deps(web-app)(deps): bump the runtime-deps group across 1 directory with 4 updates

[dependabot]

Bumps the runtime-deps group with 4 updates in the /web-app directory: @mlc-ai/web-llm, js-yaml, papaparse and zarrita.

Updates @mlc-ai/web-llm from 0.2.82 to 0.2.84

Release notes

Sourced from @​mlc-ai/web-llm's releases.

v0.2.83

What's Changed

• Add support for cross-origin storage
• Support integrity verification for model artifacts
• Add subgroup support and subgroup wasm gating example
• Refactor llm_chat.ts function registration to be kv state-aware
• Upgrade tvmjs version to 0.24.0-dev3
• Fix rollup issues and upgrade miscellaneous dependencies

Full Changelog: mlc-ai/web-llm@v0.2.82...v0.2.83

Commits

• See full diff in compare view

Updates js-yaml from 4.1.1 to 5.1.0

Changelog

Sourced from js-yaml's changelog.

[5.1.0] - 2026-06-23

Added

• Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

• [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

• Added named exports for schemas, tags, parser events and AST utilities.
• Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.
• Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.
• Added dump() transform option for changing the generated AST before rendering.
• Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.
• Added formal data layers (events and AST) for modular data pipelines.
  • Added low-level parser (to events), presenter and visitor APIs.
• Added the YAML Test Suite to the test set.

Changed

• See the migration guide for upgrade notes.
• Rewritten in TypeScript and reorganized the public API around flat named exports.
• Reduced the set of exported schemas:
  • YAML 1.2 schemas: CORE_SCHEMA (loader default), JSON_SCHEMA, FAILSAFE_SCHEMA.
  • YAML11_SCHEMA, a combination of all YAML 1.1 tags (YAML 1.1 does not specify a schema, only "types").
• load/dump default behaviour is now specified exactly via schemas:
  • load uses CORE_SCHEMA, without !!merge by default.
  • dump uses YAML11_SCHEMA + CORE_SCHEMA for the quoting check, to guarantee backward compatibility by default.
• !!set is now loaded as a JavaScript Set.
• Replaced the Type API with a tags API. Similar, but more precise and simpler. See examples for details. Tags can be defined via defineScalarTag(), defineSequenceTag() and defineMappingTag(), or as a spread + override of an existing tag.
• Renamed Schema.extend() to Schema.withTags().
• Expanded YAML 1.2 conformance and improved handling of directives, document markers, block keys, multiline scalars, tag syntax and other things.
• load() now throws on empty input instead of returning undefined.
• Moved browser builds to the js-yaml/browser export.

... (truncated)

Commits

• f1e45cd 5.1.0 released
• 53b22be Fix constructor coverage
• a1eaa2b Fix quote style options and restore forceQuotes
• 0532e7d Add finalizers for immutable collection tags
• 9f00b91 tests: drop the rest of issues tests, move a small fraction of useful checks ...
• 6be5d46 tests: drop not actual or duplicating issue tests (covered in other places)
• a7c9766 Fix !!pairs coverage
• 75148bc 5.0.0 released
• 704b25d Quote document markers followed by whitespace
• 42dea28 Support complex !!pairs keys with realMapTag
• Additional commits viewable in compare view

Updates papaparse from 5.5.3 to 5.5.4

Changelog

Sourced from papaparse's changelog.

Changelog

Commits

• af51c9f Patch version bump
• a51bdc7 fix: correctly escape and quote custom quoteChar in unparse (#1124)
• cc8c801 Create CHANGELOG.md (#1119)
• b10b87e Use https on readme links (#1104)
• 565d821 Merge pull request #1102 from mholt/fix/issue-1024
• 8ecc42d confirms issue 1024 is resolveD
• 58bcb73 Mention BYTE_ORDER_MARK in documentation (#1096)
• 530357f Update Node versions (#1097)
• 08265f1 Strip BOM character from column keys when parsing header
• See full diff in compare view

Updates zarrita from 0.7.1 to 0.7.3

Release notes

Sourced from zarrita's releases.

zarrita@0.7.3

Patch Changes

• Fix sharded v3 reads when index_codecs does not include crc32c. The shard-index suffix length is now derived from the index codec pipeline instead of assuming a 4-byte checksum. (#426)

zarrita@0.7.2

Patch Changes

• Fix UnknownCodecError when reading zarr v2 arrays that use the bitround or json2 codec. (#416)

Commits

• c5d7a7d Version Packages (#425)
• 18703ab chore(deps-dev): bump the dev-dependencies group with 4 updates (#421)
• 56d1a15 chore(deps): bump actions/upload-pages-artifact from 4 to 5 (#420)
• 22b6ff4 chore(deps): bump pnpm/action-setup from 5 to 6 (#419)
• ac08d43 Fix sharded reads when index_codecs has no checksum (#426)
• 8a15067 Version Packages (#418)
• 4a2feb5 Version Packages (#417)
• a5049b1 Correct several mistakes in docs (#414)
• 28d884b Register numcodecs.bitround and numcodecs.json2 for v2 reads (#416)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, web-app. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[cloudflare-workers-and-pages]

Deploying tourguide with    Cloudflare Pages

Latest commit:	671ade5
Status:	🚫  Build failed.

View logs