Skip to content

Bump baseline-browser-mapping from 2.10.29 to 2.11.21 in /samples/aspire-with-javascript/AspireJavaScript.Vite - #1939

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/aspire-with-javascript/AspireJavaScript.Vite/baseline-browser-mapping-2.11.21
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/aspire-with-javascript/AspireJavaScript.Vite/baseline-browser-mapping-2.11.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps baseline-browser-mapping from 2.10.29 to 2.11.21.

Release notes

Sourced from baseline-browser-mapping's releases.

v2.11.0

What's Changed in 2.11.0

  • feat: Adds a new getTimeline() method for getting the series of minimum browser changes, either grouped by date or by browser.
  • refactor: Substantial refactoring of the data compression process that replaces the full list of browsers from @mdn/browser-compat-data and downstream-browsers.json and features from web-features (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date. Thanks to @​swwind for the idea!
  • refactor: Some common functions have been moved to a util.ts module for use in other scripts.
  • fix: Removes process.exit() calls when unsupported option combinations are passed to getCompatibleVersions() and getAllVersions() in favour of throwing an Error. There is a small security risk with process.exit() calls that sites accepting unsanitised inputs could be the subject of attacks. Unsupported config options now throw and Error which should allow for more graceful handling. Thanks to @​bnbdr for flagging this as vulnerability CVE-2026-45819 .

Fixes #134

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.10.44...v2.11.0

Commits
  • 0e5ed80 Patch to 2.11.21 because browser or feature data changed
  • 11da0b6 Browser or feature data changed
  • 69fcc81 Updating static site
  • b964de0 Patch to 2.11.20 because browser or feature data changed
  • 723099f Browser or feature data changed
  • f44163d Updating static site
  • 8966043 Patch to 2.11.19 because browser or feature data changed
  • e18601d Browser or feature data changed
  • 28cb50a Updating static site
  • cb33a83 Patch to 2.11.18 because browser or feature data changed
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) from 2.10.29 to 2.11.21.
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.10.29...v2.11.21)

---
updated-dependencies:
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI lite review requested due to automatic review settings September 9, 2026 06:46
@microsoft-github-policy-service microsoft-github-policy-service Bot added dependencies Pull requests that update a dependency file auto-merge labels Sep 9, 2026

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved; this PR will merge after the required CI Gate passes.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The change is a straightforward lockfile-only dependency bump with no code modifications and no detected inconsistencies in the lockfile entry.

Pull request overview

Updates the JavaScript/Vite sample’s npm lockfile to pull in a newer baseline-browser-mapping version, keeping transitive dependency data current and incorporating upstream fixes.

Changes:

  • Bumps baseline-browser-mapping from 2.10.29 to 2.11.21 in the lockfile.
  • Updates the corresponding resolved tarball URL and integrity hash.
File summaries
File Description
samples/aspire-with-javascript/AspireJavaScript.Vite/package-lock.json Updates the locked baseline-browser-mapping package version and metadata to the newer release.
Review details

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)

  • samples/aspire-with-javascript/AspireJavaScript.Vite/package-lock.json: Generated file
  • Files reviewed: 0/1 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

@IEvangelist

Copy link
Copy Markdown
Member

Tracked/superseded by #1782 - the canonical [auto-sec] security consolidation PR that clears all 86 open Dependabot alerts in this repo (this package/manifest included). Keeping this open until #1782 is green; it will be closed then per the automation's closure gate.

@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like baseline-browser-mapping is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 10, 2026
auto-merge was automatically disabled September 10, 2026 14:37

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/samples/aspire-with-javascript/AspireJavaScript.Vite/baseline-browser-mapping-2.11.21 branch September 10, 2026 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-engineering-systems auto-merge dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants