Bump the npm_and_yarn group in /webapp with 8 updates #556

dependabot · 2025-07-20T11:33:59Z

Bumps the npm_and_yarn group in /webapp with 8 updates:

Package	From	To
@babel/runtime	`7.24.4`	`7.27.6`
webpack	`5.90.3`	`5.100.2`
@babel/helpers	`7.24.4`	`7.27.6`
elliptic	`6.5.4`	`6.6.1`
moment-timezone	`0.5.32`	`0.5.48`
mattermost-redux	`5.33.1`	`10.8.0`
nanoid	`2.1.11`	`3.3.7`
pbkdf2	`3.0.17`	`3.1.3`

Updates @babel/runtime from 7.24.4 to 7.27.6

Release notes

Sourced from @babel/runtime's releases.

v7.27.6 (2025-06-05)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17366 fix: finally causes unexpected return value (@liuxingbaoyu)

babel-generator, babel-parser, babel-types

#17357 Ensure syntactic ordering when visiting array-type AST nodes (@JLHwung)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Ingvar Stepanyan (@RReverser)

@liuxingbaoyu

v7.27.5 (2025-06-03)

Thanks @NullVoxPopuli for your first PR!

🐛 Bug Fix

babel-plugin-transform-regenerator

#17359 fix: Unexpected infinite loop with regenerator for try (@liuxingbaoyu)

Other

#17349 Map ESLint's sourceType: commonjs to script (@JLHwung)

💅 Polish

babel-parser

#17333 Improve using declaration errors (@JLHwung)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

@NullVoxPopuli

@liuxingbaoyu

v7.27.4 (2025-05-30)

👓 Spec Compliance

babel-parser, babel-plugin-proposal-explicit-resource-management

#17323 Disallow using in bare case statement (@JLHwung)

💅 Polish

babel-parser

#17311 Improve parseExpression error messages (@JLHwung)

🔬 Output optimization

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17287 Reduce regenerator size more (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17334 Use shorter method names for regenerator context (@nicolo-ribaudo)

#17268 Reduce regenerator helper size (@liuxingbaoyu)

babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

... (truncated)

Changelog

Sourced from @babel/runtime's changelog.

v7.27.6 (2025-06-05)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17366 fix: finally causes unexpected return value (@liuxingbaoyu)

babel-generator, babel-parser, babel-types

#17357 Ensure syntactic ordering when visiting array-type AST nodes (@JLHwung)

v7.27.5 (2025-06-03)

🐛 Bug Fix

babel-plugin-transform-regenerator

#17359 fix: Unexpected infinite loop with regenerator for try (@liuxingbaoyu)

Other

#17349 Map ESLint's sourceType: commonjs to script (@JLHwung)

💅 Polish

babel-parser

#17333 Improve using declaration errors (@JLHwung)

v7.27.4 (2025-05-30)

👓 Spec Compliance

babel-parser, babel-plugin-proposal-explicit-resource-management

#17323 Disallow using in bare case statement (@JLHwung)

💅 Polish

babel-parser

#17311 Improve parseExpression error messages (@JLHwung)

🔬 Output optimization

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17287 Reduce regenerator size more (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17334 Use shorter method names for regenerator context (@nicolo-ribaudo)

#17268 Reduce regenerator helper size (@liuxingbaoyu)

babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

#17238 Split regeneratorRuntime into multiple helpers (@nicolo-ribaudo)

v7.27.3 (2025-05-27)

🐛 Bug Fix

babel-generator

#17324 Improve multiline comments handling in yield/await expression (@JLHwung)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17328 Correctly set .displayName on GeneratorFunction (@nicolo-ribaudo)

babel-plugin-proposal-explicit-resource-management

#17319 fix: handle shadowed binding in for using of body (@JLHwung)

#17317 fix: support named evaluation for using declaration (@JLHwung)

babel-plugin-proposal-decorators, babel-types

#17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@magic-akari)

babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd

#17257 Preserve class id when transforming using declarations with exported class (@JLHwung)

... (truncated)

Commits

baa4cb8 v7.27.6
7d06930 v7.27.4
5b9468d Reduce regenerator size more (#17287)
cb78b5b [babel 8] Do not replace global regeneratorRuntime references in regenerato...
a0690e3 Split regeneratorRuntime into multiple helpers (#17238)
da5e371 v7.27.3
eebd3a0 v7.27.1
296cdc5 Remove unused regenerator-runtime dep in @babel/runtime (#17263)
fdc0fb5 [Babel 8] Bump nodejs requirements to ^20.19.0 || >= 22.12.0 (#17204)
5c350ea v7.27.0
Additional commits viewable in compare view

Updates webpack from 5.90.3 to 5.100.2

Release notes

Sourced from webpack's releases.

v5.100.2

Fixes

Keep consistent CSS order

Dependency without the source order attribute must keep their original index

Keep module traversal consistent across reexport scenarios

Performance Improvements

Extend importPhasesPlugin only when enable deferImport (#19689)

v5.100.1

Fixes

Tree-shaking unused ignored modules

[Types] Compatibility with old Node.js versions

v5.100.0

Fixes

Fixed the case where an ES modules entry chunk depends on the runtime chunk hash

Handle function exports in webpack module wrapper

Ensure dependent chunks are imported before startup & fix duplicate export of 'default'

Generate lose closing brace when exports are unprovided

CleanPlugin doesn't unlink same file twice

Fixed unexpected error codes from fs.unlink on Windows

Typescript types

Features

HMR support for ES modules output

ES module output mode now fully supports splitChunks when external variables and runtimeChunk are not set.

Added support using keyword

Implemented tc39 Defer Module Evaluation (experiment)

Support dynamic template literals expressions for new URL(...)

Enable ES modules worker chunk loading for Node.js targets

Improved support for destructing in DefinePlugin

Added VirtualUrlPlugin to support virtual: scheme

Performance Improvements

Remove useless startup entrypoint runtime for ES modules output

Cache new URL(...) evaluate expression

v5.99.9

Fixes

HMR might fail if there are new initial chunks

Destructuring namespace import with default

Destructuring namespace import with computed-property

... (truncated)

Commits

21fcdbb chore(release): 5.100.2
2c8d1f1 chore(deps): bump the dependencies group with 2 updates (#19701)
89eb6a3 fix: keep module traversal consistent across reexport scenarios (#19702)
fdb0c4e fix: dependency without the sourceOrder attribute must keep their original in...
d76af00 fix: types (#19699)
503ed53 docs: update examples (#19694)
e251891 refactor: import dependency generation for defer module with async dependenci...
9eb9642 perf: extend importPhasesPlugin only when enable deferImport (#19689)
0a98446 fix: keep consistent css order (#19686)
6de2dfd fix(test): TestRunner avoids using jest mock's require (#19685)
Additional commits viewable in compare view

Updates @babel/helpers from 7.24.4 to 7.27.6

Release notes

Sourced from @babel/helpers's releases.

v7.27.6 (2025-06-05)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17366 fix: finally causes unexpected return value (@liuxingbaoyu)

babel-generator, babel-parser, babel-types

#17357 Ensure syntactic ordering when visiting array-type AST nodes (@JLHwung)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Ingvar Stepanyan (@RReverser)

@liuxingbaoyu

v7.27.5 (2025-06-03)

Thanks @NullVoxPopuli for your first PR!

🐛 Bug Fix

babel-plugin-transform-regenerator

#17359 fix: Unexpected infinite loop with regenerator for try (@liuxingbaoyu)

Other

#17349 Map ESLint's sourceType: commonjs to script (@JLHwung)

💅 Polish

babel-parser

#17333 Improve using declaration errors (@JLHwung)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

@NullVoxPopuli

@liuxingbaoyu

v7.27.4 (2025-05-30)

👓 Spec Compliance

babel-parser, babel-plugin-proposal-explicit-resource-management

#17323 Disallow using in bare case statement (@JLHwung)

💅 Polish

babel-parser

#17311 Improve parseExpression error messages (@JLHwung)

🔬 Output optimization

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17287 Reduce regenerator size more (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17334 Use shorter method names for regenerator context (@nicolo-ribaudo)

#17268 Reduce regenerator helper size (@liuxingbaoyu)

babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

... (truncated)

Changelog

Sourced from @babel/helpers's changelog.

v7.27.6 (2025-06-05)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17366 fix: finally causes unexpected return value (@liuxingbaoyu)

babel-generator, babel-parser, babel-types

#17357 Ensure syntactic ordering when visiting array-type AST nodes (@JLHwung)

v7.27.5 (2025-06-03)

🐛 Bug Fix

babel-plugin-transform-regenerator

#17359 fix: Unexpected infinite loop with regenerator for try (@liuxingbaoyu)

Other

#17349 Map ESLint's sourceType: commonjs to script (@JLHwung)

💅 Polish

babel-parser

#17333 Improve using declaration errors (@JLHwung)

v7.27.4 (2025-05-30)

👓 Spec Compliance

babel-parser, babel-plugin-proposal-explicit-resource-management

#17323 Disallow using in bare case statement (@JLHwung)

💅 Polish

babel-parser

#17311 Improve parseExpression error messages (@JLHwung)

🔬 Output optimization

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17287 Reduce regenerator size more (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17334 Use shorter method names for regenerator context (@nicolo-ribaudo)

#17268 Reduce regenerator helper size (@liuxingbaoyu)

babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

#17238 Split regeneratorRuntime into multiple helpers (@nicolo-ribaudo)

v7.27.3 (2025-05-27)

🐛 Bug Fix

babel-generator

#17324 Improve multiline comments handling in yield/await expression (@JLHwung)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17328 Correctly set .displayName on GeneratorFunction (@nicolo-ribaudo)

babel-plugin-proposal-explicit-resource-management

#17319 fix: handle shadowed binding in for using of body (@JLHwung)

#17317 fix: support named evaluation for using declaration (@JLHwung)

babel-plugin-proposal-decorators, babel-types

#17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@magic-akari)

babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd

#17257 Preserve class id when transforming using declarations with exported class (@JLHwung)

... (truncated)

Commits

baa4cb8 v7.27.6
fdbf1b3 fix: finally causes unexpected return value (#17366)
7d06930 v7.27.4
5b9468d Reduce regenerator size more (#17287)
cb78b5b [babel 8] Do not replace global regeneratorRuntime references in regenerato...
49c0dbb Fix iterator compatibility of regeneratorValues (#17335)
d23a1bd Use shorter method names for regenerator context (#17334)
9dcd115 Restore behavior of regeneratorRuntime helper (#17329)
fe32019 Reduce regenerator helper size (#17268)
a0690e3 Split regeneratorRuntime into multiple helpers (#17238)
Additional commits viewable in compare view

Updates elliptic from 6.5.4 to 6.6.1

Commits

9b77436 6.6.1
04cb6f5 Merge commit from fork
b8a7edd 6.6.0
34c8534 fix: signature verification due to leading zeros
3e46a48 6.5.7
accb61e lib: DER signature decoding correction
03e06e1 6.5.6
7ac5360 Merge commit from fork
7570078 6.5.5
206da2e lib: lint
Additional commits viewable in compare view

Updates moment-timezone from 0.5.32 to 0.5.48

Release notes

Sourced from moment-timezone's releases.

Release 0.5.48

Updated data to IANA TZDB 2025b. #1130

Release 0.5.47

Updated data to IANA TZDB 2025a. #1125

Release 0.5.46

Updated data to IANA TZDB 2024b. #1121 This only affects historical timestamps; no future timestamps have changed.

Release 0.5.45

Updated data to IANA TZDB 2024a. #1095

Release 0.5.44

Updated data to IANA TZDB 2023d. #1085

Fixed .valueOf() to return NaN for invalid zoned objects (matching default moment) #1082.

Performance improvements:

Use binary search when looking up zone information #720.

Avoid redundant checks in tz.guess().

