Bump the npm group across 1 directory with 38 updates

[dependabot]

Bumps the npm group with 36 updates in the / directory:

Package	From	To
@octopusdeploy/api-client	3.11.0	3.11.6
azure-devops-node-api	11.2.0	17.0.0
azure-pipelines-task-lib	4.17.3	5.279.0
azure-pipelines-tool-lib	2.0.8	2.279.1
command-line-args	5.2.1	6.0.2
fp-ts	1.19.5	2.16.11
glob	7.2.0	13.0.6
ramda	0.28.0	0.32.0
@types/ramda	0.28.15	0.32.0
semver	7.7.3	7.8.5
shlex	2.1.2	3.0.0
typed-rest-client	1.8.9	3.1.0
uuid	8.3.2	14.0.2
@tsconfig/node10	1.0.9	1.0.13
@types/command-line-args	5.2.0	5.2.3
@types/glob	7.2.0	9.0.0
@types/node	20.19.9	26.4.0
@types/test-console	2.0.0	2.0.3
@types/uuid	8.3.4	11.0.0
@typescript-eslint/eslint-plugin	5.30.6	8.68.0
@typescript-eslint/parser	5.30.6	8.68.0
archiver	5.3.1	8.0.0
@types/archiver	5.3.1	8.0.0
esbuild	0.14.49	0.28.2
eslint-config-prettier	8.5.0	10.1.8
eslint-plugin-prettier	4.2.1	5.5.6
express	4.18.1	5.2.1
@types/express	4.17.13	5.0.6
jest	28.1.3	30.5.0
@types/jest	28.1.5	30.0.0
jest-junit	14.0.0	17.0.0
prettier	2.7.1	3.9.6
rimraf	3.0.2	6.1.3
ts-jest	28.0.5	29.4.12
ts-node	10.9.0	10.9.2
typescript	5.1.6	7.0.2

Updates @octopusdeploy/api-client from 3.11.0 to 3.11.6

Release notes

Sourced from @​octopusdeploy/api-client's releases.

v3.11.6

3.11.6 (2026-07-22)

Bug Fixes

• deps: bump axios to 1.18.1 (#286) (2602337)
• deps: bump brace-expansion to 1.1.16 to resolve security alert (#284) (9eee95a)

v3.11.5

3.11.5 (2026-07-20)

Bug Fixes

• Upgrade adm-zip to 0.6.0 (#281) (8fb6b45)

v3.11.4

3.11.4 (2026-07-20)

Bug Fixes

• Patch CVEs and add supply-chain defences (#260) (f42d768)

v3.11.3

3.11.3 (2026-05-13)

Bug Fixes

• Bump lodash (#257) (c1577cc)

v3.11.2

3.11.2 (2026-05-11)

Bug Fixes

• Update axios to 1.15.2 (#254) (6b4e509)

v3.11.1

3.11.1 (2026-05-06)

Bug Fixes

• support locally-built Octopus servers in version checks (#250) (f348e44)

Changelog

Sourced from @​octopusdeploy/api-client's changelog.

3.11.6 (2026-07-22)

Bug Fixes

• deps: bump axios to 1.18.1 (#286) (2602337)
• deps: bump brace-expansion to 1.1.16 to resolve security alert (#284) (9eee95a)

3.11.5 (2026-07-20)

Bug Fixes

• Upgrade adm-zip to 0.6.0 (#281) (8fb6b45)

3.11.4 (2026-07-20)

Bug Fixes

• Patch CVEs and add supply-chain defences (#260) (f42d768)

3.11.3 (2026-05-13)

Bug Fixes

• Bump lodash (#257) (c1577cc)

3.11.2 (2026-05-11)

Bug Fixes

• Update axios to 1.15.2 (#254) (6b4e509)

3.11.1 (2026-05-06)

Bug Fixes

• support locally-built Octopus servers in version checks (#250) (f348e44)

Commits

• 90aa0a0 chore(main): release 3.11.6 (#285)
• 2602337 fix(deps): bump axios to 1.18.1 (#286)
• 9eee95a fix(deps): bump brace-expansion to 1.1.16 to resolve security alert (#284)
• 3eb6c48 chore(main): release 3.11.5 (#282)
• 8fb6b45 fix: Upgrade adm-zip to 0.6.0 (#281)
• 13fcd5c Merge pull request #261 from OctopusDeploy/release-please--branches--main--co...
• 8e2e095 chore(main): release 3.11.4
• 5f1f995 Merge pull request #280 from OctopusDeploy/sf2251-git-resources
• 9fc90af Add GitResources to CreateReleaseCommandV1
• f42d768 fix: Patch CVEs and add supply-chain defences (#260)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octopusdeploy/api-client since your current version.

Updates azure-devops-node-api from 11.2.0 to 17.0.0

Release notes

Sourced from azure-devops-node-api's releases.

Update 2022.1

The most recent version of the node-api, updated to bring new features delivered with the latest TFS Server

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for azure-devops-node-api since your current version.

Updates azure-pipelines-task-lib from 4.17.3 to 5.279.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for azure-pipelines-task-lib since your current version.

Updates azure-pipelines-tool-lib from 2.0.8 to 2.279.1

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for azure-pipelines-tool-lib since your current version.

Updates command-line-args from 5.2.1 to 6.0.2

Release notes

Sourced from command-line-args's releases.

v6.0.0

This is a non-functional release intended to refresh the codebase and dependency tree. There are no changes to the library's API or behaviour.

Breaking changes since 5.2.1

• Dropped support for Node versions less than v12.20

Misc other improvements

• The package is now a native ES6 module while still maintaining support for CommonJS
• All dependencies updated to their latest version

Upgrade Notes

• If you're using Node v12.20 or above it's safe to upgrade with zero changes to your code.
• Users of older versions of Node should stick with command-line-args v5.2.1.

Commits

• b6657d9 6.0.2
• 0354fed refresh deps, dates, CI
• 4bd0e30 Merge pull request #140 from Fdawgs/patch-1
• fa62e9b ci(node.js): replace node 23 with 24 in test matrix
• 1de4481 Merge pull request #139 from Fdawgs/patch-1
• 18940cd chore(package): fix repository url; add homepage and bugs urls
• fdb7af8 Merge pull request #138 from Fdawgs/patch-1
• 75657d4 ci(node.js): update workflow
• 40f3646 6.0.1
• baee1e8 add Node v23 to CI
• Additional commits viewable in compare view

Updates fp-ts from 1.19.5 to 2.16.11

Release notes

Sourced from fp-ts's releases.

2.16.9

Polish

Support strictBuiltinIteratorReturn, #1949

2.16.5

Polish

Resolved a RangeError where the maximum call stack size was exceeded when invoking chainWithIndex, #1931

2.16.0

• tapEither (dual) (aka chainFirstEitherK / chainFirstEitherKW) gcanti/fp-ts#1864
• tapIO (dual) (aka chainFirstIOK) gcanti/fp-ts#1865
• as / asUnit gcanti/fp-ts#1867
• tapTask (dual) (aka chainFirstTaskK) gcanti/fp-ts#1869
• mapError (dual) (aka mapLeft) gcanti/fp-ts#1870
• mapBoth (dual) (aka bimap) gcanti/fp-ts#1872
• tapReader (dual) (aka chainFirstReaderK / chainFirstIReaderKW) gcanti/fp-ts#1871
• tapReaderEither (dual) (aka chainFirstReaderEitherK / chainFirstEitherKW) gcanti/fp-ts#1873
• tapReaderIO (dual) (aka chainFirstReaderIOK) gcanti/fp-ts#1873
• tapReaderTask (dual) (aka chainFirstReaderTaskK) gcanti/fp-ts#1873
• tapTaskEither (dual) (aka chainFirstTaskEitherK / chainFirstTaskEitherKW) gcanti/fp-ts#1873
• flatMapReaderTask (dual) (aka chainReaderTaskK / chainReaderTaskKW) gcanti/fp-ts#1874
• flatMapTaskEither (dual) (aka chainTaskEitherK / chainTaskEitherKW) gcanti/fp-ts#1874
• flatMapIO (dual) (aka chainIOK) gcanti/fp-ts#1874
• Option.orElse (dual) (aka alt / altW) gcanti/fp-ts#1868
• flatMapTask (dual) (aka chainTaskK) gcanti/fp-ts#1876
• flatMapReader (dual) (aka chainReaderK / chainReaderKW) gcanti/fp-ts#1876
• flatMapReaderIO (dual) (aka chainReaderIOK / chainReaderIOKW) gcanti/fp-ts#1879
• flatMap* (aka chain*K / chain*KW) gcanti/fp-ts#1880

2.15.0

New Feature

• function
  • add LazyArg
• add tap (dual) (aka chainFirst / chainFirstW) to:
  • Either
  • IO
  • IOEither
  • IOOption
  • Option
  • Reader
  • ReaderEither
  • ReaderIO
  • ReaderTask
  • ReaderTaskEither
  • State
  • StateReaderTaskEither
  • Task

... (truncated)

Changelog

Sourced from fp-ts's changelog.

2.16.11

Bug Fix

Fix Option.getOrd definition, #1963

2.16.10

Polish

Add apFirstW and apSecondW to ReaderTask, #1958

2.16.9

Polish

Support strictBuiltinIteratorReturn, #1949

2.16.8

Polish

Remove useless pure comment, closes #1937

2.16.7

Polish

Add tap for Identity #1943

2.16.6

Polish

Allow dependencies to be widen when using orLeft #1938

2.16.5

Polish

Resolved a RangeError where the maximum call stack size was exceeded when invoking chainWithIndex, #1931

2.16.4

Polish

Fix __PURE__ annotation placement, closes #1926

2.16.3

... (truncated)

Commits

• See full diff in compare view

Updates glob from 7.2.0 to 13.0.6

Changelog

Sourced from glob's changelog.

changeglob

13

• Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

• Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
• Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
• Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

• e80cb38 13.0.6
• 9cdbbff revert tsgo, not ready for test coverage correctness yet
• 89c99ba use tsgo compiler
• b7275d5 update deps, expand engines to include node 18
• 942e360 update workflows, pull taprc out of package.json
• 4a0d53c update tap for mockImport bugfix
• ef94ad2 update tap
• 180c2d4 update docs
• 37993c8 remove stray console.error in test
• 03ae4c2 13.0.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for glob since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates ramda from 0.28.0 to 0.32.0

Release notes

Sourced from ramda's releases.

v0.32.0

upgrade guide

v0.31.3

upgrade guide

v0.30.1

upgrade guide: ramda/ramda#3472

v0.30.0

Upgrade guide: ramda/ramda#3453

v0.29.1

Upgrade guide: ramda/ramda#3415

v0.29.0

Added

🆕 addIndexRight 🆕 isNotNil 🆕 swap 🆕 dropRepeatsBy

Removed

Deprecated

Changes

⚠️ propEq/pathEq parameter order

• Documentation improvements
• Transducer updates
• Some support for types
• Many more!

Thank you to everyone who contributed to this release!

Commits

• f0b1fb5 Version 0.32.0
• fc8f028 fix exports in package.json (#3522)
• 29470a6 docs(rebuild): fix typo (#3521)
• 7414650 docs(pipeWith): add usage example (#3520)
• 746e0f8 docs: update jsdelivr link (#3518)
• 3c81269 docs: add Map & Set example to type.js (#3517)
• 3cade36 feat: better handling of decimal arguments to range (#3516)
• d4443e6 Update head.js and last.js docs example (#3515)
• 7ee3d7a Version 0.31.3
• 69dfa7f do not clean dist
• Additional commits viewable in compare view

