Skip to content

build(deps): bump the production-dependencies group across 1 directory with 13 updates - #497

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-73078c1fec
Open

build(deps): bump the production-dependencies group across 1 directory with 13 updates#497
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-73078c1fec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 13 updates in the / directory:

Package From To
@ant-design/icons 6.3.2 6.3.4
@babel/parser 7.29.8 8.0.7
@inquirer/ansi 2.0.7 2.0.9
@inquirer/core 12.0.1 12.0.5
@inquirer/figures 2.0.8 2.0.9
@inquirer/prompts 8.7.0 8.7.4
@inquirer/type 4.1.0 4.2.0
antd 6.6.2 6.6.6
dompurify 3.4.16 3.4.17
es-module-lexer 2.3.2 3.0.4
marked 18.0.11 18.1.1
mermaid 11.17.2 12.2.0
yaml 2.9.0 2.9.1

Updates @ant-design/icons from 6.3.2 to 6.3.4

Commits

Updates @babel/parser from 7.29.8 to 8.0.7

Release notes

Sourced from @​babel/parser's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

v8.0.6 (2026-09-18)

Thanks @​robhogan for your first PR!

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @​babel/parser's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

v8.0.6 (2026-09-18)

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

... (truncated)

Commits

Updates @inquirer/ansi from 2.0.7 to 2.0.9

Release notes

Sourced from @​inquirer/ansi's releases.

@​inquirer/i18n@​1.3.0

What's new

  • Added the toggleMask help tip for the new password reveal shortcut (ctrl+t).
  • yesLabel/noLabel now pass straight through as keywords for localized confirm parsing (replacing the hintYes/hintNo locale fields).

What's fixed

  • Localized yes/no answers are now matched per-locale (e.g. Spanish s, French o, Chinese 是/否) instead of only English y/n.

Dependencies

  • @inquirer/core bumped to ^12.0.1
  • @inquirer/type bumped to ^4.1.0

@​inquirer/i18n@​1.2.0

Dependencies

  • @inquirer/core bumped to ^12.0.0
  • @inquirer/prompts bumped to ^8.6.0

No source changes.

@​inquirer/figures@​2.0.8

No source changes. Bumped to keep in lockstep with the @inquirer/* release train.

@​inquirer/i18n@​1.0.0

New package - first release!

Drop-in replacement for @inquirer/prompts with localized text.

Commits
  • a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
  • 61be5df chore: Publish new release
  • 7dc77e2 fix(search): prevent submissions while the prompt is loading
  • 73b5eab docs: document Deno installation (#2269)
  • 79a092a ci: add Deno compatibility test suite (#2271)
  • 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
  • e928543 chore: bump yarn to 4.18.1 via corepack
  • 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
  • 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
  • eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/ansi since your current version.


Updates @inquirer/core from 12.0.1 to 12.0.5

Release notes

Sourced from @​inquirer/core's releases.

@​inquirer/core@​12.0.5

What's new

  • Cancelling or aborting a prompt before its deferred first render no longer invokes the prompt view after settlement — the pending setImmediate is now cancelled during cleanup, preventing keypress listener reinstalls and writes to an ended output stream (#2318, relates to #1816). Preserves the buffered-input behavior from #2007 and extends the settlement cleanup contract from #2255.

@​inquirer/core@​12.0.4

What's new

  • The internal deferred-promise polyfill now uses withResolver from @inquirer/type instead of a core-local PromisePolyfill class (#2291).

Dependencies

  • @inquirer/type bumped to ^4.2.0 — new withResolver export (#2291)

@​inquirer/core@​12.0.3

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach useKeypress handlers after the prompt was done, cancelled, or aborted. Hook effects are now cleared in the synchronous settlement path (#2255, closes #1816).
  • Prompts created with an already-aborted signal now run the terminal cleanup (restore the cursor, close the readline interface, end the output stream) instead of leaking them (#2255).
Commits
  • ea3130e chore: Publish new release
  • 3663711 chore: ignore test-only file changes in lerna versioning (#2319)
  • 2faf5a2 fix(@​inquirer/core): cancel pending initial render on cleanup (#2318)
  • af8b2c1 fix(number): treat whitespace-only input as empty (#2307)
  • 754a1ad chore(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 (#2316)
  • d5bb9ca chore(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#2315)
  • dc00e15 chore(deps): Bump github/codeql-action/init from 4.38.2 to 4.38.3 (#2314)
  • a9c11e5 chore(deps-dev): Bump turbo from 2.11.6 to 2.11.7 in the build group (#2313)
  • a68b220 chore(deps-dev): Bump the linting group with 5 updates (#2311)
  • 46db96f chore(deps): Bump github/codeql-action/analyze from 4.38.2 to 4.38.3 (#2310)
  • Additional commits viewable in compare view

Updates @inquirer/figures from 2.0.8 to 2.0.9

Commits
  • 5748bd9 chore: Publish new release
  • 269ae73 fix: pin @​inquirer/type exactly in published manifests
  • 927d6dd fix(@​inquirer/testing): keep keypress simulation working under TERM=dumb
  • 2d813b1 chore(deps): Bump @​humanfs/node from 0.16.6 to 0.16.8 (#2245)
  • 7affbc9 chore(deps-dev): Bump turbo from 2.10.9 to 2.10.11 in the build group (#2243)
  • 56db989 chore(deps-dev): Bump oxfmt in the formatting group (#2242)
  • 8e6bc3c chore(deps-dev): Bump the linting group with 2 updates (#2241)
  • 427b7a1 chore(deps-dev): Bump the testing group with 3 updates (#2240)
  • 51ac389 chore: Publish new release
  • 0f1718e feat(@​inquirer/password): add ctrl+t toggle to reveal password
  • Additional commits viewable in compare view

Updates @inquirer/prompts from 8.7.0 to 8.7.4

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.4

What's new

  • checkbox() no longer accepts edits or submissions while an async validator is pending — the selection is captured at submit time, and repeated Enter presses don't run the validator more than once (@inquirer/checkbox, #2296).
  • Prompt output no longer leaks when a prompt is cancelled or aborted before its first render — the deferred initial render is now cancelled during cleanup, so a settled prompt never writes to an ended output stream or reinstalls keypress listeners (@inquirer/core, #2318, relates to #1816).
  • number() now treats whitespace-only input as empty, so a space-padded submit resolves to the default/undefined answer instead of a validation error (@inquirer/number, #2307).
  • Packages with only test-file changes are no longer version-bumped at release time (internal tooling; #2319).

Included

  • @inquirer/checkbox@^5.2.7
  • @inquirer/confirm@^6.3.4
  • @inquirer/editor@^5.3.5
  • @inquirer/expand@^5.1.7
  • @inquirer/input@^5.1.8
  • @inquirer/number@^4.2.5
  • @inquirer/password@^5.2.4
  • @inquirer/rawlist@^5.3.7
  • @inquirer/search@^4.3.5
  • @inquirer/select@^5.2.7

@​inquirer/prompts@​8.7.3

What's new

  • search() no longer submits a stale choice when Enter is pressed while an async search is still loading — the prompt waits for the fresh results, the query is preserved, and repeated Enter presses during validation no longer run the async validator more than once (@inquirer/search, #2291, closes #2290).
  • confirm() now always accepts the single keystrokes y/n even with localized keywords, and unrecognized input no longer silently falls back on the default answer (@inquirer/confirm, #2281, closes #2279).
  • expand() and rawlist() now ignore surrounding whitespace in answers (@inquirer/expand, @inquirer/rawlist, #2280).
  • All package READMEs now document the Deno install command (deno add npm:@inquirer/prompts) alongside the npm/yarn/pnpm/bun ones (#2269).

Included

  • @inquirer/checkbox@^5.2.6
  • @inquirer/confirm@^6.3.3
  • @inquirer/editor@^5.3.4
  • @inquirer/expand@^5.1.6
  • @inquirer/input@^5.1.7
  • @inquirer/number@^4.2.4
  • @inquirer/password@^5.2.3
  • @inquirer/rawlist@^5.3.6
  • @inquirer/search@^4.3.4
  • @inquirer/select@^5.2.6

@​inquirer/prompts@​8.7.2

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #2255, closes #1816).
  • confirm() now trims surrounding whitespace from answers before matching yes/no keywords (@inquirer/confirm, #2254).

... (truncated)

Commits
  • ea3130e chore: Publish new release
  • 3663711 chore: ignore test-only file changes in lerna versioning (#2319)
  • 2faf5a2 fix(@​inquirer/core): cancel pending initial render on cleanup (#2318)
  • af8b2c1 fix(number): treat whitespace-only input as empty (#2307)
  • 754a1ad chore(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 (#2316)
  • d5bb9ca chore(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#2315)
  • dc00e15 chore(deps): Bump github/codeql-action/init from 4.38.2 to 4.38.3 (#2314)
  • a9c11e5 chore(deps-dev): Bump turbo from 2.11.6 to 2.11.7 in the build group (#2313)
  • a68b220 chore(deps-dev): Bump the linting group with 5 updates (#2311)
  • 46db96f chore(deps): Bump github/codeql-action/analyze from 4.38.2 to 4.38.3 (#2310)
  • Additional commits viewable in compare view

Updates @inquirer/type from 4.1.0 to 4.2.0

Release notes

Sourced from @​inquirer/type's releases.

@​inquirer/type@​4.2.0

What's new

  • New withResolver<T>() export: creates a promise together with its resolve/reject functions, replacing the manual let resolve boilerplate. Available until Promise.withResolvers (Node 22+) becomes the minimum supported version (#2291).
Commits
  • a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
  • 61be5df chore: Publish new release
  • 7dc77e2 fix(search): prevent submissions while the prompt is loading
  • 73b5eab docs: document Deno installation (#2269)
  • 79a092a ci: add Deno compatibility test suite (#2271)
  • 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
  • e928543 chore: bump yarn to 4.18.1 via corepack
  • 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
  • 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
  • eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
  • Additional commits viewable in compare view

Updates antd from 6.6.2 to 6.6.6

Release notes

Sourced from antd's releases.

6.6.6

  • Table
    • 🐞 Fix Table selection menu's "Select all data" option missing descendant rows in tree data. #59342 @​QDyanbing
    • 🐞 Fix Table rowSelection onSelect returning undefined for preserved keys when preserveSelectedRowKeys is enabled. #59449 @​Chaoqi31
    • 🐞 Fix Table column.filterDropdownProps.popupRender not working. #59393 @​ramen2020
    • 🐞 Fix Table not scrolling to the first row when scroll is configured only in ConfigProvider. #59394 @​ramen2020
    • 🐞 Fix Table selection column z-index not applying with fixed columns after the v6 logical property migration. #58609 @​leshalv
  • Transfer
    • 🐞 Fix Transfer selectAllLabels falling back to default counts when set to numeric 0. #59487 @​QDyanbing
    • 🐞 Fix controlled Transfer selection remaining checked after one-way removal. #59428 @​yunfeizhu
    • 🐞 Fix Transfer Shift selection affecting filtered-out items and selecting incorrect ranges after search results change. #59348 @​QDyanbing
  • Tree
    • 🐞 Fix Tree.DirectoryTree Shift range selection with numeric keys and defaultExpandAll. #59375 @​QDyanbing
    • 🐞 Fix Tree.DirectoryTree incorrectly selecting nodes with selectable: false or disabled: true during Shift range selection. #59341 @​QDyanbing
  • Carousel
    • 🐞 Fix Carousel reversing vertical slide order in RTL when dotPlacement makes the carousel vertical. #59436 @​Chaoqi31
    • 🤖 Fix Carousel types exposing the ignored verticalSwiping prop. #59366 @​QDyanbing
  • 🐞 Fix numeric 0 content rendering across List, Divider, and Drawer. #59118 #59517 #59437 @​nrps9909 @​Ye-YiChen @​Chaoqi31
  • 🐞 Fix Notification timers not resuming after closing hovered notices. #59435 @​zombieJ
  • 🐞 Fix DatePicker and TimePicker RangePicker not applying ConfigProvider locale.DatePicker. #59356 @​QDyanbing
  • 🐞 Fix TreeSelect and Mentions calling renderEmpty with Select instead of their component names. #59364 @​QDyanbing
  • 🐞 Fix AutoComplete incorrectly inheriting allowClear from ConfigProvider select. #59358 @​QDyanbing
  • 🐞 Fix Upload ignoring linkProps.onClick when clicking a file name link. #59324 @​QDyanbing
  • 🐞 Fix Input.OTP focus landing on the wrong cell after paste. #59479 @​dogledogle
  • 🐞 Fix Typography text editing not working when onClick is provided. #59325 @​QDyanbing
  • 🐞 Fix Alert close button remaining clickable when closable.disabled is true. #59432 @​QDyanbing
  • 🐞 Fix Card ignoring tabProps.defaultActiveKey when selecting the initial tab. #59414 @​QDyanbing
  • 🐞 Fix Breadcrumb dropdown menu links starting with undefined when the parent item has no href or path. #59423 @​QDyanbing
  • 🐞 Fix Avatar falling back to its default size when a larger breakpoint matches without a configured size. #59446 @​QDyanbing
  • 🐞 Fix Badge truncating fractional horizontal offset values. #59314 @​QDyanbing
  • 🐞 Fix Button custom loading icons appearing before the loading delay ends. #59353 @​QDyanbing
  • 🐞 Fix Tour nextButtonProps.onClick and prevButtonProps.onClick not receiving mouse events. #59332 @​QDyanbing
  • 🤖 Fix Form.Item, Rate, and QRCode TypeScript definitions to exclude unsupported props. #59373 #59379 #59408 @​QDyanbing
  • 🤖 Fix Upload custom request types to expose abort handles. #59382 @​QDyanbing
  • 🌐 Add missing DatePicker placeholders and Carousel arrow labels in remaining locales. #59351 @​shoutoutuoadi325
  • 🌐 Improve Romanian (ro_RO) locale translations. #59528 @​vicuts
  • Table
    • 🐞 修复 Table 树形数据使用「全选所有」时漏选子孙行的问题。#59342 @​QDyanbing
    • 🐞 修复 Table 开启 preserveSelectedRowKeys 时 rowSelection 的 onSelect 对已保留 key 返回 undefined 的问题。#59449 @​Chaoqi31
    • 🐞 修复 Table column.filterDropdownProps.popupRender 不生效的问题。#59393 @​ramen2020
    • 🐞 修复 Table 仅在 ConfigProvider 中配置 scroll 时，翻页或筛选后不会滚动到首行的问题。#59394 @​ramen2020
    • 🐞 修复 Table 在 v6 逻辑方向属性迁移后，固定列场景下选择列 z-index 不生效的问题。#58609 @​leshalv
  • Transfer
    • 🐞 修复 Transfer 的 selectAllLabels 设置为数值 0 时回退为默认数量文案的问题。#59487 @​QDyanbing
    • 🐞 修复单向 Transfer 移除条目后，受控选中状态仍保持勾选的问题。#59428 @​yunfeizhu
    • 🐞 修复 Transfer 使用 Shift 连选时选中搜索隐藏项，以及搜索结果变化后连选范围错误的问题。#59348 @​QDyanbing
  • Tree
    • 🐞 修复 Tree.DirectoryTree 使用数字 key 和 defaultExpandAll 时 Shift 范围选择失效的问题。#59375 @​QDyanbing
    • 🐞 修复 Tree.DirectoryTree 按住 Shift 连选时会选中 selectable: false 或 disabled: true 节点的问题。#59341 @​QDyanbing

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.6

2026-10-12

  • Table
    • 🐞 Fix Table selection menu's "Select all data" option missing descendant rows in tree data. #59342 @​QDyanbing
    • 🐞 Fix Table rowSelection onSelect returning undefined for preserved keys when preserveSelectedRowKeys is enabled. #59449 @​Chaoqi31
    • 🐞 Fix Table column.filterDropdownProps.popupRender not working. #59393 @​ramen2020
    • 🐞 Fix Table not scrolling to the first row when scroll is configured only in ConfigProvider. #59394 @​ramen2020
    • 🐞 Fix Table selection column z-index not applying with fixed columns after the v6 logical property migration. #58609 @​leshalv
  • Transfer
    • 🐞 Fix Transfer selectAllLabels falling back to default counts when set to numeric 0. #59487 @​QDyanbing
    • 🐞 Fix controlled Transfer selection remaining checked after one-way removal. #59428 @​yunfeizhu
    • 🐞 Fix Transfer Shift selection affecting filtered-out items and selecting incorrect ranges after search results change. #59348 @​QDyanbing
  • Tree
    • 🐞 Fix Tree.DirectoryTree Shift range selection with numeric keys and defaultExpandAll. #59375 @​QDyanbing
    • 🐞 Fix Tree.DirectoryTree incorrectly selecting nodes with selectable: false or disabled: true during Shift range selection. #59341 @​QDyanbing
  • Carousel
    • 🐞 Fix Carousel reversing vertical slide order in RTL when dotPlacement makes the carousel vertical. #59436 @​Chaoqi31
    • 🤖 Fix Carousel types exposing the ignored verticalSwiping prop. #59366 @​QDyanbing
  • 🐞 Fix numeric 0 content rendering across List, Divider, and Drawer. #59118 #59517 #59437 @​nrps9909 @​Ye-YiChen @​Chaoqi31
  • 🐞 Fix Notification timers not resuming after closing hovered notices. #59435 @​zombieJ
  • 🐞 Fix DatePicker and TimePicker RangePicker not applying ConfigProvider locale.DatePicker. #59356 @​QDyanbing
  • 🐞 Fix TreeSelect and Mentions calling renderEmpty with Select instead of their component names. #59364 @​QDyanbing
  • 🐞 Fix AutoComplete incorrectly inheriting allowClear from ConfigProvider select. #59358 @​QDyanbing
  • 🐞 Fix Upload ignoring linkProps.onClick when clicking a file name link. #59324 @​QDyanbing
  • 🐞 Fix Input.OTP focus landing on the wrong cell after paste. #59479 @​dogledogle
  • 🐞 Fix Typography text editing not working when onClick is provided. #59325 @​QDyanbing
  • 🐞 Fix Alert close button remaining clickable when closable.disabled is true. #59432 @​QDyanbing
  • 🐞 Fix Card ignoring tabProps.defaultActiveKey when selecting the initial tab. #59414 @​QDyanbing
  • 🐞 Fix Breadcrumb dropdown menu links starting with undefined when the parent item has no href or path. #59423 @​QDyanbing
  • 🐞 Fix Avatar falling back to its default size when a larger breakpoint matches without a configured size. #59446 @​QDyanbing
  • 🐞 Fix Badge truncating fractional horizontal offset values. #59314 @​QDyanbing
  • 🐞 Fix Button custom loading icons appearing before the loading delay ends. #59353 @​QDyanbing
  • 🐞 Fix Tour nextButtonProps.onClick and prevButtonProps.onClick not receiving mouse events. #59332 @​QDyanbing
  • 🤖 Fix Form.Item, Rate, and QRCode TypeScript definitions to exclude unsupported props. #59373 #59379 #59408 @​QDyanbing
  • 🤖 Fix Upload custom request types to expose abort handles. #59382 @​QDyanbing
  • 🌐 Add missing DatePicker placeholders and Carousel arrow labels in remaining locales. #59351 @​shoutoutuoadi325
  • 🌐 Improve Romanian (ro_RO) locale translations. #59528 @​vicuts

6.6.5

2026-09-20

... (truncated)

Commits
  • c1a538b docs: changelog for 6.6.6 (#59539)
  • f755d90 fix(Table): include tree descendants when selecting all data (#59342)
  • df35daf fix(Avatar): preserve responsive size at larger breakpoints (#59446)
  • 255cb18 docs: correct Cascader tagRender signature and doc typos (#59523)
  • d069448 docs: fix Descriptions column type and description (#59533)
  • 9a5f4e1 fix(locale): improve ro_RO translations (#59528)
  • 5bc7ff7 chore(deps): update actions/setup-node digest to 949feb2 (#59530)
  • 2b939f4 chore(deps): update actions/download-artifact digest to 9000827 (#59529)
  • e1b172d chore(deps): update dependency @​types/adm-zip to ^0.6.0 (#59531)
  • 4db00b4 chore(deps): update dependency node-notifier to v11 (#59532)
  • Additional commits viewable in compare view

Updates dompurify from 3.4.16 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in ...

    Description has been truncated

@dependabot
build(deps): bump the production-dependencies group across 1 director…
f425638 
…y with 13 updates

Bumps the production-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ant-design/icons](https://github.com/ant-design/ant-design-icons) | `6.3.2` | `6.3.4` |
| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.8` | `8.0.7` |
| [@inquirer/ansi](https://github.com/SBoudrias/Inquirer.js) | `2.0.7` | `2.0.9` |
| [@inquirer/core](https://github.com/SBoudrias/Inquirer.js) | `12.0.1` | `12.0.5` |
| [@inquirer/figures](https://github.com/SBoudrias/Inquirer.js) | `2.0.8` | `2.0.9` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.7.0` | `8.7.4` |
| [@inquirer/type](https://github.com/SBoudrias/Inquirer.js) | `4.1.0` | `4.2.0` |
| [antd](https://github.com/ant-design/ant-design) | `6.6.2` | `6.6.6` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.16` | `3.4.17` |
| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.3.2` | `3.0.4` |
| [marked](https://github.com/markedjs/marked) | `18.0.11` | `18.1.1` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.2` | `12.2.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@ant-design/icons` from 6.3.2 to 6.3.4
- [Commits](https://github.com/ant-design/ant-design-icons/commits)

Updates `@babel/parser` from 7.29.8 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-parser)

Updates `@inquirer/ansi` from 2.0.7 to 2.0.9
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/ansi@2.0.7...@inquirer/ansi@2.0.9)

Updates `@inquirer/core` from 12.0.1 to 12.0.5
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/core@12.0.1...@inquirer/core@12.0.5)

Updates `@inquirer/figures` from 2.0.8 to 2.0.9
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/figures@2.0.8...@inquirer/figures@2.0.9)

Updates `@inquirer/prompts` from 8.7.0 to 8.7.4
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.7.0...@inquirer/prompts@8.7.4)

Updates `@inquirer/type` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/type@4.1.0...@inquirer/type@4.2.0)

Updates `antd` from 6.6.2 to 6.6.6
- [Release notes](https://github.com/ant-design/ant-design/releases)
- [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md)
- [Commits](ant-design/ant-design@6.6.2...6.6.6)

Updates `dompurify` from 3.4.16 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.16...3.4.17)

Updates `es-module-lexer` from 2.3.2 to 3.0.4
- [Release notes](https://github.com/guybedford/es-module-lexer/releases)
- [Commits](guybedford/es-module-lexer@2.3.2...3.0.4)

Updates `marked` from 18.0.11 to 18.1.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.11...v18.1.1)

Updates `mermaid` from 11.17.2 to 12.2.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.2...mermaid@12.2.0)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@ant-design/icons"
  dependency-version: 6.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@babel/parser"
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@inquirer/ansi"
  dependency-version: 2.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/core"
  dependency-version: 12.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/figures"
  dependency-version: 2.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/type"
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: antd
  dependency-version: 6.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: es-module-lexer
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mermaid
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
@coderabbitai

coderabbitai Bot commented Oct 22, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: ee8f662f-7c86-4f8f-a47f-3db8fbf2132c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 22, 2026

Copy link
Copy Markdown

👋 Thanks for opening your first PR to Comet, @dependabot[bot].

Before review, please make sure the PR title follows Conventional Commits, for example fix: handle project-scope init, and that the checklist in the PR template is up to date.

🧪 The most useful local checks are:

pnpm build
pnpm lint
pnpm format:check
pnpm test

🧰 If your change touches assets/skills/comet/scripts/, please also check script portability across macOS, Linux, and Windows Git Bash. Avoid sed -i, support both sha256sum and shasum -a 256, and guard optional grep pipelines with || true.

✨ We appreciate the contribution and will take a look as soon as we can.

@github-actions

github-actions Bot commented Oct 22, 2026

Copy link
Copy Markdown

PR template needs attention

Please update this PR to match the current .github/PULL_REQUEST_TEMPLATE.md:

  • Missing template section: ## ✨ Summary
  • Missing template section: ## 🎯 Scope
  • Missing template section: ## 🧪 Testing
  • Missing template section: ## ✅ Checklist
  • Missing template section: ## 👀 Notes for Reviewers
  • Missing template item: CLI commands (init, status, doctor, update, runtime, creator, application)
  • Missing template item: Runtime SDK / workflow applications / Creator / Plugin SDK
  • Missing template item: Core installer / platform detection
  • Missing template item: Comet skills (assets/skills/, assets/skills-zh/)
  • Missing template item: Generated Classic / Native / Entry Runtime bundles
  • Missing template item: Tests / CI
  • Missing template item: Documentation / changelog
  • Missing template item: Other:
  • Missing template item: pnpm build
  • Missing template item: pnpm lint
  • Missing template item: pnpm run lint:architecture
  • Missing template item: pnpm format:check
  • Missing template item: pnpm test
  • Missing template item: pnpm test:sdk
  • Missing template item: pnpm check:sdk-api
  • Missing template item: pnpm check:sdk-fixtures --base <comparison-commit>
  • Missing template item: pnpm test:package-e2e
  • Missing template item: pnpm test -- test/domains/comet-classic/comet-scripts.test.ts
  • Missing template item: Not run:
  • Missing template item: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Missing template item: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Missing template item: CHANGELOG.md is updated when behavior changes
  • Missing template item: Skill changes were made in Chinese first when applicable, then synced to English
  • Missing template item: New shipped Runtime assets are registered in assets/manifest.json and relevant tests
  • Missing template item: Existing SDK recovery fixtures are retained; new versions use new fixture directories
  • Missing template item: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Missing template item: No unrelated generated files or local artifacts are included
  • Checklist item is not checked: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Checklist item is not checked: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Checklist item is not checked: CHANGELOG.md is updated when behavior changes
  • Checklist item is not checked: Skill changes were made in Chinese first when applicable, then synced to English
  • Checklist item is not checked: New shipped Runtime assets are registered in assets/manifest.json and relevant tests
  • Checklist item is not checked: Existing SDK recovery fixtures are retained; new versions use new fixture directories
  • Checklist item is not checked: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Checklist item is not checked: No unrelated generated files or local artifacts are included

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants