Skip to content

Chore(deps): Bump the production-dependencies group across 1 directory with 28 updates - #957

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-731a375605
Open

Chore(deps): Bump the production-dependencies group across 1 directory with 28 updates#957
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-731a375605

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 28 updates in the / directory:

Package From To
@codemirror/autocomplete 6.20.1 6.20.3
@codemirror/commands 6.10.3 6.11.1
@codemirror/lang-markdown 6.5.0 6.5.2
@codemirror/language 6.12.3 6.13.1
@codemirror/search 6.6.0 6.7.2
@codemirror/state 6.7.1 6.7.6
@codemirror/view 6.43.8 6.43.14
@lezer/highlight 1.2.3 1.2.5
@modelcontextprotocol/sdk 1.31.0 1.32.1
@replit/codemirror-vim 6.3.0 6.4.0
@xyflow/react 12.11.2 12.12.0
chokidar 4.0.3 5.0.0
docx 9.7.1 9.12.0
dompurify 3.4.14 3.4.17
font-list 2.0.2 2.1.0
function-plot 1.25.3 1.26.0
harper.js 2.7.0 2.13.0
highlight.js 11.11.1 11.12.0
jsxgraph 1.12.2 1.14.0
katex 0.16.47 0.19.0
prettier 3.8.3 3.9.10
react 18.3.1 19.3.1
react-dom 18.3.1 19.3.1
smol-toml 1.8.0 1.9.1
ws 8.21.3 8.22.0
zustand 5.0.12 5.0.15
@codemirror/lang-html 6.4.11 6.4.12
@lezer/common 1.5.2 1.5.3

Updates @codemirror/autocomplete from 6.20.1 to 6.20.3

Commits

Updates @codemirror/commands from 6.10.3 to 6.11.1

Commits

Updates @codemirror/lang-markdown from 6.5.0 to 6.5.2

Commits

Updates @codemirror/language from 6.12.3 to 6.13.1

Commits

Updates @codemirror/search from 6.6.0 to 6.7.2

Commits

Updates @codemirror/state from 6.7.1 to 6.7.6

Commits

Updates @codemirror/view from 6.43.8 to 6.43.14

Commits

Updates @lezer/highlight from 1.2.3 to 1.2.5

Commits

Updates @modelcontextprotocol/sdk from 1.31.0 to 1.32.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

Commits
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
  • 727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
  • 0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
  • Additional commits viewable in compare view

Updates @replit/codemirror-vim from 6.3.0 to 6.4.0

Changelog

Sourced from @​replit/codemirror-vim's changelog.

[@​replit/codemirror-vim@​6.4.0] - 2026-07-28

Added

Fixed

  • gj clipping at the end of the document (c912733, #258)
  • Ex commands with mark and cursor line ranges such as :'a,.y (d19062a, #257)
  • , (repeat character search in reverse) in visual mode (cc81e48, #256)
  • :sort with a pattern and the r flag (66332dd, #253)
  • Status bar display of visual line mode (71919db, #236)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​replit/codemirror-vim since your current version.


Updates @xyflow/react from 12.11.2 to 12.12.0

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.12.0

Minor Changes

  • #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

@​xyflow/react@​12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

@​xyflow/react@​12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

@​xyflow/react@​12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

  • #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

  • #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

@​xyflow/react@​12.11.3

Patch Changes

  • #5902 393d951 - Allow middle-mouse viewport panning to start from a selection rectangle.

  • #5889 ff126a0 - Fix extent: 'parent' not immediately resolving when parent has width or initialWidth.

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.12.0

Minor Changes

  • #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

12.11.4

Patch Changes

  • #5974 8c42922 - Minimap still works after ReactFlow remounts

  • #5962 cbf40b9 - Show log if user hides attribution in development

... (truncated)

Commits
  • 8716946 chore(packages): bump
  • 9fd41fd chore(packages): bump
  • 19f9c2a fix(react/store): reset defaultEdgeOptions
  • 2acefb5 fix(react/store): reset functions #5991
  • 8f0a5d6 chore(packages): bump
  • 286816c chore(packages): bump
  • 3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
  • b7186f3 fix(react): minimap still works after reactflow remounts #5971
  • d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
  • 59b1a60 Simplify node click handling in MiniMap component
  • Additional commits viewable in compare view

Updates chokidar from 4.0.3 to 5.0.0

Release notes

Sourced from chokidar's releases.

5.0.0

  • Make the package ESM-only. Reduces on-disk package size from ~150kb to ~80kb
  • Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs
  • fix: Make types more precise paulmillr/chokidar#1424
  • perf: re-use double slash regex paulmillr/chokidar#1435
  • Update readdirp to ESM-only v5
  • Lots of minor improvements in tests
  • Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt
  • Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

Full Changelog: paulmillr/chokidar@4.0.3...5.0.0

Changelog

Sourced from chokidar's changelog.

5.0.0 (2025-11-25)

  • Made the package ESM-only, reducing on-disk size from ~150 KB to ~80 KB.
  • Required Node.js 20.19 or later, which can load ESM from CommonJS.
  • Updated readdirp to the ESM-only v5.
  • Made matcher types more precise, contributed by @​43081j in [pull request #1424](paulmillr/chokidar#1424).
  • Reused the double-slash regex, contributed by @​43081j in [pull request #1435](paulmillr/chokidar#1435).
  • Switched npm releases to token-less Trusted Publishing with jsbt.
  • Switched compilation to isolatedDeclarations-based TypeScript for simpler auto-generated docs.
  • Improved tests.

New contributors

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chokidar since your current version.


Updates docx from 9.7.1 to 9.12.0

Release notes

Sourced from docx's releases.

9.12.0 is a fixes release. It closes several long-standing issues, most of them with tables, lists and styles. A table with a style now takes its borders from the style (#1497). TableRow has a new keepNext option, so rows merged down with rowSpan can be kept on one page (#668). A new instance of a list now restarts every level, not only the first (#2877). Page numbers keep their run's font in LibreOffice (#1897), and Google Docs can open a document with a style based on itself (#1794). Packing a document with many lists or images is about twice as fast (#2948).

What's Changed

New Contributors

Full Changelog: dolanmiu/docx@9.11.0...9.12.0

9.11.0

Highlights

HTML to docx: docx/html

You can now turn HTML into document content. This is one of the most requested features (#2632, and many issues before it). It's an optional entry, docx/html, so docx itself doesn't grow.

import { Document } from "docx";
import { htmlToContent } from "docx/html";
const doc = new Document({
sections: [{ children: htmlToContent("<h1>Report</h1><p>Sales were <b>up 12%</b>.</p><ul><li>EMEA</li></ul>") }],
});

  • htmlToContent returns paragraphs and tables. Use it in sections, headers, footers, table cells, text boxes and PatchType.DOCUMENT patches.
  • htmlToRuns returns a paragraph's content. Use it in paragraphs and PatchType.PARAGRAPH patches.
  • Other converters write a whole document. This output mixes with everything else docx makes.
  • HTML is parsed as browsers parse it, with a CSS cascade and selectors.
  • It reads text formatting, lists, tables, images, links, bookmarks, footnotes, MathML and LaTeX, checkboxes, tracked changes and page breaks.
  • The HTML of editors such as CKEditor, Quill, TipTap, Lexical, Google Docs and Word comes out as it looked in the editor.
  • Output uses the document's own styles (Normal, Heading 1–6, List Paragraph, Hyperlink). styleMap maps CSS selectors to your styles.
  • What can't be converted is reported to onWarning. The HTML never causes an error, and nothing in it is run or fetched.

... (truncated)

Commits
  • 35496df chore: Version bump to 9.12.0
  • 9378696 build(deps-dev): bump eslint-plugin-unicorn from 77.0.0 to 78.0.0 (#3771)
  • 473d0a2 build(deps-dev): bump eslint-plugin-jsdoc from 65.3.1 to 65.3.2 (#3774)
  • 6198156 build(deps-dev): bump typescript-eslint from 8.71.1 to 8.71.2 (#3773)
  • 3bbc2d1 fix: restart every level of a numbering instance, not only the first (#3768)
  • d6e8b8a build(deps-dev): bump execa from 10.1.0 to 10.1.1 (#3772)
  • 6661ec4 fix: Leave out a style's basedOn when it is the style's own id (#3770)
  • 26d9e39 fix: Write each part of a page number field in a run of its own, so it keeps ...
  • 6932813 fix: Replace list and image placeholders in one pass over each part (#3767)
  • 67f3793 build(deps-dev): bump @​vitest/coverage-v8 from 5.0.3 to 5.0.4 (#3763)
  • Additional commits viewable in compare view

Updates dompurify from 3.4.14 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible
Commits

Updates font-list from 2.0.2 to 2.1.0

Commits

Updates function-plot from 1.25.3 to 1.26.0

Release notes

Sourced from function-plot's releases.

v1.26.0

What's Changed

New Contributors

Full Changelog: mauriciopoppe/function-plot@v1.25.4...v1.26.0

v1.25.4

  • chore: bump dependencies 58a7830

mauriciopoppe/function-plot@v1.25.3...v1.25.4

Commits
  • 83a34f6 chore: bump version to 1.26.0 (#376)
  • 3203c1f Merge pull request #375 from mauriciopoppe/codex/1x-build-fix
  • 940d041 ci: skip install scripts in build
  • 9d5322b ci: avoid browser download in tests
  • 3512cb0 fix(build): exclude tests from production tsc
  • 287e5f2 refactor: store coordinate state in options
  • 6ea769d fix: improve polar grid layout and preserve zoom
  • 4e8b2ea test: add polar grid image snapshot
  • 061321c refactor: address polar grid review feedback
  • 38fdc46 fix: refine polar grid labels and clipping
  • Additional commits viewable in compare view

Updates harper.js from 2.7.0 to 2.13.0

Release notes

Sourced from harper.js's releases.

v2.13.0

What's Changed

... (truncated)

Commits

Updates highlight.js from 11.11.1 to 11.12.0

Release notes

Sourced from highlight.js's releases.

v11.12.0 - Summer, hot and rainy.

Parser Engine:

  • fix(parser) count named capture groups when rewriting backreferences [spokodev][]

New Grammars:

  • add FreeDesktop config file (.desktop / systemd) grammar [gg582][]
  • added 3rd party Cedar grammar to SUPPORTED_LANGUAGES [Dhruv Maniya][]
  • added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES [jiaopengzi][]
  • added 3rd party Djot grammar to SUPPORTED_LANGUAGES [Mark Scherer][]
  • added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES [Ryne Andal][]
  • added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES [Lehlogonolo Poole][]
  • added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES [Romain Beauxis][]
  • added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES [Kaida-Amethyst][]
  • added 3rd party Pkl grammar to SUPPORTED_LANGUAGES [Dan Chao][]
  • added 3rd party RAScript grammar to SUPPORTED_LANGUAGES [Joshua Raphael][]
  • added 3rd party Veryl grammar to SUPPORTED_LANGUAGES [Naoya Hatta][]
  • added 3rd party Why3 grammar to SUPPORTED_LANGUAGES [JGalego][]
  • added 3rd party Xojo grammar to SUPPORTED_LANGUAGES [patricksalo][]
  • referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES [Styx0x6][]

Core Grammars:

  • fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 [Mark Xian][]
  • fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 [Jayesh Bhade][]
  • fix(c, cpp) scope angle-bracket header string to #include, issue #3505 [Pablo][]
  • fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 [David Pavlovschii][]
  • enh(cmake) add block and endblock keywords [Anonymous Maarten][]
  • fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 [Mark Xian][]
  • fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 [Mark Xian][]
  • fix(crystal) stop treating integer division // as a regex literal [Zain Asif][]
  • enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 [Sarath Fr...

    Description has been truncated

@dependabot
dependabot Bot requested a review from adibhanna as a code owner October 18, 2026 23:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-731a375605 branch 2 times, most recently from 0c986a1 to eb1f392 Compare October 19, 2026 19:58
@dependabot
Chore(deps): Bump the production-dependencies group across 1 director…
64b88b7 
…y with 28 updates

Bumps the production-dependencies group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.1` | `6.20.3` |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.11.1` |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.0` | `6.5.2` |
| [@codemirror/language](https://github.com/codemirror/language) | `6.12.3` | `6.13.1` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.6.0` | `6.7.2` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.6` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.8` | `6.43.14` |
| [@lezer/highlight](https://github.com/lezer-parser/highlight) | `1.2.3` | `1.2.5` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.31.0` | `1.32.1` |
| [@replit/codemirror-vim](https://github.com/replit/codemirror-vim/tree/HEAD/packages/codemirror-vim) | `6.3.0` | `6.4.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.12.0` |
| [chokidar](https://github.com/paulmillr/chokidar) | `4.0.3` | `5.0.0` |
| [docx](https://github.com/dolanmiu/docx) | `9.7.1` | `9.12.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.17` |
| [font-list](https://github.com/oldj/node-font-list) | `2.0.2` | `2.1.0` |
| [function-plot](https://github.com/mauriciopoppe/function-plot) | `1.25.3` | `1.26.0` |
| [harper.js](https://github.com/automattic/harper/tree/HEAD/packages/harper.js) | `2.7.0` | `2.13.0` |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `11.11.1` | `11.12.0` |
| [jsxgraph](https://github.com/jsxgraph/jsxgraph) | `1.12.2` | `1.14.0` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.19.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.10` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.3.1` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.8.0` | `1.9.1` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.0.15` |
| [@codemirror/lang-html](https://github.com/codemirror/lang-html) | `6.4.11` | `6.4.12` |
| [@lezer/common](https://github.com/lezer-parser/common) | `1.5.2` | `1.5.3` |



Updates `@codemirror/autocomplete` from 6.20.1 to 6.20.3
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@codemirror/commands` from 6.10.3 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/lang-markdown` from 6.5.0 to 6.5.2
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/language` from 6.12.3 to 6.13.1
- [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/language/commits)

Updates `@codemirror/search` from 6.6.0 to 6.7.2
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@codemirror/state` from 6.7.1 to 6.7.6
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/state/commits)

Updates `@codemirror/view` from 6.43.8 to 6.43.14
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@lezer/highlight` from 1.2.3 to 1.2.5
- [Changelog](https://github.com/lezer-parser/highlight/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/highlight/commits)

Updates `@modelcontextprotocol/sdk` from 1.31.0 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.31.0...1.32.1)

Updates `@replit/codemirror-vim` from 6.3.0 to 6.4.0
- [Changelog](https://github.com/replit/codemirror-vim/blob/master/packages/codemirror-vim/CHANGELOG.md)
- [Commits](https://github.com/replit/codemirror-vim/commits/v6.4.0/packages/codemirror-vim)

Updates `@xyflow/react` from 12.11.2 to 12.12.0
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.0/packages/react)

Updates `chokidar` from 4.0.3 to 5.0.0
- [Release notes](https://github.com/paulmillr/chokidar/releases)
- [Changelog](https://github.com/paulmillr/chokidar/blob/main/CHANGELOG.md)
- [Commits](paulmillr/chokidar@4.0.3...5.0.0)

Updates `docx` from 9.7.1 to 9.12.0
- [Release notes](https://github.com/dolanmiu/docx/releases)
- [Commits](dolanmiu/docx@9.7.1...9.12.0)

Updates `dompurify` from 3.4.14 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.14...3.4.17)

Updates `font-list` from 2.0.2 to 2.1.0
- [Commits](https://github.com/oldj/node-font-list/commits)

Updates `function-plot` from 1.25.3 to 1.26.0
- [Release notes](https://github.com/mauriciopoppe/function-plot/releases)
- [Commits](mauriciopoppe/function-plot@v1.25.3...v1.26.0)

Updates `harper.js` from 2.7.0 to 2.13.0
- [Release notes](https://github.com/automattic/harper/releases)
- [Commits](https://github.com/automattic/harper/commits/v2.13.0/packages/harper.js)

Updates `highlight.js` from 11.11.1 to 11.12.0
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
- [Commits](highlightjs/highlight.js@11.11.1...11.12.0)

Updates `jsxgraph` from 1.12.2 to 1.14.0
- [Release notes](https://github.com/jsxgraph/jsxgraph/releases)
- [Changelog](https://github.com/jsxgraph/jsxgraph/blob/main/CHANGELOG.md)
- [Commits](jsxgraph/jsxgraph@v1.12.2...v1.14.0)

Updates `katex` from 0.16.47 to 0.19.0
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.19.0)

Updates `prettier` from 3.8.3 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.10)

Updates `react` from 18.3.1 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 18.3.1 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

Updates `zustand` from 5.0.12 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.12...v5.0.15)

Updates `@codemirror/lang-html` from 6.4.11 to 6.4.12
- [Changelog](https://github.com/codemirror/lang-html/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-html/commits)

Updates `@lezer/common` from 1.5.2 to 1.5.3
- [Changelog](https://github.com/lezer-parser/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/common/commits)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/lang-html"
  dependency-version: 6.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/language"
  dependency-version: 6.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@lezer/common"
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@lezer/highlight"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@replit/codemirror-vim"
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@xyflow/react"
  dependency-version: 12.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: chokidar
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: docx
  dependency-version: 9.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: font-list
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: function-plot
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: harper.js
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: highlight.js
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: jsxgraph
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: katex
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: smol-toml
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-731a375605 branch from eb1f392 to 64b88b7 Compare October 20, 2026 15:00

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@adibhanna adibhanna Awaiting requested review from adibhanna adibhanna is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants