Skip to content

chore(deps): bump the minor-and-patch group with 9 updates - #587

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-edb738265c
Open

chore(deps): bump the minor-and-patch group with 9 updates#587
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-edb738265c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 9 updates:

Package From To
@codemirror/view 6.43.14 6.43.15
@lezer/common 1.5.3 1.5.4
zustand 5.0.15 5.0.16
@babel/core 8.0.7 8.0.9
@napi-rs/canvas 1.0.11 1.0.13
@tauri-apps/cli 2.12.3 2.12.4
typescript-eslint 8.71.2 8.72.0
vite 8.3.4 8.3.5
@modelcontextprotocol/sdk 1.32.1 1.32.2

Updates @codemirror/view from 6.43.14 to 6.43.15

Commits

Updates @lezer/common from 1.5.3 to 1.5.4

Commits

Updates zustand from 5.0.15 to 5.0.16

Release notes

Sourced from zustand's releases.

v5.0.16

This version has some improvements thanks to contributors: @​MarshallOfSound @​koreahghg @​chungyo @​Godsdar

What's Changed

Full Changelog: pmndrs/zustand@v5.0.15...v5.0.16

Commits
  • 382d29c v5.0.16
  • b488323 chore(deps): update dev dependencies (#3593)
  • da2706c fix(persist): preserve external devtools action arguments (#3592)
  • a1fea2e fix(devtools): preserve shared connections during store cleanup (#3580)
  • d867e6f fix(devtools): apply serialize.reviver when parsing devtools messages (#3568)
  • dac22e1 perf(react): don't memoize getServerSnapshot in useStore (#3563)
  • d7a5583 Clarify maintainer-guided contribution workflow (#3587)
  • b57db4f docs(create): document that state cannot be read during initialization (#3569)
  • f094eeb ci: build the docs with pmndrs/docs@v4 (#3570)
  • ea612a5 docs: fix broken migrating-to-v5 link in README (#3567)
  • Additional commits viewable in compare view

Updates @babel/core from 8.0.7 to 8.0.9

Release notes

Sourced from @​babel/core's releases.

v8.0.9 (2026-10-23)

This release contains no changes. It is needed only to update the repo (which is based on @babel/core's last release) in Node.js's CITGM.

v8.0.8 (2026-10-23)

Thanks @​bhushan4work and @​webdevelopersrinu for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser
  • babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime
  • babel-plugin-transform-typescript, babel-types
  • babel-plugin-transform-block-scoping
    • #18331 fix: wrap enclosing loop when a nested for head closure captures its bindings (@​joellemd)

🏠 Internal

🔬 Output optimization

Committers: 7

Changelog

Sourced from @​babel/core's changelog.

Changelog

Tags:

  • 💥 [Breaking Change]
  • 👓 [Spec Compliance]
  • 🚀 [New Feature]
  • 🐛 [Bug Fix]
  • 📝 [Documentation]
  • 🏠 [Internal]
  • 💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v8.0.0-alpha.0.

v8.0.8 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser
  • babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime

... (truncated)

Commits

Updates @napi-rs/canvas from 1.0.11 to 1.0.13

Release notes

Sourced from @​napi-rs/canvas's releases.

v1.0.13

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.12...v1.0.13

v1.0.12

What's Changed

New Contributors

Full Changelog: Brooooooklyn/canvas@v1.0.11...v1.0.12

Changelog

Sourced from @​napi-rs/canvas's changelog.

1.0.13 (2026-10-21)

Bug Fixes

  • canvas: wrap native methods, not previous wrappers, on re-evaluation (#1395) (6997e1d)

1.0.12 (2026-10-20)

Bug Fixes

  • canvas: compositing, shadows, drawCanvas and filters like Chrome (#1379) (c6f06a6)
  • canvas: draw Image sources from Chrome's decode-cache levels (#1367) (7c3d0c2)
  • canvas: enable dithering for gradient fill and stroke paints (#1358) (5f95bd4)
  • canvas: gradients and SVG conic export work like Chrome (#1377) (4059399)
  • canvas: ImageData patterns and SvgCanvas reads like Chrome (#1363) (e2f6a83)
  • canvas: match Chrome for alpha:false, clearRect and 'copy' (#1365) (d82b79c)
  • canvas: match Chrome for hsl() colors and gradient edge cases (#1362) (17a4b3b)
  • canvas: parse fonts, lay out and measure text like Blink (#1381) (a43bb16)
  • canvas: paths, clips, roundRect and setTransform work like Chrome (#1375) (1299146)
  • canvas: preserve fractional global alpha through native paints (#1355) (2eb68bc)
  • canvas: preserve pattern snapshots and honor current image sampling quality (#1357) (65f4e7c)
  • canvas: style getters, shadowColor and canvas sizes like Chrome (#1376) (9bf7aef)
  • canvas: WebIDL conversion for ImageData, getContext, createPattern (#1361) (583b7e2)
  • canvas: WebIDL conversion, arity checks and exceptions like Chrome (#1373) (676047d)
  • codecs: Chrome's encoders, AVIF decode, data: URLs and SVG images (#1380) (b5b38a9)
  • crash-safe non-finite args, ImageData sizes, DOMMatrixInit (#1372) (004444b)
  • deps: pin font-types back to Skia's 0.12.0 (#1388) (57cd52b)
  • deps: update rust crate font-types to v0.12.7 (#1386) (61d89eb)
  • imagedata: ImageData and get/put/createImageData work like Chrome (#1374) (82eeacc)
  • reset style getters on resize, tag AVIF color, exact PDF alpha (#1364) (09b86b4)
  • retain display-p3 backing surfaces through context acquisition and resize (#1359) (0b502f6)

Features

  • canvas: float16 canvas storage and float ImageData formats (#1383) (5f841db)
  • canvas: rasterize text like Chrome with CoreText and Fontations (#1382) (4c9902a)
  • canvas: write DPI and text metadata in toBuffer, encode and encodeSync (#1390) (60f2df2)
  • chrome/m157 (#1391) (2c52f61)
  • color: CSS Color 4/5 at every canvas color site, like Chrome (#1378) (3be7099)
  • skia: build Skia with Chrome's CPU raster defines and blitters (#1366) (9eeb454)
  • svg: draw SVG images like Chrome: CSS, var(), , (#1384) (b04d0bc)
Commits
  • 00a115d 1.0.13
  • 6997e1d fix(canvas): wrap native methods, not previous wrappers, on re-evaluation (#1...
  • a89b3c9 1.0.12
  • b0e53ea chore: remove the benchmark (#1393)
  • 2c52f61 feat: chrome/m157 (#1391)
  • 60f2df2 feat(canvas): write DPI and text metadata in toBuffer, encode and encodeSync ...
  • 57cd52b fix(deps): pin font-types back to Skia's 0.12.0 (#1388)
  • 61d89eb fix(deps): update rust crate font-types to v0.12.7 (#1386)
  • b04d0bc feat(svg): draw SVG images like Chrome: CSS, var(), <use>, <image> (#1384)
  • 5f841db feat(canvas): float16 canvas storage and float ImageData formats (#1383)
  • Additional commits viewable in compare view

Updates @tauri-apps/cli from 2.12.3 to 2.12.4

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.12.4

[2.12.4]

Bug Fixes

  • 136a28eaa (#16305 by @​Chaosnico9000) Skip the --target validation when rustup target list fails, e.g. when rustup is on PATH but has no toolchain installed, instead of rejecting every target as missing.
  • 52081e04a (#16333 by @​amrbashir) Rename the misspelled choowHowToInstall NSIS language string to chooseHowToInstall. A custom language file in bundle.windows.nsis.customLanguageFiles that only defines the old name keeps working for now, but users should migrate to the new name.

Dependencies

  • Upgraded to tauri-cli@2.12.4
  • 4a6f51251 (#16317 by @​lazerg) Updated zip to v9 to fix RUSTSEC-2026-0367, RUSTSEC-2026-0368 and RUSTSEC-2026-0369.
Commits

Updates typescript-eslint from 8.71.2 to 8.72.0

Release notes

Sourced from typescript-eslint's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

  • eslint-plugin: lazy load rules (#13010)
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
  • typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

  • ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
  • eslint-plugin: [require-array-sort-compare] check tuples (#13058)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vite from 8.3.4 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
  • bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
  • bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
  • bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
  • bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
  • bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
  • bundled-dev: normalize served output files (#23684) (df4e02c)
  • bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
  • css: don't fail on a literal % in url() (#23676) (50b382d)
  • deps: update all non-major dependencies (#23731) (cf80aa5)
  • deps: update all non-major dependencies (#23826) (77d8373)
  • deps: update rolldown-related dependencies (#23733) (43f0d05)
  • deps: update rolldown-related dependencies (#23827) (c2e0418)
  • optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
  • optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
  • optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
  • optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
  • resolve: support subpath imports with multiple # (#23631) (0d86b34)
  • resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
  • server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
  • server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

  • ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

Code Refactoring

  • deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
  • dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
  • dev: separate import resolution from URL conversion (#23791) (6116689)
  • dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
  • dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)
Changelog

Sourced from vite's changelog.

8.3.5 (2026-10-21)

Bug Fixes

  • build: handle missing chunk import maps (#23777) (8d7623d)
  • build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
  • bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
  • bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
  • bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
  • bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
  • bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
  • bundled-dev: normalize served output files (#23684) (df4e02c)
  • bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
  • css: don't fail on a literal % in url() (#23676) (50b382d)
  • deps: update all non-major dependencies (#23731) (cf80aa5)
  • deps: update all non-major dependencies (#23826) (77d8373)
  • deps: update rolldown-related dependencies (#23733) (43f0d05)
  • deps: update rolldown-related dependencies (#23827) (c2e0418)
  • optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
  • optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
  • optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
  • optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
  • resolve: support subpath imports with multiple # (#23631) (0d86b34)
  • resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
  • server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
  • server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

  • ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

Code Refactoring

  • deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
  • dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
  • dev: separate import resolution from URL conversion (#23791) (6116689)
  • dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
  • dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)
Commits
  • 981f07f release: v8.3.5 (#23856)
  • 0d86b34 fix(resolve): support subpath imports with multiple # (#23631)
  • 6a02780 perf(ssr): extract inline source maps without a regexp (#23775)
  • 8e890e1 fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)
  • 197daf6 fix(bundled-dev): declare utf-8 charset in fallback page (#23846)
  • 4d16e7c fix(build): include preload dependencies to chunk import map hashing (#23793)
  • df7b40e refactor...

    Description has been truncated

@dependabot
chore(deps): bump the minor-and-patch group with 9 updates
24fc2f2 
Bumps the minor-and-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.14` | `6.43.15` |
| [@lezer/common](https://github.com/lezer-parser/common) | `1.5.3` | `1.5.4` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.15` | `5.0.16` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.7` | `8.0.9` |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `1.0.11` | `1.0.13` |
| [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.12.3` | `2.12.4` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.2` | `8.72.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.1` | `1.32.2` |


Updates `@codemirror/view` from 6.43.14 to 6.43.15
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@lezer/common` from 1.5.3 to 1.5.4
- [Changelog](https://github.com/lezer-parser/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/common/commits)

Updates `zustand` from 5.0.15 to 5.0.16
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.15...v5.0.16)

Updates `@babel/core` from 8.0.7 to 8.0.9
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.9/packages/babel-core)

Updates `@napi-rs/canvas` from 1.0.11 to 1.0.13
- [Release notes](https://github.com/Brooooooklyn/canvas/releases)
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md)
- [Commits](Brooooooklyn/canvas@v1.0.11...v1.0.13)

Updates `@tauri-apps/cli` from 2.12.3 to 2.12.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.12.3...@tauri-apps/cli-v2.12.4)

Updates `typescript-eslint` from 8.71.2 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

Updates `@modelcontextprotocol/sdk` from 1.32.1 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.1...1.32.2)

---
updated-dependencies:
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@lezer/common"
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zustand
  dependency-version: 5.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@babel/core"
  dependency-version: 8.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@napi-rs/canvas"
  dependency-version: 1.0.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@tauri-apps/cli"
  dependency-version: 2.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants