chore(deps): bump the npm_and_yarn group across 4 directories with 19 updates

[dependabot]

Bumps the npm_and_yarn group with 9 updates in the /py-langchain/frontend directory:

Package	From	To
@langchain/core	0.3.78	0.3.80
axios	1.12.2	1.17.0
react-router	7.9.4	7.16.0
brace-expansion	1.1.12	1.1.15
minimatch	3.1.2	3.1.5
flatted	3.3.3	3.4.2
langsmith	0.3.74	0.7.4
picomatch	4.0.3	4.0.4
picomatch	2.3.1	2.3.2
postcss	8.5.6	8.5.15

Bumps the npm_and_yarn group with 7 updates in the /py-llamaindex/frontend directory:

Package	From	To
axios	1.12.2	1.17.0
react-router	7.9.4	7.16.0
brace-expansion	1.1.12	1.1.15
minimatch	3.1.2	3.1.5
flatted	3.3.3	3.4.2
picomatch	4.0.3	4.0.4
picomatch	2.3.1	2.3.2
postcss	8.5.6	8.5.15

Bumps the npm_and_yarn group with 15 updates in the /ts-llamaindex directory:

Package	From	To
@langchain/core	0.3.78	0.3.80
axios	1.12.2	1.17.0
brace-expansion	1.1.12	1.1.15
minimatch	3.1.2	3.1.5
flatted	3.3.3	3.4.2
langsmith	0.3.74	0.7.4
@langchain/community	0.3.57	1.1.29
picomatch	2.3.1	2.3.2
picomatch	4.0.3	4.0.4
postcss	8.5.2	8.5.10
@auth0/nextjs-auth0	4.13.0	4.17.1
drizzle-orm	0.43.1	0.45.2
next	15.5.9	15.5.19
file-type	16.5.4	21.3.2
qs	6.14.1	6.15.2
ws	8.18.3	8.21.0

Bumps the npm_and_yarn group with 15 updates in the /ts-vercel-ai directory:

Package	From	To
@langchain/core	0.3.78	0.3.80
axios	1.12.2	1.17.0
brace-expansion	1.1.12	1.1.15
minimatch	3.1.2	3.1.5
flatted	3.3.3	3.4.2
langsmith	0.3.74	0.7.4
@langchain/community	0.3.57	1.1.29
picomatch	2.3.1	2.3.2
picomatch	4.0.3	4.0.4
postcss	8.5.2	8.5.10
@auth0/nextjs-auth0	4.13.0	4.17.1
drizzle-orm	0.43.1	0.45.2
next	15.5.9	15.5.19
file-type	16.5.4	21.3.2
qs	6.14.1	6.15.2
ws	8.18.3	8.21.0

Updates @langchain/core from 0.3.78 to 0.3.80

Commits

• 2954498 chore(docs): Update llms.text redirect (#9988)
• b2f3c23 fix(docs): v0.3 redirects fix (#9929)
• e8fbaf3 add core docs redir
• 22c28ef fix(docs): Fix redirects (#9908)
• 926dc85 x
• dbf05fd fix - sry for spam
• 6854916 fix
• c869f64 add index
• b29d194 fix output dir
• 3605e97 null framework
• Additional commits viewable in compare view

Updates axios from 1.12.2 to 1.17.0

Release notes

Sourced from axios's releases.

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

• Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
• Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

• HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

• Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
• Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
• React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
• Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
• Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
• Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
• Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
• Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)

🔧 Maintenance & Chores

• HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
• Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
• CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
• Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
• Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
• Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

• @​BasixKOR (#6792)
• @​carladams1299-lab (#10861)
• @​LaplaceYoung (#10812)
• @​JamieMagee (#10939)
• @​RonGamzu (#10905)
• @​sapirbaruch (#10891)
• @​nezukoagent (#10901)
• @​devareddy05 (#10929)
• @​Mohammad-Faiz-Cloud-Engineer (#10922)
• @​azandabot (#10931)
• @​niksy (#10896)

Full Changelog

... (truncated)

Changelog

Sourced from axios's changelog.

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

• Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
• Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

• HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

• Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
• Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
• React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
• Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
• Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
• Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
• Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
• Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)

🔧 Maintenance & Chores

• HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
• Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
• CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
• Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
• Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
• Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

• @​BasixKOR (#6792)
• @​carladams1299-lab (#10861)
• @​LaplaceYoung (#10812)
• @​JamieMagee (#10939)
• @​RonGamzu (#10905)
• @​sapirbaruch (#10891)
• @​nezukoagent (#10901)
• @​devareddy05 (#10929)
• @​Mohammad-Faiz-Cloud-Engineer (#10922)
• @​azandabot (#10931)
• @​niksy (#10896)

Full Changelog

... (truncated)

Commits

• 4306df2 chore: add fun 88 sponsorship
• 931cc8f chore(release): prepare release 1.17.0 (#10983)
• 38ba1b3 fix(fetch): support basic auth from URL (#10896)
• 32e2515 fix: replace ternary side effect in script (#10931)
• 030e722 chore(deps): bump axios from 1.15.2 to 1.16.1 in /docs (#10960)
• ec63164 chore: remove openspec (#10958)
• 3dec28f fix(http): preserve TLS options for proxy tunnels (#10957)
• a2390a5 fix: correct isCancel type to narrow to CanceledError<T> (#10952)
• fa01b92 chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /docs (#10954)
• 2d2314a fix: AxiosHeaders toJSON() return types (#10956)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for axios since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates react-router from 7.9.4 to 7.16.0

Release notes

Sourced from react-router's releases.

v7.16.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160

v7.15.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151

v7.15.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150

v7.14.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142

v7.14.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141

v7.14.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140

v7.13.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132

v7.13.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131

v7.13.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130

v7.12.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120

v7.11.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110

v7.10.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101

v7.10.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100

v7.9.6

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796

v7.9.5

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v795

Changelog

Sourced from react-router's changelog.

v7.16.0

Minor Changes

• Stabilize future.unstable_trailingSlashAwareDataRequests as future.v8_trailingSlashAwareDataRequests (#15098)

Patch Changes

• Disable manifest path when lazy route dicovery is disabled (#15068)

• Fix browser URL creation to use the configured history window instead of the global window. (#15066)

  • Pass the history/router window through to createBrowserURLImpl so custom window contexts keep the correct URL origin.

• Fix useNavigation() return type to preserve discriminated union across navigation states (#15095)

• Widen MetaDescriptor script:ld+json type from LdJsonObject to LdJsonObject | LdJsonObject[] to permit multiple JSON-LD schemas in a single <script type="application/ld+json"> tag emitted by <Meta /> (#15082)

v7.15.1

Patch Changes

• Update router to operate on fetcher Maps in an immutable manner to avoid delayed React renders from potentially reading an updated but not yet committed Map. This could result in brief flickers in some fetcher-driven optimistic UI scenarios. (#15028)
• Fix serverLoader() returning stale SSR data when a client navigation aborts pending hydration before the hydration clientLoader resolves (#15022)
• Fix RouterProvider onError callback not being called for synchronous initial loader errors in SPA mode (#15039) (#14942)
• Memoize useFetchers to return a stable identity and only change if fetchers changed (#15028)
• Internal refactor to consolidate mutation request detection through shared utility (#15033)

Unstable Changes

⚠️ Unstable features are not recommended for production use

• Add a new unstable_useRouterState() hook that consolidates access to active and pending router states (RFC: #12358) (#15017)

  • Data/Framework/RSC only — throws when used without a data router

  • This should allow you to consolidate usages of the following hooks which will likely be deprecated and removed in a future major version

    • useLocation
    • useSearchParams
    • useParams
    • useMatches
    • useNavigationType
    • useNavigation

    let { active, pending } = unstable_useRouterState();
    // Active is always populated with the current location
    active.location; // replaces useLocation()
    active.searchParams; // replaces useSearchParams()[0]
    active.params; // replaces useParams()
    active.matches; // replaces useMatches()
    active.type; // replaces useNavigationType()

... (truncated)

Commits

• 8984d23 Release v7.16.0 (#15105)
• d71025d Stabilize trailing slash aware data requests (#15098)
• 6e21b63 fix: keep useNavigation() return type a discriminated union (#15095)
• 4cde90b Support array of objects for script:ld+json meta descriptor (#15082)
• dc996ea fix(router): pass configured window to createBrowserURLImpl (#15066)
• cfb5fb0 Disable manifest handler when lazy route discovery is disabled (#15068)
• 16eb79e test: fix typo in test description (#15053)
• 4b464a9 chore: format
• 587d08f Release v7.15.1 (#15038)
• 89996bd Fire onError for initial-load errors when RouterProvider mounts late (#15039)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-router since your current version.

Updates brace-expansion from 1.1.12 to 1.1.15

Release notes

Sourced from brace-expansion's releases.

v1.1.15

• Backport v5.0.6 change to v1 (#111) 0b09384

---

juliangruber/brace-expansion@v1.1.14...v1.1.15

Commits

• 2203f4f 1.1.15
• 0b09384 Backport v5.0.6 change to v1 (#111)
• 10c05fc 1.1.14
• 1afa1b2 Add opt-in { max } mitigation to v1 legacy line (#103)
• 2fbb6a2 Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)
• 0d7652e Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)
• 6c353ca 1.1.13
• 7fd684f Backport fix for GHSA-f886-m6hf-6m8v (#95)
• See full diff in compare view

Updates minimatch from 3.1.2 to 3.1.5

Commits

• 7bba978 3.1.5
• bd25942 docs: add warning about ReDoS
• 1a9c27c fix partial matching of globstar patterns
• 1a2e084 3.1.4
• ae24656 update lockfile
• b100374 limit recursion for **, improve perf considerably
• 26ffeaa lockfile update
• 9eca892 lock node version to 14
• 00c323b 3.1.3
• 30486b2 update CI matrix and actions
• Additional commits viewable in compare view

Updates flatted from 3.3.3 to 3.4.2

Commits

• 3bf0909 3.4.2
• 885ddcc fix CWE-1321
• 0bdba70 added flatted-view to the benchmark
• 2a02dce 3.4.1
• fba4e8f Merge pull request #89 from WebReflection/python-fix
• 5fe8648 added "when in Rome" also a test for PHP
• 53517ad some minor improvement
• b3e2a0c Fixing recursion issue in Python too
• c4b46db Add SECURITY.md for security policy and reporting
• f86d071 Create dependabot.yml for version updates
• Additional commits viewable in compare view

Updates follow-redirects from 1.15.11 to 1.16.0

Commits

• 0c23a22 Release version 1.16.0 of the npm package.
• 844c4d3 Add sensitiveHeaders option.
• 5e8b8d0 ci: add Node.js 24.x to the CI matrix
• 7953e22 ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v6
• 86dc1f8 Sanitizing input.
• See full diff in compare view

Updates langsmith from 0.3.74 to 0.7.4

Release notes

Sourced from langsmith's releases.

v0.7.4

What's Changed

• fix(google-adk): add wrapt dependency by @​QuentinBrosse in langchain-ai/langsmith-sdk#2436
• chore: lock dependencies by @​QuentinBrosse in langchain-ai/langsmith-sdk#2439
• release(py): 0.7.4 by @​QuentinBrosse in langchain-ai/langsmith-sdk#2441

Full Changelog: langchain-ai/langsmith-sdk@v0.7.3...v0.7.4

v0.7.3

What's Changed

• fix: propagate tracingEnabled to nested traceables by @​hntrl in langchain-ai/langsmith-sdk#2427
• chore(python): openai agents: delay span start for spans without inputs on start event by @​angus-langchain in langchain-ai/langsmith-sdk#2424
• release(py): 0.7.3 by @​angus-langchain in langchain-ai/langsmith-sdk#2428

Full Changelog: langchain-ai/langsmith-sdk@v0.7.2...v0.7.3

v0.7.2

What's Changed

• release(js): 0.5.1 by @​jacoblee93 in langchain-ai/langsmith-sdk#2389
• fix(js): Remove @​internal by @​jacoblee93 in langchain-ai/langsmith-sdk#2391
• release(js): 0.5.2 by @​jacoblee93 in langchain-ai/langsmith-sdk#2392
• chore(deps-dev): bump openai from 5.8.2 to 6.18.0 in /js by @​dependabot[bot] in langchain-ai/langsmith-sdk#2378
• chore(deps-dev): bump cross-env from 7.0.3 to 10.1.0 in /js by @​dependabot[bot] in langchain-ai/langsmith-sdk#2379
• chore(deps-dev): bump the js-minor-and-patch group in /js with 4 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#2376
• chore(deps-dev): bump node-fetch from 2.7.0 to 3.3.2 in /js by @​dependabot[bot] in langchain-ai/langsmith-sdk#2380
• Google ADK LangSmith tracing enhancements by @​j-broekhuizen in langchain-ai/langsmith-sdk#2394
• chore: update dependabot.yml to comply with posture checks by @​jkennedyvz in langchain-ai/langsmith-sdk#2393
• chore(deps): bump cryptography from 46.0.3 to 46.0.5 in /python in the uv group across 1 directory by @​dependabot[bot] in langchain-ai/langsmith-sdk#2397
• chore(deps-dev): bump the js-minor-and-patch group in /js with 6 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#2398
• chore(deps-dev): bump eslint-config-prettier from 8.10.0 to 10.1.8 in /js by @​dependabot[bot] in langchain-ai/langsmith-sdk#2399
• chore(deps): bump packaging from 25.0 to 26.0 in /python by @​dependabot[bot] in langchain-ai/langsmith-sdk#2403
• chore(deps-dev): bump pytest from 8.4.2 to 9.0.2 in /python by @​dependabot[bot] in langchain-ai/langsmith-sdk#2405
• chore(deps): bump the py-minor-and-patch group across 1 directory with 20 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#2406
• fix(js): Log Vitest/Jest outputs even if test throws an error by @​jacoblee93 in langchain-ai/langsmith-sdk#2408
• fix(js): Remove async by @​jacoblee93 in langchain-ai/langsmith-sdk#2409
• release(js): 0.5.3 by @​jacoblee93 in langchain-ai/langsmith-sdk#2410
• fix: ignoring p-queue dep by @​jkennedyvz in langchain-ai/langsmith-sdk#2414
• feat(js): add feedback config CRUD and annotation queue rubric items (closes LSPE-67) by @​bentanny in langchain-ai/langsmith-sdk#2420
• fix(js): Add on_start handler for traceable, use in evaluate by @​jacoblee93 in langchain-ai/langsmith-sdk#2421
• release(js): 0.5.4 by @​jacoblee93 in langchain-ai/langsmith-sdk#2422
• feat(python): add feedback config CRUD and annotation queue rubric items (closes LSPE-67) by @​bentanny in langchain-ai/langsmith-sdk#2419
• feat(python): add exceptions_to_handle to @​traceable by @​QuentinBrosse in langchain-ai/langsmith-sdk#2423
• release(py): 0.7.2 by @​jacoblee93 in langchain-ai/langsmith-sdk#2426

New Contributors

• @​j-broekhuizen made their first contribution in langchain-ai/langsmith-sdk#2394
• @​bentanny made their first contribution in langchain-ai/langsmith-sdk#2420

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for langsmith since your current version.

Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.

Updates picomatch from 4.0.3 to 4.0.4

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

• Fix for CVE-2026-33671
• Fix for CVE-2026-33672

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

• e5474fc Publish 4.0.4
• 4516eb5 Merge commit from fork
• 5eceecd Merge commit from fork
• 0db7dd7 Run benchmark again against latest minimatch version (#161)
• 9500377 docs: clarify what brace expansion syntax is and isn't supported (#134)
• 2661f23 fix typo in globstars.js test name (#138)
• 1798b07 docs: fix makeRe example (#143)
• 9d76bc5 chore: undocument removed options (#146)
• e4d718b Remove unused time-require (#160)
• 38dffeb chore(deps): pin dependencies (#158)
• Additional commits viewable in compare view

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

4.0.4

This is a security release fixing several security relevant issues.

What's Changed

• Fix for CVE-2026-33671
• Fix for CVE-2026-33672

Full Changelog: micromatch/picomatch@4.0.3...4.0.4

Commits

• e5474fc Publish 4.0.4
• 4516eb5 Merge commit from fork
• 5eceecd Merge commit from fork
• 0db7dd7 Run benchmark again against latest minimatch version (#161)
• 9500377 docs: clarify what brace expansion syntax is and isn't supported (#134)
• 2661f23 fix typo in globstars.js test name (#138)
• 1798b07 docs: fix makeRe example (#143)
• 9d76bc5 chore: undocument removed options (#146)
• e4d718b Remove unused time-require (#160)
• 38dffeb chore(deps): pin dependencies (#158)
• Additional commits viewable in compare view

Updates postcss from 8.5.6 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14Description has been truncated