Skip to content

chore(deps-dev): bump pbkdf2 from 3.1.1 to 3.1.7 in /frontend - #2849

Merged
osmontero merged 1 commit into
v11from
dependabot/npm_and_yarn/frontend/pbkdf2-3.1.7
Oct 8, 2026
Merged

osmontero merged 1 commit into
v11from
dependabot/npm_and_yarn/frontend/pbkdf2-3.1.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pbkdf2 from 3.1.1 to 3.1.7.

Changelog

Sourced from pbkdf2's changelog.

v3.1.7 - 2026-09-29

Commits

  • [Fix] hash long passwords once, not on every iteration 493d8d8
  • [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @types/node, auto-changelog, tape bbc305e
  • [Tests] skip rmd160 in the long-password test on node 17 3905818

v3.1.6 - 2026-05-26

Commits

  • [New] add TypeScript type declarations fb1f747
  • [Fix] coerce -0 keylen to +0 7c4a495
  • [Dev Deps] update @ljharb/eslint-config, @types/node, eslint, npmignore e3cce16
  • [eslint] fix an error f6b0e42
  • [Tests] fix npm run postlint b729629
  • [Dev Deps] update @ljharb/eslint-config, @types/node, auto-changelog 5e0cf51
  • [Deps] update to-buffer 1c3b1f5
  • [readme] replace runkit CI badge with shields.io check-runs badge 528bd38

v3.1.5 - 2025-09-23

Commits

  • [Fix] only allow finite iterations 67bd94d
  • [Fix] restore node 0.10 support 8f59d96
  • [Fix] check parameters before the "no Promise" bailout d2dc5f0

v3.1.4 - 2025-09-22

Commits

  • [Deps] update create-hash, ripemd160, sha.js, to-buffer 8dbf49b
  • [meta] update repo URLs d15bc35
  • [Dev Deps] update @ljharb/eslint-config aaf870b

v3.1.3 - 2025-06-20

Commits

  • Only apps should have lockfiles 8b06730
  • [lint] fix whitespace 9a76e2f
  • [lint] fix parens/curlies/semis/etc 6fd84bf
  • [meta] add auto-changelog 796c38d
  • [Tests] fix tests in node 17 3661fb0
  • Revert "[Tests] fix tests in node < 3" 7431b57
  • [Tests] fix tests in node < 3 eb9f97a
  • [Fix] ensure unknown algorithms throw + known ones match node 26d4fd3
  • [Tests] add GHA, always run nyc 513906a

... (truncated)

Commits
  • e09b47a v3.1.7
  • 3905818 [Tests] skip rmd160 in the long-password test on node 17
  • bbc305e [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `@types/n...
  • 493d8d8 [Fix] hash long passwords once, not on every iteration
  • ea4768b v3.1.6
  • b729629 [Tests] fix npm run postlint
  • 7c4a495 [Fix] coerce -0 keylen to +0
  • 5e0cf51 [Dev Deps] update @ljharb/eslint-config, @types/node, auto-changelog
  • 1c3b1f5 [Deps] update to-buffer
  • e3cce16 [Dev Deps] update @ljharb/eslint-config, @types/node, eslint, npmignore
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for pbkdf2 since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026
@dependabot
dependabot Bot requested a review from a team October 7, 2026 14:49
Bumps [pbkdf2](https://github.com/browserify/pbkdf2) from 3.1.1 to 3.1.7.
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md)
- [Commits](browserify/pbkdf2@v3.1.1...v3.1.7)

---
updated-dependencies:
- dependency-name: pbkdf2
  dependency-version: 3.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/pbkdf2-3.1.7 branch from ab954b4 to 63cf15b Compare October 8, 2026 16:34
@osmontero
osmontero merged commit b855122 into v11 Oct 8, 2026
3 of 7 checks passed
@osmontero
osmontero deleted the dependabot/npm_and_yarn/frontend/pbkdf2-3.1.7 branch October 8, 2026 16:37
osmontero added a commit that referenced this pull request Oct 8, 2026
…build

The six frontend dependabot bumps (#2848, #2849, #2850, #2851, #2852, #2853)
re-resolved package-lock.json from lockfileVersion 1 to 3, dragging in
incompatible transitive deps (@types/node 8→18, echarts 4.9→3.8.5, moment
2.29→2.31) that the Angular 7 / TS 3.2 / Node 14 stack cannot compile.

Reverts frontend/package.json + package-lock.json to the last known-good
state (800dede). The backend/Go dependabot bumps (snakeyaml 2.0, gRPC
1.83.2, OTel 1.45.0) are fine — they don't affect the frontend build.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant