Skip to content

Bump multiparty and hubot#1733

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/multi-3e23db0fc1
Open

Bump multiparty and hubot#1733
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/multi-3e23db0fc1

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Removes multiparty. It's no longer used after updating ancestor dependency hubot. These dependencies need to be updated together.

Removes multiparty

Updates hubot from 9.0.0 to 14.1.0

Release notes

Sourced from hubot's releases.

v14.1.0

14.1.0 (2026-02-24)

Features

v14.0.1

14.0.1 (2026-02-09)

Bug Fixes

  • shell: Empty messages were getting sent when hitting enter over and over again in the prompt. (#1819) (1057f5d)

v14.0.0

14.0.0 (2026-02-04)

  • feat!: Implement CommandBus with deterministic command handling (#1818) (8ecd8c6)

BREAKING CHANGES

  • Event logging is disabled by default. Pass disableLogging: false to log events to disk (.data/).

  • Potential fix for code scanning alert no. 5: Regular expression injection

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@​users.noreply.github.com>

  • escape the bot name and alias just in case

  • coerce to boolean better

  • allow quotes in quoted text

  • copilot suggestions

v13.2.2

13.2.2 (2026-02-02)

Bug Fixes

  • Update Express 5.2.1 and remove standard (#1815) (9a9f09b)

v13.2.1

13.2.1 (2026-02-01)

... (truncated)

Commits
  • 9e76a4f feat: update pino logging (#1824)
  • dd4ecbe chore(deps): bump qs from 6.14.1 to 6.14.2 (#1822)
  • c9e0bac chore(docs): fix #1813 and other doc inconsistencies (#1821)
  • 1057f5d fix(shell): Empty messages were getting sent when hitting enter over and over...
  • 8ecd8c6 feat!: Implement CommandBus with deterministic command handling (#1818)
  • 81c06af chore: add permissions to workflows (#1816)
  • 9a9f09b fix: Update Express 5.2.1 and remove standard (#1815)
  • 4750021 fix: messages not getting handled when linking to a local module for developm...
  • 5a0ce04 feat: fix shell logger takeover when robot.logger is called before run (#1808)
  • c9e78e0 fix: robot.logger getting called prior to the Shell adapter loading (#1807)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hubot since your current version.


Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
hubot [> 8.0.0]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [multiparty](https://github.com/pillarjs/multiparty). It's no longer used after updating ancestor dependency [hubot](https://github.com/hubotio/hubot). These dependencies need to be updated together.


Removes `multiparty`

Updates `hubot` from 9.0.0 to 14.1.0
- [Release notes](https://github.com/hubotio/hubot/releases)
- [Commits](hubotio/hubot@v9.0.0...v14.1.0)

---
updated-dependencies:
- dependency-name: multiparty
  dependency-version:
  dependency-type: indirect
- dependency-name: hubot
  dependency-version: 14.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant