⬆️ npm: Bump the npm-production group across 1 directory with 4 updates

[dependabot]

Bumps the npm-production group with 4 updates in the / directory: csv, got, js-yaml and ora.

Updates csv from 6.5.1 to 6.6.0

Changelog

Sourced from csv's changelog.

6.6.0 (2026-06-14)

Features

• add unicode chars to formula escape (#387)
• backport support for node 14
• backward support for node 8
• csv: sideEffects: false to package.json (#465)
• csv: synchronous sample
• esm migration
• export ts types in sync
• replace ts types with typesVersions
• ts module Node16 and type declaration to exports field (#341)
• wg stream api

Bug Fixes

• commonjs types, run tsc and lint to validate changes (#397)
• correct exports in package.json with webpack
• csv-demo-ts-cjs-node16: upgrade module definition after latest typescript
• csv-demo-webpack-ts: simplify export paths
• csv-generate: finish called twice in node 16
• csv-stringify: bom and header in sync mode with no records (fix #343)
• csv-stringify: node 12 compatibility in flush
• csv-stringify: quote_match with empty string pattern quotes empty strings (#345), closes #344
• csv: export csv_sync
• csv: fixed CJS types under modern modernResolution options (#388)
• csv: remove ts files in cjs dist
• dont insert polyfills in cjs #303
• esm exports in package.json files, closes #308
• export original lib esm modules
• expose browser esm modules
• fallback to setTimeout is setImmediate is undefined
• refer to esm files in dist
• remove samples from publicatgion
• uncaught errors with large stream chunks (fix #386)

Commits

• 3d71f0b chore(release): publish
• 615717b test(csv): fix ts import
• 2ba4897 build: use ts nodenext
• 8d50e98 build: latest dependencies
• See full diff in compare view

Updates got from 15.0.5 to 15.0.7

Release notes

Sourced from got's releases.

v15.0.7

• Fix: Preserve request body on cross-origin 307 and 308 redirects (#2460) aee9249

---

sindresorhus/got@v15.0.6...v15.0.7

v15.0.6

• Fix searchParams setter dropping the value when a URL is set (#2454) 5772bf2

---

sindresorhus/got@v15.0.5...v15.0.6

Commits

• 66ca4e0 15.0.7
• aee9249 Fix: Preserve request body on cross-origin 307 and 308 redirects (#2460)
• 28c0ca3 Fix docs typos (#2458)
• 4cc6f56 15.0.6
• 5772bf2 Fix searchParams setter dropping the value when a URL is set (#2454)
• a5b76bf Document pagination authorization handling
• See full diff in compare view

Updates js-yaml from 4.2.0 to 5.2.0

Changelog

Sourced from js-yaml's changelog.

[5.2.0] - 2026-06-26

Added

• Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
• Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

• maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

• Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

• Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

• [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

• Added named exports for schemas, tags, parser events and AST utilities.
• Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.
• Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.
• Added dump() transform option for changing the generated AST before rendering.
• Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.
• Added formal data layers (events and AST) for modular data pipelines.
  • Added low-level parser (to events), presenter and visitor APIs.
• Added the YAML Test Suite to the test set.

Changed

• See the migration guide for upgrade notes.
• Rewritten in TypeScript and reorganized the public API around flat named exports.
• Reduced the set of exported schemas:
  • YAML 1.2 schemas: CORE_SCHEMA (loader default), JSON_SCHEMA, FAILSAFE_SCHEMA.
  • YAML11_SCHEMA, a combination of all YAML 1.1 tags (YAML 1.1 does not specify a schema, only "types").

... (truncated)

Commits

• c28ed5e 5.2.0 released
• 125cd5a Add maxAliases option
• 3105455 Replace maxMergeSeqLengthoption with maxTotalMergeKeys (more robust)
• 39d00d6 numbers: Drop boxed numbers support, simplify .identify() checks, clarify rou...
• eb5cb5b fix: round-trip integers that stringify in exponential notation (#771)
• 89024c4 Update migration info, close #770
• f1e45cd 5.1.0 released
• 53b22be Fix constructor coverage
• a1eaa2b Fix quote style options and restore forceQuotes
• 0532e7d Add finalizers for immutable collection tags
• Additional commits viewable in compare view

Updates ora from 9.4.0 to 9.4.1

Release notes

Sourced from ora's releases.

v9.4.1

• Fix type definitions (#257) 431ebc4

---

sindresorhus/ora@v9.4.0...v9.4.1

Commits

• 79cd8c1 9.4.1
• bc3a283 Minor tweaks
• 431ebc4 Fix type definitions (#257)
• See full diff in compare view