Skip to content

chore: Bump csv-parse and csv - #717

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f6eef4b020
Open

chore: Bump csv-parse and csv#717
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f6eef4b020

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps csv-parse to 7.0.2 and updates ancestor dependency csv. These dependencies need to be updated together.

Updates csv-parse from 6.2.1 to 7.0.2

Changelog

Sourced from csv-parse's changelog.

7.0.2 (2026-08-02)

Bug Fixes

  • csv-parse: prototype replacement reachable via columns (#497)

Performance Improvements

  • csv-parse: avoid unnecessary allocation in ResizeableBuffer.toString (#495)

7.0.1 (2026-07-02)

Bug Fixes

  • csv-parse: ship stream cjs export (#490)

7.0.0 (2026-06-14)

⚠ WARNING

This version was published by mistake, there is no breaking changes. Also, for some reason, the associated version's changelog included many commit messages from version 6.0.0.

Features

  • csv-parse: delimiter discover (fix #400)
  • csv-parse: delimiter_auto sample
  • csv-parse: desactivate delimiter splitting when empty array
  • csv-parse: dont modify prototype in sync (see #479)
  • csv-parse: export CsvError and normalize_options
  • csv-parse: remove comment about sync parse old usage

Bug Fixes

  • csv-parse: align trim with ECMAScript whitespace (fix #482) (#483)
Commits
  • 288c9c6 chore(release): publish
  • 2ad6c07 refactor(csv-parse): rename group_columns_by_name tests
  • eb4d148 fix(csv-parse): prototype replacement reachable via columns (#497)
  • 1d4ed3b perf(csv-parse): avoid unnecessary allocation in ResizeableBuffer.toString (#...
  • 6e0d5a3 chore(release): publish
  • abfe4de build: latest dependencies
  • a5ef896 docs(csv-parse): fix changelog message from previous version
  • 230af8e fix(csv-parse): ship stream cjs export (#490)
  • 3d71f0b chore(release): publish
  • 2ba4897 build: use ts nodenext
  • Additional commits viewable in compare view

Updates csv from 6.5.1 to 6.6.3

Changelog

Sourced from csv's changelog.

6.6.3 (2026-08-05)

Note: Version bump only for package csv

6.6.2 (2026-08-02)

Note: Version bump only for package csv

6.6.1 (2026-07-02)

Note: Version bump only for package csv

6.6.0 (2026-06-14)

Features

  • add unicode chars to formula escape (#387)
  • backport support for node 14
  • backward support for node 8
  • csv: sideEffects: false to package.json (#465)
  • csv: synchronous sample
  • esm migration
  • export ts types in sync
  • replace ts types with typesVersions
  • ts module Node16 and type declaration to exports field (#341)
  • wg stream api

Bug Fixes

  • commonjs types, run tsc and lint to validate changes (#397)
  • correct exports in package.json with webpack
  • csv-demo-ts-cjs-node16: upgrade module definition after latest typescript
  • csv-demo-webpack-ts: simplify export paths
  • csv-generate: finish called twice in node 16
  • csv-stringify: bom and header in sync mode with no records (fix #343)
  • csv-stringify: node 12 compatibility in flush
  • csv-stringify: quote_match with empty string pattern quotes empty strings (#345), closes #344
  • csv: export csv_sync
  • csv: fixed CJS types under modern modernResolution options (#388)
  • csv: remove ts files in cjs dist
  • dont insert polyfills in cjs #303
  • esm exports in package.json files, closes #308
  • export original lib esm modules
  • expose browser esm modules
  • fallback to setTimeout is setImmediate is undefined
  • refer to esm files in dist
  • remove samples from publicatgion
  • uncaught errors with large stream chunks (fix #386)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) to 7.0.2 and updates ancestor dependency [csv](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv). These dependencies need to be updated together.


Updates `csv-parse` from 6.2.1 to 7.0.2
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.2/packages/csv-parse)

Updates `csv` from 6.5.1 to 6.6.3
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv@6.6.3/packages/csv)

---
updated-dependencies:
- dependency-name: csv-parse
  dependency-version: 7.0.2
  dependency-type: indirect
- dependency-name: csv
  dependency-version: 6.6.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@dependabot
dependabot Bot requested a review from a team September 9, 2026 10:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​csv@​6.5.1 ⏵ 6.6.3100 +110010092 +5100

View full report

@coveralls

Copy link
Copy Markdown

Coverage Report for CI Build 34339243565

Coverage at 84.902% (no base build to compare)

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 6060
Covered Lines: 5395
Line Coverage: 89.03%
Relevant Branches: 2153
Covered Branches: 1578
Branch Coverage: 73.29%
Branches in Coverage %: Yes
Coverage Strength: 642.41 hits per line

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant