Skip to content

chore(deps): Bump the production group across 1 directory with 10 updates#120

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-e43d4806d1
Open

chore(deps): Bump the production group across 1 directory with 10 updates#120
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-e43d4806d1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 15, 2026 •
edited
Loading

Bumps the production group with 8 updates in the / directory:

Package From To
@deck.gl/core 9.2.11 9.3.0
@deck.gl/geo-layers 9.2.11 9.3.0
dompurify 3.3.3 3.4.0
fast-xml-parser 5.5.9 5.6.0
maplibre-gl 5.21.1 5.23.0
marked 17.0.5 18.0.0
commander 13.1.0 14.0.3
@clack/prompts 0.9.1 1.2.0

Updates @deck.gl/core from 9.2.11 to 9.3.0

Release notes

Sourced from @​deck.gl/core's releases.

v9.3.0

deck.gl v9.3 features big improvements to widgets, controllers and WebGPU. Find out more on What's New and Upgrade Guide.

v9.3.0-beta.2

  • fix(widgets): ZoomWidget works with OrthographicView (#10202)
  • fix(aggregation-layers) Fix nvidia compilation error (#10191)
  • fix(widgets): Move @​floating-ui/dom to dependencies (#10189)

v9.3.0-beta.1

  • feat(extensions): Add dashed stroke support for ScatterplotLayer and TextBackgroundLayer (#9976)
  • chore(test-utils): Separate tape tests from vitest and clean up CI (#10061)
  • fix(geo-layers): Ensure zoomOffset is correctly part of the round/ceil Z calculation (#9807)
  • feat(widgets): Add controlled mode and state callbacks (#9973)
  • chore(mapbox): Remove MapboxLayer and _renderLayersInGroups (#10163)
  • fix(mapbox): automatically inject 'mapbox' view in overlaid mode for multi-view consistency (#9947)
  • feat(core): AttributeManager allocates Buffers for constant WebGPU at… (#10152)
  • feat(core) coordinateSystem prop now accepts no-import string constants (#10140)
  • fix(layers): discard fragments outside rounded rect in TextBackgroundLayer (#10177)
  • fix(layers): submit command buffer after texture copy in IconLayer resize (#10176)
  • fix(core): WebGPU Picking fix (#10175)
  • feat(layers): TextLayer uses real text metrics (#10164)
  • chore(geo-layers): Update h3 & a5 dependencies (#10170)

v9.3.0-alpha.6

  • feat(TileLayer): Add visibleMinZoom & visibleMaxZoom props (#10091)
  • fix(mapbox): onBefore|AfterRender fires without layers (#10166)
  • fix(mapbox): Prevent crash when deck uninitialized (#10167)
  • feat(main): export all widgets from deck.gl main module (#10160)
  • chore: Bump to luma@9.3.1 & loaders@4.4.1 (#10158)
  • fix(layers): Texture handling in WebGPU (#10157)
  • chore: Bump luma.gl@alpha.11 (#10141)
  • chore(json): Typing improvements (#9641)
  • feat(core): simplify layer plumbing for WebGPU (#9820)
  • chore: enable source map in website dev mode (#10156)

v9.3.0-alpha.5

No release notes provided.

v9.3.0-alpha.3

  • feat(core): TerrainController (#10134)

v9.3.0-alpha.2

  • chore: upgrade Node.js from 20 to 22 (#10051)
  • chore(core): Use non-deprecated props for lighting module (#10121)
  • feat(layers): add clipping to TextLayer (#10118)
  • feat(core): FirstPersonController supports maxBounds (#10115)
  • feat(core): OrthographicView supports maxBounds (#10108)
  • feat(core): OrbitController supports maxBounds (#10116)
  • feat(core): GlobeView supports maxBounds (#10111)
  • feat(core): more intuitive OrbitController (#10117)

... (truncated)

Changelog

Sourced from @​deck.gl/core's changelog.

Change Log

All notable changes to deck.gl will be documented in this file.

For a human readable version, visit https://deck.gl/docs/upgrade-guide

deck.gl v9.3

deck.gl v9.3 Prereleases

deck.gl [v9.3.0-beta.2] - Apr 11 2026

  • fix(widgets): ZoomWidget works with OrthographicView (#10202)
  • fix(aggregation-layers) Fix nvidia compilation error (#10191)
  • fix(widgets): Move @​floating-ui/dom to dependencies (#10189)

deck.gl [v9.3.0-beta.1] - Apr 7 2026

  • feat(extensions): Add dashed stroke support for ScatterplotLayer and TextBackgroundLayer (#9976)
  • chore(test-utils): Separate tape tests from vitest and clean up CI (#10061)
  • fix(geo-layers): Ensure zoomOffset is correctly part of the round/ceil Z calculation (#9807)
  • feat(widgets): Add controlled mode and state callbacks (#9973)
  • chore(mapbox): Remove MapboxLayer and _renderLayersInGroups (#10163)
  • fix(mapbox): automatically inject 'mapbox' view in overlaid mode for multi-view consistency (#9947)
  • feat(core): AttributeManager allocates Buffers for constant WebGPU at… (#10152)
  • feat(core) coordinateSystem prop now accepts no-import string constants (#10140)
  • fix(layers): discard fragments outside rounded rect in TextBackgroundLayer (#10177)
  • fix(layers): submit command buffer after texture copy in IconLayer resize (#10176)
  • fix(core): WebGPU Picking fix (#10175)
  • feat(layers): TextLayer uses real text metrics (#10164)
  • chore(geo-layers): Update h3 & a5 dependencies (#10170)

deck.gl [v9.3.0-alpha.6] - Apr 2 2026

  • feat(TileLayer): Add visibleMinZoom & visibleMaxZoom props (#10091)
  • fix(mapbox): onBefore|AfterRender fires without layers (#10166)
  • fix(mapbox): Prevent crash when deck uninitialized (#10167)

... (truncated)

Commits

Updates @deck.gl/geo-layers from 9.2.11 to 9.3.0

Release notes

Sourced from @​deck.gl/geo-layers's releases.

v9.3.0

deck.gl v9.3 features big improvements to widgets, controllers and WebGPU. Find out more on What's New and Upgrade Guide.

v9.3.0-beta.2

  • fix(widgets): ZoomWidget works with OrthographicView (#10202)
  • fix(aggregation-layers) Fix nvidia compilation error (#10191)
  • fix(widgets): Move @​floating-ui/dom to dependencies (#10189)

v9.3.0-beta.1

  • feat(extensions): Add dashed stroke support for ScatterplotLayer and TextBackgroundLayer (#9976)
  • chore(test-utils): Separate tape tests from vitest and clean up CI (#10061)
  • fix(geo-layers): Ensure zoomOffset is correctly part of the round/ceil Z calculation (#9807)
  • feat(widgets): Add controlled mode and state callbacks (#9973)
  • chore(mapbox): Remove MapboxLayer and _renderLayersInGroups (#10163)
  • fix(mapbox): automatically inject 'mapbox' view in overlaid mode for multi-view consistency (#9947)
  • feat(core): AttributeManager allocates Buffers for constant WebGPU at… (#10152)
  • feat(core) coordinateSystem prop now accepts no-import string constants (#10140)
  • fix(layers): discard fragments outside rounded rect in TextBackgroundLayer (#10177)
  • fix(layers): submit command buffer after texture copy in IconLayer resize (#10176)
  • fix(core): WebGPU Picking fix (#10175)
  • feat(layers): TextLayer uses real text metrics (#10164)
  • chore(geo-layers): Update h3 & a5 dependencies (#10170)

v9.3.0-alpha.6

  • feat(TileLayer): Add visibleMinZoom & visibleMaxZoom props (#10091)
  • fix(mapbox): onBefore|AfterRender fires without layers (#10166)
  • fix(mapbox): Prevent crash when deck uninitialized (#10167)
  • feat(main): export all widgets from deck.gl main module (#10160)
  • chore: Bump to luma@9.3.1 & loaders@4.4.1 (#10158)
  • fix(layers): Texture handling in WebGPU (#10157)
  • chore: Bump luma.gl@alpha.11 (#10141)
  • chore(json): Typing improvements (#9641)
  • feat(core): simplify layer plumbing for WebGPU (#9820)
  • chore: enable source map in website dev mode (#10156)

v9.3.0-alpha.5

No release notes provided.

v9.3.0-alpha.3

  • feat(core): TerrainController (#10134)

v9.3.0-alpha.2

  • chore: upgrade Node.js from 20 to 22 (#10051)
  • chore(core): Use non-deprecated props for lighting module (#10121)
  • feat(layers): add clipping to TextLayer (#10118)
  • feat(core): FirstPersonController supports maxBounds (#10115)
  • feat(core): OrthographicView supports maxBounds (#10108)
  • feat(core): OrbitController supports maxBounds (#10116)
  • feat(core): GlobeView supports maxBounds (#10111)
  • feat(core): more intuitive OrbitController (#10117)

... (truncated)

Changelog

Sourced from @​deck.gl/geo-layers's changelog.

Change Log

All notable changes to deck.gl will be documented in this file.

For a human readable version, visit https://deck.gl/docs/upgrade-guide

deck.gl v9.3

deck.gl v9.3 Prereleases

deck.gl [v9.3.0-beta.2] - Apr 11 2026

  • fix(widgets): ZoomWidget works with OrthographicView (#10202)
  • fix(aggregation-layers) Fix nvidia compilation error (#10191)
  • fix(widgets): Move @​floating-ui/dom to dependencies (#10189)

deck.gl [v9.3.0-beta.1] - Apr 7 2026

  • feat(extensions): Add dashed stroke support for ScatterplotLayer and TextBackgroundLayer (#9976)
  • chore(test-utils): Separate tape tests from vitest and clean up CI (#10061)
  • fix(geo-layers): Ensure zoomOffset is correctly part of the round/ceil Z calculation (#9807)
  • feat(widgets): Add controlled mode and state callbacks (#9973)
  • chore(mapbox): Remove MapboxLayer and _renderLayersInGroups (#10163)
  • fix(mapbox): automatically inject 'mapbox' view in overlaid mode for multi-view consistency (#9947)
  • feat(core): AttributeManager allocates Buffers for constant WebGPU at… (#10152)
  • feat(core) coordinateSystem prop now accepts no-import string constants (#10140)
  • fix(layers): discard fragments outside rounded rect in TextBackgroundLayer (#10177)
  • fix(layers): submit command buffer after texture copy in IconLayer resize (#10176)
  • fix(core): WebGPU Picking fix (#10175)
  • feat(layers): TextLayer uses real text metrics (#10164)
  • chore(geo-layers): Update h3 & a5 dependencies (#10170)

deck.gl [v9.3.0-alpha.6] - Apr 2 2026

  • feat(TileLayer): Add visibleMinZoom & visibleMaxZoom props (#10091)
  • fix(mapbox): onBefore|AfterRender fires without layers (#10166)
  • fix(mapbox): Prevent crash when deck uninitialized (#10167)

... (truncated)

Commits

Updates @deck.gl/layers from 9.2.11 to 9.3.0

Release notes

Sourced from @​deck.gl/layers's releases.

v9.3.0

deck.gl v9.3 features big improvements to widgets, controllers and WebGPU. Find out more on What's New and Upgrade Guide.

v9.3.0-beta.2

  • fix(widgets): ZoomWidget works with OrthographicView (#10202)
  • fix(aggregation-layers) Fix nvidia compilation error (#10191)
  • fix(widgets): Move @​floating-ui/dom to dependencies (#10189)

v9.3.0-beta.1

  • feat(extensions): Add dashed stroke support for ScatterplotLayer and TextBackgroundLayer (#9976)
  • chore(test-utils): Separate tape tests from vitest and clean up CI (#10061)
  • fix(geo-layers): Ensure zoomOffset is correctly part of the round/ceil Z calculation (#9807)
  • feat(widgets): Add controlled mode and state callbacks (#9973)
  • chore(mapbox): Remove MapboxLayer and _renderLayersInGroups (#10163)
  • fix(mapbox): automatically inject 'mapbox' view in overlaid mode for multi-view consistency (#9947)
  • feat(core): AttributeManager allocates Buffers for constant WebGPU at… (#10152)
  • feat(core) coordinateSystem prop now accepts no-import string constants (#10140)
  • fix(layers): discard fragments outside rounded rect in TextBackgroundLayer (#10177)
  • fix(layers): submit command buffer after texture copy in IconLayer resize (#10176)
  • fix(core): WebGPU Picking fix (#10175)
  • feat(layers): TextLayer uses real text metrics (#10164)
  • chore(geo-layers): Update h3 & a5 dependencies (#10170)

v9.3.0-alpha.6

  • feat(TileLayer): Add visibleMinZoom & visibleMaxZoom props (#10091)
  • fix(mapbox): onBefore|AfterRender fires without layers (#10166)
  • fix(mapbox): Prevent crash when deck uninitialized (#10167)
  • feat(main): export all widgets from deck.gl main module (#10160)
  • chore: Bump to luma@9.3.1 & loaders@4.4.1 (#10158)
  • fix(layers): Texture handling in WebGPU (#10157)
  • chore: Bump luma.gl@alpha.11 (#10141)
  • chore(json): Typing improvements (#9641)
  • feat(core): simplify layer plumbing for WebGPU (#9820)
  • chore: enable source map in website dev mode (#10156)

v9.3.0-alpha.5

No release notes provided.

v9.3.0-alpha.3

  • feat(core): TerrainController (#10134)

v9.3.0-alpha.2

  • chore: upgrade Node.js from 20 to 22 (#10051)
  • chore(core): Use non-deprecated props for lighting module (#10121)
  • feat(layers): add clipping to TextLayer (#10118)
  • feat(core): FirstPersonController supports maxBounds (#10115)
  • feat(core): OrthographicView supports maxBounds (#10108)
  • feat(core): OrbitController supports maxBounds (#10116)
  • feat(core): GlobeView supports maxBounds (#10111)
  • feat(core): more intuitive OrbitController (#10117)

... (truncated)

Changelog

Sourced from @​deck.gl/layers's changelog.

Change Log

All notable changes to deck.gl will be documented in this file.

For a human readable version, visit https://deck.gl/docs/upgrade-guide

deck.gl v9.3

deck.gl v9.3 Prereleases

deck.gl [v9.3.0-beta.2] - Apr 11 2026

  • fix(widgets): ZoomWidget works with OrthographicView (#10202)
  • fix(aggregation-layers) Fix nvidia compilation error (#10191)
  • fix(widgets): Move @​floating-ui/dom to dependencies (#10189)

deck.gl [v9.3.0-beta.1] - Apr 7 2026

  • feat(extensions): Add dashed stroke support for ScatterplotLayer and TextBackgroundLayer (#9976)
  • chore(test-utils): Separate tape tests from vitest and clean up CI (#10061)
  • fix(geo-layers): Ensure zoomOffset is correctly part of the round/ceil Z calculation (#9807)
  • feat(widgets): Add controlled mode and state callbacks (#9973)
  • chore(mapbox): Remove MapboxLayer and _renderLayersInGroups (#10163)
  • fix(mapbox): automatically inject 'mapbox' view in overlaid mode for multi-view consistency (#9947)
  • feat(core): AttributeManager allocates Buffers for constant WebGPU at… (#10152)
  • feat(core) coordinateSystem prop now accepts no-import string constants (#10140)
  • fix(layers): discard fragments outside rounded rect in TextBackgroundLayer (#10177)
  • fix(layers): submit command buffer after texture copy in IconLayer resize (#10176)
  • fix(core): WebGPU Picking fix (#10175)
  • feat(layers): TextLayer uses real text metrics (#10164)
  • chore(geo-layers): Update h3 & a5 dependencies (#10170)

deck.gl [v9.3.0-alpha.6] - Apr 2 2026

  • feat(TileLayer): Add visibleMinZoom & visibleMaxZoom props (#10091)
  • fix(mapbox): onBefore|AfterRender fires without layers (#10166)
  • fix(mapbox): Prevent crash when deck uninitialized (#10167)

... (truncated)

Commits

Updates @loaders.gl/core from 4.3.4 to 4.4.1

Changelog

Sourced from @​loaders.gl/core's changelog.

CHANGELOG for loaders.gl

v4.4

v4.4.0

  • Official publish

v4.4.0-alpha.19

  • [Feat] Add @​loaders.gl/mlt — MapLibre Tile format support (#3315)
  • feat(textures) Add composite texture loaders (#3328)
  • b388320bd chore(textures): Revert constant renames (#3337)
  • 5dd3a550c feat(textures): New HDR format loader (#3327)
  • dd6e393d7 fix(textures): Fix format strings, serialize basis transcoding. (#3329)

v4.4.0-alpha.18

  • chore: Clean up library load options (#3320)

v4.4.0-alpha.17

  • chore: update package.json "browser" fields (#3318)
  • fix(zip): Handle directories better (#3304)
  • feat(textures): Add WebGPU textureFormat field (#3317)
  • chore: Update dev tools config imports (#3279)

v4.4.0-alpha.16

  • fix(tiles): Extract rootNode.matrix into cartesianModelMatrix (#3314)

v4.4.0-alpha.15

  • Fix(tiles): Remove rendering flicker by holding refined tile (#3311)

v4.4.0-alpha.14

  • fix(parquet): Types to fix parquet module build (#3305)
  • fix(las): Pass correct params in LAZLoader.readData (#3297)
  • chore: bump probe.gl (#3298)
  • chore: TypeScript 5.9, @​types/node 25, yarn lock refresh (#3301)
  • fix(loader-utils): Avoid option warnings unless log level is increased (#3299)
  • feat(arrow): Support Apache Arrow JS v21 (#3302)

v4.4.0-alpha.13

  • chore(deps): bump fast-xml-parser from 4.5.0 to 5.3.6 (#3295)
  • fix(tiles): Refine empty tiles (#3293)

... (truncated)

Commits

Updates dompurify from 3.3.3 to 3.4.0

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.0

Most relevant changes:

  • Fixed a problem with FORBID_TAGS not winning over ADD_TAGS, thanks @​kodareef5
  • Fixed several minor problems and typos regarding MathML attributes, thanks @​DavidOliver
  • Fixed ADD_ATTR/ADD_TAGS function leaking into subsequent array-based calls, thanks @​1Jesper1
  • Fixed a missing SAFE_FOR_TEMPLATES scrub in RETURN_DOM path, thanks @​bencalif
  • Fixed a prototype pollution via CUSTOM_ELEMENT_HANDLING, thanks @​trace37labs
  • Fixed an issue with ADD_TAGS function form bypassing FORBID_TAGS, thanks @​eddieran
  • Fixed an issue with ADD_ATTR predicates skipping URI validation, thanks @​christos-eth
  • Fixed an issue with USE_PROFILES prototype pollution, thanks @​christos-eth
  • Fixed an issue leading to possible mXSS via Re-Contextualization, thanks @​researchatfluidattacks and others
  • Fixed an issue with closing tags leading to possible mXSS, thanks @​frevadiscor
  • Fixed a problem with the type dentition patcher after Node version bump
  • Fixed freezing BS runs by reducing the tested browsers array
  • Bumped several dependencies where possible
  • Added needed files for OpenSSF scorecard checks

Published Advisories are here: https://github.com/cure53/DOMPurify/security/advisories?state=published

Commits

Updates fast-xml-parser from 5.5.9 to 5.6.0

Release notes

Sourced from fast-xml-parser's releases.

use @​nodable/entities to replace entities

  • No API change
  • No change in performance for basic usage
  • No typing change
  • No config change
  • new dependency
  • breaking: error messages for entities might have been changed.

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.12...v5.6.0

performance improvment, increase entity expansion default limit

  • increase default entity explansion limit as many projects demand for that
maxEntitySize: 10000,
maxExpansionDepth: 10000,
maxTotalExpansions: Infinity,
maxExpandedLength: 100000,
maxEntityCount: 1000,
  • performance improvement
    • reduce calls to toString
    • early return when entities are not present
    • prepare rawAttrsForMatcher only if user sets jPath: false

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.9...v5.5.10

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.6.0 / 2026-04-15

  • fix: entity replacement for numeric entities
  • use @​nodable/entities to replace entities
    • this may change some error messages related to entities expansion limit or inavlid use
    • post check would be exposed in future version

5.5.12 / 2026-04-13

  • Performance Improvement: update path-expression-matcher
    • use proxy pattern than Proxy class

5.5.11 / 2026-04-08

  • Performance Improvement
    • integrate ExpressionSet for stopNodes

5.5.10 / 2026-04-03

  • increase default entity explansion limit as many projects demand for that
  • performance improvement
    • reduce calls to toString
    • early return when entities are not present
    • prepare rawAttrsForMatcher only if user sets jPath: false

5.5.9 / 2026-03-23

  • combine typing files

4.5.5 / 2026-03-22

apply fixes from v5 (legacy maintenance branch v4-maintenance)

  • support maxEntityCount
  • support onDangerousProperty
  • support maxNestedTags
  • handle prototype pollution
  • fix incorrect entity name replacement
  • fix incorrect condition for entity expansion

5.5.8 / 2026-03-20

  • pass read only matcher in callback

5.5.7 / 2026-03-19

  • fix: entity expansion limits
  • update strnum package to 2.2.0

5.5.6 / 2026-03-16

  • update builder dependency
  • fix incorrect regex to replace . in entity name

... (truncated)

Commits
  • 7cb49e5 update release detail
  • 1b14fa7 include currency entities in default list
  • e41e99f update @​nodable/entities
  • 169fbf9 use @​nodable/entities to replace entities
  • 5d8a891 update for release
  • 77e8409 update issue template
  • 898a453 performance: update path-expression-matcher
  • 12b041d update for release 5.5.11
  • fec1e56 Integrate ExpressionSet
  • f20e2bf reduce multilevel property reference
  • Additional commits viewable in compare view

Updates maplibre-gl from 5.21.1 to 5.23.0

Release notes

Sourced from maplibre-gl's releases.

v5.23.0

✨ Features and improvements

  • Add touchZoomRotate.setZoomRate() and touchZoomRotate.setZoomThreshold() to customize touch zoom speed and pinch sensitivity (#7271)
  • Improve ability to communicate with imported scripts in workers and use makeRequest in workres as well (#7451) (by @​HarelM)
  • Allow opacity and opacityWhenCovered in Marker and MarkerOptions to accept number in addition to string, and add maplibregl-marker-covered CSS class to Marker element when covered by 3D terrain or a globe (#7433) (by @​YuChunTsao)
  • perf: add a bench for terrain rendering and fix _demMatrixCache lookup being wasted cycles by actually using the cache (#7400) (by @​CommanderStorm)

🐞 Bug fixes

  • Fix polygon text label placement drifting far from center for convex polygons at high zoom due to coordinate rounding in geojson-vt (#7380) (by @​CommanderStorm)
  • Ensure that a successful ArrayBuffer response from a custom protocol that is null/undefined is set to an empty ArrayBuffer (#7427) (by @​neodescis)
  • Fix error in _contextRestored when map was initialized without a style (#7432) (by @​mvanhorn)
  • Fix issue with the cache used for zoomLevelsToOverscale feature (#7450) (by @​HarelM)
  • Update stylelint and fix old issues with the CSS (mainly change rgb to use spaces) (#7365) (by @​HarelM)

v5.22.0

✨ Features and improvements

  • Make line-cap, line-miter-limit, and line-round-limit data-driven properties, allowing per-feature values (#7351) (by @​CommanderStorm)
  • GPU performance optimization: early culling of transparent symbols in vertex shaders (#7364) (by @​xavierjs)
  • Add example showing how to measure map performance using built-in events (load, idle, render) (#7077) (by @​CommanderStorm)
  • UX: Clarify error message language so if layout and paint properties are confused in setPaintProperty or setLayoutProperty (#6954) (by @​Willjfield and @​CommanderStorm)

🐞 Bug fixes

  • Fix startup crash caused by a stale async style load completing after the style was cleared or replaced (#7377)
  • Make fitBounds and fitScreenCoordinates respect the zoomSnap map option by snapping the zoom level down to keep bounds fully visible (#7332 (by @​CommanderStorm)
  • Make jumpTo, easeTo, and flyTo respect the zoomSnap map option by snapping the zoom level to the nearest valid increment (#7333 (by @​CommanderStorm)
  • Fix setState crash when switching styles while globe projection is active (#7314) (by @​ashwinuae)
  • Prevent crashes when calling map.remove() immediately after creation by canceling in-flight style URL loads (#7368) (by @​CommanderStorm)
  • Fixed symbol collision flickering by adding tolerance to GridIndex AABB comparison (#7360) (by @​kkokkoejong)
  • Fix fitBounds ignoring maxZoom option in vertical-perspective projection (#7372) (by @​CommanderStorm)
  • Prevent stale async style loads from completing after style clear (#7378) (by @​Lievesley)
  • Fix broken example for fill-pattern (#7326) (by @​k-yle)
Changelog

Sourced from maplibre-gl's changelog.

5.23.0

✨ Features and improvements

  • Add touchZoomRotate.setZoomRate() and touchZoomRotate.setZoomThreshold() to customize touch zoom speed and pinch sensitivity (#7271)
  • Improve ability to communicate with imported scripts in workers and use makeRequest in workres as well (#7451) (by @​HarelM)
  • Allow opacity and opacityWhenCovered in Marker and MarkerOptions to accept number in addition to string, and add maplibregl-marker-covered CSS class to Marker element when covered by 3D terrain or a globe (#7433) (by @​YuChunTsao)
  • perf: add a bench for terrain rendering and fix _demMatrixCache lookup being wasted cycles by actually using the cache (#7400) (by @​CommanderStorm)

🐞 Bug fixes

  • Fix polygon text label placement drifting far from center for convex polygons at high zoom due to coordinate rounding in geojson-vt (#7380) (by @​CommanderStorm)
  • Ensure that a successful ArrayBuffer response from a custom protocol that is null/undefined is set to an empty ArrayBuffer (#7427) (by @​neodescis)
  • Fix error in _contextRestored when map was initialized without a style (#7432) (by @​mvanhorn)
  • Fix issue with the cache used for zoomLevelsToOverscale feature (#7450) (by @​HarelM)
  • Update stylelint and fix old issues with the CSS (mainly change rgb to use spaces) (#7365) (by @​HarelM)

5.22.0

✨ Features and improvements

  • Make line-cap, line-miter-limit, and line-round-limit data-driven properties, allowing per-feature values (#7351) (by @​CommanderStorm)
  • GPU performance optimization: early culling of transparent symbols in vertex shaders (#7364) (by @​xavierjs)
  • Add example showing how to measure map performance using built-in events (load, idle, render) (#7077) (by @​CommanderStorm)
  • UX: Clarify error message language so if layout and paint properties are confused in setPaintProperty or setLayoutProperty (#6954) (by @​Willjfield and @​CommanderStorm)

🐞 Bug fixes

  • Fix startup crash caused by a stale async style load completing after the style was cleared or replaced (#7377)
  • Make fitBounds and fitScreenCoordinates respect the zoomSnap map option by snapping the zoom level down to keep bounds fully visible (#7332 (by @​CommanderStorm)
  • Make jumpTo, easeTo, and flyTo respect the zoomSnap map option by snapping the zoom level to the nearest valid increment (#7333 (by @​CommanderStorm)
  • Fix setState crash when switching styles while globe projection is active (#7314) (by @​ashwinuae)
  • Prevent crashes when calling map.remove() immediately after creation by canceling in-flight style URL loads (#7368) (by @​CommanderStorm)
  • Fixed symbol collision flickering by adding tolerance to GridIndex AABB comparison (#7360) (by @​kkokkoejong)
  • Fix fitBounds ignoring maxZoom option in vertical-perspective projection (#7372) (by @​CommanderStorm)
  • Prevent stale async style loads from completing after style clear (#7378) (by @​Lievesley)
  • Fix broken example for fill-pattern (#7326) (by @​k-yle)
Commits

@dependabot
chore(deps): Bump the production group across 1 directory with 10 upd…
bc467b4 
…ates

Bumps the production group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@deck.gl/core](https://github.com/visgl/deck.gl) | `9.2.11` | `9.3.0` |
| [@deck.gl/geo-layers](https://github.com/visgl/deck.gl) | `9.2.11` | `9.3.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.3.3` | `3.4.0` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.5.9` | `5.6.0` |
| [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) | `5.21.1` | `5.23.0` |
| [marked](https://github.com/markedjs/marked) | `17.0.5` | `18.0.0` |
| [commander](https://github.com/tj/commander.js) | `13.1.0` | `14.0.3` |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `0.9.1` | `1.2.0` |



Updates `@deck.gl/core` from 9.2.11 to 9.3.0
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](visgl/deck.gl@v9.2.11...v9.3.0)

Updates `@deck.gl/geo-layers` from 9.2.11 to 9.3.0
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](visgl/deck.gl@v9.2.11...v9.3.0)

Updates `@deck.gl/layers` from 9.2.11 to 9.3.0
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](visgl/deck.gl@v9.2.11...v9.3.0)

Updates `@loaders.gl/core` from 4.3.4 to 4.4.1
- [Changelog](https://github.com/visgl/loaders.gl/blob/master/CHANGELOG.md)
- [Commits](visgl/loaders.gl@v4.3.4...v4.4.1)

Updates `dompurify` from 3.3.3 to 3.4.0
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.3.3...3.4.0)

Updates `fast-xml-parser` from 5.5.9 to 5.6.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.5.9...v5.6.0)

Updates `maplibre-gl` from 5.21.1 to 5.23.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](maplibre/maplibre-gl-js@v5.21.1...v5.23.0)

Updates `marked` from 17.0.5 to 18.0.0
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v17.0.5...v18.0.0)

Updates `commander` from 13.1.0 to 14.0.3
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v13.1.0...v14.0.3)

Updates `@clack/prompts` from 0.9.1 to 1.2.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.2.0/packages/prompts)

---
updated-dependencies:
- dependency-name: "@deck.gl/core"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@deck.gl/geo-layers"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@deck.gl/layers"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@loaders.gl/core"
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: fast-xml-parser
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: maplibre-gl
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: marked
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production
- dependency-name: commander
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production
- dependency-name: "@clack/prompts"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 15, 2026
@dependabot dependabot Bot requested a review from alohays as a code owner April 15, 2026 13:48
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 15, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 15, 2026

Thanks for your first PR! A maintainer will review it shortly.
Make sure npm test and forge validate pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@alohays alohays Awaiting requested review from alohays alohays is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants