Skip to content

chore: Bump csv-parse and csv - #717

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f6eef4b020
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f6eef4b020

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps csv-parse to 7.0.2 and updates ancestor dependency csv. These dependencies need to be updated together.

Updates csv-parse from 6.2.1 to 7.0.2

Changelog

Sourced from csv-parse's changelog.

7.0.2 (2026-08-02)

Bug Fixes

  • csv-parse: prototype replacement reachable via columns (#497)

Performance Improvements

  • csv-parse: avoid unnecessary allocation in ResizeableBuffer.toString (#495)

7.0.1 (2026-07-02)

Bug Fixes

  • csv-parse: ship stream cjs export (#490)

7.0.0 (2026-06-14)

⚠ WARNING

This version was published by mistake, there is no breaking changes. Also, for some reason, the associated version's changelog included many commit messages from version 6.0.0.

Features

  • csv-parse: delimiter discover (fix #400)
  • csv-parse: delimiter_auto sample
  • csv-parse: desactivate delimiter splitting when empty array
  • csv-parse: dont modify prototype in sync (see #479)
  • csv-parse: export CsvError and normalize_options
  • csv-parse: remove comment about sync parse old usage

Bug Fixes

  • csv-parse: align trim with ECMAScript whitespace (fix #482) (#483)
Commits
  • 288c9c6 chore(release): publish
  • 2ad6c07 refactor(csv-parse): rename group_columns_by_name tests
  • eb4d148 fix(csv-parse): prototype replacement reachable via columns (#497)
  • 1d4ed3b perf(csv-parse): avoid unnecessary allocation in ResizeableBuffer.toString (#...
  • 6e0d5a3 chore(release): publish
  • abfe4de build: latest dependencies
  • a5ef896 docs(csv-parse): fix changelog message from previous version
  • 230af8e fix(csv-parse): ship stream cjs export (#490)
  • 3d71f0b chore(release): publish
  • 2ba4897 build: use ts nodenext
  • Additional commits viewable in compare view

Updates csv from 6.5.1 to 6.6.3

Changelog

Sourced from csv's changelog.

6.6.3 (2026-08-05)

Note: Version bump only for package csv

6.6.2 (2026-08-02)

Note: Version bump only for package csv

6.6.1 (2026-07-02)

Note: Version bump only for package csv

6.6.0 (2026-06-14)

Features

  • add unicode chars to formula escape (#387)
  • backport support for node 14
  • backward support for node 8
  • csv: sideEffects: false to package.json (#465)
  • csv: synchronous sample
  • esm migration
  • export ts types in sync
  • replace ts types with typesVersions
  • ts module Node16 and type declaration to exports field (#341)
  • wg stream api

Bug Fixes

  • commonjs types, run tsc and lint to validate changes (#397)
  • correct exports in package.json with webpack
  • csv-demo-ts-cjs-node16: upgrade module definition after latest typescript
  • csv-demo-webpack-ts: simplify export paths
  • csv-generate: finish called twice in node 16
  • csv-stringify: bom and header in sync mode with no records (fix #343)
  • csv-stringify: node 12 compatibility in flush
  • csv-stringify: quote_match with empty string pattern quotes empty strings (#345), closes #344
  • csv: export csv_sync
  • csv: fixed CJS types under modern modernResolution options (#388)
  • csv: remove ts files in cjs dist
  • dont insert polyfills in cjs #303
  • esm exports in package.json files, closes #308
  • export original lib esm modules
  • expose browser esm modules
  • fallback to setTimeout is setImmediate is undefined
  • refer to esm files in dist
  • remove samples from publicatgion
  • uncaught errors with large stream chunks (fix #386)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@dependabot
dependabot Bot requested a review from a team September 9, 2026 10:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@socket-security

socket-security Bot commented Sep 9, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​csv@​6.5.1 ⏵ 6.6.3100 +110010092 +5100

View full report

@coveralls

coveralls commented Sep 9, 2026 •

Copy link
Copy Markdown

Coverage Report for CI Build 35088257898

Coverage remained the same at 84.916%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 6061
Covered Lines: 5396
Line Coverage: 89.03%
Relevant Branches: 2153
Covered Branches: 1579
Branch Coverage: 73.34%
Branches in Coverage %: Yes
Coverage Strength: 642.63 hits per line

💛 - Coveralls

Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) to 7.0.2 and updates ancestor dependency [csv](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv). These dependencies need to be updated together.


Updates `csv-parse` from 6.2.1 to 7.0.2
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.2/packages/csv-parse)

Updates `csv` from 6.5.1 to 6.6.3
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv@6.6.3/packages/csv)

---
updated-dependencies:
- dependency-name: csv
  dependency-version: 6.6.3
  dependency-type: direct:production
- dependency-name: csv-parse
  dependency-version: 7.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-f6eef4b020 branch from 0417838 to e5ea8e8 Compare September 16, 2026 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant