build(deps): bump the npm-deps group with 7 updates by dependabot[bot] · Pull Request #6272 · FlowCrypt/flowcrypt-browser

dependabot · 2026-08-09T22:04:25Z

Bumps the npm-deps group with 7 updates:

Package	From	To
dompurify	`3.4.12`	`3.4.13`
googleapis	`173.0.0`	`174.0.1`
postcss-html	`1.8.1`	`2.0.0`
puppeteer	`25.4.0`	`25.5.0`
typescript-eslint	`8.65.0`	`8.66.0`
undici-types	`8.9.0`	`8.10.0`
web-ext	`10.5.0`	`10.6.0`

Updates dompurify from 3.4.12 to 3.4.13

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

Fixed an issue with hook removal during IN_PLACE sanitization, thanks @koyokr

Fixed an issue with hooks potentially bypassing the clone guard, thanks @AkshayjainG

Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @AkshayjainG

Bumped several dependencies where possible

Commits

3067f77 release: 3.4.13 (#1562)
See full diff in compare view

Updates googleapis from 173.0.0 to 174.0.1

Release notes

Sourced from googleapis's releases.

googleapis: v174.0.1

174.0.1 (2026-08-05)

Bug Fixes

generator: respect ignore.json when downloading discovery docs and cleaning up old files (#3965) (7c7bfdd)

Commits

3285a2c chore: release main (#3966)
51c4d51 chore: ignore broken aiplatform:v1 discovery schema (#3969)
7c7bfdd fix(generator): respect ignore.json when downloading discovery docs and clean...
9967f25 chore(generator): only commit index files if there are staged changes (#3962)
8525611 chore: ignore broken aiplatform:v1beta1 and analytics:v3 discovery schemas (#...
306daab chore(test): increase kitchen sink system test timeout to 10m (#3960)
0048777 chore: release main (#3952)
ac15310 feat: run the generator (#3959)
c429a9b feat: run the generator (#3955)
5950a04 fix: prevent OOMs and HTTP 408 timeouts during API generation and push (#3954)
Additional commits viewable in compare view

Updates postcss-html from 1.8.1 to 2.0.0

Release notes

Sourced from postcss-html's releases.

v2.0.0

What's Changed

fix: move postcss to peerDependencies by @Anoesj in ota-meshi/postcss-html#158

chore!: drop support for Node.js under 22 by @kytta in ota-meshi/postcss-html#162

feat!: migrate to ESM, require Node.js 22.12+, update htmlparser2/postcss-safe-parser, and restrict deep imports by @ota-meshi in ota-meshi/postcss-html#163

Full Changelog: ota-meshi/postcss-html@v1.8.1...v2.0.0

Commits

b3680e4 2.0.0
6dd4136 feat!: migrate to ESM, require Node.js 22.12+, update htmlparser2/postcss-saf...
4be6792 chore(deps): update dependency mocha to v11 (#131)
9b40df2 chore(deps): update dependency chai to v6 (#152)
defb9ac chore(deps): update dependency mocha-chai-jest-snapshot to v1.1.7 (#136)
f7cc3d1 chore!: drop support for Node.js under 22 (#162)
2ff6d27 Update Stylus fixtures to fix tests (#161)
b20e21f fix: move postcss to peerDependencies (#158)
fb5002a chore: update snapshot (#159)
be13165 chore(deps): update actions/upload-pages-artifact action to v4 (#151)
Additional commits viewable in compare view

Updates puppeteer from 25.4.0 to 25.5.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.5.0

25.5.0 (2026-08-04)

🎉 Features

roll to Firefox 153.0 (#15258) (6a54140)

track dialog status (#15266) (9a6f646)

🛠️ Fixes

disable WebUIOmniboxPopup and WebUIOmniboxAimPopup features (#15278) (5dc2964)

do not override the user agent when nothing is emulated (#15274) (39c4653)

forward headers to browserURL HTTP discovery and WebSocket connection (#15238) (948d870)

reject PWA access if network conditions are configured (#15271) (6eb2b8c)

roll to Chrome 151.0.7922.71 (#15272) (a7f07db)

roll to Firefox 153.0.1 (#15269) (dd365cc)

📄 Documentation

document units in page.metrics() (#15221) (eae2b9a)

🏗️ Refactor

move some of the logger to constructor (#15282) (67d1467)

use a enum to manage the prefixes (#15281) (c8faa53)

Dependencies

The following workspace dependencies were updated

dependencies

@puppeteer/browsers bumped from 3.0.6 to 3.1.0

puppeteer: v25.5.0

25.5.0 (2026-08-04)

♻️ Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated

dependencies

... (truncated)

Changelog

Sourced from puppeteer's changelog.

25.5.0 (2026-08-04)

♻️ Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated

dependencies

@puppeteer/browsers bumped from 3.0.6 to 3.1.0

🎉 Features

roll to Firefox 153.0 (#15258) (6a54140)

track dialog status (#15266) (9a6f646)

🛠️ Fixes

disable WebUIOmniboxPopup and WebUIOmniboxAimPopup features (#15278) (5dc2964)

do not override the user agent when nothing is emulated (#15274) (39c4653)

forward headers to browserURL HTTP discovery and WebSocket connection (#15238) (948d870)

reject PWA access if network conditions are configured (#15271) (6eb2b8c)

roll to Chrome 151.0.7922.71 (#15272) (a7f07db)

roll to Firefox 153.0.1 (#15269) (dd365cc)

📄 Documentation

document units in page.metrics() (#15221) (eae2b9a)

🏗️ Refactor

move some of the logger to constructor (#15282) (67d1467)

use a enum to manage the prefixes (#15281) (c8faa53)

Commits

f8d63c7 chore: release main (#15263)
1e871b0 chore(deps): bump the all group with 2 updates (#15280)
dd365cc fix: roll to Firefox 153.0.1 (#15269)
a7f07db fix: roll to Chrome 151.0.7922.71 (#15272)
8197e1a revert: run hooks even if we try to kill the process (#15288)
39c4653 fix: do not override the user agent when nothing is emulated (#15274)
67d1467 refactor: move some of the logger to constructor (#15282)
c8faa53 refactor: use a enum to manage the prefixes (#15281)
3ab1b98 chore(deps): bump the all group in /website with 2 updates (#15279)
5dc2964 fix: disable WebUIOmniboxPopup and WebUIOmniboxAimPopup features (#15278)
Additional commits viewable in compare view

Updates typescript-eslint from 8.65.0 to 8.66.0

Release notes

Sourced from typescript-eslint's releases.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

Evyatar Daud @StyleShit

Kirk Waiblinger @kirkwaiblinger

Steffen Schroeder

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

e51b11b chore(release): publish 8.66.0
See full diff in compare view

Updates undici-types from 8.9.0 to 8.10.0

Release notes

Sourced from undici-types's releases.

v8.10.0

What's Changed

feat: namespace h2 options by @metcoder95 in nodejs/undici#5498

test: update WPT expectations by @mcollina in nodejs/undici#5587

test: add cache/dedupe + dns re-dispatch integration tests by @GiHoon1123 in nodejs/undici#5535

fix(websocket): support process.unref by @mcollina in nodejs/undici#5578

fix(h2): ensure every request settles by @mcollina in nodejs/undici#5603

fix(readable): consume a body whose end has already been emitted by @marko1olo in nodejs/undici#5617

fix(retry): skip the content-length checkpoint for HEAD and for a 206 without content-range by @marko1olo in nodejs/undici#5610

fix: revert idle socket validation to setTimeout(0) to prevent stall on idle event loop by @marceli1404 in nodejs/undici#5606

fix(env-http-proxy-agent): match bare IPv6 addresses in no_proxy by @marko1olo in nodejs/undici#5623

test: handle aggregate balanced pool errors by @marko1olo in nodejs/undici#5377

fix(readable): keep body bytes that arrive after setEncoding() by @mcollina in nodejs/undici#5620

fix(socks5): evict unused origin pools by @Kkartik14 in nodejs/undici#5595

fix: skip deduplication for upgrade requests by @Ram-blip in nodejs/undici#5593

fix(retry): forward informational responses by @mcollina in nodejs/undici#5625

fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView reply bodies by @marko1olo in nodejs/undici#5619

fix(interceptors): cache() and deduplicate() silently inert on Client/Pool without opts.origin by @marko1olo in nodejs/undici#5628

build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in nodejs/undici#5633

build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 by @dependabot[bot] in nodejs/undici#5634

build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in nodejs/undici#5636

fix(mock): emit request body lifecycle hooks by @marko1olo in nodejs/undici#5367

fix(h2): detach upgrade close handler after GOAWAY by @pacocartones in nodejs/undici#5641

fix: retry refused HTTP/2 streams by @mcollina in nodejs/undici#5598

fix: preserve DNS origin hostname on sockets by @cyphercodes in nodejs/undici#5577

New Contributors

@marceli1404 made their first contribution in nodejs/undici#5606

@Kkartik14 made their first contribution in nodejs/undici#5595

@pacocartones made their first contribution in nodejs/undici#5641

@cyphercodes made their first contribution in nodejs/undici#5577

Full Changelog: nodejs/undici@v8.9.0...v8.10.0

Commits

c8d80e6 Bumped v8.10.0 (#5644)
66923b4 fix: preserve DNS origin hostname on sockets (#5577)
3926499 fix: retry refused HTTP/2 streams (#5598)
73d6e9e fix(h2): detach upgrade close handler after GOAWAY (#5641)
b111adb fix(mock): emit request body lifecycle hooks (#5367)
ae4a3e3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)
ec3fbf1 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)
2151720 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)
b96a116 fix(interceptors): allow interceptors without opts.origin (#5628)
a18ef2d fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...
Additional commits viewable in compare view

Updates web-ext from 10.5.0 to 10.6.0

Release notes

Sourced from web-ext's releases.

10.6.0 (2026-08-04)

main changes

Added: new Firefox 154.0b4 schema for web-ext lint

Fixed: rename default export to webExt (#3789)

dependencies

Updated: dependency @devicefarmer/adbkit to 3.3.9 (#3774)

Updated: dependency addons-linter to 10.9.0 (#3780)

Updated: dependency firefox-profile to 4.7.1 (#3795)

dev dependencies

Updated: dependency @babel/cli to 8.0.4 (#3775)

Updated: dependency @eslint/eslintrc to 3.3.6 (#3779)

Updated: dependency fs-extra to 11.4.0 (#3788)

Updated: dependency globals to 17.8.0 (#3791)

Updated: dependency prettier to 3.9.6 (#3785)

Updated: dependency fast-uri to 3.1.4 (#3784)

Updated: dependency fx-runner to 1.6.0 (#3796)

others

Add SSDLC and SBOM Actions (#3783)

Commits

6aeb4b9 10.6.0
8e76d7b chore: rename default export webExt (#3789)
a89584c chore(deps-dev): bump @eslint/eslintrc from 3.3.5 to 3.3.6 (#3779)
f40ea4e Bump addons-linter to 10.10.0 (#3797)
8aafbba chore(deps-dev): bump prettier from 3.9.5 to 3.9.6 (#3785)
978d273 chore(deps-dev): bump globals from 17.7.0 to 17.8.0 (#3791)
bf72979 chore(deps): bump addons-linter from 10.8.0 to 10.9.0 (#3780)
27054d2 chore(deps-dev): bump fs-extra from 11.3.6 to 11.4.0 (#3788)
e5ccd4c Bump fx-runner version to 1.6.0 (#3796)
c5c7026 chore(deps): bump mozilla/ssdlc-actions/.github/workflows/code-security-analy...
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
puppeteer	[>= 21.7.a, < 21.8]
puppeteer	[>= 22.0.a, < 22.1]
puppeteer	[>= 22.1.a, < 22.2]
puppeteer	[>= 22.3.a, < 22.4]
puppeteer	[>= 22.5.a, < 22.6]
puppeteer	[>= 22.6.a, < 22.7]
puppeteer	[>= 22.4.a, < 22.5]
puppeteer	[>= 22.2.a, < 22.3]
puppeteer	[>= 22.7.a, < 22.8]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-deps group with 7 updates: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.13` | | [googleapis](https://github.com/googleapis/google-api-nodejs-client) | `173.0.0` | `174.0.1` | | [postcss-html](https://github.com/ota-meshi/postcss-html) | `1.8.1` | `2.0.0` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.4.0` | `25.5.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.66.0` | | [undici-types](https://github.com/nodejs/undici) | `8.9.0` | `8.10.0` | | [web-ext](https://github.com/mozilla/web-ext) | `10.5.0` | `10.6.0` | Updates `dompurify` from 3.4.12 to 3.4.13 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.12...3.4.13) Updates `googleapis` from 173.0.0 to 174.0.1 - [Release notes](https://github.com/googleapis/google-api-nodejs-client/releases) - [Commits](googleapis/google-api-nodejs-client@googleapis-v173.0.0...googleapis-v174.0.1) Updates `postcss-html` from 1.8.1 to 2.0.0 - [Release notes](https://github.com/ota-meshi/postcss-html/releases) - [Commits](ota-meshi/postcss-html@v1.8.1...v2.0.0) Updates `puppeteer` from 25.4.0 to 25.5.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](puppeteer/puppeteer@puppeteer-v25.4.0...puppeteer-v25.5.0) Updates `typescript-eslint` from 8.65.0 to 8.66.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint) Updates `undici-types` from 8.9.0 to 8.10.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.9.0...v8.10.0) Updates `web-ext` from 10.5.0 to 10.6.0 - [Release notes](https://github.com/mozilla/web-ext/releases) - [Commits](mozilla/web-ext@10.5.0...10.6.0) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: googleapis dependency-version: 174.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: postcss-html dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: puppeteer dependency-version: 25.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: typescript-eslint dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: undici-types dependency-version: 8.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: web-ext dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 9, 2026

dependabot Bot requested a review from sosnovsky as a code owner August 9, 2026 22:04

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 9, 2026

FlowCryptRobot approved these changes Aug 9, 2026

View reviewed changes

FlowCryptRobot enabled auto-merge (squash) August 9, 2026 22:04

FlowCryptRobot merged commit 2dfe038 into master Aug 9, 2026
11 checks passed

FlowCryptRobot deleted the dependabot/npm_and_yarn/npm-deps-5520b70f4f branch August 9, 2026 22:29

Navigation Menu

Uh oh!

build(deps): bump the npm-deps group with 7 updates - #6272

build(deps): bump the npm-deps group with 7 updates#6272
FlowCryptRobot merged 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-deps-5520b70f4f

dependabot Bot commented on behalf of github Aug 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 9, 2026

DOMPurify 3.4.13

googleapis: v174.0.1

174.0.1 (2026-08-05)

Bug Fixes

v2.0.0

What's Changed

puppeteer-core: v25.5.0

25.5.0 (2026-08-04)

🎉 Features

🛠️ Fixes

📄 Documentation

🏗️ Refactor

Dependencies

puppeteer: v25.5.0

25.5.0 (2026-08-04)

♻️ Chores

Dependencies

25.5.0 (2026-08-04)

♻️ Chores

Dependencies

🎉 Features

🛠️ Fixes

📄 Documentation

🏗️ Refactor

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

🩹 Fixes

❤️ Thank You

8.66.0 (2026-08-03)

v8.10.0

What's Changed

New Contributors

10.6.0 (2026-08-04)

main changes

dependencies

dev dependencies

others

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant