦
  • 6217164 chore: move release workflow to node 20
  • 2c458de chore: bump semver-release + update workflow
  • 9376af3 fix: bump minimatch
  • e045423 chore: website
  • f7a4edd chore: website
  • f26223f chore: website
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nodemon since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…demon

Bumps [minimatch](https://github.com/isaacs/minimatch) to 10.2.2 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch), [aws-iot-device-sdk](https://github.com/aws/aws-iot-device-sdk-js), [bcrypt](https://github.com/kelektiv/node.bcrypt.js), [express-handlebars](https://github.com/express-handlebars/express-handlebars) and [nodemon](https://github.com/remy/nodemon). These dependencies need to be updated together.


Updates `minimatch` from 3.0.4 to 10.2.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v10.2.2)

Updates `aws-iot-device-sdk` from 2.2.4 to 2.2.16
- [Release notes](https://github.com/aws/aws-iot-device-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-iot-device-sdk-js/blob/master/CHANGELOG.md)
- [Commits](aws/aws-iot-device-sdk-js@v2.2.4...v2.2.16)

Updates `bcrypt` from 3.0.6 to 6.0.0
- [Release notes](https://github.com/kelektiv/node.bcrypt.js/releases)
- [Changelog](https://github.com/kelektiv/node.bcrypt.js/blob/master/CHANGELOG.md)
- [Commits](kelektiv/node.bcrypt.js@v3.0.6...v6.0.0)

Updates `express-handlebars` from 4.0.0 to 8.0.6
- [Release notes](https://github.com/express-handlebars/express-handlebars/releases)
- [Changelog](https://github.com/express-handlebars/express-handlebars/blob/master/CHANGELOG.md)
- [Commits](express-handlebars/express-handlebars@v4.0.0...v8.0.6)

Updates `nodemon` from 1.19.1 to 3.1.14
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v1.19.1...v3.1.14)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 10.2.2
  dependency-type: indirect
- dependency-name: aws-iot-device-sdk
  dependency-version: 2.2.16
  dependency-type: direct:production
- dependency-name: bcrypt
  dependency-version: 6.0.0
  dependency-type: direct:production
- dependency-name: express-handlebars
  dependency-version: 8.0.6
  dependency-type: direct:production
- dependency-name: nodemon
  dependency-version: 3.1.14
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants