Skip to content

Combine open dependabot updates - #683

Merged
jb3 merged 26 commits into
masterfrom
deps/combined-dependabot-updates
Oct 14, 2026
Merged

jb3 merged 26 commits into
masterfrom
deps/combined-dependabot-updates

Conversation

@jb3

@jb3 jb3 commented Oct 14, 2026

Copy link
Copy Markdown
Member

Combines all open dependabot PRs into one: #682, #681, #676, #675, #674, #673, #672, #670, #669, #668, #667, #666.

Merge conflict in package.json (autocompleter/autoprefixer) resolved by taking the newest of each; package-lock.json regenerated.

Note: several are major bumps (fullcalendar 5→7, fontawesome 5→7, autocompleter 6→10, cssnano 5→9, node 24→26 in compose) and need checking in CI / manually.

dependabot Bot and others added 26 commits October 7, 2026 19:03
Bumps [autocompleter](https://github.com/denis-taran/autocomplete) from 6.1.3 to 10.0.0.
- [Changelog](https://github.com/denis-taran/autocomplete/blob/master/changelog.md)
- [Commits](https://github.com/denis-taran/autocomplete/commits)

---
updated-dependencies:
- dependency-name: autocompleter
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) from 5.15.4 to 7.3.1.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@5.15.4...7.3.1)

---
updated-dependencies:
- dependency-name: "@fortawesome/fontawesome-free"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fullcalendar](https://github.com/fullcalendar/fullcalendar/tree/HEAD/packages/vanilla) from 5.11.5 to 7.1.0.
- [Release notes](https://github.com/fullcalendar/fullcalendar/releases)
- [Changelog](https://github.com/fullcalendar/fullcalendar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fullcalendar/fullcalendar/commits/v7.1.0/packages/vanilla)

---
updated-dependencies:
- dependency-name: fullcalendar
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [cssnano](https://github.com/cssnano/cssnano) from 5.1.15 to 9.2.2.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@5.1.15...cssnano@9.2.2)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5 to 6.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@v5...v6)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the npm-minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.19` | `10.6.1` |
| [html5sortable](https://github.com/lukasoppermann/html5sortable) | `0.13.3` | `0.14.0` |
| [sass](https://github.com/sass/dart-sass) | `1.103.1` | `1.105.1` |
| [uglify-js](https://github.com/mishoo/UglifyJS) | `3.18.0` | `3.19.3` |
| [browser-sync](https://github.com/BrowserSync/browser-sync) | `3.0.3` | `3.0.4` |
| [gulp](https://github.com/gulpjs/gulp) | `5.0.0` | `5.0.1` |



Updates `autoprefixer` from 10.4.19 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.19...10.6.1)

Updates `html5sortable` from 0.13.3 to 0.14.0
- [Release notes](https://github.com/lukasoppermann/html5sortable/releases)
- [Commits](lukasoppermann/html5sortable@v0.13.3...v0.14.0)

Updates `sass` from 1.103.1 to 1.105.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.103.1...1.105.1)

Updates `uglify-js` from 3.18.0 to 3.19.3
- [Release notes](https://github.com/mishoo/UglifyJS/releases)
- [Commits](mishoo/UglifyJS@v3.18.0...v3.19.3)

Updates `browser-sync` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/BrowserSync/browser-sync/releases)
- [Changelog](https://github.com/BrowserSync/browser-sync/blob/master/changelog.js)
- [Commits](BrowserSync/browser-sync@v3.0.3...v3.0.4)

Updates `gulp` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/gulpjs/gulp/releases)
- [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md)
- [Commits](gulpjs/gulp@v5.0.0...v5.0.1)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: browser-sync
  dependency-version: 3.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: gulp
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: html5sortable
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: sass
  dependency-version: 1.105.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: uglify-js
  dependency-version: 3.19.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the python-minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.19.0` | `6.20.0` |
| [pytz](https://github.com/stub42/pytz) | `2026.4` | `2026.5` |
| [simplejson](https://github.com/simplejson/simplejson) | `4.1.2` | `4.2.0` |
| [selenium](https://github.com/SeleniumHQ/Selenium) | `4.50.0` | `4.51.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.10` | `0.17.0` |
| [prek](https://github.com/j178/prek) | `0.5.4` | `0.5.5` |



Updates `pypdf` from 6.19.0 to 6.20.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.19.0...6.20.0)

Updates `pytz` from 2026.4 to 2026.5
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2026.4...release_2026.5)

Updates `simplejson` from 4.1.2 to 4.2.0
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/main/CHANGES.txt)
- [Commits](simplejson/simplejson@v4.1.2...v4.2.0)

Updates `selenium` from 4.50.0 to 4.51.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.50.0...selenium-4.51.0)

Updates `ruff` from 0.16.10 to 0.17.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.10...0.17.0)

Updates `prek` from 0.5.4 to 0.5.5
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.5.4...v0.5.5)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pytz
  dependency-version: '2026.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: simplejson
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: selenium
  dependency-version: 4.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: ruff
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: prek
  dependency-version: 0.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps node from 24-slim to 26-slim.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 26-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…-2d6ab9367f' into deps/combined-dependabot-updates
…/metadata-action-6' into deps/combined-dependabot-updates
…s/upload-artifact-6' into deps/combined-dependabot-updates
…s/checkout-7' into deps/combined-dependabot-updates
…/build-push-action-7' into deps/combined-dependabot-updates
…s/download-artifact-7' into deps/combined-dependabot-updates
…9.2.2' into deps/combined-dependabot-updates
…ndar-7.1.0' into deps/combined-dependabot-updates
…ome/fontawesome-free-7.3.1' into deps/combined-dependabot-updates
…leter-10.0.0' into deps/combined-dependabot-updates
…r-patch-d9dce27b8f' into deps/combined-dependabot-updates

# Conflicts:
#	package-lock.json
#	package.json
@jb3
jb3 merged commit 8cf124b into master Oct 14, 2026
7 checks passed
@jb3
jb3 deleted the deps/combined-dependabot-updates branch October 14, 2026 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant