# 🎯 The objective A milestone to track Dependabot pull requests and related security-update issues for Q3, 2026. ### 🟢 In Scope - Pull requests opened by Dependabot during Q3, 2026 (July through September) - Issues related to security updates during the same period ### 🤖 Tracked Dependabot pull requests - [x] [#1093 — Bump ws from 8.18.2 to 8.21.0](https://github.com/thunderbird/thunderbird-accounts/pull/1093) — merged - [x] [#1129 — Bump js-yaml from 4.2.0 to 4.3.0](https://github.com/thunderbird/thunderbird-accounts/pull/1129) — merged - [x] [#1138 — Bump fast-uri from 3.1.2 to 3.1.4](https://github.com/thunderbird/thunderbird-accounts/pull/1138) — merged - [ ] [#1202 — Bump sqlparse from 0.5.5 to 0.6.0](https://github.com/thunderbird/thunderbird-accounts/pull/1202) — open - [ ] [#108 - Upgrade high severity deps in Stormbox, August 2026](https://github.com/thunderbird/stormbox/pull/108)
🎯 The objective
A milestone to track Dependabot pull requests and related security-update issues for Q3, 2026.
🟢 In Scope
🤖 Tracked Dependabot pull requests