Skip to content

Bump the production-dependencies group across 1 directory with 12 updates - #6

Open
dependabot[bot] wants to merge 1 commit into
v5from
dependabot/npm_and_yarn/production-dependencies-c868c6478e
Open

Bump the production-dependencies group across 1 directory with 12 updates#6
dependabot[bot] wants to merge 1 commit into
v5from
dependabot/npm_and_yarn/production-dependencies-c868c6478e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown

Bumps the production-dependencies group with 12 updates in the / directory:

Package From To
@napi-rs/simple-git 1.1.0 1.2.0
isomorphic-git 1.42.2 1.43.0
preact 10.29.8 11.0.0
preact-render-to-string 6.7.0 6.8.0
pretty-bytes 7.1.3 7.2.0
sharp 0.35.4 0.35.5
ws 8.21.3 8.22.0
@types/ws 8.18.1 8.18.2
yargs 18.1.0 18.2.0
@types/node 26.5.1 26.6.4
@types/ws 8.18.1 8.18.2
prettier 3.9.6 3.9.9
tsx 4.23.13 4.23.15

Updates @napi-rs/simple-git from 1.1.0 to 1.2.0

Commits
  • 0cdb713 1.2.0
  • 6b4bb97 chore(deps): upgrade @​napi-rs/cli to ^3.10.4 and regenerate bindings (#169)
  • 070f312 feat: add diffBuffers, TreeBuilder, diffTreeToTree, findBlob and Diff.toPatch...
  • a4ac3d2 fix(deps): update void to v0.10.13 (#166)
  • ba11abe chore(deps): update cross-platform-actions/action action to v1.5.0 (#165)
  • d38ce7d chore(deps): update cross-platform-actions/action action to v1.4.0 (#164)
  • 3986d54 fix(deps): update void to v0.10.12 (#163)
  • 28a312a chore(deps): lock file maintenance (#162)
  • 8de48ea fix(deps): update void to v0.10.11 (#161)
  • 4d58fa1 chore(deps): update yarn to v4.18.0 (#160)
  • Additional commits viewable in compare view

Updates isomorphic-git from 1.42.2 to 1.43.0

Release notes

Sourced from isomorphic-git's releases.

v1.43.0

1.43.0 (2026-10-03)

Features

v1.42.7

1.42.7 (2026-10-03)

Bug Fixes

  • write the index once per walk instead of once per file (#2448) (149de87)

v1.42.6

1.42.6 (2026-10-01)

Bug Fixes

v1.42.5

1.42.5 (2026-09-30)

Bug Fixes

v1.42.4

1.42.4 (2026-09-29)

Bug Fixes

  • anchor .git/info/exclude patterns to the working directory (#2438) (8eea17f)

v1.42.3

1.42.3 (2026-09-27)

Bug Fixes

  • perf(commit): avoid reading packed parent (#2437) (a62d52c)
Commits
  • 563848e feat(remove): accept an array of filepaths (#2449)
  • 149de87 fix: write the index once per walk instead of once per file (#2448)
  • 431453f fix: refuse to cherry-pick over local changes (#2444)
  • afd8a5e fix: sort paths by UTF-8 bytes like git does (#2439)
  • 8eea17f fix: anchor .git/info/exclude patterns to the working directory (#2438)
  • a62d52c fix: perf(commit): avoid reading packed parent (#2437)
  • See full diff in compare view

Updates preact from 10.29.8 to 11.0.0

Release notes

Sourced from preact's releases.

11.0.0

https://preactjs.com/blog/preact-11

Read the upgrade-guide over at https://preactjs.com/guide/v11/upgrade-guide

All other release notes can be seen at

Fixes

Performance

Maintenance

11.0.0-rc.2

Notable

Types

Fixes

... (truncated)

Commits
  • e6ec2da Merge pull request #5266 from preactjs/11.0.0
  • 0e84b2c Merge branch 'main' into 11.0.0
  • 553b3fe Merge pull request #5286 from preactjs/JoviDeCroock/compat-extract-5269
  • 0ebd1b6 Make PureComponent tree-shakeable and fix the _unmounted mangle collision
  • db5d280 Merge pull request #5285 from gengjiawen/fix/rethrown-boundary-error
  • fa56cce fix: pass errors rethrown by componentDidCatch to the next real boundary
  • 1485848 Merge pull request #5281 from preactjs/JoviDeCroock/compat-element-props-ref
  • 1dcda7d Merge branch 'main' into JoviDeCroock/compat-element-props-ref
  • ed6d8cb Merge pull request #5283 from preactjs/JoviDeCroock/hydrate-any-child
  • c2cbc3e Apply suggestion from @​JoviDeCroock
  • Additional commits viewable in compare view

Updates preact-render-to-string from 6.7.0 to 6.8.0

Changelog

Sourced from preact-render-to-string's changelog.

6.8.0

Minor Changes

  • #472 2dff53d Thanks @​jacob-ebey! - Replaces the second context argument in our streaming functions with an options object, the context moves to the third position.

    Streaming is considered alpha so we're making this breaking change deliberately as part of a minor.

Patch Changes

Commits

Updates pretty-bytes from 7.1.3 to 7.2.0

Release notes

Sourced from pretty-bytes's releases.

v7.2.0

  • Fix formatting edge cases and validate options 4e800a3

sindresorhus/pretty-bytes@v7.1.3...v7.2.0

Commits

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract and rotate operations. #4606

  • Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract operation. #4606

... (truncated)

Commits
  • 51a990f Release v0.35.5
  • 96de105 Upgrade to sharp-libvips v1.3.4
  • 3a61390 CI: Configure Dependabot with all package.json locations
  • 4940c50 Improve gain map support for rotate/flip/flop ops
  • 20654aa Prerelease v0.35.5-rc.1
  • ef4f934 CI: Upgrade to Ubuntu 26.04
  • 358df95 Upgrade to libvips v8.18.7
  • 49f4903 Improve gain map support for rotate-then-extract #4606
  • 0e2e55e Silence a couple of compiler/static analysis warnings
  • cef3b8c Improve gain map support for extract operation #4606
  • Additional commits viewable in compare view

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

  • Introduced the protocols option (8b918b01).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).
Commits
  • 297202c [dist] 8.22.0
  • 8b918b0 [feature] Introduce the protocols option
  • 73e03eb [ci] Update actions/setup-node action to v7
  • d9b8954 [fix] Change the ready state after validating the arguments (#2337)
  • See full diff in compare view

Updates @types/ws from 8.18.1 to 8.18.2

Commits

Updates yargs from 18.1.0 to 18.2.0

Changelog

Sourced from yargs's changelog.

18.2.0 (2026-09-20)

Features

  • support creating completions for fish shell (#2568) (34d833a)

Bug Fixes

  • completion: remove spurious single-quote in zsh loadautofunc detection (#2548) (224e285)
Commits
  • e49b60a chore(main): release 18.2.0 (#2569)
  • 3ed7095 Set up staged trusted publishing, and remove stale deno workflow (#2591)
  • 224e285 fix(completion): remove spurious single-quote in zsh loadautofunc detection (...
  • fb9c055 Add SECURITY.md
  • 2a4378b Add FUNDING.yml with funding sources
  • 34d833a feat: support creating completions for fish shell (#2568)
  • 3a49608 Remove copy-pasted email address (#2566)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for yargs since your current version.


Updates @types/node from 26.5.1 to 26.6.4

Commits

Updates @types/ws from 8.18.1 to 8.18.2

Commits

Updates prettier from 3.9.6 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
</tr></table>

... (truncated)

Commits

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

  • exclude bare builtins from namespace inheritance (38e1588)
  • expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
  • make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

  • restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

Commits
  • ca66105 test: fix drive-less file URLs in ESM resolver fixtures
  • 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
  • 38e1588 fix: exclude bare builtins from namespace inheritance
  • 562c434 fix: make namespaced register() overloads portable for declaration emit
  • edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
  • 70e7828 test: upgrade tinyspy for disposable API
  • 9ed2022 ci: avoid duplicate release notifications
  • 872e77f refactor: use disposables for cleanup
  • 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 12 upd…
f7bfec2 
…ates

Bumps the production-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@napi-rs/simple-git](https://github.com/Brooooooklyn/simple-git) | `1.1.0` | `1.2.0` |
| [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.42.2` | `1.43.0` |
| [preact](https://github.com/preactjs/preact) | `10.29.8` | `11.0.0` |
| [preact-render-to-string](https://github.com/preactjs/preact-render-to-string) | `6.7.0` | `6.8.0` |
| [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) | `7.1.3` | `7.2.0` |
| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |
| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |
| [yargs](https://github.com/yargs/yargs) | `18.1.0` | `18.2.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.4` |
| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.18.1` | `8.18.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |



Updates `@napi-rs/simple-git` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/Brooooooklyn/simple-git/releases)
- [Commits](Brooooooklyn/simple-git@v1.1.0...v1.2.0)

Updates `isomorphic-git` from 1.42.2 to 1.43.0
- [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases)
- [Commits](isomorphic-git/isomorphic-git@v1.42.2...v1.43.0)

Updates `preact` from 10.29.8 to 11.0.0
- [Release notes](https://github.com/preactjs/preact/releases)
- [Commits](preactjs/preact@10.29.8...11.0.0)

Updates `preact-render-to-string` from 6.7.0 to 6.8.0
- [Release notes](https://github.com/preactjs/preact-render-to-string/releases)
- [Changelog](https://github.com/preactjs/preact-render-to-string/blob/main/CHANGELOG.md)
- [Commits](https://github.com/preactjs/preact-render-to-string/commits)

Updates `pretty-bytes` from 7.1.3 to 7.2.0
- [Release notes](https://github.com/sindresorhus/pretty-bytes/releases)
- [Commits](sindresorhus/pretty-bytes@v7.1.3...v7.2.0)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws)

Updates `yargs` from 18.1.0 to 18.2.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.1.0...v18.2.0)

Updates `@types/node` from 26.5.1 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.13...v4.23.15)

---
updated-dependencies:
- dependency-name: "@napi-rs/simple-git"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: isomorphic-git
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: preact
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: preact-render-to-string
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pretty-bytes
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/ws"
  dependency-version: 8.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: yargs
  dependency-version: 18.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/ws"
  dependency-version: 8.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants