Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 20 updates#145

Open
dependabot[bot] wants to merge 1 commit into
v5from
dependabot/npm_and_yarn/production-dependencies-95a8897f9c
Open

chore(deps): bump the production-dependencies group across 1 directory with 20 updates#145
dependabot[bot] wants to merge 1 commit into
v5from
dependabot/npm_and_yarn/production-dependencies-95a8897f9c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026 •
edited
Loading

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
@clack/prompts 0.11.0 1.4.0
@floating-ui/dom 1.7.5 1.7.6
esbuild-sass-plugin 3.6.0 3.7.0
globby 16.1.1 16.2.0
isomorphic-git 1.37.2 1.38.1
lightningcss 1.31.1 1.32.0
minimatch 10.2.2 10.2.5
preact 10.28.4 10.29.2
preact-render-to-string 6.6.6 6.7.0
serve-handler 6.1.6 6.1.7
workerpool 10.0.1 10.0.2
ws 8.19.0 8.20.1
yaml 2.8.2 2.9.0
@quartz-community/types 0d62f52 d342893
@quartz-community/utils 1ad4e4f 7a43501
@types/node 25.3.0 25.9.0
esbuild 0.27.3 0.28.0
prettier 3.8.1 3.8.3
tsx 4.21.0 4.22.3
typescript 5.9.3 6.0.3

Updates @clack/prompts from 0.11.0 to 1.4.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.4.0

Minor Changes

  • 284677e: Support scrolling and maxItems option for groupMultiselect, and removes indent when withGuide is set to false

Patch Changes

  • aab46a2: docs: add jsdoc for text, password, and multiline prompts
  • 54be8d7: Fix line wrapping and overflow computation in group multi-select and other list-like prompts.
  • Updated dependencies [54be8d7]
    • @​clack/core@​1.3.1

@​clack/prompts@​1.3.0

Minor Changes

  • ea5702e: fix: add engines field expressing node >=20.12 requirement
  • 814ab9a: Add new multiline prompt for multi-line text input.

Patch Changes

  • 5b897a7: Fix mixed type-only and runtime exports from @​clack/core.
  • Updated dependencies [78fd3ae]
  • Updated dependencies [ea5702e]
  • Updated dependencies [814ab9a]
    • @​clack/core@​1.3.0

@​clack/prompts@​1.2.0

Minor Changes

  • 9786226: Externalize fast-string-width and fast-wrap-ansi to avoid double dependencies
  • 090902c: Adds date prompt with format support (YMD, MDY, DMY)

Patch Changes

  • 134a1a1: Fix the path prompt so directory: true correctly enforces directory-only selection while still allowing directory navigation, and add regression tests for both directory and default file selection behavior.
  • bdf89a5: Adds placeholder option to autocomplete. When the placeholder is set and the input is empty, pressing tab will set the value to placeholder.
  • 336495a: Apply guide to wrapped multi-line messages in confirm prompt.
  • 9fe8de6: Respect withGuide: false in autocomplete and multiselect prompts.
  • 29a50cb: Fix path directory mode so pressing Enter with an existing directory initialValue submits that current directory instead of the first child option, and add regression coverage for immediate submit and child-directory navigation.
  • Updated dependencies [9786226]
  • Updated dependencies [bdf89a5]
  • Updated dependencies [417b451]
  • Updated dependencies [090902c]
    • @​clack/core@​1.2.0

@​clack/prompts@​1.1.0

Minor Changes

  • e3333fb: Replaces picocolors with Node.js built-in styleText.

... (truncated)

Changelog

Sourced from @​clack/prompts's changelog.

1.4.0

Minor Changes

  • 284677e: Support scrolling and maxItems option for groupMultiselect, and removes indent when withGuide is set to false

Patch Changes

  • aab46a2: docs: add jsdoc for text, password, and multiline prompts
  • 54be8d7: Fix line wrapping and overflow computation in group multi-select and other list-like prompts.
  • Updated dependencies [54be8d7]
    • @​clack/core@​1.3.1

1.3.0

Minor Changes

  • ea5702e: fix: add engines field expressing node >=20.12 requirement
  • 814ab9a: Add new multiline prompt for multi-line text input.

Patch Changes

  • 5b897a7: Fix mixed type-only and runtime exports from @​clack/core.
  • Updated dependencies [78fd3ae]
  • Updated dependencies [ea5702e]
  • Updated dependencies [814ab9a]
    • @​clack/core@​1.3.0

1.2.0

Minor Changes

  • 9786226: Externalize fast-string-width and fast-wrap-ansi to avoid double dependencies
  • 090902c: Adds date prompt with format support (YMD, MDY, DMY)

Patch Changes

  • 134a1a1: Fix the path prompt so directory: true correctly enforces directory-only selection while still allowing directory navigation, and add regression tests for both directory and default file selection behavior.
  • bdf89a5: Adds placeholder option to autocomplete. When the placeholder is set and the input is empty, pressing tab will set the value to placeholder.
  • 336495a: Apply guide to wrapped multi-line messages in confirm prompt.
  • 9fe8de6: Respect withGuide: false in autocomplete and multiselect prompts.
  • 29a50cb: Fix path directory mode so pressing Enter with an existing directory initialValue submits that current directory instead of the first child option, and add regression coverage for immediate submit and child-directory navigation.
  • Updated dependencies [9786226]
  • Updated dependencies [bdf89a5]
  • Updated dependencies [417b451]
  • Updated dependencies [090902c]
    • @​clack/core@​1.2.0

1.1.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​clack/prompts since your current version.


Updates @floating-ui/dom from 1.7.5 to 1.7.6

Release notes

Sourced from @​floating-ui/dom's releases.

@​floating-ui/dom@​1.7.6

Patch Changes

  • fix(types): ensure Platform type contains detectOverflow type
  • perf: bundle and runtime improvements
  • feat(autoUpdate): allow not passing a floating element
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/core@1.7.5
Changelog

Sourced from @​floating-ui/dom's changelog.

1.7.6

Patch Changes

  • fix(types): ensure Platform type contains detectOverflow type
  • perf: bundle and runtime improvements
  • feat(autoUpdate): allow not passing a floating element
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/core@1.7.5
Commits

Updates esbuild-sass-plugin from 3.6.0 to 3.7.0

Release notes

Sourced from esbuild-sass-plugin's releases.

v3.7.0 Hasta la vista

Commits

Updates globby from 16.1.1 to 16.2.0

Release notes

Sourced from globby's releases.

v16.2.0

sindresorhus/globby@v16.1.1...v16.2.0

Commits

Updates isomorphic-git from 1.37.2 to 1.38.1

Release notes

Sourced from isomorphic-git's releases.

v1.38.1

1.38.1 (2026-05-18)

Bug Fixes

v1.38.0

1.38.0 (2026-05-15)

Bug Fixes

Features

  • add refresh option to status and statusMatrix (#2313) (a7420b7)

v1.37.9

1.37.9 (2026-05-15)

Bug Fixes

  • point "jsdelivr" field to minified browser build (#2312) (6e99054)

v1.37.8

1.37.8 (2026-05-14)

Bug Fixes

v1.37.7

1.37.7 (2026-05-14)

Bug Fixes

  • browser entrypoint not being used in some non-node build contexts (#2309) (199714a)

v1.37.6

1.37.6 (2026-04-27)

Bug Fixes

... (truncated)

Commits

Updates lightningcss from 1.31.1 to 1.32.0

Release notes

Sourced from lightningcss's releases.

v1.32.0

Added

Fixed

Commits

Updates minimatch from 10.2.2 to 10.2.5

Commits

Updates preact from 10.28.4 to 10.29.2

Release notes

Sourced from preact's releases.

10.29.2

Fixes

Maintenance

10.29.1

Fixes

Maintenance

10.29.0

Features

Fixes

Performance

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for preact since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates preact-render-to-string from 6.6.6 to 6.7.0

Release notes

Sourced from preact-render-to-string's releases.

v6.7.0

Minor Changes

  • #450 dbc692f Thanks @​JoviDeCroock! - Adjust the comment-marker for streaming to be the same as renderToStringAsync where we use \$s

Patch Changes

v6.6.7

Patch Changes

  • #457 ce6ef71 Thanks @​lemonmade! - fix: renderToStringAsync produces commas for suspended components with complex children
Changelog

Sourced from preact-render-to-string's changelog.

6.7.0

Minor Changes

  • #450 dbc692f Thanks @​JoviDeCroock! - Adjust the comment-marker for streaming to be the same as renderToStringAsync where we use $s

Patch Changes

6.6.7

Patch Changes

  • #457 ce6ef71 Thanks @​lemonmade! - fix: renderToStringAsync produces commas for suspended components with complex children
Commits
  • eb871c8 Merge pull request #460 from preactjs/changeset-release/main
  • b22fc16 Version Packages
  • 833043b Merge pull request #461 from preactjs/fix-link
  • e32a4cd Reject namespaced attribute
  • 990307a Merge pull request #458 from preactjs/changesets-based-publishing
  • bcd3b0b Pin npm in CI
  • 950a59f Add changesets based publishing
  • 797a662 Merge pull request #450 from preactjs/id-adjustements
  • df713c5 Merge pull request #454 from preactjs/changeset-release/main
  • 39da545 Version Packages
  • Additional commits viewable in compare view

Updates serve-handler from 6.1.6 to 6.1.7

Release notes

Sourced from serve-handler's releases.

6.1.7

Patches

  • Fix: update minimatch to 3.1.5 to resolve security vulnerabilities: #228

Credits

Huge thanks to @​ParakhJaggi for helping!

Commits

Updates workerpool from 10.0.1 to 10.0.2

Changelog

Sourced from workerpool's changelog.

2026-04-16, version 10.0.2

Commits
  • eb55e63 chore: publish v10.0.2
  • a0d5bc9 chore: update devDependencies
  • 19fab44 fix(worker): clean up listeners when abort triggers (#547)
  • 106d6a6 chore(deps-dev): bump follow-redirects in /examples/webpack5 (#546)
  • 87088cf chore(deps-dev): bump lodash in /examples/webpack5 (#544)
  • 50d6512 chore(deps-dev): bump node-forge in /examples/webpack5 (#545)
  • 1cb42ce chore(deps-dev): bump vite from 6.4.1 to 6.4.2 in /examples/vite (#543)
  • 113dfe7 chore(deps): bump picomatch (#540)
  • 4b4ffcd chore(deps): bump picomatch from 4.0.2 to 4.0.4 in /examples/vite (#541)
  • 53cad6d chore(deps): bump picomatch from 2.3.1 to 2.3.2 in /examples/webpack5 (#539)
  • Additional commits viewable in compare view

Updates ws from 8.19.0 to 8.20.1

Release notes

Sourced from ws's releases.

8.20.1

Bug fixes

  • Fixed an uninitialized memory disclosure issue in websocket.close() (c0327ec1).

Providing a TypedArray (e.g. Float32Array) as the reason argument for websocket.close(), rather than the supported string or Buffer types, caused uninitialized memory to be disclosed to the remote peer.

import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer(
{ port: 0, skipUTF8Validation: true },
function () {
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port}, {
skipUTF8Validation: true
});
ws.on('close', function (code, reason) {
  deepStrictEqual(reason, Buffer.alloc(80));
});

}
);
wss.on('connection', function (ws) {
ws.close(1000, new Float32Array(20));
});

The issue was privately reported by Nikita Skovoroda.

8.20.0

Features

  • Added exports for the PerMessageDeflate class and utilities for the Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1f).
Commits
  • 5d9b316 [dist] 8.20.1
  • c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
  • ce2a3d6 [ci] Test on node 26
  • 58e45b8 [ci] Do not test on node 25
  • 5f26c24 [ci] Run the lint step on node 24
  • 8439255 [dist] 8.20.0
  • d3503c1 [minor] Export the PerMessageDeflate class and header utils
  • 3ee5349 [api] Convert the isServer and maxPayload parameters to options
  • 91707b4 [doc] Add missing space
  • 8b55319 [pkg] Update eslint to version 10.0.1
  • Additional commits viewable in compare view

Updates yaml from 2.8.2 to 2.9.0

Release notes

Sourced from yaml's releases.

v2.9.0

The changes here are really only patches, but I'm releasing this as a minor version to note a small change to the documentation of parseDocument() and parseAllDocuments(): I've removed the claim that they'll "never throw".

It remains the case that practically all non-malicious inputs will be handled without emitting an error, but there is a decent chance that code paths remain where e.g. a RangeError due to call stack exhaustion can be triggered by malicious inputs. Up to now, I've considered these as security vulnerabilities, and in fact it's the only category of error for which yaml CVEs have been issued so far.

Starting from this release, I'll be considering such errors as bugs, but not vulnerabilities. I do welcome people and/or LLMs looking for them, but please report them as normal issues rather than suspected security vulnerabilities. This also applies to previously undiscovered bugs in earlier releases.

  • fix: Avoid calling Array.prototype.push.apply() with large source array
  • fix(lexer): Avoid recursive calls that may exhaust the call stack

v2.8.4

  • Disable alias resolution with maxAliasCount:0 (#677)
  • Handle invalid unicode escapes (e1a1a77)
  • Apply minFractionDigits only to decimal strings (#676)

v2.8.3

  • Add trailingComma ToString option for multiline flow formatting (#670)
  • Catch stack overflow during node composition (1e84ebb)
Commits
  • ddb21b0 2.9.0
  • 167365b docs: Clarify that not all errors can be avoided
  • 6eca2a7 fix: Avoid calling Array.prototype.push.apply() with large source array
  • 0543cd5 fix(lexer): Avoid recursive calls that may exhaust the call stack
  • ccdf743 2.8.4
  • f625789 fix: Disable alias resolution with maxAliasCount:0 (#677)
  • e1a1a77 fix: Handle invalid unicode escapes
  • a163ea0 style: Satify Prettier
  • b2a5a6c fix: Apply minFractionDigits only to decimal strings (#676)
  • 93c951b chore: Bump JSR version to v2.8.3 (#673)
  • Additional commits viewable in compare view

Updates @quartz-community/types from 0d62f52 to d342893

Commits
  • d342893 chore: updated dependencies
  • d413569 feat: add vfile DataMap augmentation, SimpleSlug, and ValidDateType
  • b1dc9ac Update dist outputs
  • 861d363 feat: add SortFn and ThemeKey type exports
  • 653aece feat: add ContentIndex/ContentDetails types and globals.d.ts for centralized ...
  • 5786c30 chore: commit dist/ and remove prepare script
  • 22a709b chore: move build tools to devDependencies, shared deps to peerDependencies
  • c7df97d feat: add TreeTransform type and treeTransforms field to PageType plugin
  • a945040 feat: add PageFrame, PageFrameProps types and frame field to PageType
  • See full diff in compare view

Updates @quartz-community/utils from 1ad4e4f to 7a43501

Commits
  • 7a43501 build: rebuild dist with transformInternalLink folder-path fix
  • 6721918 fix(path): detect folder paths after slugification in transformInternalLink
  • 83f824b fix(path): re-export normalizeHastElement from index
  • bb5c136 feat(path): add normalizeHastElement for cross-slug HAST rebasing
  • 4dda81b feat(path)!: lowercase slugs for Obsidian-parity case-insensitive matching
  • e17fc8d feat(path): support folder note convention
  • cf1450b fix: safely handle undefined getDate in byDateAndAlphabetical
  • fbc9d6e fix: return undefined instead of throwing when defaultDateType is not set
  • 20b1ac1 feat: add getDate and byDateAndAlphabetical sort utilities
  • 8b6e32b feat: add formatDate and getIconCode utility exports
  • Additional commits viewable in compare view

Updates @types/node from 25.3.0 to 25.9.0

Commits

Updates esbuild from 0.27.3 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0

  • Add support for with { type: 'text' } imports (#4435)

    The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

    import string from './example.txt' with { type: 'text' }
console.log(string)

  • Add integrity checks to fallback download path (#4343)

    Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

    This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

  • Update the Go compiler from 1.25.7 to 1.26.1

    This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

    • It now uses the new garbage collector that comes with Go 1.26.
    • The Go compiler is now more aggressive with allocating memory on the stack.
    • The executable format that the Go linker uses has undergone several changes.
    • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

    You can read the Go 1.26 release notes for more information.

v0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}
// New output (with --loader=ts --target=es2021)
class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.0

  • Add support for with { type: 'text' } imports (#4435)

    The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

    import string from './example.txt' with { type: 'text' }
console.log(string)

  • Add integrity checks to fallback download path (#4343)

    Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

    This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

  • Update the Go compiler from 1.25.7 to 1.26.1

    This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

    • It now uses the new garbage collector that comes with Go 1.26.
    • The Go compiler is now more aggressive with allocating memory on the stack.
    • The executable format that the Go linker uses has undergone several changes.
    • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

    You can read the Go 1.26 release notes for more information.

0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}

... (truncated)

Commits
  • 6a794df publish 0.28.0 to npm
  • 64ee0ea fix #4435: support with { type: text } imports
  • ef65aee fix sort order in snapshots_packagejson.txt
  • 1a26a8e try to fix test-old-ts, also shuffle CI tasks
  • 556ce6c use '' instead of null to omit build hashes
  • 8e675a8 ci: allow missing binary hashes for tests
  • 7067763 Reapply "update go 1.25.7 => 1.26.1"
  • 39473a9 fix #4343: integrity check for binary download
  • 2025c9f publish 0.27.7 to npm
  • c6b586e fix typo in Makefile for @esbuild/win32-x64
  • Additional commits viewable in compare view

Updates prettier from 3.8.1 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

3.8.2

  • Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722,

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
351ca8b 
…y with 20 updates

Bumps the production-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `0.11.0` | `1.4.0` |
| [@floating-ui/dom](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/dom) | `1.7.5` | `1.7.6` |
| [esbuild-sass-plugin](https://github.com/glromeo/esbuild-sass-plugin) | `3.6.0` | `3.7.0` |
| [globby](https://github.com/sindresorhus/globby) | `16.1.1` | `16.2.0` |
| [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.37.2` | `1.38.1` |
| [lightningcss](https://github.com/parcel-bundler/lightningcss) | `1.31.1` | `1.32.0` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.2` | `10.2.5` |
| [preact](https://github.com/preactjs/preact) | `10.28.4` | `10.29.2` |
| [preact-render-to-string](https://github.com/preactjs/preact-render-to-string) | `6.6.6` | `6.7.0` |
| [serve-handler](https://github.com/vercel/serve-handler) | `6.1.6` | `6.1.7` |
| [workerpool](https://github.com/josdejong/workerpool) | `10.0.1` | `10.0.2` |
| [ws](https://github.com/websockets/ws) | `8.19.0` | `8.20.1` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.2` | `2.9.0` |
| [@quartz-community/types](https://github.com/quartz-community/types) | ``0d62f52`` | ``d342893`` |
| [@quartz-community/utils](https://github.com/quartz-community/utils) | ``1ad4e4f`` | ``7a43501`` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.0` | `25.9.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.3` | `0.28.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` |



Updates `@clack/prompts` from 0.11.0 to 1.4.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.4.0/packages/prompts)

Updates `@floating-ui/dom` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/floating-ui/floating-ui/releases)
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/dom/CHANGELOG.md)
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/dom@1.7.6/packages/dom)

Updates `esbuild-sass-plugin` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/glromeo/esbuild-sass-plugin/releases)
- [Commits](https://github.com/glromeo/esbuild-sass-plugin/commits/v3.7.0)

Updates `globby` from 16.1.1 to 16.2.0
- [Release notes](https://github.com/sindresorhus/globby/releases)
- [Commits](sindresorhus/globby@v16.1.1...v16.2.0)

Updates `isomorphic-git` from 1.37.2 to 1.38.1
- [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases)
- [Commits](isomorphic-git/isomorphic-git@v1.37.2...v1.38.1)

Updates `lightningcss` from 1.31.1 to 1.32.0
- [Release notes](https://github.com/parcel-bundler/lightningcss/releases)
- [Commits](https://github.com/parcel-bundler/lightningcss/commits/v1.32.0)

Updates `minimatch` from 10.2.2 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.2...v10.2.5)

Updates `preact` from 10.28.4 to 10.29.2
- [Release notes](https://github.com/preactjs/preact/releases)
- [Commits](preactjs/preact@10.28.4...10.29.2)

Updates `preact-render-to-string` from 6.6.6 to 6.7.0
- [Release notes](https://github.com/preactjs/preact-render-to-string/releases)
- [Changelog](https://github.com/preactjs/preact-render-to-string/blob/main/CHANGELOG.md)
- [Commits](preactjs/preact-render-to-string@v6.6.6...v6.7.0)

Updates `serve-handler` from 6.1.6 to 6.1.7
- [Release notes](https://github.com/vercel/serve-handler/releases)
- [Commits](vercel/serve-handler@6.1.6...6.1.7)

Updates `workerpool` from 10.0.1 to 10.0.2
- [Changelog](https://github.com/josdejong/workerpool/blob/master/HISTORY.md)
- [Commits](josdejong/workerpool@v10.0.1...v10.0.2)

Updates `ws` from 8.19.0 to 8.20.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.19.0...8.20.1)

Updates `yaml` from 2.8.2 to 2.9.0
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.2...v2.9.0)

Updates `@quartz-community/types` from `0d62f52` to `d342893`
- [Commits](quartz-community/types@0d62f52...d342893)

Updates `@quartz-community/utils` from `1ad4e4f` to `7a43501`
- [Commits](quartz-community/utils@1ad4e4f...7a43501)

Updates `@types/node` from 25.3.0 to 25.9.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `esbuild` from 0.27.3 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.3...v0.28.0)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.3)

Updates `tsx` from 4.21.0 to 4.22.3
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.22.3)

Updates `typescript` from 5.9.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@floating-ui/dom"
  dependency-version: 1.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: esbuild-sass-plugin
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: globby
  dependency-version: 16.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: isomorphic-git
  dependency-version: 1.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lightningcss
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: preact
  dependency-version: 10.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: preact-render-to-string
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: serve-handler
  dependency-version: 6.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: workerpool
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: yaml
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@quartz-community/types"
  dependency-version: d342893db8240099cfd9d4499996333f1ca636b4
  dependency-type: direct:development
  dependency-group: production-dependencies
- dependency-name: "@quartz-community/utils"
  dependency-version: 7a43501ac1c728e8a7bfa75db35e8791bfa1f41c
  dependency-type: direct:development
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.22.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants