Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 3, 2025

Bumps the packages group with 4 updates: baseline-browser-mapping, browserslist, caniuse-lite and update-browserslist-db.

Updates baseline-browser-mapping from 2.8.32 to 2.9.0

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.0 - Reduce frequency of data staleness warnings

This version introduces a number of changes to data staleness warnings in response to #105 , #107 and #109

  • Data staleness warnings are now only shown if the getCompatibleVersions() or getAllVersions() functions are called - previously they were shown whenever the module was loaded, which meant many browserslist consumers were seeing the warning despite not targeting Baseline, especially those who were consuming browserslist in a pre-compiled format via next.js.
  • Adds new conditions for these warnings to be displayed which should only warn users for whom data freshness is critical:
    • The feature cut off data must be within the last two months, i.e. widelyAvailableOnDate: today + >2 years and 4 months or newly available in a browserslist query.
    • The module data must be more than 2 months old.
  • Introduces suppression options for these warning via the options objects and environment variables:
    • Adds a new suppressWarnings boolean to the getCompatibleVersions() and getAllVersions()
    • Respects the existing BROWSERSLIST_IGNORE_OLD_DATA environment variable.
    • Respects a new BASELINE_BROWSER_MAPPING_IGNORE_OLD_DATA environment variable.
  • Adds explanatory text to the README for how to avoid such warnings when reproducible builds are a requirement.
  • Change warning text to be package manager agnostic and mention the possibility of pre-compiled data.
Commits

Updates browserslist from 4.28.0 to 4.28.1

Release notes

Sourced from browserslist's releases.

4.28.1

  • Removed Baseline warning since we have it own warning.
Changelog

Sourced from browserslist's changelog.

4.28.1

  • Removed Baseline warning since we have it own warning.

4.48.0

4.27.0

  • Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

4.26.2

  • Fixed baseline-browser-mapping version requirement.

4.26.1

  • Updated Firefox ESR.

4.26.0

4.25.4

4.25.3

4.25.2

  • Fixed Node.js --permission support (by @​broofa).

4.25.1

  • Updated Firefox ESR.

4.25.0

  • Added cover 95% in browserslist-config-mycompany stats query support.

4.24.5

  • Fixed support ESM shared config.
  • Fixed docs (by Alexander Pushkov & マルコメ).

4.24.4

4.24.3

4.24.2

  • Clarify outdated caniuse-lite warning text.

... (truncated)

Commits

Updates caniuse-lite from 1.0.30001757 to 1.0.30001759

Commits

Updates update-browserslist-db from 1.1.4 to 1.2.1

Release notes

Sourced from update-browserslist-db's releases.

1.2.1

  • Fix ERR_PNPM_NO_PACKAGE_IN_DEPENDENCIES error on pnpm with old Browserslist.

1.2.0

  • Add Baseline data updating too.
Changelog

Sourced from update-browserslist-db's changelog.

1.2.1

  • Fix ERR_PNPM_NO_PACKAGE_IN_DEPENDENCIES error on pnpm with old Browserslist.

1.2.0

  • Add Baseline data updating too.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the packages group with 4 updates: [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping), [browserslist](https://github.com/browserslist/browserslist), [caniuse-lite](https://github.com/browserslist/caniuse-lite) and [update-browserslist-db](https://github.com/browserslist/update-db).


Updates `baseline-browser-mapping` from 2.8.32 to 2.9.0
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.8.32...v2.9.0)

Updates `browserslist` from 4.28.0 to 4.28.1
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.0...4.28.1)

Updates `caniuse-lite` from 1.0.30001757 to 1.0.30001759
- [Commits](browserslist/caniuse-lite@1.0.30001757...1.0.30001759)

Updates `update-browserslist-db` from 1.1.4 to 1.2.1
- [Release notes](https://github.com/browserslist/update-db/releases)
- [Changelog](https://github.com/browserslist/update-db/blob/main/CHANGELOG.md)
- [Commits](browserslist/update-db@1.1.4...1.2.1)

---
updated-dependencies:
- dependency-name: baseline-browser-mapping
  dependency-version: 2.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: packages
- dependency-name: browserslist
  dependency-version: 4.28.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: packages
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001759
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: packages
- dependency-name: update-browserslist-db
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot assigned poad Dec 3, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 3, 2025
@vercel
Copy link

vercel bot commented Dec 3, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
github-rest-api-executor Error Error Dec 3, 2025 10:34pm

@github-actions github-actions bot merged commit f7f353b into main Dec 3, 2025
4 of 5 checks passed
@github-actions github-actions bot deleted the dependabot/npm_and_yarn/packages-1dcd201bb2 branch December 3, 2025 22:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants