Skip to content

Build(deps-dev): Bump the uppy group with 5 updates#1527

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/uppy-a0a3b0d57e
Closed

Build(deps-dev): Bump the uppy group with 5 updates#1527
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/uppy-a0a3b0d57e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Nov 23, 2025 •
edited
Loading

Bumps the uppy group with 5 updates:

Package From To
@uppy/aws-s3 4.1.0 5.0.2
@uppy/core 4.2.2 5.1.1
@uppy/drop-target 3.0.1 4.0.1
@uppy/utils 6.0.3 7.1.3
@uppy/xhr-upload 4.2.1 5.0.2

Updates @uppy/aws-s3 from 4.1.0 to 5.0.2

Updates @uppy/core from 4.2.2 to 5.1.1

Updates @uppy/drop-target from 3.0.1 to 4.0.1

Updates @uppy/utils from 6.0.3 to 7.1.3

Updates @uppy/xhr-upload from 4.2.1 to 5.0.2

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 23, 2025
@github-actions
Copy link
Copy Markdown

github-actions bot commented Nov 23, 2025

PR body updated to plaintext for easier squash-merging. Original body content below:

Bumps the uppy group with 5 updates:

Package From To
@uppy/aws-s3 4.1.0 5.0.2
@uppy/core 4.2.2 5.1.1
@uppy/drop-target 3.0.1 4.0.1
@uppy/utils 6.0.3 7.1.3
@uppy/xhr-upload 4.2.1 5.0.2

Updates @uppy/aws-s3 from 4.1.0 to 5.0.2

Changelog

Sourced from @​uppy/aws-s3's changelog.

Changelog

This is our changelog which contains planned todos and past dones.

Items can be optionally tagged by the GitHub issue's owner, if a discussion happened / is needed.

Please add your entries in this format:

  • - [ ] (<plugin name>|website|core|meta|build|test): <Present tense verb> <subject> \(<list of associated owners/gh-issues>\).

In the current stage we aim to release a new version at least every month.

4.18.0

Released: 2025-06-30

Package Version Package Version
@​uppy/components 0.2.0 @​uppy/remote-sources 2.3.4
@​uppy/core 4.4.7 @​uppy/screen-capture 4.3.1
@​uppy/google-drive-picker 0.3.6 @​uppy/svelte 4.5.0
@​uppy/google-photos-picker 0.3.6 @​uppy/vue 2.3.0
@​uppy/locales 4.6.0 @​uppy/webcam 4.2.1
@​uppy/provider-views 4.4.5 uppy 4.18.0
@​uppy/react 4.4.0
  • meta: Remove remark reference from CI (Murderlon)
  • @​uppy/components,@​uppy/screen-capture: useScreenCapture fixes (Prakash / #5793)
  • examples: Add useRemoteSource (Merlijn Vos / #5778)
  • @​uppy/components: Use webcam fixes2 (Mikael Finstad / #5791)
  • meta: Remove remark (Merlijn Vos / #5790)
  • meta: Delete old, unused files (Merlijn Vos / #5788)
  • meta: Sort package.json (Murderlon)
  • examples: Headless Hooks: Add useScreenCapture (Prakash / #5784)
  • @​uppy/locales: Update pt_BR localization (Gabriel Pereira / #5780)
  • e2e: Skip for now then (Murderlon)
  • e2e: fixup! Fix CI for now (Murderlon)
  • e2e: Fix CI for now (Murderlon)
  • examples: Add useWebcam (Merlijn Vos / #5741)
  • @​uppy/react,@​uppy/svelte,@​uppy/vue: Add useDropzone & useFileInput (Merlijn Vos / #5735)
  • meta: build(deps): bump base-x from 3.0.9 to 3.0.11 (dependabot[bot] / #5772)
  • @​uppy/provider-views: improve metadata handling in Google Photos Picker (ben rosenbaum / #5769)

4.17.0

Released: 2025-06-02

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by uppydev, a new releaser for @​uppy/aws-s3 since your current version.


Updates @uppy/core from 4.2.2 to 5.1.1

Release notes

Sourced from @​uppy/core's releases.

@​uppy/core@​5.1.1

Patch Changes

  • 0c16fe4: - Make file.data nullable - Because for ghosts it will be undefined and we don't have any type to distinguish ghosts from other (local) files. This caused a crash, because we didn't check for undefined everywhere (when trying to store a blob that was undefined)
    • Introduce new field progress.complete: if there is a post-processing step, set it to true once post processing is complete. If not, set it to true once upload has finished.
    • Throw a proper Nonexistent upload error message if trying to upload a non-existent upload, instead of TypeError
    • Rewrite Uppy.upload() - this fixes two bugs:
      1. No more duplicate emit call when this.#restricter.validateMinNumberOfFiles throws (#informAndEmit and this.emit('error'))
      2. 'restriction-failed' now also gets correctly called when checkRequiredMetaFields check errors.
    • Don't re-upload completed files #5930
    • Split UppyFile into two intefaces distinguished by the isRemote boolean:
      • LocalUppyFile
      • RemoteUppyFile
    • Remove TagFile type - Use UppyFile instead.
    • Make name required on UppyFile (it is in reality always set)
    • Fix bug: RestrictionError sometimes thrown with a file property that was not a UppyFile, but a File. This would happen if someone passed a File instead of a MinimalRequiredUppyFile into core.addFile (which is valid to do according to our API)
    • Improve some log messages
    • Simplify Uppy postprocess-complete handler
  • Updated dependencies [0c16fe4]
    • @​uppy/utils@​7.1.1

@​uppy/core@​5.1.0

Minor Changes

  • 5ba2c1c: Introduce the concept of server-side search and add support for it for the Dropbox provider. Previously, only client-side filtering in the currently viewed folder was possible, which was limiting. Now users using Companion with Dropbox can perform a search across their entire account.

Patch Changes

  • Updated dependencies [5ba2c1c]
    • @​uppy/utils@​7.1.0

@​uppy/core@​5.0.2

Patch Changes

  • 4b6a76c: added missing exports.
  • 975317d: Removed "main" from package.json, since export maps serve as the contract for the public API.
  • Updated dependencies [975317d]
  • Updated dependencies [9bac4c8]
    • @​uppy/utils@​7.0.2

@​uppy/core@​5.0.1

Patch Changes

  • 49522ec: Remove preact/compat imports in favor of preact, preventing JSX type issues in certain setups.
  • Updated dependencies [49522ec]
    • @​uppy/utils@​7.0.1
Changelog

Sourced from @​uppy/core's changelog.

Changelog

This is our changelog which contains planned todos and past dones.

Items can be optionally tagged by the GitHub issue's owner, if a discussion happened / is needed.

Please add your entries in this format:

  • - [ ] (<plugin name>|website|core|meta|build|test): <Present tense verb> <subject> \(<list of associated owners/gh-issues>\).

In the current stage we aim to release a new version at least every month.

4.18.0

Released: 2025-06-30

Package Version Package Version
@​uppy/components 0.2.0 @​uppy/remote-sources 2.3.4
@​uppy/core 4.4.7 @​uppy/screen-capture 4.3.1
@​uppy/google-drive-picker 0.3.6 @​uppy/svelte 4.5.0
@​uppy/google-photos-picker 0.3.6 @​uppy/vue 2.3.0
@​uppy/locales 4.6.0 @​uppy/webcam 4.2.1
@​uppy/provider-views 4.4.5 uppy 4.18.0
@​uppy/react 4.4.0
  • meta: Remove remark reference from CI (Murderlon)
  • @​uppy/components,@​uppy/screen-capture: useScreenCapture fixes (Prakash / #5793)
  • examples: Add useRemoteSource (Merlijn Vos / #5778)
  • @​uppy/components: Use webcam fixes2 (Mikael Finstad / #5791)
  • meta: Remove remark (Merlijn Vos / #5790)
  • meta: Delete old, unused files (Merlijn Vos / #5788)
  • meta: Sort package.json (Murderlon)
  • examples: Headless Hooks: Add useScreenCapture (Prakash / #5784)
  • @​uppy/locales: Update pt_BR localization (Gabriel Pereira / #5780)
  • e2e: Skip for now then (Murderlon)
  • e2e: fixup! Fix CI for now (Murderlon)
  • e2e: Fix CI for now (Murderlon)
  • examples: Add useWebcam (Merlijn Vos / #5741)
  • @​uppy/react,@​uppy/svelte,@​uppy/vue: Add useDropzone & useFileInput (Merlijn Vos / #5735)
  • meta: build(deps): bump base-x from 3.0.9 to 3.0.11 (dependabot[bot] / #5772)
  • @​uppy/provider-views: improve metadata handling in Google Photos Picker (ben rosenbaum / #5769)

4.17.0

Released: 2025-06-02

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by uppydev, a new releaser for @​uppy/core since your current version.


Updates @uppy/drop-target from 3.0.1 to 4.0.1

Release notes

Sourced from @​uppy/drop-target's releases.

@​uppy/drop-target@​4.0.1

Patch Changes

  • 975317d: Removed "main" from package.json, since export maps serve as the contract for the public API.
  • Updated dependencies [4b6a76c]
  • Updated dependencies [975317d]
  • Updated dependencies [9bac4c8]
Changelog

Sourced from @​uppy/drop-target's changelog.

4.0.1

Released: 2024-07-15

Package Version Package Version
@​uppy/companion 5.0.1 @​uppy/drop-target 3.0.1
@​uppy/core 4.0.1 @​uppy/react 4.0.1
@​uppy/dashboard 4.0.1 uppy 4.0.1
@​uppy/drag-drop 4.0.1
  • @​uppy/dashboard: propagate setOptions to StatusBar (Mikael Finstad / #5260)
  • meta: add missing lint rule for .ts files (Antoine du Hamel / #5335)
  • @​uppy/companion: bump ws from 8.17.0 to 8.17.1 (dependabot[bot] / #5324)
  • @​uppy/dashboard,@​uppy/drag-drop,@​uppy/drop-target: <Dashboard/>, <DragDrop/>, drop-target - new anti-flickering solution (Evgenia Karunus / #5326)
  • docs: add css import for url plugin (Tyler Nieman / #5333)
  • meta: Bump fast-loops from 1.1.3 to 1.1.4 (dependabot[bot] / #5327)
  • @​uppy/core: make Meta generic optional (Merlijn Vos / #5330)
  • meta: update manual-cdn workflow (Antoine du Hamel / #5329)
  • docs: Fix lint (Murderlon)
  • docs: Correct mistake in migration guide (Murderlon)

4.0.0

Released: 2024-07-10

Package Version Package Version
@​uppy/angular 0.7.0 @​uppy/onedrive 4.0.0
@​uppy/audio 2.0.0 @​uppy/progress-bar 4.0.0
@​uppy/aws-s3 4.0.0 @​uppy/provider-views 4.0.0
@​uppy/aws-s3-multipart 4.0.0 @​uppy/react 4.0.0
@​uppy/box 3.0.0 @​uppy/react-native 0.6.0
@​uppy/companion 5.0.0 @​uppy/redux-dev-tools 4.0.0
@​uppy/companion-client 4.0.0 @​uppy/remote-sources 2.0.0
@​uppy/compressor 2.0.0 @​uppy/screen-capture 4.0.0
@​uppy/core 4.0.0 @​uppy/status-bar 4.0.0
@​uppy/dashboard 4.0.0 @​uppy/store-default 4.0.0
@​uppy/drag-drop 4.0.0 @​uppy/store-redux 4.0.0
@​uppy/drop-target 3.0.0 @​uppy/svelte 4.0.0
@​uppy/dropbox 4.0.0 @​uppy/thumbnail-generator 4.0.0
@​uppy/facebook 4.0.0 @​uppy/transloadit 4.0.0
@​uppy/file-input 4.0.0 @​uppy/tus 4.0.0
@​uppy/form 4.0.0 @​uppy/unsplash 4.0.0
@​uppy/golden-retriever 4.0.0 @​uppy/url 4.0.0
@​uppy/google-drive 4.0.0 @​uppy/utils 6.0.0
@​uppy/google-photos 0.2.0 @​uppy/vue 2.0.0
@​uppy/image-editor 3.0.0 @​uppy/webcam 4.0.0
@​uppy/informer 4.0.0 @​uppy/xhr-upload 4.0.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by uppydev, a new releaser for @​uppy/drop-target since your current version.


Updates @uppy/utils from 6.0.3 to 7.1.3

Release notes

Sourced from @​uppy/utils's releases.

@​uppy/utils@​7.1.3

Patch Changes

  • ad50314: Allow getSafeFileId to accept UppyFile

@​uppy/utils@​7.1.2

Patch Changes

  • 08b64f9: fix ts issue with generateFileID and exactOptionalPropertyTypes

@​uppy/utils@​7.1.1

Patch Changes

  • 0c16fe4: - Make file.data nullable - Because for ghosts it will be undefined and we don't have any type to distinguish ghosts from other (local) files. This caused a crash, because we didn't check for undefined everywhere (when trying to store a blob that was undefined)
    • Introduce new field progress.complete: if there is a post-processing step, set it to true once post processing is complete. If not, set it to true once upload has finished.
    • Throw a proper Nonexistent upload error message if trying to upload a non-existent upload, instead of TypeError
    • Rewrite Uppy.upload() - this fixes two bugs:
      1. No more duplicate emit call when this.#restricter.validateMinNumberOfFiles throws (#informAndEmit and this.emit('error'))
      2. 'restriction-failed' now also gets correctly called when checkRequiredMetaFields check errors.
    • Don't re-upload completed files #5930
    • Split UppyFile into two intefaces distinguished by the isRemote boolean:
      • LocalUppyFile
      • RemoteUppyFile
    • Remove TagFile type - Use UppyFile instead.
    • Make name required on UppyFile (it is in reality always set)
    • Fix bug: RestrictionError sometimes thrown with a file property that was not a UppyFile, but a File. This would happen if someone passed a File instead of a MinimalRequiredUppyFile into core.addFile (which is valid to do according to our API)
    • Improve some log messages
    • Simplify Uppy postprocess-complete handler

@​uppy/utils@​7.1.0

Minor Changes

  • 5ba2c1c: Introduce the concept of server-side search and add support for it for the Dropbox provider. Previously, only client-side filtering in the currently viewed folder was possible, which was limiting. Now users using Companion with Dropbox can perform a search across their entire account.

@​uppy/utils@​7.0.2

Patch Changes

  • 975317d: Removed "main" from package.json, since export maps serve as the contract for the public API.
  • 9bac4c8: Fix TypeError: Cannot use 'in' operator to search for 'draggable' in null

@​uppy/utils@​7.0.1

Patch Changes

  • 49522ec: Remove preact/compat imports in favor of preact, preventing JSX type issues in certain setups.
Commits
Maintainer changes

This version was pushed to npm by uppydev, a new releaser for @​uppy/utils since your current version.


Updates @uppy/xhr-upload from 4.2.1 to 5.0.2

Release notes

Sourced from @​uppy/xhr-upload's releases.

@​uppy/xhr-upload@​5.0.2

Patch Changes

  • 8ac1654: - Make file.data nullable - Because for ghosts it will be undefined and we don't have any type to distinguish ghosts from other (local) files. This caused a crash, because we didn't check for undefined everywhere (when trying to store a blob that was undefined). This means we have to add null checks in some packages
    • Split UppyFile into two interfaces distinguished by the isRemote boolean:
      • LocalUppyFile
      • RemoteUppyFile

@​uppy/xhr-upload@​5.0.1

Patch Changes

  • 975317d: Removed "main" from package.json, since export maps serve as the contract for the public API.
  • Updated dependencies [4b6a76c]
  • Updated dependencies [975317d]
  • Updated dependencies [9bac4c8]
    • @​uppy/core@​5.0.2
    • @​uppy/companion-client@​5.0.1
    • @​uppy/utils@​7.0.2
Changelog

Sourced from @​uppy/xhr-upload's changelog.

Changelog

This is our changelog which contains planned todos and past dones.

Items can be optionally tagged by the GitHub issue's owner, if a discussion happened / is needed.

Please add your entries in this format:

  • - [ ] (<plugin name>|website|core|meta|build|test): <Present tense verb> <subject> \(<list of associated owners/gh-issues>\).

In the current stage we aim to release a new version at least every month.

4.18.0

Released: 2025-06-30

Package Version Package Version
@​uppy/components 0.2.0 @​uppy/remote-sources 2.3.4
@​uppy/core 4.4.7 @​uppy/screen-capture 4.3.1
@​uppy/google-drive-picker 0.3.6 @​uppy/svelte 4.5.0
@​uppy/google-photos-picker 0.3.6 @​uppy/vue 2.3.0
@​uppy/locales 4.6.0 @​uppy/webcam 4.2.1
@​uppy/provider-views 4.4.5 uppy 4.18.0
@​uppy/react 4.4.0
  • meta: Remove remark reference from CI (Murderlon)
  • @​uppy/components,@​uppy/screen-capture: useScreenCapture fixes (Prakash / #5793)
  • examples: Add useRemoteSource (Merlijn Vos / #5778)
  • @​uppy/components: Use webcam fixes2 (Mikael Finstad / #5791)
  • meta: Remove remark (Merlijn Vos / #5790)
  • meta: Delete old, unused files (Merlijn Vos / #5788)
  • meta: Sort package.json (Murderlon)
  • examples: Headless Hooks: Add useScreenCapture (Prakash / #5784)
  • @​uppy/locales: Update pt_BR localization (Gabriel Pereira / #5780)
  • e2e: Skip for now then (Murderlon)
  • e2e: fixup! Fix CI for now (Murderlon)
  • e2e: Fix CI for now (Murderlon)
  • examples: Add useWebcam (Merlijn Vos / #5741)
  • @​uppy/react,@​uppy/svelte,@​uppy/vue: Add useDropzone & useFileInput (Merlijn Vos / #5735)
  • meta: build(deps): bump base-x from 3.0.9 to 3.0.11 (dependabot[bot] / #5772)
  • @​uppy/provider-views: improve metadata handling in Google Photos Picker (ben rosenbaum / #5769)

4.17.0

Released: 2025-06-02

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by uppydev, a new releaser for @​uppy/xhr-upload since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Build(deps-dev): Bump the uppy group with 5 updates
1d77fff 
Bumps the uppy group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@uppy/aws-s3](https://github.com/transloadit/uppy) | `4.1.0` | `5.0.2` |
| [@uppy/core](https://github.com/transloadit/uppy) | `4.2.2` | `5.1.1` |
| [@uppy/drop-target](https://github.com/transloadit/uppy) | `3.0.1` | `4.0.1` |
| [@uppy/utils](https://github.com/transloadit/uppy) | `6.0.3` | `7.1.3` |
| [@uppy/xhr-upload](https://github.com/transloadit/uppy) | `4.2.1` | `5.0.2` |


Updates `@uppy/aws-s3` from 4.1.0 to 5.0.2
- [Release notes](https://github.com/transloadit/uppy/releases)
- [Changelog](https://github.com/transloadit/uppy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/transloadit/uppy/compare/@uppy/aws-s3@4.1.0...@uppy/aws-s3@5.0.2)

Updates `@uppy/core` from 4.2.2 to 5.1.1
- [Release notes](https://github.com/transloadit/uppy/releases)
- [Changelog](https://github.com/transloadit/uppy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/transloadit/uppy/compare/@uppy/core@4.2.2...@uppy/core@5.1.1)

Updates `@uppy/drop-target` from 3.0.1 to 4.0.1
- [Release notes](https://github.com/transloadit/uppy/releases)
- [Changelog](https://github.com/transloadit/uppy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/transloadit/uppy/compare/@uppy/drop-target@3.0.1...@uppy/drop-target@4.0.1)

Updates `@uppy/utils` from 6.0.3 to 7.1.3
- [Release notes](https://github.com/transloadit/uppy/releases)
- [Changelog](https://github.com/transloadit/uppy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/transloadit/uppy/compare/@uppy/utils@6.0.3...@uppy/utils@7.1.3)

Updates `@uppy/xhr-upload` from 4.2.1 to 5.0.2
- [Release notes](https://github.com/transloadit/uppy/releases)
- [Changelog](https://github.com/transloadit/uppy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/transloadit/uppy/compare/@uppy/xhr-upload@4.2.1...@uppy/xhr-upload@5.0.2)

---
updated-dependencies:
- dependency-name: "@uppy/aws-s3"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uppy
- dependency-name: "@uppy/core"
  dependency-version: 5.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uppy
- dependency-name: "@uppy/drop-target"
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uppy
- dependency-name: "@uppy/utils"
  dependency-version: 7.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uppy
- dependency-name: "@uppy/xhr-upload"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uppy
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uppy-a0a3b0d57e branch from d4b251f to 1d77fff Compare December 7, 2025 18:54
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Jan 26, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 26, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/uppy-a0a3b0d57e branch January 26, 2026 20:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants