Skip to content

Comments

Bump the minor-and-patch group across 1 directory with 10 updates#7893

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-a5f43a3532
Open

Bump the minor-and-patch group across 1 directory with 10 updates#7893
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-a5f43a3532

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 18, 2026

Bumps the minor-and-patch group with 10 updates in the / directory:

Package From To
cors 2.8.5 2.8.6
vite-express 0.21.1 0.22.1
dotenv 17.2.3 17.2.4
@material/material-color-utilities 0.3.0 0.4.0
@types/google.picker 0.0.51 0.0.52
markdown-it 14.1.0 14.1.1
mimetext 3.0.27 3.0.28
pdfjs-dist 5.4.530 5.4.624
zod 4.3.5 4.3.6
@google/genai 1.34.0 1.39.0

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.


Updates vite-express from 0.21.1 to 0.22.1

Changelog

Sourced from vite-express's changelog.

Changelog

0.22.0 (2026-01-09)

  • Bump dependencies (#164)
Commits

Updates dotenv from 17.2.3 to 17.2.4

Changelog

Sourced from dotenv's changelog.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.
Commits

Updates @material/material-color-utilities from 0.3.0 to 0.4.0

Commits

Updates @types/google.picker from 0.0.51 to 0.0.52

Commits

Updates markdown-it from 14.1.0 to 14.1.1

Changelog

Sourced from markdown-it's changelog.

[14.1.1] - 2026-01-11

Security

  • Fixed regression from v13 in linkify inline rule. Specific patterns could cause high CPU use. Thanks to @​ltduc147 for report.
Commits

Updates mimetext from 3.0.27 to 3.0.28

Release notes

Sourced from mimetext's releases.

v3.0.28

3.0.28 (2026-01-28)

Bug Fixes

  • add types to package.json (b1bdda2)
Commits

Updates pdfjs-dist from 5.4.530 to 5.4.624

Release notes

Sourced from pdfjs-dist's releases.

v5.4.624

This release contains improvements for accessibility, the annotation editor, image decoding, performance and the viewer.

Changes since v5.4.530

Commits
  • 384c620 Merge pull request #20565 from kairosci/fix-bug-20557
  • e4cd317 Merge pull request #20602 from Snuffleupagus/BasePDFStream-2
  • ecb09d6 Add the current loading percentage to the onPassword callback
  • 4ca205b Add an abstract BasePDFStreamRangeReader class, that all the old `IPDFStrea...
  • 54d8c5e Add an abstract BasePDFStreamReader class, that all the old `IPDFStreamRead...
  • 4a8fb4d Add an abstract BasePDFStream class, that all the old IPDFStream implemen...
  • a80f10f Remove the onProgress callback from the IPDFStreamRangeReader interface
  • 05b78ce Stop registering an onProgress callback on the PDFWorkerStreamRangeReader...
  • 9872657 Remove the unused IPDFStreamRangeReader.prototype.isStreamingSupported getter
  • 62d5408 Stop tracking progressiveDataLength in the ChunkedStreamManager class
  • Additional commits viewable in compare view

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)
  • 251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call
  • edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)
  • 85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)
  • cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)
  • dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)
  • 762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling
  • ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6
Commits

Updates @google/genai from 1.34.0 to 1.39.0

Release notes

Sourced from @​google/genai's releases.

v1.39.0

1.39.0 (2026-01-30)

Features

  • Add include_input query parameter to Get Interaction endpoint. (84bc7f4)
  • Add registerFiles for you can use gcs files with mldev. (7acf3e0)
  • Support distillation tuning (c9a2e72)
  • Support OSS Tuning in GenAI SDK (258f211)

Bug Fixes

  • Add metadata in batch inlined response (0e95bb7)

v1.38.0

1.38.0 (2026-01-20)

Features

  • Add ModelArmorConfig support for prompt and response sanitization via the Model Armor service (be65c24)
  • Allow custom endpoints for authentication with Vertex AI in Typescript (891e32d), closes #1137
  • Update data types from discovery doc. (a16a180)
  • Update data types from discovery doc. (a4eaa8c)

v1.37.0

1.37.0 (2026-01-15)

Features

  • Support 4:5 and 5:4 aspect ratio in Interactions (5294da2)

v1.36.0

1.36.0 (2026-01-14)

Features

  • Add FileSearchCallContent to Interactions (ccf11a4)
  • Add ImageConfig to GenerationConfig for image generation in Interactions (f34b6fb)
  • Support JS local tokenizer (bb429ad)
  • voice activity support (3ad1011)

v1.35.0

1.35.0 (2026-01-07)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

1.39.0 (2026-01-30)

Features

  • Add include_input query parameter to Get Interaction endpoint. (84bc7f4)
  • Add registerFiles for you can use gcs files with mldev. (7acf3e0)
  • Support distillation tuning (c9a2e72)
  • Support OSS Tuning in GenAI SDK (258f211)

Bug Fixes

  • Add metadata in batch inlined response (0e95bb7)

1.38.0 (2026-01-20)

Features

  • Add ModelArmorConfig support for prompt and response sanitization via the Model Armor service (be65c24)
  • Allow custom endpoints for authentication with Vertex AI in Typescript (891e32d), closes #1137
  • Update data types from discovery doc. (a16a180)
  • Update data types from discovery doc. (a4eaa8c)

1.37.0 (2026-01-15)

Features

  • Support 4:5 and 5:4 aspect ratio in Interactions (5294da2)

1.36.0 (2026-01-14)

Features

  • Add FileSearchCallContent to Interactions (ccf11a4)
  • Add ImageConfig to GenerationConfig for image generation in Interactions (f34b6fb)
  • Support JS local tokenizer (bb429ad)
  • voice activity support (3ad1011)

1.35.0 (2026-01-07)

Features

  • [Python] add RegisterFiles so gcs files can be used with genai. (1bf555c)
  • Add PersonGeneration to ImageConfig for Vertex Gempix (b0753d7)
Commits
  • 1b5ec62 chore(main): release 1.39.0 (#1284)
  • 22f271f chore: Support root object conversion for Go SDK. Add response-level root obj...
  • 0e95bb7 fix: Add metadata in batch inlined response
  • 258f211 feat: Support OSS Tuning in GenAI SDK
  • d78f185 chore: Update interactions
  • 580731c chore: revert unintentional changes.
  • c9a2e72 feat: Support distillation tuning
  • c89d49f chore: Fix the sdk web sample
  • 7acf3e0 feat: Add registerFiles for you can use gcs files with mldev.
  • 84bc7f4 feat: Add include_input query parameter to Get Interaction endpoint.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 18, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-a5f43a3532 branch 2 times, most recently from 7ead98e to 71aaf3d Compare February 20, 2026 04:53
Bumps the minor-and-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [vite-express](https://github.com/szymmis/vite-express) | `0.21.1` | `0.22.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.3` | `17.2.4` |
| [@material/material-color-utilities](https://github.com/material-foundation/material-color-utilities/tree/HEAD/typescript) | `0.3.0` | `0.4.0` |
| [@types/google.picker](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/google.picker) | `0.0.51` | `0.0.52` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.1.0` | `14.1.1` |
| [mimetext](https://github.com/muratgozel/MIMEText) | `3.0.27` | `3.0.28` |
| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `5.4.530` | `5.4.624` |
| [zod](https://github.com/colinhacks/zod) | `4.3.5` | `4.3.6` |
| [@google/genai](https://github.com/googleapis/js-genai) | `1.34.0` | `1.39.0` |



Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `vite-express` from 0.21.1 to 0.22.1
- [Changelog](https://github.com/szymmis/vite-express/blob/master/CHANGELOG.md)
- [Commits](szymmis/vite-express@v0.21.1...v0.22.1)

Updates `dotenv` from 17.2.3 to 17.2.4
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.3...v17.2.4)

Updates `@material/material-color-utilities` from 0.3.0 to 0.4.0
- [Commits](https://github.com/material-foundation/material-color-utilities/commits/HEAD/typescript)

Updates `@types/google.picker` from 0.0.51 to 0.0.52
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/google.picker)

Updates `markdown-it` from 14.1.0 to 14.1.1
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.1.0...14.1.1)

Updates `mimetext` from 3.0.27 to 3.0.28
- [Release notes](https://github.com/muratgozel/MIMEText/releases)
- [Changelog](https://github.com/muratgozel/MIMEText/blob/master/release.config.mjs)
- [Commits](muratgozel/MIMEText@v3.0.27...v3.0.28)

Updates `pdfjs-dist` from 5.4.530 to 5.4.624
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v5.4.530...v5.4.624)

Updates `zod` from 4.3.5 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.5...v4.3.6)

Updates `@google/genai` from 1.34.0 to 1.39.0
- [Release notes](https://github.com/googleapis/js-genai/releases)
- [Changelog](https://github.com/googleapis/js-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/js-genai@v1.34.0...v1.39.0)

---
updated-dependencies:
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vite-express
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: dotenv
  dependency-version: 17.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@material/material-color-utilities"
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/google.picker"
  dependency-version: 0.0.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: markdown-it
  dependency-version: 14.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: mimetext
  dependency-version: 3.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pdfjs-dist
  dependency-version: 5.4.624
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@google/genai"
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-a5f43a3532 branch from 71aaf3d to 604e7ec Compare February 20, 2026 13:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants