chore(deps): bump the npm group across 1 directory with 19 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the npm group with 19 updates in the / directory:

Package	From	To
@photostructure/tz-lookup	11.5.0	11.7.0
@sentry/browser	10.59.0	11.4.0
@tailwindcss/vite	4.3.2	4.3.3
country-locale-map	1.9.12	1.9.14
dayjs	1.11.19	1.11.23
eslint	10.0.3	10.12.0
jsdom	28.1.0	30.1.1
@types/jsdom	28.0.0	30.0.0
sharp	0.35.4	0.35.5
tailwindcss	4.3.2	4.3.3
typescript	5.9.3	7.0.2
typescript-eslint	8.57.0	8.71.0
vite	8.1.2	8.3.2
yaml	2.9.0	2.9.1
@types/jsdom	28.0.0	30.0.0
@types/node	25.4.0	26.6.4
@vitest/coverage-v8	4.1.11	5.0.3
globals	13.24.0	17.13.0
prettier	3.8.1	3.9.9
vitest	4.1.11	5.0.3

Updates @photostructure/tz-lookup from 11.5.0 to 11.7.0

Release notes

Sourced from @​photostructure/tz-lookup's releases.

11.7.0

Full Changelog: photostructure/tz-lookup@11.6.1...11.7.0

11.6.1

Full Changelog: photostructure/tz-lookup@11.6.0...11.6.1

Release 11.6.0

Full Changelog: photostructure/tz-lookup@11.5.0...11.6.0

Commits

• 6051e7e chore(package): Release 11.7.0
• 187916d rebuild with 2026d
• ea956ae chore: update mocha to version 12.0.0 and npm-check-updates to version 23.1.0
• bb792af chore(workflows): update zizmor-action to version 0.6.3
• 4e48853 chore(package): Release 11.6.1
• 1197561 ci(publish.yaml): move npm releases to tag-bound staged publishing
• 33df01a chore(package.json): add a preflight pre-release check
• e8dd71b chore(package): Release 11.6.0
• aa4b65c chore(ci): update Node.js version matrix to 22, 24, and 26
• 45b25a9 chore(deps): update mocha and npm-check-updates to latest versions
• Additional commits viewable in compare view

Updates @sentry/browser from 10.59.0 to 11.4.0

Release notes

Sourced from @​sentry/browser's releases.

11.4.0

• feat(sveltekit): Support stable SvelteKit 3 (#25009)
• fix(remix): Match the Remix 3.0.0 package versions (#25008)

Bundle size 📦

Path	Size
@​sentry/browser	28.82 KB
@​sentry/browser - with treeshaking flags	27.03 KB
@​sentry/browser - with treeshaking flags tracing without tracing	26.93 KB
@​sentry/browser (incl. Tracing)	50.24 KB
@​sentry/browser (incl. Tracing + Span Streaming)	50.26 KB
@​sentry/browser (incl. Tracing, Profiling)	53.18 KB
@​sentry/browser (incl. Tracing, Replay)	88.91 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	78.15 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	93.5 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	106.16 KB
@​sentry/browser (incl. Feedback)	45.94 KB
@​sentry/browser (incl. sendFeedback)	33.76 KB
@​sentry/browser (incl. FeedbackAsync)	38.75 KB
@​sentry/browser (incl. Metrics)	29.82 KB
@​sentry/browser (incl. Logs)	30.1 KB
@​sentry/browser (incl. Metrics & Logs)	30.74 KB
@​sentry/react	30.63 KB
@​sentry/react (incl. Tracing)	52.54 KB
@​sentry/vue	36.63 KB
@​sentry/vue (incl. Tracing)	53.06 KB
@​sentry/svelte	28.86 KB
@​sentry/remix (Remix 3 client bundle)	54.47 KB
CDN Bundle	30.49 KB
CDN Bundle (incl. Tracing)	50.76 KB
CDN Bundle (incl. Logs, Metrics)	32.68 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	52.65 KB
CDN Bundle (incl. Replay, Logs, Metrics)	72.47 KB
CDN Bundle (incl. Tracing, Replay)	87.46 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	89.39 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	93.48 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	95.42 KB
CDN Bundle - uncompressed	89.98 KB
CDN Bundle (incl. Tracing) - uncompressed	150.87 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	96.4 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	156.69 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	222.93 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	267.8 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	273.6 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	281.18 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	286.97 KB
@​sentry/nextjs (client)	55 KB
@​sentry/sveltekit (client)	50.65 KB

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

11.4.0

• feat(sveltekit): Support stable SvelteKit 3 (#25009)
• fix(remix): Match the Remix 3.0.0 package versions (#25008)

11.3.0

Important Changes

• Remix 3 support (alpha, may break in minor releases)

  • feat(remix): Add Remix 3 browser SDK with a bundled client entry (#24802)
  • feat(remix): Add source map upload for Remix 3 (#24943)
  • feat(remix): Capture Remix 3 component render errors (#24873)
  • feat(remix): Complete Remix 3 server error handling (#24878)
  • feat(remix): Inject debug IDs through the Remix 3 asset server (#24761)
  • feat(remix): Run the orchestrion transform on Remix 3 browser modules (#24894)

• feat(nextjs): Add cache_origin span links to use cache hit spans (#24821)

  A cache.get span for a "use cache" hit now carries a span link (sentry.link.type: 'cache_origin') to the cache.put span of the request that filled the cache entry, connecting the trace that reads a cached value to the trace that produced it.

• fix(cloudflare): Don't treat DO constructor work as incoming RPC calls (#24829)

  Durable Object constructors now run in their own isolation scope. When work that the constructor starts, for example a blockConcurrencyWhile callback, calls a method of the instance, that call is no longer treated as an incoming RPC call, so an error the instance catches itself is no longer reported as unhandled. As a result, Sentry.setTag(), setUser() and setContext() in a constructor now apply only to that constructor work. They no longer reach later fetch, RPC or alarm invocations, because the scope they used to write to is shared by every Durable Object and handler in the isolate. Use initialScope for static data, and set per-instance data in each handler.

• fix(effect)!: Change peerDependency to v4 and fix currentSpan (#24940)

  @sentry/effect now requires a stable Effect v4 release. Effect v4 beta and release candidate versions are no longer supported. @sentry/effect is in alpha, so this ships in a minor release.

Other Changes

• feat(astro): Register astro route provider (#23792)
• feat(cloudflare): Trace TypeSafe Jev calls in Workers AI as evaluate spans (#24833)
• feat(core): Add route provider API for parameterized route resolution (#23551)
• feat(deps): bump devalue from 5.9.2 to 5.9.4 (#24964)
• feat(effect): Add opt-in for external span parents and isolate root spans (#23900)
• feat(nextjs): Register nextjs route provider (#23552)
• feat(nuxt): Register nuxt route provider (#23794)
• feat(remix): Register remix route provider (#23791)
• feat(vue): Register Vue route provider (#23793)
• fix(bundler-plugins): Keep debug IDs on Vite source maps after the preload rewrite (#24920)
• fix(bundler-plugins): Stabilize debug IDs for Rolldown and Vite 8 builds (#24919)
• fix(cloudflare): Skip binding instrumentation work when spans are not sent (#24655)
• fix(core, node, bun, deno): Align server span client address with event IP (#24767)
• fix(hono): Return the existing client on repeated init in Bun and Deno (#24520)
• fix(nitro): Capture errors only through the Nitro error hook (#24952)
• fix(profiling-node): Send profile chunks with client.sendEnvelope (#24896)
• fix(react-router): Avoid duplicating Vite config arrays (#24930)
• fix(react-router): Resolve the Cloudflare entry in Workers and skip trace meta tags in prerendered pages (#24866)

... (truncated)

Commits

• 7f13c61 release: 11.4.0
• fb73adb Merge pull request #25010 from getsentry/prepare-release/11.4.0
• de3fb96 meta(changelog): Update changelog for 11.4.0
• 4f0fd84 feat(sveltekit): Support stable SvelteKit 3 (#25009)
• ba4db28 fix(remix): Match the Remix 3.0.0 package versions (#25008)
• c8738fb Merge pull request #24991 from getsentry/master
• 5f88a0b Merge commit '1e82c8f33488bc54364d343a7c5ab33ed9056f39'
• 1e82c8f release: 11.3.0
• 481c43c Merge pull request #24987 from getsentry/prepare-release/11.3.0
• 1c7308d meta(changelog): Update changelog for 11.3.0
• Additional commits viewable in compare view

Updates @tailwindcss/vite from 4.3.2 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Commits

• c2b24dd 4.3.3 (#20334)
• bdcd708 Don't trigger a full page reload for scanned files that Vite processes as mod...
• See full diff in compare view

Updates country-locale-map from 1.9.12 to 1.9.14

Commits

• See full diff in compare view

Updates dayjs from 1.11.19 to 1.11.23

Release notes

Sourced from dayjs's releases.

v1.11.23

1.11.23 (2026-08-17)

Bug Fixes

• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (dad46e6)
• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (#3181) (2a3785f)

v1.11.22

1.11.22 (2026-08-16)

Bug Fixes

• plugin: timezone compute instance .tz() offset without host DST (#3174) (e27ee80), closes #3169

v1.11.21

1.11.21 (2026-05-26)

Bug Fixes

• preserve unsupported year tokens in format (#3015) (#3016) (8fda602)

v1.11.20

1.11.20 (2026-03-12)

Bug Fixes

• Update locale km.js to support meridiem (#3017) (9d2b6a1)
• update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

Changelog

Sourced from dayjs's changelog.

1.11.23 (2026-08-17)

Bug Fixes

• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (dad46e6)
• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (#3181) (2a3785f)

1.11.22 (2026-08-16)

Bug Fixes

• plugin: timezone compute instance .tz() offset without host DST (#3174) (e27ee80), closes #3169

1.11.21 (2026-05-26)

Bug Fixes

• preserve unsupported year tokens in format (#3015) (#3016) (8fda602)

1.11.20 (2026-03-12)

Bug Fixes

• Update locale km.js to support meridiem (#3017) (9d2b6a1)
• update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

Commits

• 4549b8d chore(release): 1.11.23 [skip ci]
• 2a3785f fix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...
• dad46e6 fix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...
• ae3a550 chore(release): 1.11.22 [skip ci]
• accfc67 D2M (#3177)
• e27ee80 fix(plugin): timezone compute instance .tz() offset without host DST (#3174)
• 98364bc chore: update doc
• f6a1556 chore: update doc
• 6609c5e chore: update doc
• a25f01e chore(release): 1.11.21 [skip ci]
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dayjs since your current version.

Updates eslint from 10.0.3 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates jsdom from 28.1.0 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

• Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
• Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
• Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
• Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
• Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
• Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
• Fixed the storageQuota option being ignored by frames.
• Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
• Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
• Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
• Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
• Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

• Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
• Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
• Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
• Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
• Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
• Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
• Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
• Changed window.close() to preserve access to the document and its DOM through retained references.
• Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
• Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
• Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
• Fixed :focus matching in shadow trees. (@​asamuzaK)
• Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
• Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
• Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
• Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
• Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
• Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
• Fixed successful cached resource loads being treated as aborted.
• Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
• Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
• Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
• Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
• Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
• Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
• Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)

... (truncated)

Commits

• 0a117f4 30.1.1
• 103f67d Remove unnecessary window cleanup from API tests
• cdda00a Test HTTP/2 document and subresource loading
• 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
• d940c20 Share jsdom settings across descendant windows
• 6ba40cb Fix and simplify option propagation
• 3b3be70 Preserve CSS priorities across declaration updates
• 97b2758 Align focusing and unfocusing with HTML
• b7b460b Update w3c-xmlserializer to v6
• 71d562f Update html-encoding-sniffer to v7
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @types/jsdom from 28.0.0 to 30.0.0

Commits

• See full diff in compare view

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract and rotate operations. #4606

• Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract operation. #4606

... (truncated)

Commits

• 51a990f Release v0.35.5
• 96de105 Upgrade to sharp-libvips v1.3.4
• 3a61390 CI: Configure Dependabot with all package.json locations
• 4940c50 Improve gain map support for rotate/flip/flop ops
• 20654aa Prerelease v0.35.5-rc.1
• ef4f934 CI: Upgrade to Ubuntu 26.04
• 358df95 Upgrade to libvips v8.18.7
• 49f4903 Improve gain map support for rotate-then-extract #4606
• 0e2e55e Silence a couple of compiler/static analysis warnings
• cef3b8c Improve gain map support for extract operation #4606
• Additional commits viewable in compare view

Updates tailwindcss from 4.3.2 to 4.3.3

Release notes

Sourced from tailwindcss's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when n...

  Description has been truncated

[dependabot]

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.