Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 13, 2025

Bumps the patch-dependencies group with 13 updates in the / directory:

Package From To
standard 17.1.0 17.1.2
@heroku-cli/color 2.0.1 2.0.4
@heroku-cli/notifications 1.2.4 1.2.5
@heroku-cli/plugin-ps-exec 2.6.2 2.6.3
@heroku/plugin-ai 1.0.1 1.0.2
fs-extra 11.3.0 11.3.2
portfinder 1.0.32 1.0.38
shell-quote 1.8.1 1.8.3
strftime 0.10.0 0.10.3
@types/bytes 3.1.4 3.1.5
@types/shell-escape 0.2.0 0.2.3
@types/urijs 1.19.4 1.19.26
proxyquire 2.1.0 2.1.3

Updates standard from 17.1.0 to 17.1.2

Release notes

Sourced from standard's releases.

v17.1.2

  • Unpin and bump eslint-plugin-react(#1976) 004e63b

standard/standard@v17.1.1...v17.1.2

v17.1.1

  • Pin eslint-plugin-react to 7.35.2 (#1976) d535d98

standard/standard@v17.1.0...v17.1.1

Changelog

Sourced from standard's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Commits

Updates @heroku-cli/color from 2.0.1 to 2.0.4

Release notes

Sourced from @​heroku-cli/color's releases.

v2.0.3

  • Bump braces from 3.0.2 to 3.0.3 c08eeb7
  • Bump ws from 7.5.9 to 7.5.10 (#64) 8011b54

heroku/heroku-cli-color@v2.0.1...v2.0.3

Commits
Maintainer changes

This version was pushed to npm by 7ftz, a new releaser for @​heroku-cli/color since your current version.


Updates @heroku-cli/notifications from 1.2.4 to 1.2.5

Release notes

Sourced from @​heroku-cli/notifications's releases.

v1.2.5

  • chore(deps): bump minimist from 1.2.0 to 1.2.8 (#25) 10890e8
  • Update node-notifier, testing/linting, and everything to node 20 (#24) 514a4bb
  • Update notifier types to version 8 (#23) 6463bee

heroku/heroku-cli-notifications@v1.2.4...v1.2.5

Commits
Maintainer changes

This version was pushed to npm by eblack, a new releaser for @​heroku-cli/notifications since your current version.


Updates @heroku-cli/plugin-ps-exec from 2.6.2 to 2.6.3

Release notes

Sourced from @​heroku-cli/plugin-ps-exec's releases.

v2.6.3

  • Bump tar-fs from 2.1.3 to 2.1.4 (#64) 8c1e07a
  • Merge pull request #62 from heroku/zw/fix-dependency-vulns 018c270
  • Update dependency to fix high vuln 52d5e19
  • Merge pull request #61 from heroku/dependabot/npm_and_yarn/tar-fs-2.1.3 0210fbe
  • Bump tar-fs from 2.1.2 to 2.1.3 f80d2b3
  • Merge pull request #57 from heroku/dependabot/npm_and_yarn/tar-fs-2.1.2 f8f30a9
  • Bump tar-fs from 2.1.1 to 2.1.2 2661bd8
  • v2.6.2 (#56) f9f2ed9
  • Update heroku-exec-utils, update codeowners (#54) 00e3d7d
  • Bump @​heroku/heroku-cli-util from 8.0.13 to 8.0.15 (#48) 71f85d5
  • Merge pull request #53 from heroku/k80/v2.6.1 0ed240e

heroku/heroku-ps-exec@v2.6.1...v2.6.3

Commits
  • 2858565 v2.6.3
  • 8c1e07a Bump tar-fs from 2.1.3 to 2.1.4 (#64)
  • 018c270 Merge pull request #62 from heroku/zw/fix-dependency-vulns
  • 52d5e19 Update dependency to fix high vuln
  • 0210fbe Merge pull request #61 from heroku/dependabot/npm_and_yarn/tar-fs-2.1.3
  • f80d2b3 Bump tar-fs from 2.1.2 to 2.1.3
  • f8f30a9 Merge pull request #57 from heroku/dependabot/npm_and_yarn/tar-fs-2.1.2
  • 2661bd8 Bump tar-fs from 2.1.1 to 2.1.2
  • f9f2ed9 v2.6.2 (#56)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by michael.malave, a new releaser for @​heroku-cli/plugin-ps-exec since your current version.


Updates @heroku/plugin-ai from 1.0.1 to 1.0.2

Release notes

Sourced from @​heroku/plugin-ai's releases.

v1.0.2

  • Merge pull request #91 from heroku/fix/correct-error-message-when-no-app 0a86137
  • Uses this.heroku instead of a new APIClient instance 5b693d1
  • Allows the API messages to pass through rather than wrapping 3432396
  • Corrects error message ef3ff84
  • Revert "chore(deps): bump open from 8.4.2 to 10.2.0 (#87)" (#90) 8378c73
  • chore(deps): bump open from 8.4.2 to 10.2.0 (#87) 81fe9a5
  • 1.0.1 (#85) 6be0e65
  • feat: add ai:agents:call command for Heroku Inference Agents API (#84) 9011bcb

heroku/heroku-cli-plugin-ai@v1.0.0...v1.0.2

Commits
  • 879d29b v1.0.2
  • 0a86137 Merge pull request #91 from heroku/fix/correct-error-message-when-no-app
  • 5b693d1 Uses this.heroku instead of a new APIClient instance
  • 3432396 Allows the API messages to pass through rather than wrapping
  • ef3ff84 Corrects error message
  • 8378c73 Revert "chore(deps): bump open from 8.4.2 to 10.2.0 (#87)" (#90)
  • 81fe9a5 chore(deps): bump open from 8.4.2 to 10.2.0 (#87)
  • 6be0e65 1.0.1 (#85)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by eblack, a new releaser for @​heroku/plugin-ai since your current version.


Updates fs-extra from 11.3.0 to 11.3.2

Changelog

Sourced from fs-extra's changelog.

11.3.2 / 2025-09-15

  • Fix spurrious UnhandledPromiseRejectionWarning that could occur when calling .copy() in some cases (#1056, #1058)

11.3.1 / 2025-08-05

  • Fix case where move/moveSync could incorrectly think files are identical on Windows (#1050)
Commits

Updates portfinder from 1.0.32 to 1.0.38

Release notes

Sourced from portfinder's releases.

v1.0.38

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.37...v1.0.38

v1.0.37

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.36...v1.0.37

v1.0.36

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.35...v1.0.36

v1.0.35

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.34...v1.0.35

v1.0.34

What's Changed

New Contributors

Full Changelog: http-party/node-portfinder@v1.0.33...v1.0.34

v1.0.33

What's Changed

... (truncated)

Commits
  • 072d5fd Release v1.0.38
  • 29e88af Merge pull request #182 from MasterOdin/fix-package-json-author
  • c3dcbc1 Fix author field format in package.json
  • f317e11 Release v1.0.37
  • 2110ec1 Merge pull request #180 from MasterOdin/fix-error-thorws
  • e0081a0 Release v1.0.36
  • 6634e09 Return callback error vs throwing
  • 0f01a6f Merge pull request #179 from MasterOdin/feat-socket-promise
  • f4e9d55 Add promise return for getSocket
  • 29e4173 Merge pull request #177 from http-party/fix-start-port-external-api
  • Additional commits viewable in compare view

Updates shell-quote from 1.8.1 to 1.8.3

Changelog

Sourced from shell-quote's changelog.

v1.8.3 - 2025-06-01

Fixed

v1.8.2 - 2024-11-27

Fixed

Commits

  • [meta] fix changelog tags 0fb9fd8
  • [actions] split out node 10-20, and 20+ 819bd84
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, npmignore, tape fc56408
  • [actions] update npm for windows tests fdeb0fd
  • [Dev Deps] update @ljharb/eslint-config, aud, tape b8a4a3b
  • [actions] prevent node 14 on ARM mac from failing 9eecafc
  • [meta] exclude more files from the package 4044e7f
  • [Tests] replace aud with npm audit 8cfdbd8
  • [meta] add missing engines.node 843820e
  • [Dev Deps] add missing peer dep 4c3b88d
  • [Dev Deps] pin jackspeak since 2.1.2+ depends on npm aliases, which kill the install process in npm < 6 80322ed
Commits
  • 487a9b4 v1.8.3
  • 01faaff [Fix] remove unnecessary backslash escaping in single quotes
  • b19fc77 v1.8.2
  • 59d29ea [Fix] quote: preserve empty strings
  • 819bd84 [actions] split out node 10-20, and 20+
  • 4c3b88d [Dev Deps] add missing peer dep
  • fc56408 [Dev Deps] update @ljharb/eslint-config, auto-changelog, npmignore, tape
  • 8cfdbd8 [Tests] replace aud with npm audit
  • 9eecafc [actions] prevent node 14 on ARM mac from failing
  • 843820e [meta] add missing engines.node
  • Additional commits viewable in compare view

Updates strftime from 0.10.0 to 0.10.3

Release notes

Sourced from strftime's releases.

v0.10.3

What's Changed

Full Changelog: samsonjs/strftime@v0.10.2...v0.10.3

Bug fixes

  • Fix test case for %c in current versions of node.js

  • Fix %-y so it omits the leading zero

Thanks to Aryan Arora for both fixes!

v0.10.1

What's Changed

  • fix it_IT shortMonths locale by @​douglasep in samsonjs/strftime#83

  • Fix readme (X: equivalent to %r in en_US) by @​kawanet in samsonjs/strftime#77

  • Try to get a short time zone name for %Z, falling back to the long one. This attempts to work around a change to Date.toString in v8 (node v10+, Chrome 66+). Unfortunately sometimes Date.toLocaleString returns a time zone like GMT+2 and we fall back to the long name in that case.

New Contributors

Full Changelog: samsonjs/strftime@v0.10.0...v0.10.1

Changelog

Sourced from strftime's changelog.

v0.10.3 on 2024-06-11

  • Stop using let to avoid breaking backwards compatibility with ES5. Thanks to Maximilian Herold for the report #87

  • Drop '份' suffix from Chinese month names. Thanks to @​mogando668 for the report #88

v0.10.2 on 2023-05-24

  • Fix test case for %c in current versions of node.js

  • Fix %-y so it omits the leading zero

Thanks to Aryan Arora for both fixes!

v0.10.1 on 2021-12-12

  • Fix it_IT shortMonths locale Thanks to Douglas de Espindola

  • Try to get a short time zone name for %Z, falling back to the long one. This attempts to work around a change to Date.toString in v8 (node v10+, Chrome 66+). Unfortunately sometimes Date.toLocaleString returns a time zone like GMT+2 and we fall back to the long name in that case.

Commits
  • 8db2211 Update minified assets
  • 774e3ce Update contributors and copyright year
  • e61895a Add changelog and bump versions to 0.10.3 (#90)
  • 8a33589 Merge pull request #91 from samsonjs/fix/88-chinese-months
  • db1c066 Fix Chinese months
  • 6cf7d59 Merge pull request #89 from samsonjs/87-using-let-requires-es6-since-v0102
  • 53e26ba Stop using let, closes #87
  • a0a62db Release v0.10.2
  • 5275347 Tweak code style and minify
  • 67c02b5 Merge pull request #86 from aryan-debug/master
  • Additional commits viewable in compare view

Updates @types/bytes from 3.1.4 to 3.1.5

Commits

Updates @types/shell-escape from 0.2.0 to 0.2.3

Commits

Updates @types/urijs from 1.19.4 to 1.19.26

Commits

Updates proxyquire from 2.1.0 to 2.1.3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 13 updates

Bumps the patch-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [standard](https://github.com/standard/standard) | `17.1.0` | `17.1.2` |
| [@heroku-cli/color](https://github.com/heroku/heroku-cli-color) | `2.0.1` | `2.0.4` |
| [@heroku-cli/notifications](https://github.com/heroku/heroku-cli-notifications) | `1.2.4` | `1.2.5` |
| [@heroku-cli/plugin-ps-exec](https://github.com/heroku/heroku-ps-exec) | `2.6.2` | `2.6.3` |
| [@heroku/plugin-ai](https://github.com/heroku/heroku-cli-plugin-ai) | `1.0.1` | `1.0.2` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.0` | `11.3.2` |
| [portfinder](https://github.com/http-party/node-portfinder) | `1.0.32` | `1.0.38` |
| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.1` | `1.8.3` |
| [strftime](https://github.com/samsonjs/strftime) | `0.10.0` | `0.10.3` |
| [@types/bytes](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bytes) | `3.1.4` | `3.1.5` |
| [@types/shell-escape](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/shell-escape) | `0.2.0` | `0.2.3` |
| [@types/urijs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/urijs) | `1.19.4` | `1.19.26` |
| [proxyquire](https://github.com/thlorenz/proxyquire) | `2.1.0` | `2.1.3` |



Updates `standard` from 17.1.0 to 17.1.2
- [Release notes](https://github.com/standard/standard/releases)
- [Changelog](https://github.com/standard/standard/blob/master/CHANGELOG.md)
- [Commits](standard/standard@v17.1.0...v17.1.2)

Updates `@heroku-cli/color` from 2.0.1 to 2.0.4
- [Release notes](https://github.com/heroku/heroku-cli-color/releases)
- [Commits](https://github.com/heroku/heroku-cli-color/commits)

Updates `@heroku-cli/notifications` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/heroku/heroku-cli-notifications/releases)
- [Changelog](https://github.com/heroku/heroku-cli-notifications/blob/main/CHANGELOG.md)
- [Commits](heroku/heroku-cli-notifications@v1.2.4...v1.2.5)

Updates `@heroku-cli/plugin-ps-exec` from 2.6.2 to 2.6.3
- [Release notes](https://github.com/heroku/heroku-ps-exec/releases)
- [Commits](heroku/heroku-ps-exec@v2.6.2...v2.6.3)

Updates `@heroku/plugin-ai` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/heroku/heroku-cli-plugin-ai/releases)
- [Commits](heroku/heroku-cli-plugin-ai@v1.0.1...v1.0.2)

Updates `fs-extra` from 11.3.0 to 11.3.2
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.0...11.3.2)

Updates `portfinder` from 1.0.32 to 1.0.38
- [Release notes](https://github.com/http-party/node-portfinder/releases)
- [Commits](http-party/node-portfinder@v1.0.32...v1.0.38)

Updates `shell-quote` from 1.8.1 to 1.8.3
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.8.1...v1.8.3)

Updates `strftime` from 0.10.0 to 0.10.3
- [Release notes](https://github.com/samsonjs/strftime/releases)
- [Changelog](https://github.com/samsonjs/strftime/blob/main/Changelog.md)
- [Commits](samsonjs/strftime@v0.10.0...v0.10.3)

Updates `@types/bytes` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bytes)

Updates `@types/shell-escape` from 0.2.0 to 0.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/shell-escape)

Updates `@types/urijs` from 1.19.4 to 1.19.26
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/urijs)

Updates `proxyquire` from 2.1.0 to 2.1.3
- [Release notes](https://github.com/thlorenz/proxyquire/releases)
- [Commits](thlorenz/proxyquire@v2.1.0...v2.1.3)

---
updated-dependencies:
- dependency-name: standard
  dependency-version: 17.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@heroku-cli/color"
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@heroku-cli/notifications"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@heroku-cli/plugin-ps-exec"
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@heroku/plugin-ai"
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: fs-extra
  dependency-version: 11.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: portfinder
  dependency-version: 1.0.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: shell-quote
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: strftime
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@types/bytes"
  dependency-version: 3.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@types/shell-escape"
  dependency-version: 0.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@types/urijs"
  dependency-version: 1.19.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: proxyquire
  dependency-version: 2.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 13, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 13, 2025 17:40
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants