An open index of dependabot pull requests across open source projects.

Bump the production-dependencies group across 1 directory with 16 updates

Closed
Number: #10
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 1
Created: September 15, 2025 at 08:23 AM UTC
(6 months ago)
Updated: September 22, 2025 at 07:38 AM UTC
(6 months ago)
Closed: September 22, 2025 at 07:38 AM UTC
(6 months ago)
Time to Close: 7 days
Labels:
dependencies javascript
Description:

Bumps the production-dependencies group with 16 updates in the / directory:

Package From To
@floating-ui/dom 1.7.2 1.7.4
@napi-rs/simple-git 0.1.21 0.1.22
ansi-truncate 1.2.0 1.4.0
flexsearch 0.7.43 0.8.212
is-absolute-url 4.0.1 5.0.0
pixi.js 8.11.0 8.13.2
preact 10.27.0 10.27.2
preact-render-to-string 6.5.13 6.6.1
pretty-bytes 7.0.0 7.0.1
satori 0.16.1 0.18.2
shiki 1.26.2 3.12.2
workerpool 9.3.3 9.3.4
@types/node 24.1.0 24.4.0
esbuild 0.25.8 0.25.9
tsx 4.20.3 4.20.5
typescript 5.8.3 5.9.2

Updates @floating-ui/dom from 1.7.2 to 1.7.4

Release notes

Sourced from @​floating-ui/dom's releases.

@​floating-ui/dom@​1.7.4

Patch Changes

  • fix(getViewportRect): account for space left by scrollbar-gutter: stable

@​floating-ui/dom@​1.7.3

Patch Changes

  • Update dependencies: @floating-ui/core@1.7.3
Changelog

Sourced from @​floating-ui/dom's changelog.

1.7.4

Patch Changes

  • fix(getViewportRect): account for space left by scrollbar-gutter: stable

1.7.3

Patch Changes

  • Update dependencies: @floating-ui/core@1.7.3
Commits

Updates @napi-rs/simple-git from 0.1.21 to 0.1.22

Release notes

Sourced from @​napi-rs/simple-git's releases.

v0.1.22

What's Changed

New Contributors

Full Changelog: https://github.com/Brooooooklyn/simple-git/compare/v0.1.21...v0.1.22

Commits
  • 7d01607 0.1.22
  • 5792944 chore: fix preversion script
  • 6cbeb6e chore: clippy fix and npm trusted publisher (#99)
  • a1dfc9b chore(deps): update actions/download-artifact action to v5 (#97)
  • 919cd79 ci: replace unmaintained goto-bus-stop/setup-zig with mlugg/setup-zig action ...
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​napi-rs/simple-git since your current version.


Updates ansi-truncate from 1.2.0 to 1.4.0

Commits

Updates flexsearch from 0.7.43 to 0.8.212

Release notes

Sourced from flexsearch's releases.

v0.8.2

  • Config-Serialized Query Caches, Improved caching strategy for Document indexes and Resolver
  • Resolver Async Processing Workflow (including Queuing)
  • Extended Resolver Support: Worker, Persistent, Cache
  • Extended Result Highlighting: Boundaries, Ellipsis, Alignment
  • Improved TypeScript Typings
  • Improved Stemmer Handling
  • Improved Result Highlighting
  • Use multi-language charset normalization as the default Encoder
  • Simplified charset support for multi-language content
  • Charset renamed LatinExact => Exact, LatinDefault => Default and LatinSimple => Normalize, these are universal charset presets for any languages
  • Charset ArabicDefault and CyrillicDefault was removed, they are fully covered by the default universal charset presets
  • Charset Charset.CjkDefault was renamed to Charset.CJK

v0.8.1

  • Resolver Support for Documents
  • Asynchronous Runtime Balancer, new option priority
  • Export/Import Worker Indexes + Document Worker, new extern config options export and import
  • Improved interoperability of the different build packages, including source folder
  • Support custom filter function for encoder (stop-word filter)

v0.8.0

  • Persistent indexes support for: IndexedDB (Browser), Redis, SQLite, Postgres, MongoDB, Clickhouse
  • Enhanced language customization via the new Encoder class
  • Result Highlighting
  • Query performance achieve results up to 4.5 times faster compared to the previous generation v0.7.x by also improving the quality of results
  • Enhanced support for larger indexes or larger result sets
  • Improved offset and limit processing achieve up to 100 times faster traversal performance through large datasets
  • Support for larger In-Memory index with extended key size (the defaults maximum keystore limit is: 2^24)
  • Greatly enhanced performance of the whole text encoding pipeline
  • Improved indexing of numeric content (Triplets)
  • Intermediate result sets and Resolver
  • Basic Resolver: and, or, xor, not, limit, offset, boost, resolve
  • Improved charset collection
  • New charset preset soundex which further reduces memory consumption by also increasing "fuzziness"
  • Performance gain when polling tasks to the index by using "Event-Loop-Caches"
  • Up to 100 times faster deletion/replacement when not using the additional "fastupdate" register
  • Regex Pre-Compilation (transforms hundreds of regex rules into just a few)
  • Extended support for multiple tags (DocumentIndex)
  • Custom Fields ("Virtual Fields")
  • Custom Filter
  • Custom Score Function
  • Added French language preset (stop-word filter, stemmer)
  • Enhanced Worker Support
  • Export / Import index in chunks
  • Improved Build System + Bundler (Supported: CommonJS, ESM, Global Namespace), also the import of language packs are now supported for Node.js
  • Full covering index.d.ts type definitions
  • Fast-Boot Serialization optimized for Server-Side-Rendering (PHP, Python, Ruby, Rust, Java, Go, Node.js, ...)
Changelog

Sourced from flexsearch's changelog.

Changelog

Current Version

  • Calling index.clear() on a persistent Index does not stack to the task queue by default (which executes on commit), instead it will execute immediately and return a Promise
  • Added new tokenizer tolerant, inherits from strict but also matches simple typos like missing letters and swapped letters
  • Improved Redis Cleanup
  • Resolver: Support Result Highlighting

v0.8.2

  • Config-Serialized Query Caches, Improved caching strategy for Document indexes and Resolver
  • Resolver Async Processing Workflow (including Queuing)
  • Extended Resolver Support: Worker, Persistent, Cache
  • Extended Result Highlighting: Boundaries, Ellipsis, Alignment
  • Improved TypeScript Typings
  • Improved Stemmer Handling
  • Improved Result Highlighting
  • Use multi-language charset normalization as the default Encoder
  • Simplified charset support for multi-language content
  • Charset renamed LatinExact => Exact, LatinDefault => Default and LatinSimple => Normalize, these are universal charset presets for any languages
  • Charset ArabicDefault and CyrillicDefault was removed, they are fully covered by the default universal charset presets
  • Charset Charset.CjkDefault was renamed to Charset.CJK

v0.8.1

  • Resolver Support for Documents
  • Asynchronous Runtime Balancer, new option priority
  • Export/Import Worker Indexes + Document Worker, new extern config options export and import
  • Improved interoperability of the different build packages, including source folder
  • Support custom filter function for encoder (stop-word filter)

v0.8.0

  • Persistent indexes support for: IndexedDB (Browser), Redis, SQLite, Postgres, MongoDB, Clickhouse
  • Enhanced language customization via the new Encoder class
  • Result Highlighting
  • Query performance achieve results up to 4.5 times faster compared to the previous generation v0.7.x by also improving the quality of results
  • Enhanced support for larger indexes or larger result sets
  • Improved offset and limit processing achieve up to 100 times faster traversal performance through large datasets
  • Support for larger In-Memory index with extended key size (the defaults maximum keystore limit is: 2^24)
  • Greatly enhanced performance of the whole text encoding pipeline
  • Improved indexing of numeric content (Triplets)
  • Intermediate result sets and Resolver
  • Basic Resolver: and, or, xor, not, limit, offset, boost, resolve
  • Improved charset collection
  • New charset preset soundex which further reduces memory consumption by also increasing "fuzziness"
  • Performance gain when polling tasks to the index by using "Event-Loop-Caches"
  • Up to 100 times faster deletion/replacement when not using the additional "fastupdate" register
  • Regex Pre-Compilation (transforms hundreds of regex rules into just a few)

... (truncated)

Commits

Updates is-absolute-url from 4.0.1 to 5.0.0

Release notes

Sourced from is-absolute-url's releases.

v5.0.0

Breaking

  • Require Node.js 20 430699d
  • It now only allows http:// and https:// protocols by default 05e1989
    • To get the old behavior, pass in {httpOnly: false}

Improvements

  • Add httpOnly option and make it the default 05e1989

https://github.com/sindresorhus/is-absolute-url/compare/v4.0.1...v5.0.0

Commits

Updates pixi.js from 8.11.0 to 8.13.2

Release notes

Sourced from pixi.js's releases.

v8.13.2

💾 Download

Installation:

npm install pixi.js@8.13.2

Development Build:

Production Build:

Documentation:

Changed

https://github.com/pixijs/pixi.js/compare/v8.13.1...v8.13.2

🐛 Fixed

v8.13.1

💾 Download

Installation:

npm install pixi.js@8.13.1

Development Build:

Production Build:

Documentation:

Changed

https://github.com/pixijs/pixi.js/compare/v8.13.0...v8.13.1

🐛 Fixed

... (truncated)

Commits

Updates preact from 10.27.0 to 10.27.2

Release notes

Sourced from preact's releases.

10.27.2

Types

Fixes

10.27.1

Performance

Types

Fixes

Maintenance

Commits

Updates preact-render-to-string from 6.5.13 to 6.6.1

Release notes

Sourced from preact-render-to-string's releases.

v6.6.1

Patch Changes

v6.6.0

Minor Changes

Patch Changes

Changelog

Sourced from preact-render-to-string's changelog.

6.6.1

Patch Changes

6.6.0

Minor Changes

Patch Changes

  • #413 27f340b Thanks @​f0x52! - Fix async rendering of multiple suspended components in a single Suspense boundary
  • #417 441dea2 Thanks @​rschristian! - Only abort/report errors from renderToPipeableStream() if the stream hasn't already been closed
Commits

Updates pretty-bytes from 7.0.0 to 7.0.1

Release notes

Sourced from pretty-bytes's releases.

v7.0.1

  • Fix precision with the binary option (#88) c9fd951

https://github.com/sindresorhus/pretty-bytes/compare/v7.0.0...v7.0.1

Commits

Updates satori from 0.16.1 to 0.18.2

Release notes

Sourced from satori's releases.

0.18.2

0.18.2 (2025-09-02)

Bug Fixes

  • Support passing instantiated wasm instance to init() (#709) (5bcd097), closes #693

0.18.1

0.18.1 (2025-08-29)

Bug Fixes

0.18.0

0.18.0 (2025-08-28)

Features

  • added obj fit to image (#703) (4a7d0bc)
  • Standalone build to support providing WASM binary manually (#705) (f24d911), closes #693

0.16.2

0.16.2 (2025-07-29)

Bug Fixes

Commits

Updates shiki from 1.26.2 to 3.12.2

Release notes

Sourced from shiki's releases.

v3.12.2

   🐞 Bug Fixes

    View changes on GitHub

v3.12.1

No significant changes

    View changes on GitHub

v3.12.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.11.0

   🚀 Features

    View changes on GitHub

v3.10.0

   🚀 Features

    View changes on GitHub

v3.9.2

   🚀 Features

    View changes on GitHub

v3.9.1

   🚀 Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for shiki since your current version.


Updates workerpool from 9.3.3 to 9.3.4

Changelog

Sourced from workerpool's changelog.

2025-09-10, version 9.3.4

  • Fix: #516 improve error handling for errors containing nested classes by using their .toJSON method when available.
Commits

Updates @types/node from 24.1.0 to 24.4.0

Commits

Updates esbuild from 0.25.8 to 0.25.9

Release notes

Sourced from esbuild's releases.

v0.25.9

  • Better support building projects that use Yarn on Windows (#3131, #3663)

    With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

    1. Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive
    2. Some developers put their projects on the D: drive
    3. Yarn generates relative paths that use ../.. to get from the project directory to the cache directory
    4. Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)
    5. I didn't have access to a Windows machine for testing this edge case

    Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.

  • Preserve parentheses around function expressions (#4252)

    The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

    Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:

    // Original code
    const fn0 = () => 0
    const fn1 = (() => 1)
    console.log(fn0, function() { return fn1() }())
    

    // Old output
    const fn0 = () => 0;
    const fn1 = () => 1;
    console.log(fn0, function() {
    return fn1();
    }());

    // New output
    const fn0 = () => 0;
    const fn1 = (() => 1);
    console.log(fn0, (function() {
    return fn1();
    })());

    Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.

  • Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

    This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.

Changelog

Sourced from esbuild's changelog.

0.25.9

  • Better support building projects that use Yarn on Windows (#3131, #3663)

    With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

    1. Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive
    2. Some developers put their projects on the D: drive
    3. Yarn generates relative paths that use ../.. to get from the project directory to the cache directory
    4. Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)
    5. I didn't have access to a Windows machine for testing this edge case

    Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.

  • Preserve parentheses around function expressions (#4252)

    The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

    Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:

    // Original code
    const fn0 = () => 0
    const fn1 = (() => 1)
    console.log(fn0, function() { return fn1() }())
    

    // Old output
    const fn0 = () => 0;
    const fn1 = () => 1;
    console.log(fn0, function() {
    return fn1();
    }());

    // New output
    const fn0 = () => 0;
    const fn1 = (() => 1);
    console.log(fn0, (function() {
    return fn1();
    })());

    Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.

  • Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

    This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.

Commits

Updates tsx from 4.20.3 to 4.20.5

Release notes

Sourced from tsx's releases.

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

  • handle ambiguous packages (796053a)

This release is also available on:

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes


This release is also available on:

Commits
  • e6d1a47 docs: obfuscate aside classname
  • de2719d style: remove unused variable
  • 13f2954 chore: upgrade docs deps
  • 0504525 chore: upgrade manten
  • 132fdd8 test: assert require.cache
  • f057e7d test: require loop
  • a6f8f9f refactor: getFormat to handle all formats
  • 796053a fix: handle ambiguous packages
  • 471997a test: CJS & ESM race condition
  • a639836 fix: override Node's native TS formats (#733)
  • Additional commits viewable in compare view

Updates typescript from 5.8.3 to 5.9.2

Release notes

Sourced from typescript's releases.

TypeScript 5.9

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 RC

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • be86783 Give more specific errors for verbatimModuleSyntax (#62113)
  • 22ef577 LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250714...
  • d5a414c Don't ...

    Description has been truncated

Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+372
Deletions:
-326
Package Dependencies
Package:
@types/node
Ecosystem:
npm
Version Change:
24.1.0 → 24.4.0
Update Type:
Minor
Package:
typescript
Ecosystem:
npm
Version Change:
5.8.3 → 5.9.2
Update Type:
Minor
Package:
esbuild
Ecosystem:
npm
Version Change:
0.25.8 → 0.25.9
Update Type:
Patch
Package:
tsx
Ecosystem:
npm
Version Change:
4.20.3 → 4.20.5
Update Type:
Patch
Ecosystem:
npm
Version Change:
4.0.1 → 5.0.0
Update Type:
Major
Package:
satori
Ecosystem:
npm
Version Change:
0.16.1 → 0.18.2
Update Type:
Minor
Package:
pixi.js
Ecosystem:
npm
Version Change:
8.11.0 → 8.13.2
Update Type:
Minor
Package:
shiki
Ecosystem:
npm
Version Change:
1.26.2 → 3.12.2
Update Type:
Major
Package:
flexsearch
Ecosystem:
npm
Version Change:
0.7.43 → 0.8.212
Update Type:
Minor
Ecosystem:
npm
Version Change:
1.7.2 → 1.7.4
Update Type:
Patch
Package:
preact
Ecosystem:
npm
Version Change:
10.27.0 → 10.27.2
Update Type:
Patch
Package:
workerpool
Ecosystem:
npm
Version Change:
9.3.3 → 9.3.4
Update Type:
Patch
Ecosystem:
npm
Version Change:
7.0.0 → 7.0.1
Update Type:
Patch
Ecosystem:
npm
Version Change:
6.5.13 → 6.6.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.1.21 → 0.1.22
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.2.0 → 1.4.0
Update Type:
Minor
Technical Details
ID: 7749693
UUID: 2828280280
Node ID: PR_kwDOPU-37s6olCHY
Host: GitHub
Repository: devidd22/Blog-Learning-Scripting
Mergeable: Yes
Merge State: Clean