Skip to content

📦 [0.83]: Bump the all-dependencies group with 6 updates#15996

Closed
dependabot[bot] wants to merge 1 commit into0.83-stablefrom
dependabot/npm_and_yarn/0.83-stable/all-dependencies-2ecd56a737
Closed

📦 [0.83]: Bump the all-dependencies group with 6 updates#15996
dependabot[bot] wants to merge 1 commit into0.83-stablefrom
dependabot/npm_and_yarn/0.83-stable/all-dependencies-2ecd56a737

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 15, 2026 •
edited
Loading

Bumps the all-dependencies group with 6 updates:

Package From To
beachball 2.64.2 2.64.3
lage 2.15.7 2.15.8
simple-git 3.35.2 3.36.0
metro-runtime 0.83.5 0.83.6
metro-source-map 0.83.5 0.83.6
resolve 1.22.11 1.22.12

Updates beachball from 2.64.2 to 2.64.3

Changelog

Sourced from beachball's changelog.

2.64.3

Fri, 10 Apr 2026 02:42:47 GMT

Patches

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for beachball since your current version.


Updates lage from 2.15.7 to 2.15.8

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lage since your current version.


Updates simple-git from 3.35.2 to 3.36.0

Release notes

Sourced from simple-git's releases.

simple-git@3.36.0

Minor Changes

  • 89a2294: Extend known exploitable configuration keys and per-task environment variables.

    Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

    Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

  • 1ad57e8: Remove conflicting node:buffer import
  • Updated dependencies [89a2294]
  • Updated dependencies [675570a]
    • @​simple-git/argv-parser@​1.1.0
    • @​simple-git/args-pathspec@​1.0.3
Changelog

Sourced from simple-git's changelog.

3.36.0

Minor Changes

  • 89a2294: Extend known exploitable configuration keys and per-task environment variables.

    Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

    Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

  • 1ad57e8: Remove conflicting node:buffer import
  • Updated dependencies [89a2294]
  • Updated dependencies [675570a]
    • @​simple-git/argv-parser@​1.1.0
    • @​simple-git/args-pathspec@​1.0.3
Commits

Updates metro-runtime from 0.83.5 to 0.83.6

Release notes

Sourced from metro-runtime's releases.

v0.83.6

This release is on the 0.83.x branch

NOTE: Experimental features are not covered by semver and can change at any time.

Commits

Updates metro-source-map from 0.83.5 to 0.83.6

Release notes

Sourced from metro-source-map's releases.

v0.83.6

This release is on the 0.83.x branch

NOTE: Experimental features are not covered by semver and can change at any time.

Commits

Updates resolve from 1.22.11 to 1.22.12

Commits
  • d2d30de v1.22.12
  • 655c3db [Fix] defaultPaths: handle null homedir gracefully
  • 0cec52b [Fix] homedir: fix operator precedence bug with HOMEDRIVE/HOMEPATH concaten...
  • a93a913 [Fix] loadpkg: add missing return after error callback to prevent double-...
  • eeb965e [meta] update security policy to use GitHub PVR instead of Tidelift
  • 7929ac1 [Test] add test from v2 branch
  • 9fcaf60 [Refactor] use non-hoisted declarations instead of expressions
  • 4c6db66 [Robustness] use es-errors
  • 29bac90 [readme] replace runkit CI badge with shields.io check-runs badge
  • 651f4d1 [Performance] avoid an unnecessary slice
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
###### Microsoft Reviewers: [Open in CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com//pull/15996)

@dependabot
📦 [0.83]: Bump the all-dependencies group with 6 updates
9d9f786 
Bumps the all-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [beachball](https://github.com/microsoft/beachball) | `2.64.2` | `2.64.3` |
| [lage](https://github.com/microsoft/lage) | `2.15.7` | `2.15.8` |
| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.35.2` | `3.36.0` |
| [metro-runtime](https://github.com/facebook/metro/tree/HEAD/packages/metro-runtime) | `0.83.5` | `0.83.6` |
| [metro-source-map](https://github.com/facebook/metro/tree/HEAD/packages/metro-source-map) | `0.83.5` | `0.83.6` |
| [resolve](https://github.com/browserify/resolve) | `1.22.11` | `1.22.12` |


Updates `beachball` from 2.64.2 to 2.64.3
- [Changelog](https://github.com/microsoft/beachball/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/beachball/commits)

Updates `lage` from 2.15.7 to 2.15.8
- [Commits](microsoft/lage@lage_v2.15.7...lage_v2.15.8)

Updates `simple-git` from 3.35.2 to 3.36.0
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git)

Updates `metro-runtime` from 0.83.5 to 0.83.6
- [Release notes](https://github.com/facebook/metro/releases)
- [Changelog](https://github.com/facebook/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/metro/commits/v0.83.6/packages/metro-runtime)

Updates `metro-source-map` from 0.83.5 to 0.83.6
- [Release notes](https://github.com/facebook/metro/releases)
- [Changelog](https://github.com/facebook/metro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/metro/commits/v0.83.6/packages/metro-source-map)

Updates `resolve` from 1.22.11 to 1.22.12
- [Commits](browserify/resolve@v1.22.11...v1.22.12)

---
updated-dependencies:
- dependency-name: beachball
  dependency-version: 2.64.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: lage
  dependency-version: 2.15.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: simple-git
  dependency-version: 3.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: metro-runtime
  dependency-version: 0.83.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: metro-source-map
  dependency-version: 0.83.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: resolve
  dependency-version: 1.22.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 15, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 15, 2026 13:11
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 15, 2026
@azure-pipelines
Copy link
Copy Markdown
Contributor

azure-pipelines bot commented Apr 15, 2026

Azure Pipelines:
1 pipeline(s) require an authorized user to comment /azp run to run.

@vineethkuttan
Copy link
Copy Markdown
Contributor

vineethkuttan commented Apr 16, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 16, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 16, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/0.83-stable/all-dependencies-2ecd56a737 branch April 16, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vineethkuttan