Bump minimist and dbus-native

[dependabot]

Removes minimist. It's no longer used after updating ancestor dependency dbus-native. These dependencies need to be updated together.

Removes minimist

Updates dbus-native from 0.4.0 to 0.15.1

Release notes

Sourced from dbus-native's releases.

v0.15.1

0.15.1 (2026-07-30)

Bug Fixes

• a message that cannot be written settles its call once (#387) (3183647)

Documentation

• cite the versions that shipped, not the ones that were planned (#384) (e69744d)
• drop the /next subpath track (#386) (8374dc7)

v0.15.0

0.15.0 (2026-07-30)

⚠ BREAKING CHANGES

• unixexec: addresses read argv1, argv2, ... rather than arg1, arg2, .... An address hand-written against the old spelling now passes no arguments -- use the spec keys. Conformant addresses, which passed no arguments before, now work.

Bug Fixes

• a bus keeps the options it was given, and cannot be crashed by a path (#382) (0fb0dbd)
• exported signals follow the export, and stop when it ends (#383) (799cebd)
• unixexec addresses use the argv keys the spec defines (#380) (588d6a2)

v0.14.0

0.14.0 (2026-07-30)

⚠ BREAKING CHANGES

docs/migrating-to-2.0.md is the guide. Listed here in the order they will stop you, not the order they were written.

• Node.js 22.12.0 or newer is required, up from 20.8.0. Node 20 reached end of life on 2026-04-30. 22.12 rather than 22.0 because that is where require() of an ESM module works unflagged.
• plainValues and returnBigInt now default to true, so a variant reads as its value, a string-keyed dict as a plain object, and x/t as bigint. This touches every value your code reads. variantValue() and toPlain() read either shape, and withClassicTypes() from dbus-native/compat restores the 1.x shapes wholesale. Note bigint is not a drop-in for number: arithmetic and JSON.stringify both throw on one.
• Calls that previously hung forever now reject with a TimeoutError after 25 seconds, the figure libdbus, GDBus and sd-bus all use. Pass timeout: 0 per call or per client to restore the old behaviour, or raise timeout for a method that genuinely takes longer.
• ReturnLongjs now throws rather than being ignored -- pass returnBigInt: false for a lossy number. long is no longer a dependency; a Long is still accepted on input.
• The dbus2js binary is removed; use dbus-native types. lib/address-x11.js is removed -- it required a package that was never a dependency, so it threw on require for anyone who found it.

Features

• drop long, ReturnLongjs, dbus2js and lib/address-x11.js (#374) (1af463b)
• every call has a deadline (#378) (72d956b)
• raise the Node floor to 22.12.0 (#375) (7a35321)
• the plain value shapes are the default (#373) (209f2a1)

... (truncated)

Changelog

Sourced from dbus-native's changelog.

0.15.1 (2026-07-30)

Bug Fixes

• a message that cannot be written settles its call once (#387) (3183647)

Documentation

• cite the versions that shipped, not the ones that were planned (#384) (e69744d)
• drop the /next subpath track (#386) (8374dc7)

0.15.0 (2026-07-30)

⚠ BREAKING CHANGES

• unixexec: addresses read argv1, argv2, ... rather than arg1, arg2, .... An address hand-written against the old spelling now passes no arguments -- use the spec keys. Conformant addresses, which passed no arguments before, now work.

Bug Fixes

• a bus keeps the options it was given, and cannot be crashed by a path (#382) (0fb0dbd)
• exported signals follow the export, and stop when it ends (#383) (799cebd)
• unixexec addresses use the argv keys the spec defines (#380) (588d6a2)

0.14.0 (2026-07-30)

⚠ BREAKING CHANGES

docs/migrating-to-2.0.md is the guide. Listed here in the order they will stop you, not the order they were written.

• Node.js 22.12.0 or newer is required, up from 20.8.0. Node 20 reached end of life on 2026-04-30. 22.12 rather than 22.0 because that is where require() of an ESM module works unflagged.
• plainValues and returnBigInt now default to true, so a variant reads as its value, a string-keyed dict as a plain object, and x/t as bigint. This touches every value your code reads. variantValue() and toPlain() read either shape, and withClassicTypes() from dbus-native/compat restores the 1.x shapes wholesale. Note bigint is not a drop-in for number: arithmetic and JSON.stringify both throw on one.
• Calls that previously hung forever now reject with a TimeoutError after 25 seconds, the figure libdbus, GDBus and sd-bus all use. Pass timeout: 0 per call or per client to restore the old behaviour, or raise timeout for a method that genuinely takes longer.
• ReturnLongjs now throws rather than being ignored -- pass returnBigInt: false for a lossy number. long is no longer a dependency; a Long is still accepted on input.
• The dbus2js binary is removed; use dbus-native types. lib/address-x11.js is removed -- it required a package that was never a dependency, so it threw on require for anyone who found it.

Features

• drop long, ReturnLongjs, dbus2js and lib/address-x11.js (#374) (1af463b)
• every call has a deadline (#378) (72d956b)
• raise the Node floor to 22.12.0 (#375) (7a35321)
• the plain value shapes are the default (#373) (209f2a1)

Documentation

• note the stacked-squash changelog trap (#379) (50782f5)

... (truncated)

Commits

• 147c145 chore(master): release 0.15.1 (#385)
• 3183647 fix: a message that cannot be written settles its call once (#387)
• 8374dc7 docs: drop the /next subpath track (#386)
• e69744d docs: cite the versions that shipped, not the ones that were planned (#384)
• 27e796d chore(master): release 0.15.0 (#381)
• 799cebd fix: exported signals follow the export, and stop when it ends (#383)
• 0fb0dbd fix: a bus keeps the options it was given, and cannot be crashed by a path (#...
• 588d6a2 fix!: unixexec addresses use the argv keys the spec defines (#380)
• 9a12013 chore(master): release 0.14.0 (#377)
• 50782f5 docs: note the stacked-squash changelog trap (#379)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dbus-native since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Looks like these dependencies are no longer a dependency, so this is no longer needed.