Skip to content

build(deps): bump the minor-and-patch group with 9 updates - #201

Merged
uhyo merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-8105f6198e
Nov 8, 2026
Merged

build(deps): bump the minor-and-patch group with 9 updates#201
uhyo merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-8105f6198e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 9 updates:

Package From To
oxlint 1.90.0 1.91.0
@shikijs/rehype 4.5.0 4.6.0
shiki 4.5.0 4.6.0
wrangler 4.155.0 4.157.0
@vitejs/plugin-rsc 0.5.38 0.5.39
tsdown 0.23.3 0.23.5
vitest 5.0.5 5.1.0
@vitejs/plugin-react 6.1.2 6.2.1
vite 8.3.5 8.3.6

Updates oxlint from 1.90.0 to 1.91.0

Release notes

Sourced from oxlint's releases.

oxlint v1.91.0

🚀 Features

  • 004647a track_memory_allocs: Add allocation tracking for linter rules (#28470) (Cam McHenry)
  • 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)

🐛 Bug Fixes

  • a205cd3 linter/eslint/no-control-regex: Detect raw control characters (#28548) (camc314)
  • 7c65777 linter/unicorn/prefer-global-this: Align typeof and worker API handling (#28549) (camc314)
  • 987d5f1 linter/unicorn/no-invalid-fetch-options: Avoid treating unknown methods as GET (#28547) (camc314)
  • e234dc8 linter/unicorn/no-useless-error-capture-stack-trace: Move to suspicious category (#28545) (camc314)
  • b3dc411 linter/typescript/no-non-null-asserted-nullish-coalescing: Move to suspicious category (#28546) (camc314)
  • cb64638 regular_expression: Reject incomplete Unicode atom escapes (#28448) (Boshen)
  • c67167e linter: Only run React Compiler rules on files with top-level components or hooks (Boshen)
  • 4c9d5aa linter: Treat Reanimated shared values as ref-like in React Compiler rules (Boshen)
  • 61fe2af linter/react: Ignore impure calls in async components in react/purity (Rahul Kashyap)
  • ed7df7d ast/estree: Include comments in TS Program span (#28326) (camc314)
  • 31cbe37 linter: Make gitlab fingerprints unique per diagnostic (#28307) (camc314)

⚡ Performance

  • 564559d linter/prefer-const: Avoid collecting resolved references (#28732) (Dunqing)
  • bb947dc linter: Skip numeric separator formatting for short integers (#28485) (Cam McHenry)
  • 1043dfa linter: Avoid collecting prefer-const binding identifiers (#28484) (Cam McHenry)
  • 7c93eef linter: Reduce branches-sharing-code scratch allocations (#28483) (Cam McHenry)
  • c0065fd linter: Allocate escape-case replacements only when needed (#28482) (Cam McHenry)
  • d837414 linter: Lazily normalize capitalized-comments text (#28481) (Cam McHenry)
  • 6baaad6 linter: Avoid no-var binding identifier allocations (#28480) (Cam McHenry)
  • 882053b linter: Skip read-only parameters in no-param-reassign (#28479) (Cam McHenry)
  • 92deebf linter: Reduce no-unmodified-loop-condition allocations (#28478) (Cam McHenry)
  • f01d52d linter: Reduce no-duplicate-case allocations (#28477) (Cam McHenry)
  • 6a72d84 linter: Reduce no-dupe-class-members allocations (#28476) (Cam McHenry)
  • 77599ef linter: Reduce no-this-before-super allocations (#28475) (Cam McHenry)
  • 2ea9f58 linter/no-dupe-else-if: Use smallvec to reduce allocs (#28474) (Cam McHenry)
  • 69f0204 linter/react/rules-of-hooks: Reduce allocs (#28473) (Cam McHenry)
  • b138c20 linter: Reduce allocs in no-dupe-keys (#28472) (Cam McHenry)
  • 6f3e982 linter: Avoid operator allocations in no-useless-length-check (#28471) (Cam McHenry)
  • fd68928 react-compiler: Skip passes lint does not need (Yagiz Nizipli)
  • 224f4dd linter/eslint/sort-keys: Reserve initial capacity for string (#27624) (Cam McHenry)
  • e4e01a3 linter/import/no-cycle: Compare visited modules by absolute resolved path (#27517) (Cam McHenry)
  • 741b29b linter/import/no-cycle: Cache sorted module record snapshots (#27516) (Cam McHenry)
  • 20022bb linter/import/no-cycle: Reuse traversal buffers between imports (#27481) (Cam McHenry)
  • fd5edb7 linter/import/no-cycle: Reuse module records in diagnostic stack (#27480) (Cam McHenry)
  • 73e877c linter/import/no-cycle: Don't allocate paths already seen (#27478) (Cam McHenry)
  • 1515d53 linter/react/forward-ref-uses-ref: Narrow forward-ref-uses-ref dispatch (#28367) (Cam McHenry)
  • ee51c01 linter/react/no-string-refs: Narrow AST dispatch (#28366) (Cam McHenry)
  • bbfd692 linter/react/no-children-pop: Narrow AST dispatch (#28365) (Cam McHenry)
  • a86158b linter/unicorn/prefer-set-size: Narrow AST dispatch (#28364) (Cam McHenry)
  • a777fa6 linter/eslint/no-iterator: Narrow member dispatch (#28363) (Cam McHenry)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.91.0] - 2026-11-02

🚀 Features

  • 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)
Commits
  • f3fcdcc release(apps): oxlint v1.91.0 && oxfmt v0.76.0 (#28718)
  • 419c1b0 feat(linter): add allow and allowPattern options to react/capitalized-calls
  • See full diff in compare view

Updates @shikijs/rehype from 4.5.0 to 4.6.0

Release notes

Sourced from @​shikijs/rehype's releases.

v4.6.0

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates shiki from 4.5.0 to 4.6.0

Release notes

Sourced from shiki's releases.

v4.6.0

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates wrangler from 4.155.0 to 4.157.0

Release notes

Sourced from wrangler's releases.

wrangler@4.157.0

Minor Changes

  • #16660 34f34b3 Thanks @​punkeel! - Allow opting into zstd compression for Wrangler-built container image layers with WRANGLER_CONTAINER_IMAGE_COMPRESSION=zstd.

Patch Changes

  • #16670 b14b9dc Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-03

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

  • #16011 44d1ee4 Thanks @​wra-sol! - Offer to delete a Worker's Container applications when running wrangler delete

    Previously, wrangler delete removed only the Worker, leaving the Container applications that wrangler deploy created for it running and billing. It now offers to delete them as well. With --force, or in CI and other non-interactive contexts, it lists them instead so they can be removed with wrangler containers delete <id>.

  • #16670 b14b9dc Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20261102.1 ^5.20261103.1
    workerd 1.20261102.1 1.20261103.1

  • Updated dependencies [b14b9dc, b14b9dc, d2eda1c, 2750917]:

wrangler@4.156.2

Patch Changes

  • #16642 d38cb02 Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-02

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

  • #16642 d38cb02 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20261101.1 ^5.20261102.1
    workerd 1.20261101.1 1.20261102.1

  • #16623 51bbf8b Thanks @​petebacondarwin! - Deprecate shared tooling helper exports from Miniflare

    Miniflare continues to export getNodeCompat, NodeJSCompatMode, and getFreshSourceMapSupport for compatibility. These exports are deprecated and now use the implementations in @cloudflare/workers-utils. Add a dependency on that package and replace the Miniflare imports with:

    import {
  getNodeCompat,

... (truncated)

Commits
  • 9a0732c Version Packages (#16654)
  • 44d1ee4 fix(wrangler): stop wrangler delete orphaning Container applications (#16011)
  • 8ac43df Require explicit route metadata flags when downloading Worker configuration (...
  • 680666e Version Packages (#16646)
  • e5b1798 Avoid unrelated route permission checks when comparing dashboard configuratio...
  • 51bbf8b [miniflare] Move shared tooling helpers to workers-utils (#16623)
  • 1598fd3 [vitest-plugin] Support cloudflare.config.ts with the new config option (#16424)
  • ca55031 Version Packages (#16598)
  • 2667a9f [wrangler] Fix Pages Functions middleware routing for repeated slashes (#16603)
  • 5740867 [wrangler] Enforce the Pages development asset directory boundary (#16535)
  • Additional commits viewable in compare view

Updates @vitejs/plugin-rsc from 0.5.38 to 0.5.39

Release notes

Sourced from @​vitejs/plugin-rsc's releases.

plugin-rsc@0.5.39

Features

  • rsc: allow rejecting server references during decodeReply/decodeAction (#1520) (505da21)

Bug Fixes

  • deps: update all non-major dependencies (#1517) (b3e9835)
  • deps: update all non-major dependencies (#1531) (ef758ba)
  • rsc: inline packages with react in dependencies (#1550) (d724b6b)
  • rsc: reuse server css resources element across renders (#1534) (9678b48)

Documentation

  • rsc: document barrel package workaround for validate-imports (#1519) (4ffd181)

Tests

Changelog

Sourced from @​vitejs/plugin-rsc's changelog.

0.5.39 (2026-11-05)

Features

  • rsc: allow rejecting server references during decodeReply/decodeAction (#1520) (505da21)

Bug Fixes

  • deps: update all non-major dependencies (#1517) (b3e9835)
  • deps: update all non-major dependencies (#1531) (ef758ba)
  • rsc: inline packages with react in dependencies (#1550) (d724b6b)
  • rsc: reuse server css resources element across renders (#1534) (9678b48)

Documentation

  • rsc: document barrel package workaround for validate-imports (#1519) (4ffd181)

Tests

Commits
  • 123c153 release: plugin-rsc@0.5.39 (#1552)
  • 4a72c6d test(rsc): use Fixture type alias (#1551)
  • d724b6b fix(rsc): inline packages with react in dependencies (#1550)
  • 9678b48 fix(rsc): reuse server css resources element across renders (#1534)
  • ef758ba fix(deps): update all non-major dependencies (#1531)
  • 505da21 feat(rsc): allow rejecting server references during decodeReply/decodeAction ...
  • b3e9835 fix(deps): update all non-major dependencies (#1517)
  • 4ffd181 docs(rsc): document barrel package workaround for validate-imports (#1519)
  • See full diff in compare view

Updates tsdown from 0.23.3 to 0.23.5

Release notes

Sourced from tsdown's releases.

v0.23.5

Notes

rolldown-plugin-dts is now v0.29. tsdown passes dts options through to it unchanged, so its deprecations show up in your config too. Full details are in the rolldown-plugin-dts v0.29.0 release notes.

Migration

tsc-only dts options move under dts.tsc. The top-level build, incremental, parallel, eager, newContext and vue options still work but log a deprecation warning. Setting the same option at both levels throws an error. emitJs stays at the top level.

 export default defineConfig({
   dts: {
-    vue: true,
+    tsc: { vue: true },
   },
 })

tsgo (experimental, not covered by semver):

  • @typescript/native-preview is no longer supported. Install TypeScript 7.1+ (typescript@7.1.0-beta), or point tsgo.moduleUrl at another build.
  • On TypeScript 7.1+, tsgo.path is the API server executable, not the tsgo CLI. You usually don't need to set it.
  • Declaration maps come only from compilerOptions.declarationMap: true in tsconfig; the sourcemap option no longer enables them.
  • TypeScript 7.0 still works with a deprecation warning, but that backend will be removed soon.

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v0.23.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
  • 7a50502 chore: release v0.23.5
  • e12ab7f feat(dts): upgrade rolldown-plugin-dts to v0.29, upgrade deps (#1121)
  • 4435a48 perf(deps): read each package.json once when resolving dep subpaths (#1093)
  • daf9083 docs(vue): link to CSS support from the Vue recipe (#1117)
  • c8ca303 fix(css): remove dangling requires and handle CSS extensions in chunk names (...
  • 99b3b03 test(migrate): fold duplicate tsup default-value tests (#1116)
  • 181af08 feat(css): support css: false to disable built-in CSS handling (#1113)
  • 83b6fb5 chore: release v0.23.4
  • 8e22a34 chore: upgrade deps, hoist regex patterns
  • f925e52 perf: use tinyps in hooks (#1112)
  • Additional commits viewable in compare view

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates @vitejs/plugin-react from 6.1.2 to 6.2.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.2.1

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

plugin-react@6.2.0

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.2.1 (2026-11-02)

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

6.2.0 (2026-11-02)

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Commits
  • 29efd1c release: plugin-react@6.2.1 (#1544)
  • 22079fa fix(plugin-react): fix new refreshInclude option (#1543)
  • d0f7234 release: plugin-react@6.2.0 (#1542)
  • 186d1e8 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1541)
  • a554a33 feat(plugin-react): expand oxc-transform-react peer dep range (#1540)
  • ef758ba fix(deps): update all non-major dependencies (#1531)
  • 304a92a feat(plugin-react): add refreshInclude and refreshExclude options (#1516)
  • b3e9835 fix(deps): update all non-major dependencies (#1517)
  • 65a1dd5 fix(deps): update react 19.3.1 (#1509)
  • 443be64 chore(deps): update dependency typescript to v7 (

@dependabot
build(deps): bump the minor-and-patch group with 9 updates
df635b1 
Bumps the minor-and-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.90.0` | `1.91.0` |
| [@shikijs/rehype](https://github.com/shikijs/shiki/tree/HEAD/packages/rehype) | `4.5.0` | `4.6.0` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.5.0` | `4.6.0` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.155.0` | `4.157.0` |
| [@vitejs/plugin-rsc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-rsc) | `0.5.38` | `0.5.39` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.23.3` | `0.23.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.5` | `5.1.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.2` | `6.2.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.5` | `8.3.6` |


Updates `oxlint` from 1.90.0 to 1.91.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.91.0/npm/oxlint)

Updates `@shikijs/rehype` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.6.0/packages/rehype)

Updates `shiki` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.6.0/packages/shiki)

Updates `wrangler` from 4.155.0 to 4.157.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.157.0/packages/wrangler)

Updates `@vitejs/plugin-rsc` from 0.5.38 to 0.5.39
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-rsc/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-rsc@0.5.39/packages/plugin-rsc)

Updates `tsdown` from 0.23.3 to 0.23.5
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.23.3...v0.23.5)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

Updates `@vitejs/plugin-react` from 6.1.2 to 6.2.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.2.1/packages/plugin-react)

Updates `vite` from 8.3.5 to 8.3.6
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.6/packages/vite)

---
updated-dependencies:
- dependency-name: oxlint
  dependency-version: 1.91.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@shikijs/rehype"
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: shiki
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: wrangler
  dependency-version: 4.157.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-rsc"
  dependency-version: 0.5.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tsdown
  dependency-version: 0.23.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 8, 2026
@uhyo
uhyo merged commit b80bd4e into master Nov 8, 2026
2 checks passed
@uhyo
uhyo deleted the dependabot/npm_and_yarn/minor-and-patch-8105f6198e branch November 8, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@uhyo