chore(deps): bump the production-dependencies group across 1 directory with 22 updates #13

dependabot · 2025-12-01T20:38:34Z

Bumps the production-dependencies group with 22 updates in the / directory:

Package	From	To
chokidar	`4.0.3`	`5.0.0`
flexsearch	`0.8.205`	`0.8.212`
globby	`14.1.0`	`16.0.0`
is-absolute-url	`4.0.1`	`5.0.0`
js-yaml	`4.1.0`	`4.1.1`
lightningcss	`1.30.1`	`1.30.2`
mdast-util-to-hast	`13.2.0`	`13.2.1`
minimatch	`10.0.3`	`10.1.1`
pixi.js	`8.13.1`	`8.14.3`
preact	`10.27.1`	`10.28.0`
preact-render-to-string	`6.6.1`	`6.6.3`
pretty-bytes	`7.0.1`	`7.1.0`
satori	`0.18.2`	`0.18.3`
sharp	`0.34.3`	`0.34.5`
shiki	`1.26.2`	`3.17.1`
workerpool	`9.3.3`	`10.0.1`
@types/node	`24.3.1`	`24.10.1`
@types/yargs	`17.0.33`	`17.0.35`
esbuild	`0.25.9`	`0.27.0`
prettier	`3.6.2`	`3.7.3`
tsx	`4.20.5`	`4.21.0`
typescript	`5.9.2`	`5.9.3`

Updates chokidar from 4.0.3 to 5.0.0

Release notes

Sourced from chokidar's releases.

5.0.0

Make the package ESM-only. Reduces on-disk package size from ~150kb to ~80kb

Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs

fix: Make types more precise paulmillr/chokidar#1424

perf: re-use double slash regex paulmillr/chokidar#1435

Update readdirp to ESM-only v5

Lots of minor improvements in tests

Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt

Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

@mhkeller made their first contribution in paulmillr/chokidar#1426

@btea made their first contribution in paulmillr/chokidar#1432

Full Changelog: paulmillr/chokidar@4.0.3...5.0.0

Commits

c0c8d20 Release 5.0.0.
b211cec Remove src from npm
8742246 Upgrade dev deps, jsbt, ci files. Upgrade readdirp to v5.
de5a34c Merge pull request #1442 from paulmillr/flaky-buns
c08a6c4 fix: throttle based on dir + target
0c55ab3 test: wait for explicit calls in directory test
ce81be5 perf: re-use double slash regex (#1435)
7d9c1ed Merge pull request #1433 from paulmillr/super-matrices
3915541 Merge pull request #1430 from paulmillr/esm-only
9308bed chore: use Nodejs 24 in CI (#1432)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chokidar since your current version.

Updates flexsearch from 0.8.205 to 0.8.212

Commits

See full diff in compare view

Updates globby from 14.1.0 to 16.0.0

Release notes

Sourced from globby's releases.

v16.0.0

Breaking

Respect parent .gitignore files when gitignore option is enabled b9a9a84

When {gitignore: true}, Globby now searches for .gitignore files up to the Git repo root (if detected). This matches Git's actual behavior where parent .gitignore patterns apply to subdirectories. Previously, only .gitignore files within the glob search path were considered. This change could break existing code that relied on the previous, more limited behavior.

Improvements

Support negation-only patterns 1273541

Respect custom fs implementation from options c2eb272

Add some more options to isGitIgnored functions e794ff9

Improve error message for invalid cwd option 7535e6d

Fixes

Fix {gitignore: true} performance issue fcb07c3

Fix bundler compatibility e6c72c9

Fix parent directory patterns with gitignore option 11dd2df

Fix ignore patterns with parent directory references a58d117

Fix types for stats option c10f600

sindresorhus/globby@v15.0.0...v16.0.0

v15.0.0

Breaking

Require Node.js 20 4ae42c8

Fixes

Fix expandDirectories not working with globstar patterns 98d691a

Fix relative paths with gitignore option b4d78d8

Fix gitignore patterns in subdirectories not applying recursively 2cb6088

Fix TypeScript types for globbyStream to correctly yield strings 1c7f3ed

sindresorhus/globby@v14.1.0...v15.0.0

Commits

cdbb6a2 16.0.0
e6c72c9 Fix bundler compatibility
b9a9a84 Respect parent .gitignore files when gitignore option is enabled
db9cb72 Add test for suppressErrors option with file patterns
69e0ee7 Add test for ignore option with trailing slashes
11dd2df Fix parent directory patterns with gitignore option
e4d0918 Add tests for special characters in directory names
f926132 Improve path check in gitignore logic
7535e6d Improve error message for invalid cwd option
c10f600 Fix types for stats option
Additional commits viewable in compare view

Updates is-absolute-url from 4.0.1 to 5.0.0

Release notes

Sourced from is-absolute-url's releases.

v5.0.0

Breaking

Require Node.js 20 430699d

It now only allows http:// and https:// protocols by default 05e1989

To get the old behavior, pass in {httpOnly: false}

Improvements

Add httpOnly option and make it the default 05e1989

sindresorhus/is-absolute-url@v4.0.1...v5.0.0

Commits

76c6aff 5.0.0
05e1989 Add httpOnly option and make it the default
430699d Require Node.js 20
See full diff in compare view

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

Fix prototype pollution issue in yaml merge (<<) operator.

Commits

cc482e7 4.1.1 released
50968b8 dist rebuild
d092d86 lint fix
383665f fix prototype pollution in merge (<<)
0d3ca7a README.md: HTTP => HTTPS (#678)
49baadd doc: 'empty' style option for !!null
ba3460e Fix demo link (#618)
See full diff in compare view

Updates lightningcss from 1.30.1 to 1.30.2

Release notes

Sourced from lightningcss's releases.

v1.30.2

Fixes

Fix installing on android

Don't warn on ::grammar-error and ::spelling-error selectors

Update browser compat data

Rust crate changes

Bump browserslist-rs to 0.19.0

migrate to maintained library instead of deprecated paste

Use serde-content instead of private serde types

Commits

400f705 v1.30.2
b218715 Update browser compat data
9879b91 Use serde-content instead of private serde types (#1062)
bb718d1 migrate to maintained library (#1035)
a2faf99 Add support for ::grammar-error and ::spelling-error (#1026)
2fae1a2 Fix installing on android (#1030)
8fa6592 Bump browserslist-rs to 0.19.0 (#1022)
defa3bf bump crate
534fa17 Derive Eq and Serde for Targets (#1015)
d2f587d Allow passing browserslist options to from_browserslist (#1011)
Additional commits viewable in compare view

Updates mdast-util-to-hast from 13.2.0 to 13.2.1

Release notes

Sourced from mdast-util-to-hast's releases.

13.2.1

Fix

ab3a795 Fix support for spaces in class names

Types

efb5312 Refactor to use @imports

a5bc210 Add declaration maps

Full Changelog: syntax-tree/mdast-util-to-hast@13.2.0...13.2.1

Commits

174795b 13.2.1
3d05b3a Update Node in Actions
ab3a795 Fix support for spaces in class names
efb5312 Refactor to use @imports
a5bc210 Add declaration maps
b54955d Add .tsbuildinfo to .gitignore
See full diff in compare view

Updates minimatch from 10.0.3 to 10.1.1

Changelog

Sourced from minimatch's changelog.

change log

10.1

Add magicalBraces option for escape

Fix makeRe when partial: true is set.

Fix makeRe when pattern ends in a final ** path part.

10.0

Require node 20 or 22 and higher

9.0

No default export, only named exports.

8.0

Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions

Bump required Node.js version

7.4

Add escape() method

Add unescape() method

Add Minimatch.hasMagic() method

7.3

Add support for posix character classes in a unicode-aware way.

7.2

Add windowsNoMagicRoot option

7.1

Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

7.0

Preprocess patterns to simplify complicated patterns and reduce out .. pattern portions where possible. Note that this means

... (truncated)

Commits

5b83372 10.1.1
7ed71cd do not require * to match something if already matching something
30efec4 fix some typedoc comments and export types
7a71a90 10.1.0
8bc631a changelog 10.1
0a0a7a1 Added missing periods for text consistency
a1b68f2 docs: fix typo
6b88277 remove unnecessary types for brace-expansion
0d27f1c Support magicalBraces option in escape/unescape
281de34 prettier
Additional commits viewable in compare view

Updates pixi.js from 8.13.1 to 8.14.3

Release notes

Sourced from pixi.js's releases.

v8.14.3

💾 Download

Installation:
npm install pixi.js@8.14.3
Development Build:

https://cdn.jsdelivr.net/npm/pixi.js@8.14.3/dist/pixi.js

https://cdn.jsdelivr.net/npm/pixi.js@8.14.3/dist/pixi.mjs

Production Build:

https://cdn.jsdelivr.net/npm/pixi.js@8.14.3/dist/pixi.min.js

https://cdn.jsdelivr.net/npm/pixi.js@8.14.3/dist/pixi.min.mjs

Documentation:

https://pixijs.download/v8.14.3/docs/index.html

Changed

pixijs/pixijs@v8.14.2...v8.14.3

🐛 Fixed

fix: Only create stage Container on init if it doesn't exist by @lunarraid in pixijs/pixijs#11766

v8.14.2

💾 Download

Installation:
npm install pixi.js@8.14.2
Development Build:

https://cdn.jsdelivr.net/npm/pixi.js@8.14.2/dist/pixi.js

https://cdn.jsdelivr.net/npm/pixi.js@8.14.2/dist/pixi.mjs

Production Build:

https://cdn.jsdelivr.net/npm/pixi.js@8.14.2/dist/pixi.min.js

https://cdn.jsdelivr.net/npm/pixi.js@8.14.2/dist/pixi.min.mjs

Documentation:

https://pixijs.download/v8.14.2/docs/index.html

Changed

pixijs/pixijs@v8.14.1...v8.14.2

🐛 Fixed

fix: graphics memory leak and cleanup by @Zyie in pixijs/pixijs#11753

fix: typo in Application example: replace '-' with '=' in asset loading by @Aryaman1792 in pixijs/pixijs#11750

... (truncated)

Commits

e17c886 v8.14.3
ded9a15 fix(Application): Only create stage Container on init if it doesn't exist (#1...
506a83c v8.14.2
40a000c fix: parse resolution and format from URLs in object sources in assets resolv...
643f966 fix: Track item count in Pool class and add related tests (#11760)
e15d113 fix: bitmanFontXMLParser should recognize xml fonts with versions (#11761)
580558c Remove listener from TextureSource on Texture destroy (#11764)
620d2d8 Fix typo in Application example: replace '-' with '=' in asset loading (#11750)
a3b5cf1 fix: graphics memory leak and cleanup (#11753)
5eda7c7 fix: correct uBackTexture binding for filters with blendRequired (#11754)
Additional commits viewable in compare view

Updates preact from 10.27.1 to 10.28.0

Release notes

Sourced from preact's releases.

10.28.0

Types

Updates dangerouslySetInnerHTML type so future TS will accept Trusted… (#4931, thanks @lukewarlow)

Adds snap events (#4947, thanks @argyleink)

Remove missed jsx duplicates (#4950, thanks @rschristian)

Fix scroll events (#4949, thanks @rschristian)

Fixes

Fix cascading renders with signals (#4966, thanks @JoviDeCroock)

add commpat/server.browser entry (#4941 & #4940, thanks @marvinhagemeister)

Avoid lazy components without result going in throw loop (#4937, thanks @JoviDeCroock)

Performance

Backport some v11 optimizations (#4967, thanks @JoviDeCroock)

10.27.2

Types

Mirror non-JSX types to the 'preact' namespace (#4904, thanks @rschristian)

Fixes

Address memory leak (#4906, thanks @JoviDeCroock)

Commits

b36b6a7 10.28.0 (#4968)
4d40e96 Backport some v11 optimizations (#4967)
7b74b40 Fix cascading renders with signals (#4966)
3ab5c6f Updates dangerouslySetInnerHTML type so future TS will accept Trusted… (#4931)
ff30c2b Adds snap events (#4947)
8ac2681 types: Missed jsx duplicates (#4950)
20ba6cc types: Fix scroll events v10.x (#4949)
3a5b4ba Merge pull request #4941 from preactjs/v10-server-browser-entry
a347b0b fix(compat): add commpat/server.browser entry (#4940)
58ad04e Avoid lazy components without result going in throw loop (#4937)
Additional commits viewable in compare view

Updates preact-render-to-string from 6.6.1 to 6.6.3

Release notes

Sourced from preact-render-to-string's releases.

v6.6.3

Patch Changes

#432 62c87e4 Thanks @nwalters512! - Preserve whitespace in <pre>/<textarea> when using pretty: true

v6.6.2

Patch Changes

#430 f2455d8 Thanks @reteps! - Fix JSX renderer to correctly render enumerated properties

Changelog

Sourced from preact-render-to-string's changelog.

6.6.3

Patch Changes

#432 62c87e4 Thanks @nwalters512! - Preserve whitespace in <pre>/<textarea> when using pretty: true

6.6.2

Patch Changes

#430 f2455d8 Thanks @reteps! - Fix JSX renderer to correctly render enumerated properties

Commits

1667556 Merge pull request #434 from preactjs/chore/bump-npm-version
e4d3b46 ci: Ensure CI is using latest NPM version
4fdcf11 chore: Bump lockfile
35bb4fb Merge pull request #433 from preactjs/changeset-release/main
ef57ced Version Packages
69ed337 Merge pull request #432 from nwalters512/pretty-format-preserve-whitespace
96dfd13 Update lockfile
62c87e4 Preserve whitespace for pre/textarea when pretty-printing
f3bdac6 Merge pull request #431 from preactjs/changeset-release/main
d87861f Version Packages
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for preact-render-to-string since your current version.

Updates pretty-bytes from 7.0.1 to 7.1.0

Release notes

Sourced from pretty-bytes's releases.

v7.1.0

Add fixedWidth option for right-aligned output 73df489

Add nonBreakingSpace option b637640

Fix truncation behavior with fraction digits options b64cee5

sindresorhus/pretty-bytes@v7.0.1...v7.1.0

Commits

b7849f7 7.1.0
73df489 Add fixedWidth option for right-aligned output
b64cee5 Fix truncation behavior with fraction digits options
b637640 Add nonBreakingSpace option
See full diff in compare view

Updates satori from 0.18.2 to 0.18.3

Release notes

Sourced from satori's releases.

0.18.3

0.18.3 (2025-09-15)

Bug Fixes

Support forwardRef wrapped component (#601)

Commits

2a0878a fix: Trigger release
6d0d0db Support forwardRef wrapped component (#601)
See full diff in compare view

Updates sharp from 0.34.3 to 0.34.5

Release notes

Sourced from sharp's releases.

v0.34.5

Upgrade to libvips v8.17.3 for upstream bug fixes.

Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

Support building from source with npm v12+, deprecate --build-from-source flag. #4458

Add support for BigTIFF output. #4459 @throwbi

Improve error messaging when only warnings issued. #4465

Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.1

Upgrade to libvips v8.17.3 for upstream bug fixes.

Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

Support building from source with npm v12+, deprecate --build-from-source flag. #4458

Add support for BigTIFF output. #4459 @throwbi

Improve error messaging when only warnings issued. #4465

Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.0

Upgrade to libvips v8.17.3 for upstream bug fixes.

Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

Support building from source with npm v12+, deprecate --build-from-source flag. #4458

Add support for BigTIFF output. #4459 @throwbi

Improve error messaging when only warnings issued. #4465

... (truncated)

Commits

e062456 Release v0.34.5
6450c70 Prerelease v0.34.5-rc.1
f7c95d1 TypeScript: consolidate a few enum-like properties
ef86a75 Prerelease v0.34.5-rc.0
6c1e840 Use structured binding for tuples where possible
e1628d8 Simplify ICC processing when retaining input profiles #4468
4f9f817 Linter: apply all recommended biome settings
09d5aa8 Docs: update internal and libvips doc links
040b73c Upgrade to libvips v8.17.3
1f2f33d Ensure licensing headers are retained by code bundlers
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for sharp since your current version.

Updates shiki from 1.26.2 to 3.17.1

Release notes

Sourced from shiki's releases.

v3.17.1

   🚀 Features

core: Enhance string utils with robust edge case handling - by @shekhar-narayan-mishra in shikijs/shiki#1154 (a2b68)

   🐞 Bug Fixes

core: Correctly parse 4-digit hex colors in dimColor - by @shalini-saloni in shikijs/shiki#1151 (fcdd3)

monaco: Ensure correct color map update when switching themes - by @shivank-1011 in shikijs/shiki#1155 (d2e94)

    View changes on GitHub

v3.17.0

   🚀 Features

cli: Support passing remote file url - by @o-az in shikijs/shiki#1139 (fb05a)

core: Support embeddedLanguages alias for backwards compatibility - by @Ipshita29 in shikijs/shiki#1044 and shikijs/shiki#1145 (3a367)

monaco: Normalize theme tokenScopes and tighten monaco type import - by @Simon-He95 in shikijs/shiki#1140 (dc792)

   🐞 Bug Fixes

monaco: Preserve Markdown font styles - by @prempyla and @antfu in shikijs/shiki#1107 (e4dec)

shiki: Rename createdBundledHighlighter to createBundledHighlighter - by @tushar73-jet, Tushar and @antfu in shikijs/shiki#1135 (e6d21)

transformers: Handle multi-token comments in rose-pine theme - by @ish1416 and @antfu in shikijs/shiki#1118 (3e1bd)

twoslash: Fix typo in twoslash-query-persisted, close #1130, close #981 - by @antfu in shikijs/shiki#1130 and shikijs/shiki#981 (55a17)

types: Add 'plain' to PlainTextLanguage type - by @kevinkucharczyk in shikijs/shiki#1133 (156c5)

    View changes on GitHub

v3.16.0

   🚀 Features

Update grammars - by @antfu (02dab)

   🐞 Bug Fixes

Enable decorations for structure: inline - by @Aashish-Jha-11 and Aashish_Jha_1107 in shikijs/shiki#1103 (8806b)

Resolve vitest alias for wasm-inlined - by @sahilsharda (2d7b3)

transformers: Support comment-prefixed [code . highlight] markers in v3 notation matcher - by @Hariksh in shikijs/shiki#1102 (5068b)

    View changes on GitHub

v3.15.0

   🚀 Features

lang-ansi: Fallback for missing theme ANSI colors - by @Chanakyasinde and @antfu in shikijs/shiki#1095 (f36ea)

transformers: Support meta.indent for indent guides - by @L33Z22L11 in shikijs/shiki#1087 (d8f89)

   🐞 Bug Fixes

... (truncated)

Commits

355d207 chore: release v3.17.1
b4d3a57 chore: release v3.17.0
e6d21b0 fix(shiki): rename createdBundledHighlighter to createBundledHighlighter ...
fe08ee0 chore: release v3.16.0
02dab9b feat: update grammars
4bf5be3 chore: update snapshot
63ab64b chore: release v3.15.0
218c901 fix: allow singleton highlighter recovery after invalid language error (#1091)
c056371 chore: update snapshot
29f8914 chore: release v3.14.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for shiki since your current version.

Updates workerpool from 9.3.3 to 10.0.1

Changelog

Sourced from workerpool's changelog.

2025-11-19, version 10.0.1

Fix: #523 make WorkerHandler resilient against errors without message property.

2025-10-21, version 10.0.0

BREAKING CHANGES:

Feat: implement queueStrategy option (FIFO / LIFO / custom) (#518, #517). This is a new feature without changes in the public API, but the internal property pool.tasks is changed into pool.taskQueue. So, changes are required if you rely on this internal property. Thanks @amaneru55

Feat: introduce a new TerminateError class to differentiate between a crash and a regular error (see #519, #520). The TerminateError class extends from the class Error so no breaking changes in that regard. But some of the error messages are changed so if you have code that depends on the exact error messages you may need to change your code accordingly. Thanks @Julusian.

2025-09-10, version 9.3.4

Fix: #516 improve error handling for errors containing nested classes by using their .toJSON method when available.

Commits

See full diff in compare view

Updates @types/node from 24.3.1 to 24.10.1

Commits

See full diff in compare view

Updates @types/yargs from 17.0.33 to 17.0.35

Commits

See full diff in compare view

Updates esbuild from 0.25.9 to 0.27.0

Release notes

Sourced from esbuild's releases.

v0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

Use Uint8Array.fromBase64 if available (#4286)

With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)

This raises the operating system requirements for running esbuild:

Linux: now requires a kernel version of 3.2 or later

macOS: now requires macOS 12 (Monterey) or later

v0.26.0

Enable trusted publishing (#4281)

GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

v0.25.12
Fix a minification regression with CSS media queries (#4315)

The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.
Update the list of known JavaScript globals (#4310)

This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

From ES2017:

Atomics

SharedArrayBuffer

From ES2020:

BigInt64Array

BigUint64Array

From ES2021:

FinalizationRegistry

WeakRef

From ES2025:

Float16Array

Iterator

Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:
// This can now be tree-shaken by esbuild:

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

Use Uint8Array.fromBase64 if available (#4286)

With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

Update the Go compiler from v1.23.12 to v1...
Description has been truncated

…y with 22 updates Bumps the production-dependencies group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [chokidar](https://github.com/paulmillr/chokidar) | `4.0.3` | `5.0.0` | | [flexsearch](https://github.com/nextapps-de/flexsearch) | `0.8.205` | `0.8.212` | | [globby](https://github.com/sindresorhus/globby) | `14.1.0` | `16.0.0` | | [is-absolute-url](https://github.com/sindresorhus/is-absolute-url) | `4.0.1` | `5.0.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [lightningcss](https://github.com/parcel-bundler/lightningcss) | `1.30.1` | `1.30.2` | | [mdast-util-to-hast](https://github.com/syntax-tree/mdast-util-to-hast) | `13.2.0` | `13.2.1` | | [minimatch](https://github.com/isaacs/minimatch) | `10.0.3` | `10.1.1` | | [pixi.js](https://github.com/pixijs/pixijs) | `8.13.1` | `8.14.3` | | [preact](https://github.com/preactjs/preact) | `10.27.1` | `10.28.0` | | [preact-render-to-string](https://github.com/preactjs/preact-render-to-string) | `6.6.1` | `6.6.3` | | [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) | `7.0.1` | `7.1.0` | | [satori](https://github.com/vercel/satori) | `0.18.2` | `0.18.3` | | [sharp](https://github.com/lovell/sharp) | `0.34.3` | `0.34.5` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `1.26.2` | `3.17.1` | | [workerpool](https://github.com/josdejong/workerpool) | `9.3.3` | `10.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.3.1` | `24.10.1` | | [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) | `17.0.33` | `17.0.35` | | [esbuild](https://github.com/evanw/esbuild) | `0.25.9` | `0.27.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.3` | | [tsx](https://github.com/privatenumber/tsx) | `4.20.5` | `4.21.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `5.9.3` | Updates `chokidar` from 4.0.3 to 5.0.0 - [Release notes](https://github.com/paulmillr/chokidar/releases) - [Commits](paulmillr/chokidar@4.0.3...5.0.0) Updates `flexsearch` from 0.8.205 to 0.8.212 - [Release notes](https://github.com/nextapps-de/flexsearch/releases) - [Changelog](https://github.com/nextapps-de/flexsearch/blob/master/CHANGELOG.md) - [Commits](https://github.com/nextapps-de/flexsearch/commits) Updates `globby` from 14.1.0 to 16.0.0 - [Release notes](https://github.com/sindresorhus/globby/releases) - [Commits](sindresorhus/globby@v14.1.0...v16.0.0) Updates `is-absolute-url` from 4.0.1 to 5.0.0 - [Release notes](https://github.com/sindresorhus/is-absolute-url/releases) - [Commits](sindresorhus/is-absolute-url@v4.0.1...v5.0.0) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `lightningcss` from 1.30.1 to 1.30.2 - [Release notes](https://github.com/parcel-bundler/lightningcss/releases) - [Commits](parcel-bundler/lightningcss@v1.30.1...v1.30.2) Updates `mdast-util-to-hast` from 13.2.0 to 13.2.1 - [Release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases) - [Commits](syntax-tree/mdast-util-to-hast@13.2.0...13.2.1) Updates `minimatch` from 10.0.3 to 10.1.1 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v10.0.3...v10.1.1) Updates `pixi.js` from 8.13.1 to 8.14.3 - [Release notes](https://github.com/pixijs/pixijs/releases) - [Commits](pixijs/pixijs@v8.13.1...v8.14.3) Updates `preact` from 10.27.1 to 10.28.0 - [Release notes](https://github.com/preactjs/preact/releases) - [Commits](preactjs/preact@10.27.1...10.28.0) Updates `preact-render-to-string` from 6.6.1 to 6.6.3 - [Release notes](https://github.com/preactjs/preact-render-to-string/releases) - [Changelog](https://github.com/preactjs/preact-render-to-string/blob/main/CHANGELOG.md) - [Commits](preactjs/preact-render-to-string@v6.6.1...v6.6.3) Updates `pretty-bytes` from 7.0.1 to 7.1.0 - [Release notes](https://github.com/sindresorhus/pretty-bytes/releases) - [Commits](sindresorhus/pretty-bytes@v7.0.1...v7.1.0) Updates `satori` from 0.18.2 to 0.18.3 - [Release notes](https://github.com/vercel/satori/releases) - [Commits](vercel/satori@0.18.2...0.18.3) Updates `sharp` from 0.34.3 to 0.34.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.3...v0.34.5) Updates `shiki` from 1.26.2 to 3.17.1 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v3.17.1/packages/shiki) Updates `workerpool` from 9.3.3 to 10.0.1 - [Changelog](https://github.com/josdejong/workerpool/blob/master/HISTORY.md) - [Commits](https://github.com/josdejong/workerpool/commits/v10.0.1) Updates `@types/node` from 24.3.1 to 24.10.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/yargs` from 17.0.33 to 17.0.35 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs) Updates `esbuild` from 0.25.9 to 0.27.0 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.25.9...v0.27.0) Updates `prettier` from 3.6.2 to 3.7.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.7.3) Updates `tsx` from 4.20.5 to 4.21.0 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.20.5...v4.21.0) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) --- updated-dependencies: - dependency-name: chokidar dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: flexsearch dependency-version: 0.8.212 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: globby dependency-version: 16.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: is-absolute-url dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lightningcss dependency-version: 1.30.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: mdast-util-to-hast dependency-version: 13.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: minimatch dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pixi.js dependency-version: 8.14.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: preact dependency-version: 10.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: preact-render-to-string dependency-version: 6.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: pretty-bytes dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: satori dependency-version: 0.18.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: sharp dependency-version: 0.34.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: shiki dependency-version: 3.17.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: workerpool dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@types/node" dependency-version: 24.10.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/yargs" dependency-version: 17.0.35 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: esbuild dependency-version: 0.27.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: prettier dependency-version: 3.7.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tsx dependency-version: 4.21.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 22 updates #13

chore(deps): bump the production-dependencies group across 1 directory with 22 updates #13

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the production-dependencies group across 1 directory with 22 updates #13

Are you sure you want to change the base?

chore(deps): bump the production-dependencies group across 1 directory with 22 updates #13

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

5.0.0

New Contributors

v16.0.0

Breaking

Improvements

Fixes

v15.0.0

Breaking

Fixes

v5.0.0

Breaking

Improvements

[4.1.1] - 2025-11-12

Security

v1.30.2

Fixes

Rust crate changes

13.2.1

Fix

Types

change log

10.1

10.0

9.0

8.0

7.4

7.3

7.2

7.1

7.0

v8.14.3

💾 Download

Changed

🐛 Fixed

v8.14.2

💾 Download

Changed

🐛 Fixed

10.28.0

Types

Fixes

Performance

10.27.2

Types

Fixes

v6.6.3

Patch Changes

v6.6.2

Patch Changes

6.6.3

Patch Changes

6.6.2

Patch Changes

v7.1.0

0.18.3

0.18.3 (2025-09-15)

Bug Fixes

v0.34.5

v0.34.5-rc.1

v0.34.5-rc.0

v3.17.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v3.17.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v3.16.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v3.15.0

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading