Skip to content

chore(deps): bump the dependencies group with 2 updates - #691

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-655e5025bf
Aug 3, 2026
Merged

chore(deps): bump the dependencies group with 2 updates#691
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-655e5025bf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates: meriyah and openai.

Updates meriyah from 7.1.2 to 7.3.0

Release notes

Sourced from meriyah's releases.

v7.3.0

Bug Fixes

  • parser: fix class keyword check after decorator for class expression (#617) (faa2324), closes #612
  • parser: restrict decorator expressions to the decorators grammar (#612) (2047ba4)
  • parser: scope pending octal errors to the code unit that produced them (#615) (865731a)

Features

  • parser: support import defer and import source phases (#588) (c7458a3)

Performance Improvements

  • lexer: replace keyword table with Map and add length pre-filter (#604) (4b53020)

New Contributors

Full Changelog: meriyah/meriyah@v7.2.0...v7.3.0

v7.2.0

Bug Fixes

  • export map missing import (#585) (bcd697e)
  • lexer: normalize template carriage returns per TV/TRV (#580) (d1dcd16)
  • parser: reject assignments to optional chain members (#587) (d1fd37d)

Features

  • parser: support explicit resource management declarations (#579) (d40161d)

Performance Improvements

  • skip template CR normalization when scan saw no carriage returns (#583) (65c3bf9)

New Contributors

Full Changelog: meriyah/meriyah@v7.1.2...v7.2.0

Changelog

Sourced from meriyah's changelog.

7.3.0 (2026-07-29)

Bug Fixes

  • parser: fix class keyword check after decorator for class expression (#617) (faa2324), closes #612
  • parser: restrict decorator expressions to the decorators grammar (#612) (2047ba4)
  • parser: scope pending octal errors to the code unit that produced them (#615) (865731a)

Features

  • parser: support import defer and import source phases (#588) (c7458a3)

Performance Improvements

  • lexer: replace keyword table with Map and add length pre-filter (#604) (4b53020)

7.2.0 (2026-07-24)

Bug Fixes

  • export map missing import (#585) (bcd697e)
  • lexer: normalize template carriage returns per TV/TRV (#580) (d1dcd16)
  • parser: reject assignments to optional chain members (#587) (d1fd37d)

Features

  • parser: support explicit resource management declarations (#579) (d40161d)

Performance Improvements

  • skip template CR normalization when scan saw no carriage returns (#583) (65c3bf9)
Commits
  • 54088b2 7.3.0
  • a2a503b chore: improve error message on "@" when next flag is off (#616)
  • faa2324 fix(parser): fix class keyword check after decorator for class expression (#617)
  • 2047ba4 fix(parser): restrict decorator expressions to the decorators grammar (#612)
  • 865731a fix(parser): scope pending octal errors to the code unit that produced them (...
  • f5d41b7 test: move tests out of next/ directory (#614)
  • f3767b9 chore: add script to lint snapshots (#613)
  • c4ddec5 chore(deps): update dependency eslint-plugin-unicorn to v72 (#611)
  • 70a98da chore(deps): update github actions (#610)
  • 4b53020 perf(lexer): replace keyword table with Map and add length pre-filter (#604)
  • Additional commits viewable in compare view

Updates openai from 6.49.0 to 7.1.0

Release notes

Sourced from openai's releases.

v7.1.0

7.1.0 (2026-07-28)

Full Changelog: v7.0.0...v7.1.0

Features

  • api: transcription model updates (b35ca14)

Chores

  • internal: codegen related update (ee871e5)

v7.0.0

7.0.0 (2026-07-27)

Full Changelog: v6.49.0...v7.0.0

⚠ BREAKING CHANGES

  • require Node.js 22 and codify version support (#2026)

Features

  • require Node.js 22 and codify version support (#2026) (9185cdd)

Build System

  • deps: bump fast-uri in /ecosystem-tests/ts-browser-webpack (#2027) (c6a46b8)
  • deps: bump fast-uri in /ecosystem-tests/vercel-edge (#2024) (8e775cf)
  • deps: bump next from 15.5.20 to 15.5.21 (#2025) (09f0b5e)
Changelog

Sourced from openai's changelog.

7.1.0 (2026-07-28)

Full Changelog: v7.0.0...v7.1.0

Features

  • api: transcription model updates (b35ca14)

Chores

  • internal: codegen related update (ee871e5)

7.0.0 (2026-07-27)

Full Changelog: v6.49.0...v7.0.0

⚠ BREAKING CHANGES

  • require Node.js 22 and codify version support (#2026)

Features

  • require Node.js 22 and codify version support (#2026) (9185cdd)

Build System

  • deps: bump fast-uri in /ecosystem-tests/ts-browser-webpack (#2027) (c6a46b8)
  • deps: bump fast-uri in /ecosystem-tests/vercel-edge (#2024) (8e775cf)
  • deps: bump next from 15.5.20 to 15.5.21 (#2025) (09f0b5e)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [meriyah](https://github.com/meriyah/meriyah) and [openai](https://github.com/openai/openai-node).


Updates `meriyah` from 7.1.2 to 7.3.0
- [Release notes](https://github.com/meriyah/meriyah/releases)
- [Changelog](https://github.com/meriyah/meriyah/blob/main/CHANGELOG.md)
- [Commits](meriyah/meriyah@v7.1.2...v7.3.0)

Updates `openai` from 6.49.0 to 7.1.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.49.0...v7.1.0)

---
updated-dependencies:
- dependency-name: meriyah
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: openai
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 3, 2026 09:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 3, 2026
@changeset-bot

changeset-bot Bot commented Aug 3, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 072b4bc

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​openai@​7.3.075100100100100
Addednpm/​meriyah@​7.3.010010010095100

View full report

@github-actions
github-actions Bot merged commit 96abffe into master Aug 3, 2026
9 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/dependencies-655e5025bf branch August 3, 2026 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants