Skip to content

Bump the production-dependencies group across 1 directory with 9 updates#5

Open
dependabot[bot] wants to merge 1 commit intov4from
dependabot/npm_and_yarn/production-dependencies-afeea51367
Open

Bump the production-dependencies group across 1 directory with 9 updates#5
dependabot[bot] wants to merge 1 commit intov4from
dependabot/npm_and_yarn/production-dependencies-afeea51367

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
@clack/prompts 1.1.0 1.2.0
pixi.js 8.17.1 8.18.1
preact 10.29.0 10.29.1
toml 3.0.0 4.1.1
workerpool 10.0.1 10.0.2
@types/node 25.5.0 25.6.0
esbuild 0.27.4 0.28.0
prettier 3.8.1 3.8.3
typescript 6.0.2 6.0.3

Updates @clack/prompts from 1.1.0 to 1.2.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.2.0

Minor Changes

  • 9786226: Externalize fast-string-width and fast-wrap-ansi to avoid double dependencies
  • 090902c: Adds date prompt with format support (YMD, MDY, DMY)

Patch Changes

  • 134a1a1: Fix the path prompt so directory: true correctly enforces directory-only selection while still allowing directory navigation, and add regression tests for both directory and default file selection behavior.
  • bdf89a5: Adds placeholder option to autocomplete. When the placeholder is set and the input is empty, pressing tab will set the value to placeholder.
  • 336495a: Apply guide to wrapped multi-line messages in confirm prompt.
  • 9fe8de6: Respect withGuide: false in autocomplete and multiselect prompts.
  • 29a50cb: Fix path directory mode so pressing Enter with an existing directory initialValue submits that current directory instead of the first child option, and add regression coverage for immediate submit and child-directory navigation.
  • Updated dependencies [9786226]
  • Updated dependencies [bdf89a5]
  • Updated dependencies [417b451]
  • Updated dependencies [090902c]
    • @​clack/core@​1.2.0
Changelog

Sourced from @​clack/prompts's changelog.

1.2.0

Minor Changes

  • 9786226: Externalize fast-string-width and fast-wrap-ansi to avoid double dependencies
  • 090902c: Adds date prompt with format support (YMD, MDY, DMY)

Patch Changes

  • 134a1a1: Fix the path prompt so directory: true correctly enforces directory-only selection while still allowing directory navigation, and add regression tests for both directory and default file selection behavior.
  • bdf89a5: Adds placeholder option to autocomplete. When the placeholder is set and the input is empty, pressing tab will set the value to placeholder.
  • 336495a: Apply guide to wrapped multi-line messages in confirm prompt.
  • 9fe8de6: Respect withGuide: false in autocomplete and multiselect prompts.
  • 29a50cb: Fix path directory mode so pressing Enter with an existing directory initialValue submits that current directory instead of the first child option, and add regression coverage for immediate submit and child-directory navigation.
  • Updated dependencies [9786226]
  • Updated dependencies [bdf89a5]
  • Updated dependencies [417b451]
  • Updated dependencies [090902c]
    • @​clack/core@​1.2.0
Commits
  • aa488fc [ci] release (#482)
  • 9fe8de6 feat: respect withGuide: false in autocomplete and multiselect prompts (#500)
  • 001351e test: specify locale in tests (#497)
  • 336495a fix: correctly wrap multi-line messages in confirm prompt (#495)
  • ffbdcb0 [ci] format
  • fe32e13 ref(dates): adjust date interface (#487)
  • bdf89a5 feat(prompts,core): make autocomplete placeholder tabbable (#485)
  • 52fce8a fix(date): resolve timezone issues in DatePrompt (#486)
  • 090902c feat(core, prompts): add DatePrompt for date input with customizable formats ...
  • 29a50cb fix(prompts): submit initial directory value in path prompt (#484)
  • Additional commits viewable in compare view

Updates pixi.js from 8.17.1 to 8.18.1

Release notes

Sourced from pixi.js's releases.

v8.18.1

💾 Download

Installation:

npm install pixi.js@8.18.1

Development Build:

Production Build:

Documentation:

Changed

pixijs/pixijs@v8.18.0...v8.18.1

🐛 Fixed

v8.18.0

💾 Download

Installation:

npm install pixi.js@8.18.0

Development Build:

Production Build:

Documentation:

Changed

pixijs/pixijs@v8.17.1...v8.18.0

🚨 Behavior Change

  • fix: text.width and word wrap returning incorrect values by @​Zyie in pixijs/pixijs#12007
    • Text/HTMLText/BitmapText with wordWrap: true and non-left align (center/right/justify) now return the true rendered width from text.width instead of reporting wordWrapWidth. If you relied on text.width === wordWrapWidth for layout, use wordWrapWidth directly or wrap the text in a sized container.

... (truncated)

Commits
  • 8f42bb7 v8.18.1
  • 1947eb6 fix: prevent error when using Application.domContainerRoot in Node.js (#12017)
  • 2c5818b v8.18.0
  • 39d2279 chore: move @​xmldom/xmldom to production dependencies
  • 1c1f193 chore: bump @​xmldom/xmldom to 0.8.12 (#12016)
  • 7a8f55c feat: add graphicsContextToSvg() for Graphics → SVG export (#11989)
  • 16dad50 fix: TilingSprite tilePosition divided by resolution when using Canvas render...
  • 5e4640b fix: SplitText baseline mismatch when tagStyles used with lineHeight (#12008)
  • 19b206c fix: move CanvasFilterSystem to filters module (#12014)
  • 1b9b7d0 fix: Handle literal < characters in parseTaggedText (#11972)
  • Additional commits viewable in compare view

Updates preact from 10.29.0 to 10.29.1

Release notes

Sourced from preact's releases.

10.29.1

Fixes

Maintenance

Commits
  • 4dc9b50 10.29.1 (#5071)
  • 0560f9a Create a unique event-clock for each Preact instance on a page. (#5068)
  • cda06de Fix incorrect DOM order with conditional ContextProvider and inner keys (#506...
  • c859700 fix: Remove postinstall script for playwright setup (#5063)
  • 110966a Merge pull request #5060 from preactjs/playwright
  • 20a9be1 chore: speed up tests by using playwright instead of webdriverio
  • dacefd5 Merge pull request #5059 from preactjs/jsx-migrate2
  • 2a61642 chore: migrate remaining .js -> .jsx files
  • 71ecde6 Merge pull request #5058 from preactjs/jsx-tests
  • cd1c4af chore: rename *.js -> *.jsx when JSX is used
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates toml from 3.0.0 to 4.1.1

Changelog

Sourced from toml's changelog.

4.1.1 - March 31 2026

  • Increase performance ~5x (#68)

4.1.0 - March 31 2026

  • Add spec v1.1.0 support (#67)

4.0.1 - March 31 2026

  • Minor packaging changes

4.0.0 - March 31 2026

  • Modernize tooling and support TOML v1.0.0 spec (#66)

2.3.0 - July 13 2015

  • Correctly handle quoted keys (#21)

2.2.3 - June 8 2015

  • Support empty inline tables (#24)
  • Do not allow implicit table definitions to replace value (#23)
  • Don't allow tables to replace inline tables (#25)

2.2.2 - April 3 2015

  • Correctly handle newlines at beginning of string (#22)

2.2.1 - March 17 2015

  • Parse dates generated by Date#toISOString() (#20)

2.2.0 - Feb 26 2015

  • Support TOML spec v0.4.0

2.1.0 - Jan 7 2015

... (truncated)

Commits

Updates workerpool from 10.0.1 to 10.0.2

Changelog

Sourced from workerpool's changelog.

2026-04-16, version 10.0.2

Commits
  • eb55e63 chore: publish v10.0.2
  • a0d5bc9 chore: update devDependencies
  • 19fab44 fix(worker): clean up listeners when abort triggers (#547)
  • 106d6a6 chore(deps-dev): bump follow-redirects in /examples/webpack5 (#546)
  • 87088cf chore(deps-dev): bump lodash in /examples/webpack5 (#544)
  • 50d6512 chore(deps-dev): bump node-forge in /examples/webpack5 (#545)
  • 1cb42ce chore(deps-dev): bump vite from 6.4.1 to 6.4.2 in /examples/vite (#543)
  • 113dfe7 chore(deps): bump picomatch (#540)
  • 4b4ffcd chore(deps): bump picomatch from 4.0.2 to 4.0.4 in /examples/vite (#541)
  • 53cad6d chore(deps): bump picomatch from 2.3.1 to 2.3.2 in /examples/webpack5 (#539)
  • Additional commits viewable in compare view

Updates @types/node from 25.5.0 to 25.6.0

Commits

Updates esbuild from 0.27.4 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0

  • Add support for with { type: 'text' } imports (#4435)

    The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

    import string from './example.txt' with { type: 'text' }
console.log(string)

  • Add integrity checks to fallback download path (#4343)

    Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

    This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

  • Update the Go compiler from 1.25.7 to 1.26.1

    This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

    • It now uses the new garbage collector that comes with Go 1.26.
    • The Go compiler is now more aggressive with allocating memory on the stack.
    • The executable format that the Go linker uses has undergone several changes.
    • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

    You can read the Go 1.26 release notes for more information.

v0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}
// New output (with --loader=ts --target=es2021)
class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.0

  • Add support for with { type: 'text' } imports (#4435)

    The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

    import string from './example.txt' with { type: 'text' }
console.log(string)

  • Add integrity checks to fallback download path (#4343)

    Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

    This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

  • Update the Go compiler from 1.25.7 to 1.26.1

    This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

    • It now uses the new garbage collector that comes with Go 1.26.
    • The Go compiler is now more aggressive with allocating memory on the stack.
    • The executable format that the Go linker uses has undergone several changes.
    • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

    You can read the Go 1.26 release notes for more information.

0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}

... (truncated)

Commits
  • 6a794df publish 0.28.0 to npm
  • 64ee0ea fix #4435: support with { type: text } imports
  • ef65aee fix sort order in snapshots_packagejson.txt
  • 1a26a8e try to fix test-old-ts, also shuffle CI tasks
  • 556ce6c use '' instead of null to omit build hashes
  • 8e675a8 ci: allow missing binary hashes for tests
  • 7067763 Reapply "update go 1.25.7 => 1.26.1"
  • 39473a9 fix #4343: integrity check for binary download
  • 2025c9f publish 0.27.7 to npm
  • c6b586e fix typo in Makefile for @esbuild/win32-x64
  • Additional commits viewable in compare view

Updates prettier from 3.8.1 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

3.8.2

  • Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@​switch (foo) {
@​case (1) {}
@​default never;
}

arrow function and instanceof expressions.

</tr></table>

... (truncated)

Commits

Updates typescript from 6.0.2 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 9 updates
c963227 
Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.1.0` | `1.2.0` |
| [pixi.js](https://github.com/pixijs/pixijs) | `8.17.1` | `8.18.1` |
| [preact](https://github.com/preactjs/preact) | `10.29.0` | `10.29.1` |
| [toml](https://github.com/BinaryMuse/toml-node) | `3.0.0` | `4.1.1` |
| [workerpool](https://github.com/josdejong/workerpool) | `10.0.1` | `10.0.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.0` | `25.6.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.4` | `0.28.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` |



Updates `@clack/prompts` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.2.0/packages/prompts)

Updates `pixi.js` from 8.17.1 to 8.18.1
- [Release notes](https://github.com/pixijs/pixijs/releases)
- [Commits](pixijs/pixijs@v8.17.1...v8.18.1)

Updates `preact` from 10.29.0 to 10.29.1
- [Release notes](https://github.com/preactjs/preact/releases)
- [Commits](preactjs/preact@10.29.0...10.29.1)

Updates `toml` from 3.0.0 to 4.1.1
- [Changelog](https://github.com/BinaryMuse/toml-node/blob/master/CHANGELOG.md)
- [Commits](BinaryMuse/toml-node@v3.0.0...v4.1.1)

Updates `workerpool` from 10.0.1 to 10.0.2
- [Changelog](https://github.com/josdejong/workerpool/blob/master/HISTORY.md)
- [Commits](josdejong/workerpool@v10.0.1...v10.0.2)

Updates `@types/node` from 25.5.0 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `esbuild` from 0.27.4 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.4...v0.28.0)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.3)

Updates `typescript` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.2...v6.0.3)

---
updated-dependencies:
- dependency-name: "@clack/prompts"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pixi.js
  dependency-version: 8.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: preact
  dependency-version: 10.29.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: toml
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: workerpool
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants