Skip to content

build(deps): bump the runtime-dependencies group across 1 directory with 44 updates - #201

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/runtime-dependencies-569e0a778a
Open

build(deps): bump the runtime-dependencies group across 1 directory with 44 updates#201
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/runtime-dependencies-569e0a778a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the runtime-dependencies group with 44 updates in the / directory:

Package From To
@base-ui/react 1.8.0 1.9.0
@file-viewer/react 3.1.1 3.2.2
@file-viewer/renderer-pptx 3.1.1 3.2.2
@file-viewer/renderer-spreadsheet 3.1.1 3.2.2
@file-viewer/renderer-word 3.1.1 3.2.2
@modelcontextprotocol/sdk 1.32.0 1.32.1
@openai/agents 0.18.0 0.20.0
@radix-ui/react-label 2.1.15 2.1.17
@radix-ui/react-slot 1.3.3 1.5.0
@radix-ui/react-tabs 1.1.21 1.2.1
@radix-ui/react-tooltip 1.2.16 1.4.1
@supabase/supabase-js 2.116.0 2.118.0
jose 6.2.5 6.2.12
@tanstack/react-virtual 3.14.13 3.14.21
@tiptap/core 3.31.3 3.32.0
@tiptap/extension-code-block-lowlight 3.31.3 3.32.0
@tiptap/extension-hard-break 3.31.3 3.32.0
@tiptap/extension-highlight 3.31.3 3.32.0
@tiptap/extension-image 3.31.3 3.32.0
@tiptap/extension-link 3.31.3 3.32.0
@tiptap/extension-mention 3.31.3 3.32.0
@tiptap/extension-placeholder 3.31.3 3.32.0
@tiptap/extension-table 3.31.3 3.32.0
@tiptap/extension-table-cell 3.31.3 3.32.0
@tiptap/extension-table-header 3.31.3 3.32.0
@tiptap/extension-table-row 3.31.3 3.32.0
@tiptap/extension-task-item 3.31.3 3.32.0
@tiptap/extension-task-list 3.31.3 3.32.0
@tiptap/extension-underline 3.31.3 3.32.0
@tiptap/pm 3.31.3 3.32.0
@tiptap/react 3.31.3 3.32.0
@tiptap/starter-kit 3.31.3 3.32.0
@tiptap/suggestion 3.31.3 3.32.0
fast-xml-parser 5.11.1 5.11.2
json-rpc-2.0 1.8.0 1.8.1
mammoth 1.12.3 1.13.0
radix-ui 1.6.7 1.8.1
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
smol-toml 1.8.0 1.9.1
tar-stream 3.2.1 3.2.2
ts-pattern 5.9.0 5.9.2
ws 8.21.3 8.22.0
zod 4.6.5 4.6.7

Updates @base-ui/react from 1.8.0 to 1.9.0

Release notes

Sourced from @​base-ui/react's releases.

v1.9.0

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

Dialog

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.9.0

Oct 9, 2026

General changes

Accordion

  • Fix <Accordion.Trigger>'s data-value and data-index attributes (#5705) by @​cpruijsen
  • Apply the native disabled attribute to <Accordion.Trigger> when using native buttons (#5607) by @​atomiks
  • Expand hiddenUntilFound panels synchronously on beforematch (#5514) by @​aarongarciah

Alert Dialog

  • Don't associate a programmatically opened popup with a trigger that did not open it (#5641) by @​michaldudak

Autocomplete

  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak

Checkbox

Collapsible

Combobox

  • Fix stale chip focus after returning to the input (#5879) by @​mdm317
  • Fix autoHighlight for asynchronous results (#5818) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#5734) by @​michaldudak
  • Fix label focus in Shadow DOM (#5871) by @​lyzno1
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#5838) by @​atomiks
  • Reset typeahead state when closing without moving focus (#5816) by @​mdm317
  • Accept readonly arrays for multiple values (#5710) by @​MonstraG

... (truncated)

Commits
  • ad7ecda [release] v1.9.0 (#5906)
  • 3296de3 [drawer] Avoid retaining unmounted drawers in DrawerProvider (#5921)
  • 69c33b4 [drawer] Fix deferred touch swipes leaving the popup (#5922)
  • 51b70db [menu] Strip internal filter components from public types (#5923)
  • 8d8b98c [menu] Ignore filter input edits while the menu animates out (#5911)
  • aeba3eb [combobox][menu][select] Revert highlightItem imperative action (#5910)
  • ec6bf32 [field][select][combobox][slider] Fall back to the owner document when lookin...
  • 1f112a5 [popups] Avoid re-rendering inactive triggers on open and close (#5865)
  • bc53db6 [fieldset] Await render in Legend disabled-state test (#5909)
  • 147092e [test] Strengthen tests, add test lint rules and share copied suites (#5892)
  • Additional commits viewable in compare view

Updates @file-viewer/react from 3.1.1 to 3.2.2

Release notes

Sourced from @​file-viewer/react's releases.

File Viewer 3.2.2 retains the complete maintained source and ships 88 packages at 3.2.2 plus msdoc-viewer 0.2.12.

  • Bounded Geo3D hierarchy parsing and cancellation.
  • Upstream Stet 0.8.7 with its original URW Base35 OFL fonts and CC0 CMYK profile, with original grants and dependency attribution.
  • Typed spreadsheet range navigation across sheets, including cancellation and zoom, scroll and selection restoration. Original contributor authorship is retained.
  • Complete PPTX chart models, chart-group axes, combo charts and a typed custom renderer hook. Customer-specific font, label/legend placement and overlap fidelity remains open in #385 pending the original document.
  • Frozen bilingual README/source identity checks before npm publishing and exact approved production audit scope enforcement.

The established DOCX 0.3.36, styled-exceljs 0.21.6 and PPT 0.3.6 dependencies are retained. Historical 3.2.0 and 3.2.1 tags and original npm package bytes are preserved.

npm install @file-viewer/web@3.2.2
# Or choose the matching framework package and standard/full profile.

The assets include all 89 npm archives, the immutable npm manifest, compiled library output, the offline iframe demo, viewer and component demonstrations, and built documentation. The GitHub source archives include the complete maintained source.

Local qualification completed: 89 package byte audits; 10,909 members; 562 legal documents; 17 CLI/asset cold installations; all 16 standard/full framework consumers in Chromium and WebKit; 1,075 root assertions with one existing skip; complete-source retention, source README identity, governance and secret checks. Publication and deployment evidence is read back independently after the release workflow.

3.2.2 frozen runtime candidate

Frozen 3.2.2 package candidate with complete maintained source.

Includes 88 packages at 3.2.2 and msdoc-viewer 0.2.12. Package archives and bilingual READMEs are bound to the committed manifest. The three existing support dependencies retain their previously published bytes.

Local verification: 89 archive byte audits, 17 CLI/asset cold installations, and all 16 standard/full framework cases in Chromium and WebKit. This prerelease is used for installed-consumer validation; stable npm publication follows the protected source merge.

File Viewer 3.2.1

Fixes

  • PDF: start the native worker directly instead of aborting a separate worker preflight on cold or slow networks. A genuine worker-version mismatch retries the matching bundled runtime; unrelated document errors are not hidden.
  • Word: use content-based ZIP/OLE detection consistently in both public handlers, including legacy Word content delivered with a .docx extension.

The release also retains the existing PDF hand-tool, Markdown highlighting, Office layout and Vite interoperability fixes. Optional specialist renderers remain opt-in.

All 89 File Viewer packages use the frozen archives attached here (88 at 3.2.1, msdoc-viewer at 0.2.11). Unchanged upstream engines remain DOCX 0.3.35, styled-exceljs 0.21.6 and PPT 0.3.6.

Validated with targeted cold/slow PDF cases and real Chromium/WebKit consumers across eight frameworks, including Vue 2.6 and 2.7. Unchanged closure evidence was reused rather than rerunning the complete matrix. Production acceptance and issue follow-up are tracked separately.

Demo | Documentation

Historical source correction

The complete source for this historical version is available at 8daccb05. Later Unreleased fixes are excluded. The source mapping records the original source and frozen manifest identities.

All 94 attached assets retain their original bytes. This correction repairs GitHub source and release records only; npm uploads are disabled in this snapshot, and the original npm publication provenance is retained.

The existing CAD corresponding-source offer remains available.

3.2.1 frozen runtime candidate

... (truncated)

Changelog

Sourced from @​file-viewer/react's changelog.

File Viewer v3.2.2 - 2026-10-18

  • Restore the complete open-source project and normal source development workflow.
  • Preserve PDF worker fallback recovery (#375), DOCX 0.3.36 pagination (#322), and pie/doughnut category legends (#376). Thanks to @​kami-woo for #377; legend construction remains bounded.
  • Bound Geo3D hierarchy reads and cancel viewer-owned HTTP requests (#324).
  • Preserve the unmodified Stet upstream fonts and CMYK profile, with complete original native license materials (#344).
  • Add typed cross-sheet spreadsheet range navigation, including cancellation, fit, scroll/zoom restoration, and stale-request isolation (#378, #379). Thanks to @​kami-woo for the original navigation API.
  • Preserve every PPTX chart group and typed Worker metadata, render bar/line combinations with separate axes, and expose a custom chart adapter (#385). Document-specific font, label, legend, and overlap fidelity still needs comparison with the original file.
  • Publish both maintained package READMEs byte-for-byte and verify complete repository source before publishing npm assets.

File Viewer v3.2.1 - 2026-10-15

  • Fix PDF cold-network worker initialization. Start the real Worker directly instead of issuing a duplicate version probe that can time out or be cancelled.
  • Keep confirmed worker-version mismatch protection and use the supported asynchronous resource path for main-thread fallbacks in Safari/WebKit.
  • Route legacy binary Word documents mislabeled as .docx through the existing content sniffer, including direct renderer-handler integrations (#372).
  • Retain Vue 2.6/2.7 support and the existing Full package capabilities. Unaffected regression evidence is reused by input and artifact identity.

完整对外更新日志见 https://github.com/flyfish-dev/file-viewer/blob/main/docs/changelog.md。

File Viewer v3.1.2 - 2026-09-20

  • 修复 #300：EPUB 阅读器使用稳定视口判断横竖屏，避免工具栏尺寸变化引发反复重排与闪烁。已用报告者附件和浏览器回归验证。
  • 修复 #304：Patch 左右对照与匹配行的布局保持紧凑；增加复现样例与回归检查，不再把有效补丁误判为格式错误。
  • 新增显式启用的 BPMN 流程图预览（#297）和 XML XSD 校验、XSLT 转换视图（#305）。普通 XML 文本预览和既有 Full 包依赖保持不变；Demo 提供可体验样例。
  • 同步 ZIP 安全修复、IDML 运行资源与依赖更新；保留 Vue 2.6/2.7 与既有 Full 契约。

本次发布包含 89 个 npm 目标：88 个主线包为 3.1.2，历史兼容别名 msdoc-viewer 为 0.2.9。DOCX 引擎保持 0.3.32，表格引擎保持 0.21.6。#227、#248、#269 尚缺报告者原始文件，不能以构造样例宣称原问题已修复。

File Viewer v3.0.3 - 2026-09-09

Word、表格与移动端

  • 二进制 DOC 保留插入/删除修订、段落与软换行标记；DOCX 支持全部修订、最终稿和原稿切换，无需重选文件。修复 DOC 固定行距单位、字体槽位和默认字体读取，销售合同的行距及四张表按原件验证，不为无修订文件添加删除线。
  • 表格列宽拖拽后正确跟随缩放并按 sheet 恢复；不可见区域搜索覆盖真实 XLS、跨 sheet、远列和合并单元格。CFB 解析只跳过未使用的损坏 MiniFAT 链，必需数据仍严格校验。
  • 修复 iPhone Safari PDF 翻页焦点和搜索键盘收起后的残留滚动；取消 PDF 初始化后不再抛出未处理的 Worker 终止异常，后续文档仍可正常加载。

集成与输出

  • MapLibre 升级到 6.4.1，修复地图署名 HTML 连续危险属性的清洗绕过；内置离线 Worker，地图销毁重建后仍可加载。同步修复已发布的 js-yaml、sharp、Vitest 安全版本，并以所需 polyfill 替代仅用于查路径的 Browserify 工具链。
  • 标准预览使用固定的 JSZip 3.10.2，修复不同 JavaScript 上下文之间传递二进制内容的类型识别，避免浮动依赖导致构建与冷安装结果不一致。
  • core 与各渲染器统一固定 DOMPurify 3.4.15，纳入 XML 消毒安全加固并避免冷安装重复引入多个版本，体积预算保持不变。
  • Demo 顶部按钮的悬停位移不再改变文档留白，避免 CAD 模式切换和导出图像出现一像素高度漂移。
  • 修复 Vue CLI/Webpack 浏览器入口、Angular PPTX Worker 和嵌套 Vite 项目的资产根路径；显式资源配置保持优先，已输出 Worker 的构建不再探测不存在的清单。新增独立 RequireJS AMD 入口，保留宿主模块隔离与本地懒加载资源。
  • HTML 增加静态预览和原始源码切换，预览不执行脚本或外部请求。OFD 修复规范资源路径、命名空间和异常后的 Promise 结束；CAD 修复 DXF LINE、DWF/DWFx 对比度，并提供遵守权限、钩子和水印的 PNG/JPEG 当前视图下载。
  • PDF 补丁与许可来源随包校验；CHM、Adobe 和 Illustrator 的安全修复同步到规范 Worker。组件独立源码导出包含真实构建输入；发布工具按依赖层批量推进，续跑只跳过完整性一致的包。

版本与边界

87 个主线包使用 3.0.3，msdoc-viewer 使用 0.2.6。上游依赖为 DOCX 0.3.31、styled-exceljs 0.21.6、CAD 0.8.2 和 DWF 0.6.7。Vue 2.6/2.7 支持与既有 Full 能力保持不变，pako 3 继续暂缓。此 patch 版本也包含 HTML 源码切换、AMD 接入和 CAD 图片下载等新增能力。

... (truncated)

Commits
  • d3889d0 ci(release): bind current authorized production audit bodies
  • 7f51367 test(pptx): retain synthetic chart rendering evidence
  • e197173 release: bind 3.2.2 archives to the complete maintained source
  • 02923bc build(release): retain complete-source commands and approved audit scope
  • 134fae8 build(web-full): refresh the normal copy-assets compatibility bin
  • 17b05aa build(ci): retain public package-manager helper imports
  • a740443 release: prepare complete 3.2.2 source and maintained documentation
  • 67e8e80 build(release): preserve full source and verify packaged README bytes
  • 5422e93 fix(pptx): preserve chart groups and typed Worker metadata
  • 4a8e4ce fix(spreadsheet): preserve view restoration and navigation ownership
  • Additional commits viewable in compare view

Updates @file-viewer/renderer-pptx from 3.1.1 to 3.2.2

Release notes

Sourced from @​file-viewer/renderer-pptx's releases.

File Viewer 3.2.2 retains the complete maintained source and ships 88 packages at 3.2.2 plus msdoc-viewer 0.2.12.

  • Bounded Geo3D hierarchy parsing and cancellation.
  • Upstream Stet 0.8.7 with its original URW Base35 OFL fonts and CC0 CMYK profile, with original grants and dependency attribution.
  • Typed spreadsheet range navigation across sheets, including cancellation and zoom, scroll and selection restoration. Original contributor authorship is retained.
  • Complete PPTX chart models, chart-group axes, combo charts and a typed custom renderer hook. Customer-specific font, label/legend placement and overlap fidelity remains open in #385 pending the original document.
  • Frozen bilingual README/source identity checks before npm publishing and exact approved production audit scope enforcement.

The established DOCX 0.3.36, styled-exceljs 0.21.6 and PPT 0.3.6 dependencies are retained. Historical 3.2.0 and 3.2.1 tags and original npm package bytes are preserved.

npm install @file-viewer/web@3.2.2
# Or choose the matching framework package and standard/full profile.

The assets include all 89 npm archives, the immutable npm manifest, compiled library output, the offline iframe demo, viewer and component demonstrations, and built documentation. The GitHub source archives include the complete maintained source.

Local qualification completed: 89 package byte audits; 10,909 members; 562 legal documents; 17 CLI/asset cold installations; all 16 standard/full framework consumers in Chromium and WebKit; 1,075 root assertions with one existing skip; complete-source retention, source README identity, governance and secret checks. Publication and deployment evidence is read back independently after the release workflow.

3.2.2 frozen runtime candidate

Frozen 3.2.2 package candidate with complete maintained source.

Includes 88 packages at 3.2.2 and msdoc-viewer 0.2.12. Package archives and bilingual READMEs are bound to the committed manifest. The three existing support dependencies retain their previously published bytes.

Local verification: 89 archive byte audits, 17 CLI/asset cold installations, and all 16 standard/full framework cases in Chromium and WebKit. This prerelease is used for installed-consumer validation; stable npm publication follows the protected source merge.

File Viewer 3.2.1

Fixes

  • PDF: start the native worker directly instead of aborting a separate worker preflight on cold or slow networks. A genuine worker-version mismatch retries the matching bundled runtime; unrelated document errors are not hidden.
  • Word: use content-based ZIP/OLE detection consistently in both public handlers, including legacy Word content delivered with a .docx extension.

The release also retains the existing PDF hand-tool, Markdown highlighting, Office layout and Vite interoperability fixes. Optional specialist renderers remain opt-in.

All 89 File Viewer packages use the frozen archives attached here (88 at 3.2.1, msdoc-viewer at 0.2.11). Unchanged upstream engines remain DOCX 0.3.35, styled-exceljs 0.21.6 and PPT 0.3.6.

Validated with targeted cold/slow PDF cases and real Chromium/WebKit consumers across eight frameworks, including Vue 2.6 and 2.7. Unchanged closure evidence was reused rather than rerunning the complete matrix. Production acceptance and issue follow-up are tracked separately.

Demo | Documentation

Historical source correction

The complete source for this historical version is available at 8daccb05. Later Unreleased fixes are excluded. The source mapping records the original source and frozen manifest identities.

All 94 attached assets retain their original bytes. This correction repairs GitHub source and release records only; npm uploads are disabled in this snapshot, and the original npm publication provenance is retained.

The existing CAD corresponding-source offer remains available.

3.2.1 frozen runtime candidate

... (truncated)

Changelog

Sourced from @​file-viewer/renderer-pptx's changelog.

File Viewer v3.2.2 - 2026-10-18

  • Restore the complete open-source project and normal source development workflow.
  • Preserve PDF worker fallback recovery (#375), DOCX 0.3.36 pagination (#322), and pie/doughnut category legends (#376). Thanks to @​kami-woo for #377; legend construction remains bounded.
  • Bound Geo3D hierarchy reads and cancel viewer-owned HTTP requests (#324).
  • Preserve the unmodified Stet upstream fonts and CMYK profile, with complete original native license materials (#344).
  • Add typed cross-sheet spreadsheet range navigation, including cancellation, fit, scroll/zoom restoration, and stale-request isolation (#378, #379). Thanks to @​kami-woo for the original navigation API.
  • Preserve every PPTX chart group and typed Worker metadata, render bar/line combinations with separate axes, and expose a custom chart adapter (#385). Document-specific font, label, legend, and overlap fidelity still needs comparison with the original file.
  • Publish both maintained package READMEs byte-for-byte and verify complete repository source before publishing npm assets.

File Viewer v3.2.1 - 2026-10-15

  • Fix PDF cold-network worker initialization. Start the real Worker directly instead of issuing a duplicate version probe that can time out or be cancelled.
  • Keep confirmed worker-version mismatch protection and use the supported asynchronous resource path for main-thread fallbacks in Safari/WebKit.
  • Route legacy binary Word documents mislabeled as .docx through the existing content sniffer, including direct renderer-handler integrations (#372).
  • Retain Vue 2.6/2.7 support and the existing Full package capabilities. Unaffected regression evidence is reused by input and artifact identity.

完整对外更新日志见 https://github.com/flyfish-dev/file-viewer/blob/main/docs/changelog.md。

File Viewer v3.1.2 - 2026-09-20

  • 修复 #300：EPUB 阅读器使用稳定视口判断横竖屏，避免工具栏尺寸变化引发反复重排与闪烁。已用报告者附件和浏览器回归验证。
  • 修复 #304：Patch 左右对照与匹配行的布局保持紧凑；增加复现样例与回归检查，不再把有效补丁误判为格式错误。
  • 新增显式启用的 BPMN 流程图预览（#297）和 XML XSD 校验、XSLT 转换视图（#305）。普通 XML 文本预览和既有 Full 包依赖保持不变；Demo 提供可体验样例。
  • 同步 ZIP 安全修复、IDML 运行资源与依赖更新；保留 Vue 2.6/2.7 与既有 Full 契约。

本次发布包含 89 个 npm 目标：88 个主线包为 3.1.2，历史兼容别名 msdoc-viewer 为 0.2.9。DOCX 引擎保持 0.3.32，表格引擎保持 0.21.6。#227、#248、#269 尚缺报告者原始文件，不能以构造样例宣称原问题已修复。

File Viewer v3.0.3 - 2026-09-09

Word、表格与移动端

  • 二进制 DOC 保留插入/删除修订、段落与软换行标记；DOCX 支持全部修订、最终稿和原稿切换，无需重选文件。修复 DOC 固定行距单位、字体槽位和默认字体读取，销售合同的行距及四张表按原件验证，不为无修订文件添加删除线。
  • 表格列宽拖拽后正确跟随缩放并按 sheet 恢复；不可见区域搜索覆盖真实 XLS、跨 sheet、远列和合并单元格。CFB 解析只跳过未使用的损坏 MiniFAT 链，必需数据仍严格校验。
  • 修复 iPhone Safari PDF 翻页焦点和搜索键盘收起后的残留滚动；取消 PDF 初始化后不再抛出未处理的 Worker 终止异常，后续文档仍可正常加载。

集成与输出

  • MapLibre 升级到 6.4.1，修复地图署名 HTML 连续危险属性的清洗绕过；内置离线 Worker，地图销毁重建后仍可加载。同步修复已发布的 js-yaml、sharp、Vitest 安全版本，并以所需 polyfill 替代仅用于查路径的 Browserify 工具链。
  • 标准预览使用固定的 JSZip 3.10.2，修复不同 JavaScript 上下文之间传递二进制内容的类型识别，避免浮动依赖导致构建与冷安装结果不一致。
  • core 与各渲染器统一固定 DOMPurify 3.4.15，纳入 XML 消毒安全加固并避免冷安装重复引入多个版本，体积预算保持不变。
  • Demo 顶部按钮的悬停位移不再改变文档留白，避免 CAD 模式切换和导出图像出现一像素高度漂移。
  • 修复 Vue CLI/Webpack 浏览器入口、Angular PPTX Worker 和嵌套 Vite 项目的资产根路径；显式资源配置保持优先，已输出 Worker 的构建不再探测不存在的清单。新增独立 RequireJS AMD 入口，保留宿主模块隔离与本地懒加载资源。
  • HTML 增加静态预览和原始源码切换，预览不执行脚本或外部请求。OFD 修复规范资源路径、命名空间和异常后的 Promise 结束；CAD 修复 DXF LINE、DWF/DWFx 对比度，并提供遵守权限、钩子和水印的 PNG/JPEG 当前视图下载。
  • PDF 补丁与许可来源随包校验；CHM、Adobe 和 Illustrator 的安全修复同步到规范 Worker。组件独立源码导出包含真实构建输入；发布工具按依赖层批量推进，续跑只跳过完整性一致的包。

版本与边界

87 个主线包使用 3.0.3，msdoc-viewer 使用 0.2.6。上游依赖为 DOCX 0.3.31、styled-exceljs 0.21.6、CAD 0.8.2 和 DWF 0.6.7。Vue 2.6/2.7 支持与既有 Full 能力保持不变，pako 3 继续暂缓。此 patch 版本也包含 HTML 源码切换、AMD 接入和 CAD 图片下载等新增能力。

... (truncated)

Commits
  • d3889d0 ci(release): bind current authorized production audit bodies
  • 7f51367 test(pptx): retain synthetic chart rendering evidence
  • e197173 release: bind 3.2.2 archives to the complete maintained source
  • 02923bc build(release): retain complete-source commands and approved audit scope
  • 134fae8 build(web-full): refresh the normal copy-assets compatibility bin
  • 17b05aa build(ci): retain public package-manager helper imports
  • a740443 release: prepare complete 3.2.2 source and maintained documentation
  • 67e8e80 build(release): preserve full source and verify packaged README bytes
  • 5422e93 fix(pptx): preserve chart groups and typed Worker metadata
  • 4a8e4ce fix(spreadsheet): preserve view restoration and navigation ownership
  • Additional commits viewable in compare view

Updates @file-viewer/renderer-spreadsheet from 3.1.1 to 3.2.2

Release notes

Sourced from @​file-viewer/renderer-spreadsheet's releases.

File Viewer 3.2.2 retains the complete maintained source and ships 88 packages at 3.2.2 plus msdoc-viewer 0.2.12.

  • Bounded Geo3D hierarchy parsing and cancellation.
  • Upstream Stet 0.8.7 with its original URW Base35 OFL fonts and CC0 CMYK profile, with original grants and dependency attribution.
  • Typed spreadsheet range navigation across sheets, including cancellation and zoom, scroll and selection restoration. Original contributor authorship is retained.
  • Complete PPTX chart models, chart-group axes, combo charts and a typed custom renderer hook. Customer-specific font, label/legend placement and overlap fidelity remains open in #385 pending the original document.
  • Frozen bilingual README/source identity checks before npm publishing and exact approved production audit scope enforcement.

The established DOCX 0.3.36, styled-exceljs 0.21.6 and PPT 0.3.6 dependencies are retained. Historical 3.2.0 and 3.2.1 tags and original npm package bytes are preserved.

npm install @file-viewer/web@3.2.2
# Or choose the matching framework package and standard/full profile.

The assets include all 89 npm archives, the immutable npm manifest, compiled library output, the offline iframe demo, viewer and component demonstrations, and built documentation. The GitHub source archives include the complete maintained source.

Local qualification completed: 89 package byte audits; 10,909 members; 562 legal documents; 17 CLI/asset cold installations; all 16 standard/full framework consumers in Chromium and WebKit; 1,075 root assertions with one existing skip; complete-source retention, source README identity, governance and secret checks. Publication and deployment evidence is read back independently after the release workflow.

3.2.2 frozen runtime candidate

Frozen 3.2.2 package candidate with complete maintained source.

Includes 88 packages at 3.2.2 and msdoc-viewer 0.2.12. Package archives and bilingual READMEs are bound to the committed manifest. The three existing support dependencies retain their previously published bytes.

Local verification: 89 archive byte audits, 17 CLI/asset cold installations, and all 16 standard/full framework cases in Chromium and WebKit. This prerelease is used for installed-consumer validation; stable npm publication follows the protected source merge.

File Viewer 3.2.1

Fixes

  • PDF: start the native worker directly instead of aborting a separate worker preflight on cold or slow networks. A genuine worker-version mismatch retries the matching bundled runtime; unrelated document errors are not hidden.
  • Word: use content-based ZIP/OLE detection consistently in both public handlers, including legacy Word content delivered with a .docx extension.

The release also retains the existing PDF hand-tool, Markdown highlighting, Office layout and Vite interoperability fixes. Optional specialist renderers remain opt-in.

All 89 File Viewer packages use the frozen archives attached here (88 at 3.2.1, msdoc-viewer at 0.2.11). Unchanged upstream engines remain DOCX 0.3.35, styled-exceljs 0.21.6 and PPT 0.3.6.

Validated with targeted cold/slow PDF cases and real Chromium/WebKit consumers across eight frameworks, including Vue 2.6 and 2.7. Unchanged closure evidence was reused rather than rerunning the complete matrix. Production acceptance and issue follow-up are tracked separately.

Demo | Documentation

Historical source correction

The complete source for this historical version is available at 8daccb05. Later Unreleased fixes are excluded. The source mapping records the original source and frozen manifest identities.

All 94 attached assets retain their original bytes. This correction repairs GitHub source and release records only; npm uploads are disabled in this snapshot, and the original npm publication provenance is retained.

The existing CAD corresponding-source offer remains available.

3.2.1 frozen runtime candidate

... (truncated)

Changelog

Sourced from @​file-viewer/renderer-spreadsheet's changelog.

File Viewer v3.2.2 - 2026-10-18

  • Restore the complete open-source project and normal source development workflow.
  • Preserve PDF worker fallback recovery (#375), DOCX 0.3.36 pagination (#322), and pie/doughnut category legends (#376). Thanks to @​kami-woo for #377; legend construction remains bounded.
  • Bound Geo3D hierarchy reads and cancel viewer-owned HTTP requests (#324).
  • Preserve the unmodified Stet upstream fonts and CMYK profile, with complete original native license materials (#344).
  • Add typed cross-sheet spreadsheet range navigation, including cancellation, fit, scroll/zoom restoration, and stale-request isolation (#378, #379). Thanks to @​kami-woo for the original navigation API.
  • Preserve every PPTX chart group and typed Worker metadata, render bar/line combinations with separate axes, and expose a custom chart adapter (#385). Document-specific font, label, legend, and overlap fidelity still needs comparison with the original file.
  • Publish both maintained package READMEs byte-for-byte and verify complete repository source before publishing npm assets.

File Viewer v3.2.1 - 2026-10-15

  • Fix PDF cold-network worker initialization. Start the real Worker directly instead of issuing a duplicate version probe that can time out or be cancelled.
  • Keep confirmed worker-version mismatch protection and use the supported asynchronous resource path for main-thread fallbacks in Safari/WebKit.
  • Route legacy binary Word documents mislabeled as .docx through the existing content sniffer, including direct renderer-handler integrations (#372).
  • Retain Vue 2.6/2.7 support and the existing Full package capabilities. Unaffected regression evidence is reused by input and artifact identity.

完整对外更新日志见 https://github.com/flyfish-dev/file-viewer/blob/main/docs/changelog.md。

File Viewer v3.1.2 - 2026-09-20

  • 修复 #300：EPUB 阅读器使用稳定视口判断横竖屏，避免工具栏尺寸变化引发反复重排与闪烁。已用报告者附件和浏览器回归验证。
  • 修复 #304：Patch 左右对照与匹配行的布局保持紧凑；增加复现样例与回归检查，不再把有效补丁误判为格式错误。
  • 新增显式启用的 BPMN 流程图预览（#297）和 XML XSD 校验、XSLT 转换视图（#305）。普通 XML 文本预览和既有 Full 包依赖保持不变；Demo 提供可体验样例。
  • 同步 ZIP 安全修复、IDML 运行资源与依赖更新；保留 Vue 2.6/2.7 与既有 Full 契约。

本次发布包含 89 个 npm 目标：88 个主线包为 3.1.2，历史兼容别名 msdoc-viewer 为 0.2.9。DOCX 引擎保持 0.3.32，表格引擎保持 0.21.6。#227、#248、#269 尚缺报告者原始文件，不能以构造样例宣称原问题已修复。

File Viewer v3.0.3 - 2026-09-09

Word、表格与移动端

  • 二进制 DOC 保留插入/删除修订、段落与软换行标记；DOCX 支持全部修订、最终稿和原稿切换，无需重选文件。修复 DOC 固定行距单位、字体槽位和默认字体读取，销售合同的行距及四张表按原件验证，不为无修订文件添加删除线。
  • 表格列宽拖拽后正确跟随缩放并按 sheet 恢复；不可见区域搜索覆盖真实 XLS、跨 sheet、远列和合并单元格。CFB 解析只跳过未使用的损坏 MiniFAT 链，必需数据仍严格校验。
  • 修复 iPhone Safari PDF 翻页焦点和搜索键盘收起后的残留滚动；取消 PDF 初始化后不再抛出未处理的 Worker 终止异常，后续文档仍可正常加载。

集成与输出

  • MapLibre 升级到 6.4.1，修复地图署名 HTML 连续危险属性的清洗绕过；内置离线 Worker，地图销毁重建后仍可加载。同步修复已发布的 js-yaml、sharp、Vitest 安全版本，并以所需 polyfill 替代仅用于查路径的 Browserify 工具链。
  • 标准预览使用固定的 JSZip 3.10.2，修复不同 JavaScript 上下文之间传递二进制内容的类型识别，避免浮动依赖导致构建与冷安装结果不一致。
  • core 与各渲染器统一固定 DOMPurify 3.4.15，纳入 XML 消毒安全加固并避免冷安装重复引入多个版本，体积预算保持不变。
  • Demo 顶部按钮的悬停位移不再改变文档留白，避免 CAD 模式切换和导出图像出现一像素高度漂移。
  • 修复 Vue CLI/Webpack 浏览器入口、Angular PPTX Worker 和嵌套 Vite 项目的资产根路径；显式资源配置保持优先，已输出 Worker 的构建不再探测不存在的清单。新增独立 RequireJS AMD 入口，保留宿主模块隔离与本地懒加载资源。
  • HTML 增加静态预览和原始源码切换，预览不执行脚本或外部请求。OFD 修复规范资源路径、命名空间和异常后的 Promise 结束；CAD 修复 DXF LINE、DWF/DWFx 对比度，并提供遵守权限、钩子和水印的 PNG/JPEG 当前视图下载。
  • PDF 补丁与许可来源随包校验；CHM、Adobe 和 Illustrator 的安全修复同步到规范 Worker。组件独立源码导出包含真实构建输入；发布工具按依赖层批量推进，续跑只跳过完整性一致的包。

版本与边界

87 个主线包使用 3.0.3，msdoc-viewer 使用 0.2.6。上游依赖为 DOCX 0.3.31、styled-exceljs 0.21.6、CAD 0.8.2 和 DWF 0.6.7。Vue 2.6/2.7 支持与既有 Full 能力保持不变，pako 3 继续暂缓。此 patch 版本也包含 HTML 源码切换、AMD 接入和 CAD 图片下载等新增能力。

... (truncated)

Commits
  • d3889d0 ci(release): bind current authorized production audit bodies
  • 7f51367 test(pptx): retain synthetic chart rendering evidence
  • e197173 release: bind 3.2.2 archives to the complete maintained source
  • 02923bc build(release): retain complete-source commands and approved audit scope
  • 134fae8 build(web-full): refresh the normal copy-assets compatibility bin
  • 17b05aa build(ci): retain public package-manager helper imports
  • a740443 release: prepare complete 3.2.2 source and maintained documentation
  • 67e8e80 build(release): preserve full source and verify packaged README bytes
  • 5422e93 fix(pptx): preserve chart groups and typed Worker metadata
  • 4a8e4ce fix(spreadsheet): preserve view restoration and navigation ownership
  • Additional commits viewable in compare view

Updates @file-viewer/renderer-word from 3.1.1 to 3.2.2

Release notes

Sourced from @​file-viewer/renderer-word's releases.

File Viewer 3.2.2 retains the complete maintained source and ships 88 packages at 3.2.2 plus msdoc-viewer 0.2.12.

  • Bounded Geo3D hierarchy parsing and cancellation.
  • Upstream Stet 0.8.7 with its original URW Base35 OFL fonts and CC0 CMYK profile, with original grants and dependency attribution.
  • Typed spreadsheet range navigation across sheets, including cancellation and zoom, scroll and selection restoration. Original contributor authorship is retained.
  • Complete PPTX chart models, chart-group axes, combo charts and a typed custom renderer hook. Customer-specific font, label/legend placement and overlap fidelity remains open in #385 pending the original document.
  • Frozen bilingual README/source identity checks before npm publishing and exact approved production audit scope enforcement.

The established DOCX 0.3.36, styled-exceljs 0.21.6 and PPT 0.3.6 dependencies are retained. Historical 3.2.0 and 3.2.1 tags and original npm package bytes are preserved.

npm install @file-viewer/web@3.2.2
# Or choose the matching framework package and standard/full profile.

The assets include all 89 npm archives, the immutable npm manifest, compiled library output, the offline iframe demo, viewer and component demonstrations, and built documentation. The GitHub source archives include the complete maintained source.

Local qualification completed: 89 package byte audits; 10,909 members; 562 legal documents; 17 CLI/asset cold installations; all 16 standard/full framework consumers in Chromium and WebKit; 1,075 root assertions with one existing skip; complete-source retention, source README identity, governance and secret checks. Publication and deployment evidence is read back independently after the release workflow.

3.2.2 frozen runtime candidate

Frozen 3.2.2 package candidate with complete maintained source.

Includes 88 packages at 3.2.2 and msdoc-viewer 0.2.12. Package archives and bilingual READMEs are bound to the committed manifest. The three existing support dependencies retain their previously published bytes.

Local verification: 89 archive byte audits, 17 CLI/asset cold installations, and all 16 standard/full framework cases in Chromium and WebKit. This prerelease is used for installed-consumer validation; stable npm publication follows the protected source merge.

File Viewer 3.2.1

Fixes

  • PDF: start the native worker directly instead of aborting a separate worker preflight on cold or slow networks. A genuine worker-version mismatch retries the matching bundled runtime; unrelated document errors are not hidden.
  • Word: use content-based ZIP/OLE detection consistently in both public handlers, including legacy Word content delivered with a .docx extension.

The release also retains the existing PDF hand-tool, Markdown highlighting, Office layout and Vite interoperability fixes. Optional specialist renderers remain opt-in.

All 89 File Viewer packages use the frozen archives attached here (88 at 3.2.1, msdoc-viewer at 0.2.11). Unchanged upstream engines remain DOCX 0.3.35, styled-exceljs 0.21.6 and PPT 0.3.6.

Validated with targeted cold/slow PDF cases and real Chromium/WebKit consumers across eight frameworks, including Vue 2.6 and 2.7. Unchanged closure evidence was reused rather than rerunning the complete matrix. Production acceptance and issue follow-up are tracked separately.

Demo | Documentation

Historical source correction

The complete source for this historical version is available at 8daccb05. Later Unreleased fixes are excluded. The source mapping records the original source and frozen manifest identities.

All 94 attached assets retain their original bytes. This correction repairs GitHub source and release records only; npm uploads are disabled in this snapshot, and the original npm publication provenance is retained.

The existing

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/runtime-dependencies-569e0a778a branch 2 times, most recently from e7c9d8a to a75a5a0 Compare October 23, 2026 00:19
@dependabot
build(deps): bump the runtime-dependencies group across 1 directory w…
48746cb 
…ith 44 updates

Bumps the runtime-dependencies group with 44 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` |
| [@file-viewer/react](https://github.com/flyfish-dev/file-viewer) | `3.1.1` | `3.2.2` |
| [@file-viewer/renderer-pptx](https://github.com/flyfish-dev/file-viewer) | `3.1.1` | `3.2.2` |
| [@file-viewer/renderer-spreadsheet](https://github.com/flyfish-dev/file-viewer) | `3.1.1` | `3.2.2` |
| [@file-viewer/renderer-word](https://github.com/flyfish-dev/file-viewer) | `3.1.1` | `3.2.2` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.0` | `1.32.1` |
| [@openai/agents](https://github.com/openai/openai-agents-js) | `0.18.0` | `0.20.0` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.15` | `2.1.17` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.3` | `1.5.0` |
| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.21` | `1.2.1` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.16` | `1.4.1` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.116.0` | `2.118.0` |
| [jose](https://github.com/panva/jose) | `6.2.5` | `6.2.12` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.13` | `3.14.21` |
| [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-code-block-lowlight](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-code-block-lowlight) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-hard-break](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-hard-break) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-highlight](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-highlight) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-image](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-image) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-link](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-link) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-mention](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-mention) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-placeholder](https://github.com/ueberdosis/tiptap/tree/HEAD/packages-deprecated/extension-placeholder) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-table](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-table-cell](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table-cell) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-table-header](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table-header) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-table-row](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table-row) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-task-item](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-task-item) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-task-list](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-task-list) | `3.31.3` | `3.32.0` |
| [@tiptap/extension-underline](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-underline) | `3.31.3` | `3.32.0` |
| [@tiptap/pm](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/pm) | `3.31.3` | `3.32.0` |
| [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) | `3.31.3` | `3.32.0` |
| [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.31.3` | `3.32.0` |
| [@tiptap/suggestion](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/suggestion) | `3.31.3` | `3.32.0` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.11.1` | `5.11.2` |
| [json-rpc-2.0](https://github.com/shogowada/json-rpc-2.0) | `1.8.0` | `1.8.1` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.3` | `1.13.0` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.7` | `1.8.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.8.0` | `1.9.1` |
| [tar-stream](https://github.com/mafintosh/tar-stream) | `3.2.1` | `3.2.2` |
| [ts-pattern](https://github.com/gvergnaud/ts-pattern) | `5.9.0` | `5.9.2` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |



Updates `@base-ui/react` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react)

Updates `@file-viewer/react` from 3.1.1 to 3.2.2
- [Release notes](https://github.com/flyfish-dev/file-viewer/releases)
- [Changelog](https://github.com/flyfish-dev/file-viewer/blob/main/CHANGELOG.md)
- [Commits](flyfish-dev/file-viewer@v3.1.1...v3.2.2)

Updates `@file-viewer/renderer-pptx` from 3.1.1 to 3.2.2
- [Release notes](https://github.com/flyfish-dev/file-viewer/releases)
- [Changelog](https://github.com/flyfish-dev/file-viewer/blob/main/CHANGELOG.md)
- [Commits](flyfish-dev/file-viewer@v3.1.1...v3.2.2)

Updates `@file-viewer/renderer-spreadsheet` from 3.1.1 to 3.2.2
- [Release notes](https://github.com/flyfish-dev/file-viewer/releases)
- [Changelog](https://github.com/flyfish-dev/file-viewer/blob/main/CHANGELOG.md)
- [Commits](flyfish-dev/file-viewer@v3.1.1...v3.2.2)

Updates `@file-viewer/renderer-word` from 3.1.1 to 3.2.2
- [Release notes](https://github.com/flyfish-dev/file-viewer/releases)
- [Changelog](https://github.com/flyfish-dev/file-viewer/blob/main/CHANGELOG.md)
- [Commits](flyfish-dev/file-viewer@v3.1.1...v3.2.2)

Updates `@modelcontextprotocol/sdk` from 1.32.0 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.0...1.32.1)

Updates `@openai/agents` from 0.18.0 to 0.20.0
- [Release notes](https://github.com/openai/openai-agents-js/releases)
- [Commits](https://github.com/openai/openai-agents-js/compare/v0.18.0...@openai/agents@0.20.0)

Updates `@radix-ui/react-label` from 2.1.15 to 2.1.17
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label)

Updates `@radix-ui/react-slot` from 1.3.3 to 1.5.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@radix-ui/react-tabs` from 1.1.21 to 1.2.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs)

Updates `@radix-ui/react-tooltip` from 1.2.16 to 1.4.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@supabase/supabase-js` from 2.116.0 to 2.118.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.118.0/packages/core/supabase-js)

Updates `jose` from 6.2.5 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.5...v6.2.12)

Updates `@tanstack/react-virtual` from 3.14.13 to 3.14.21
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.21/packages/react-virtual)

Updates `@tiptap/core` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/core)

Updates `@tiptap/extension-code-block-lowlight` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-code-block-lowlight/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-code-block-lowlight)

Updates `@tiptap/extension-hard-break` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-hard-break/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-hard-break)

Updates `@tiptap/extension-highlight` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-highlight/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-highlight)

Updates `@tiptap/extension-image` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-image/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-image)

Updates `@tiptap/extension-link` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-link/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-link)

Updates `@tiptap/extension-mention` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-mention/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-mention)

Updates `@tiptap/extension-placeholder` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages-deprecated/extension-placeholder/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages-deprecated/extension-placeholder)

Updates `@tiptap/extension-table` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-table/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-table)

Updates `@tiptap/extension-table-cell` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-table-cell)

Updates `@tiptap/extension-table-header` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-table-header)

Updates `@tiptap/extension-table-row` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-table-row)

Updates `@tiptap/extension-task-item` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-task-item)

Updates `@tiptap/extension-task-list` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-task-list)

Updates `@tiptap/extension-underline` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/extension-underline/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/extension-underline)

Updates `@tiptap/pm` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/pm/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/pm)

Updates `@tiptap/react` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/react)

Updates `@tiptap/starter-kit` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/starter-kit)

Updates `@tiptap/suggestion` from 3.31.3 to 3.32.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.32.0/packages/suggestion/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.32.0/packages/suggestion)

Updates `fast-xml-parser` from 5.11.1 to 5.11.2
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.11.1...v5.11.2)

Updates `json-rpc-2.0` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/shogowada/json-rpc-2.0/releases)
- [Commits](shogowada/json-rpc-2.0@v1.8.0...v1.8.1)

Updates `mammoth` from 1.12.3 to 1.13.0
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.3...1.13.0)

Updates `radix-ui` from 1.6.7 to 1.8.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `tar-stream` from 3.2.1 to 3.2.2
- [Commits](mafintosh/tar-stream@v3.2.1...v3.2.2)

Updates `ts-pattern` from 5.9.0 to 5.9.2
- [Release notes](https://github.com/gvergnaud/ts-pattern/releases)
- [Commits](gvergnaud/ts-pattern@v5.9.0...v5.9.2)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

---
updated-dependencies:
- dependency-name: "@base-ui/react"
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@file-viewer/react"
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: "@file-viewer/renderer-pptx"
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: "@file-viewer/renderer-spreadsheet"
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: "@file-viewer/renderer-word"
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@openai/agents"
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@radix-ui/react-label"
  dependency-version: 2.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@radix-ui/react-tabs"
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.117.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/core"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-code-block-lowlight"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-hard-break"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-highlight"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-image"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-link"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-mention"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-placeholder"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-table"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-table-cell"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-table-header"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-table-row"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-task-item"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-task-list"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/extension-underline"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/pm"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/react"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: "@tiptap/suggestion"
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: fast-xml-parser
  dependency-version: 5.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: json-rpc-2.0
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: mammoth
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: radix-ui
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: smol-toml
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: tar-stream
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: ts-pattern
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-dependencies
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/runtime-dependencies-569e0a778a branch from a75a5a0 to 48746cb Compare October 23, 2026 00:48

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants