chore(deps): bump the production-dependencies group with 5 updates

[dependabot]

Bumps the production-dependencies group with 5 updates:

Package	From	To
minimatch	10.1.1	10.1.2
pixi.js	8.15.0	8.16.0
rehype-citation	2.3.1	2.3.2
@types/node	25.2.0	25.2.2
esbuild	0.27.2	0.27.3

Updates minimatch from 10.1.1 to 10.1.2

Commits

• fde70d1 10.1.2
• 05210d8 update deps
• ba4093c update workflows and package stuff
• See full diff in compare view

Updates pixi.js from 8.15.0 to 8.16.0

Release notes

Sourced from pixi.js's releases.

v8.16.0

💾 Download

Installation:

npm install pixi.js@8.16.0

Development Build:

• https://cdn.jsdelivr.net/npm/pixi.js@8.16.0/dist/pixi.js
• https://cdn.jsdelivr.net/npm/pixi.js@8.16.0/dist/pixi.mjs

Production Build:

• https://cdn.jsdelivr.net/npm/pixi.js@8.16.0/dist/pixi.min.js
• https://cdn.jsdelivr.net/npm/pixi.js@8.16.0/dist/pixi.min.mjs

Documentation:

• https://pixijs.download/v8.16.0/docs/index.html

Changed

pixijs/pixijs@v8.15.0...v8.16.0

🚨 Behavior Change

• SplitText now more accurately splits Text across a wider range of TextStyle configurations. This may result in slight changes to character positioning.
• Using SplitText.from from an existing Text now correctly transfers the source anchor to the new instance by mapping the anchor to pivot coordinates. This changes layout and positioning compared to previous behavior.
• SplitBitmapText now correctly defaults to a white fill, matching the behavior of BitmapText.
• HTMLText now correctly respects breakWords and no longer cuts off words that exceed wordWrapWidth.
• HTMLText now respects the alpha value of its fill and stroke.
• Text now correctly aligns when using align: 'right' or align: 'center', resulting in a small positional adjustment.
• Container.cullArea is now correctly interpreted in the container’s local coordinate space and transformed to global coordinates before culling checks.

  // cullArea is defined in local space and transformed during culling
  container.cullArea = new Rectangle(0, 0, 100, 100);

• graphics.texture(texture, 0x000000) will now correctly apply a black tint

🎁 Added

• feat: Canvas renderer by @​krzys @​Zyie in pixijs/pixijs#11815
  • Note: This feature is experimental, please let us know if you run into any issues.

   await app.init({
        preference: 'canvas'
    });

• feat: tagged text by @​Zyie in pixijs/pixijs#11827
  • Note: Currently only works for Text/HTMLText, BitmapText support coming soon

   const text = new Text({
    text: '<bold>Important:</bold> This is <highlight>highlighted</highlight> text',
    style: {

... (truncated)

Commits

• 94156d3 v8.16.0
• 801f4a4 fix bump script
• 5e484ff fix: release scripts for node 24
• c52309f feat: Canvas renderer (#11815)
• 5a08b91 feat: ExternalTexture placeholder resource (#11861)
• 7f78260 perf: use texImage2D instead of texSubImage2D for video in Safari (#11867)
• 09c020f fix: improve html text measurement (#11862)
• 28fcac2 feat: improve stability of SplitText (#11858)
• b91dfcf fix: GC system to ensure render groups are marked as dirty (#11842)
• d537b58 feat: render to array layer (#11803)
• Additional commits viewable in compare view

Updates rehype-citation from 2.3.1 to 2.3.2

Release notes

Sourced from rehype-citation's releases.

v2.3.2

What's Changed

• Update dependencies by @​timlrx in timlrx/rehype-citation#60
• chore: update ci and netlify node version by @​timlrx in timlrx/rehype-citation#61
• fix: footnote typing by @​timlrx in timlrx/rehype-citation#62

Full Changelog: timlrx/rehype-citation@v2.3.1...v2.3.2

Commits

• 19a9f4d 2.3.2
• d785742 Merge pull request #62 from timlrx/fix-footnote-type
• dbfce48 fix: footnote typing
• b3d64a0 Merge pull request #61 from timlrx/update-ci-node-version
• 21e59f7 chore: update netlify node version
• eceb790 chore: update ci node version
• a86aec6 Merge pull request #60 from timlrx/update-dependencies
• 1796658 chore: update to tailwind v4
• 6bcf5a5 chore: sync changes from citation-js
• 67a76f2 chore: update outdated link
• Additional commits viewable in compare view

Updates @types/node from 25.2.0 to 25.2.2

Commits

• See full diff in compare view

Updates esbuild from 0.27.2 to 0.27.3

Release notes

Sourced from esbuild's releases.

v0.27.3

• Preserve URL fragments in data URLs (#4370)

  Consider the following HTML, CSS, and SVG:

  • index.html:

    <!DOCTYPE html>
    <html>
      <head><link rel="stylesheet" href="icons.css"></head>
      <body><div class="triangle"></div></body>
    </html>

  • icons.css:

    .triangle {
      width: 10px;
      height: 10px;
      background: currentColor;
      clip-path: url(./triangle.svg#x);
    }

  • triangle.svg:

    <svg xmlns="http://www.w3.org/2000/svg">
      <defs>
        <clipPath id="x">
          <path d="M0 0H10V10Z"/>
        </clipPath>
      </defs>
    </svg>

  The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

  /* icons.css */
  .triangle {
    width: 10px;
    height: 10px;
    background: currentColor;
    clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
  }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.3

• Preserve URL fragments in data URLs (#4370)

  Consider the following HTML, CSS, and SVG:

  • index.html:

    <!DOCTYPE html>
    <html>
      <head><link rel="stylesheet" href="icons.css"></head>
      <body><div class="triangle"></div></body>
    </html>

  • icons.css:

    .triangle {
      width: 10px;
      height: 10px;
      background: currentColor;
      clip-path: url(./triangle.svg#x);
    }

  • triangle.svg:

    <svg xmlns="http://www.w3.org/2000/svg">
      <defs>
        <clipPath id="x">
          <path d="M0 0H10V10Z"/>
        </clipPath>
      </defs>
    </svg>

  The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

  /* icons.css */
  .triangle {
    width: 10px;
    height: 10px;
    background: currentColor;
    clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
  }

... (truncated)

Commits

• 9129e00 publish 0.27.3 to npm
• e20e411 small fix to release notes
• 0dc0f2d fix #4322: parse and print CSS @scope rules
• 55fe391 update firefox css gradient support
• 2c35297 update gradient lowering transform
• 9209e44 Update Go to 1.25.7 (#4388)
• e8d861b close #4374: compat table for the using feature
• 19b8887 no longer need williamkapke/node-compat-table
• 7e44218 the kangax/compat-table repo moved to a new url
• 23b9338 run make update-compat-table
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions