Skip to content

chore(deps): bump the npm-deps group with 10 updates #391

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the npm-deps group with 10 updates #391

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps the npm-deps group with 10 updates:

Package From To
@base-ui-components/react 1.0.0-beta.7 1.0.0-rc.0
@lavamoat/preinstall-always-fail 1.0.3 2.1.1
astro 5.16.3 5.16.4
lucide-react 0.555.0 0.556.0
react 19.2.0 19.2.1
react-dom 19.2.0 19.2.1
@lavamoat/allow-scripts 2.5.1 3.4.1
cspell 9.3.2 9.4.0
prettier 3.7.3 3.7.4
prettier-plugin-tailwindcss 0.7.1 0.7.2

Updates @base-ui-components/react from 1.0.0-beta.7 to 1.0.0-rc.0

Release notes

Sourced from @​base-ui-components/react's releases.

v1.0.0-rc.0

General changes

Autocomplete

Checkbox

  • Breaking change: Match native unchecked state in form submission. The Checkbox will not submit the "off" value with a form when unchecked anymore, unless the new uncheckedValue prop is set. (#3406) by @​atomiks

Collapsible

Combobox

Dialog

Menu

Number Field

Popover

Select

... (truncated)

Changelog

Sourced from @​base-ui-components/react's changelog.

v1.0.0-rc.0

Dec 4, 2025

General changes

Autocomplete

Checkbox

  • Breaking change: Match native unchecked state in form submission. The Checkbox will not submit the "off" value with a form when unchecked anymore, unless the new uncheckedValue prop is set. (#3406) by @​atomiks

Collapsible

Combobox

Dialog

Menu

Number Field

Popover

... (truncated)

Commits
  • caa9eeb [release] 1.0.0-rc.0 (#3402)
  • 33692bd [number field] Fix pointer lock release when soft clicking in Firefox (#3378)
  • d2de90b [menu][popover] Fix click sticking with openOnHover prop (#3414)
  • 6c19fa9 [collapsible] Remove render={null} (#3407)
  • 5b869f0 [dialog][popover] Close when pressing focusable element outside (#3380)
  • 0c6d6c4 [checkbox][switch] Match native off state in form submission (#3406)
  • cfddd4c [all components] Fix missing use client directives (#3408)
  • e4d4624 [menu] Do not import client components from MenuStore (#3409)
  • 4266d51 [autocomplete] Fix keepHighlight focus sync (#3399)
  • c4a9062 [NumberField] Fix parsing numbers with Swiss locale (#3361)
  • Additional commits viewable in compare view

Updates @lavamoat/preinstall-always-fail from 1.0.3 to 2.1.1

Release notes

Sourced from @​lavamoat/preinstall-always-fail's releases.

preinstall-always-fail: v2.1.1

2.1.1 (2025-06-24)

Bug Fixes

  • add Node.js v24.0.0 to supported engines (ad9cdcd)

webpack: v1.5.6

1.5.6 (2025-12-02)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • lavamoat-core bumped from ^17.1.1 to ^17.1.2

webpack: v1.5.5

1.5.5 (2025-12-01)

Bug Fixes

  • typescript got confused into creating a cyclic reference in types for scuttling in core (5e25a36)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • lavamoat-core bumped from ^17.1.0 to ^17.1.1

webpack: v1.5.4

1.5.4 (2025-11-19)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • lavamoat-core bumped from ^17.0.1 to ^17.1.0

webpack: v1.5.3

1.5.3 (2025-10-30)

Dependencies

  • The following workspace dependencies were updated

... (truncated)

Changelog

Sourced from @​lavamoat/preinstall-always-fail's changelog.

2.1.1 (2025-06-24)

Bug Fixes

  • add Node.js v24.0.0 to supported engines (ad9cdcd)

2.1.0 (2024-07-11)

Features

  • allow-scripts: support Node.js v22 (0c665ec)

2.0.0 (2023-10-18)

⚠ BREAKING CHANGES

  • The minimum supported Node.js version is now v16.20.0.

Bug Fixes

Commits

Updates astro from 5.16.3 to 5.16.4

Release notes

Sourced from astro's releases.

astro@5.16.4

Patch Changes

  • #14940 2cf79c2 Thanks @​ematipico! - Fixes a bug where Astro didn't properly combine CSP resources from the csp configuration with those added using the runtime API (Astro.csp.insertDirective()) to form grammatically correct CSP headers

    Now Astro correctly deduplicate CSP resources. For example, if you have a global resource in the configuration file, and then you add a a new one using the runtime APIs.

Changelog

Sourced from astro's changelog.

5.16.4

Patch Changes

  • #14940 2cf79c2 Thanks @​ematipico! - Fixes a bug where Astro didn't properly combine CSP resources from the csp configuration with those added using the runtime API (Astro.csp.insertDirective()) to form grammatically correct CSP headers

    Now Astro correctly deduplicate CSP resources. For example, if you have a global resource in the configuration file, and then you add a a new one using the runtime APIs.

Commits

Updates lucide-react from 0.555.0 to 0.556.0

Release notes

Sourced from lucide-react's releases.

Version 0.556.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.555.0...0.556.0

Commits

Updates react from 19.2.0 to 19.2.1

Release notes

Sourced from react's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates react-dom from 19.2.0 to 19.2.1

Release notes

Sourced from react-dom's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Commits

Updates @lavamoat/allow-scripts from 2.5.1 to 3.4.1

Release notes

Sourced from @​lavamoat/allow-scripts's releases.

allow-scripts: v3.4.1

3.4.1 (2025-11-19)

Bug Fixes

allow-scripts: v3.4.0

3.4.0 (2025-09-25)

Features

  • allow-scripts: change the recommended use of allow-scripts to global install (#1823) (48a1d98)

allow-scripts: v3.3.6

3.3.6 (2025-09-22)

Bug Fixes

  • allow-scripts: fix #1796 - correct dev flag in setup (d4f45de)

allow-scripts: v3.3.5

3.3.5 (2025-08-25)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^4.3.3 to ^4.3.4

allow-scripts: v3.3.4

3.3.4 (2025-06-24)

Bug Fixes

  • add Node.js v24.0.0 to supported engines (ad9cdcd)
  • deps: update dependency type-fest to v4.41.0 (#1657) (19e9bf1)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^4.3.2 to ^4.3.3
Changelog

Sourced from @​lavamoat/allow-scripts's changelog.

3.4.1 (2025-11-19)

Bug Fixes

3.4.0 (2025-09-25)

Features

  • allow-scripts: change the recommended use of allow-scripts to global install (#1823) (48a1d98)

3.3.6 (2025-09-22)

Bug Fixes

  • allow-scripts: fix #1796 - correct dev flag in setup (d4f45de)

3.3.5 (2025-08-25)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^4.3.3 to ^4.3.4

3.3.4 (2025-06-24)

Bug Fixes

  • add Node.js v24.0.0 to supported engines (ad9cdcd)
  • deps: update dependency type-fest to v4.41.0 (#1657) (19e9bf1)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^4.3.2 to ^4.3.3

3.3.3 (2025-05-01)

Bug Fixes

... (truncated)

Commits

Updates cspell from 9.3.2 to 9.4.0

Release notes

Sourced from cspell's releases.

v9.4.0

Features

feat: Add option to skip large files (#8040)

New command line option: --max-file-size <value> The value can be <number>[units], number with optional units. Supported units:

  • K, KB - value * 1024
  • M, MB - value * 2^20
  • G, GB - value * 2^30

There is also a new setting called maxFileSize. At the moment, it only takes numbers in bytes.

This allows for setting a global value and overrides based upon glob settings.

Note: the command line value will override any value found in the configuration files.

Fixes

fix: turn off gpg when publishing for now (#8104)

fix: Turnoff signing for now (#8102)

... (truncated)

Changelog

Sourced from cspell's changelog.

v9.4.0 (2025-12-01)

Features

feat: Add option to skip large files (#8040)

New command line option: --max-file-size <value> The value can be <number>[units], number with optional units. Supported units:

  • K, KB - value * 1024
  • M, MB - value * 2^20
  • G, GB - value * 2^30

There is also a new setting called maxFileSize. At the moment, it only takes numbers in bytes.

This allows for setting a global value and overrides based upon glob settings.

Note: the command line value will override any value found in the configuration files.

Fixes

fix: turn off gpg when publishing for now (#8104)

fix: Turnoff signing for now (#8102)

... (truncated)

Commits

Updates prettier from 3.7.3 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits

Updates prettier-plugin-tailwindcss from 0.7.1 to 0.7.2

Release notes

Sourced from prettier-plugin-tailwindcss's releases.

v0.7.2

Fixed

  • Load compatible plugins sequentially to work around race conditions in Node.js (#412)
  • Fix compatibility with prettier-plugin-svelte when using Prettier v3.7+ (#418)
Changelog

Sourced from prettier-plugin-tailwindcss's changelog.

[0.7.2] - 2025-12-01

Fixed

  • Load compatible plugins sequentially to work around race conditions in Node.js (#412)
  • Fix compatibility with prettier-plugin-svelte when using Prettier v3.7+ (#418)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-deps group with 10 updates
218578e 
Bumps the npm-deps group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@base-ui-components/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.0.0-beta.7` | `1.0.0-rc.0` |
| [@lavamoat/preinstall-always-fail](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/preinstall-always-fail) | `1.0.3` | `2.1.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.16.3` | `5.16.4` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.555.0` | `0.556.0` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.1` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.1` |
| [@lavamoat/allow-scripts](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/allow-scripts) | `2.5.1` | `3.4.1` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `9.3.2` | `9.4.0` |
| [prettier](https://github.com/prettier/prettier) | `3.7.3` | `3.7.4` |
| [prettier-plugin-tailwindcss](https://github.com/tailwindlabs/prettier-plugin-tailwindcss) | `0.7.1` | `0.7.2` |


Updates `@base-ui-components/react` from 1.0.0-beta.7 to 1.0.0-rc.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.0.0-rc.0/packages/react)

Updates `@lavamoat/preinstall-always-fail` from 1.0.3 to 2.1.1
- [Release notes](https://github.com/LavaMoat/LavaMoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/preinstall-always-fail/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/LavaMoat/commits/preinstall-always-fail-v2.1.1/packages/preinstall-always-fail)

Updates `astro` from 5.16.3 to 5.16.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@5.16.4/packages/astro)

Updates `lucide-react` from 0.555.0 to 0.556.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.556.0/packages/lucide-react)

Updates `react` from 19.2.0 to 19.2.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react)

Updates `react-dom` from 19.2.0 to 19.2.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react-dom)

Updates `@lavamoat/allow-scripts` from 2.5.1 to 3.4.1
- [Release notes](https://github.com/LavaMoat/LavaMoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/allow-scripts/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/LavaMoat/commits/allow-scripts-v3.4.1/packages/allow-scripts)

Updates `cspell` from 9.3.2 to 9.4.0
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v9.4.0/packages/cspell)

Updates `prettier` from 3.7.3 to 3.7.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.3...3.7.4)

Updates `prettier-plugin-tailwindcss` from 0.7.1 to 0.7.2
- [Release notes](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/blob/main/CHANGELOG.md)
- [Commits](tailwindlabs/prettier-plugin-tailwindcss@v0.7.1...v0.7.2)

---
updated-dependencies:
- dependency-name: "@base-ui-components/react"
  dependency-version: 1.0.0-rc.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@lavamoat/preinstall-always-fail"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: astro
  dependency-version: 5.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: lucide-react
  dependency-version: 0.556.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: react
  dependency-version: 19.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: react-dom
  dependency-version: 19.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@lavamoat/allow-scripts"
  dependency-version: 3.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: cspell
  dependency-version: 9.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: prettier
  dependency-version: 3.7.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: prettier-plugin-tailwindcss
  dependency-version: 0.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant