also looking at this

chore(deps): update all non-major dependencies

#603

Closed chrisbbreuer wants to merge buddy-bot/update-non-major-updates-1770604561402 into main

5 files +18 -18

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	2
🔧 System Dependencies	2
🚀 GitHub Actions	4
Total	8

📦 npm Dependencies

2 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@types/bun (source)	`1.3.6` -> `1.3.8`
axios (source)	`1.13.2` -> `1.13.5`

🔧 System Dependencies

2 packages will be updated across 1 file(s): deps.yaml

Package	Change	Type	File
bun.com	`^1.2.10` → `^1.3.1`	🟡 minor	`deps.yaml`
redis	`^7.4.2` → `^7.4.7`	🟢 patch	`deps.yaml`

🚀 GitHub Actions

4 actions will be updated

Action	Change	Type	Files
oven-sh/setup-bun	`v2` → `v2.1.2`	🟢 patch	`ci.yml`
shivammathur/setup-php	`v2` → `v2.36.0`	🟢 patch	`buddy-bot.yml`
actions/cache	`v5` → `v5.0.3`	🟢 patch	`ci.yml`
actions/checkout	`v6` → `v6.0.2`	🟢 patch	`ci.yml`

Release Notes

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.6 -> 1.3.8

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

axios/axios (axios)

1.13.2 -> 1.13.5

`v1.13.5`

Compare Source

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

Fix/5657. (PR #7313)
Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

Add input validation to isAbsoluteURL. (PR #7326)
Refactor: bump minor package versions. (PR #7356)

Documentation

Clarify object-check comment. (PR [#7323...

[View full release notes]

Released by jasonsaayman on 2/8/2026

`v1.13.4`

Compare Source

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

fix: issues with version 1.13.3 (#7352) (ee90dfc)
- Fixed issues discovered in v1.13.3 release
- Cleaned up interceptor test files
- Improved workflow configurations

Infrastructure & CI/CD

refactor: ci and build (#7340) (8ff6c19)
- Major refactoring of CI/CD workflows
- Consolidated workflow files for better maintainability
- Added mise configuration for the development environment
- Improved sponsor block update automation
- Enhanced issue and PR template...

[View full release notes]

Released by jasonsaayman on 1/27/2026

`v1.13.3`

Compare Source

Release notes:

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
interceptor: handle the error in the same interceptor (#6269) (5945e40)
main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
silentJSONParsing=false should throw on invalid JSON ([#7253](https://gith...

[View full release notes]

Released by github-actions[bot] on 1/20/2026

bun.com

^1.2.10 → ^1.3.1

📁 File: deps.yaml

🔗 Release Notes: bun.sh

redis

^7.4.2 → ^7.4.7

📁 File: deps.yaml

🔗 Package Info: pkgx.com

oven-sh/setup-bun

v2 → v2.1.2

Visit oven-sh/setup-bun for release notes.

shivammathur/setup-php

v2 → v2.36.0

Visit shivammathur/setup-php for release notes.

actions/cache

v5 → v5.0.3

Visit actions/cache for release notes.

actions/checkout

v6 → v6.0.2

Visit actions/checkout for release notes.

📊 Package Statistics

@types/bun: 6,247,166 weekly downloads
axios: 85,335,771 weekly downloads
bun.com: Popular JavaScript runtime and package manager
redis: Available via pkgx package manager
oven-sh/setup-bun: GitHub Action for workflow automation
shivammathur/setup-php: GitHub Action for workflow automation
actions/cache: GitHub Action for workflow automation
actions/checkout: GitHub Action for workflow automation

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

5 changed files on the files tab, with 0 review threads.