Build(deps): Bump the npm-dependencies group across 1 directory with 12 updates

[dependabot]

Bumps the npm-dependencies group with 12 updates in the / directory:

Package	From	To
ansi-regex	6.3.0	6.4.0
baseline-browser-mapping	2.11.25	2.11.26
browserslist	4.29.0	4.29.3
caniuse-lite	1.0.30001810	1.0.30001814
electron-to-chromium	1.5.430	1.5.443
fs-extra	11.4.0	11.4.1
node-releases	2.0.56	2.0.57
source-map-js	1.2.1	1.2.2
string-width	8.2.2	8.3.0
wrap-ansi	10.0.1	10.0.2
yargs	18.1.0	18.2.0
sass-embedded	1.104.1	1.105.1

Updates ansi-regex from 6.3.0 to 6.4.0

Release notes

Sourced from ansi-regex's releases.

v6.4.0

• Match OSC sequences using the C1 introducer 79e112d

---

chalk/ansi-regex@v6.3.0...v6.4.0

Commits

• f923667 6.4.0
• 79e112d Match OSC sequences using the C1 introducer
• d0dd70a Meta tweaks
• See full diff in compare view

Updates baseline-browser-mapping from 2.11.25 to 2.11.26

Commits

• c1934c6 Patch to 2.11.26 because browser or feature data changed
• 4873684 Browser or feature data changed
• 9030798 Updating static site
• a5df351 Updating static site
• ecc5b54 Updating static site
• See full diff in compare view

Updates browserslist from 4.29.0 to 4.29.3

Release notes

Sourced from browserslist's releases.

4.29.3

• Updated Firefox ESR.

4.29.2

• Fixed ignoring null usage in cover X in Y query (by @​wahidrizka).

4.29.1

• Fixed config name loading protection on Windows (by @​oss-security-shop).
• Fixed case-insensitive negation queries (by @​jakezwang).
• Fixed percentage and supports queries case-insensitive (by @​wahidrizka).
• Fixed old Node.js tests (by @​aaron-belenky).
• Reduced code (by @​charmander).

Changelog

Sourced from browserslist's changelog.

4.29.3

• Updated Firefox ESR.

4.29.2

• Fixed ignoring null usage in cover X in Y query (by @​wahidrizka).

4.29.1

• Fixed config name loading protection on Windows (by @​oss-security-shop).
• Fixed case-insensitive negation queries (by @​jakezwang).
• Fixed percentage and supports queries case-insensitive (by @​wahidrizka).
• Fixed old Node.js tests (by @​aaron-belenky).
• Reduced code (by @​charmander).

Commits

• b4809dd Release 4.29.3 version
• 9d844f8 Update Firefox ESR
• 0033f34 Update dependencies
• 906d329 Release 4.29.2 version
• ff8c83f Update dependencies
• 067f4a1 Merge pull request #952 from wahidrizka/fix-cover-null-usage
• f760921 Do not add versions without usage data to cover queries
• 5be63f5 Merge pull request #953 from wahidrizka/docs-android-latest-version
• 1e5356f Note that Android version queries return only the latest version
• 5b7e941 Add missed changes to ChangeLog
• Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001810 to 1.0.30001814

Commits

• 663dbe9 Update caniuse-db 1.0.30001814
• 405baf1 Update caniuse-db 1.0.30001813
• c890d6a Update caniuse-db 1.0.30001812
• See full diff in compare view

Updates electron-to-chromium from 1.5.430 to 1.5.443

Commits

• d330a11 1.5.443
• 27fc1c4 generate new version
• 0fa8331 1.5.442
• 79611e6 generate new version
• 781c0b2 1.5.441
• b891b61 generate new version
• 934130a 1.5.440
• 85084e5 generate new version
• 640c0a2 1.5.439
• fa7286d generate new version
• Additional commits viewable in compare view

Updates fs-extra from 11.4.0 to 11.4.1

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

• Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)
• Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)

Commits

• 1e223d3 11.4.1
• 8cfd0a0 Remove obsolete docs note
• de72292 Treat Unicode-normalization-only renames like case-only renames (#1079)
• 7e0ce7f Remove broken link (#1083)
• 00e858c Update GH Actions versions (#1082)
• f829cc9 fix: propagate emptyDir directory read errors (#1080)
• See full diff in compare view

Updates node-releases from 2.0.56 to 2.0.57

Commits

• d29b26a 2.0.57
• 8607968 feat: Nightly Sync
• See full diff in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Commits

• 0a1d334 1.2.2
• 4c6fa26 Update changelog
• cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
• 7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
• See full diff in compare view

Updates string-width from 8.2.2 to 8.3.0

Release notes

Sourced from string-width's releases.

v8.3.0

• Improve performance 31ae8b8

---

sindresorhus/string-width@v8.2.2...v8.3.0

Commits

• ffa1de3 8.3.0
• 31ae8b8 Improve performance
• 5945008 Meta tweaks
• See full diff in compare view

Updates wrap-ansi from 10.0.1 to 10.0.2

Release notes

Sourced from wrap-ansi's releases.

v10.0.2

• Keep a sequence whole when a combining mark follows it bb6b370

---

chalk/wrap-ansi@v10.0.1...v10.0.2

Commits

• 4e44ec2 10.0.2
• bb6b370 Keep a sequence whole when a combining mark follows it
• 0309544 Meta tweaks
• See full diff in compare view

Updates yargs from 18.1.0 to 18.2.0

Changelog

Sourced from yargs's changelog.

18.2.0 (2026-09-20)

Features

• support creating completions for fish shell (#2568) (34d833a)

Bug Fixes

• completion: remove spurious single-quote in zsh loadautofunc detection (#2548) (224e285)

Commits

• e49b60a chore(main): release 18.2.0 (#2569)
• 3ed7095 Set up staged trusted publishing, and remove stale deno workflow (#2591)
• 224e285 fix(completion): remove spurious single-quote in zsh loadautofunc detection (...
• fb9c055 Add SECURITY.md
• 2a4378b Add FUNDING.yml with funding sources
• 34d833a feat: support creating completions for fish shell (#2568)
• 3a49608 Remove copy-pasted email address (#2566)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for yargs since your current version.

Updates sass-embedded from 1.104.1 to 1.105.1

Changelog

Sourced from sass-embedded's changelog.

1.105.1

• Improve error messages for @extends across different media queries.

1.105.0

• Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

• Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

• Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

• Add a SassModule class and a corresponding Value.assertModule() method.

Commits

• d310347 Update Dart Sass version and release
• f62580b Bump simple-git from 3.36.0 to 4.0.1 (#447)
• 8818f40 Update Dart Sass version and release
• 15d6185 [meta.load] Add support for first-class modules (#446)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions