build(deps): bump the npm-minor-patch group across 1 directory with 12 updates by dependabot[bot] · Pull Request #54 · fly1d/wordwise

dependabot · 2026-09-15T11:25:27Z

Bumps the npm-minor-patch group with 12 updates in the / directory:

Package	From	To
express-rate-limit	`8.6.2`	`8.7.0`
lucide-react	`1.31.0`	`1.45.0`
mammoth	`1.12.1`	`1.12.3`
multer	`2.2.0`	`2.3.0`
pdfjs-dist	`6.2.108`	`6.3.289`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.4`	`19.3.0`
@playwright/test	`1.62.1`	`1.63.0`
@types/node	`26.2.0`	`26.5.1`
tsx	`4.23.12`	`4.23.13`

Updates express-rate-limit from 8.6.2 to 8.7.0

Release notes

Sourced from express-rate-limit's releases.

v8.7.0

You can view the changelog here.

Commits

48db09e 8.7.0
dce5871 v8.7.0 changelog
2f08044 Add inspect.software health badge (#673)
a29757c feat: add retryAfter option (#661)
146e88b chore: rename license
5cfb8e8 ci: drop top-level id-token: write from the workflow token (#676)
062bbdd fix: re-wrap license.md so GitHub recognizes it as MIT (#675)
514772d chore(deps-dev): bump mintlify in the development-dependencies group (#674)
4f06c8a chore(deps-dev): bump the development-dependencies group with 2 updates (#671)
83356a5 chore(deps): bump ip-address from 10.4.0 to 10.5.0 (#672)
Additional commits viewable in compare view

Updates lucide-react from 1.31.0 to 1.45.0

Release notes

Sourced from lucide-react's releases.

Version 1.45.0

What's Changed

feat(icons): added calendar-chevrons-right icon by @AlexandrePhilibert in lucide-icons/lucide#3565

feat(icons): added building-complex-plus icon by @tylerkade in lucide-icons/lucide#4758

feat(icons): add hourglass-cog icon by @lazerg in lucide-icons/lucide#4635

feat(icons): added mouth & mouth-off by @karsa-mistmere in lucide-icons/lucide#4787

feat(icons): added iv-bag icon by @karsa-mistmere in lucide-icons/lucide#4821

fix(icons): changed lectern icon by @UsamaKhan in lucide-icons/lucide#2925

feat(icons): add layout-arrow-right and layout-arrow-down by @samuelalake in lucide-icons/lucide#4541

feat(icons): added park icon by @skajosborn in lucide-icons/lucide#3177

fix(icons): changed album, book-marked, folder-bookmark icons by @karsa-mistmere in lucide-icons/lucide#3043

fix(icons): correct misspelled tags by @decknamec in lucide-icons/lucide#4836

feat(icons): added houses icon by @danielbayley in lucide-icons/lucide#3241

feat(icons): added notebook-dot icon by @elenakovelskikh in lucide-icons/lucide#3228

feat(icons): add messages-circle icon by @Mirazstudio-offical in lucide-icons/lucide#4754

feat(icons): added plant-pot icon by @vqh2602 in lucide-icons/lucide#3122

fix(icons): changed cookie icon by @karsa-mistmere in lucide-icons/lucide#4815

fix(icons): remove duplicate use-cases prop from cookie.json by @karsa-mistmere in lucide-icons/lucide#4838

fix(site): fix home card icons by @karsa-mistmere in lucide-icons/lucide#4839

feat(docs): added "How to use Lucide icons" section to resources by @karsa-mistmere in lucide-icons/lucide#4829

fix(packages/vue): fix generated icon declaration types for @lucide/vue by @karsa-mistmere in lucide-icons/lucide#4841

chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 by @dependabot[bot] in lucide-icons/lucide#4845

chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 in /integrations/lucide-react/vite by @dependabot[bot] in lucide-icons/lucide#4844

ci(ci.yml): Add dispatch post release by @ericfennis in lucide-icons/lucide#4847

feat(icons): added globe-code icon by @AleksejDix in lucide-icons/lucide#3722

New Contributors

@tylerkade made their first contribution in lucide-icons/lucide#4758

@alx-xo made their first contribution in lucide-icons/lucide#4115

@skajosborn made their first contribution in lucide-icons/lucide#3177

@elenakovelskikh made their first contribution in lucide-icons/lucide#3228

@Mirazstudio-offical made their first contribution in lucide-icons/lucide#4754

@AleksejDix made their first contribution in lucide-icons/lucide#3722

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Version 1.44.0

What's Changed

feat(packages/icons): fixed @lucide/icons rollup config by @karsa-mistmere in lucide-icons/lucide#4824

fix(icons): changed door-open by @karsa-mistmere in lucide-icons/lucide#4826

fix(docs): replace missing LucideIcon icon names in guides by @karsa-mistmere in lucide-icons/lucide#4827

feat(docs): fixed fuse js search by @karsa-mistmere in lucide-icons/lucide#4825

fix(icons): changed satellite-dish icon by @karsa-mistmere in lucide-icons/lucide#4813

fix(icons): arcified flip icons & renamed them by @karsa-mistmere in lucide-icons/lucide#4833

fix(icons): improve legibility of credit card icons by @karsa-mistmere in lucide-icons/lucide#4831

feat(lab): add check-x icon by @ishanbagra18 in lucide-icons/lucide#4737

fix(icons): correct compromised tags in shield icons by @decknamec in lucide-icons/lucide#4835

feat(icons): added toothbrush icon by @karsa-mistmere in lucide-icons/lucide#4755

New Contributors

... (truncated)

Commits

94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
See full diff in compare view

Updates mammoth from 1.12.1 to 1.12.3

Changelog

Sourced from mammoth's changelog.

1.12.3

Avoid excessive backtracking when parsing an unterminated string with many escape sequences. The previous behaviour would allow maliciously crafted documents to cause a denial of service.

Note that it is still strongly recommended to process untrusted documents in a separate thread with a timeout to avoid potential similar issues.

Handle complex field separator and end characters without corresponding start characters.

1.12.2

Avoid prototype pollution when reading the styles defined in a document. This avoids an issue where a maliciously crafted document could be used to set externalFileAccess to true.

Commits

71fe5da Bump version to 1.12.3
5fe085d Update node to 26.8.2
f1fc26f Start warning with capital letter
62d4d33 Handle missing complex field start characters
dc49225 Avoid excessive backtracking when parsing unterminated strings
8706034 Bump version to 1.12.2
2888fa1 Create objects without prototypes when used as map with arbitrary keys
31f0c37 Avoid prototype pollution when reading styles
See full diff in compare view

Updates multer from 2.2.0 to 2.3.0

Release notes

Sourced from multer's releases.

v2.3.0

Important

Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm)

Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf)

Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72)

Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)

What's Changed

Update busboy link pointing to nonexistent section by @krzysdz in expressjs/multer#1447

Update outdated links to Express error handling guide by @krzysdz in expressjs/multer#1405

chore(deps): bump GitHub Actions and dev dependencies by @sheplu in expressjs/multer#1445

chore(ci): npm-publish via reusable workflows by @sheplu in expressjs/multer#1364

fix(tests): keep Git from rewriting fixture line endings on Windows by @MohammedAlkindi in expressjs/multer#1450

docs: correct fieldNameSize default in limits table by @UlisesGascon in expressjs/multer#1432

feat: normalize package.json by @UlisesGascon in expressjs/multer#1322

fix(test): use path.sep for cross-platform path assertions by @kilisamemarisaaa in expressjs/multer#1452

docs(changelog): fix typo 'comaptible' to 'compatible' by @ayushshukla1807 in expressjs/multer#1383

doc: adds context for link to Chinese README by @sunsheeppoplar in expressjs/multer#1369

docs: use crypto.randomBytes in diskStorage README example by @Hashim1999164 in expressjs/multer#1436

docs: clarify preservePath behavior by @vibhor-aggr in expressjs/multer#1414

docs: clarify parts limit behavior by @vibhor-aggr in expressjs/multer#1430

chore: increase test coverage by @wojtekmaj in expressjs/multer#1355

chore: drop deep-equal devDependency by @wojtekmaj in expressjs/multer#1353

docs: fix Chinese README translation by @vibhor-aggr in expressjs/multer#1429

Test: Enhance cross-platform test reliability and update CI workflow by @ShubhamOulkar in expressjs/multer#1334

fix: fallback to error code when no message mapping exists by @sahilraut191685 in expressjs/multer#1448

test: add coverage for preservePath by @kory-kaai in expressjs/multer#1454

fix: prevent process crash when fileFilter calls its callback more than once by @spokodev in expressjs/multer#1427

fix: preserve async hooks context in supported environments by @ajhyndman in expressjs/multer#1124

fix: allow files at exact fileSize limit by @raashish1601 in expressjs/multer#1407

fix: decode WHATWG-escaped characters in file originalname by @webdevelopersrinu in expressjs/multer#1421

docs: add Indonesian translation for README by @Derylfabiensyah in expressjs/multer#1431

test: accept files exactly at fileSize limit by @abhu85 in expressjs/multer#1382

docs: add Japanese translation to README by @noritaka1166 in expressjs/multer#1354

Update 'README-zh-cn.md' up to now by @pbstar in expressjs/multer#1264

feat: add an opt-in fieldArrayIndexLimit by @arpitjain099 in expressjs/multer#1438

docs: refresh all README translations by @UlisesGascon in expressjs/multer#1462

2.3.0 by @UlisesGascon in expressjs/multer#1455

New Contributors

@krzysdz made their first contribution in expressjs/multer#1447

@sheplu made their first contribution in expressjs/multer#1445

@MohammedAlkindi made their first contribution in expressjs/multer#1450

@kilisamemarisaaa made their first contribution in expressjs/multer#1452

@ayushshukla1807 made their first contribution in expressjs/multer#1383

@sunsheeppoplar made their first contribution in expressjs/multer#1369

@Hashim1999164 made their first contribution in expressjs/multer#1436

@vibhor-aggr made their first contribution in expressjs/multer#1414

@sahilraut191685 made their first contribution in expressjs/multer#1448

... (truncated)

Changelog

Sourced from multer's changelog.

2.3.0

Fix CVE-2026-77078 (GHSA-wc9g-mqfw-jrwm)

Fix CVE-2026-77037 (GHSA-qfvm-cv95-jqjf)

Fix CVE-2026-77063 (GHSA-qvfw-j98x-7q72)

Fix CVE-2026-82333 (GHSA-535w-7cp7-47q4)

Add MulterError codes INVALID_FIELD_NAME and STREAM_DESTROYED

Add opt-in limits.fieldArrayIndexLimit to bound numeric array indexes in field names (#1438)

Accept files whose size is exactly limits.fileSize (#1407)

Preserve the caller's async context (AsyncLocalStorage) when calling next() (#1124)

Decode WHATWG-escaped characters (%0A, %0D, %22) in file.originalname (#1421)

Do not crash when fileFilter invokes its callback more than once (#1427)

Use a fallback message for MulterError codes without a mapping (#1448)

Docs: clarify preservePath and parts, use crypto.randomBytes in the DiskStorage example (#1414, #1430, #1436)

Docs: add Indonesian, Japanese and Tamil translations and refresh all translations from the current README (#1431, #1354, #1462)

Internal: run the test suite on Windows (#1334)

Commits

4e8edf5 2.3.0 (#1455)
87a584e fix: reject invalid field names instead of crashing on append-field errors
ab6aeae fix: enforce file size limit with async fileFilter
eef7444 fix: destroy disk write stream on aborted uploads to prevent fd leak
25ec9bb docs: refresh all README translations (#1462)
73c1759 feat: add an opt-in fieldArrayIndexLimit (#1438)
ece6735 Update 'README-zh-cn.md' up to now (#1264)
3278e1b docs: add Japanese translation to README (#1354)
3c0bc5e test: accept files exactly at fileSize limit (#1382)
b6d84b0 docs: add Indonesian translation for README (#1431)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for multer since your current version.

Updates pdfjs-dist from 6.2.108 to 6.3.289

Release notes

Sourced from pdfjs-dist's releases.

v6.3.289

This release contains improvements for accessibility, annotation editing, annotation rendering, font conversion, image decoding, performance, text selection and the viewer.

Changes since v6.2.108

Bump the stable version in pdfjs.config by @timvandermeij in mozilla/pdf.js#21655

[Editor] Restore pinch-to-resize on an editor which came back from an undo by @calixteman in mozilla/pdf.js#21644

Use more more optional chaining in the src/ folder by @Snuffleupagus in mozilla/pdf.js#21661

Avoid duplicate shared object clones by @calixteman in mozilla/pdf.js#21658

Avoid mutating source widget parents by @calixteman in mozilla/pdf.js#21660

Fix the selection rendering when a page has been destroyed and rendered again (bug 2054348) by @calixteman in mozilla/pdf.js#21666

l10n: Update locale files by @sync-l10n-for-pdf-js[bot] in mozilla/pdf.js#21669

Sync the viewer chrome with the Firefox design system by @calixteman in mozilla/pdf.js#21665

[api-minor] Convert getJSActions to return data in a Map by @Snuffleupagus in mozilla/pdf.js#21664

Use the client coordinates for the pinch-zoom origin by @calixteman in mozilla/pdf.js#21659

Re-factor the EventBus to use Map/Set internally by @Snuffleupagus in mozilla/pdf.js#21673

Replace simple return if statements with ternary operators by @Snuffleupagus in mozilla/pdf.js#21672

Let pointerup/cancel propagate in TouchManager by @calixteman in mozilla/pdf.js#21674

Shorten the ViewHistory class a little bit by @Snuffleupagus in mozilla/pdf.js#21678

Don't throw on an invalid XML character reference by @calixteman in mozilla/pdf.js#21682

Fix the regex used to normalize css fonts in XFA by @calixteman in mozilla/pdf.js#21680

Trim the response headers with a backward scan by @calixteman in mozilla/pdf.js#21684

Find the PDF filename in a URL hash in two linear steps by @calixteman in mozilla/pdf.js#21685

Scan backwards to delete a word in a text field by @calixteman in mozilla/pdf.js#21687

Add scripts correctly in Field.prototype.setAction (PR 12569 follow-up) by @Snuffleupagus in mozilla/pdf.js#21691

Update dependencies to the most recent versions by @timvandermeij in mozilla/pdf.js#21689

Exclude "&" from the XML entity names by @calixteman in mozilla/pdf.js#21692

[api-minor] Convert getFieldObjects to return data in a Map by @Snuffleupagus in mozilla/pdf.js#21671

Anchor the regex used to extract the XFA path positions by @calixteman in mozilla/pdf.js#21686

Don't write numbers in exponential notation when saving a pdf by @calixteman in mozilla/pdf.js#21683

Bound the email parts in the autolinker regex by @calixteman in mozilla/pdf.js#21693

Safely serialize CSS font family names by @calixteman in mozilla/pdf.js#21694

Add a go to first/last menu-item helper method in the Menu class by @Snuffleupagus in mozilla/pdf.js#21690

Document how to use the viewer to open files by @martinthomson in mozilla/pdf.js#21695

Add integration tests for the Home/End keys in the Menu class by @calixteman in mozilla/pdf.js#21706

Bump undici from 7.28.0 to 7.29.0 by @dependabot[bot] in mozilla/pdf.js#21701

Bump github/codeql-action/analyze from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21705

Bump github/codeql-action/init from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21704

Bump github/codeql-action/autobuild from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21703

Shorten the Menu constructor a tiny bit by @Snuffleupagus in mozilla/pdf.js#21700

Enable the regexp/no-super-linear-move ESLint rule by @calixteman in mozilla/pdf.js#21708

Bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in mozilla/pdf.js#21712

Remove the ambiguity from the PostScript number regex by @calixteman in mozilla/pdf.js#21709

Avoid an infinite loop on cyclic field Parent chains by @calixteman in mozilla/pdf.js#21699

Enable a few more eslint-plugin-regexp rules by @calixteman in mozilla/pdf.js#21710

Give copied annotations distinct references by @calixteman in mozilla/pdf.js#21707

Use the MathClamp helper in the src/core/annotation.js file by @Snuffleupagus in mozilla/pdf.js#21715

Update PDFViewerApplication._initializeAutoPrint to handle getJSActions returning a Map (PR 21664 follow-up) by @Snuffleupagus in mozilla/pdf.js#21716

Move SCALE_MATRIX into CanvasGraphics and initialize its DOMMatrix lazily (issue 21720) by @Snuffleupagus in mozilla/pdf.js#21721

Convert TranslatedFont.prototype.loadType3Data to an asynchronous method by @Snuffleupagus in mozilla/pdf.js#21719

Don't re-encode the file parameter in the viewer by @calixteman in mozilla/pdf.js#21718

... (truncated)

Commits

1c8020a Merge pull request #21841 from Snuffleupagus/src-core-misc-fixes
67c035f Inline the PDFDocument.prototype._parseHasJSActions method
c58a275 Move some WorkerTask class field definitions out of the constructor
d1725ab Merge pull request #21837 from Snuffleupagus/rm-ColorSpace-getoutputlength
159dca9 Remove the unused getOutputLength method from the ColorSpace classes (PR ...
8801a6a Merge pull request #21835 from Snuffleupagus/getViewerPreferences-tests
08a0600 Merge pull request #21834 from Snuffleupagus/markInfo-Map
2895922 Improve unit-test coverage for the getViewerPreferences functionality
16b94d1 [api-minor] Convert markInfo to return data in a Map
c3257df Merge pull request #21833 from mozilla/update-locales
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /&g... Description has been truncated

…2 updates Bumps the npm-minor-patch group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.6.2` | `8.7.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.45.0` | | [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.1` | `1.12.3` | | [multer](https://github.com/expressjs/multer) | `2.2.0` | `2.3.0` | | [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.2.108` | `6.3.289` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.5.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` | Updates `express-rate-limit` from 8.6.2 to 8.7.0 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.6.2...v8.7.0) Updates `lucide-react` from 1.31.0 to 1.45.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.45.0/packages/lucide-react) Updates `mammoth` from 1.12.1 to 1.12.3 - [Release notes](https://github.com/mwilliamson/mammoth.js/releases) - [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS) - [Commits](mwilliamson/mammoth.js@1.12.1...1.12.3) Updates `multer` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v2.2.0...v2.3.0) Updates `pdfjs-dist` from 6.2.108 to 6.3.289 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](mozilla/pdf.js@v6.2.108...v6.3.289) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@playwright/test` from 1.62.1 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.1...v1.63.0) Updates `@types/node` from 26.2.0 to 26.5.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `tsx` from 4.23.12 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.13) --- updated-dependencies: - dependency-name: express-rate-limit dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: lucide-react dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: mammoth dependency-version: 1.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: multer dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: pdfjs-dist dependency-version: 6.3.289 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@playwright/test" dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/node" dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 15, 2026

Navigation Menu

build(deps): bump the npm-minor-patch group across 1 directory with 12 updates - #54

build(deps): bump the npm-minor-patch group across 1 directory with 12 updates#54
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-bc7a32ae9d

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 15, 2026

v8.7.0

Version 1.45.0

What's Changed

New Contributors

Version 1.44.0

What's Changed

New Contributors

1.12.3

1.12.2

v2.3.0

Important

What's Changed

New Contributors

2.3.0

v6.3.289

Changes since v6.2.108

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants