Skip to content

build(deps): bump the production-dependencies group across 1 directory with 5 updates#5

Open
dependabot[bot] wants to merge 1 commit intofeature/construct-xfrom
dependabot/npm_and_yarn/production-dependencies-65cdacc499
Open

build(deps): bump the production-dependencies group across 1 directory with 5 updates#5
dependabot[bot] wants to merge 1 commit intofeature/construct-xfrom
dependabot/npm_and_yarn/production-dependencies-65cdacc499

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Feb 16, 2026 •
edited
Loading

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
axios 1.8.3 1.8.4
dayjs 1.11.13 1.11.19
phone 3.1.57 3.1.70
qs 6.13.1 6.13.3
react-player 2.16.0 2.16.1

Updates axios from 1.8.3 to 1.8.4

Release notes

Sourced from axios's releases.

Release v1.8.4

Release notes:

Bug Fixes

  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#6833) (f10c2e0)

Contributors to this release

Changelog

Sourced from axios's changelog.

1.8.4 (2025-03-19)

Bug Fixes

  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#6833) (f10c2e0)

Contributors to this release

Commits
  • 9f6f97b chore(release): v1.8.4 (#6844)
  • f10c2e0 fix(buildFullPath): handle allowAbsoluteUrls: false without baseURL (#6833)
  • 1e6632c chore(deps): bump tj-actions/changed-files in the github-actions group (#6838)
  • See full diff in compare view

Updates dayjs from 1.11.13 to 1.11.19

Release notes

Sourced from dayjs's releases.

v1.11.19

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)

v1.11.18

1.11.18 (2025-08-30)

Bug Fixes

  • error semantic-release dependency (8cfb313)

v1.11.17

1.11.17 (2025-08-29)

Bug Fixes

  • [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

v1.11.16

1.11.16 (2025-08-29)

Bug Fixes

  • test release workflow (no code changes) (c38c428)

v1.11.15

1.11.15 (2025-08-28)

Bug Fixes

  • Fix misspellings in Irish or Irish Gaelic [ga] (#2861) (9c14a42)

v1.11.14

1.11.14 (2025-08-27)

Bug Fixes

  • .utcOffset(0, true) result and its clone are different bug (#2505) (fefdcd4)
Changelog

Sourced from dayjs's changelog.

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)

1.11.18 (2025-08-30)

Bug Fixes

  • error semantic-release dependency (8cfb313)

1.11.17 (2025-08-29)

Bug Fixes

  • [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

1.11.16 (2025-08-29)

Bug Fixes

  • test release workflow (no code changes) (c38c428)

1.11.15 (2025-08-28)

Bug Fixes

  • Fix misspellings in Irish or Irish Gaelic [ga] (#2861) (9c14a42)

1.11.14 (2025-08-27)

Bug Fixes

  • .utcOffset(0, true) result and its clone are different bug (#2505) (fefdcd4)
Commits

Updates phone from 3.1.57 to 3.1.70

Release notes

Sourced from phone's releases.

3.1.70

3.1.69

3.1.68

3.1.67

3.1.66

3.1.65

3.1.62

3.1.59

3.1.58

Commits

Updates qs from 6.13.1 to 6.13.3

Changelog

Sourced from qs's changelog.

6.13.3

[Fix] fix regressions from robustness refactor [actions] update reusable workflows

6.13.2

  • [Robustness] avoid .push, use void
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [actions] fix rebase workflow permissions
Commits
  • b70bd5b v6.13.3
  • 43270b1 [actions] update reusable workflows
  • 1d3d07c [Fix] fix regressions from robustness refactor
  • d8a8ab3 v6.13.2
  • 625fa19 [readme] document that addQueryPrefix does not add ? to empty output
  • ffc02aa [actions] fix rebase workflow permissions
  • 710594c [readme] replace runkit CI badge with shields.io check-runs badge
  • 3cb338b [readme] clarify parseArrays and arrayLimit documentation
  • 912098b [Robustness] avoid .push, use void
  • See full diff in compare view

Updates react-player from 2.16.0 to 2.16.1

Release notes

Sourced from react-player's releases.

v2.16.1

Bug Fixes

Changelog

Sourced from react-player's changelog.

v2.16.1

10 July 2025

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Feb 16, 2026

Labels

The following labels could not be found: dependabot, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-65cdacc499 branch 2 times, most recently from 8a54147 to c6bd91e Compare March 16, 2026 06:28
@dependabot
build(deps): bump the production-dependencies group across 1 director…
1055935 
…y with 5 updates

Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.8.3` | `1.8.4` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.13` | `1.11.19` |
| [phone](https://github.com/aftership/phone) | `3.1.57` | `3.1.70` |
| [qs](https://github.com/ljharb/qs) | `6.13.1` | `6.13.3` |
| [react-player](https://github.com/cookpete/react-player) | `2.16.0` | `2.16.1` |



Updates `axios` from 1.8.3 to 1.8.4
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.8.3...v1.8.4)

Updates `dayjs` from 1.11.13 to 1.11.19
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.13...v1.11.19)

Updates `phone` from 3.1.57 to 3.1.70
- [Release notes](https://github.com/aftership/phone/releases)
- [Commits](AfterShip/phone@3.1.57...3.1.70)

Updates `qs` from 6.13.1 to 6.13.3
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.13.1...v6.13.3)

Updates `react-player` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/cookpete/react-player/releases)
- [Changelog](https://github.com/cookpete/react-player/blob/master/CHANGELOG.md)
- [Commits](cookpete/react-player@v2.16.0...v2.16.1)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dayjs
  dependency-version: 1.11.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: phone
  dependency-version: 3.1.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: qs
  dependency-version: 6.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-player
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-65cdacc499 branch from c6bd91e to 1055935 Compare March 23, 2026 06:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

⚡