Updates @types/ramda from 0.28.15 to 0.32.0

Commits

• See full diff in compare view

Updates semver from 7.7.3 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

• e583226 #874 reject numeric segments after x-ranges (@​pupuking723)

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

• 046da7f #872 align caret includePrerelease lower bounds (#872) (@​wayyoungboy)

Chores

• 3485dda #866 bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@​dependabot[bot])

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

• bea6028 #870 increment dotted prerelease identifiers (#870) (@​liuzemei, @​SheldonNeo)

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

• 17aa702 #869 strip build metadata before comparator trimming (#869) (@​owlstronaut)
• 5f3ca13 #867 handle prerelease bounds in subset (#867) (@​puneetdixit200, Puneet Dixit)

v7.8.0

7.8.0 (2026-05-08)

Features

• 0d0a0a2 #855 Add truncate function (#855) (@​pjohnmeyer, @​owlstronaut)

Bug Fixes

• 3905343 #859 Warn when defaulting to --inc=patch in CLI (@​pjohnmeyer)

Documentation

• c368af6 #853 fix typos in documentation (#853) (@​ankitkumar572005)
• 37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@​abhu85, @​claude)

Chores

• 9542e09 #860 template-oss-apply (@​owlstronaut)
• 937bc2c #860 template-oss-apply@5.0.0 (@​owlstronaut)
• 6946fef #852 bump @​npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@​dependabot[bot], @​npm-cli-bot)

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

• a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@​mldangelo)

Documentation

• 1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@​mldangelo)

Dependencies

• 120968b #840 @npmcli/template-oss@4.29.0 (#840)

... (truncated)

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

7.8.4 (2026-06-09)

Bug Fixes

• e583226 #874 reject numeric segments after x-ranges (@​pupuking723)

7.8.3 (2026-06-08)

Bug Fixes

• 046da7f #872 align caret includePrerelease lower bounds (#872) (@​wayyoungboy)

Chores

• 3485dda #866 bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@​dependabot[bot])

7.8.2 (2026-06-04)

Bug Fixes

• bea6028 #870 increment dotted prerelease identifiers (#870) (@​liuzemei, @​SheldonNeo)

7.8.1 (2026-05-21)

Bug Fixes

• 17aa702 #869 strip build metadata before comparator trimming (#869) (@​owlstronaut)
• 5f3ca13 #867 handle prerelease bounds in subset (#867) (@​puneetdixit200, Puneet Dixit)

7.8.0 (2026-05-08)

Features

• 0d0a0a2 #855 Add truncate function (#855) (@​pjohnmeyer, @​owlstronaut)

Bug Fixes

• 3905343 #859 Warn when defaulting to --inc=patch in CLI (@​pjohnmeyer)

Documentation

• c368af6 #853 fix typos in documentation (#853) (@​ankitkumar572005)
• 37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@​abhu85, @​claude)

Chores

• 9542e09 #860 template-oss-apply (@​owlstronaut)
• 937bc2c #860 template-oss-apply@5.0.0 (@​owlstronaut)
• 6946fef #852 bump @​npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@​dependabot[bot], @​npm-cli-bot)

7.7.4 (2026-01-16)

Bug Fixes

• a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@​mldangelo)

Documentation

• 1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@​mldangelo)

Dependencies

• 120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

• 44d7130 #824 bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@​dependabot[bot])
• 7073576 #820 reorder parameters in invalid-versions.js test (#820) (@​reggi)
• 5816d4c #829 bump @​npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@​dependabot[bot], @​npm-cli-bot)

Commits

• 6e05b76 chore: release 7.8.5 (#879)
• 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...
• 8640bd6 chore: release 7.8.4 (#875)
• e583226 fix: reject numeric segments after x-ranges
• 6b77aa8 chore: release 7.8.3 (#873)
• 3485dda chore: bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866)
• 046da7f fix: align caret includePrerelease lower bounds (#872)
• efafcf8 chore: release 7.8.2 (#871)
• bea6028 fix: increment dotted prerelease identifiers (#870)
• 7641608 chore: release 7.8.1 (#868)
• Additional commits viewable in compare view

Updates shlex from 2.1.2 to 3.0.0

Commits

• 017bf81 Update Node versions
• de4f501 Update dependencies to latest
• fc080f2 Convert package to ESM module
• 193b0b7 Bump json5 from 1.0.1 to 1.0.2 (#24)
• 0d79d50 Bump braces from 3.0.2 to 3.0.3 (#28)
• a64bd50 Declare join() parameter as readonly (#29)
• d42e182 Bump Node releases tested by CI (#30)
• c300f15 Bump nanoid and mocha (#26)
• 295b2c1 Bump word-wrap from 1.2.3 to 1.2.4 (#25)
• bb2f10e Bump json5 and tsconfig-paths (#23)
• See full diff in compare view

Updates typed-rest-client from 1.8.9 to 3.1.0

Release notes

Sourced from typed-rest-client's releases.

v2.1.0

What's Changed

• Migration to CFS by @​ivanduplenskikh in microsoft/typed-rest-client#377
• Add ability to pass global agent options for HttpClient by @​aleksandrlevochkin in microsoft/typed-rest-client#378

New Contributors

• @​ivanduplenskikh made their first contribution in microsoft/typed-rest-client#377
• @​aleksandrlevochkin made their first contribution in microsoft/typed-rest-client#378

Full Changelog: microsoft/typed-rest-client@v2.0.2...v2.1.0

Release v2.0.2

• Add EHOSTUNREACH to NetworkRetryErrors list (#373) (2024-07-08)

Release v2.0.1

• Bump the qs version to fix vulnerability issue (#371) (2024-06-26)

Release v2.0.0

IMPORTANT NOTE: Starting from version 2.0.0 the package requires node version 16 and upper.

Version changes:

• Update autoAssignABTT.yml workflow (#352) (2023-03-15)
• Update azure devops pipeline and fix tests (#357) (2023-06-27)
• Add publish stage to pipeline (#358) (2023-06-28)
• Add pool to Publish_package job (#359) (2023-06-28)
• Add publishToNpm parameter (#360) (2023-06-28)
• Add release notes automatization (#365) (2023-11-30)
• Update github workflows to avoid issues with GITHUB_TOKEN (#366) (2024-01-26)
• 1ES Pipelines Template Adoption (#367) (2024-02-12)
• 1ES Migration (#369) (2024-03-08)
• Fix CG for typed-rest-client (#370) (2024-06-04)

Release v1.8.11

• migrate to Node 16 (#332) (2022-07-19)
• Removed mention of node 4 support (#335) (2022-07-20)
• Update samples (#336) (2022-07-27)
• Add webpack sample (#337) (2022-07-27)
• [Repo config] Add CODEOWNERS file (#338) (2022-08-23)
• Unable to read error message from response header (#339) (2022-10-06)
• Update autoAssignABTT.yml workflow (#352) (2023-03-15)
• Update azure devops pipeline and fix tests (#357) (2023-06-27)
• Add publish stage to pipeline (#358) (2023-06-28)
• Add pool to Publish_package job (#359) (2023-06-28)
• Add publishToNpm parameter (#360) (2023-06-28)
• Add release notes automatization (#365) (2023-11-30)
• Update github workflows to avoid issues with GITHUB_TOKEN (#366) (2024-01-26)
• 1ES Pipelines Template Adoption (#367) (2024-02-12)
• 1ES Migration (#369) (2024-03-08)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typed-rest-client since your current version.

Updates uuid from 8.3.2 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

• v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
• v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
• v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

• add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

• expect crypto to be global everywhere (requires node@20+) (#935)
• drop node@18 support (#934)

Features

• drop node@18 support (#934) (dc4ddb8)

Bug Fixes

• expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
• Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

• rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

• v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
• v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
• v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

• add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

• Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

• crypto is now expected to be globally defined (requires node@20+) (