Repository navigation
deps: Bump the npm-production group across 1 directory with 8 updates - #235
Merged
mnaimfaizy merged 6 commits intoOct 23, 2026
Merged
Conversation
Bumps the npm-production group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@react-three/fiber](https://github.com/pmndrs/react-three-fiber) | `9.8.1` | `9.8.2` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.55.0` | `1.59.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [@monogrid/gainmap-js](https://github.com/MONOGRID/gainmap-js) | `3.4.0` | `3.7.2` | | [draco3d](https://github.com/google/draco) | `1.5.7` | `1.5.9` | | [postcss](https://github.com/postcss/postcss) | `8.5.29` | `8.5.31` | | [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.13` | `1.2.15` | Updates `@react-three/fiber` from 9.8.1 to 9.8.2 - [Release notes](https://github.com/pmndrs/react-three-fiber/releases) - [Commits](pmndrs/react-three-fiber@v9.8.1...v9.8.2) Updates `lucide-react` from 1.55.0 to 1.59.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.59.0/packages/lucide-react) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@monogrid/gainmap-js` from 3.4.0 to 3.7.2 - [Release notes](https://github.com/MONOGRID/gainmap-js/releases) - [Changelog](https://github.com/MONOGRID/gainmap-js/blob/main/CHANGELOG.md) - [Commits](MONOGRID/gainmap-js@v3.4.0...v3.7.2) Updates `draco3d` from 1.5.7 to 1.5.9 - [Release notes](https://github.com/google/draco/releases) - [Commits](google/draco@1.5.7...1.5.9) Updates `postcss` from 8.5.29 to 8.5.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.29...8.5.31) Updates `rolldown` from 1.2.13 to 1.2.15 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.15/packages/rolldown) --- updated-dependencies: - dependency-name: "@monogrid/gainmap-js" dependency-version: 3.7.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: "@react-three/fiber" dependency-version: 9.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: draco3d dependency-version: 1.5.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: lucide-react dependency-version: 1.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-production - dependency-name: postcss dependency-version: 8.5.31 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: rolldown dependency-version: 1.2.14 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm-production-7b1bbecb87
branch
from
October 22, 2026 01:05
d5eb48b to
72f624c
Compare
Secure Install Review failed on main because vite 8.3.1 sits in the advisory range 8.3.0-8.3.2. 8.3.4 is the newest patched release that is at least seven days old. Co-authored-by: Mohammad Naim Faizy <mnaimfaizy@users.noreply.github.com>
…n/npm-production-7b1bbecb87 Co-authored-by: Mohammad Naim Faizy <mnaimfaizy@users.noreply.github.com>
monaco-editor 0.57.0 still depends on dompurify 3.4.15, and the override that forced 3.4.16 is now inside the critical advisory range. 3.4.17 is the first patched release. No newer Monaco release exists. Co-authored-by: Mohammad Naim Faizy <mnaimfaizy@users.noreply.github.com>
mnaimfaizy
approved these changes
Oct 23, 2026
dependabot
Bot
deleted the
dependabot/npm_and_yarn/npm-production-7b1bbecb87
branch
October 23, 2026 05:18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-production group with 8 updates in the / directory:
9.8.19.8.21.55.01.59.019.3.019.3.119.3.019.3.13.4.03.7.21.5.71.5.98.5.298.5.311.2.131.2.15Updates
@react-three/fiberfrom 9.8.1 to 9.8.2Release notes
Sourced from @react-three/fiber's releases.
Commits
d74622efix(fiber): port the Portal leak fixes from v10 (#4030)a9f8dc0Merge pull request #4024 from SatvikMishra08/docs/fix-dead-links14c5bf1docs: fix two dead links in testing and basic animations pages9e53355Merge pull request #4019 from pmndrs/claude/pr-templatecf6d9d0chore: add a pull request template839fb57Merge pull request #4011 from pmndrs/docs-pmndrs-palette487a767docs: adopt the default pmndrs palette of@pmndrs/docs4.20d604b18Merge pull request #4005 from pmndrs/docs-builtin-version-switcher13e5e0erefactor(fiber): clarify v9 core domain boundaries (#4008)99fca1fdocs: serve the prerelease line at /nextUpdates
lucide-reactfrom 1.55.0 to 1.59.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
3f1255echore(deps-dev): bump@vitejs/plugin-react(#4995)Updates
reactfrom 19.3.0 to 19.3.1Release notes
Sourced from react's releases.
Commits
61aa00d[19.3.x][Flight] Improve transport protocol (#37845)Updates
react-domfrom 19.3.0 to 19.3.1Release notes
Sourced from react-dom's releases.
Commits
61aa00d[19.3.x][Flight] Improve transport protocol (#37845)Updates
@monogrid/gainmap-jsfrom 3.4.0 to 3.7.2Release notes
Sourced from @monogrid/gainmap-js's releases.
... (truncated)
Changelog
Sourced from @monogrid/gainmap-js's changelog.
... (truncated)
Commits
6500c6echore(release): 3.7.2 [skip ci]c7a691ftest: Add a test per tone mapping that checks the decoded HDR matches the sou...0d1ea9dfix(encode): fit the content boost range to the SDR rendition04b83bdchore(release): 3.7.1 [skip ci]66c63aedocs: fix wiki gen60bdf7efix(webgpu): avoid TSL vec4() length error in SDR renditione39f3a4chore(release): 3.7.0 [skip ci]4bbfdfdfeat(webgpu): node-based gain map encoder (#87)6785697fix(webgl): legacy WebGLRenderer decode api not deprecated anymore6fde466chore(release): 3.6.1 [skip ci]Updates
draco3dfrom 1.5.7 to 1.5.9Release notes
Sourced from draco3d's releases.
Commits
5546288Draco 1.5.9 release.13445d3Draco 1.5.8 release.eb7c044Merge pull request #1246 from Fedr/fix-emscripten-python-check2df0d4eMerge branch 'main' into fix-emscripten-python-checkb32e25bMerge pull request #1241 from Filyus/kd-tree-decoder-undo-log5db36bcMerge branch 'main' into kd-tree-decoder-undo-logb312402Merge pull request #1239 from Filyus/geometric-normal-only-over-octahedronc465230Merge branch 'main' into geometric-normal-only-over-octahedronc301b6aMerge pull request #1238 from Filyus/exact-wrap-decodingba5e926Merge branch 'main' into exact-wrap-decodingMaintainer changes
This version was pushed to npm by igor2026, a new releaser for draco3d since your current version.
Updates
postcssfrom 8.5.29 to 8.5.31Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
d190857Release 8.5.31 version4ef6d8cUpdate dependencies6abd674Call the builder with every node when the output is escaped (#2175)f1aca7eRelease 8.5.30 version9d83445Update dependencies6c9bc73Fix invalid source map mapping on escaping before new line (#2169)1fd8f88Add missed changes in changelogUpdates
rolldownfrom 1.2.13 to 1.2.15Release notes
Sourced from rolldown's releases.
... (truncated)
Changelog
Sourced from rolldown's changelog.
... (truncated)
Commits
89d821crelease: v1.2.15 (#11261)3b0841efeat(rolldown_plugin_vite_resolve): addisBundledto pick the browser-exter...a973d41chore(deps): upgrade oxc to 0.155.0 (#11228)5bfb74efeat(dev): mark entry modules in the HMR module graph (#11252)fb0a8dbfix(rolldown_plugin_vite_resolve): handle externalrequirefor `ssr.target:...547a5a7fix(rolldown_plugin_vite_build_import_analysis): only wrap dynamic imports wi...648591ffeat: mark module starts with// \<id>comments instead of#regionpairs (...3f03741fix(chunk-import-map): keep common chunk keys unique when enabling inline com...33a987dfix: only register signal-exit handler when a trace subscriber is active (#11...c9a8cdarelease: v1.2.14 (#11210)