chore(deps): bump the npm-minor-and-patch group across 1 directory with 13 updates by dependabot[bot] · Pull Request #53 · OnourImpram/vocation-os

dependabot · 2026-09-14T06:16:42Z

Bumps the npm-minor-and-patch group with 13 updates in the / directory:

Package	From	To
jose	`6.2.3`	`6.2.12`
kysely	`0.29.4`	`0.29.5`
mammoth	`1.12.0`	`1.12.2`
pdfjs-dist	`6.1.200`	`6.3.289`
react	`19.2.7`	`19.3.0`
@types/react	`19.2.17`	`19.3.0`
astro	`7.1.1`	`7.3.2`
jszip	`3.10.1`	`3.10.2`
tsx	`4.23.1`	`4.23.13`
lucide-react	`1.25.0`	`1.44.0`
react-dom	`19.2.7`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
vite	`8.1.5`	`8.3.0`

Updates jose from 6.2.3 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

clarify and shorten public API guidance (be62530)

Refactor

simplify JWS and JWE operation cores (92e9640)

Performance

avoid copying AES-GCM output (6925d43)

deduplicate pending jwks key imports (bf5138b)

encode single-signature JWS input once (7bc9a33)

normalize General JWE shared headers once (78637bd)

normalize jwks selection metadata once (fd3ae3f)

use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

render subpath indexes as tables (94589ee)

shorten API index descriptions (681482f)

Refactor

model JWE key management modes (e01dda6)

types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

jwt: prevent replacing protected headers (ae07d09)

jwt: reject invalid duration inputs (282f9aa)

jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

clarify and shorten public API guidance (be62530)

Refactor

simplify JWS and JWE operation cores (92e9640)

Performance

avoid copying AES-GCM output (6925d43)

deduplicate pending jwks key imports (bf5138b)

encode single-signature JWS input once (7bc9a33)

normalize General JWE shared headers once (78637bd)

normalize jwks selection metadata once (fd3ae3f)

use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

render subpath indexes as tables (94589ee)

shorten API index descriptions (681482f)

Refactor

model JWE key management modes (e01dda6)

types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits

505a55b chore(release): 6.2.12
7bc9a33 perf: encode single-signature JWS input once
78637bd perf: normalize General JWE shared headers once
bf5138b perf: deduplicate pending jwks key imports
b23a6f3 perf: use native encoding for larger ASCII strings
fd3ae3f perf: normalize jwks selection metadata once
6925d43 perf: avoid copying AES-GCM output
be62530 docs: clarify and shorten public API guidance
1b41312 build: preserve README when generation fails
0b51829 build: check tree-shaking for every public binding
Additional commits viewable in compare view

Updates kysely from 0.29.4 to 0.29.5

Release notes

Sourced from kysely's releases.

0.29.5

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

TypeScript 7 is allowing for deeper computations which now cause way more instantiations and wall clock times in various scenarios. We're diving deep into our types and finding optimizations. In this version @koskimas brought some nice wins for builder vs. builder assignability checks.

We're also revamping the docs site, working on style, message and usefulness. Swing by our Discord and share your opinions/ideas. We got docs->apidocs search now. The playground is back supporting short links and will allow saving short links very soon.

🚀 Features

🐞 Bugfixes

fix infinite type check recursion by @koskimas in kysely-org/kysely#1960

Add missing beforeThrow calls in getInflightQueryAbortHandler by @lourd in kysely-org/kysely#1971

📖 Documentation

Fix typo in CreateTypeBuilder.asEnum docstring by @anonpay-sh in kysely-org/kysely#1949

chore: revamp docs hero page. by @igalklebanov in kysely-org/kysely#1959

fix(site): various issues with stats section. by @igalklebanov in kysely-org/kysely#1966

chore(site): replace most text proof with logos. by @igalklebanov in kysely-org/kysely#1968

feat(site): migrate to pagefind for cross-site search we own. by @igalklebanov in kysely-org/kysely#1972

chore(site): drop self-narrating captions, make proof arrows a standing cue by @igalklebanov in kysely-org/kysely#1973

feat(site): grow the proof wall (Replicas, EmbedPDF) + fix production hover by @igalklebanov in kysely-org/kysely#1974

feat(site): add AirTrail, bknd, Civitai, Corsair.dev, Hot Updater, Profilarr and Tunarr to the proof wall. by @igalklebanov in kysely-org/kysely#1975

feat(site): proof-strength gauges, query-module evidence, and new wall names by @igalklebanov in kysely-org/kysely#1976

feat(site): explain the proof gauge behind a (?) on the production wall by @igalklebanov in kysely-org/kysely#1977

feat(site): align docs code blocks with the landing page's VS Code themes by @igalklebanov in kysely-org/kysely#1978

📦 CICD & Tooling

chore: bump deps. by @igalklebanov in kysely-org/kysely#1979

chore: bump github actions. by @igalklebanov in kysely-org/kysely#1980

⚠️ Breaking Changes

🐤 New Contributors

@anonpay-sh made their first contribution in kysely-org/kysely#1949

@lourd made their first contribution in kysely-org/kysely#1971

What's Changed

Full Changelog: kysely-org/kysely@v0.29.4...v0.29.5

Commits

f24018c 0.29.5
dc3ce59 chore: bump deno lts.
7c867ba chore: bump github actions. (#1980)
8d8737b chore: bump deps. (#1979)
07d76ed Add missing beforeThrow calls in getInflightQueryAbortHandler (#1971)
507b751 feat(site): align docs code blocks with the landing page's VS Code themes (#1...
73489ce feat(site): explain the proof gauge behind a (?) on the production wall (#1977)
a757ea0 feat(site): proof-strength gauges, query-module evidence, and new wall names ...
a7d717c feat(site): add AirTrail, bknd, Civitai, Corsair.dev, Hot Updater, Profilarr ...
3ac787e feat(site): grow the proof wall (Replicas, EmbedPDF) + fix production hover (...
Additional commits viewable in compare view

Updates mammoth from 1.12.0 to 1.12.2

Changelog

Sourced from mammoth's changelog.

1.12.2

Avoid prototype pollution when reading the styles defined in a document. This avoids an issue where a maliciously crafted document could be used to set externalFileAccess to true.

1.12.1

Fix: on Windows, when an image's content type includes a backslash in the subpart, files may be written outside of the directory set by --output-dir.

Detect and ignore numbering levels that use numStyleLink to refer to themselves.

Commits

8706034 Bump version to 1.12.2
2888fa1 Create objects without prototypes when used as map with arbitrary keys
31f0c37 Avoid prototype pollution when reading styles
e3b9cec Bump version to 1.12.1
c69ea62 Ignore numbering levels that use numStyleLink to refer to themselves
fbf5e22 Check image content type for backslashes
1a495a9 Add note on performance
ee59684 Remove donations section
See full diff in compare view

Updates pdfjs-dist from 6.1.200 to 6.3.289

Release notes

Sourced from pdfjs-dist's releases.

v6.3.289

This release contains improvements for accessibility, annotation editing, annotation rendering, font conversion, image decoding, performance, text selection and the viewer.

Changes since v6.2.108

Bump the stable version in pdfjs.config by @timvandermeij in mozilla/pdf.js#21655

[Editor] Restore pinch-to-resize on an editor which came back from an undo by @calixteman in mozilla/pdf.js#21644

Use more more optional chaining in the src/ folder by @Snuffleupagus in mozilla/pdf.js#21661

Avoid duplicate shared object clones by @calixteman in mozilla/pdf.js#21658

Avoid mutating source widget parents by @calixteman in mozilla/pdf.js#21660

Fix the selection rendering when a page has been destroyed and rendered again (bug 2054348) by @calixteman in mozilla/pdf.js#21666

l10n: Update locale files by @sync-l10n-for-pdf-js[bot] in mozilla/pdf.js#21669

Sync the viewer chrome with the Firefox design system by @calixteman in mozilla/pdf.js#21665

[api-minor] Convert getJSActions to return data in a Map by @Snuffleupagus in mozilla/pdf.js#21664

Use the client coordinates for the pinch-zoom origin by @calixteman in mozilla/pdf.js#21659

Re-factor the EventBus to use Map/Set internally by @Snuffleupagus in mozilla/pdf.js#21673

Replace simple return if statements with ternary operators by @Snuffleupagus in mozilla/pdf.js#21672

Let pointerup/cancel propagate in TouchManager by @calixteman in mozilla/pdf.js#21674

Shorten the ViewHistory class a little bit by @Snuffleupagus in mozilla/pdf.js#21678

Don't throw on an invalid XML character reference by @calixteman in mozilla/pdf.js#21682

Fix the regex used to normalize css fonts in XFA by @calixteman in mozilla/pdf.js#21680

Trim the response headers with a backward scan by @calixteman in mozilla/pdf.js#21684

Find the PDF filename in a URL hash in two linear steps by @calixteman in mozilla/pdf.js#21685

Scan backwards to delete a word in a text field by @calixteman in mozilla/pdf.js#21687

Add scripts correctly in Field.prototype.setAction (PR 12569 follow-up) by @Snuffleupagus in mozilla/pdf.js#21691

Update dependencies to the most recent versions by @timvandermeij in mozilla/pdf.js#21689

Exclude "&" from the XML entity names by @calixteman in mozilla/pdf.js#21692

[api-minor] Convert getFieldObjects to return data in a Map by @Snuffleupagus in mozilla/pdf.js#21671

Anchor the regex used to extract the XFA path positions by @calixteman in mozilla/pdf.js#21686

Don't write numbers in exponential notation when saving a pdf by @calixteman in mozilla/pdf.js#21683

Bound the email parts in the autolinker regex by @calixteman in mozilla/pdf.js#21693

Safely serialize CSS font family names by @calixteman in mozilla/pdf.js#21694

Add a go to first/last menu-item helper method in the Menu class by @Snuffleupagus in mozilla/pdf.js#21690

Document how to use the viewer to open files by @martinthomson in mozilla/pdf.js#21695

Add integration tests for the Home/End keys in the Menu class by @calixteman in mozilla/pdf.js#21706

Bump undici from 7.28.0 to 7.29.0 by @dependabot[bot] in mozilla/pdf.js#21701

Bump github/codeql-action/analyze from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21705

Bump github/codeql-action/init from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21704

Bump github/codeql-action/autobuild from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21703

Shorten the Menu constructor a tiny bit by @Snuffleupagus in mozilla/pdf.js#21700

Enable the regexp/no-super-linear-move ESLint rule by @calixteman in mozilla/pdf.js#21708

Bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in mozilla/pdf.js#21712

Remove the ambiguity from the PostScript number regex by @calixteman in mozilla/pdf.js#21709

Avoid an infinite loop on cyclic field Parent chains by @calixteman in mozilla/pdf.js#21699

Enable a few more eslint-plugin-regexp rules by @calixteman in mozilla/pdf.js#21710

Give copied annotations distinct references by @calixteman in mozilla/pdf.js#21707

Use the MathClamp helper in the src/core/annotation.js file by @Snuffleupagus in mozilla/pdf.js#21715

Update PDFViewerApplication._initializeAutoPrint to handle getJSActions returning a Map (PR 21664 follow-up) by @Snuffleupagus in mozilla/pdf.js#21716

Move SCALE_MATRIX into CanvasGraphics and initialize its DOMMatrix lazily (issue 21720) by @Snuffleupagus in mozilla/pdf.js#21721

Convert TranslatedFont.prototype.loadType3Data to an asynchronous method by @Snuffleupagus in mozilla/pdf.js#21719

Don't re-encode the file parameter in the viewer by @calixteman in mozilla/pdf.js#21718

... (truncated)

Commits

1c8020a Merge pull request #21841 from Snuffleupagus/src-core-misc-fixes
67c035f Inline the PDFDocument.prototype._parseHasJSActions method
c58a275 Move some WorkerTask class field definitions out of the constructor
d1725ab Merge pull request #21837 from Snuffleupagus/rm-ColorSpace-getoutputlength
159dca9 Remove the unused getOutputLength method from the ColorSpace classes (PR ...
8801a6a Merge pull request #21835 from Snuffleupagus/getViewerPreferences-tests
08a0600 Merge pull request #21834 from Snuffleupagus/markInfo-Map
2895922 Improve unit-test coverage for the getViewerPreferences functionality
16b94d1 [api-minor] Convert markInfo to return data in a Map
c3257df Merge pull request #21833 from mozilla/update-locales
Additional commits viewable in compare view

Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that r...
Description has been truncated

…th 13 updates Bumps the npm-minor-and-patch group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.12` | | [kysely](https://github.com/kysely-org/kysely) | `0.29.4` | `0.29.5` | | [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.0` | `1.12.2` | | [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.1.200` | `6.3.289` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.1` | `7.3.2` | | [jszip](https://github.com/Stuk/jszip) | `3.10.1` | `3.10.2` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.13` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.44.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.3.0` | Updates `jose` from 6.2.3 to 6.2.12 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.3...v6.2.12) Updates `kysely` from 0.29.4 to 0.29.5 - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](kysely-org/kysely@v0.29.4...v0.29.5) Updates `mammoth` from 1.12.0 to 1.12.2 - [Release notes](https://github.com/mwilliamson/mammoth.js/releases) - [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS) - [Commits](mwilliamson/mammoth.js@1.12.0...1.12.2) Updates `pdfjs-dist` from 6.1.200 to 6.3.289 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](mozilla/pdf.js@v6.1.200...v6.3.289) Updates `react` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.17 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `astro` from 7.1.1 to 7.3.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.2/packages/astro) Updates `jszip` from 3.10.1 to 3.10.2 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.10.1...v3.10.2) Updates `tsx` from 4.23.1 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.1...v4.23.13) Updates `@types/react` from 19.2.17 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `lucide-react` from 1.25.0 to 1.44.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.44.0/packages/lucide-react) Updates `react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `vite` from 8.1.5 to 8.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite) --- updated-dependencies: - dependency-name: jose dependency-version: 6.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: kysely dependency-version: 0.29.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: mammoth dependency-version: 1.12.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: pdfjs-dist dependency-version: 6.3.289 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: astro dependency-version: 7.3.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: jszip dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: lucide-react dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: vite dependency-version: 8.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026

dependabot Bot requested a review from OnourImpram as a code owner September 14, 2026 06:16

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026

Navigation Menu

chore(deps): bump the npm-minor-and-patch group across 1 directory with 13 updates - #53

chore(deps): bump the npm-minor-and-patch group across 1 directory with 13 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-f49a0801f8

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026

v6.2.12

Documentation

Refactor

Performance

v6.2.11

Documentation

Refactor

v6.2.10

Fixes

6.2.12 (2026-09-05)

Documentation

Refactor

Performance

6.2.11 (2026-09-04)

Documentation

Refactor

6.2.10 (2026-08-21)

Fixes

0.29.5

🚀 Features

🐞 Bugfixes

📖 Documentation

📦 CICD & Tooling

⚠️ Breaking Changes

🐤 New Contributors

What's Changed

1.12.2

1.12.1

v6.3.289

Changes since v6.2.108

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants