maintenance: bump the npm group across 1 directory with 8 updates

[dependabot]

Bumps the npm group with 8 updates in the / directory:

Package	From	To
mocha	12.0.2	12.0.3
browserslist	4.28.7	4.29.3
baseline-browser-mapping	2.11.0	2.11.27
caniuse-lite	1.0.30001813	1.0.30001814
electron-to-chromium	1.5.442	1.5.446
follow-redirects	1.16.0	1.16.1
source-map-js	1.2.1	1.2.2
systeminformation	5.33.14	5.33.15

Updates mocha from 12.0.2 to 12.0.3

Release notes

Sourced from mocha's releases.

v12.0.3

12.0.3 (2026-10-01)

🩹 Fixes

• keep watching when the last test file is removed (#6355) (921c161)
• show require() error on unsupported directory import (#6354) (a68344f)
• support --X one-char aliases (#6391) (1227939)

📚 Documentation

• refresh help output, fix stale links (#6357) (bb2e69a)

🧹 Chores

• add --import=tsx integration test (#6356) (3382fdd)
• touch a new file without stamping it afterwards (#6349) (d59467a)

Changelog

Sourced from mocha's changelog.

12.0.3 (2026-10-01)

🩹 Fixes

• keep watching when the last test file is removed (#6355) (921c161)
• show require() error on unsupported directory import (#6354) (a68344f)
• support --X one-char aliases (#6391) (1227939)

📚 Documentation

• refresh help output, fix stale links (#6357) (bb2e69a)

🧹 Chores

• add --import=tsx integration test (#6356) (3382fdd)
• touch a new file without stamping it afterwards (#6349) (d59467a)

Commits

• 51a0cc5 chore(main): release 12.0.3 (#6353)
• 1227939 fix: support --X one-char aliases (#6391)
• bb2e69a docs: refresh help output, fix stale links (#6357)
• 921c161 fix: keep watching when the last test file is removed (#6355)
• 3382fdd test: add --import=tsx integration test (#6356)
• a68344f fix: show require() error on unsupported directory import (#6354)
• d59467a test: touch a new file without stamping it afterwards (#6349)
• See full diff in compare view

Updates browserslist from 4.28.7 to 4.29.3

Release notes

Sourced from browserslist's releases.

4.29.3

• Updated Firefox ESR.

4.29.2

• Fixed ignoring null usage in cover X in Y query (by @​wahidrizka).

4.29.1

• Fixed config name loading protection on Windows (by @​oss-security-shop).
• Fixed case-insensitive negation queries (by @​jakezwang).
• Fixed percentage and supports queries case-insensitive (by @​wahidrizka).
• Fixed old Node.js tests (by @​aaron-belenky).
• Reduced code (by @​charmander).

4.29.0

• Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

• Improve or parsing performance (by @​NotAFlightRisk).

4.28.8

• Fixed including kaios in baseline queries (by @​Jaybhade).

Changelog

Sourced from browserslist's changelog.

4.29.3

• Updated Firefox ESR.

4.29.2

• Fixed ignoring null usage in cover X in Y query (by @​wahidrizka).

4.29.1

• Fixed config name loading protection on Windows (by @​oss-security-shop).
• Fixed case-insensitive negation queries (by @​jakezwang).
• Fixed percentage and supports queries case-insensitive (by @​wahidrizka).
• Fixed old Node.js tests (by @​aaron-belenky).
• Reduced code (by @​charmander).

4.29.0

• Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

• Improved or parsing performance (by @​NotAFlightRisk).

4.28.8

• Fixed including kaios in baseline queries (by @​Jaybhade).

Commits

• b4809dd Release 4.29.3 version
• 9d844f8 Update Firefox ESR
• 0033f34 Update dependencies
• 906d329 Release 4.29.2 version
• ff8c83f Update dependencies
• 067f4a1 Merge pull request #952 from wahidrizka/fix-cover-null-usage
• f760921 Do not add versions without usage data to cover queries
• 5be63f5 Merge pull request #953 from wahidrizka/docs-android-latest-version
• 1e5356f Note that Android version queries return only the latest version
• 5b7e941 Add missed changes to ChangeLog
• Additional commits viewable in compare view

Updates baseline-browser-mapping from 2.11.0 to 2.11.27

Commits

• 6141d06 Patch to 2.11.27 because browser or feature data changed
• e1d166b Browser or feature data changed
• 42972a7 Updating static site
• c1934c6 Patch to 2.11.26 because browser or feature data changed
• 4873684 Browser or feature data changed
• 9030798 Updating static site
• a5df351 Updating static site
• ecc5b54 Updating static site
• 719bf7a Patch to 2.11.25 because browser or feature data changed
• c4f5b49 Browser or feature data changed
• Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001813 to 1.0.30001814

Commits

• 663dbe9 Update caniuse-db 1.0.30001814
• See full diff in compare view

Updates electron-to-chromium from 1.5.442 to 1.5.446

Commits

• 3177e8c 1.5.446
• a091e17 generate new version
• d0f00b9 1.5.445
• 110e239 generate new version
• d391884 1.5.444
• 202b47d generate new version
• d330a11 1.5.443
• 27fc1c4 generate new version
• See full diff in compare view

Updates follow-redirects from 1.16.0 to 1.16.1

Commits

• 4630125 Release version 1.16.1 of the npm package.
• 9865ca4 Support key/value header arrays.
• 080a76d Escape all RegExp modifiers.
• See full diff in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Commits

• 0a1d334 1.2.2
• 4c6fa26 Update changelog
• cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
• 7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
• See full diff in compare view

Updates systeminformation from 5.33.14 to 5.33.15

Release notes

Sourced from systeminformation's releases.

v5.33.15

Full Changelog: sebhildebrandt/systeminformation@v5.33.14...v5.33.15

Changelog

Sourced from systeminformation's changelog.

Changelog

Major Changes - Version 5

New Functions

• audio() detailed audio information
• bluetoothDevices() detailed information detected bluetooth devices
• dockerImages() detailed information docker images
• dockerVolumes() detailed information docker volumes
• printers() detailed printer information
• usb() detailed USB information
• wifiInterfaces() detected Wi-Fi interfaces
• wifiConnections() active Wi-Fi connections

Breaking Changes

Be aware, that the new version 5.x is NOT fully backward compatible to version 4.x ...

We had to make several interface changes to keep systeminformation as consistent as possible. We highly recommend to go through the complete list and adapt your own code to be again compatible to the new version 5.

Function	Old	New (V5)	Comments
unsupported values	-1	null	values which are unknown orunsupported on platform
battery()	hasbatterycyclecountischargingdesignedcapacitymaxcapacityacconnectedtimeremaining	hasBatterycycleCountisChargingdesignedCapacitymaxCapacityacConnectedtimeRemaining	pascalCase conformity
blockDevices()	fstype	fsType	pascalCase conformity
cpu()	speedminspeedmax	speedMinspeedMax	pascalCase conformity
cpu().speedcpu().speedMincpu().speedMax	string values	now returningnumerical values	better value handling
cpuCurrentspeed()		cpuCurrentSpeed()	function name changedpascalCase conformity
currentLoad()	avgloadcurrentloadcurrentload_usercurrentload_systemcurrentload_nicecurrentload_idlecurrentload_irqraw_currentload	avgLoadcurrentLoadcurrentLoadUsercurrentLoadSystemcurrentLoadNicecurrentLoadIdlecurrentLoadIrqrawCurrentLoad	pascalCase conformity
dockerContainerStats()	mem_usagemem_limitmem_percentcpu_percentcpu_statsprecpu_statsmemory_stats	memUsagememLimitmemPercentcpuPercentcpuStatsprecpuStatsmemoryStats	pascalCase conformity
dockerContainerProcesses()	pid_host	pidHost	pascalCase conformity
graphics().display	pixeldepthresolutionxresolutionysizexsizey	pixelDepthresolutionXresolutionYsizeXsizeY	pascalCase conformity
networkConnections()	localaddresslocalportpeeraddresspeerport	localAddresslocalPortpeerAddresspeerPort	pascalCase conformity
networkInterfaces()	carrier_changes	carrierChanges	pascalCase conformity
processes()	mem_vszmem_rsspcpupcpuupcpuspmem	memVszmemRsscpucpuucpusmem	pascalCase conformityrenamed attributes
processLoad()	result as object	result as array of objects	function now allows to provide more thanone process (as a comma separated list)
services()	pcpupmem	cpumem	renamed attributes
vbox()	HPETPAEAPICX2APICACPIIOAPICbiosAPICmodeTRC	hpetpaeapicx2ApicacpiioApicbiosApicModertc	pascalCase conformity

Other Improvements and Changes

• baseboard(): added memMax, memSlots
• bios(): added language and features (linux)
• blockDevices() added raid group member (linux)
• cpu(): extended AMD processor list

... (truncated)

Commits

• 52dda71 5.33.15
• 416932e system() updated Mac 2026 mopdel numbers (mac OS)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• Chores
  • Includes a minor maintenance update. There are no changes to available features or expected app behavior, and no new user-facing capabilities or fixes. The product’s appearance and functionality remain unchanged in this release. No additional changes to the end-user experience are included.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 68f4f61e-b791-41b1-9835-0beb2030947e

📥 Commits

Reviewing files that changed from the base of the PR and between 50d5a7b and e069b47.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

Walkthrough

The package manifest updates the Mocha dependency from version 12.0.2 to 12.0.3.

Changes

Mocha dependency update

Layer / File(s)	Summary
Update Mocha version package.json	The Mocha dependency version changes from 12.0.2 to 12.0.3.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: pcbailey

Merge Risk: ⚪ Minimal · up to e069b

No actionable merge-blocking risk is established for the Mocha update. It is mergeable after normal checks.

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The PR changes only package.json and package-lock.json. The package.json change updates Mocha from 12.0.2 to 12.0.3; the lockfile records dependency updates. No Ginkgo test titles or test code change,…
Test Structure And Quality	✅ Passed	The check is not applicable to this pull request. The authoritative diff changes only package.json and package-lock.json, updating npm dependency versions. It changes no Ginkgo tests, so it introd…
Microshift Test Compatibility	✅ Passed	The check is not applicable. The PR changes only package.json and package-lock.json to update npm dependencies. It adds no Ginkgo tests or test code, so it introduces no MicroShift-incompatible test b…
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The check is not applicable. The pull request changes only package.json and package-lock.json; package.json updates Mocha from 12.0.2 to 12.0.3. It adds no Ginkgo e2e tests, so it introduces no SNO to…
Topology-Aware Scheduling Compatibility	✅ Passed	The pull request changes only package.json and package-lock.json, updating npm dependency versions. It adds or modifies no deployment manifests, operator code, controllers, or scheduling constrain…
Ote Binary Stdout Contract	✅ Passed	The PR changes only package.json and package-lock.json. The changes update npm dependency versions and lockfile entries. They do not change Go process-level code, suite setup, or stdout handling cover…
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS. The pull request changes only package.json and package-lock.json. It adds no Ginkgo e2e tests, so the IPv4 and external-connectivity checks do not apply.
No-Weak-Crypto	✅ Passed	The PR changes only package.json and package-lock.json. The diff updates npm version and integrity metadata; it adds no crypto implementation or crypto-usage code. No listed weak algorithm, custom…
Container-Privileges	✅ Passed	The PR changes only package.json and package-lock.json. The diff updates npm dependency versions and lockfile entries. It does not change container or Kubernetes manifests, so it introduces none o…
No-Sensitive-Data-In-Logs	✅ Passed	The pull request changes only package.json and package-lock.json. The patch updates dependency versions and lockfile metadata, including registry URLs and integrity hashes. It adds or changes no l…
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the grouped npm dependency updates summarized in the pull request objectives.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign ronlavi2412 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.