Bump the pkgs group with 8 updates by dependabot[bot] · Pull Request #11 · VSC-NeuroPilot/neurontainer

dependabot · 2025-12-23T01:06:47Z

Bumps the pkgs group with 8 updates:

Package	From	To
preact	`10.26.9`	`10.28.0`
typescript	`5.8.3`	`5.9.3`
vite	`7.0.8`	`7.3.0`
hono	`4.10.7`	`4.11.1`
neuro-game-sdk	`1.0.5`	`1.0.6`
winston	`3.18.3`	`3.19.0`
esbuild	`0.27.1`	`0.27.2`
tsx	`4.7.3`	`4.21.0`

Updates preact from 10.26.9 to 10.28.0

Release notes

Sourced from preact's releases.

10.28.0

Types

Updates dangerouslySetInnerHTML type so future TS will accept Trusted… (#4931, thanks @lukewarlow)

Adds snap events (#4947, thanks @argyleink)

Remove missed jsx duplicates (#4950, thanks @rschristian)

Fix scroll events (#4949, thanks @rschristian)

Fixes

Fix cascading renders with signals (#4966, thanks @JoviDeCroock)

add commpat/server.browser entry (#4941 & #4940, thanks @marvinhagemeister)

Avoid lazy components without result going in throw loop (#4937, thanks @JoviDeCroock)

Performance

Backport some v11 optimizations (#4967, thanks @JoviDeCroock)

10.27.2

Types

Mirror non-JSX types to the 'preact' namespace (#4904, thanks @rschristian)

Fixes

Address memory leak (#4906, thanks @JoviDeCroock)

10.27.1

Performance

Avoid re-inserting children during bailout (#4890, thanks @vasylenkoval)

Types

add missing React.Key (#4864, thanks @shyguy1412)

make React.SVGAttributes generic (#4863, thanks @shyguy1412)

Fixes

Add .render property referencing original render function (#4870, thanks @upupming)

Add .type property referencing original component (#4869, thanks @upupming)

Maintenance

Fix benchmarks for v10.x (#4891, thanks @rschristian)

Correct contributing docs (#4861, thanks @JoviDeCroock)

10.27.0

Features

... (truncated)

Commits

b36b6a7 10.28.0 (#4968)
4d40e96 Backport some v11 optimizations (#4967)
7b74b40 Fix cascading renders with signals (#4966)
3ab5c6f Updates dangerouslySetInnerHTML type so future TS will accept Trusted… (#4931)
ff30c2b Adds snap events (#4947)
8ac2681 types: Missed jsx duplicates (#4950)
20ba6cc types: Fix scroll events v10.x (#4949)
3a5b4ba Merge pull request #4941 from preactjs/v10-server-browser-entry
a347b0b fix(compat): add commpat/server.browser entry (#4940)
58ad04e Avoid lazy components without result going in throw loop (#4937)
Additional commits viewable in compare view

Updates typescript from 5.8.3 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

fixed issues query for Typescript 5.9.0 (Beta).

fixed issues query for Typescript 5.9.1 (RC).

No specific changes for TypeScript 5.9.2 (Stable)

fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

npm

TypeScript 5.9

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

fixed issues query for Typescript 5.9.0 (Beta).

fixed issues query for Typescript 5.9.1 (RC).

No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

npm

TypeScript 5.9 RC

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

fixed issues query for Typescript 5.9.0 (Beta).

fixed issues query for Typescript 5.9.1 (RC).

Downloads are available on:

npm

TypeScript 5.9 Beta

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement.

fixed issues query for Typescript 5.9.0 (Beta).

Downloads are available on:

npm

Commits

c63de15 Bump version to 5.9.3 and LKG
8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
5be3346 Bump version to 5.9.2 and LKG
ad825f2 Bump version to 5.9.1-rc and LKG
463a5bf Update LKG
Additional commits viewable in compare view

Updates vite from 7.0.8 to 7.3.0

Release notes

Sourced from vite's releases.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.1

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.3.0 (2025-12-15)

Features

deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

plugin shortcut support (#21211) (721f163)

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

config: handle shebang properly (#21158) (df5a30d)

deps: update all non-major dependencies (#21146) (a3cd262)

deps: update all non-major dependencies (#21175) (72e398a)

fix external: true merging (#21164) (5ef557a)

shortcuts not rebound after server restart (#21166) (3765f7b)

Performance Improvements

deps: replace debug with obug (#21137) (203a551)

Documentation

clarify manifest.json imports field is JS chunks only (#21136) (46d3077)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21174) (74559c9)

7.2.4 (2025-11-20)

Bug Fixes

revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

7.2.3 (2025-11-20)

Bug Fixes

allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)

deps: update all non-major dependencies (#21096) (6a34ac3)

deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

deps: replace debug with obug (#21107) (acfe939)

Miscellaneous Chores

... (truncated)

Commits

acf7e05 release: v7.3.0
cff26ec feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)
317b3b2 release: v7.2.7
721f163 fix: plugin shortcut support (#21211)
bda5dbb release: v7.2.6
3aa7527 release: v7.2.5
72e398a fix(deps): update all non-major dependencies (#21175)
3765f7b fix: shortcuts not rebound after server restart (#21166)
5ef557a fix: fix external: true merging (#21164)
74559c9 chore(deps): update rolldown-related dependencies (#21174)
Additional commits viewable in compare view

Updates hono from 4.10.7 to 4.11.1

Release notes

Sourced from hono's releases.

v4.11.1

What's Changed

fix(types): fix app.on method array type inference by @kosei28 in honojs/hono#4578

Full Changelog: honojs/hono@v4.11.0...v4.11.1

v4.11.0

Release Notes

Hono v4.11.0 is now available!

This release includes new features for the Hono client, middleware improvements, and an important type system fix.

Type System Fix for Middleware

We've fixed a bug in the type system for middleware. Previously, app did not have the correct type with pathless handlers:
const app = new Hono()
  .use(async (c, next) => {
    await next()
  })
  .get('/a', async (c, next) => {
    await next()
  })
  .get((c) => {
    return c.text('Hello')
  })
// app's type was incorrect
This has now been fixed.

Thanks @kosei28!

Typed URL for Hono Client

You can now pass the base URL as the second type parameter to hc to get more precise URL types:
const client = hc<typeof app, 'http://localhost:8787'>(
  'http://localhost:8787/'
)
const url = client.api.posts.$url()
// url is TypedURL with precise type information
// including protocol, host, and path

... (truncated)

Commits

1fbe45b 4.11.1
37c3809 fix(types): fix app.on method array type inference (#4578)
fe278e9 4.11.0
0d739b6 Merge pull request #4574 from honojs/next
3e12de6 fix(types): replace schema-based path tracking with CurrentPath parameter (#4...
6d62638 feat(secure-headers): Add CSP report-to and report-uri directive support (#4555)
b694129 feat(client): add buildSearchParams option to customize query serialization (...
d94f4a4 feat(context-storage): Add optional tryGetContext helper to context-storage m...
61f473b feat(pretty-json): support force option (#4531)
44bb7bb feat(timing): add wrapTime to simplify usage (#4519)
Additional commits viewable in compare view

Updates neuro-game-sdk from 1.0.5 to 1.0.6

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for neuro-game-sdk since your current version.

Updates winston from 3.18.3 to 3.19.0

Release notes

Sourced from winston's releases.

v3.19.0

Run npm audit fix e7ccdc4

Don't include jest.config.js in npm package 5a63c8c

fix: append error cause when using logger.child() (#2467) e74a7ae

Bump rimraf from 5.0.1 to 5.0.10 (#2517) 8a956fd

fix: ensure File transport flushes all data before emitting finish (#2594) 86c890f

Bump actions/setup-node from 4 to 6 (#2589) 3b8be02

Bump @babel/core from 7.28.0 to 7.28.5 (#2591) f4c3e2c

Bump actions/checkout from 4 to 6 (#2593) dd7906e

chore: migrate test runner from mocha to jest (#2567) 2e9eb18

winstonjs/winston@v3.18.3...v3.19.0

Commits

ed45345 3.19.0
e7ccdc4 Run npm audit fix
5a63c8c Don't include jest.config.js in npm package
e74a7ae fix: append error cause when using logger.child() (#2467)
8a956fd Bump rimraf from 5.0.1 to 5.0.10 (#2517)
86c890f fix: ensure File transport flushes all data before emitting finish (#2594)
3b8be02 Bump actions/setup-node from 4 to 6 (#2589)
f4c3e2c Bump @babel/core from 7.28.0 to 7.28.5 (#2591)
dd7906e Bump actions/checkout from 4 to 6 (#2593)
2e9eb18 chore: migrate test runner from mocha to jest (#2567)
See full diff in compare view

Updates esbuild from 0.27.1 to 0.27.2

Release notes

Sourced from esbuild's releases.

v0.27.2
Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by @hybrist.
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:
/* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}
This change was contributed by @BPJEnnova.
Additional minification of switch statements (#4176, #4359)

This release contains additional minification patterns for reducing switch statements. Here is an example:
// Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}
// New output (with --minify)

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.2
Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by @hybrist.
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:
/* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}
This change was contributed by @BPJEnnova.
Additional minification of switch statements (#4176, #4359)

This release contains additional minification patterns for reducing switch statements. Here is an example:
// Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}

... (truncated)

Commits

cd83297 publish 0.27.2 to npm
2759721 additional tests for switch with break
fd2b4b3 update release notes
c8d93a7 fix #4357: -webkit- prefix for mask shorthand (#4358)
92ff12c compat table: update @types/node
a35eceb compat table: fix a type error with the new types
f598984 fix make compat-table to install dependencies
f7f6df0 release notes for #4361
6f8ec15 fix: allow subpath imports that start with #/ (#4361)
f7ae61f minify some switch statements to if-else statement
Additional commits viewable in compare view

Updates tsx from 4.7.3 to 4.21.0

Release notes

Sourced from tsx's releases.

v4.21.0

4.21.0 (2025-11-30)

Features

upgrade esbuild (#748) (048fb62)

This release is also available on:

npm package (@latest dist-tag)

v4.20.6

4.20.6 (2025-09-26)

Bug Fixes

properly hide relaySignal from process.listeners() (#741) (710a424)

This release is also available on:

npm package (@latest dist-tag)

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

handle ambiguous packages (796053a)

This release is also available on:

npm package (@latest dist-tag)

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes

... (truncated)

Commits

f6284cd ci: lock in semantic-release v24
048fb62 feat: upgrade esbuild (#748)
710a424 fix: properly hide relaySignal from process.listeners() (#741)
20b91c4 docs: make sponsors dynamic
08dcd59 chore: move vercel settings to root
e6d1a47 docs: obfuscate aside classname
de2719d style: remove unused variable
13f2954 chore: upgrade docs deps
0504525 chore: upgrade manten
132fdd8 test: assert require.cache
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pkgs group with 8 updates: | Package | From | To | | --- | --- | --- | | [preact](https://github.com/preactjs/preact) | `10.26.9` | `10.28.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.3` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.0.8` | `7.3.0` | | [hono](https://github.com/honojs/hono) | `4.10.7` | `4.11.1` | | [neuro-game-sdk](https://github.com/AriesAlex/typescript-neuro-game-sdk) | `1.0.5` | `1.0.6` | | [winston](https://github.com/winstonjs/winston) | `3.18.3` | `3.19.0` | | [esbuild](https://github.com/evanw/esbuild) | `0.27.1` | `0.27.2` | | [tsx](https://github.com/privatenumber/tsx) | `4.7.3` | `4.21.0` | Updates `preact` from 10.26.9 to 10.28.0 - [Release notes](https://github.com/preactjs/preact/releases) - [Commits](preactjs/preact@10.26.9...10.28.0) Updates `typescript` from 5.8.3 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.8.3...v5.9.3) Updates `vite` from 7.0.8 to 7.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite) Updates `hono` from 4.10.7 to 4.11.1 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.10.7...v4.11.1) Updates `neuro-game-sdk` from 1.0.5 to 1.0.6 - [Commits](https://github.com/AriesAlex/typescript-neuro-game-sdk/commits) Updates `winston` from 3.18.3 to 3.19.0 - [Release notes](https://github.com/winstonjs/winston/releases) - [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md) - [Commits](winstonjs/winston@v3.18.3...v3.19.0) Updates `esbuild` from 0.27.1 to 0.27.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.27.1...v0.27.2) Updates `tsx` from 4.7.3 to 4.21.0 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.7.3...v4.21.0) --- updated-dependencies: - dependency-name: preact dependency-version: 10.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pkgs - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pkgs - dependency-name: vite dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pkgs - dependency-name: hono dependency-version: 4.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pkgs - dependency-name: neuro-game-sdk dependency-version: 1.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pkgs - dependency-name: winston dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pkgs - dependency-name: esbuild dependency-version: 0.27.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pkgs - dependency-name: tsx dependency-version: 4.21.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pkgs ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 23, 2025

KTrain5169 merged commit 56e1f9d into main Jan 8, 2026
1 check passed

dependabot bot deleted the dependabot/npm_and_yarn/pkgs-ce32a4167b branch January 8, 2026 12:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Bump the pkgs group with 8 updates#11

Bump the pkgs group with 8 updates#11
KTrain5169 merged 1 commit intomainfrom
dependabot/npm_and_yarn/pkgs-ce32a4167b

dependabot bot commented on behalf of github Dec 23, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

dependabot bot commented on behalf of github Dec 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.28.0

Types

Fixes

Performance

10.27.2

Types

Fixes

10.27.1

Performance

Types

Fixes

Maintenance

10.27.0

Features

TypeScript 5.9.3

TypeScript 5.9

TypeScript 5.9 RC

TypeScript 5.9 Beta

v7.3.0

v7.2.7

v7.2.6

v7.2.5

v7.2.4

v7.2.3

v7.2.2

plugin-legacy@7.2.1

v7.2.1

plugin-legacy@7.2.0

v7.2.0

v7.2.0-beta.1

v7.2.0-beta.0

v7.1.12

v7.1.11

v7.1.10

7.3.0 (2025-12-15)

Features

7.2.7 (2025-12-08)

Bug Fixes

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

7.2.4 (2025-11-20)

Bug Fixes

7.2.3 (2025-11-20)

Bug Fixes

Performance Improvements

Miscellaneous Chores

v4.11.1

What's Changed

v4.11.0

Release Notes

Type System Fix for Middleware

Typed URL for Hono Client

v3.19.0

v0.27.2

0.27.2

v4.21.0

4.21.0 (2025-11-30)

Features

v4.20.6

4.20.6 (2025-09-26)

Bug Fixes

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

dependabot bot commented on behalf of github Dec 23, 2025 •

edited

Loading