From d2502d0f00ab1dac4ec5c96af169f59870c05d87 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 Apr 2026 01:15:05 +0000 Subject: [PATCH 1/7] Bump follow-redirects from 1.15.6 to 1.16.0 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.6 to 1.16.0. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.0) --- updated-dependencies: - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- yarn.lock | 18 ++++-------------- 1 file changed, 4 insertions(+), 14 deletions(-) diff --git a/yarn.lock b/yarn.lock index f7640dfb646..0a43fd1ed53 100644 --- a/yarn.lock +++ b/yarn.lock @@ -9387,23 +9387,13 @@ __metadata: languageName: node linkType: hard -"follow-redirects@npm:^1.0.0": - version: 1.15.6 - resolution: "follow-redirects@npm:1.15.6" +"follow-redirects@npm:^1.0.0, follow-redirects@npm:^1.15.11": + version: 1.16.0 + resolution: "follow-redirects@npm:1.16.0" peerDependenciesMeta: debug: optional: true - checksum: a62c378dfc8c00f60b9c80cab158ba54e99ba0239a5dd7c81245e5a5b39d10f0c35e249c3379eae719ff0285fff88c365dd446fab19dee771f1d76252df1bbf5 - languageName: node - linkType: hard - -"follow-redirects@npm:^1.15.11": - version: 1.15.11 - resolution: "follow-redirects@npm:1.15.11" - peerDependenciesMeta: - debug: - optional: true - checksum: 20bf55e9504f59e6cc3743ba27edb2ebf41edea1baab34799408f2c050f73f0c612728db21c691276296d2795ea8a812dc532a98e8793619fcab91abe06d017f + checksum: e90dce4607b1f6b8b9883287f912585573c19088209ad82341d550a795b4ba514522b73b1b340cf618279df27975cd46504d09149be60291ba6767384c1fd8f8 languageName: node linkType: hard From 5f68fc85ced77796aefc55d864b5147afb2f5460 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Apr 2026 18:23:11 +0000 Subject: [PATCH 2/7] Bump dompurify from 3.2.6 to 3.4.1 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.6 to 3.4.1. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.2.6...3.4.1) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- yarn.lock | 20 ++++---------------- 1 file changed, 4 insertions(+), 16 deletions(-) diff --git a/yarn.lock b/yarn.lock index 376ae31fea4..1e169611f70 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8656,27 +8656,15 @@ __metadata: languageName: node linkType: hard -"dompurify@npm:^3.2.4": - version: 3.2.6 - resolution: "dompurify@npm:3.2.6" - dependencies: - "@types/trusted-types": "npm:^2.0.7" - dependenciesMeta: - "@types/trusted-types": - optional: true - checksum: 4d002997dbae13f6bdf0e6be014384129c83b1ee8cd3fca9d96f95b9142d1e96256924466a2fc25e7ffb6ede54290e5c4a7d1bd10f9b14cfa07928dd799c3b42 - languageName: node - linkType: hard - -"dompurify@npm:^3.2.5": - version: 3.3.0 - resolution: "dompurify@npm:3.3.0" +"dompurify@npm:^3.2.4, dompurify@npm:^3.2.5": + version: 3.4.1 + resolution: "dompurify@npm:3.4.1" dependencies: "@types/trusted-types": ^2.0.7 dependenciesMeta: "@types/trusted-types": optional: true - checksum: 425c181ac531cb15f93be85dc6efb1eb535d7c53ad0752b305043fe43e76c5ef144c2aa3670da2a52bec253c0aa302c06545cd04012396dc81d52cf86529097b + checksum: e37e0faf96b607aee4bdcce7931427ad9b252246f866cb58814848d01b11238e0eb60e8310945d2bae9922a78d5d358808058238a65ee5a3f4a9e2d8d8d5a55e languageName: node linkType: hard From 93d9ca6e444b9ff85d15294a0f5f80e22d359ed4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 1 May 2026 12:21:38 +0100 Subject: [PATCH 3/7] Merge pull request #758 from OpenFn/dependabot/npm_and_yarn/axios-1.15.0 Bump axios from 1.13.5 to 1.15.0 --- package.json | 2 +- yarn.lock | 20 ++++++++++---------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/package.json b/package.json index 64865863188..190d9f2fe66 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,7 @@ "@docusaurus/preset-classic": "3.9.2", "@docusaurus/theme-mermaid": "3.9.2", "@mdx-js/react": "^3.0.0", - "axios": "1.13.5", + "axios": "1.15.0", "brace-expansion": "1.1.12", "clsx": "^1.1.1", "compare-versions": "^5.0.1", diff --git a/yarn.lock b/yarn.lock index bec8a970bd9..c37614accf4 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4957,7 +4957,7 @@ __metadata: "@types/react": ^18.2.29 "@types/react-helmet": ^6.1.0 "@types/react-router-dom": ^5.1.7 - axios: 1.13.5 + axios: 1.15.0 brace-expansion: 1.1.12 chokidar: ^3.6.0 clsx: ^1.1.1 @@ -6627,14 +6627,14 @@ __metadata: languageName: node linkType: hard -"axios@npm:1.13.5": - version: 1.13.5 - resolution: "axios@npm:1.13.5" +"axios@npm:1.15.0": + version: 1.15.0 + resolution: "axios@npm:1.15.0" dependencies: follow-redirects: ^1.15.11 form-data: ^4.0.5 - proxy-from-env: ^1.1.0 - checksum: 985024c4a32f837053f198f02a308fd6f8bfb4053a2f21e39e37992bc6d06917f008679c36b3e7f0f0c9060c85ffe37c61e58d2ac662595d68dc1b89cef78de8 + proxy-from-env: ^2.1.0 + checksum: 95a8455554867a083ab3772fcadba42a22ec4bb546dccc66011556d837a07e544ae006675a30a5c43453f3e37e7c0982e934cec482c06b75abead2a2c157448a languageName: node linkType: hard @@ -14038,10 +14038,10 @@ __metadata: languageName: node linkType: hard -"proxy-from-env@npm:^1.1.0": - version: 1.1.0 - resolution: "proxy-from-env@npm:1.1.0" - checksum: ed7fcc2ba0a33404958e34d95d18638249a68c430e30fcb6c478497d72739ba64ce9810a24f53a7d921d0c065e5b78e3822759800698167256b04659366ca4d4 +"proxy-from-env@npm:^2.1.0": + version: 2.1.0 + resolution: "proxy-from-env@npm:2.1.0" + checksum: b106ad790f26d47ba4791af3fe8cba5c8d35d85020119c82c05b413eb11b3ab97d2393ecaed51bca97c2788fa256408283dfeb4d970b2ebcae6702310f064e7e languageName: node linkType: hard From 596e413e37beeb65f0b98bf8c360aaef3e47c6ff Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 1 May 2026 12:21:57 +0100 Subject: [PATCH 4/7] Bump lodash from 4.17.23 to 4.18.1 (#757) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index c37614accf4..12c8fa4887c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11149,9 +11149,9 @@ __metadata: linkType: hard "lodash@npm:^4.17.20, lodash@npm:^4.17.21": - version: 4.17.23 - resolution: "lodash@npm:4.17.23" - checksum: 7daad39758a72872e94651630fbb54ba76868f904211089721a64516ce865506a759d9ad3d8ff22a2a49a50a09db5d27c36f22762d21766e47e3ba918d6d7bab + version: 4.18.1 + resolution: "lodash@npm:4.18.1" + checksum: bb5f5b49aad29614e709af02b64c56b0f8b78c6a81434a3c1ae527d2f0f78ca08f9d9fb22aa825a053876c9d2166e9c01f31c356014b5e2bdc0556c057433102 languageName: node linkType: hard From e715b7fcc2ae3af2cd5748d354402082fdbad2da Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 1 May 2026 12:22:12 +0100 Subject: [PATCH 5/7] Bump node-forge from 1.3.3 to 1.4.0 (#753) Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.3 to 1.4.0. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.3...v1.4.0) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 12c8fa4887c..95d31e8340c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -12505,9 +12505,9 @@ __metadata: linkType: hard "node-forge@npm:^1": - version: 1.3.3 - resolution: "node-forge@npm:1.3.3" - checksum: 045b650d61eeba57588744b7be4671044e83871e2c4dc5d4a38a8eb5af7e55fa790c93ba9db1d1ee14a567d25fde41e97a5132e076cff738622e0916c77b48d2 + version: 1.4.0 + resolution: "node-forge@npm:1.4.0" + checksum: c97c634d4d483aae815677db5b1bd14bfea4d873ab48817e020610a2b4d8bc6b3e77994860189b44151ff8e0842c0c4ba6faa80b9a6e6fbd6989865e8eb80b96 languageName: node linkType: hard From 61f753ae8412789c4d4c33ce85ff93fb6977f558 Mon Sep 17 00:00:00 2001 From: Joe Clark Date: Fri, 1 May 2026 12:27:38 +0100 Subject: [PATCH 6/7] bump node version --- .github/workflows/deploy.yml | 6 +++--- .github/workflows/test-deploy.yml | 6 +++--- .tool-versions | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 64220a1fd7e..fac7be1d3a3 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -13,11 +13,11 @@ jobs: name: Deploy to GitHub Pages runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - run: corepack enable - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: - node-version: 20 + node-version: 24 cache: yarn - name: Add key to allow access to repository diff --git a/.github/workflows/test-deploy.yml b/.github/workflows/test-deploy.yml index c003070274b..5065c351e24 100644 --- a/.github/workflows/test-deploy.yml +++ b/.github/workflows/test-deploy.yml @@ -12,11 +12,11 @@ jobs: name: Test deployment runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - run: corepack enable - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: - node-version: 20 + node-version: 24 cache: yarn - name: Install dependencies diff --git a/.tool-versions b/.tool-versions index 33f368048d5..b92616f3673 100644 --- a/.tool-versions +++ b/.tool-versions @@ -1 +1 @@ -nodejs 20.11.0 \ No newline at end of file +nodejs 24.15.0 \ No newline at end of file From 9624b29fc41565fd25d631f78637ffab459882c1 Mon Sep 17 00:00:00 2001 From: Joe Clark Date: Fri, 1 May 2026 12:53:49 +0100 Subject: [PATCH 7/7] update brace-expansion --- package.json | 2 +- yarn.lock | 28 +++++++++++++++++----------- 2 files changed, 18 insertions(+), 12 deletions(-) diff --git a/package.json b/package.json index 190d9f2fe66..b9fce7e4c91 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,7 @@ "@docusaurus/theme-mermaid": "3.9.2", "@mdx-js/react": "^3.0.0", "axios": "1.15.0", - "brace-expansion": "1.1.12", + "brace-expansion": "^5.0.0", "clsx": "^1.1.1", "compare-versions": "^5.0.1", "date-fns": "2.21.3", diff --git a/yarn.lock b/yarn.lock index 95d31e8340c..822db3d4831 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4958,7 +4958,7 @@ __metadata: "@types/react-helmet": ^6.1.0 "@types/react-router-dom": ^5.1.7 axios: 1.15.0 - brace-expansion: 1.1.12 + brace-expansion: ^5.0.0 chokidar: ^3.6.0 clsx: ^1.1.1 compare-versions: ^5.0.1 @@ -6722,6 +6722,13 @@ __metadata: languageName: node linkType: hard +"balanced-match@npm:^4.0.2": + version: 4.0.4 + resolution: "balanced-match@npm:4.0.4" + checksum: fb07bb66a0959c2843fc055838047e2a95ccebb837c519614afb067ebfdf2fa967ca8d712c35ced07f2cd26fc6f07964230b094891315ad74f11eba3d53178a0 + languageName: node + linkType: hard + "baseline-browser-mapping@npm:^2.9.0": version: 2.9.19 resolution: "baseline-browser-mapping@npm:2.9.19" @@ -6821,16 +6828,6 @@ __metadata: languageName: node linkType: hard -"brace-expansion@npm:1.1.12": - version: 1.1.12 - resolution: "brace-expansion@npm:1.1.12" - dependencies: - balanced-match: ^1.0.0 - concat-map: 0.0.1 - checksum: 12cb6d6310629e3048cadb003e1aca4d8c9bb5c67c3c321bafdd7e7a50155de081f78ea3e0ed92ecc75a9015e784f301efc8132383132f4f7904ad1ac529c562 - languageName: node - linkType: hard - "brace-expansion@npm:^1.1.7": version: 1.1.11 resolution: "brace-expansion@npm:1.1.11" @@ -6841,6 +6838,15 @@ __metadata: languageName: node linkType: hard +"brace-expansion@npm:^5.0.0": + version: 5.0.5 + resolution: "brace-expansion@npm:5.0.5" + dependencies: + balanced-match: ^4.0.2 + checksum: 4481b7ffa467b34c14e258167dbd8d9485a2d31d03060e8e8b38142dcde32cdc89c8f55b04d3ae7aae9304fa7eac1dfafd602787cf09c019cc45de3bb6950ffc + languageName: node + linkType: hard + "braces@npm:^3.0.3, braces@npm:~3.0.2": version: 3.0.3 resolution: "braces@npm:3.0.3"