chore: bump the npm-low-risk group across 1 directory with 8 updates by dependabot[bot] · Pull Request #302 · browserstack/a11y-engine-axe-core · GitHub
Skip to content

chore: bump the npm-low-risk group across 1 directory with 8 updates - #302

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-low-risk-90b48f1a07
Open

chore: bump the npm-low-risk group across 1 directory with 8 updates#302
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-low-risk-90b48f1a07

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-low-risk group with 8 updates in the / directory:

Package From To
@axe-core/webdriverjs 4.10.2 4.13.0
core-js 3.45.1 3.50.0
grunt 1.6.1 1.6.3
jsdoc 4.0.4 4.0.5
karma-spec-reporter 0.0.36 0.0.37
prettier 3.6.2 3.9.9
selenium-webdriver 4.35.0 4.49.0
serve-handler 6.1.6 6.1.7

Updates @axe-core/webdriverjs from 4.10.2 to 4.13.0

Release notes

Sourced from @​axe-core/webdriverjs's releases.

Release 4.13.0

What's Changed

Full Changelog: dequelabs/axe-core-npm@v4.11.3...v4.13.0

v4.11.3

... (truncated)

Changelog

Sourced from @​axe-core/webdriverjs's changelog.

4.13.0 (2026-08-10)

Features

4.12.1 (2026-06-22)

Features

4.11.3 (2026-04-29)

Bug Fixes

4.11.2 (2026-04-14)

Bug Fixes

4.11.1 (2026-01-09)

Bug Fixes

4.11.0 (2025-10-14)

Bug Fixes

Features

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​axe-core/webdriverjs since your current version.


Updates core-js from 3.45.1 to 3.50.0

Release notes

Sourced from core-js's releases.

3.50.0 - 2026.08.05

  • Changes v3.49.0...v3.50.0 (138 commits)
  • Joint iteration proposal:
    • Built-ins:
      • Iterator.zip
      • Iterator.zipKeyed
    • Moved to stable ES, May 2026 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespace entries
  • Iterator chunking proposal:
    • Built-ins:
      • Iterator.prototype.chunks
      • Iterator.prototype.windows
    • Throw a TypeError instead of RangeError on non-integer number chunkSize / windowSize, following [tc39/proposal-iterator-chunking/#30](tc39/proposal-iterator-chunking#30)
    • Moved to stage 3, May 2026 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Added Iterator includes stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.includes
  • Added Iterator join stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.join
  • Added Await dictionary of Promises stage 3 proposal:
    • Added built-ins:
      • Promise.allKeyed
      • Promise.allSettledKeyed
  • Throw a RangeError on finite unsafe integer limit in Iterator.prototype.{ drop, take }, following [tc39/ecma262/#3776](tc39/ecma262#3776)
  • Use PromiseResolve semantics in Promise.try, following [tc39/ecma262/#3883](tc39/ecma262#3883)
  • Added detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap bug case, #1538
  • Deno 2.9+ replaces Object.prototype.__proto__ instead of removing it, so the feature detection updated
  • Fixed JSON.stringify polyfill with an array replacer - keys order now follows the replacer, inherited and non-enumerable properties are no longer ignored, #1539
  • Make URL / URLSearchParams parsing a little more correct (char sets, percent coding, etc)
  • Ensure opaque paths always roundtrip in URL polyfill (still without adding to feature detection), whatwg/url#844
  • Fix URL#toJSON when URL#toString is reassigned after core-js is imported
  • Fixed possible crash on some keys in Symbol.for
  • Some get-iterator / get-iterator-method fixes
  • Fixed String.prototype.{ match, search } polyfills conversion order
  • Added missed MAX_SAFE_INTEGER excess check in Array.from and { Map, Object }.groupBy polyfills
  • Improved the way of inner iterators cleaning in iterator helpers
  • Improved accuracy of Math.{ asinh, cbrt, log1p } polyfills with big and small values
  • Improved performance of Uint8Array base64 methods
  • Improved performance of escape
  • Slight performance improvement for engines with native Array.prototype.fill on ArrayBuffer constructor and %TypedArray%.prototype.fill
  • Clarify supported Node versions in package.json of some missed packages (just to satisfy publint)
  • Compat data improvements:

... (truncated)

Changelog

Sourced from core-js's changelog.

3.50.0 - 2026.08.05

  • Changes v3.49.0...v3.50.0 (138 commits)
  • Joint iteration proposal:
    • Built-ins:
      • Iterator.zip
      • Iterator.zipKeyed
    • Moved to stable ES, May 2026 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespace entries
  • Iterator chunking proposal:
    • Built-ins:
      • Iterator.prototype.chunks
      • Iterator.prototype.windows
    • Throw a TypeError instead of RangeError on non-integer number chunkSize / windowSize, following [tc39/proposal-iterator-chunking/#30](tc39/proposal-iterator-chunking#30)
    • Moved to stage 3, May 2026 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Added Iterator includes stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.includes
  • Added Iterator join stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.join
  • Added Await dictionary of Promises stage 3 proposal:
    • Added built-ins:
      • Promise.allKeyed
      • Promise.allSettledKeyed
  • Throw a RangeError on finite unsafe integer limit in Iterator.prototype.{ drop, take }, following [tc39/ecma262/#3776](tc39/ecma262#3776)
  • Use PromiseResolve semantics in Promise.try, following [tc39/ecma262/#3883](tc39/ecma262#3883)
  • Added detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap bug case, #1538
  • Deno 2.9+ replaces Object.prototype.__proto__ instead of removing it, so the feature detection updated
  • Fixed JSON.stringify polyfill with an array replacer - keys order now follows the replacer, inherited and non-enumerable properties are no longer ignored, #1539
  • Make URL / URLSearchParams parsing a little more correct (char sets, percent coding, etc)
  • Ensure opaque paths always roundtrip in URL polyfill (still without adding to feature detection), whatwg/url#844
  • Fix URL#toJSON when URL#toString is reassigned after core-js is imported
  • Fixed possible crash on some keys in Symbol.for
  • Some get-iterator / get-iterator-method fixes
  • Fixed String.prototype.{ match, search } polyfills conversion order
  • Added missed MAX_SAFE_INTEGER excess check in Array.from and { Map, Object }.groupBy polyfills
  • Improved the way of inner iterators cleaning in iterator helpers
  • Improved accuracy of Math.{ asinh, cbrt, log1p } polyfills with big and small values
  • Improved performance of Uint8Array base64 methods
  • Improved performance of escape
  • Slight performance improvement for engines with native Array.prototype.fill on ArrayBuffer constructor and %TypedArray%.prototype.fill
  • Clarify supported Node versions in package.json of some missed packages (just to satisfy publint)
  • Compat data improvements:

... (truncated)

Commits
  • 486e8d6 v3.50.0
  • 6a78c6a Cache URL#toString (#1533)
  • 5d4f138 fix: correct Iterator zip entry exports
  • 7e8e1cc rename method for consistency
  • 2507115 fix JSON.stringify polyfill with an array replacerJSON.stringify polyfill...
  • 4036342 make URL / URLSearchParams parsing a little more correct (char sets, perc...
  • 37375ba fix order of detection
  • 276de47 add detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap b...
  • 6e4a942 use PromiseResolve semantics in Promise.try
  • ff52b9f backport await dictionary stage 3 proposal
  • Additional commits viewable in compare view

Updates grunt from 1.6.1 to 1.6.3

Changelog

Sourced from grunt's changelog.

v1.6.3

v1.6.2

Commits
Maintainer changes

This version was pushed to npm by krinkle, a new releaser for grunt since your current version.


Updates jsdoc from 4.0.4 to 4.0.5

Changelog

Sourced from jsdoc's changelog.

4.0.5 (October 2025)

Fixes a performance issue when generating documentation for medium-to-large APIs.

Commits

Updates karma-spec-reporter from 0.0.36 to 0.0.37

Commits

Updates prettier from 3.6.2 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier since your current version.


Updates selenium-webdriver from 4.35.0 to 4.49.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.49.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Commits
  • bedb24f [build] Prepare for release of selenium-4.49.0 (#18012)
  • 2cd4ec2 [py] adopt the worthwhile ruff 0.16 rule families (tranches 1 and 2) (#17992)
  • db9eac2 [java] remove let's guess URI encoding (#17995)
  • 5957080 [rust] Add support for Chrome arm64 on Linux (#17915)
  • 0536451 [build] Automated Browser Version Update (major) with CDP (#18005)
  • 27d2cb1 [build] clear the restored repository cache before populating so saves are no...
  • 589fab9 [rust] Add license and notice links to Selenium Manager help (#17986)
  • 92394dc [py] add BiDi upload tests that verify files actually reach the server (#18007)
  • b79578a [build] Upgrade rules_rs to 0.0.109 and @​llvm to 0.8.19 (#17929)
  • dfea91a [build] add Launchpad fallback for the rules_rs zlib .deb fetch (#18006)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for selenium-webdriver since your current version.


Updates serve-handler from 6.1.6 to 6.1.7

Release notes

Sourced from serve-handler's releases.

6.1.7

Patches

  • Fix: update minimatch to 3.1.5 to resolve security vulnerabilities: #228

Credits

Huge thanks to @​ParakhJaggi for helping!

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the npm-low-risk group across 1 directory with 8 updates
569cc97 
Bumps the npm-low-risk group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@axe-core/webdriverjs](https://github.com/dequelabs/axe-core-npm) | `4.10.2` | `4.13.0` |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.45.1` | `3.50.0` |
| [grunt](https://github.com/gruntjs/grunt) | `1.6.1` | `1.6.3` |
| [jsdoc](https://github.com/jsdoc/jsdoc) | `4.0.4` | `4.0.5` |
| [karma-spec-reporter](https://github.com/tmcgee123/karma-spec-reporter) | `0.0.36` | `0.0.37` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.9` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.35.0` | `4.49.0` |
| [serve-handler](https://github.com/vercel/serve-handler) | `6.1.6` | `6.1.7` |



Updates `@axe-core/webdriverjs` from 4.10.2 to 4.13.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.10.2...v4.13.0)

Updates `core-js` from 3.45.1 to 3.50.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.50.0/packages/core-js)

Updates `grunt` from 1.6.1 to 1.6.3
- [Release notes](https://github.com/gruntjs/grunt/releases)
- [Changelog](https://github.com/gruntjs/grunt/blob/main/CHANGELOG.md)
- [Commits](gruntjs/grunt@v1.6.1...v1.6.3)

Updates `jsdoc` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/jsdoc/jsdoc/releases)
- [Changelog](https://github.com/jsdoc/jsdoc/blob/4.0.5/CHANGES.md)
- [Commits](jsdoc/jsdoc@4.0.4...4.0.5)

Updates `karma-spec-reporter` from 0.0.36 to 0.0.37
- [Commits](tmcgee123/karma-spec-reporter@v0.0.36...v0.0.37)

Updates `prettier` from 3.6.2 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.9.9)

Updates `selenium-webdriver` from 4.35.0 to 4.49.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.35.0...selenium-4.49.0)

Updates `serve-handler` from 6.1.6 to 6.1.7
- [Release notes](https://github.com/vercel/serve-handler/releases)
- [Commits](vercel/serve-handler@6.1.6...6.1.7)

---
updated-dependencies:
- dependency-name: "@axe-core/webdriverjs"
  dependency-version: 4.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: core-js
  dependency-version: 3.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: grunt
  dependency-version: 1.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: jsdoc
  dependency-version: 4.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: karma-spec-reporter
  dependency-version: 0.0.37
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: selenium-webdriver
  dependency-version: 4.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: serve-handler
  dependency-version: 6.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2026
@coderabbitai

coderabbitai Bot commented Oct 1, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants