chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates by dependabot[bot] · Pull Request #362 · juspay/airborne

dependabot · 2026-07-07T05:41:16Z

Bumps the npm_and_yarn group with 15 updates in the / directory:

Package	From	To
turbo	`1.13.4`	`2.10.4`
@babel/core	`7.28.4`	`7.29.6`
ws	`6.2.3`	`6.2.4`
@babel/plugin-transform-modules-systemjs	`7.27.1`	`7.29.7`
basic-ftp	`5.0.5`	`5.3.1`
defu	`6.1.4`	`6.1.7`
fast-uri	`3.1.0`	`3.1.3`
flatted	`3.3.3`	`3.4.2`
handlebars	`4.7.8`	`4.7.9`
ip-address	`10.0.1`	`10.2.0`
launch-editor	`2.11.1`	`2.14.1`
lodash	`4.17.21`	`4.18.1`
node-forge	`1.3.3`	`1.4.0`
qs	`6.13.0`	`6.15.3`
yaml	`2.8.1`	`2.9.0`

Bumps the npm_and_yarn group with 1 update in the /airborne-react-native directory: turbo.
Bumps the npm_and_yarn group with 6 updates in the /airborne-react-native/ExampleOldArch directory:

Package	From	To
@babel/core	`7.27.1`	`7.29.6`
ws	`7.5.10`	`7.5.11`
@babel/plugin-transform-modules-systemjs	`7.27.1`	`7.29.7`
flatted	`3.3.3`	`3.4.2`
lodash	`4.17.21`	`4.18.1`
shell-quote	`1.8.3`	`1.9.0`

Bumps the npm_and_yarn group with 6 updates in the /airborne-react-native/ExampleSplitBundle directory:

Package	From	To
@babel/core	`7.28.0`	`7.29.6`
ws	`6.2.3`	`6.2.4`
ws	`7.5.10`	`7.5.11`
@babel/plugin-transform-modules-systemjs	`7.27.1`	`7.29.7`
fast-xml-parser	`4.5.3`	`5.9.3`
flatted	`3.3.3`	`3.4.2`
lodash	`4.17.21`	`4.18.1`

Bumps the npm_and_yarn group with 3 updates in the /airborne_server/cf_host directory: fast-xml-parser, qs and path-to-regexp.

Updates turbo from 1.13.4 to 2.10.4

Release notes

Sourced from turbo's releases.

Turborepo v2.10.4

What's Changed

Changelog

release(turborepo): 2.10.3 by @github-actions[bot] in vercel/turborepo#13222

ci: Retry Windows nextest aborts from transient 0xc0000142 spawn failures by @anthonyshew in vercel/turborepo#13240

perf: Use mimalloc as the global allocator by @anthonyshew in vercel/turborepo#13237

perf: Parse yarn v1 lockfiles in a single pass by @anthonyshew in vercel/turborepo#13241

ci: Fix cache outputs for Eve app by @anthonyshew in vercel/turborepo#13243

perf: Stop materializing spans for the disabled daemon log layer by @anthonyshew in vercel/turborepo#13244

fix: Keep ancestor-scoped bun dependencies resolvable after prune renames by @anthonyshew in vercel/turborepo#13236

perf: Overlap external dependency hashing with package file hashing by @anthonyshew in vercel/turborepo#13234

perf: Build tracked repo index concurrently with package graph by @anthonyshew in vercel/turborepo#13232

perf: Release tokio runtime at exit so background DNS lookups never stall the user by @anthonyshew in vercel/turborepo#13231

perf: Overhaul pnpm lockfile parsing and dependency closure computation by @anthonyshew in vercel/turborepo#13228

feat: Add futureFlags.experimentalCargoWorkspaces flag (no-op) by @anthonyshew in vercel/turborepo#13227

feat: Introduce toolchain provider abstraction by @anthonyshew in vercel/turborepo#13235

perf: Parse Berry lockfiles in a single pass by @anthonyshew in vercel/turborepo#13242

fix: Apply input exclusion globs to the filesystem walk by @anthonyshew in vercel/turborepo#13224

fix: Stop root-directory packages from claiming every file in change mapping by @anthonyshew in vercel/turborepo#13225

chore: Rename turborepo-repository napi package to @turbo/repository by @anthonyshew in vercel/turborepo#13226

perf: Hash git blobs with hardware-accelerated SHA-1 by @anthonyshew in vercel/turborepo#13245

release(turborepo): 2.10.4-canary.1 by @github-actions[bot] in vercel/turborepo#13247

feat: Discover Cargo crates as packages by @anthonyshew in vercel/turborepo#13248

perf: Reuse per-package external dependency hashes in run summaries by @anthonyshew in vercel/turborepo#13249

perf: Stat workspace turbo.json files concurrently during discovery by @anthonyshew in vercel/turborepo#13251

chore: Add tracing spans to workspace discovery and globwalk phases by @anthonyshew in vercel/turborepo#13252

fix: Avoid non-reentrant libc calls in concurrent shutdown process scans by @anthonyshew in vercel/turborepo#13256

perf: Memoize resolved task definitions during engine construction by @anthonyshew in vercel/turborepo#13257

perf: Compute transitive closures and external dependency hashes concurrently with run setup by @anthonyshew in vercel/turborepo#13250

perf: Probe microfrontends configs in parallel by @anthonyshew in vercel/turborepo#13262

feat: Execute Cargo crate tasks via cargo by @anthonyshew in vercel/turborepo#13261

perf: Pre-size engine task collections by @anthonyshew in vercel/turborepo#13265

feat: Expose resolved experimentalCI task configuration in turbo query by @anthonyshew in vercel/turborepo#13264

feat: Derive input and output globs for Cargo tasks by @anthonyshew in vercel/turborepo#13263

perf: Parse large pnpm lockfile sections in parallel by @anthonyshew in vercel/turborepo#13266

feat: Hash Cargo external dependencies per-crate by @anthonyshew in vercel/turborepo#13267

ci: Install pnpm 10 in musl containers for Library Release by @anthonyshew in vercel/turborepo#13269

ci: Force pnpm overwrite in Library Release musl containers by @anthonyshew in vercel/turborepo#13270

perf: Defer the untracked-scan barrier to first file-hash use by @anthonyshew in vercel/turborepo#13268

ci: Fetch API-created commit before updating local ref by @anthonyshew in vercel/turborepo#13271

release(library): 0.0.1-canary.22 by @github-actions[bot] in vercel/turborepo#13272

perf: Remove lock and dispatch overhead from task hash precomputation by @anthonyshew in vercel/turborepo#13273

fix: Fall back to lockfile detection in @turbo/repository when package manager is undeclared by @anthonyshew in vercel/turborepo#13275

test: Add end-to-end coverage for Cargo workspaces by @anthonyshew in vercel/turborepo#13274

release(library): 0.0.1-canary.23 by @github-actions[bot] in vercel/turborepo#13276

release(turborepo): 2.10.4-canary.2 by @github-actions[bot] in vercel/turborepo#13278

fix: Collapse nested package-manager fallback conditional by @anthonyshew in vercel/turborepo#13279

feat: Make turbo watch Cargo-aware by @anthonyshew in vercel/turborepo#13280

... (truncated)

Changelog

Sourced from turbo's changelog.

Release Documentation

Quick Start

Automated Canary Releases

Canary releases run on an hourly schedule via the [Release workflow][1]:

Runs every hour via cron, skipping if no relevant files (crates/, packages/, cli/) changed since the last canary tag

Skips if the latest commit is a release PR merge (to avoid releasing the version bump itself)

Publishes to npm with the canary tag

Opens a PR with auto-merge enabled to merge the version bump back to main

No manual intervention required for canary releases.

Manual Releases (Stable/Custom)

Create a release by triggering the [Turborepo Release][1] workflow

For stable releases, use patch, minor, or major

For custom pre-releases, use prepatch, preminor, or premajor

Check the "Dry Run" box to test the workflow without publishing

A PR is automatically opened to merge the release branch back into main

Merge this promptly to avoid conflicts

Release @turbo/repository

Run [bump-version.sh][4] to update the versions of the packages. Merge in the changes to main.

Create a release by triggering the [Turborepo Library Release][5] workflow.

Check the "Dry Run" box to run the full release workflow without publishing any packages.

Notes

GitHub Release Notes are published automatically using the config from [turborepo-release.yml][2], triggered by the [turbo-orchestrator][3] bot.

Turborepo CLI Release Process - In-Depth Guide

This section provides comprehensive documentation on how the Turborepo CLI is released, including the architecture, workflows, and detailed step-by-step processes.

Table of Contents

Architecture Overview

Automated Canary Releases

Version Management

Release Workflow Stages

Packages Released

... (truncated)

Commits

1506a11 publish 2.10.4 to registry
11a68c7 fix: Stop flagging relative imports that resolve into node_modules in boundar...
947b478 fix: Raise the open-file soft limit at startup (#13282)
ddc584d feat: Make turbo prune Cargo-aware (#13281)
ff0d508 perf: Skip dependency-closure assembly for toolchains that derive nothing (#1...
39d623e feat: Make turbo watch Cargo-aware (#13280)
af01fdf fix: Collapse nested package-manager fallback conditional (#13279)
7e02f94 release(turborepo): 2.10.4-canary.2 (#13278)
8e3a59f release(library): 0.0.1-canary.23 (#13276)
ce18f0a test: Add end-to-end coverage for Cargo workspaces (#13274)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for turbo since your current version.

Updates @babel/core from 7.28.4 to 7.29.6

Release notes

Sourced from @babel/core's releases.

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

#17782 Improve trailing comma comment handling (@JLHwung)

📝 Documentation

#17847 Replace npmjs.com links with npmx.dev (@nicolo-ribaudo)

... (truncated)

Commits

04ea6b2 v7.29.6
99f498a [7.x packport]Improve input source map handling (#18001)
feba0a3 Preserve original identifier names from input sourcemaps (#17992) (#17998)
aa8394e v7.29.0
ad0d03f [7.x backport] feat: Allow specifying startLine in code frame (#17739)
d7f4008 v7.28.6
e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
d725e39 Add BABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK (#17569)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/core since your current version.

Updates ws from 6.2.3 to 6.2.4

Release notes

Sourced from ws's releases.

6.2.4

Bug fixes

Backported 2b2abd45 to the 6.x release line (a76e2111).

Commits

86d3e8a [dist] 6.2.4
a76e211 [security] Limit retained message parts
See full diff in compare view

Updates @babel/plugin-transform-modules-systemjs from 7.27.1 to 7.29.7

Release notes

Sourced from @babel/plugin-transform-modules-systemjs's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
a458f66 v7.29.4
32ebd5a [7.x backport]fix(systemjs): improve module string name support (#17974)
aa8394e v7.29.0
0053db6 Update polyfill packages (#17727)
61647ae v7.28.5
a177d55 [Babel 8] Use t.traverseFast to replace some path.traverse (#17518)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/plugin-transform-modules-systemjs since your current version.

Updates basic-ftp from 5.0.5 to 5.3.1

Release notes

Sourced from basic-ftp's releases.

5.3.1

Fixed: Protect against unbounded control response, fixes GHSA-rpmf-866q-6p89.

5.3.0

Changed: Introduced an upper bound for total bytes of directory listing, fixes GHSA-rp42-5vxx-qpwr.

Added: Option to increase the upper bound for total bytes of directory listing in Client constructor.

5.2.2

Fixed: Improve control character rejection, fixes GHSA-6v7q-wjvx-w8wg.

5.2.1

Fixed: Reject control character injection attempts using paths. See GHSA-chqc-8p9q-pq6q.

5.2.0

Changed: Skip files with invalid name in downloadToDir.

5.1.0

Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (#259)

Changelog

Sourced from basic-ftp's changelog.

5.3.1

Fixed: Protect against unbounded control response, fixes GHSA-rpmf-866q-6p89.

5.3.0

Changed: Introduced an upper bound for total bytes of directory listing, fixes GHSA-rp42-5vxx-qpwr.

Added: Option to increase the upper bound for total bytes of directory listing in Client constructor.

5.2.2

Fixed: Improve control character rejection, fixes GHSA-6v7q-wjvx-w8wg.

5.2.1

Fixed: Reject control character injection attempts using paths. See GHSA-chqc-8p9q-pq6q.

5.2.0

Changed: Skip files with invalid name in downloadToDir. Fixes security vulnerability CVE-2026-27699, see GHSA-5rq4-664w-9x2c.

5.1.0

Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (#259)

Commits

980371b Guard against unbounded control response
50827c7 Adjust changelog to match release notes
c9378a8 Fix test
22abe43 Update Github Actions
0feaaec Fix test
6629d7d Improve error message
9c3bf4f Set higher default value for max size of directory listing
acd3942 Bump version
1304429 Offer maxListingBytes as an option
5cb5367 Add bounded StringWriter
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by patrickjuchli, a new releaser for basic-ftp since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates defu from 6.1.4 to 6.1.7

Release notes

Sourced from defu's releases.

v6.1.7

compare changes

📦 Build

Correct the types export entry (#160)

Export Defu types (#157)

❤️ Contributors

Jakub Michálek (@J-Michalek)

Kricsleo (@kricsleo)

v6.1.6

compare changes

📦 Build

Fix mixed types (407b516)

v6.1.5

compare changes

🩹 Fixes

Prevent prototype pollution via __proto__ in defaults (#156)

Ignore inherited enumerable properties (11ba022)

✅ Tests

Add more tests for plain objects (b65f603)

❤️ Contributors

Pooya Parsa (@pi0)

Kricsleo (@kricsleo)

Changelog

Sourced from defu's changelog.

v6.1.7

compare changes

🩹 Fixes

defu.d.cts: Export Defu types (#157)

📦 Build

Correct the types export entry (#160)

❤️ Contributors

Jakub Michálek (@J-Michalek)

Kricsleo (@kricsleo)

v6.1.6

compare changes

📦 Build

Fix mixed types (407b516)

❤️ Contributors

Pooya Parsa (@pi0)

v6.1.5

compare changes

🩹 Fixes

Prevent prototype pollution via __proto__ in defaults (#156)

Ignore inherited enumerable properties (11ba022)

🏡 Chore

Add tea.yaml (70cffe5)

Update repo (23cc432)

Fix typecheck (89df6bb)

✅ Tests

Add more tests for plain objects (b65f603)

🤖 CI

... (truncated)

Commits

80c0146 chore(release): v6.1.7
40d7ef4 fix(defu.d.cts): export Defu types (#157)
3d3a7c8 build: correct the types export entry (#160)
001c290 chore(release): v6.1.6
407b516 build: fix mixed types
23e59e6 chore(release): v6.1.5
11ba022 fix: ignore inherited enumerable properties
3942bfb fix: prevent prototype pollution via __proto__ in defaults (#156)
d3ef16d chore(deps): update actions/checkout action to v6 (#151)
869a053 chore(deps): update actions/setup-node action to v6 (#149)
Additional commits viewable in compare view

Updates fast-uri from 3.1.0 to 3.1.3

Release notes

Sourced from fast-uri's releases.

v3.1.3

⚠️ Security Release

Fixes: GHSA-4c8g-83qw-93j6

Full Changelog: fastify/fast-uri@v3.1.2...v3.1.3

v3.1.2

⚠️ Security Release

Fix for GHSA-v39h-62p7-jpjc

What's Changed

Handle malformed fragment decoding as a parse error by @mcollina in fastify/fast-uri#171

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

Fix for GHSA-q3j6-qgpj-74h6

What's Changed

build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in fastify/fast-uri#148

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in fastify/fast-uri#149

chore(.npmrc): ignore scripts by @Fdawgs in fastify/fast-uri#150

build(deps-dev): remove @fastify/pre-commit by @Fdawgs in fastify/fast-uri#151

build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in fastify/fast-uri#152

ci(ci): add concurrency config by @Fdawgs in fastify/fast-uri#153

build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in fastify/fast-uri#154

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in fastify/fast-uri#156

chore(license): standardise license notice by @Fdawgs in fastify/fast-uri#159

style: remove trailing whitespace by @Fdawgs in fastify/fast-uri#161

ci: remove unused github files by @Tony133 in fastify/fast-uri#162

chore: update readme by @Tony133 in fastify/fast-uri#164

build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-manager.yml from 5 to 6 by @dependabot[bot] in fastify/fast-uri#165

build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in fastify/fast-uri#166

build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in fastify/fast-uri#167

ci: add lock-threads workflow by @Fdawgs in fastify/fast-uri#169

New Contributors

@Tony133 made their first contribution in fastify/fast-uri#162

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits

0549fe3 Bumped v3.1.3
2a6d357 Merge commit from fork
919dd8e Bumped v3.1.2
c65ba57 fixup: linting
6c86c17 Merge commit from fork
a95158a Handle malformed fragment decoding without throwing (#171)
cea547c Bumped v3.1.1
876ce79 Merge commit from fork
dcdf690 ci: add lock-threads workflow (#169)
c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
Additional commits viewable in compare view

Updates flatted from 3.3.3 to 3.4.2

Commits

3bf0909 3.4.2
885ddcc fix CWE-1321
0bdba70 added flatted-view to the benchmark
2a02dce 3.4.1
fba4e8f Merge pull request #89 from WebReflection/python-fix
5fe8648 added "when in Rome" also a test for PHP
53517ad some minor improvement
b3e2a0c Fixing recursion issue in Python too
c4b46db Add SECURITY.md for security policy and reporting
f86d071 Create dependabot.yml for version updates
Additional commits viewable in compare view

Updates handlebars from 4.7.8 to 4.7.9

Release notes

Sourced from handlebars's releases.

v4.7.9

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

GHSA-2w6w-674q-4c4q

GHSA-3mfm-83xf-c92r

GHSA-xhpv-hc6g-r9c6

GHSA-xjpj-3mr7-gcpf

GHSA-9cx6-37pm-9jff

GHSA-2qvq-rjwj-gvw9

GHSA-7rx3-28cr-v5wh

GHSA-442j-39wm-28r2

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.9 - March 26th, 2026

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

Commits

Commits

dce542c v4.7.9
8a41389 Update release notes
68d8df5 Fix security issues
b2a0831 Fix browser tests
9f98c16 Fix release script
45443b4 Revert "Improve partial indenting performance"
8841a5f Fix CI errors with linting
e0137c2 fix: enable shell mode for spawn to resolve Windows EINVAL issue
e914d60 Improve rendering performance
7de4b41 Upgrade GitHub Actions checkout and setup-node on 4.x branch
Additional commits viewable in compare view

Updates ip-address from 10.0.1 to 10.2.0

Commits

80fccaa 10.2.0
abaeb4d Type Address4.addressMinusSuffix as non-nilable (closes #143)
2878c29 Preserve subnet prefix through Address6.to4() (closes #123) (#203)
586666e Reject trailing junk in Address6.fromURL (closes #158) (#202)
80bc76e Validate static factories instead of silently overflowing (#201)
98927be Clarify isValid() accepts CIDRs with host bits set (#81)
a0eb073 Fix getScope() and broaden getType() classification (closes #122) (#200)
ec52105 Add networkForm() for CIDR network-address strings (#199)
a9443a7 Add isMapped4() predicate for IPv4-mapped IPv6 addresses (closes #62) (#198)
f01d742 Add address-property predicates (private, ULA, loopback, link-local, etc.) (#...
Additional commits viewable in compare view

Updates launch-editor from 2.11.1 to 2.14.1

Commits

3f97c64 v2.14.1
0cc9550 fix: reject UNC paths (#138)
afd1ab9 ci: run tests on mac and windows (#136)
0bfa328 test: add some tests for launch-editor package (#135)
1b006ae chore: add README (#134)
383ef26 v2.14.0
6277209 ci: harden publish settings
520b2f7 fix(deps): update all non-major dependencies (#129)
475ac66 chore(deps): update dependency lint-staged to v17 (#130)
247bf1d chore(deps): update dependency yorkie to v2 (#131)
Additional commits viewable in

… updates Bumps the npm_and_yarn group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `1.13.4` | `2.10.4` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.4` | `7.29.6` | | [ws](https://github.com/websockets/ws) | `6.2.3` | `6.2.4` | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.27.1` | `7.29.7` | | [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.0.5` | `5.3.1` | | [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.7` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.3` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.0.1` | `10.2.0` | | [launch-editor](https://github.com/vitejs/launch-editor) | `2.11.1` | `2.14.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.3` | `1.4.0` | | [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.15.3` | | [yaml](https://github.com/eemeli/yaml) | `2.8.1` | `2.9.0` | Bumps the npm_and_yarn group with 1 update in the /airborne-react-native directory: [turbo](https://github.com/vercel/turborepo). Bumps the npm_and_yarn group with 6 updates in the /airborne-react-native/ExampleOldArch directory: | Package | From | To | | --- | --- | --- | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.27.1` | `7.29.6` | | [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.11` | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.27.1` | `7.29.7` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.9.0` | Bumps the npm_and_yarn group with 6 updates in the /airborne-react-native/ExampleSplitBundle directory: | Package | From | To | | --- | --- | --- | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.0` | `7.29.6` | | [ws](https://github.com/websockets/ws) | `6.2.3` | `6.2.4` | | [ws](https://github.com/websockets/ws) | `7.5.10` | `7.5.11` | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.27.1` | `7.29.7` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.5.3` | `5.9.3` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | Bumps the npm_and_yarn group with 3 updates in the /airborne_server/cf_host directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser), [qs](https://github.com/ljharb/qs) and [path-to-regexp](https://github.com/pillarjs/path-to-regexp). Updates `turbo` from 1.13.4 to 2.10.4 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v1.13.4...v2.10.4) Updates `@babel/core` from 7.28.4 to 7.29.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core) Updates `ws` from 6.2.3 to 6.2.4 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.3...6.2.4) Updates `@babel/plugin-transform-modules-systemjs` from 7.27.1 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs) Updates `basic-ftp` from 5.0.5 to 5.3.1 - [Release notes](https://github.com/patrickjuchli/basic-ftp/releases) - [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md) - [Commits](patrickjuchli/basic-ftp@v5.0.5...v5.3.1) Updates `defu` from 6.1.4 to 6.1.7 - [Release notes](https://github.com/unjs/defu/releases) - [Changelog](https://github.com/unjs/defu/blob/main/CHANGELOG.md) - [Commits](unjs/defu@v6.1.4...v6.1.7) Updates `fast-uri` from 3.1.0 to 3.1.3 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.3) Updates `flatted` from 3.3.3 to 3.4.2 - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) Updates `handlebars` from 4.7.8 to 4.7.9 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9) Updates `ip-address` from 10.0.1 to 10.2.0 - [Commits](beaugunderson/ip-address@v10.0.1...v10.2.0) Updates `launch-editor` from 2.11.1 to 2.14.1 - [Commits](vitejs/launch-editor@v2.11.1...v2.14.1) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `node-forge` from 1.3.3 to 1.4.0 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.3...v1.4.0) Updates `qs` from 6.13.0 to 6.15.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.15.3) Updates `shell-quote` from 1.8.3 to 1.9.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.9.0) Updates `yaml` from 2.8.1 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.1...v2.9.0) Updates `turbo` from 1.13.4 to 2.10.4 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v1.13.4...v2.10.4) Updates `@babel/core` from 7.27.1 to 7.29.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core) Updates `ws` from 7.5.10 to 7.5.11 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.3...6.2.4) Updates `@babel/plugin-transform-modules-systemjs` from 7.27.1 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs) Updates `flatted` from 3.3.3 to 3.4.2 - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `shell-quote` from 1.8.3 to 1.9.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.9.0) Updates `yaml` from 2.8.1 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.1...v2.9.0) Updates `@babel/core` from 7.28.0 to 7.29.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core) Updates `ws` from 6.2.3 to 6.2.4 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.3...6.2.4) Updates `ws` from 7.5.10 to 7.5.11 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.3...6.2.4) Updates `@babel/plugin-transform-modules-systemjs` from 7.27.1 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs) Updates `fast-xml-parser` from 4.5.3 to 5.9.3 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.5.3...v5.9.3) Updates `flatted` from 3.3.3 to 3.4.2 - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) Updates `joi` from 17.13.3 to 17.13.4 - [Commits](hapijs/joi@v17.13.3...v17.13.4) Updates `launch-editor` from 2.10.0 to 2.14.1 - [Commits](vitejs/launch-editor@v2.11.1...v2.14.1) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `qs` from 6.13.0 to 6.15.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.15.3) Updates `shell-quote` from 1.8.3 to 1.9.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.9.0) Updates `yaml` from 2.8.1 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.1...v2.9.0) Removes `fast-xml-parser` Updates `qs` from 6.14.0 to 6.15.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.15.3) Updates `path-to-regexp` from 8.2.0 to 8.4.2 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v8.2.0...v8.4.2) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.10.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/core" dependency-version: 7.29.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 6.2.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: basic-ftp dependency-version: 5.3.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: defu dependency-version: 6.1.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yaml dependency-version: 2.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: turbo dependency-version: 2.10.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/core" dependency-version: 7.29.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 7.5.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yaml dependency-version: 2.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/core" dependency-version: 7.29.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 6.2.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 7.5.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.9.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: joi dependency-version: 17.13.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yaml dependency-version: 2.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 8.4.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

semanticdiff-com · 2026-07-07T05:41:19Z

Review changes with

Changed Files

File	Status
airborne_docs/package-lock.json	72% smaller
airborne_dashboard/package-lock.json	71% smaller
airborne-react-native/package.json	67% smaller
airborne-react-native/ExampleOldArch/package-lock.json	56% smaller
package-lock.json	41% smaller
airborne_server/cf_host/package-lock.json	17% smaller
airborne-react-native/ExampleSplitBundle/package.json	13% smaller
airborne-react-native/ExampleOldArch/package.json	0% smaller
airborne-react-native/ExampleSplitBundle/package-lock.json	Unsupported file format
airborne-react-native/example/package.json	0% smaller
airborne_server/cf_host/package.json	0% smaller

dependabot · 2026-07-14T09:27:24Z

Superseded by #369.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2026

dependabot Bot closed this Jul 14, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-1b79ba3d86 branch July 14, 2026 09:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates - #362

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates#362
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-1b79ba3d86

dependabot Bot commented on behalf of github Jul 7, 2026 •

edited

Loading

Uh oh!

semanticdiff-com Bot commented Jul 7, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Turborepo v2.10.4

What's Changed

Changelog

Release Documentation

Quick Start

Automated Canary Releases

Manual Releases (Stable/Custom)

Release @turbo/repository

Notes

Turborepo CLI Release Process - In-Depth Guide

Table of Contents

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

6.2.4

Bug fixes

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

v7.29.4 (2026-05-05)

🐛 Bug Fix

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

5.3.1

5.3.0

5.2.2

5.2.1

5.2.0

5.1.0

5.3.1

5.3.0

5.2.2

5.2.1

5.2.0

5.1.0

v6.1.7

📦 Build

❤️ Contributors

v6.1.6

📦 Build

v6.1.5

🩹 Fixes

✅ Tests

❤️ Contributors

v6.1.7

🩹 Fixes

📦 Build

❤️ Contributors

v6.1.6

📦 Build

❤️ Contributors

v6.1.5

🩹 Fixes

🏡 Chore

✅ Tests

🤖 CI

v3.1.3

⚠️ Security Release

v3.1.2

⚠️ Security Release

dependabot Bot commented on behalf of github Jul 7, 2026 •

edited

Loading

Release `@turbo/repository`

semanticdiff-com Bot commented Jul 7, 2026 •

edited

Loading