An open index of dependabot pull requests across open source projects.

chore(deps): bump the production-dependencies group across 1 directory with 13 updates

Open
Number: #3
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 0
Created: June 03, 2025 at 12:10 AM UTC
(4 months ago)
Updated: June 03, 2025 at 12:10 AM UTC
(4 months ago)
Labels:
dependencies javascript
Description:

Bumps the production-dependencies group with 13 updates in the / directory:

Package From To
@clack/prompts 0.10.1 0.11.0
@floating-ui/dom 1.7.0 1.7.1
@webgpu/types 0.1.60 0.1.61
flexsearch 0.7.43 0.8.204
lightningcss 1.29.3 1.30.1
preact 10.26.5 10.26.8
satori 0.12.2 0.13.2
sharp 0.34.1 0.34.2
shiki 1.26.2 3.4.2
workerpool 9.2.0 9.3.2
yargs 17.7.2 18.0.0
@types/node 22.15.7 22.15.29
esbuild 0.25.3 0.25.5

Updates @clack/prompts from 0.10.1 to 0.11.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​0.11.0

Minor Changes

  • 07ca32d: Reverted a change where placeholders were being set as values on return.

Patch Changes

  • Updated dependencies [07ca32d]
    • @​clack/core@​0.5.0
Changelog

Sourced from @​clack/prompts's changelog.

0.11.0

Minor Changes

  • 07ca32d: Reverted a change where placeholders were being set as values on return.

Patch Changes

  • Updated dependencies [07ca32d]
    • @​clack/core@​0.5.0
Commits

Updates @floating-ui/dom from 1.7.0 to 1.7.1

Release notes

Sourced from @​floating-ui/dom's releases.

@​floating-ui/dom@​1.7.1

Patch Changes

  • Update dependencies: @floating-ui/core@1.7.1
Changelog

Sourced from @​floating-ui/dom's changelog.

1.7.1

Patch Changes

  • Update dependencies: @floating-ui/core@1.7.1
Commits
  • 999bb86 chore: version packages (#3336)
  • 37eb937 fix(flip): check all placements for main axis overflow with `crossAxis: 'alig...
  • See full diff in compare view

Updates @webgpu/types from 0.1.60 to 0.1.61

Commits

Updates flexsearch from 0.7.43 to 0.8.204

Release notes

Sourced from flexsearch's releases.

v0.8.2

  • Config-Serialized Query Caches, Improved caching strategy for Document indexes and Resolver
  • Resolver Async Processing Workflow (including Queuing)
  • Extended Resolver Support: Worker, Persistent, Cache
  • Extended Result Highlighting: Boundaries, Ellipsis, Alignment
  • Improved TypeScript Typings
  • Improved Stemmer Handling
  • Improved Result Highlighting
  • Use multi-language charset normalization as the default Encoder
  • Simplified charset support for multi-language content
  • Charset renamed LatinExact => Exact, LatinDefault => Default and LatinSimple => Normalize, these are universal charset presets for any languages
  • Charset ArabicDefault and CyrillicDefault was removed, they are fully covered by the default universal charset presets
  • Charset Charset.CjkDefault was renamed to Charset.CJK

v0.8.1

  • Resolver Support for Documents
  • Asynchronous Runtime Balancer, new option priority
  • Export/Import Worker Indexes + Document Worker, new extern config options export and import
  • Improved interoperability of the different build packages, including source folder
  • Support custom filter function for encoder (stop-word filter)

v0.8.0

  • Persistent indexes support for: IndexedDB (Browser), Redis, SQLite, Postgres, MongoDB, Clickhouse
  • Enhanced language customization via the new Encoder class
  • Result Highlighting
  • Query performance achieve results up to 4.5 times faster compared to the previous generation v0.7.x by also improving the quality of results
  • Enhanced support for larger indexes or larger result sets
  • Improved offset and limit processing achieve up to 100 times faster traversal performance through large datasets
  • Support for larger In-Memory index with extended key size (the defaults maximum keystore limit is: 2^24)
  • Greatly enhanced performance of the whole text encoding pipeline
  • Improved indexing of numeric content (Triplets)
  • Intermediate result sets and Resolver
  • Basic Resolver: and, or, xor, not, limit, offset, boost, resolve
  • Improved charset collection
  • New charset preset soundex which further reduces memory consumption by also increasing "fuzziness"
  • Performance gain when polling tasks to the index by using "Event-Loop-Caches"
  • Up to 100 times faster deletion/replacement when not using the additional "fastupdate" register
  • Regex Pre-Compilation (transforms hundreds of regex rules into just a few)
  • Extended support for multiple tags (DocumentIndex)
  • Custom Fields ("Virtual Fields")
  • Custom Filter
  • Custom Score Function
  • Added French language preset (stop-word filter, stemmer)
  • Enhanced Worker Support
  • Export / Import index in chunks
  • Improved Build System + Bundler (Supported: CommonJS, ESM, Global Namespace), also the import of language packs are now supported for Node.js
  • Full covering index.d.ts type definitions
  • Fast-Boot Serialization optimized for Server-Side-Rendering (PHP, Python, Ruby, Rust, Java, Go, Node.js, ...)
Changelog

Sourced from flexsearch's changelog.

Changelog

Current Version

  • Calling index.clear() on a persistent Index does not stack to the task queue by default (which executes on commit), instead it will execute immediately and return a Promise
  • Added new tokenizer tolerant, inherits from strict but also matches simple typos like missing letters and swapped letters
  • Improved Redis Cleanup
  • Resolver: Support Result Highlighting

v0.8.2

  • Config-Serialized Query Caches, Improved caching strategy for Document indexes and Resolver
  • Resolver Async Processing Workflow (including Queuing)
  • Extended Resolver Support: Worker, Persistent, Cache
  • Extended Result Highlighting: Boundaries, Ellipsis, Alignment
  • Improved TypeScript Typings
  • Improved Stemmer Handling
  • Improved Result Highlighting
  • Use multi-language charset normalization as the default Encoder
  • Simplified charset support for multi-language content
  • Charset renamed LatinExact => Exact, LatinDefault => Default and LatinSimple => Normalize, these are universal charset presets for any languages
  • Charset ArabicDefault and CyrillicDefault was removed, they are fully covered by the default universal charset presets
  • Charset Charset.CjkDefault was renamed to Charset.CJK

v0.8.1

  • Resolver Support for Documents
  • Asynchronous Runtime Balancer, new option priority
  • Export/Import Worker Indexes + Document Worker, new extern config options export and import
  • Improved interoperability of the different build packages, including source folder
  • Support custom filter function for encoder (stop-word filter)

v0.8.0

  • Persistent indexes support for: IndexedDB (Browser), Redis, SQLite, Postgres, MongoDB, Clickhouse
  • Enhanced language customization via the new Encoder class
  • Result Highlighting
  • Query performance achieve results up to 4.5 times faster compared to the previous generation v0.7.x by also improving the quality of results
  • Enhanced support for larger indexes or larger result sets
  • Improved offset and limit processing achieve up to 100 times faster traversal performance through large datasets
  • Support for larger In-Memory index with extended key size (the defaults maximum keystore limit is: 2^24)
  • Greatly enhanced performance of the whole text encoding pipeline
  • Improved indexing of numeric content (Triplets)
  • Intermediate result sets and Resolver
  • Basic Resolver: and, or, xor, not, limit, offset, boost, resolve
  • Improved charset collection
  • New charset preset soundex which further reduces memory consumption by also increasing "fuzziness"
  • Performance gain when polling tasks to the index by using "Event-Loop-Caches"
  • Up to 100 times faster deletion/replacement when not using the additional "fastupdate" register
  • Regex Pre-Compilation (transforms hundreds of regex rules into just a few)

... (truncated)

Commits

Updates lightningcss from 1.29.3 to 1.30.1

Release notes

Sourced from lightningcss's releases.

v1.30.1

Fixed crash on process exit when lightningcss was loaded inside a Node.js worker thread on Linux

v1.30.0

Features

  • Update relative color parsing to latest spec: colors now support numbers in addition to percentages, and calcs in colors are now always numbers. Note that this was technically a breaking change in the spec. You may need to update code using relative color calculations on percentages to use numbers instead. See the PR for details. – #465
  • Update nesting implementation for new spec: It is now possible to nest selectors with pseudo elements, and declarations and nested rules can be interleaved. See https://web.dev/blog/css-nesting-cssnesteddeclarations for more details. – https://github.com/parcel-bundler/lightningcss/commit/6c465c123deb549dfb45fd3558f25dca0dbde0d6
  • Skip generating unnecessary @supports rules when already nested in a @supports rule – #878, d398c1b86439dfd243a6c2ba627a8e7981118a44
  • Improve error recovery for media queries – #954
  • Add support for ::picker, ::picker-icon and ::checkmark – #957
  • Add build support for Android – #932

Fixes

  • Fix error message for invalid composes selectors – parcel-bundler/lightningcss#948
  • Update browserslist – parcel-bundler/lightningcss#961
  • Fix linear-gradient direction conversion for legacy vendor-prefixed values – #936
  • Prevent new lines in license comments from breaking source maps – #971
  • Do not inline layers before imports – 33ea2c149e2c94f6e45a86d6d666d092729c9523
  • Statically link Visual Studio redistributables on Windows builds – e5c4139be325c03704072c948be38f8b1f990071
  • update browser compat data – 17bdc80ff5282c410daf65d135ef6cac79200e55
Commits
  • f2dc67c v1.30.1
  • d302a6b Add linker option to prevent segfault in Node worker threads
  • 474c67c v1.30.0
  • 17bdc80 update browser compat data
  • e5c4139 Statically link Visual Studio redistributables on Windows builds
  • 33ea2c1 Do not inline layers before imports
  • 4ebcb45 Update relative color parsing to latest spec (#465)
  • 0f064ab Prevent new lines written by write_str from breaking source maps (#971)
  • 16fdfd5 fix: remove grid feature (#972)
  • 496f4f6 Add build support for Android (#932)
  • Additional commits viewable in compare view

Updates preact from 10.26.5 to 10.26.8

Release notes

Sourced from preact's releases.

10.26.8

Fixes

10.26.7

Types

Improvements

Maintenance

10.26.6

Fixes

Types

  • Change HTMLMediaElement.controlsList type to string (DOMTokenList) (#4744, thanks @​piotr-cz)

Maintenance

Commits

Updates satori from 0.12.2 to 0.13.2

Release notes

Sourced from satori's releases.

0.13.2

0.13.2 (2025-06-02)

Bug Fixes

  • pixel alignment for multiline or centered text (#682) (56bd3d5)

0.13.1

0.13.1 (2025-05-13)

Bug Fixes

0.13.0

0.13.0 (2025-05-12)

Features

Commits

Updates sharp from 0.34.1 to 0.34.2

Commits
  • 6d04b7c Release v0.34.2
  • d4b30b7 Docs: Update pnpm settings documentation URLs
  • 7f03502 Docs: upgrade to latest Astro Starlight
  • 63b0a11 Tests: remove a possible race condition
  • c4d6aec Docs: Highlight that Windows ARM64 support is experimental
  • e75ae97 Ensure PDF scale-on-load optimisation uses background #4398
  • 956d72d Prerelease v0.34.2-rc.0
  • 00e66ef Bump deps
  • db3a452 Simplify 94481a9
  • d36fd50 Prefer use of bandjoin_const() and list-initialization
  • Additional commits viewable in compare view

Updates shiki from 1.26.2 to 3.4.2

Release notes

Sourced from shiki's releases.

v3.4.2

   🚀 Features

    View changes on GitHub

v3.4.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.4.0

   🐞 Bug Fixes

    View changes on GitHub

v3.3.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.2.2

   🚀 Features

    View changes on GitHub

v3.2.1

No significant changes

    View changes on GitHub

... (truncated)

Commits

Updates workerpool from 9.2.0 to 9.3.2

Changelog

Sourced from workerpool's changelog.

2025-05-29, version 9.3.2

  • Fix: #505 npm package missing /src/generated/ files.

2025-05-29, version 9.3.1

  • Fix: #505 npm package missing /src/generated/ files.

2025-05-28, version 9.3.0

  • Feat: support for events and std streams to parents from an abort handler (#478). Thanks @​joshLong145.
  • feat: improve compatibility with standard Promise type (#504). Thanks @​joshkel.
Commits

Updates yargs from 17.7.2 to 18.0.0

Changelog

Sourced from yargs's changelog.

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

  • command names are not derived from modules passed to command.
  • singleton usage of yargs yargs.foo, yargs().argv, has been removed.
  • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.
  • yargs is now ESM first

Features

Bug Fixes

  • addDirectory do not support absolute command dir (#2465) (3a40a78)
  • allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)
  • browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)
  • build: address problems with typescript compilation (#2445) (8d72fb3)
  • coerce should play well with parser configuration (#2308) (8343c66)
  • deps: update dependency yargs-parser to v22 (#2470) (639130d)
  • exit after async handler done (#2313) (e326cde)
  • handle spaces in bash completion (#2452) (83b7788)
  • parser-configuration should work well with generated completion script (#2332) (888db19)
  • propagate Dictionary including undefined in value type (#2393) (2b2f7f5)
  • zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

Code Refactoring

  • command names are not derived from modules passed to command. (d90af45)
  • singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

Build System

  • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23. (d90af45)
Commits
  • 0bc7255 chore(main): release 18.0.0 (#2325)
  • 639130d fix(deps): update dependency yargs-parser to v22 (#2470)
  • 200e1aa fix: allows ESM modules commands to be extensible using visit option (#2468)
  • 888db19 fix: parser-configuration should work well with generated completion script (...
  • 3a40a78 fix: addDirectory do not support absolute command dir (#2465)
  • 90e9eca docs: remove to old slack channel (#2466)
  • 0dd8fe4 fix(zsh): completion no longer requires double tab when using autoloaded
  • 27eec18 feat: commandDir now works with ESM files (#2461)
  • f9c72a7 docs: update examples to run from examples folder (#2463)
  • e02c91b feat(zsh): Add default completion as fallback (#2331)
  • Additional commits viewable in compare view

Updates @types/node from 22.15.7 to 22.15.29

Commits

Updates esbuild from 0.25.3 to 0.25.5

Release notes

Sourced from esbuild's releases.

v0.25.5

  • Fix a regression with browser in package.json (#4187)

    The fix to #4144 in version 0.25.3 introduced a regression that caused browser overrides specified in package.json to fail to override relative path names that end in a trailing slash. That behavior change affected the axios@0.30.0 package. This regression has been fixed, and now has test coverage.

  • Add support for certain keywords as TypeScript tuple labels (#4192)

    Previously esbuild could incorrectly fail to parse certain keywords as TypeScript tuple labels that are parsed by the official TypeScript compiler if they were followed by a ? modifier. These labels included function, import, infer, new, readonly, and typeof. With this release, these keywords will now be parsed correctly. Here's an example of some affected code:

    type Foo = [
      value: any,
      readonly?: boolean, // This is now parsed correctly
    ]
    
  • Add CSS prefixes for the stretch sizing value (#4184)

    This release adds support for prefixing CSS declarations such as div { width: stretch }. That CSS is now transformed into this depending on what the --target= setting includes:

    div {
      width: -webkit-fill-available;
      width: -moz-available;
      width: stretch;
    }
    

v0.25.4

  • Add simple support for CORS to esbuild's development server (#4125)

    Starting with version 0.25.0, esbuild's development server is no longer configured to serve cross-origin requests. This was a deliberate change to prevent any website you visit from accessing your running esbuild development server. However, this change prevented (by design) certain use cases such as "debugging in production" by having your production website load code from localhost where the esbuild development server is running.

    To enable this use case, esbuild is adding a feature to allow Cross-Origin Resource Sharing (a.k.a. CORS) for simple requests. Specifically, passing your origin to the new cors option will now set the Access-Control-Allow-Origin response header when the request has a matching Origin header. Note that this currently only works for requests that don't send a preflight OPTIONS request, as esbuild's development server doesn't currently support OPTIONS requests.

    Some examples:

    • CLI:

      esbuild --servedir=. --cors-origin=https://example.com
      
    • JS:

      const ctx = await esbuild.context({})
      await ctx.serve({
        servedir: '.',
        cors: {
      

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.25.5

  • Fix a regression with browser in package.json (#4187)

    The fix to #4144 in version 0.25.3 introduced a regression that caused browser overrides specified in package.json to fail to override relative path names that end in a trailing slash. That behavior change affected the axios@0.30.0 package. This regression has been fixed, and now has test coverage.

  • Add support for certain keywords as TypeScript tuple labels (#4192)

    Previously esbuild could incorrectly fail to parse certain keywords as TypeScript tuple labels that are parsed by the official TypeScript compiler if they were followed by a ? modifier. These labels included function, import, infer, new, readonly, and typeof. With this release, these keywords will now be parsed correctly. Here's an example of some affected code:

    type Foo = [
      value: any,
      readonly?: boolean, // This is now parsed correctly
    ]
    
  • Add CSS prefixes for the stretch sizing value (#4184)

    This release adds support for prefixing CSS declarations such as div { width: stretch }. That CSS is now transformed into this depending on what the --target= setting includes:

    div {
      width: -webkit-fill-available;
      width: -moz-available;
      width: stretch;
    }
    

0.25.4

  • Add simple support for CORS to esbuild's development server (#4125)

    Starting with version 0.25.0, esbuild's development server is no longer configured to serve cross-origin requests. This was a deliberate change to prevent any website you visit from accessing your running esbuild development server. However, this change prevented (by design) certain use cases such as "debugging in production" by having your production website load code from localhost where the esbuild development server is running.

    To enable this use case, esbuild is adding a feature to allow Cross-Origin Resource Sharing (a.k.a. CORS) for simple requests. Specifically, passing your origin to the new cors option will now set the Access-Control-Allow-Origin response header when the request has a matching Origin header. Note that this currently only works for requests that don't send a preflight OPTIONS request, as esbuild's development server doesn't currently support OPTIONS requests.

    Some examples:

    • CLI:

      esbuild --servedir=. --cors-origin=https://example.com
      
    • JS:

      const ctx = await esbuild.context({})
      await ctx.serve({
      

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+473
Deletions:
-421
Package Dependencies
Package:
@types/node
Ecosystem:
npm
Version Change:
22.15.7 → 22.15.29
Update Type:
Patch
Ecosystem:
npm
Version Change:
0.10.1 → 0.11.0
Update Type:
Minor
Package:
yargs
Ecosystem:
npm
Version Change:
17.7.2 → 18.0.0
Update Type:
Major
Package:
esbuild
Ecosystem:
npm
Version Change:
0.25.3 → 0.25.5
Update Type:
Patch
Package:
satori
Ecosystem:
npm
Version Change:
0.12.2 → 0.13.2
Update Type:
Minor
Package:
shiki
Ecosystem:
npm
Version Change:
1.26.2 → 3.4.2
Update Type:
Major
Package:
sharp
Ecosystem:
npm
Version Change:
0.34.1 → 0.34.2
Update Type:
Patch
Package:
flexsearch
Ecosystem:
npm
Version Change:
0.7.43 → 0.8.204
Update Type:
Minor
Ecosystem:
npm
Version Change:
1.7.0 → 1.7.1
Update Type:
Patch
Package:
preact
Ecosystem:
npm
Version Change:
10.26.5 → 10.26.8
Update Type:
Patch
Package:
workerpool
Ecosystem:
npm
Version Change:
9.2.0 → 9.3.2
Update Type:
Minor
Ecosystem:
npm
Version Change:
1.29.3 → 1.30.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.1.60 → 0.1.61
Update Type:
Patch
Technical Details
ID: 1258310
UUID: 2562239896
Node ID: PR_kwDOOo3TXs6YuK2Y
Host: GitHub
Repository: Pavan-Notes/pavan-notes.github.io
Merge State: Unknown