Skip to content

Bump the npm-dependencies group across 1 directory with 2 updates - #3995

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-783b3db718
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-783b3db718

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 2 updates in the /dash/dash-renderer directory: cookie and @types/node.

Updates cookie from 1.1.1 to 2.0.1

Release notes

Sourced from cookie's releases.

v2.0.1

Improved:

  • Small performance improvement by incrementing = index while parsing set-cookie (jshttp/cookie#280)

v2.0.0

Important: This release moves the package to ESM only. In node 22+ you can require(esm), and older node versions are not supported.

Changed

  • Switch to ESM (jshttp/cookie#273)
  • Remove deprecated code paths (jshttp/cookie#272)
    • The old parse and stringify methods have been renamed: parseCookie and stringifySetCookie
    • stringifySetCookie only supports object mode (e.g. { name: "", value: "" })

Improvements

Fixed

  • Omit leading semicolon when stringifying cookies with skipped values (#267)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cookie since your current version.


Updates @types/node from 22.20.3 to 26.6.2

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@github-actions

github-actions Bot commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

Dash performance benchmarks

⚠️ regressions to review

scenario metric p90 (ms) median growth baseline p90 note
⚠️ full_children_replace replace_ms 7089.9 2252.5 22.87x 4697.1 p90 7089.9ms > warn 6000ms; 1.4x baseline (norm)
callback_chain chain_ms 672.2 667.4 0.99x 499.1
callback_chain graph_ms 5.7 5.7 1.0x 2.4
callback_fanout fanout_ms 95.7 91.3 0.9x 92.5
deep_nesting render_ms 66.5 60.3 1.17x 56.8
initial_render_large render_ms 650.7 613.6 0.97x 694.4
initial_render_small render_ms 110.4 101.9 1.02x 104.0
patch_append_nested append_ms 141.9 105.6 2.16x 192.3
patch_append_toplevel append_ms 138.7 104.0 2.45x 140.2
patch_scalar_update_large update_ms 206.9 191.1 1.05x 202.9
wildcard_all_resolve wildcard_ms 336.0 321.6 0.95x 313.6
wildcard_all_resolve graph_ms 0.9 0.9 1.0x 1.3

growth = late-third / early-third per-op time; ~1 is flat, a large value means the per-op cost scales with accumulated state.

machine scale vs baseline: 1.06x - divided out of the baseline ratios so they compare like for like (the absolute warn/fail ceilings are left un-scaled); calibrated on initial_render_small.

@dependabot dependabot Bot changed the title Bump the npm-dependencies group in /dash/dash-renderer with 2 updates Bump the npm-dependencies group across 1 directory with 2 updates Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-783b3db718 branch 2 times, most recently from 026f14a to f16d53c Compare September 21, 2026 22:30
Bumps the npm-dependencies group with 2 updates in the /dash/dash-renderer directory: [cookie](https://github.com/jshttp/cookie) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `cookie` from 1.1.1 to 2.0.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v1.1.1...v2.0.1)

Updates `@types/node` from 22.20.3 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: cookie
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-783b3db718 branch from f16d53c to 5cc3845 Compare September 22, 2026 19:52
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants