Skip to content

chore(deps): bump the vendor-minor-and-patch-dependencies group across 1 directory with 2 updates#7609

Merged
watson merged 2 commits intomasterfrom
dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4
Mar 10, 2026
Merged

chore(deps): bump the vendor-minor-and-patch-dependencies group across 1 directory with 2 updates#7609
watson merged 2 commits intomasterfrom
dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 25, 2026

Bumps the vendor-minor-and-patch-dependencies group with 2 updates in the /vendor directory: jsonpath-plus and meriyah.

Updates jsonpath-plus from 10.3.0 to 10.4.0

Release notes

Sourced from jsonpath-plus's releases.

v10.4.0

What's Changed

New Contributors

Full Changelog: JSONPath-Plus/JSONPath@v10.3.0...v10.4.0

Changelog

Sourced from jsonpath-plus's changelog.

10.4.0

Commits
  • 0bedaea chore: bump version
  • 3e597e5 chore(coverage): ignore Function guard from coverage as it is unreachable
  • 1bab1cc fix(eval): rce using lookupGetter or lookupSetter
  • 5d3d63e build(deps): bump lodash from 4.17.21 to 4.17.23 (#249)
  • 233d754 chore: update security policy (#250)
  • d8dad28 build(deps): bump qs from 6.14.0 to 6.14.1 (#248)
  • c78a9b6 chore: update devDeps. and lock file
  • 106d243 feat: add void operator (#244)
  • 235b283 chore: remove lgtm file and update devDeps.
  • b92ebbf chore: update devDeps.
  • Additional commits viewable in compare view

Updates meriyah from 7.0.0 to 7.1.0

Changelog

Sourced from meriyah's changelog.

7.1.0 (2026-02-04)

Features

  • add isParseError() for brand check (#541) (c5443c4)
  • assign to CallExpression is now runtime error in annexB (#546) (5835016)
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for meriyah since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependabot dependencies javascript Pull requests that update javascript code semver-patch labels Feb 25, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 25, 2026 00:54
@dependabot dependabot bot added semver-patch dependencies javascript Pull requests that update javascript code dependabot labels Feb 25, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Feb 25, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.35%. Comparing base (f49fafe) to head (78f0c4f).
⚠️ Report is 6 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #7609      +/-   ##
==========================================
- Coverage   80.35%   80.35%   -0.01%     
==========================================
  Files         741      741              
  Lines       32004    32004              
==========================================
- Hits        25718    25716       -2     
- Misses       6286     6288       +2     
Flag Coverage Δ
aiguard-macos 39.01% <ø> (-0.10%) ⬇️
aiguard-ubuntu 39.13% <ø> (-0.10%) ⬇️
aiguard-windows 38.85% <ø> (-0.10%) ⬇️
apm-capabilities-tracing-macos 48.73% <ø> (ø)
apm-capabilities-tracing-ubuntu 48.81% <ø> (ø)
apm-capabilities-tracing-windows 48.55% <ø> (ø)
apm-integrations-child-process 38.56% <ø> (-0.10%) ⬇️
apm-integrations-couchbase-18 37.33% <ø> (-0.24%) ⬇️
apm-integrations-couchbase-eol 37.94% <ø> (-0.13%) ⬇️
apm-integrations-oracledb 37.78% <ø> (-0.10%) ⬇️
appsec-express 55.29% <ø> (-0.08%) ⬇️
appsec-fastify 51.63% <ø> (-0.07%) ⬇️
appsec-graphql 51.81% <ø> (-0.07%) ⬇️
appsec-kafka 44.41% <ø> (ø)
appsec-ldapjs 44.03% <ø> (-0.08%) ⬇️
appsec-lodash 43.68% <ø> (-0.08%) ⬇️
appsec-macos 58.30% <ø> (-0.07%) ⬇️
appsec-mongodb-core 48.82% <ø> (-0.08%) ⬇️
appsec-mongoose 49.49% <ø> (-0.08%) ⬇️
appsec-mysql 50.87% <ø> (-0.07%) ⬇️
appsec-node-serialize 43.20% <ø> (-0.08%) ⬇️
appsec-passport 47.63% <ø> (-0.09%) ⬇️
appsec-postgres 50.61% <ø> (-0.07%) ⬇️
appsec-sourcing 42.61% <ø> (-0.08%) ⬇️
appsec-template 43.37% <ø> (-0.08%) ⬇️
appsec-ubuntu 58.37% <ø> (-0.07%) ⬇️
appsec-windows 58.15% <ø> (-0.05%) ⬇️
instrumentations-instrumentation-bluebird 32.39% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-body-parser 40.50% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-child_process 37.87% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-cookie-parser 34.37% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-express 34.69% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-express-mongo-sanitize 34.50% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-express-session 40.14% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-fs 32.00% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-generic-pool 29.91% <ø> (ø)
instrumentations-instrumentation-http 39.86% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-knex 32.39% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-mongoose 33.52% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-multer 40.25% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-mysql2 38.34% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-passport 44.01% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-passport-http 43.69% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-passport-local 44.22% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-pg 37.77% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-promise 32.32% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-promise-js 32.33% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-q 32.37% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-url 32.29% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-when 32.34% <ø> (-0.10%) ⬇️
llmobs-ai 42.34% <ø> (-0.10%) ⬇️
llmobs-anthropic 40.31% <ø> (-0.09%) ⬇️
llmobs-bedrock 39.27% <ø> (-0.08%) ⬇️
llmobs-google-genai 39.84% <ø> (-0.09%) ⬇️
llmobs-langchain 40.07% <ø> (-0.08%) ⬇️
llmobs-openai 44.06% <ø> (-0.09%) ⬇️
llmobs-vertex-ai 40.10% <ø> (-0.09%) ⬇️
platform-core 31.53% <ø> (ø)
platform-esbuild 34.48% <ø> (ø)
platform-instrumentations-misc 48.40% <ø> (ø)
platform-shimmer 37.63% <ø> (ø)
platform-unit-guardrails 32.95% <ø> (ø)
plugins-azure-event-hubs 25.83% <ø> (ø)
plugins-azure-service-bus 25.19% <ø> (ø)
plugins-bullmq 44.25% <ø> (-0.10%) ⬇️
plugins-cassandra 37.81% <ø> (-0.10%) ⬇️
plugins-cookie 26.89% <ø> (ø)
plugins-cookie-parser 26.67% <ø> (ø)
plugins-crypto 26.79% <ø> (ø)
plugins-dd-trace-api 38.39% <ø> (-0.10%) ⬇️
plugins-express-mongo-sanitize 26.82% <ø> (ø)
plugins-express-session 26.63% <ø> (ø)
plugins-fastify 42.23% <ø> (-0.09%) ⬇️
plugins-fetch 38.38% <ø> (-0.10%) ⬇️
plugins-fs 38.67% <ø> (-0.10%) ⬇️
plugins-generic-pool 25.87% <ø> (ø)
plugins-google-cloud-pubsub 45.37% <ø> (-0.09%) ⬇️
plugins-grpc 40.94% <ø> (-0.09%) ⬇️
plugins-handlebars 26.86% <ø> (ø)
plugins-hapi 40.28% <ø> (+0.04%) ⬆️
plugins-hono 40.40% <ø> (-0.10%) ⬇️
plugins-ioredis 38.47% <ø> (-0.10%) ⬇️
plugins-knex 26.50% <ø> (ø)
plugins-ldapjs 24.36% <ø> (ø)
plugins-light-my-request 26.23% <ø> (ø)
plugins-limitd-client 32.67% <ø> (-0.10%) ⬇️
plugins-lodash 25.96% <ø> (ø)
plugins-mariadb 39.53% <ø> (-0.10%) ⬇️
plugins-memcached 38.19% <ø> (-0.10%) ⬇️
plugins-microgateway-core 39.19% <ø> (-0.10%) ⬇️
plugins-moleculer 40.54% <ø> (-0.10%) ⬇️
plugins-mongodb 39.21% <ø> (-0.10%) ⬇️
plugins-mongodb-core 39.05% <ø> (-0.10%) ⬇️
plugins-mongoose 38.90% <ø> (-0.10%) ⬇️
plugins-multer 26.63% <ø> (ø)
plugins-mysql 39.21% <ø> (-0.10%) ⬇️
plugins-mysql2 39.31% <ø> (-0.10%) ⬇️
plugins-node-serialize 26.93% <ø> (ø)
plugins-opensearch 37.65% <ø> (-0.10%) ⬇️
plugins-passport-http 26.68% <ø> (ø)
plugins-postgres 35.75% <ø> (-0.09%) ⬇️
plugins-process 26.79% <ø> (ø)
plugins-pug 26.89% <ø> (ø)
plugins-redis 38.94% <ø> (-0.10%) ⬇️
plugins-router 42.95% <ø> (-0.23%) ⬇️
plugins-sequelize 25.47% <ø> (ø)
plugins-test-and-upstream-amqp10 38.51% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-amqplib 43.83% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-apollo 39.04% <ø> (-0.09%) ⬇️
plugins-test-and-upstream-avsc 38.73% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-bunyan 33.94% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-connect 40.79% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-graphql 40.17% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-koa 40.38% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-protobufjs 38.95% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-rhea 44.00% <ø> (-0.13%) ⬇️
plugins-undici 39.15% <ø> (-0.09%) ⬇️
plugins-url 26.79% <ø> (ø)
plugins-valkey 38.14% <ø> (-0.10%) ⬇️
plugins-vm 26.79% <ø> (ø)
plugins-winston 34.13% <ø> (-0.10%) ⬇️
plugins-ws 41.90% <ø> (-0.10%) ⬇️
profiling-macos 39.84% <ø> (-0.10%) ⬇️
profiling-ubuntu 39.97% <ø> (-0.10%) ⬇️
profiling-windows 41.16% <ø> (-0.10%) ⬇️
serverless-azure-functions-client 25.54% <ø> (ø)
serverless-azure-functions-eventhubs 25.54% <ø> (ø)
serverless-azure-functions-servicebus 25.54% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Feb 25, 2026

Overall package size

Self size: 4.94 MB
Deduped: 5.78 MB
No deduping: 5.78 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.0.0 | 81.15 kB | 815.98 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@pr-commenter
Copy link
Copy Markdown

pr-commenter bot commented Feb 25, 2026

Benchmarks

Benchmark execution time: 2026-03-09 15:45:54

Comparing candidate commit 78f0c4f in PR branch dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4 with baseline commit f49fafe in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 231 metrics, 29 unstable metrics.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4 branch 3 times, most recently from 700f229 to 38e9fcf Compare March 4, 2026 00:55
@BridgeAR
Copy link
Copy Markdown
Member

BridgeAR commented Mar 5, 2026

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4 branch from 38e9fcf to 2be666b Compare March 5, 2026 10:48
@BridgeAR
Copy link
Copy Markdown
Member

BridgeAR commented Mar 5, 2026

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4 branch from 2be666b to 60f1cce Compare March 5, 2026 17:31
@BridgeAR
Copy link
Copy Markdown
Member

BridgeAR commented Mar 6, 2026

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4 branch from 60f1cce to d74f69d Compare March 6, 2026 17:35
@BridgeAR
Copy link
Copy Markdown
Member

BridgeAR commented Mar 9, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 9, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@BridgeAR
Copy link
Copy Markdown
Member

BridgeAR commented Mar 9, 2026

@dependabot recreate

…s 1 directory with 2 updates

Bumps the vendor-minor-and-patch-dependencies group with 2 updates in the /vendor directory: [jsonpath-plus](https://github.com/s3u/JSONPath) and [meriyah](https://github.com/meriyah/meriyah).


Updates `jsonpath-plus` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](JSONPath-Plus/JSONPath@v10.3.0...v10.4.0)

Updates `meriyah` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/meriyah/meriyah/releases)
- [Changelog](https://github.com/meriyah/meriyah/blob/main/CHANGELOG.md)
- [Commits](meriyah/meriyah@v7.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: jsonpath-plus
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vendor-minor-and-patch-dependencies
- dependency-name: meriyah
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vendor-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4 branch from 022a286 to b2c4431 Compare March 9, 2026 15:27
@datadog-datadog-prod-us1-2

This comment has been minimized.

@watson watson merged commit c8db939 into master Mar 10, 2026
790 checks passed
@watson watson deleted the dependabot/npm_and_yarn/vendor/vendor-minor-and-patch-dependencies-d6ad24ebb4 branch March 10, 2026 08:34
dd-octo-sts bot added a commit that referenced this pull request Mar 10, 2026
…s 1 directory with 2 updates (#7609)

* chore(deps): bump the vendor-minor-and-patch-dependencies group across 1 directory with 2 updates

Bumps the vendor-minor-and-patch-dependencies group with 2 updates in the /vendor directory: [jsonpath-plus](https://github.com/s3u/JSONPath) and [meriyah](https://github.com/meriyah/meriyah).


Updates `jsonpath-plus` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](JSONPath-Plus/JSONPath@v10.3.0...v10.4.0)

Updates `meriyah` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/meriyah/meriyah/releases)
- [Changelog](https://github.com/meriyah/meriyah/blob/main/CHANGELOG.md)
- [Commits](meriyah/meriyah@v7.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: jsonpath-plus
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vendor-minor-and-patch-dependencies
- dependency-name: meriyah
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vendor-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* update vendored dependencies with new versions

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dd-octo-sts[bot] <200755185+dd-octo-sts[bot]@users.noreply.github.com>
@dd-octo-sts dd-octo-sts bot mentioned this pull request Mar 10, 2026
juan-fernandez pushed a commit that referenced this pull request Mar 10, 2026
…s 1 directory with 2 updates (#7609)

* chore(deps): bump the vendor-minor-and-patch-dependencies group across 1 directory with 2 updates

Bumps the vendor-minor-and-patch-dependencies group with 2 updates in the /vendor directory: [jsonpath-plus](https://github.com/s3u/JSONPath) and [meriyah](https://github.com/meriyah/meriyah).


Updates `jsonpath-plus` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](JSONPath-Plus/JSONPath@v10.3.0...v10.4.0)

Updates `meriyah` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/meriyah/meriyah/releases)
- [Changelog](https://github.com/meriyah/meriyah/blob/main/CHANGELOG.md)
- [Commits](meriyah/meriyah@v7.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: jsonpath-plus
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vendor-minor-and-patch-dependencies
- dependency-name: meriyah
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vendor-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* update vendored dependencies with new versions

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dd-octo-sts[bot] <200755185+dd-octo-sts[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies javascript Pull requests that update javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants