Pull requests

• Bump thin-vec from 0.2.14 to 0.2.16

  dependenciesrust
  #14·dependabot[bot] opened Apr 15, 2026Bot·

  ·

• Bump rand from 0.9.2 to 0.9.3

  dependenciesrust
  #13·dependabot[bot] opened Apr 14, 2026Bot·

  ·

• Bump pytest from 8.3.5 to 9.0.3 in /misc/codegen

  dependenciespython
  #12·dependabot[bot] opened Apr 14, 2026Bot·

  ·

• Bump next from 15.1.7 to 15.5.15 in /javascript/ql/test/query-tests/Security/CWE-918/Request

  dependenciesjavascriptJS
  #11·dependabot[bot] opened Apr 13, 2026Bot·

  ·

• Bump lodash from 4.17.12 to 4.18.1 in /javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-non-vulnerable-lodash

  dependenciesjavascriptJS
  #10·dependabot[bot] opened Apr 10, 2026Bot·

  ·

• Bump lodash from 4.17.4 to 4.18.1 in /javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash

  dependenciesjavascriptJS
  #9·dependabot[bot] opened Apr 9, 2026Bot·

  ·

• Bump time from 0.3.43 to 0.3.47

  dependenciesrust
  #7·dependabot[bot] opened Feb 5, 2026Bot·

  ·

• Bump tracing-subscriber from 0.3.19 to 0.3.20 in /ql

  dependenciesQL-for-QLrust
  #2·dependabot[bot] opened Oct 14, 2025Bot·

  ·