Avoid redundant getZone() calls in .tz().

Release 0.5.43

* Updated data to IANA TZDB 2023c. #1053

Release 0.5.42

Updated data to IANA TZDB 2023b. #1047

Release 0.5.41

Updated moment npm dependency to 2.29.4 to remove automated warnings about insecure dependencies #1004. Moment Timezone still works with core Moment 2.9.0 and higher.

Updated all dev dependencies including UglifyJS, which produces the minified builds.

Added deprecation warning to the pre-built moment-timezone-with-data-2012-2022 bundles #1035. Use the rolling moment-timezone-with-data-10-year-range files instead.

Release 0.5.40

Updated data to IANA TZDB 2022g. #1022

Release 0.5.39

Updated data to IANA TZDB 2022f. #1014

Release 0.5.38

Updated data to IANA TZDB 2022e. #1009

Added moment.tz.dataVersion property to TypeScript definitions. #930

Removed temporary .tar.gz files from npm releases. #1000

Release 0.5.37

Re-publish npm package, because of extra folder present in 0.5.36. #999

Release 0.5.36

Updated data to IANA TZDB 2022c

... (truncated)

Changelog

Sourced from moment-timezone's changelog.

0.5.48 2025-03-23

Updated data to IANA TZDB 2025b. #1130

0.5.47 2025-01-28

Updated data to IANA TZDB 2025a. #1125

0.5.46 2024-10-06

Updated data to IANA TZDB 2024b. #1121 This only affects historical timestamps; no future timestamps have changed.

0.5.45 2024-02-04

Updated data to IANA TZDB 2024a. #1095

0.5.44 2023-12-29

Updated data to IANA TZDB 2023d. #1085

Fixed .valueOf() to return NaN for invalid zoned objects (matching default moment). #1082

Performance improvements:

Use binary search when looking up zone information. #720

Avoid redundant checks in tz.guess().

Avoid redundant getZone() calls in .tz().

0.5.43 2023-03-31

Updated data to IANA TZDB 2023c. #1053

0.5.42 2023-03-24

Updated data to IANA TZDB 2023b. #1047

0.5.41 2023-02-25

Updated moment npm dependency to 2.29.4 to remove automated warnings about insecure dependencies. Moment Timezone still works with core Moment 2.9.0 and higher.

Updated all dev dependencies including UglifyJS, which produces the minified builds.

Added deprecation warning to the pre-built moment-timezone-with-data-2012-2022 bundles. #1035. Use the rolling moment-timezone-with-data-10-year-range files instead.

0.5.40 2022-12-11

Updated data to IANA TZDB 2022g. #1022

0.5.39 2022-11-13

Updated data to IANA TZDB 2022f. #1014

0.5.38 2022-10-15

Updated data to IANA TZDB 2022e. #1009

Added moment.tz.dataVersion property to TypeScript definitions. #930

Removed temporary .tar.gz files from npm releases. #1000

0.5.37 2022-08-25

Re-publish npm package, because of extra folder present in 0.5.36. #999

0.5.36 2022-08-25

Updated data to IANA TZDB 2022c.

... (truncated)

Commits

fcec454 Build moment-timezone 0.5.48
4b320b8 Bump version to 0.5.48
b5452b9 Merge pull request #1130 from moment/automated/data-update
582f658 data: Add 2025b
56ab2a8 Build moment-timezone 0.5.47
991678d Bump version to 0.5.47
d70aa57 Merge pull request #1125 from moment/automated/data-update
5a3abe1 data: Add 2025a
c666ad1 tests: Rebuild guess tests for 2025
cfefd24 Move GitHub bug report template to new format
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by gilmoreorless, a new releaser for moment-timezone since your current version.

Updates mattermost-redux from 5.33.1 to 10.8.0

Release notes

Sourced from mattermost-redux's releases.

v10.8.0

Mattermost Platform Release 10.8.0 contains multiple new quality of life improvements.

v10.8.0-rc3

Mattermost Platform Release 10.8.0-rc3

v10.8.0-rc2

Mattermost Platform Release 10.8.0-rc2

v10.8.0-rc1

Mattermost Platform Release 10.8.0-rc1

v10.7.5-rc4

Mattermost Platform Release 10.7.5-rc4

v10.7.5-rc3

Mattermost Platform Release 10.7.5-rc3

v10.7.5-rc2

Mattermost Platform Release 10.7.5-rc2

v10.7.5-rc1

Mattermost Platform Release 10.7.5-rc1

v10.7.4

Mattermost Platform Release 10.7.4 contains high severity level security fixes.

v10.7.4-rc1

Mattermost Platform Release 10.7.4-rc1

v10.7.3

Mattermost Platform Release 10.7.3 contains medium to critical level security fixes.

v10.7.3-rc1

Mattermost Platform Release 10.7.3-rc1

v10.7.2

Mattermost Platform Release 10.7.2 contains low to medium level security fixes.

v10.7.2-rc1

Mattermost Platform Release 10.7.2-rc1

v10.7.1

Mattermost Platform Release 10.7.1 contains low to medium level security fixes.

v10.7.0

Mattermost Platform Release 10.7.0 contains multiple new quality of life improvements.

v10.7.0-rc2

Mattermost Platform Release 10.7.0-rc2

... (truncated)

Commits

640a293 Explicitly list exports from mattermost-redux (#31177)
67d3ba9 Update npm packages versions for release-10.8
86aad9d Add platform/mattermost-redux package for publishing (#30020)
See full diff in compare view

Maintainer changes

This version was pushed to npm by hmhealey, a new releaser for mattermost-redux since your current version.

Updates nanoid from 2.1.11 to 3.3.7

Release notes

Sourced from nanoid's releases.

3.0 Migration Guide

Nano ID 3.0 is the biggest release in the project history. Unfortunately, you will need to change the code of your application. But the changes are very small in most cases. In return, you will have better performance, smaller size, ES modules and TypeScript support.

Known Issues

Only Create React App 4.0 supports dual ESM/CJS modules.

Simple Case

In simple cases, you just need to change default import to named import.
- import nanoid from 'nanoid'
+ import { nanoid } from 'nanoid'
nanoid() //=> "sSAi9F8yakJZPxOCr_WFb"
nanoid(5) //=> "ISe9l"
If you support IE, you need to transpile node_modules by Babel.

Non-secure and asynchronous Nano ID need only import changes as well.
- import nanoid from 'nanoid/non-secure'
+ import { nanoid } from 'nanoid/non-secure'
nanoid() //=> "sSAi9F8yakJZPxOCr_WFb"
- import nanoid from 'nanoid/async'
+ import { nanoid } from 'nanoid/async'
nanoid().then(id => {
id //=> "sSAi9F8yakJZPxOCr_WFb"
})
TypeScript

Remove @types/nanoid if you have it. Nano ID now have built-in types.
npm uninstall @types/nanoid
React Native

For Expo you need to load the file by direct path:

... (truncated)

Changelog

Sourced from nanoid's changelog.

3.3.7

Fixed node16 TypeScript support (by Saadi Myftija).

3.3.6

Fixed package.

3.3.5

Backport funding information.

3.3.4

Fixed --help in CLI (by @Lete114).

3.3.3

Reduced size (by Anton Khlynovskiy).

3.3.2

Fixed enhanced-resolve support.

3.3.1

Reduced package size.

3.3

Added size argument to function from customAlphabet (by Stefan Sundin).

3.2

Added --size and --alphabet arguments to binary (by Vitaly Baev).

3.1.32

Reduced async exports size (by Artyom Arutyunyan).

Moved from Jest to uvu (by Vitaly Baev).

3.1.31

Fixed collision vulnerability on object in size (by Artyom Arutyunyan).

3.1.30

Reduced size for project with brotli compression (by Anton Khlynovskiy).

3.1.29

Reduced npm package size.

3.1.28

Reduced npm package size.

3.1.27

Cleaned dependencies from development tools.

3.1.26

Improved performance (by Eitan Har-Shoshanim).

Reduced npm package size.

... (truncated)

Commits

89d82d2 Release 3.3.7 version
5022c35 Update dual-publish
3e7a8e5 Remove benchmark from CI for v3
d356144 Fix CI for v3
37b25df Move to pnpm 8
d96f392 Release 3.3.6 version
8210dfb Release 3.3.5 version
f083d01 Backport funding option
9a967ea Update dependencies
21728dc Update IE polyfill to fix last improve with reduce (#362)
Additional commits viewable in compare view

Updates pbkdf2 from 3.0.17 to 3.1.3

Changelog

Sourced from pbkdf2's changelog.

v3.1.3 - 2025-06-20

Commits

Only apps should have lockfiles 8b06730

[lint] fix whitespace 9a76e2f

[lint] fix parens/curlies/semis/etc 6fd84bf

[meta] add auto-changelog 796c38d

[Tests] fix tests in node 17 3661fb0

Revert "[Tests] fix tests in node < 3" 7431b57

[Tests] fix tests in node < 3 eb9f97a

[Fix] ensure unknown algorithms throw + known ones match node 26d4fd3

[Tests] add GHA, always run nyc 513906a

[lint] fix a few more rules ab04da8

[lint] switch to eslint 89694cf

[Tests] add coverage d0d534b

[Refactor] use to-buffer e3102a8

[readme] improve badges fca0c9d

[Tests] remove unused travis file a2c7d93

[meta] switch from files to npmignore 7f31fbc

[Tests] use .nycrc 8d628e8

[Refactor] minor tweaks fc61005

[Deps] update create-hmac, safe-buffer, sha.js ae2a7d0

[Fix] pin create-hash, ripemd160 due to breaking changes e079968

[Tests] fix tests in node 3 45fbcf3

[meta] skip publishing benchmarks 19ea57b

[Dev Deps] add missing peer dep 645e252

v3.1.2 - 2021-04-09

Commits

handle nextTick 36457b9

Check for process before accessing 449e510

handle different returns fb82137

v3.1.1 - 2020-06-04

Commits

style nit 6d994f2

remove arrow 70ea270

v3.1.0 - 2020-06-03

Merged

check if process.version is available [#85](https://github.com/crypto-browserify/pbkdf2/issues/85)

Commits

... (truncated)

Commits

3e40827 v3.1.3
e3102a8 [Refactor] use to-buffer
7431b57 Revert "[Tests] fix tests in node < 3"
19ea57b [meta] skip publishing benchmarks
a2c7d93 [Tests] remove unused travis file
645e252 [Dev Deps] add missing peer dep
796c38d [meta] add auto-changelog
d0d534b [Tests] add coverage
7f31fbc [meta] switch from files to npmignore
fca0c9d [readme] improve badges
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for pbkdf2 since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
`@dependabot show <dependency ...

Description has been truncated

Bumps the npm_and_yarn group in /webapp with 8 updates: | Package | From | To | | --- | --- | --- | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.24.4` | `7.27.6` | | [webpack](https://github.com/webpack/webpack) | `5.90.3` | `5.100.2` | | [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.24.4` | `7.27.6` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.4` | `6.6.1` | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.32` | `0.5.48` | | [mattermost-redux](https://github.com/mattermost/mattermost/tree/HEAD/webapp/platform/mattermost-redux) | `5.33.1` | `10.8.0` | | [nanoid](https://github.com/ai/nanoid) | `2.1.11` | `3.3.7` | | [pbkdf2](https://github.com/crypto-browserify/pbkdf2) | `3.0.17` | `3.1.3` | Updates `@babel/runtime` from 7.24.4 to 7.27.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.6/packages/babel-runtime) Updates `webpack` from 5.90.3 to 5.100.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.90.3...v5.100.2) Updates `@babel/helpers` from 7.24.4 to 7.27.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.6/packages/babel-helpers) Updates `elliptic` from 6.5.4 to 6.6.1 - [Commits](indutny/elliptic@v6.5.4...v6.6.1) Updates `moment-timezone` from 0.5.32 to 0.5.48 - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](moment/moment-timezone@0.5.32...0.5.48) Updates `mattermost-redux` from 5.33.1 to 10.8.0 - [Release notes](https://github.com/mattermost/mattermost/releases) - [Changelog](https://github.com/mattermost/mattermost/blob/master/CHANGELOG.md) - [Commits](https://github.com/mattermost/mattermost/commits/mattermost-redux@10.8.0/webapp/platform/mattermost-redux) Updates `nanoid` from 2.1.11 to 3.3.7 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@2.1.11...3.3.7) Updates `pbkdf2` from 3.0.17 to 3.1.3 - [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md) - [Commits](browserify/pbkdf2@v3.0.17...v3.1.3) --- updated-dependencies: - dependency-name: "@babel/runtime" dependency-version: 7.27.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.100.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/helpers" dependency-version: 7.27.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-version: 6.6.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment-timezone dependency-version: 0.5.48 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mattermost-redux dependency-version: 10.8.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pbkdf2 dependency-version: 3.1.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-07-20T11:34:01Z

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

dependabot bot requested a review from cpanato July 20, 2025 11:34

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 20, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group in /webapp with 8 updates #556

Bump the npm_and_yarn group in /webapp with 8 updates #556

Uh oh!

dependabot bot commented on behalf of github Jul 20, 2025

Uh oh!

dependabot bot commented on behalf of github Jul 20, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the npm_and_yarn group in /webapp with 8 updates #556

Are you sure you want to change the base?

Bump the npm_and_yarn group in /webapp with 8 updates #556

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 20, 2025

v7.27.6 (2025-06-05)

🐛 Bug Fix

Committers: 3

v7.27.5 (2025-06-03)

🐛 Bug Fix

💅 Polish

Committers: 4

v7.27.4 (2025-05-30)

👓 Spec Compliance

💅 Polish

🔬 Output optimization

v7.27.6 (2025-06-05)

🐛 Bug Fix

v7.27.5 (2025-06-03)

🐛 Bug Fix

💅 Polish

v7.27.4 (2025-05-30)

👓 Spec Compliance

💅 Polish

🔬 Output optimization

v7.27.3 (2025-05-27)

🐛 Bug Fix

v5.100.2

Fixes

Performance Improvements

v5.100.1

Fixes

v5.100.0

Fixes

Features

Performance Improvements

v5.99.9

Fixes

v7.27.6 (2025-06-05)

🐛 Bug Fix

Committers: 3

v7.27.5 (2025-06-03)

🐛 Bug Fix

💅 Polish

Committers: 4

v7.27.4 (2025-05-30)

👓 Spec Compliance

💅 Polish

🔬 Output optimization

v7.27.6 (2025-06-05)

🐛 Bug Fix

v7.27.5 (2025-06-03)

🐛 Bug Fix

💅 Polish

v7.27.4 (2025-05-30)

👓 Spec Compliance

💅 Polish

🔬 Output optimization

v7.27.3 (2025-05-27)

🐛 Bug Fix

Release 0.5.48

Release 0.5.47

Release 0.5.46

Release 0.5.45

Release 0.5.44

Release 0.5.43

Release 0.5.42

Release 0.5.41

Release 0.5.40

Release 0.5.39

Release 0.5.38

Release 0.5.37

Release 0.5.36

0.5.48 2025-03-23

0.5.47 2025-01-28

0.5.46 2024-10-06

0.5.45 2024-02-04

0.5.44 2023-12-29

0.5.43 2023-03-31

`0.5.48` 2025-03-23

`0.5.47` 2025-01-28

`0.5.46` 2024-10-06

`0.5.45` 2024-02-04

`0.5.44` 2023-12-29

`0.5.43` 2023-03-31

`0.5.42` 2023-03-24

`0.5.41` 2023-02-25

`0.5.40` 2022-12-11

`0.5.39` 2022-11-13

`0.5.38` 2022-10-15

`0.5.37` 2022-08-25

`0.5.36` 2022-08-25