Skip to content

deps(deps): bump the production-dependencies group with 15 updates#65

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-dba1eaf3d2
Open

deps(deps): bump the production-dependencies group with 15 updates#65
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-dba1eaf3d2

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 2, 2026 •
edited
Loading

Bumps the production-dependencies group with 15 updates:

Package From To
@inquirer/prompts 8.2.0 8.3.0
@modelcontextprotocol/sdk 1.25.3 1.27.1
@tiptap/extensions 3.14.0 3.20.0
cors 2.8.5 2.8.6
framer-motion 12.23.26 12.34.3
glob 13.0.0 13.0.6
lucide-react 0.562.0 0.575.0
marked 17.0.1 17.0.3
mermaid 11.12.2 11.12.3
react 19.2.3 19.2.4
react-dom 19.2.3 19.2.4
react-markdown 9.0.3 10.1.0
tailwind-merge 3.4.0 3.5.0
unist-util-visit 5.0.0 5.1.0
zod 4.3.4 4.3.6

Updates @inquirer/prompts from 8.2.0 to 8.3.0

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.3.0

  • Fix: Keypresses happening before a prompt is rendered are now ignored.
  • Fix (checkbox): Element who're both checked and disabled are now always included in the returned array.
  • Feat (select/checkbox): Cursor will now hover disabled options of the list; but they still cannot be interacted with. This prevents the cursor jumping ahead in ways that can be confusing.
  • Feat: various new theme options to make all prompts content localizable.

Finally, see our new @inquirer/i18n package!

@​inquirer/prompts@​8.2.1

  • chore: Switch wrap-ansi with fast-wrap-ansi
Commits
  • 526eca2 chore: Publish new release
  • 60d02c4 docs(@​inquirer/prompts): highlight auto-detected locale in i18n section (#2011)
  • f773d21 feat(@​inquirer/prompts-i18n) New i18n package with first set of localization ...
  • dd52bbe feat: allow cursor to land on disabled choices (#2008)
  • 64622ed feat(@​inquirer/testing): add nextRender() to unit test render API (#2010)
  • 32ed010 refactor(@​inquirer/select,@​inquirer/checkbox): clean up disabled choice rende...
  • b23a483 fix(@​inquirer/checkbox): include disabled+checked items in the answer
  • fd40b43 fix(@​inquirer/core): discard keystrokes buffered before prompt creation
  • fd001c1 chore: Publish new release
  • 260d7eb fix(@​inquirer/testing): handle SWC-style namespace objects and missing option...
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.25.3 to 1.27.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.27.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.0...v1.27.1

v1.27.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.26.0...v1.27.0

v1.26.0

Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA GHSA-345p-7cg4-v4c7

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.3...v1.26.0

Commits
  • 4faa8c8 chore: bump version to 1.27.1 (#1581)
  • 09a85a8 fix: call onerror for silently swallowed transport errors (#1580)
  • e79d14a fix: prevent command injection in example URL opening (v1.x backport) (#1579)
  • 342ea39 docs: comprehensive feature documentation for SEP-1730 Tier 1 (#1548)
  • 2084a22 docs: add governance documentation for SEP-1730 (#1547)
  • f2d2145 feat: implement auth/pre-registration conformance scenario (#1545)
  • 8cbc658 chore: bump version for v1.27.0 (#1541)
  • 5c16ae3 [v1.x] feat(tasks): add streaming methods for elicitation and sampling (#1528)
  • 97ab379 feat: add url property to RequestInfo interface (#1353)
  • 825e9ab feat: backport discoverOAuthServerInfo() and discovery caching to v1.x (#1533)
  • Additional commits viewable in compare view

Updates @tiptap/extensions from 3.14.0 to 3.20.0

Release notes

Sourced from @​tiptap/extensions's releases.

v3.20.0

@​tiptap/core

Minor Changes

  • Add transformPastedHTML extension API that allows extensions to transform pasted HTML content before it's parsed into the editor, enabling cleanup of styles, removal of dangerous content, and modification of pasted HTML through a chainable transform system.

Patch Changes

  • Fix checking if mark is active and toggling off marks when part of the selection does not allow the mark (e.g. a code block)
  • Global attributes now support shorthand string values for types: use '*' to apply to all nodes and marks, 'nodes' for all nodes (excluding text), or 'marks' for all marks.
  • Fixed a typo in the documentation of editor.view

@​tiptap/extension-drag-handle

Patch Changes

  • Fix drag handle not appearing for atom/leaf nodes like images in both nested and non-nested modes
  • Add table structure rules to prevent drag handle on table rows, cells, and headers, and fix ghost table rows when dragging tables
  • Fix drag position resolving outside the document when dragging an empty text node at the end of the document

@​tiptap/markdown

Patch Changes

  • Fixed getMarkdown() returning   instead of empty string when editor is empty

@​tiptap/extension-bubble-menu

Patch Changes

  • Fix BubbleMenu/FloatingMenu to use pluginKey as the transaction meta key so that multiple instances can be updated independently without affecting each other

@​tiptap/extension-floating-menu

Patch Changes

  • Fix BubbleMenu/FloatingMenu to use pluginKey as the transaction meta key so that multiple instances can be updated independently without affecting each other

@​tiptap/react

Minor Changes

  • Moved BubbleMenu and FloatingMenu to separate @tiptap/react/menus entrypoint to keep floating-ui optional
  • Simplified Tiptap component API with guaranteed non-null editor instance from useTiptap hook

Patch Changes

  • Fix BubbleMenu/FloatingMenu to use pluginKey as the transaction meta key so that multiple instances can be updated independently without affecting each other

... (truncated)

Commits

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.


Updates framer-motion from 12.23.26 to 12.34.3

Changelog

Sourced from framer-motion's changelog.

[12.34.3] 2026-02-20

Fixed

  • Ensure velocity is never transferred to a time-derived spring.

[12.34.2] 2026-02-18

Fixed

  • Layout animations: Reset motion value velocity when starting a new layout animation.

[12.34.1] 2026-02-17

Fixed

  • useScroll: Ensure animations aren't hardware accelerated when target is set.
  • Improve animatable "none" generation for mask values.

[12.34.0] 2026-02-09

Added

  • useScroll: Hardware accelerated animations.

[12.33.2] 2026-02-06

Fixed

  • Improve detection of detached elements with vanilla layout animations.

[12.33.1] 2026-02-06

Fixed

  • AnimatePresence: Ensure exiting nodes are correctly removed when rapidly switching children.

[12.33.0] 2026-02-05

Added

  • <motion />: New propagate.tap prop prevents tap gestures from propagating to parents.

[12.32.0] 2026-02-05

Added

  • transition.inherit: When true, inherit transition values from less-specific transitions.

[12.31.3] 2026-02-05

... (truncated)

Commits
  • 071f659 v12.34.3
  • ab73833 Updating changelog
  • bd6eac3 Merge pull request #3564 from motiondivision/fix/time-defined-spring-velocity
  • bebd7f5 Ignore velocity for time-defined springs to prevent wild oscillation
  • 6828340 v12.34.2
  • 679a0ad Reset layout animation motion value velocity on restart
  • 1d566fc Merge pull request #3546 from veeceey/fix/typescript-ban-types-issue
  • 57263d8 v12.34.1
  • 9447ee2 Updating changelog
  • 79a4097 Merge pull request #3555 from motiondivision/scroll-acc
  • Additional commits viewable in compare view

Updates glob from 13.0.0 to 13.0.6

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates lucide-react from 0.562.0 to 0.575.0

Release notes

Sourced from lucide-react's releases.

Version 0.575.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.573.0...0.575.0

Version 0.574.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.572.0...0.574.0

Version 0.573.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.572.0...0.573.0

Version 0.572.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.571.0...0.572.0

... (truncated)

Commits
  • 67c0485 feat(scripts): added helper script to automatically update OpenCollective bac...
  • b6ed43d feat(packages): Added aria-hidden fallback for decorative icons to all packag...
  • See full diff in compare view

Updates marked from 17.0.1 to 17.0.3

Release notes

Sourced from marked's releases.

v17.0.3

17.0.3 (2026-02-17)

Bug Fixes

v17.0.2

17.0.2 (2026-02-11)

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for marked since your current version.


Updates mermaid from 11.12.2 to 11.12.3

Release notes

Sourced from mermaid's releases.

mermaid@11.12.3

Patch Changes

  • Updated dependencies [7243340]:
    • @​mermaid-js/parser@​1.0.0
Commits
  • cbe7015 Merge pull request #7397 from mermaid-js/changeset-release/master
  • 69fccd2 Version Packages
  • 56ecd66 Fixed issue with hero text
  • 3735098 Merge pull request #7377 from aloisklink/chore/upgrade-to-langium-v4
  • ea46407 Update link with source
  • dc30a46 Updating the Hero on the docs side
  • 426a616 chore(dev-deps): update @​argos-ci/cypress to 6.2.2
  • 16bc9e6 chore(deps): update dependency lodash-es to v4.17.23
  • 7243340 chore(parser)!: upgrade parser to Langium v4
  • 156dc11 chore(deps): upgrade to langium 3.5.0
  • Additional commits viewable in compare view

Updates react from 19.2.3 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.3 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

Commits

Updates react-markdown from 9.0.3 to 10.1.0

Release notes

Sourced from react-markdown's releases.

10.1.0

Add

Fix

Full Changelog: remarkjs/react-markdown@10.0.1...10.1.0

10.0.1

Full Changelog: remarkjs/react-markdown@10.0.0...10.0.1

10.0.0

Full Changelog: remarkjs/react-markdown@9.1.0...10.0.0

9.1.0

Full Changelog: remarkjs/react-markdown@9.0.3...9.1.0

Changelog

Sourced from react-markdown's changelog.

Changelog

All notable changes will be documented in this file.

10.0.0 - 2025-02-20

  • aaaa40b Remove support for className prop migrate: see “Remove className” below

Remove className

The className prop was removed. If you want to add classes to some element that wraps the markdown you can explicitly write that element and add the class to it. You can then choose yourself which tag name to use and whether to add other props.

Before:

<Markdown className="markdown-body">{markdown}</Markdown>

After:

<div className="markdown-body">
  <Markdown>{markdown}</Markdown>
</div>

9.1.0 - 2025-02-20

  • 6ce120e Add support for async plugins
Commits

Updates tailwind-merge from 3.4.0 to 3.5.0

Release notes

Sourced from tailwind-merge's releases.

v3.5.0

New Features

Full Changelog: dcastil/tailwind-merge@v3.4.1...v3.5.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

v3.4.1

Bug Fixes

Full Changelog: dcastil/tailwind-merge@v3.4.0...v3.4.1

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​block, @​openclaw, @​sourcegraph and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 270ac79 v3.5.0
  • 86f772e add changelog for 3.5.0
  • 6c1f77c Merge pull request #651 from dcastil/feature/add-support-for-tailwind-css-v4.2
  • 7a4cacf Add support for decimal fraction values
  • 9ef0f79 fix incorrectly escaped characters
  • f4938b0 update README with v4.2 support
  • b02a572 Add Tailwind v4.2 font-features utilities support
  • 5bd25ec Add Tailwind v4.2 logical sizing utilities
  • 697c920 Add Tailwind v4.2 logical border block utilities
  • 6656a47 Improve JSDoc comments for logical insets
  • Additional commits viewable in compare view

Updates unist-util-visit from 5.0.0 to 5.1.0

Release notes

Sourced from unist-util-visit's releases.

5.1.0

Types

Full Changelog: syntax-tree/unist-util-visit@5.0.0...5.1.0

Commits

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 2, 2026

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
deps(deps): bump the production-dependencies group with 15 updates
69243c7 
Bumps the production-dependencies group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.2.0` | `8.3.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.25.3` | `1.27.1` |
| [@tiptap/extensions](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension) | `3.14.0` | `3.20.0` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.23.26` | `12.34.3` |
| [glob](https://github.com/isaacs/node-glob) | `13.0.0` | `13.0.6` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.562.0` | `0.575.0` |
| [marked](https://github.com/markedjs/marked) | `17.0.1` | `17.0.3` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.12.2` | `11.12.3` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.4` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.4` |
| [react-markdown](https://github.com/remarkjs/react-markdown) | `9.0.3` | `10.1.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.4.0` | `3.5.0` |
| [unist-util-visit](https://github.com/syntax-tree/unist-util-visit) | `5.0.0` | `5.1.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.4` | `4.3.6` |


Updates `@inquirer/prompts` from 8.2.0 to 8.3.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.2.0...@inquirer/prompts@8.3.0)

Updates `@modelcontextprotocol/sdk` from 1.25.3 to 1.27.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.25.3...v1.27.1)

Updates `@tiptap/extensions` from 3.14.0 to 3.20.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.20.0/packages/extension)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `framer-motion` from 12.23.26 to 12.34.3
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.23.26...v12.34.3)

Updates `glob` from 13.0.0 to 13.0.6
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v13.0.0...v13.0.6)

Updates `lucide-react` from 0.562.0 to 0.575.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.575.0/packages/lucide-react)

Updates `marked` from 17.0.1 to 17.0.3
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v17.0.1...v17.0.3)

Updates `mermaid` from 11.12.2 to 11.12.3
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.12.2...mermaid@11.12.3)

Updates `react` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react)

Updates `react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom)

Updates `react-markdown` from 9.0.3 to 10.1.0
- [Release notes](https://github.com/remarkjs/react-markdown/releases)
- [Changelog](https://github.com/remarkjs/react-markdown/blob/main/changelog.md)
- [Commits](remarkjs/react-markdown@9.0.3...10.1.0)

Updates `tailwind-merge` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.4.0...v3.5.0)

Updates `unist-util-visit` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/syntax-tree/unist-util-visit/releases)
- [Commits](syntax-tree/unist-util-visit@5.0.0...5.1.0)

Updates `zod` from 4.3.4 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.4...v4.3.6)

---
updated-dependencies:
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/extensions"
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: framer-motion
  dependency-version: 12.34.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: glob
  dependency-version: 13.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 0.575.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 17.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: mermaid
  dependency-version: 11.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-markdown
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: unist-util-visit
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-dba1eaf3d2 branch from 0a44fbf to 69243c7 Compare March 9, 2026 02:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants