Skip to content

chore(deps): bump ip-address from 10.4.0 to 10.7.4 - #156

Merged
jeffdupont merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ip-address-10.7.4
Oct 23, 2026
Merged

jeffdupont merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ip-address-10.7.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ip-address from 10.4.0 to 10.7.4.

Release notes

Sourced from ip-address's releases.

v10.7.4

Full Changelog: beaugunderson/ip-address@v10.7.3...v10.7.4

v10.7.3

What's Changed

Full Changelog: beaugunderson/ip-address@v10.7.2...v10.7.3

v10.7.2

What's Changed

Full Changelog: beaugunderson/ip-address@v10.7.1...v10.7.2

v10.7.1

What's Changed

Full Changelog: beaugunderson/ip-address@v10.7.0...v10.7.1

v10.7.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.6.0...v10.7.0

v10.6.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.5.1...v10.6.0

v10.5.1

Full Changelog: beaugunderson/ip-address@v10.5.0...v10.5.1

v10.5.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.4.0...v10.5.0

Commits
  • 651c1dd 10.7.4
  • ec80fcd Find an IPv6 zone by index so a rejected zone costs one pass
  • e22eb4a Check generated docs without writing or hiding partial staging
  • c7f838e 10.7.3
  • 09b8072 Reject an in-addr.arpa name longer than 32 characters before splitting it (#228)
  • 974b48d 10.7.2
  • 4dfe8e5 Accept an arpa suffix in any case and without the root dot in fromArpa (#227)
  • f0c25df 10.7.1
  • 8b34a21 Merge commit from fork
  • 13b6155 Merge commit from fork
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Overview
Updates the resolved ip-address package in yarn.lock from 10.4.0 to 10.7.4. There are no application or manifest changes—only the lockfile entry (version, tarball URL, and integrity hash).

The dependency is transitive, required by express-rate-limit (^10.2.0). The newer release line adds stricter in-addr.arpa handling, more flexible fromArpa parsing, and other IPv4/IPv6 utilities; behavior for typical rate-limit IP checks should stay compatible within the same major version.

Reviewed by Cursor Bugbot for commit 1fdf8bd. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.4.0 to 10.7.4.
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](beaugunderson/ip-address@v10.4.0...v10.7.4)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.7.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026

@jeffdupont jeffdupont left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: lockfile-only. Its red check was the stale API report on main, now fixed by #160.

@jeffdupont
jeffdupont enabled auto-merge (squash) October 23, 2026 19:00
@jeffdupont
jeffdupont merged commit 5ad8d15 into main Oct 23, 2026
15 of 16 checks passed
@jeffdupont
jeffdupont deleted the dependabot/npm_and_yarn/ip-address-10.7.4 branch October 23, 2026 19:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant