Chore(deps): Bump the production-dependencies group across 1 directory with 29 updates - #874
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/production-dependencies-4ee91bcb0f
branch
3 times, most recently
from
September 30, 2026 17:16
b2fb4f7 to
885f114
Compare
…y with 29 updates Bumps the production-dependencies group with 29 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.1` | `6.20.3` | | [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.11.1` | | [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.0` | `6.5.2` | | [@codemirror/language](https://github.com/codemirror/language) | `6.12.3` | `6.12.4` | | [@codemirror/search](https://github.com/codemirror/search) | `6.6.0` | `6.7.2` | | [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.6` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.8` | `6.43.13` | | [@lezer/highlight](https://github.com/lezer-parser/highlight) | `1.2.3` | `1.2.5` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.1` | | [@replit/codemirror-vim](https://github.com/replit/codemirror-vim/tree/HEAD/packages/codemirror-vim) | `6.3.0` | `6.4.0` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.12.0` | | [chokidar](https://github.com/paulmillr/chokidar) | `4.0.3` | `5.0.0` | | [docx](https://github.com/dolanmiu/docx) | `9.7.1` | `9.8.0` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.16` | | [font-list](https://github.com/oldj/node-font-list) | `2.0.2` | `2.1.0` | | [function-plot](https://github.com/mauriciopoppe/function-plot) | `1.25.3` | `1.25.4` | | [harper.js](https://github.com/automattic/harper/tree/HEAD/packages/harper.js) | `2.7.0` | `2.10.0` | | [highlight.js](https://github.com/highlightjs/highlight.js) | `11.11.1` | `11.12.0` | | [jsxgraph](https://github.com/jsxgraph/jsxgraph) | `1.12.2` | `1.13.3` | | [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.9` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.0` | `12.0.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.9` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.3.0` | | [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.8.0` | `1.9.0` | | [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.0.15` | | [@codemirror/lang-html](https://github.com/codemirror/lang-html) | `6.4.11` | `6.4.12` | | [@lezer/common](https://github.com/lezer-parser/common) | `1.5.2` | `1.5.3` | Updates `@codemirror/autocomplete` from 6.20.1 to 6.20.3 - [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/autocomplete/commits) Updates `@codemirror/commands` from 6.10.3 to 6.11.1 - [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/commands/commits) Updates `@codemirror/lang-markdown` from 6.5.0 to 6.5.2 - [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/lang-markdown/commits) Updates `@codemirror/language` from 6.12.3 to 6.12.4 - [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/language/commits) Updates `@codemirror/search` from 6.6.0 to 6.7.2 - [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/search/commits) Updates `@codemirror/state` from 6.7.1 to 6.7.6 - [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/state/commits) Updates `@codemirror/view` from 6.43.8 to 6.43.13 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@lezer/highlight` from 1.2.3 to 1.2.5 - [Changelog](https://github.com/lezer-parser/highlight/blob/main/CHANGELOG.md) - [Commits](https://github.com/lezer-parser/highlight/commits) Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.1) Updates `@replit/codemirror-vim` from 6.3.0 to 6.4.0 - [Changelog](https://github.com/replit/codemirror-vim/blob/master/packages/codemirror-vim/CHANGELOG.md) - [Commits](https://github.com/replit/codemirror-vim/commits/v6.4.0/packages/codemirror-vim) Updates `@xyflow/react` from 12.11.2 to 12.12.0 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.0/packages/react) Updates `chokidar` from 4.0.3 to 5.0.0 - [Release notes](https://github.com/paulmillr/chokidar/releases) - [Commits](paulmillr/chokidar@4.0.3...5.0.0) Updates `docx` from 9.7.1 to 9.8.0 - [Release notes](https://github.com/dolanmiu/docx/releases) - [Commits](dolanmiu/docx@9.7.1...9.8.0) Updates `dompurify` from 3.4.14 to 3.4.16 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.14...3.4.16) Updates `font-list` from 2.0.2 to 2.1.0 - [Commits](https://github.com/oldj/node-font-list/commits) Updates `function-plot` from 1.25.3 to 1.25.4 - [Release notes](https://github.com/mauriciopoppe/function-plot/releases) - [Commits](mauriciopoppe/function-plot@v1.25.3...v1.25.4) Updates `harper.js` from 2.7.0 to 2.10.0 - [Release notes](https://github.com/automattic/harper/releases) - [Commits](https://github.com/automattic/harper/commits/v2.10.0/packages/harper.js) Updates `highlight.js` from 11.11.1 to 11.12.0 - [Release notes](https://github.com/highlightjs/highlight.js/releases) - [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md) - [Commits](highlightjs/highlight.js@11.11.1...11.12.0) Updates `jsxgraph` from 1.12.2 to 1.13.3 - [Release notes](https://github.com/jsxgraph/jsxgraph/releases) - [Changelog](https://github.com/jsxgraph/jsxgraph/blob/main/CHANGELOG.md) - [Commits](jsxgraph/jsxgraph@v1.12.2...v1.13.3) Updates `katex` from 0.16.47 to 0.18.9 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.47...v0.18.9) Updates `mermaid` from 11.17.0 to 12.0.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.0...mermaid@12.0.0) Updates `prettier` from 3.8.3 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.3...3.9.9) Updates `react` from 18.3.1 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `react-dom` from 18.3.1 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `smol-toml` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/squirrelchat/smol-toml/releases) - [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.0) Updates `ws` from 8.21.3 to 8.22.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.3...8.22.0) Updates `zustand` from 5.0.12 to 5.0.15 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.12...v5.0.15) Updates `@codemirror/lang-html` from 6.4.11 to 6.4.12 - [Changelog](https://github.com/codemirror/lang-html/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/lang-html/commits) Updates `@lezer/common` from 1.5.2 to 1.5.3 - [Changelog](https://github.com/lezer-parser/common/blob/main/CHANGELOG.md) - [Commits](https://github.com/lezer-parser/common/commits) --- updated-dependencies: - dependency-name: "@codemirror/autocomplete" dependency-version: 6.20.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/commands" dependency-version: 6.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@codemirror/lang-html" dependency-version: 6.4.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/lang-markdown" dependency-version: 6.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/language" dependency-version: 6.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/search" dependency-version: 6.7.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@codemirror/state" dependency-version: 6.7.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/view" dependency-version: 6.43.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@lezer/common" dependency-version: 1.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@lezer/highlight" dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@replit/codemirror-vim" dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@xyflow/react" dependency-version: 12.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: chokidar dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: docx dependency-version: 9.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: dompurify dependency-version: 3.4.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: font-list dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: function-plot dependency-version: 1.25.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: harper.js dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: highlight.js dependency-version: 11.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: jsxgraph dependency-version: 1.13.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: katex dependency-version: 0.18.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mermaid dependency-version: 12.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: smol-toml dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: ws dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zustand dependency-version: 5.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/production-dependencies-4ee91bcb0f
branch
from
October 1, 2026 16:07
885f114 to
153957c
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-dependencies group with 29 updates in the / directory:
6.20.16.20.36.10.36.11.16.5.06.5.26.12.36.12.46.6.06.7.26.7.16.7.66.43.86.43.131.2.31.2.51.29.01.30.16.3.06.4.012.11.212.12.04.0.35.0.09.7.19.8.03.4.143.4.162.0.22.1.01.25.31.25.42.7.02.10.011.11.111.12.01.12.21.13.30.16.470.18.911.17.012.0.03.8.33.9.918.3.119.3.018.3.119.3.01.8.01.9.08.21.38.22.05.0.125.0.156.4.116.4.121.5.21.5.3Updates
@codemirror/autocompletefrom 6.20.1 to 6.20.3Commits
Updates
@codemirror/commandsfrom 6.10.3 to 6.11.1Commits
Updates
@codemirror/lang-markdownfrom 6.5.0 to 6.5.2Commits
Updates
@codemirror/languagefrom 6.12.3 to 6.12.4Commits
Updates
@codemirror/searchfrom 6.6.0 to 6.7.2Commits
Updates
@codemirror/statefrom 6.7.1 to 6.7.6Commits
Updates
@codemirror/viewfrom 6.43.8 to 6.43.13Commits
Updates
@lezer/highlightfrom 1.2.3 to 1.2.5Commits
Updates
@modelcontextprotocol/sdkfrom 1.29.0 to 1.30.1Release notes
Sourced from @modelcontextprotocol/sdk's releases.
Commits
289ac2cchore: bump version to 1.30.1 (#2848)12b4256fix(auth): preserve resource URI without trailing slash (#1968) (#1972)a9f6eb7[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...2d889f2chore: bump version to 1.30.0 (#2563)e3f3daaFix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...bb5a718fix(deps): widen@hono/node-serverpast GHSA-frvp-7c67-39w9 (#2549)1dad263fix: send SSE keep-alive comment frames from Streamable HTTP server transport...69749aaValidate Content-Type by parsed media type instead of substring match (v1.x) ...369513dfix: support Zod 3.25 method literals (#2368)e7ee57cv1 stdio buffer limit (#2239)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
@replit/codemirror-vimfrom 6.3.0 to 6.4.0Changelog
Sourced from @replit/codemirror-vim's changelog.
Commits
71ebb276.4.0 (#273)2b8d015Address security vulnrabilities in packages (#272)263bfbbMove from yarn to pnpm, use direnv (#271)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@replit/codemirror-vimsince your current version.Updates
@xyflow/reactfrom 12.11.2 to 12.12.0Release notes
Sourced from @xyflow/react's releases.
... (truncated)
Changelog
Sourced from @xyflow/react's changelog.
... (truncated)
Commits
8716946chore(packages): bump9fd41fdchore(packages): bump19f9c2afix(react/store): reset defaultEdgeOptions2acefb5fix(react/store): reset functions #59918f0a5d6chore(packages): bump286816cchore(packages): bump3319ef4fix(react): keep minimap bounds at the viewport when all nodes are hiddenb7186f3fix(react): minimap still works after reactflow remounts #5971d8edc77Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...59b1a60Simplify node click handling in MiniMap componentUpdates
chokidarfrom 4.0.3 to 5.0.0Release notes
Sourced from chokidar's releases.
Commits
c0c8d20Release 5.0.0.b211cecRemove src from npm8742246Upgrade dev deps, jsbt, ci files. Upgrade readdirp to v5.de5a34cMerge pull request #1442 from paulmillr/flaky-bunsc08a6c4fix: throttle based on dir + target0c55ab3test: wait for explicit calls in directory testce81be5perf: re-use double slash regex (#1435)7d9c1edMerge pull request #1433 from paulmillr/super-matrices3915541Merge pull request #1430 from paulmillr/esm-only9308bedchore: use Nodejs 24 in CI (#1432)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for chokidar since your current version.
Updates
docxfrom 9.7.1 to 9.8.0Release notes
Sourced from docx's releases.
... (truncated)
Commits
fa24a5echore: Version bump (#3555)edb96fbfix: write Normal as the default paragraph style, so Pages draws math at its ...7ada74ffeat: docx/math, with matrices, cases, equations lined up with numbers, and b...e0ff13echore: organise the demos into a folder for each topic (#3552)371fb18feat: support run properties on ImageRun (#3547)714148adocs: charts from Mermaid's pie and XY charts (#3551)b04040cfeat: stock, pie of pie and bar of pie charts, categories in groups, trendlin...b7a4bb6feat: new data for a template's charts, with ChartDataPatch (#3549)62f4ecdfeat: charts in templates, with patchDocument (#3548)43a4e0cfeat: combo, radar and bubble charts, and more chart options (#3546)Updates
dompurifyfrom 3.4.14 to 3.4.16Release notes
Sourced from dompurify's releases.
Commits
b9b9d80release: 3.4.16 (#1636)1d7460crelease: 3.4.15 (#1609)Updates
font-listfrom 2.0.2 to 2.1.0Commits
Updates
function-plotfrom 1.25.3 to 1.25.4Release notes
Sourced from function-plot's releases.
Commits
861e2f21.25.458a7830chore: bump dependenciesUpdates
harper.jsfrom 2.7.0 to 2.10.0Release notes
Sourced from harper.js's releases.
... (truncated)
Commits
e2773c6Release 2.10.01a4b5dbRelease 2.9.1253c5f7Release 2.9.05d2053bRelease 2.8.0Updates
highlight.jsfrom 11.11.1 to 11.12.0Release notes
Sourced from highlight.js's releases.
... (truncated)
Changelog
Sourced from highlight.js's changelog.