Skip to content

build(deps): bump the non-breaking-deps group in /Cyrano with 7 updates#909

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/Cyrano/non-breaking-deps-f4344f36a4
Open

build(deps): bump the non-breaking-deps group in /Cyrano with 7 updates#909
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/Cyrano/non-breaking-deps-f4344f36a4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps the non-breaking-deps group in /Cyrano with 7 updates:

Package From To
@anthropic-ai/sdk 0.88.0 0.90.0
@aws-sdk/client-s3 3.1029.0 3.1032.0
dompurify 3.3.3 3.4.0
puppeteer 24.40.0 24.42.0
eslint 10.2.0 10.2.1
imapflow 1.3.1 1.3.2
typescript-eslint 8.58.2 8.59.0

Updates @anthropic-ai/sdk from 0.88.0 to 0.90.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.90.0

0.90.0 (2026-04-16)

Full Changelog: sdk-v0.89.0...sdk-v0.90.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (b26134b)

Chores

  • actually delete release-doctor.yml (0fe984d)
  • ci: remove release-doctor workflow (08e58bd)

sdk: v0.89.0

0.89.0 (2026-04-14)

Full Changelog: sdk-v0.88.0...sdk-v0.89.0

Features

  • api: manual updates (57c2a11)
  • api: mark Sonnet and Opus 4 as deprecated (eff41b7)

Bug Fixes

  • streaming: add missing events (4c52919)
Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.90.0 (2026-04-16)

Full Changelog: sdk-v0.89.0...sdk-v0.90.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (b26134b)

Chores

  • actually delete release-doctor.yml (0fe984d)
  • ci: remove release-doctor workflow (08e58bd)

0.89.0 (2026-04-14)

Full Changelog: sdk-v0.88.0...sdk-v0.89.0

Features

  • api: manual updates (57c2a11)
  • api: mark Sonnet and Opus 4 as deprecated (eff41b7)

Bug Fixes

  • streaming: add missing events (4c52919)
Commits

Updates @aws-sdk/client-s3 from 3.1029.0 to 3.1032.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1032.0

3.1032.0(2026-04-17)

Documentation Changes
  • client-neptune: Improving Documentation for Neptune (e27d9cd0)
New Features
  • clients: update client endpoints as of 2026-04-17 (1fd8c265)
  • client-connect: Fixes in SDK for customers using TestCase APIs (bd88a7ec)
  • client-imagebuilder: ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import. (d211b308)
  • client-quicksight: Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation. (da327c47)
  • client-sagemaker: Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration. (ffcb883d)
  • client-cleanrooms: This release adds support for configurable spark properties for Cleanrooms PySpark workloads. (c5de5506)
  • client-groundstation: Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations - UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations. (360c3817)
  • client-sts: The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader. (c5755466)
  • client-connectcampaignsv2: This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns. (4ee31aed)
Bug Fixes
  • core: reduce object allocations in protocol serde (#7939) (d0c9af06)

For list of updated packages, view updated-packages.md in assets-3.1032.0.zip

v3.1031.0

3.1031.0(2026-04-16)

Chores
Documentation Changes
  • client-cloudwatch: Update documentation of alarm mute rules start and end date fields (3b2342bc)
New Features
  • clients: update client endpoints as of 2026-04-16 (68ae10a1)
  • client-appstream: Add content redirection to Update Stack (1bde7c78)
  • client-connect: This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. (7abcd2c7)
  • client-rds: Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. (b72b175a)
  • client-drs: Updating regex for identification of AWS Regions. (9405d283)
  • client-mediaconvert: Adds support for Elemental Inference powered smart crop feature, enabling video verticalization (c82e5cac)
  • client-auto-scaling: This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. (40e2faa7)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1032.0 (2026-04-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1031.0 (2026-04-16)

Note: Version bump only for package @​aws-sdk/client-s3

3.1030.0 (2026-04-13)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates dompurify from 3.3.3 to 3.4.0

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.0

Most relevant changes:

  • Fixed a problem with FORBID_TAGS not winning over ADD_TAGS, thanks @​kodareef5
  • Fixed several minor problems and typos regarding MathML attributes, thanks @​DavidOliver
  • Fixed ADD_ATTR/ADD_TAGS function leaking into subsequent array-based calls, thanks @​1Jesper1
  • Fixed a missing SAFE_FOR_TEMPLATES scrub in RETURN_DOM path, thanks @​bencalif
  • Fixed a prototype pollution via CUSTOM_ELEMENT_HANDLING, thanks @​trace37labs
  • Fixed an issue with ADD_TAGS function form bypassing FORBID_TAGS, thanks @​eddieran
  • Fixed an issue with ADD_ATTR predicates skipping URI validation, thanks @​christos-eth
  • Fixed an issue with USE_PROFILES prototype pollution, thanks @​christos-eth
  • Fixed an issue leading to possible mXSS via Re-Contextualization, thanks @​researchatfluidattacks and others
  • Fixed an issue with closing tags leading to possible mXSS, thanks @​frevadiscor
  • Fixed a problem with the type dentition patcher after Node version bump
  • Fixed freezing BS runs by reducing the tested browsers array
  • Bumped several dependencies where possible
  • Added needed files for OpenSSF scorecard checks

Published Advisories are here: https://github.com/cure53/DOMPurify/security/advisories?state=published

Commits

Updates puppeteer from 24.40.0 to 24.42.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.42.0

24.42.0 (2026-04-20)

🎉 Features

🛠️ Fixes

  • remove PartitionAllocSchedulerLoopQuarantineTaskControlledPurge from disabled features (#14872) (c9909a5)
  • roll to Chrome 147.0.7727.57 (#14869) (51c4305)

puppeteer: v24.42.0

24.42.0 (2026-04-20)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.41.0 to 24.42.0

puppeteer-core: v24.41.0

24.41.0 (2026-04-15)

🎉 Features

... (truncated)

Changelog

Sourced from puppeteer's changelog.

24.42.0 (2026-04-20)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.41.0 to 24.42.0

🎉 Features

🛠️ Fixes

  • remove PartitionAllocSchedulerLoopQuarantineTaskControlledPurge from disabled features (#14872) (c9909a5)
  • roll to Chrome 147.0.7727.57 (#14869) (51c4305)

24.41.0 (2026-04-15)

🎉 Features

Dependencies

  • The following workspace dependencies were updated

... (truncated)

Commits

Updates eslint from 10.2.0 to 10.2.1

Release notes

Sourced from eslint's releases.

v10.2.1

Bug Fixes

  • 14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)
  • 84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)
  • af764af fix: clarify language and processor validation errors (#20729) (Pixel998)
  • e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

  • ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)
  • 57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)
  • c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)
  • 1418d52 docs: Update README (GitHub Actions Bot)
  • 39771e6 docs: Update README (GitHub Actions Bot)
  • 71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)
  • 22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)
  • 8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

  • 7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])
  • fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])
  • 7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)
  • 4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])
  • 51080eb test: processor service (#20731) (kuldeep kumar)
  • e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)
  • 4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)
  • 066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)
Commits

Updates imapflow from 1.3.1 to 1.3.2

Changelog

Sourced from imapflow's changelog.

1.3.2 (2026-04-17)

Bug Fixes

  • Bumped deps (7b45f61)
  • harden mailbox-lock and error-propagation paths (7b87d96)
Commits

Updates typescript-eslint from 8.58.2 to 8.59.0

Release notes

Sourced from typescript-eslint's releases.

v8.59.0

8.59.0 (2026-04-20)

🚀 Features

  • eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#11789)

❤️ Thank You

  • Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.59.0 (2026-04-20)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the non-breaking-deps group in /Cyrano with 7 updates
fed6064 
Bumps the non-breaking-deps group in /Cyrano with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.88.0` | `0.90.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1029.0` | `3.1032.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.3.3` | `3.4.0` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.40.0` | `24.42.0` |
| [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.2.1` |
| [imapflow](https://github.com/postalsys/imapflow) | `1.3.1` | `1.3.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.58.2` | `8.59.0` |


Updates `@anthropic-ai/sdk` from 0.88.0 to 0.90.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.88.0...sdk-v0.90.0)

Updates `@aws-sdk/client-s3` from 3.1029.0 to 3.1032.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1032.0/clients/client-s3)

Updates `dompurify` from 3.3.3 to 3.4.0
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.3...3.4.0)

Updates `puppeteer` from 24.40.0 to 24.42.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.40.0...puppeteer-v24.42.0)

Updates `eslint` from 10.2.0 to 10.2.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.2.0...v10.2.1)

Updates `imapflow` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/postalsys/imapflow/releases)
- [Changelog](https://github.com/postalsys/imapflow/blob/master/CHANGELOG.md)
- [Commits](postalsys/imapflow@v1.3.1...v1.3.2)

Updates `typescript-eslint` from 8.58.2 to 8.59.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.90.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking-deps
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1032.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking-deps
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking-deps
- dependency-name: puppeteer
  dependency-version: 24.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking-deps
- dependency-name: eslint
  dependency-version: 10.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-breaking-deps
- dependency-name: imapflow
  dependency-version: 1.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-breaking-deps
- dependency-name: typescript-eslint
  dependency-version: 8.59.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-breaking-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added cyrano dependencies Pull requests that update a dependency file labels Apr 20, 2026
@dependabot dependabot Bot requested a review from MightyPrytanis as a code owner April 20, 2026 18:51
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file cyrano labels Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MightyPrytanis MightyPrytanis Awaiting requested review from MightyPrytanis MightyPrytanis is a code owner

Assignees

No one assigned

Labels

cyrano dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants