Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the production-dependencies group across 1 directory with 25 updates

Closed
Number: #85
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: November 17, 2025 at 01:28 PM UTC
(20 days ago)
Updated: November 24, 2025 at 01:51 PM UTC
(13 days ago)
Closed: November 24, 2025 at 01:51 PM UTC
(13 days ago)
Time to Close: 7 days
Labels:
dependencies javascript
Description:

Bumps the production-dependencies group with 25 updates in the / directory:

Package From To
@floating-ui/dom 1.7.1 1.7.4
@napi-rs/simple-git 0.1.19 0.1.22
chalk 5.4.1 5.6.2
flexsearch 0.8.205 0.8.212
globby 14.1.0 16.0.0
is-absolute-url 4.0.1 5.0.0
js-yaml 4.1.0 4.1.1
lightningcss 1.30.1 1.30.2
mermaid 11.6.0 11.12.1
pixi.js 8.10.1 8.14.1
pnpm 10.12.1 10.22.0
preact 10.26.8 10.27.2
preact-render-to-string 6.5.13 6.6.3
pretty-bytes 7.0.0 7.1.0
react 19.1.0 19.2.0
@types/react 19.1.6 19.2.5
rimraf 6.0.1 6.1.0
sass-migrator 2.3.2 2.4.2
satori 0.15.2 0.18.3
sharp 0.34.2 0.34.5
workerpool 9.3.2 10.0.0
ws 8.18.2 8.18.3
@types/yargs 17.0.33 17.0.35
esbuild 0.25.5 0.27.0
tsx 4.19.4 4.20.6

Updates @floating-ui/dom from 1.7.1 to 1.7.4

Release notes

Sourced from @​floating-ui/dom's releases.

@​floating-ui/dom@​1.7.4

Patch Changes

  • fix(getViewportRect): account for space left by scrollbar-gutter: stable

@​floating-ui/dom@​1.7.3

Patch Changes

  • Update dependencies: @floating-ui/core@1.7.3

@​floating-ui/dom@​1.7.2

Patch Changes

  • perf: reduce memory allocations
  • Update dependencies: @floating-ui/utils@0.2.10, @floating-ui/core@1.7.2
Changelog

Sourced from @​floating-ui/dom's changelog.

1.7.4

Patch Changes

  • fix(getViewportRect): account for space left by scrollbar-gutter: stable

1.7.3

Patch Changes

  • Update dependencies: @floating-ui/core@1.7.3

1.7.2

Patch Changes

  • perf: reduce memory allocations
  • Update dependencies: @floating-ui/utils@0.2.10, @floating-ui/core@1.7.2
Commits

Updates @napi-rs/simple-git from 0.1.19 to 0.1.22

Release notes

Sourced from @​napi-rs/simple-git's releases.

v0.1.22

What's Changed

New Contributors

Full Changelog: https://github.com/Brooooooklyn/simple-git/compare/v0.1.21...v0.1.22

v0.1.21

What's Changed

Full Changelog: https://github.com/Brooooooklyn/simple-git/compare/v0.1.20...v0.1.21

v0.1.20

What's Changed

... (truncated)

Commits
  • 7d01607 0.1.22
  • 5792944 chore: fix preversion script
  • 6cbeb6e chore: clippy fix and npm trusted publisher (#99)
  • a1dfc9b chore(deps): update actions/download-artifact action to v5 (#97)
  • 919cd79 ci: replace unmaintained goto-bus-stop/setup-zig with mlugg/setup-zig action ...
  • 3b580ef 0.1.21
  • a36a282 fix: link libz.a on Linux x64 gnu (#95)
  • bb9e05e chore(deps): update cross-platform-actions/action action to v0.29.0 (#94)
  • dea17f8 0.1.20
  • b66275d feat: upgrade to NAPI-RS 3.0 (#93)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​napi-rs/simple-git since your current version.


Updates chalk from 5.4.1 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

v5.6.0

  • Make WezTerm terminal use true color a8f5bf7

https://github.com/chalk/chalk/compare/v5.5.0...v5.6.0

v5.5.0

  • Make Ghostty terminal use true color (#653) 79ee2d3

https://github.com/chalk/chalk/compare/v5.4.1...v5.5.0

Commits

Updates flexsearch from 0.8.205 to 0.8.212

Commits

Updates globby from 14.1.0 to 16.0.0

Release notes

Sourced from globby's releases.

v16.0.0

Breaking

  • Respect parent .gitignore files when gitignore option is enabled b9a9a84
    • When {gitignore: true}, Globby now searches for .gitignore files up to the Git repo root (if detected). This matches Git's actual behavior where parent .gitignore patterns apply to subdirectories. Previously, only .gitignore files within the glob search path were considered. This change could break existing code that relied on the previous, more limited behavior.

Improvements

  • Support negation-only patterns 1273541
  • Respect custom fs implementation from options c2eb272
  • Add some more options to isGitIgnored functions e794ff9
  • Improve error message for invalid cwd option 7535e6d

Fixes

  • Fix {gitignore: true} performance issue fcb07c3
  • Fix bundler compatibility e6c72c9
  • Fix parent directory patterns with gitignore option 11dd2df
  • Fix ignore patterns with parent directory references a58d117
  • Fix types for stats option c10f600

https://github.com/sindresorhus/globby/compare/v15.0.0...v16.0.0

v15.0.0

Breaking

  • Require Node.js 20 4ae42c8

Fixes

  • Fix expandDirectories not working with globstar patterns 98d691a
  • Fix relative paths with gitignore option b4d78d8
  • Fix gitignore patterns in subdirectories not applying recursively 2cb6088
  • Fix TypeScript types for globbyStream to correctly yield strings 1c7f3ed

https://github.com/sindresorhus/globby/compare/v14.1.0...v15.0.0

Commits
  • cdbb6a2 16.0.0
  • e6c72c9 Fix bundler compatibility
  • b9a9a84 Respect parent .gitignore files when gitignore option is enabled
  • db9cb72 Add test for suppressErrors option with file patterns
  • 69e0ee7 Add test for ignore option with trailing slashes
  • 11dd2df Fix parent directory patterns with gitignore option
  • e4d0918 Add tests for special characters in directory names
  • f926132 Improve path check in gitignore logic
  • 7535e6d Improve error message for invalid cwd option
  • c10f600 Fix types for stats option
  • Additional commits viewable in compare view

Updates is-absolute-url from 4.0.1 to 5.0.0

Release notes

Sourced from is-absolute-url's releases.

v5.0.0

Breaking

  • Require Node.js 20 430699d
  • It now only allows http:// and https:// protocols by default 05e1989
    • To get the old behavior, pass in {httpOnly: false}

Improvements

  • Add httpOnly option and make it the default 05e1989

https://github.com/sindresorhus/is-absolute-url/compare/v4.0.1...v5.0.0

Commits

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates lightningcss from 1.30.1 to 1.30.2

Release notes

Sourced from lightningcss's releases.

v1.30.2

Fixes

Rust crate changes

Commits

Updates mermaid from 11.6.0 to 11.12.1

Release notes

Sourced from mermaid's releases.

mermaid@11.12.1

Patch Changes

mermaid@11.12.0

Minor Changes

Patch Changes

mermaid@11.11.0

Minor Changes

  • #6704 012530e Thanks @​omkarht! - feat: Added support for new participant types (actor, boundary, control, entity, database, collections, queue) in sequenceDiagram.

  • #6802 c8e5027 Thanks @​darshanr0107! - feat: Update mindmap rendering to support multiple layouts, improved edge intersections, and new shapes

Patch Changes

mermaid@11.10.1

Patch Changes

mermaid@11.10.0

Minor Changes

Patch Changes

  • #6857 b9ef683 Thanks @​knsv! - feat: Exposing elk configuration forceNodeModelOrder and considerModelOrder to the mermaid configuration

... (truncated)

Commits
  • 762b44c Merge pull request #7108 from mermaid-js/changeset-release/master
  • 02c0091 Version Packages
  • 16359ad Merge pull request #7107 from mermaid-js/patch/dagre-d3-es-7.0.13
  • 061632c Update .changeset/slick-wasps-bathe.md
  • cbf8946 fix: update dagre-d3-es to version 7.0.13
  • ad82448 Merge pull request #7053 from mermaid-js/changeset-release/master
  • 9498619 Version Packages
  • 7a8557a Merge pull request #7036 from mermaid-js/knsv-patch-1
  • 74863c9 Merge pull request #7051 from mermaid-js/patch-parser-release
  • 63df702 chore: added changeset file
  • Additional commits viewable in compare view

Updates pixi.js from 8.10.1 to 8.14.1

Release notes

Sourced from pixi.js's releases.

v8.14.1

💾 Download

Installation:

npm install pixi.js@8.14.1

Development Build:

Production Build:

Documentation:

Changed

https://github.com/pixijs/pixijs/compare/v8.14.0...v8.14.1

🐛 Fixed

🧹 Chores

v8.14.0

💾 Download

Installation:

npm install pixi.js@8.14.0

Development Build:

Production Build:

Documentation:

... (truncated)

Commits

Updates pnpm from 10.12.1 to 10.22.0

Release notes

Sourced from pnpm's releases.

pnpm 10.22

Minor Changes

  • Added support for trustPolicyExclude #10164.

    You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

    trustPolicy: no-downgrade
trustPolicyExclude:
  - chokidar@4.0.3
  - webpack@4.47.0 || 5.102.1

  • Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

  • Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #10179.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.22.0

Minor Changes

  • Added support for trustPolicyExclude #10164.

    You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

    trustPolicy: no-downgrade
trustPolicyExclude:
  - chokidar@4.0.3
  - webpack@4.47.0 || 5.102.1

  • Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

  • Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #10179.

10.21.0

Minor Changes

  • Node.js Runtime Installation for Dependencies. Added support for automatic Node.js runtime installation for dependencies. pnpm will now install the Node.js version required by a dependency if that dependency declares a Node.js runtime in the "engines" field. For example:

    {
  "engines": {
    "runtime": {
      "name": "node",
      "version": "^24.11.0",
      "onFail": "download"
    }
  }
}

    If the package with the Node.js runtime dependency is a CLI app, pnpm will bind the CLI app to the required Node.js version. This ensures that, regardless of the globally installed Node.js instance, the CLI will use the compatible version of Node.js.

    If the package has a postinstall script, that script will be executed using the specified Node.js version.

    Related PR: #10141

  • Added a new setting: trustPolicy.

    When set to no-downgrade, pnpm will fail installation if a package’s trust level has decreased compared to previous releases — for example, if it was previously published by a trusted publisher but now only has provenance or no trust evidence. This helps prevent installing potentially compromised versions of a package.

... (truncated)

Commits
  • 1de6d19 chore(release): 10.22.0
  • 93d4954 feat: add support for trustPolicyExclude (#10168)
  • c1ec45b chore: fix repository URLs in package.json files of utils
  • 2e2dc27 chore(release): 10.21.0
  • 68ad086 feat: add support for npm package trust evidence check via a new trustPolicy ...
  • 17344ca fix(update): prevent package.json updates when updating indirect dependencies...
  • 5847af4 feat: install js runtime as prod dependency (#10141)
  • 49f03d1 chore(release): 10.20.0
  • 5c27936 fix(create): create command should not verify patch info (#10122)
  • 6e9ad42 feat: support -a option in pnpm --help to list all commands (#8628)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for pnpm since your current version.


Updates preact from 10.26.8 to 10.27.2

Release notes

Sourced from preact's releases.

10.27.2

Types

Fixes

10.27.1

Performance

Types

Fixes

Maintenance

10.27.0

Features

Fixes

  • Ensure we rerender after a suspensefully hydrating boundary throws an… (#4856, thanks @​JoviDeCroock)

Maintenance

10.26.9

Fixes

... (truncated)

Commits

Updates preact-render-to-string from 6.5.13 to 6.6.3

Release notes

Sourced from preact-render-to-string's releases.

v6.6.3

Patch Changes

v6.6.2

Patch Changes

v6.6.1

Patch Changes

v6.6.0

Minor Changes

Patch Changes

Changelog

Sourced from preact-render-to-string's changelog.

6.6.3

Patch Changes

6.6.2

Patch Changes

6.6.1

Patch Changes

6.6.0

Minor Changes

Patch Changes

  • #413 27f340b Thanks @​f0x52! - Fix async rendering of multiple suspended components in a single Suspense boundary
Package Dependencies
Package:
 @types/react
Ecosystem:
npm
Version Change:
19.1.6 → 19.2.5
Update Type:
Minor
Package:
ws
Ecosystem:
npm
Version Change:
8.18.2 → 8.18.3
Update Type:
Patch
Package:
esbuild
Ecosystem:
npm
Version Change:
0.25.5 → 0.27.0
Update Type:
Minor
Package:
rimraf
Ecosystem:
npm
Version Change:
6.0.1 → 6.1.0
Update Type:
Minor
Package:
react
Ecosystem:
npm
Version Change:
19.1.0 → 19.2.0
Update Type:
Minor
Package:
tsx
Ecosystem:
npm
Version Change:
4.19.4 → 4.20.6
Update Type:
Minor
Package:
is-absolute-url
Ecosystem:
npm
Version Change:
4.0.1 → 5.0.0
Update Type:
Major
Package:
satori
Ecosystem:
npm
Version Change:
0.15.2 → 0.18.3
Update Type:
Minor
Package:
pixi.js
Ecosystem:
npm
Version Change:
8.10.1 → 8.14.1
Update Type:
Minor
Package:
chalk
Ecosystem:
npm
Version Change:
5.4.1 → 5.6.2
Update Type:
Minor
Package:
sharp
Ecosystem:
npm
Version Change:
0.34.2 → 0.34.5
Update Type:
Patch
Package:
mermaid
Ecosystem:
npm
Version Change:
11.6.0 → 11.12.1
Update Type:
Minor
Package:
flexsearch
Ecosystem:
npm
Version Change:
0.8.205 → 0.8.212
Update Type:
Patch
Package:
pnpm
Ecosystem:
npm
Version Change:
10.12.1 → 10.22.0
Update Type:
Minor
Package:
@floating-ui/dom
Ecosystem:
npm
Version Change:
1.7.1 → 1.7.4
Update Type:
Patch
Package:
preact
Ecosystem:
npm
Version Change:
10.26.8 → 10.27.2
Update Type:
Minor
Package:
workerpool
Ecosystem:
npm
Version Change:
9.3.2 → 10.0.0
Update Type:
Major
Package:
js-yaml
Ecosystem:
npm
Version Change:
4.1.0 → 4.1.1
Update Type:
Patch
Package:
lightningcss
Ecosystem:
npm
Version Change:
1.30.1 → 1.30.2
Update Type:
Patch
Package:
pretty-bytes
Ecosystem:
npm
Version Change:
7.0.0 → 7.1.0
Update Type:
Minor
Package:
globby
Ecosystem:
npm
Version Change:
14.1.0 → 16.0.0
Update Type:
Major
Package:
sass-migrator
Ecosystem:
npm
Version Change:
2.3.2 → 2.4.2
Update Type:
Minor
Package:
preact-render-to-string
Ecosystem:
npm
Version Change:
6.5.13 → 6.6.3
Update Type:
Minor
Package:
@napi-rs/simple-git
Ecosystem:
npm
Version Change:
0.1.19 → 0.1.22
Update Type:
Patch
Package:
@types/yargs
Ecosystem:
npm
Version Change:
17.0.33 → 17.0.35
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 11336453
UUID: 3633347233
Node ID: PR_kwDOIhknRc6z23M4
Host: GitHub
Repository: float3/float3.github.io