Skip to content

build(deps): bump the npm_and_yarn group across 3 directories with 3 updates#2

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/src/packages/npm_and_yarn-3fd6bffad1
Open

build(deps): bump the npm_and_yarn group across 3 directories with 3 updates#2
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/src/packages/npm_and_yarn-3fd6bffad1

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 21, 2026

Bumps the npm_and_yarn group with 3 updates in the /src/packages directory: next, bootbox and bootstrap.
Bumps the npm_and_yarn group with 1 update in the /src/packages/next directory: next.
Bumps the npm_and_yarn group with 2 updates in the /src/packages/static directory: bootbox and bootstrap.

Updates next from 15.5.10 to 15.5.14

Release notes

Sourced from next's releases.

v15.5.14

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • feat(next/image): add lru disk cache and images.maximumDiskCacheSize (#91660)
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses (#90304)

Credits

Huge thanks to @​styfle and @​lllomh for helping!

v15.5.13

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix: patch http-proxy to prevent request smuggling in rewrites (See: CVE-2026-29057)

Credits

Huge thanks to @​ztanner for helping!

v15.5.12

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

  • fix unlock in publish-native

This is a re-release of v15.5.11 applying the turbopack changes.

v15.5.11

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Tracing: Fix memory leak in span map (#85529)
  • fix: ensure LRU cache items have minimum size of 1 to prevent unbounded growth (#89134)
  • Turbopack: fix NFT tracing of sharp 0.34 (#82340)
  • Turbopack: support pattern into exports field (#82757)
  • NFT tracing fixes (#84155 and #85323)
  • Turbopack: validate CSS without computing all paths (#83810)
  • feat: implement LRU cache with invocation ID scoping for minimal mode response cache (#89129)

Credits

Huge thanks to @​timneutkens, @​mischnic, @​ztanner, and @​wyattjoh for helping!

Commits
  • d7b012d v15.5.14
  • 2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
  • f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
  • cfd5f53 v15.5.13
  • 15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
  • d23f41c v15.5.12
  • 8e75765 fix unlock in publish-native
  • 6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
  • 7a94645 Apply needs for publishRelease
  • bbfd4e3 v15.5.11
  • Additional commits viewable in compare view

Updates bootbox from 4.4.0 to 6.0.1

Release notes

Sourced from bootbox's releases.

v6.0.1

  • Updates prompt callback to return false from callback if inputType is 'checkbox', required option is true, and no checkbox has been checked
  • Updates unit tests
    • Adds tests for required option
    • Cleanup up pattern tests
    • Adds HTML output runner

v6.0.0

  • Adds Bootstrap 5 support. Note: jQuery is still required
  • Removes various IE polyfills
  • Replaces var with let
  • Normalizes locale strings to IANA standard format (see CHANGLOG).
    • bg_BG -> bg-BG
    • pt-br -> pt-BR
    • zh_CN -> zh-CN
    • zh_TW -> zh-CW

Adds relatedTarget option

  • Adds relatedTarget option. Allows the caller to determine which element, if any, triggered the modal
  • Various bugfixes and package updates

Adds Vietnamese locale

  • Adds Vietnamese locale

Adds reusable option

  • Adds new option, reusable. When set to true, the modal generated by Bootbox is not destroyed when dismissed.
  • Updates bootbox.all.js to include fix for clickable backdrop

Updates to backdrop option

Adds hooks for Bootstrap's modal events

No release notes provided.

Removes :first selector

No release notes provided.

Fixes invalid value parsing for step attribute

No release notes provided.

Adds Georgian locale

  • Adds Georgian locale

Button callbacks are only fired if defined

Modifies dialog to only process button callback if it has been defined. Closes #705

Adds Swahili locale

  • Adds Swahili locale

Adds rows as an option for prompt

... (truncated)

Changelog

Sourced from bootbox's changelog.

6.0.1

  • Updates prompt callback to return false from callback if inputType is 'checkbox', required option is true, and no checkbox has been checked
  • Updates unit tests
    • Adds tests for required option
    • Cleanup up pattern tests
    • Adds HTML output runner

6.0.0

  • Removes various IE polyfills
  • Replaces var with let
  • JSDoc cleanup
  • Adds code to handle cases when click starts on the modal body and ends on the backdrop and backdrop is set to true
  • bootbox.locale.js and bootbox.all.js are now generated files and will be found in the /dist directory
  • Simplify locale file structure
  • Changed a few locale identifiers to match IANA specifications:
    • bg_BG -> bg-BG
    • pt-br -> pt-BR
    • zh_CN -> zh-CN
    • zh_TW -> zh-CW

5.5.2

  • Adds Vietnamese locale

5.5.0

  • Adds reusable option, which allows an instance of a Bootbox modal to be reused.

5.4.1

  • Updates to how backdrop is handled. Fixes #766.

5.4.0

  • Adds function hooks for onShow, onShown, onHide, and onHidden events, which map to their Bootstrap modal equivalents.

5.3.4

  • Removes ':first' selector from default button binding

5.3.3

  • Fixes incorrect value validation for the step option when setting inputType to number for a prompt.

5.3.2

  • Adds Georgian (ka) locale.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by tiesont, a new releaser for bootbox since your current version.


Updates bootstrap from 3.4.1 to 5.0.0

Release notes

Sourced from bootstrap's releases.

v5.0.0

Highlights

#32155: Updated make-col() mixin to generate equal columns when no size is specified #32763: Added new color-scheme() mixin #33389: Dropdown menus now have option become clickable #33453: Added new docs footer #33548: Offcanvas header components are now vertically aligned #33549: Added offcanvas-top modifier #33634: Added support for .dropdown-items wrapped in <li>s #33626: Fix v5 regressions in tab dropdown functionality

🚀 Features

  • #32763: Add color-scheme mixin
  • #33389: Dropdown — Add option to make the dropdown menu clickable
  • #33549: Add offcanvas-top modifier

🎨 CSS

  • #32155: Add equal column mixin
  • #32763: Add color-scheme mixin
  • #33292: Make accordion icon rotation more natural
  • #33411: Fix validation feedback icon in select multiple
  • #33478: Make .nav-link color consistent when using buttons
  • #33482: Dropdown — Apply positioning only when Popper is not used
  • #33548: Vertically align offcanvas header components
  • #33549: Add offcanvas-top modifier
  • #33550: Spinner alignment changes
  • #33598: Hide validation icons from multiple selects
  • #33600: Have $form-check-input-border's default derive from $black
  • #33607: Reduce color-scheme complexity
  • #33642: use :read-only css selector instead [readonly] for consistency
  • #33658: fix: use list-group variable instead of alert
  • #33736: accordion: fix border-top on Firefox

☕️ JavaScript

  • #32439: Decouple BackDrop from modal
  • #33245: Decouple Modal's scrollbar functionality
  • #33249: Simplify Modal Config
  • #33250: Simplify ScrollSpy config
  • #33310: fix: make EventHandler better handle mouseenter/mouseleave events
  • #33389: Dropdown — Add option to make the dropdown menu clickable
  • #33429: Remove element event listeners through base component
  • #33451: Add missing things in hide method of dropdown
  • #33456: Use our isDisabled util on dropdown
  • #33466: Refactor dropdown's hide functionality
  • #33479: Fix dropdown escape propagation
  • #33496: Use cached noop function

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by mdo, a new releaser for bootstrap since your current version.


Updates next from 15.5.10 to 15.5.14

Release notes

Sourced from next's releases.

v15.5.14

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • feat(next/image): add lru disk cache and images.maximumDiskCacheSize (#91660)
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses (#90304)

Credits

Huge thanks to @​styfle and @​lllomh for helping!

v15.5.13

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix: patch http-proxy to prevent request smuggling in rewrites (See: CVE-2026-29057)

Credits

Huge thanks to @​ztanner for helping!

v15.5.12

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

  • fix unlock in publish-native

This is a re-release of v15.5.11 applying the turbopack changes.

v15.5.11

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Tracing: Fix memory leak in span map (#85529)
  • fix: ensure LRU cache items have minimum size of 1 to prevent unbounded growth (#89134)
  • Turbopack: fix NFT tracing of sharp 0.34 (#82340)
  • Turbopack: support pattern into exports field (#82757)
  • NFT tracing fixes (#84155 and #85323)
  • Turbopack: validate CSS without computing all paths (#83810)
  • feat: implement LRU cache with invocation ID scoping for minimal mode response cache (#89129)

Credits

Huge thanks to @​timneutkens, @​mischnic, @​ztanner, and @​wyattjoh for helping!

Commits
  • d7b012d v15.5.14
  • 2b05251 [backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...
  • f88cee9 Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...
  • cfd5f53 v15.5.13
  • 15f2891 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
  • d23f41c v15.5.12
  • 8e75765 fix unlock in publish-native
  • 6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
  • 7a94645 Apply needs for publishRelease
  • bbfd4e3 v15.5.11
  • Additional commits viewable in compare view

Updates bootbox from 4.4.0 to 6.0.1

Release notes

Sourced from bootbox's releases.

v6.0.1

  • Updates prompt callback to return false from callback if inputType is 'checkbox', required option is true, and no checkbox has been checked
  • Updates unit tests
    • Adds tests for required option
    • Cleanup up pattern tests
    • Adds HTML output runner

v6.0.0

  • Adds Bootstrap 5 support. Note: jQuery is still required
  • Removes various IE polyfills
  • Replaces var with let
  • Normalizes locale strings to IANA standard format (see CHANGLOG).
    • bg_BG -> bg-BG
    • pt-br -> pt-BR
    • zh_CN -> zh-CN
    • zh_TW -> zh-CW

Adds relatedTarget option

  • Adds relatedTarget option. Allows the caller to determine which element, if any, triggered the modal
  • Various bugfixes and package updates

Adds Vietnamese locale

  • Adds Vietnamese locale

Adds reusable option

  • Adds new option, reusable. When set to true, the modal generated by Bootbox is not destroyed when dismissed.
  • Updates bootbox.all.js to include fix for clickable backdrop

Updates to backdrop option

Adds hooks for Bootstrap's modal events

No release notes provided.

Removes :first selector

No release notes provided.

Fixes invalid value parsing for step attribute

No release notes provided.

Adds Georgian locale

  • Adds Georgian locale

Button callbacks are only fired if defined

Modifies dialog to only process button callback if it has been defined. Closes #705

Adds Swahili locale

  • Adds Swahili locale

Adds rows as an option for prompt

... (truncated)

Changelog

Sourced from bootbox's changelog.

6.0.1

  • Updates prompt callback to return false from callback if inputType is 'checkbox', required option is true, and no checkbox has been checked
  • Updates unit tests
    • Adds tests for required option
    • Cleanup up pattern tests
    • Adds HTML output runner

6.0.0

  • Removes various IE polyfills
  • Replaces var with let
  • JSDoc cleanup
  • Adds code to handle cases when click starts on the modal body and ends on the backdrop and backdrop is set to true
  • bootbox.locale.js and bootbox.all.js are now generated files and will be found in the /dist directory
  • Simplify locale file structure
  • Changed a few locale identifiers to match IANA specifications:
    • bg_BG -> bg-BG
    • pt-br -> pt-BR
    • zh_CN -> zh-CN
    • zh_TW -> zh-CW

5.5.2

  • Adds Vietnamese locale

5.5.0

  • Adds reusable option, which allows an instance of a Bootbox modal to be reused.

5.4.1

  • Updates to how backdrop is handled. Fixes #766.

5.4.0

  • Adds function hooks for onShow, onShown, onHide, and onHidden events, which map to their Bootstrap modal equivalents.

5.3.4

  • Removes ':first' selector from default button binding

5.3.3

  • Fixes incorrect value validation for the step option when setting inputType to number for a prompt.

5.3.2

  • Adds Georgian (ka) locale.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by tiesont, a new releaser for bootbox since your current version.


Updates bootstrap from 3.4.1 to 5.0.0

Release notes

Sourced from bootstrap's releases.

v5.0.0

Highlights

#32155: Updated make-col() mixin to generate equal columns when no size is specified #32763: Added new color-scheme() mixin #33389: Dropdown menus now have option become clickable #33453: Added new docs footer #33548: Offcanvas header components are now vertically aligned #33549: Added offcanvas-top modifier #33634: Added support for .dropdown-items wrapped in <li>s #33626: Fix v5 regressions in tab dropdown functionality

🚀 Features

  • #32763: Add color-scheme mixin
  • #33389: Dropdown — Add option to make the dropdown menu clickable
  • #33549: Add offcanvas-top modifier

🎨 CSS

  • #32155: Add equal column mixin
  • #32763: Add color-scheme mixin
  • #33292: Make accordion icon rotation more natural
  • #33411: Fix validation feedback icon in select multiple
  • #33478: Make .nav-link color consistent when using buttons
  • #33482: Dropdown — Apply positioning only when Popper is not used
  • #33548: Vertically align offcanvas header components
  • #33549: Add offcanvas-top modifier
  • #33550: Spinner alignment changes
  • #33598: Hide validation icons from multiple selects
  • #33600: Have $form-check-input-border's default derive from $black
  • #33607: Reduce color-scheme complexity
  • #33642: use :read-only css selector instead [readonly] for consistency
  • #33658: fix: use list-group variable instead of alert
  • #33736: accordion: fix border-top on Firefox

☕️ JavaScript

  • #32439: Decouple BackDrop from modal
  • #33245: Decouple Modal's scrollbar functionality
  • #33249: Simplify Modal Config
  • #33250: Simplify ScrollSpy config
  • #33310: fix: make EventHandler better handle mouseenter/mouseleave events
  • #33389: Dropdown — Add option to make the dropdown menu clickable
  • #33429: Remove element event listeners through base component
  • #33451: Add missing things in hide method of dropdown
  • #33456: Use our isDisabled util on dropdown
  • #33466: Refactor dropdown's hide functionality
  • #33479: Fix dropdown escape propagation
  • #33496: Use cached noop function

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by mdo, a new releaser for bootstrap since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump the npm_and_yarn group across 3 directories with 3 …
812af60 
…updates

Bumps the npm_and_yarn group with 3 updates in the /src/packages directory: [next](https://github.com/vercel/next.js), [bootbox](https://github.com/bootboxjs/bootbox) and [bootstrap](https://github.com/twbs/bootstrap).
Bumps the npm_and_yarn group with 1 update in the /src/packages/next directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 2 updates in the /src/packages/static directory: [bootbox](https://github.com/bootboxjs/bootbox) and [bootstrap](https://github.com/twbs/bootstrap).


Updates `next` from 15.5.10 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.10...v15.5.14)

Updates `bootbox` from 4.4.0 to 6.0.1
- [Release notes](https://github.com/bootboxjs/bootbox/releases)
- [Changelog](https://github.com/bootboxjs/bootbox/blob/master/CHANGELOG.md)
- [Commits](bootboxjs/bootbox@v4.4.0...v6.0.1)

Updates `bootstrap` from 3.4.1 to 5.0.0
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v3.4.1...v5.0.0)

Updates `next` from 15.5.10 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.10...v15.5.14)

Updates `bootbox` from 4.4.0 to 6.0.1
- [Release notes](https://github.com/bootboxjs/bootbox/releases)
- [Changelog](https://github.com/bootboxjs/bootbox/blob/master/CHANGELOG.md)
- [Commits](bootboxjs/bootbox@v4.4.0...v6.0.1)

Updates `bootstrap` from 3.4.1 to 5.0.0
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v3.4.1...v5.0.0)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: bootbox
  dependency-version: 6.0.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: bootstrap
  dependency-version: 5.0.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: bootbox
  dependency-version: 6.0.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: bootstrap
  dependency-version: 5.0.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 21, 2026
@dependabot dependabot bot mentioned this pull request Mar 21, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants