Skip to content

Bump the npm-dependencies group across 1 directory with 2 updates - #4018

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-30056a6b53
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-30056a6b53

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 2 updates in the /dash/dash-renderer directory: cookie and @types/node.

Updates cookie from 1.1.1 to 2.0.1

Release notes

Sourced from cookie's releases.

v2.0.1

Improved:

  • Small performance improvement by incrementing = index while parsing set-cookie (jshttp/cookie#280)

v2.0.0

Important: This release moves the package to ESM only. In node 22+ you can require(esm), and older node versions are not supported.

Changed

  • Switch to ESM (jshttp/cookie#273)
  • Remove deprecated code paths (jshttp/cookie#272)
    • The old parse and stringify methods have been renamed: parseCookie and stringifySetCookie
    • stringifySetCookie only supports object mode (e.g. { name: "", value: "" })

Improvements

Fixed

  • Omit leading semicolon when stringifying cookies with skipped values (#267)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cookie since your current version.


Updates @types/node from 22.20.3 to 26.6.3

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@github-actions

github-actions Bot commented Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Dash performance benchmarks

✅ all within thresholds

scenario metric p90 (ms) median growth baseline p90 note
✅ callback_chain chain_ms 346.9 332.4 1.0x 499.1
✅ callback_chain graph_ms 1.0 1.0 1.0x 2.4
✅ callback_fanout fanout_ms 63.9 55.2 0.83x 92.5
✅ deep_nesting render_ms 40.6 38.9 1.23x 56.8
✅ full_children_replace replace_ms 3322.8 1235.8 17.49x 4697.1
✅ initial_render_large render_ms 414.8 382.4 1.02x 694.4
✅ initial_render_small render_ms 66.6 63.5 1.04x 104.0
✅ patch_append_nested append_ms 89.3 82.2 1.97x 192.3
✅ patch_append_toplevel append_ms 93.3 61.3 2.6x 140.2
✅ patch_scalar_update_large update_ms 141.1 128.1 1.11x 202.9
✅ wildcard_all_resolve wildcard_ms 190.8 173.6 0.94x 313.6
✅ wildcard_all_resolve graph_ms 0.7 0.7 1.0x 1.3

growth = late-third / early-third per-op time; ~1 is flat, a large value means the per-op cost scales with accumulated state.

machine scale vs baseline: 0.66x - divided out of the baseline ratios so they compare like for like (the absolute warn/fail ceilings are left un-scaled); calibrated on initial_render_small.

@T4rk1n

T4rk1n commented Sep 28, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps the npm-dependencies group with 2 updates in the /dash/dash-renderer directory: [cookie](https://github.com/jshttp/cookie) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `cookie` from 1.1.1 to 2.0.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v1.1.1...v2.0.1)

Updates `@types/node` from 22.20.3 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: cookie
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the npm-dependencies group in /dash/dash-renderer with 2 updates Bump the npm-dependencies group across 1 directory with 2 updates Sep 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-30056a6b53 branch from 26bc034 to e000a9f Compare September 28, 2026 18:15
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant