Skip to content

Build(deps): Bump the production-dependencies group across 1 directory with 29 updates - #1029

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-16c5760a81
Open

Build(deps): Bump the production-dependencies group across 1 directory with 29 updates#1029
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-16c5760a81

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 29 updates in the / directory:

Package From To
@codemirror/autocomplete 6.20.1 6.20.4
@codemirror/commands 6.10.3 6.11.1
@codemirror/lang-markdown 6.5.0 6.5.2
@codemirror/language 6.12.3 6.13.1
@codemirror/search 6.6.0 6.7.2
@codemirror/state 6.7.1 6.7.6
@codemirror/view 6.43.8 6.43.15
@lezer/highlight 1.2.3 1.2.5
@modelcontextprotocol/sdk 1.32.0 1.32.2
@replit/codemirror-vim 6.3.0 6.4.0
@xyflow/react 12.11.2 12.12.0
docx 9.7.1 9.15.0
electron-updater 6.8.9 6.8.11
font-list 2.0.2 2.1.0
function-plot 1.25.3 1.26.0
harper.js 2.7.0 3.0.0
highlight.js 11.11.1 11.12.0
jsxgraph 1.12.2 1.14.2
katex 0.16.47 0.19.1
prettier 3.8.3 3.9.10
react 18.3.1 19.3.1
react-dom 18.3.1 19.3.1
smol-toml 1.8.0 1.9.1
unist-util-visit 5.1.0 5.2.0
ws 8.21.3 8.22.0
zustand 5.0.12 5.0.16
@codemirror/lang-html 6.4.11 6.4.12
@codemirror/merge 6.12.2 6.12.3
@lezer/common 1.5.2 1.5.4

Updates @codemirror/autocomplete from 6.20.1 to 6.20.4

Commits

Updates @codemirror/commands from 6.10.3 to 6.11.1

Commits

Updates @codemirror/lang-markdown from 6.5.0 to 6.5.2

Commits

Updates @codemirror/language from 6.12.3 to 6.13.1

Commits

Updates @codemirror/search from 6.6.0 to 6.7.2

Commits

Updates @codemirror/state from 6.7.1 to 6.7.6

Commits

Updates @codemirror/view from 6.43.8 to 6.43.15

Commits

Updates @lezer/highlight from 1.2.3 to 1.2.5

Commits

Updates @modelcontextprotocol/sdk from 1.32.0 to 1.32.2

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

Commits
  • 3b73021 chore: bump version to 1.32.2 (#3089)
  • fa56d81 [v1.x] fix: allow registering after connect() when the capability was declare...
  • 6919e95 fix: add explicit | undefined to Transport optional properties (v1.x backport...
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • See full diff in compare view

Updates @replit/codemirror-vim from 6.3.0 to 6.4.0

Changelog

Sourced from @​replit/codemirror-vim's changelog.

[@​replit/codemirror-vim@​6.4.0] - 2026-07-28

Added

Fixed

  • gj clipping at the end of the document (c912733, #258)
  • Ex commands with mark and cursor line ranges such as :'a,.y (d19062a, #257)
  • , (repeat character search in reverse) in visual mode (cc81e48, #256)
  • :sort with a pattern and the r flag (66332dd, #253)
  • Status bar display of visual line mode (71919db, #236)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​replit/codemirror-vim since your current version.


Updates @xyflow/react from 12.11.2 to 12.12.0

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.12.0

Minor Changes

  • #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

@​xyflow/react@​12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

@​xyflow/react@​12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

@​xyflow/react@​12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

@​xyflow/react@​12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.12.0

Minor Changes

  • #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

... (truncated)

Commits
  • 8716946 chore(packages): bump
  • 9fd41fd chore(packages): bump
  • 19f9c2a fix(react/store): reset defaultEdgeOptions
  • 2acefb5 fix(react/store): reset functions #5991
  • 8f0a5d6 chore(packages): bump
  • 286816c chore(packages): bump
  • 3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
  • b7186f3 fix(react): minimap still works after reactflow remounts #5971
  • d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
  • 59b1a60 Simplify node click handling in MiniMap component
  • Additional commits viewable in compare view

Updates docx from 9.7.1 to 9.15.0

Release notes

Sourced from docx's releases.

9.15.0 adds new ways to fill in templates and keep their look, and makes the browser bundle smaller. ImagePatch lets patchDocument swap the image of a picture that's already in a template, keeping its size, position, text wrapping and effects, with the placeholder in the picture's alt text (#3072). With trimPlaceholders: true, placeholders typed with spaces inside their braces, such as {{ name }}, are patched too (#3112). readTheme reads the theme of a Word document or template, so a new document's styles keep its fonts and colors, and theme now takes the theme's fonts for other scripts (#878). paragraph.with() makes a new paragraph from an existing one with some of its options changed (#3330). The browser bundle is about 29 KB smaller, as docx now zips with fflate, hashes with its own SHA-1 and SHA-256, and leaves out stream code it doesn't use (#3834). On the fixes side, Word now shows Update Table on a table of contents that docx writes (#2598), and a table with relativeVerticalPosition: INLINE is now written in line with the text, as Word does, rather than floating (#331). Text with control characters that XML 1.0 doesn't allow, such as a vertical tab, no longer makes a document Word can't open, and an image whose alt text has only a description now gets the empty name the XML requires. When Packer.toStream can't zip, as in a browser, the failure now comes on the stream's error event rather than as an unhandled rejection.

What's Changed

New Contributors

Full Changelog: dolanmiu/docx@9.14.0...9.15.0

9.14.0 adds citations, captions, document protection and embedded files, and fixes tables of contents in LibreOffice. A document can now cite its sources and list them in a bibliography, in each of Word's citation styles, from the new docx/bibliography entry, and style: "Caption" now gives captions Word's Caption style, with a new guide to captions and cross-references (#557). protection makes a document read-only in Word, or keeps parts of it editable with EditableRangeStart and EditableRangeEnd, with an optional password (#2271). EmbeddedFileRun, from the new docx/embedded-files entry, embeds a file such as a spreadsheet as an object that opens when double-clicked (#719). There are smaller additions too. fitText fits a run's text to a width (#2597). Table cell borders take diagonalDown and diagonalUp to split a header cell (#3121). TableOfContents takes a tabLeader, so the space before page numbers can be blank or hyphens rather than dots (#1696). styles.default.lineNumber styles a section's line numbers (#551), and patchDocument can set a document's properties, such as its title and author (#2701). On the fixes side, docx now defines the TOC1 to TOC9 styles that table of contents entries use, so LibreOffice keeps the levels indented after it updates the table (#3819). It also writes a half-inch default tab stop, so tabs and list text line up in Pages (#2590). package.json now says docx needs Node.js 16 or later, as it already did in practice.

What's Changed

... (truncated)

Commits
  • 4eafe77 build(deps-dev): bump eslint-plugin-unicorn from 78.0.0 to 79.0.0 (#3849)
  • 54b0318 chore: add the documentation-writer skill (#3848)
  • 67dab3d chore: Version bump to 9.15.0 (#3846)
  • d0d19e8 chore: add a release skill (#3847)
  • ffd49e4 fix: leave out the control characters that XML 1.0 does not allow (#3840)
  • 01fe4d0 build(deps-dev): bump eslint-plugin-jsdoc from 65.3.15 to 65.4.2 (#3843)
  • 2dd890f build(deps-dev): bump execa from 10.2.0 to 10.2.1 (#3842)
  • ae6ef7d build(deps-dev): bump vite from 8.3.4 to 8.3.5 (#3841)
  • 922f7f5 docs: say Packer.toBuffer rejects in a browser, which has no Buffer, rather t...
  • ab3a098 fix: emit toStream's failure to zip on its error event, as in a browser witho...
  • Additional commits viewable in compare view

Updates electron-updater from 6.8.9 to 6.8.11

Release notes

Sourced from electron-updater's releases.

electron-updater@6.8.11

Patch Changes

electron-updater@6.8.10

Patch Changes

  • Fix: make multi-range differential downloads work on real servers. Three independent defects made downloadUpdate fall back to a full download with Response ends without calling any handlers: [#10219](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10219) 7dd7f8a @​claude

    • DataSplitter only recognised CRLF. Some CDNs answer multipart/byteranges with bare LF line endings, so no part was ever split and the whole response accumulated in memory. Header lists now end at whichever of \r\n\r\n / \n\n comes first, and the <EOL>--boundary separator size follows the line ending the server actually uses.
    • A header-list terminator split across two chunks was never found: only the new chunk was searched, the buffered bytes never were, so the parser locked onto the next part's header instead. Only the last few bytes of an unfinished header list are now carried over and searched together with the next chunk, instead of accumulating the whole list.
    • The 10s watchdog armed when a batch response ends was never disarmed after that batch succeeded. With more than 1000 operations (several range requests) it failed the whole download whenever a later batch took longer than the grace period.

  • Fix: keep the cached blockmap consistent with the cached installer. A download round that did not produce a new blockmap (e.g. the differential download was skipped because the cached installer was evicted) now removes the cached current.blockmap instead of leaving a stale one next to the freshly cached file, which poisoned the next differential download and surfaced as a generic sha512 checksum mismatch before falling back to a full download (#10097). Leftover pending blockmaps from previous update rounds are also cleared before a fresh download. sha512-mismatch logging now distinguishes a differential download that failed against stale/corrupt cached inputs (including whether the old blockmap came from the local cache or the server) from a genuine checksum failure of a fully downloaded file. [#10163](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10163) 1dfe1a9 @​claude

Changelog

Sourced from electron-updater's changelog.

6.8.11

Patch Changes

6.8.10

Patch Changes

  • Fix: make multi-range differential downloads work on real servers. Three independent defects made downloadUpdate fall back to a full download with Response ends without calling any handlers: [#10219](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10219) 7dd7f8a @​claude

    • DataSplitter only recognised CRLF. Some CDNs answer multipart/byteranges with bare LF line endings, so no part was ever split and the whole response accumulated in memory. Header lists now end at whichever of \r\n\r\n / \n\n comes first, and the <EOL>--boundary separator size follows the line ending the server actually uses.
    • A header-list terminator split across two chunks was never found: only the new chunk was searched, the buffered bytes never were, so the parser locked onto the next part's header instead. Only the last few bytes of an unfinished header list are now carried over and searched together with the next chunk, instead of accumulating the whole list.
    • The 10s watchdog armed when a batch response ends was never disarmed after that batch succeeded. With more than 1000 operations (several range requests) it failed the whole download whenever a later batch took longer than the grace period.

  • Fix: keep the cached blockmap consistent with the cached installer. A download round that did not produce a new blockmap (e.g. the differential download was skipped because the cached installer was evicted) now removes the cached current.blockmap instead of leaving a stale one next to the freshly cached file, which poisoned the next differential download and surfaced as a generic sha512 checksum mismatch before falling back to a full download (#10097). Leftover pending blockmaps from previous update rounds are also cleared before a fresh download. sha512-mismatch logging now distinguishes a differential download that failed against stale/corrupt cached inputs (including whether the old blockmap came from the local cache or the server) from a genuine checksum failure of a fully downloaded file. [#10163](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10163) 1dfe1a9 @​claude

Commits
  • e2a8604 chore(deploy): Release v26.18.0 (electron-updater@6.8.11) (v26) (#10250)
  • e5e3b41 fix(updater): validate cached update filenames (v26 backport of #10115) (#10300)
  • 5cdf017 chore(deploy): Release v26.17.0 (electron-updater@6.8.10) (v26) (#10191)
  • 7dd7f8a fix(updater): make multi-range differential downloads work on real servers (v...
  • 1dfe1a9 fix(electron-updater): keep cached blockmap consistent with cached installer ...
  • See full diff in compare view

Updates font-list from 2.0.2 to 2.1.0

Commits

Updates function-plot from 1.25.3 to 1.26.0

Release notes

Sourced from function-plot's releases.

v1.26.0

What's Changed

New Contributors

Full Changelog: mauriciopoppe/function-plot@v1.25.4...v1.26.0

v1.25.4

  • chore: bump dependencies 58a7830

mauriciopoppe/function-plot@v1.25.3...v1.25.4

Commits
  • 83a34f6 chore: bump version to 1.26.0 (#376)
  • 3203c1f Merge pull request #375 from mauriciopoppe/codex/1x-build-fix
  • 940d041 ci: skip install scripts in build
  • 9d5322b ci: avoid browser download in tests
  • 3512cb0 fix(build): exclude tests from production tsc
  • 287e5f2 refactor: store coordinate state in options
  • 6ea769d fix: improve polar grid layout and preserve zoom
  • 4e8b2ea test: add polar grid image snapshot
  • 061321c refactor: address polar grid review feedback
  • 38fdc46 fix: refine polar grid labels and clipping
  • Additional commits viewable in compare view

Updates harper.js from 2.7.0 to 3.0.0

Release notes

Sourced from harper.js's releases.

v3.0.0

What's Changed

... (truncated)

Commits
  • Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 30, 2026
@dependabot
dependabot Bot requested a review from adibhanna as a code owner October 30, 2026 20:20
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 30, 2026
@dependabot
Build(deps): Bump the production-dependencies group across 1 director…
08ec8df 
…y with 29 updates

Bumps the production-dependencies group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.1` | `6.20.4` |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.11.1` |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.0` | `6.5.2` |
| [@codemirror/language](https://github.com/codemirror/language) | `6.12.3` | `6.13.1` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.6.0` | `6.7.2` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.6` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.8` | `6.43.15` |
| [@lezer/highlight](https://github.com/lezer-parser/highlight) | `1.2.3` | `1.2.5` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.0` | `1.32.2` |
| [@replit/codemirror-vim](https://github.com/replit/codemirror-vim/tree/HEAD/packages/codemirror-vim) | `6.3.0` | `6.4.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.12.0` |
| [docx](https://github.com/dolanmiu/docx) | `9.7.1` | `9.15.0` |
| [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) | `6.8.9` | `6.8.11` |
| [font-list](https://github.com/oldj/node-font-list) | `2.0.2` | `2.1.0` |
| [function-plot](https://github.com/mauriciopoppe/function-plot) | `1.25.3` | `1.26.0` |
| [harper.js](https://github.com/automattic/harper/tree/HEAD/packages/harper.js) | `2.7.0` | `3.0.0` |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `11.11.1` | `11.12.0` |
| [jsxgraph](https://github.com/jsxgraph/jsxgraph) | `1.12.2` | `1.14.2` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.19.1` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.10` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.3.1` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.8.0` | `1.9.1` |
| [unist-util-visit](https://github.com/syntax-tree/unist-util-visit) | `5.1.0` | `5.2.0` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.0.16` |
| [@codemirror/lang-html](https://github.com/codemirror/lang-html) | `6.4.11` | `6.4.12` |
| [@codemirror/merge](https://github.com/codemirror/merge) | `6.12.2` | `6.12.3` |
| [@lezer/common](https://github.com/lezer-parser/common) | `1.5.2` | `1.5.4` |



Updates `@codemirror/autocomplete` from 6.20.1 to 6.20.4
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@codemirror/commands` from 6.10.3 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/lang-markdown` from 6.5.0 to 6.5.2
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/language` from 6.12.3 to 6.13.1
- [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/language/commits)

Updates `@codemirror/search` from 6.6.0 to 6.7.2
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@codemirror/state` from 6.7.1 to 6.7.6
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/state/commits)

Updates `@codemirror/view` from 6.43.8 to 6.43.15
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@lezer/highlight` from 1.2.3 to 1.2.5
- [Changelog](https://github.com/lezer-parser/highlight/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/highlight/commits)

Updates `@modelcontextprotocol/sdk` from 1.32.0 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.0...1.32.2)

Updates `@replit/codemirror-vim` from 6.3.0 to 6.4.0
- [Changelog](https://github.com/replit/codemirror-vim/blob/master/packages/codemirror-vim/CHANGELOG.md)
- [Commits](https://github.com/replit/codemirror-vim/commits/v6.4.0/packages/codemirror-vim)

Updates `@xyflow/react` from 12.11.2 to 12.12.0
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.0/packages/react)

Updates `docx` from 9.7.1 to 9.15.0
- [Release notes](https://github.com/dolanmiu/docx/releases)
- [Commits](dolanmiu/docx@9.7.1...9.15.0)

Updates `electron-updater` from 6.8.9 to 6.8.11
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-updater@6.8.11/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.8.11/packages/electron-updater)

Updates `font-list` from 2.0.2 to 2.1.0
- [Commits](https://github.com/oldj/node-font-list/commits)

Updates `function-plot` from 1.25.3 to 1.26.0
- [Release notes](https://github.com/mauriciopoppe/function-plot/releases)
- [Commits](mauriciopoppe/function-plot@v1.25.3...v1.26.0)

Updates `harper.js` from 2.7.0 to 3.0.0
- [Release notes](https://github.com/automattic/harper/releases)
- [Commits](https://github.com/automattic/harper/commits/v3.0.0/packages/harper.js)

Updates `highlight.js` from 11.11.1 to 11.12.0
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
- [Commits](highlightjs/highlight.js@11.11.1...11.12.0)

Updates `jsxgraph` from 1.12.2 to 1.14.2
- [Release notes](https://github.com/jsxgraph/jsxgraph/releases)
- [Changelog](https://github.com/jsxgraph/jsxgraph/blob/main/CHANGELOG.md)
- [Commits](jsxgraph/jsxgraph@v1.12.2...v1.14.2)

Updates `katex` from 0.16.47 to 0.19.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.19.1)

Updates `prettier` from 3.8.3 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.10)

Updates `react` from 18.3.1 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 18.3.1 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `unist-util-visit` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/syntax-tree/unist-util-visit/releases)
- [Commits](syntax-tree/unist-util-visit@5.1.0...5.2.0)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

Updates `zustand` from 5.0.12 to 5.0.16
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.12...v5.0.16)

Updates `@codemirror/lang-html` from 6.4.11 to 6.4.12
- [Changelog](https://github.com/codemirror/lang-html/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-html/commits)

Updates `@codemirror/merge` from 6.12.2 to 6.12.3
- [Changelog](https://github.com/codemirror/merge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/merge/commits)

Updates `@lezer/common` from 1.5.2 to 1.5.4
- [Changelog](https://github.com/lezer-parser/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/common/commits)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/lang-html"
  dependency-version: 6.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/language"
  dependency-version: 6.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/merge"
  dependency-version: 6.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@lezer/common"
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@lezer/highlight"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@replit/codemirror-vim"
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@xyflow/react"
  dependency-version: 12.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: docx
  dependency-version: 9.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: electron-updater
  dependency-version: 6.8.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: font-list
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: function-plot
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: harper.js
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: highlight.js
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: jsxgraph
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: katex
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: smol-toml
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: unist-util-visit
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Chore(deps): Bump the production-dependencies group across 1 directory with 29 updates Build(deps): Bump the production-dependencies group across 1 directory with 29 updates Oct 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-16c5760a81 branch from 1b57c31 to 08ec8df Compare October 30, 2026 22:28

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@adibhanna adibhanna Awaiting requested review from adibhanna adibhanna is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants