Skip to content

build(deps): bump the npm_and_yarn group across 3 directories with 2 updates#623

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/apps/dumili/api/npm_and_yarn-60be13739a
Open

build(deps): bump the npm_and_yarn group across 3 directories with 2 updates#623
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/apps/dumili/api/npm_and_yarn-60be13739a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 1 update in the /apps/dumili/api directory: cloudinary.
Bumps the npm_and_yarn group with 1 update in the /apps/duckguessr/api directory: cookie.
Bumps the npm_and_yarn group with 1 update in the /apps/edgecreator/api directory: cloudinary.

Updates cloudinary from 1.41.3 to 2.7.0

Release notes

Sourced from cloudinary's releases.

Version 2.7.0

  • fix: prevent parameter injection via ampersand in parameter values (#709)

Version 2.6.1

No release notes provided.

Version 2.6.1-rc.1

  • fix: uploader interface

Version 2.6.0

  • chore: bumped jsdoc
  • fix: defaults for related asset methods and proper content_type
  • chore: Updated Sample Projects (#698)
  • fix: metadata field datasource type (#693)
  • feat: Add support for DELETE /resources/backup/:asset_id (#700)
  • chore: dev dependencies cleanup
  • chore: new node version support in CI

Version 2.5.1

  • fix: added missing stream method to ts spec

Version 2.5.0

  • feat: auto_transcription on upload and explicit support (#690)
  • feat: auto_chaptering on upload and explicit support (#689)
  • feat: access key management via provisioning api (#687)

Version 2.4.0

  • feat: exposing config endpoint from admin api
  • fix: update metadata field added missing param default_disabled
  • fix: types definitions

Version 2.3.1

  • fix: use 0.0.0 as fallback when package.json unavailable
  • fix: upload_chunked_stream works properly with more than 2 chunks

Version 2.3.0

  • fix: url analytics property name
  • fix: dependencies explicit version (fix for CI)
  • fix: decoding transformation string before sending in upload payload
  • feat: update folders

Version 2.2.0

  • feat: selective response for admin and search api
  • feat: multiple values support for fields and with_field methods in search api

Version 2.1.0

  • feat: added support for new api in beta - analyze api
  • chore: added state to datasource entry type
  • fix: metadata field api response datasource type improved
  • feat: notification-url for rename and destroy methods

... (truncated)

Changelog

Sourced from cloudinary's changelog.

2.7.0 / 2025-06-18

  • fix: prevent parameter injection via ampersand in parameter values (#709)

2.6.1 / 2025-05-05

2.6.1-rc.1 / 2025-05-05

  • fix: uploader interface

2.6.0 / 2025-03-11

  • chore: bumped jsdoc
  • fix: defaults for related asset methods and proper content_type
  • chore: Updated Sample Projects (#698)
  • fix: metadata field datasource type (#693)
  • feat: Add support for DELETE /resources/backup/:asset_id (#700)
  • chore: dev dependencies cleanup
  • chore: new node version support in CI

2.5.1 / 2024-10-08

  • fix: added missing stream method to ts spec

2.5.0 / 2024-09-15

  • feat: auto_transcription on upload and explicit support (#690)
  • feat: auto_chaptering on upload and explicit support (#689)
  • feat: access key management via provisioning api (#687)

2.4.0 / 2024-07-30

  • feat: exposing config endpoint from admin api
  • fix: update metadata field added missing param default_disabled
  • fix: types definitions

2.3.1 / 2024-07-25

  • fix: use 0.0.0 as fallback when package.json unavailable

... (truncated)

Commits

Updates cookie from 0.5.0 to 0.7.0

Release notes

Sourced from cookie's releases.

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates cloudinary from 1.41.3 to 2.7.0

Release notes

Sourced from cloudinary's releases.

Version 2.7.0

  • fix: prevent parameter injection via ampersand in parameter values (#709)

Version 2.6.1

No release notes provided.

Version 2.6.1-rc.1

  • fix: uploader interface

Version 2.6.0

  • chore: bumped jsdoc
  • fix: defaults for related asset methods and proper content_type
  • chore: Updated Sample Projects (#698)
  • fix: metadata field datasource type (#693)
  • feat: Add support for DELETE /resources/backup/:asset_id (#700)
  • chore: dev dependencies cleanup
  • chore: new node version support in CI

Version 2.5.1

  • fix: added missing stream method to ts spec

Version 2.5.0

  • feat: auto_transcription on upload and explicit support (#690)
  • feat: auto_chaptering on upload and explicit support (#689)
  • feat: access key management via provisioning api (#687)

Version 2.4.0

  • feat: exposing config endpoint from admin api
  • fix: update metadata field added missing param default_disabled
  • fix: types definitions

Version 2.3.1

  • fix: use 0.0.0 as fallback when package.json unavailable
  • fix: upload_chunked_stream works properly with more than 2 chunks

Version 2.3.0

  • fix: url analytics property name
  • fix: dependencies explicit version (fix for CI)
  • fix: decoding transformation string before sending in upload payload
  • feat: update folders

Version 2.2.0

  • feat: selective response for admin and search api
  • feat: multiple values support for fields and with_field methods in search api

Version 2.1.0

  • feat: added support for new api in beta - analyze api
  • chore: added state to datasource entry type
  • fix: metadata field api response datasource type improved
  • feat: notification-url for rename and destroy methods

... (truncated)

Changelog

Sourced from cloudinary's changelog.

2.7.0 / 2025-06-18

  • fix: prevent parameter injection via ampersand in parameter values (#709)

2.6.1 / 2025-05-05

2.6.1-rc.1 / 2025-05-05

  • fix: uploader interface

2.6.0 / 2025-03-11

  • chore: bumped jsdoc
  • fix: defaults for related asset methods and proper content_type
  • chore: Updated Sample Projects (#698)
  • fix: metadata field datasource type (#693)
  • feat: Add support for DELETE /resources/backup/:asset_id (#700)
  • chore: dev dependencies cleanup
  • chore: new node version support in CI

2.5.1 / 2024-10-08

  • fix: added missing stream method to ts spec

2.5.0 / 2024-09-15

  • feat: auto_transcription on upload and explicit support (#690)
  • feat: auto_chaptering on upload and explicit support (#689)
  • feat: access key management via provisioning api (#687)

2.4.0 / 2024-07-30

  • feat: exposing config endpoint from admin api
  • fix: update metadata field added missing param default_disabled
  • fix: types definitions

2.3.1 / 2024-07-25

  • fix: use 0.0.0 as fallback when package.json unavailable

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump the npm_and_yarn group across 3 directories with 2 …
4a0b425 
…updates

Bumps the npm_and_yarn group with 1 update in the /apps/dumili/api directory: [cloudinary](https://github.com/cloudinary/cloudinary_npm).
Bumps the npm_and_yarn group with 1 update in the /apps/duckguessr/api directory: [cookie](https://github.com/jshttp/cookie).
Bumps the npm_and_yarn group with 1 update in the /apps/edgecreator/api directory: [cloudinary](https://github.com/cloudinary/cloudinary_npm).


Updates `cloudinary` from 1.41.3 to 2.7.0
- [Release notes](https://github.com/cloudinary/cloudinary_npm/releases)
- [Changelog](https://github.com/cloudinary/cloudinary_npm/blob/master/CHANGELOG.md)
- [Commits](cloudinary/cloudinary_npm@1.41.3...2.7.0)

Updates `cookie` from 0.5.0 to 0.7.0
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.0)

Updates `cloudinary` from 1.41.3 to 2.7.0
- [Release notes](https://github.com/cloudinary/cloudinary_npm/releases)
- [Changelog](https://github.com/cloudinary/cloudinary_npm/blob/master/CHANGELOG.md)
- [Commits](cloudinary/cloudinary_npm@1.41.3...2.7.0)

---
updated-dependencies:
- dependency-name: cloudinary
  dependency-version: 2.7.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cloudinary
  dependency-version: 2.7.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants