Skip to content

build(deps): bump brace-expansion, ejs and eslint-plugin-n - #204

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c8c5bffc7a
Open

build(deps): bump brace-expansion, ejs and eslint-plugin-n#204
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c8c5bffc7a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion to 5.0.9 and updates ancestor dependencies brace-expansion, ejs and eslint-plugin-n. These dependencies need to be updated together.

Updates brace-expansion from 5.0.7 to 5.0.9

Commits

Updates ejs from 3.1.10 to 6.0.1

Release notes

Sourced from ejs's releases.

v6.0.1

Version 6.0.1

v5.0.2

Version 5.0.2

v5.0.1

Version 5.0.1

v4.0.1

Version 4.0.1

Changelog

Sourced from ejs's changelog.

EJS Version 5.0.1 Release Notes

Overview

EJS version 5.0.1 is a major release that removes deprecated options, fixes template behavior with custom delimiters, improves the CLI and build pipeline, and simplifies the package by moving Jake to a dev-only dependency.

Major Changes

Deprecated Option Removed

  • Removed client option (Fixes #746): The legacy client flag and related code have been removed. This option produced browser-oriented template functions by inlining escape and rethrow helpers; it was unmaintained and broken. Use the standard browser bundle (ejs.min.js) or compile templates for the client using your own build setup.

Bug Fixes

  • Custom delimiters and whitespace-slurp tags (Fixed #780): Whitespace-slurp tags (<%_ and _%> by default) now respect custom openDelimiter, delimiter, and closeDelimiter. Previously, the slurp regex was hardcoded to <%/%>, so custom delimiters did not work correctly with <%_/_%>-style tags.

CLI & Build

  • CLI no longer depends on Jake: The ejs CLI now uses a bundled argument parser (lib/esm/parseargs.js / lib/cjs/parseargs.js) instead of the Jake program module. Jake remains a devDependency for the build (lint, compile, browserify, minify, test).
  • Jake moved to devDependencies: Jake was moved from dependencies to devDependencies, so installing ejs as a dependency no longer pulls in Jake.
  • Minification fix: The minify task now minifies the browserified ejs.js bundle (output of the browserify task) instead of lib/cjs/ejs.js, so the browser bundle is correctly minified.

Documentation & Examples

  • JSDoc updates: Removed references to the client option and ClientFunction from options and template-function documentation.
  • Examples: examples/client-compilation.html and examples/express/app.js updated to remove use of the client option; Express example no longer passes client: true.
  • README: Removed broken link to the third-party EJS playground.

Code Quality

  • Tests: Removed tests that targeted the removed client option behavior.
  • Utils: Removed unused client-related code from lib/esm/utils.js.

Breaking Changes

Removed client Option

  • Option removed: The client option is no longer supported. Passing client: true (or any value) is ignored; no error is thrown, but no

... (truncated)

Commits

Updates eslint-plugin-n from 17.15.1 to 17.24.0

Release notes

Sourced from eslint-plugin-n's releases.

v17.24.0

17.24.0 (2026-02-15)

🌟 Features

🧹 Chores

  • add v17.x to release-please (9c5e437)

v17.23.2

17.23.2 (2026-01-13)

🩹 Fixes

  • avoid any type for no-top-level-await listener node (build issue) (#498) (f071703)
  • file-extension-in-import: handle directory index imports (#499) (754a1a6)
  • file-extension-in-import: handle files with dots in basename (#506) (600f3f2)
  • no-sync: resolve full typed names for ignores (#501) (047301a)

📚 Documentation

  • safely disable no-unpublished-bin npm v10+ (#487) (8af9c86)

🧹 Chores

  • no-missing-import: align fixture message with latest resolver output (#500) (a3719d2)

v17.23.1

17.23.1 (2025-09-18)

🩹 Fixes

  • node-builtins-modules/tls.js: Update minimal version (#484) (fe94432)

📚 Documentation

  • improve clarity of no-missing-import and no-missing-require (#455) (92ea876)

v17.23.0

17.23.0 (2025-09-15)

... (truncated)

Changelog

Sourced from eslint-plugin-n's changelog.

17.24.0 (2026-02-15)

🌟 Features

🧹 Chores

  • add v17.x to release-please (9c5e437)

17.23.2 (2026-01-13)

🩹 Fixes

  • avoid any type for no-top-level-await listener node (build issue) (#498) (f071703)
  • file-extension-in-import: handle directory index imports (#499) (754a1a6)
  • file-extension-in-import: handle files with dots in basename (#506) (600f3f2)
  • no-sync: resolve full typed names for ignores (#501) (047301a)

📚 Documentation

  • safely disable no-unpublished-bin npm v10+ (#487) (8af9c86)

🧹 Chores

  • no-missing-import: align fixture message with latest resolver output (#500) (a3719d2)

17.23.1 (2025-09-18)

🩹 Fixes

  • node-builtins-modules/tls.js: Update minimal version (#484) (fe94432)

📚 Documentation

  • improve clarity of no-missing-import and no-missing-require (#455) (92ea876)

17.23.0 (2025-09-15)

🌟 Features

... (truncated)

Commits
  • a302c0b chore(master): release 17.24.0 (#512)
  • 10b24ae feat: add prefer-global/timers rule (#515)
  • 2ea0f22 feat: add prefer-global/crypto rule (#514)
  • 9c5e437 chore: add v17.x to release-please
  • 7541d64 chore(master): release 17.23.2 (#488)
  • 600f3f2 fix(file-extension-in-import): handle files with dots in basename (#506)
  • 754a1a6 fix(file-extension-in-import): handle directory index imports (#499)
  • 047301a fix(no-sync): resolve full typed names for ignores (#501)
  • f071703 fix: avoid any type for no-top-level-await listener node (build issue) (#498)
  • a3719d2 test(no-missing-import): align fixture message with latest resolver output (#...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-n since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.9 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [ejs](https://github.com/mde/ejs) and [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n). These dependencies need to be updated together.


Updates `brace-expansion` from 5.0.7 to 5.0.9
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v5.0.7...v5.0.9)

Updates `ejs` from 3.1.10 to 6.0.1
- [Release notes](https://github.com/mde/ejs/releases)
- [Changelog](https://github.com/mde/ejs/blob/main/RELEASE_NOTES_v5.md)
- [Commits](mde/ejs@v3.1.10...v6.0.1)

Updates `eslint-plugin-n` from 17.15.1 to 17.24.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v17.15.1...v17.24.0)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.9
  dependency-type: indirect
- dependency-name: ejs
  dependency-version: 6.0.1
  dependency-type: direct:production
- dependency-name: eslint-plugin-n
  dependency-version: 17.24.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants