chore(deps): bump the production-dependencies group across 1 directory with 14 updates
Type: Pull Request
State: Open
Association: Unknown
Comments: 1
(10 days ago)
(3 days ago)
dependencies javascript
Bumps the production-dependencies group with 14 updates in the / directory:
| Package | From | To |
|---|---|---|
| @webgpu/types | 0.1.64 |
0.1.66 |
| chalk | 5.6.0 |
5.6.2 |
| is-absolute-url | 4.0.1 |
5.0.0 |
| minimatch | 10.0.3 |
10.1.1 |
| pixi.js | 8.13.2 |
8.14.0 |
| preact-render-to-string | 6.6.2 |
6.6.3 |
| rimraf | 6.0.1 |
6.1.0 |
| satori | 0.18.2 |
0.18.3 |
| sharp | 0.34.4 |
0.34.5 |
| shiki | 3.12.2 |
3.15.0 |
| workerpool | 9.3.4 |
10.0.0 |
| @types/node | 24.7.0 |
24.10.0 |
| @types/yargs | 17.0.33 |
17.0.34 |
| esbuild | 0.25.10 |
0.27.0 |
Updates @webgpu/types from 0.1.64 to 0.1.66
Commits
Updates chalk from 5.6.0 to 5.6.2
Release notes
Sourced from chalk's releases.
v5.6.2
- Fix vulnerability in 5.6.1, see: chalk/chalk#656
Commits
51557785.6.2- See full diff in compare view
Updates is-absolute-url from 4.0.1 to 5.0.0
Release notes
Sourced from is-absolute-url's releases.
v5.0.0
Breaking
- Require Node.js 20 430699d
- It now only allows
http://andhttps://protocols by default 05e1989
- To get the old behavior, pass in
{httpOnly: false}Improvements
- Add
httpOnlyoption and make it the default 05e1989
https://github.com/sindresorhus/is-absolute-url/compare/v4.0.1...v5.0.0
Commits
76c6aff5.0.005e1989AddhttpOnlyoption and make it the default430699dRequire Node.js 20- See full diff in compare view
Updates minimatch from 10.0.3 to 10.1.1
Changelog
Sourced from minimatch's changelog.
change log
10.1
- Add
magicalBracesoption forescape- Fix
makeRewhenpartial: trueis set.- Fix
makeRewhen pattern ends in a final**path part.10.0
- Require node 20 or 22 and higher
9.0
- No default export, only named exports.
8.0
- Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions
- Bump required Node.js version
7.4
- Add
escape()method- Add
unescape()method- Add
Minimatch.hasMagic()method7.3
- Add support for posix character classes in a unicode-aware way.
7.2
- Add
windowsNoMagicRootoption7.1
- Add
optimizationLevelconfiguration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.7.0
- Preprocess patterns to simplify complicated patterns and reduce out
..pattern portions where possible. Note that this means
... (truncated)
Commits
5b8337210.1.17ed71cddo not require * to match something if already matching something30efec4fix some typedoc comments and export types7a71a9010.1.08bc631achangelog 10.10a0a7a1Added missing periods for text consistencya1b68f2docs: fix typo6b88277remove unnecessary types for brace-expansion0d27f1cSupportmagicalBracesoption in escape/unescape281de34prettier- Additional commits viewable in compare view
Updates pixi.js from 8.13.2 to 8.14.0
Release notes
Sourced from pixi.js's releases.
v8.14.0
💾 Download
Installation:
npm install pixi.js@8.14.0Development Build:
- https://cdn.jsdelivr.net/npm/pixi.js@8.14.0/dist/pixi.js
- https://cdn.jsdelivr.net/npm/pixi.js@8.14.0/dist/pixi.mjs
Production Build:
- https://cdn.jsdelivr.net/npm/pixi.js@8.14.0/dist/pixi.min.js
- https://cdn.jsdelivr.net/npm/pixi.js@8.14.0/dist/pixi.min.mjs
Documentation:
Changed
https://github.com/pixijs/pixi.js/compare/v8.13.2...v8.14.0
🎁 Added
- feat: add asset loading strategies by
@Zyiein pixijs/pixijs#11693
- Three new loading strategies have been introduced:
throw,skip, andretry
throw: The default strategy and matches the behavior of previous versions. With this strategy enabled any asset that fails to load will throw an error and the promise will reject.skip: If any asset fails to load not error is thrown and the loader continues to load other assetsretry: Allow for multiple attempts at loading an asset before an error is thrown. The number of attempts and the delay between attempts are configurableconst options: LoadOptions = { strategy: 'retry', retryCount: 5, // Retry up to 5 times }; await Assets.load('unstable-asset.png', options);await Assets.init({ basePath, loadOptions: { strategy: 'skip', onError: (error, asset) => console.log(error, asset.url) }, });Assets.addBundle('testBundle', [
{ alias: 'bunny', src: 'textures/bunny_no_img.png' },
{ alias: 'bunny2', src: 'textures/bunny.png' },
]);// only bunny2 is defined and did not throw an error
const assets = await Assets.loadBundle('testBundle');
- feat: Adds progress size to asset loading by
@Zyiein pixijs/pixijs#11699
... (truncated)
Commits
4cfcbc0v8.14.05c2ec18feat: added rotate to Point math-extras (#11704)0833a7afeat: Adds progress size to asset loading (#11699)793f9c6fix: Allow IRenderLayer as part of the ContainerOptions children array (#11687)b549b04fix: removes accessibility system event listeners correctly (#11700)7057530fix: directly pass instanceCount to instanced draw when !== 1 (#11639)63f30c0fix: respect filter enabled state (#11674)3fb7bc8fix: ensureupdateTextBoundsis called regardless of style and resolution c...7fb35adfeat: add change guards to TextStyle setters to prevent redundant updates (#1...b021f26fix: incorrect accessibility div when recycled from the pool (#11679) (#11680)- Additional commits viewable in compare view
Updates preact-render-to-string from 6.6.2 to 6.6.3
Release notes
Sourced from preact-render-to-string's releases.
v6.6.3
Patch Changes
- #432
62c87e4Thanks@nwalters512! - Preserve whitespace in<pre>/<textarea>when usingpretty: true
Changelog
Sourced from preact-render-to-string's changelog.
6.6.3
Patch Changes
- #432
62c87e4Thanks@nwalters512! - Preserve whitespace in<pre>/<textarea>when usingpretty: true
Commits
1667556Merge pull request #434 from preactjs/chore/bump-npm-versione4d3b46ci: Ensure CI is using latest NPM version4fdcf11chore: Bump lockfile35bb4fbMerge pull request #433 from preactjs/changeset-release/mainef57cedVersion Packages69ed337Merge pull request #432 from nwalters512/pretty-format-preserve-whitespace96dfd13Update lockfile62c87e4Preserve whitespace for pre/textarea when pretty-printing- See full diff in compare view
Updates rimraf from 6.0.1 to 6.1.0
Changelog
Sourced from rimraf's changelog.
6.1
- Move to native
fs/promisesusage instead of promisifying manually.6.0
- Drop support for nodes before v20
- Add
--versionto CLI5.0
- No default export, only named exports
4.4
- Provide Dirent or Stats object as second argument to filter
4.3
- Return boolean indicating whether the path was fully removed
- Add filter option
- bin: add --verbose, -v to print files as they are deleted
- bin: add --no-verbose, -V to not print files as they are deleted
- bin: add -i --interactive to be prompted on each deletion
- bin: add -I --no-interactive to not be prompted on each deletion
- 4.3.1 Fixed inappropriately following symbolic links to directories
v4.2
- Brought back
globsupport, using the new and improved glob v9v4.1
- Improved hybrid module with no need to look at the
.defaultdangly bit..defaultpreserved as a reference torimraffor compatibility with anyone who came to rely on it in v4.0.- Accept and ignore
-rfand-frarguments to the bin.v4.0
- Remove
globdependency entirely. This library now only accepts actual file and folder names to delete.- Accept array of paths or single path.
- Windows performance and reliability improved.
- All strategies separated into explicitly exported methods.
- Drop support for Node.js below version 14
- rewrite in TypeScript
... (truncated)
Commits
18dc77a6.1.02bd2e62changelog 6.119311cfrefactor: switch to native fs.promises0c437d4Create separate dir for integration tests65a3b8aDo not pass unnecessary rest args to fs functions02b31b7Use the same ignoreENOENT and fixEPERM utils everywherec012f4fMock process.platform with t.interceptc72278aUse tap.intercept to test bin549d1e8Configure tap coverage-mapa76970bbenchmark: add options to filter and compare benchmarks- Additional commits viewable in compare view
Updates satori from 0.18.2 to 0.18.3
Release notes
Sourced from satori's releases.
0.18.3
0.18.3 (2025-09-15)
Bug Fixes
- Support forwardRef wrapped component (#601)
Commits
2a0878afix: Trigger release6d0d0dbSupport forwardRef wrapped component (#601)- See full diff in compare view
Updates sharp from 0.34.4 to 0.34.5
Release notes
Sourced from sharp's releases.
v0.34.5
Upgrade to libvips v8.17.3 for upstream bug fixes.
Add experimental support for prebuilt Linux RISC-V 64-bit binaries.
Support building from source with npm v12+, deprecate
--build-from-sourceflag. #4458Improve error messaging when only warnings issued. #4465
Simplify ICC processing when retaining input profiles. #4468
v0.34.5-rc.1
Upgrade to libvips v8.17.3 for upstream bug fixes.
Add experimental support for prebuilt Linux RISC-V 64-bit binaries.
Support building from source with npm v12+, deprecate
--build-from-sourceflag. #4458Improve error messaging when only warnings issued. #4465
Simplify ICC processing when retaining input profiles. #4468
v0.34.5-rc.0
... (truncated)
Commits
e062456Release v0.34.56450c70Prerelease v0.34.5-rc.1f7c95d1TypeScript: consolidate a few enum-like propertiesef86a75Prerelease v0.34.5-rc.06c1e840Use structured binding for tuples where possiblee1628d8Simplify ICC processing when retaining input profiles #44684f9f817Linter: apply all recommended biome settings09d5aa8Docs: update internal and libvips doc links040b73cUpgrade to libvips v8.17.31f2f33dEnsure licensing headers are retained by code bundlers- Additional commits viewable in compare view
Updates shiki from 3.12.2 to 3.15.0
Release notes
Sourced from shiki's releases.
v3.15.0
🚀 Features
- lang-ansi: Fallback for missing theme ANSI colors - by
@Chanakyasindeand@antfuin shikijs/shiki#1095 (f36ea)- transformers: Support
meta.indentfor indent guides - by@L33Z22L11in shikijs/shiki#1087 (d8f89)🐞 Bug Fixes
- Allow singleton highlighter recovery after invalid language error - by
@Maxiemadin shikijs/shiki#1091 (218c9)- vitepress-twoslash: Prevent popper show/hide on dragging - by
@bluwyin shikijs/shiki#1090 (29522)View changes on GitHub
v3.14.0
🚀 Features
🐞 Bug Fixes
- colorized-brackets: Fix default color does not work with colorized-brackets - by
@oatmealproblemin shikijs/shiki#1082 (f4d3f)View changes on GitHub
v3.13.0
🚀 Features
- transformers: Render indent guides - by
@KazariEXand@antfuin shikijs/shiki#1060 (aecd1)View changes on GitHub
v3.12.3
🐞 Bug Fixes
@shikijs/twoslashversion specifier - by@9romisein shikijs/shiki#1078 (a1cde)View changes on GitHub
Commits
63ab64bchore: release v3.15.0218c901fix: allow singleton highlighter recovery after invalid language error (#1091)c056371chore: update snapshot29f8914chore: release v3.14.026372e6feat: update grammars and themesfd7326achore: release v3.13.05cbb052chore: release v3.12.3- See full diff in compare view
Updates workerpool from 9.3.4 to 10.0.0
Changelog
Sourced from workerpool's changelog.
2025-10-21, version 10.0.0
BREAKING CHANGES:
- Feat: implement
queueStrategyoption (FIFO / LIFO / custom) (#518, #517). This is a new feature without changes in the public API, but the internal propertypool.tasksis changed intopool.taskQueue. So, changes are required if you rely on this internal property. Thanks@amaneru55- Feat: introduce a new
TerminateErrorclass to differentiate between a crash and a regular error (see #519, #520). TheTerminateErrorclass extends from the classErrorso no breaking changes in that regard. But some of the error messages are changed so if you have code that depends on the exact error messages you may need to change your code accordingly. Thanks@Julusian.
Commits
- See full diff in compare view
Updates @types/node from 24.7.0 to 24.10.0
Commits
- See full diff in compare view
Updates @types/yargs from 17.0.33 to 17.0.34
Commits
- See full diff in compare view
Updates esbuild from 0.25.10 to 0.27.0
Release notes
Sourced from esbuild's releases.
v0.27.0
This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of
esbuildin yourpackage.jsonfile (recommended) or be using a version range syntax that only accepts patch upgrades such as^0.26.0or~0.26.0. See npm's documentation about semver for more information.
Use
Uint8Array.fromBase64if available (#4286)With this release, esbuild's
binaryloader will now use the newUint8Array.fromBase64function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specifytargetwhen using this feature with Node (for example--target=node22) unless you're using Node v25+.Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)
This raises the operating system requirements for running esbuild:
- Linux: now requires a kernel version of 3.2 or later
- macOS: now requires macOS 12 (Monterey) or later
v0.26.0
Enable trusted publishing (#4281)
GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.
Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).
v0.25.12
Fix a minification regression with CSS media queries (#4315)
The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for
@media <media-type> and <media-condition-without-or> { ... }was missing an equality check for the<media-condition-without-or>part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.Update the list of known JavaScript globals (#4310)
This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global
Arrayproperty is considered to be side-effect free but accessing the globalscrollYproperty can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:From ES2017:
AtomicsSharedArrayBufferFrom ES2020:
BigInt64ArrayBigUint64ArrayFrom ES2021:
FinalizationRegistryWeakRefFrom ES2025:
Float16ArrayIteratorNote that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from
Iterator:// This can now be tree-shaken by esbuild:
... (truncated)
Changelog
Sourced from esbuild's changelog.
0.27.0
This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of
esbuildin yourpackage.jsonfile (recommended) or be using a version range syntax that only accepts patch upgrades such as^0.26.0or~0.26.0. See npm's documentation about semver for more information.
Use
Uint8Array.fromBase64if available (#4286)With this release, esbuild's
binaryloader will now use the newUint8Array.fromBase64function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specifytargetwhen using this feature with Node (for example--target=node22) unless you're using Node v25+.Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)
This raises the operating system requirements for running esbuild:
- Linux: now requires a kernel version of 3.2 or later
- macOS: now requires macOS 12 (Monterey) or later
0.26.0
Enable trusted publishing (#4281)
GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.
Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).
0.25.12
Fix a minification regression with CSS media queries (#4315)
The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for
@media <media-type> and <media-condition-without-or> { ... }was missing an equality check for the<media-condition-without-or>part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.Update the list of known JavaScript globals (#4310)
This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global
Arrayproperty is considered to be side-effect free but accessing the globalscrollYproperty can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:From ES2017:
AtomicsSharedArrayBufferFrom ES2020:
BigInt64ArrayBigUint64ArrayFrom ES2021:
FinalizationRegistryWeakRefFrom ES2025:
Float16ArrayIteratorNote that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from
Iterator:
... (truncated)
Commits
2b91699publish 0.27.0 to npm22b425cfix #4286: useUint8Array.fromBase64if present (#4295)6d187efupdate go 1.25.3 => 1.25.49d0d4e7update go 1.23.12 => 1.25.3 (#4318)b6979d8use a patched go compiler for release builds893d2b9delete temporaryrelease.ymlworkflowcee3918add a temporaryrelease.ymlworkflowf5bb1d6fixpublish.yml17ff82bpublish 0.26.0 to npmf87181fenable trusted publishing (#4319)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Technical Details
| ID: | 11089800 |
| UUID: | 3606237848 |
| Node ID: | PR_kwDOOraRoM6ycL2b |
| Host: | GitHub |
| Repository: | codeyoma/codeyoma.github.io |