Skip to content

build: bump the npm-minor-and-patch group with 14 updates - #1218

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-2df9c665f0
Closed

build: bump the npm-minor-and-patch group with 14 updates#1218
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-2df9c665f0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 14 updates:

Package From To
vscode-languageserver-textdocument 1.0.15 1.0.16
vscode-languageserver-types 3.18.4 3.18.5
vite-plugin-css-injected-by-js 5.0.2 5.0.3
axios 1.20.0 1.21.0
@posit-dev/positron 0.2.12 0.2.13
@fluentui/react-components 9.74.10 9.75.0
react-redux 9.3.0 9.3.1
sass 1.106.0 1.106.1
prosemirror-transform 1.12.2 1.12.4
prosemirror-view 1.42.6 1.42.8
react-window 2.4.1 2.5.1
transliteration 2.6.2 2.7.0
i18next 26.5.4 26.5.11
typescript-eslint 8.72.0 8.72.1

Updates vscode-languageserver-textdocument from 1.0.15 to 1.0.16

Release notes

Sourced from vscode-languageserver-textdocument's releases.

release/textDocument/1.0.16

Changes:

Bugs:

  • #1653: finally is not a function error hit with _getServerWorkingDir

Others:

  • #1904: Update RAL interface documentation for clarity
  • #1896: Handle the stop that follows a failed initialization
  • #1897: client: dispose existing registration before re-registering file watcher
  • #1782: Treat connection close during stop() as handled
  • #1903: jsonrpc: fire onClose from IPCMessageWriter and PortMessageReader
  • #1899: Clear pull state when a document diagnostic pull fails
  • #1900: Bump follow-redirects from 1.16.0 to 1.16.1
  • #1882: Fix line offsets when incremental edits join CRLF
  • #1895: Don't rely on Promise.prototype.finally when starting or stopping the client
  • #1884: client: remove @​types/minimatch
  • #1892: Pull notebook diagnostics after cell reorder
  • #1881: Link package homepages to their subdirectories
  • #1893: Refactor UUID generation to use RAL.crypto.randomUUID()
  • #1891: More agent ready work
  • #1890: Make repository more agent ready
  • #1886: Remove deleted cells from the NotebookDocuments cell map
  • #1885: Fix DEP0190 warning on Windows
  • #1883: Bump brace-expansion from 5.0.9 to 5.0.12 in /client-node-tests
  • #1880: Bump brace-expansion
  • #1878: Bump brace-expansion from 5.0.9 to 5.0.12 in /client
  • #1862: client: reject start() if server process exits before connecting on pipe/socket transport
  • #1875: Fix open order of visible documents when delaying open notifications
  • #1868: Request for a visible document can reach the server before its didOpen when hidden documents are open at start
  • #1874: fix: npm install in build pipelines
  • #1872: chore: migrate CI to GitHub Actions
  • #1866: Fix FoldingRange.is checking startLine twice instead of endLine
  • #1867: Preserve the startup promise when initialization loses its connection
  • #1857: Release the parallelism slot when a dispatched message rejects
  • #1871: Fix document opening order for hidden documents at startup
  • #1870: Merge new release into main
  • #1864: Remove publishPackageToAzureArtifacts property
  • #1869: Update dependencies to latest versions
  • #1865: Fix ColorPresentation.is rejecting presentations with a textEdit
  • #1863: Close pipe/socket transport server when the language server process fails to start

... (truncated)

Commits

Updates vscode-languageserver-types from 3.18.4 to 3.18.5

Commits

Updates vite-plugin-css-injected-by-js from 5.0.2 to 5.0.3

Release notes

Sourced from vite-plugin-css-injected-by-js's releases.

v5.0.3

What's Changed

New Contributors

Full Changelog: marco-prontera/vite-plugin-css-injected-by-js@v5.0.2...v5.0.3

Commits

Updates axios from 1.20.0 to 1.21.0

Release notes

Sourced from axios's releases.

v1.21.0 — October 21, 2026

This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.

⚠️ Breaking Changes & Deprecations

  • Header Defaults: Only plain objects, null-prototype maps, and compatible AxiosHeaders instances are treated as common or method-specific defaults; literal headers such as Link are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example { post: { ...customDefaults } }, or compatible AxiosHeaders. Otherwise, those instances become literal header values, including on requests using other methods. (#11156)

🚀 New Features

  • Response Timing: Added response.duration, in milliseconds, including on error.response when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing duration value supplied by a custom adapter. (#11214)
  • UTF-8 Basic Authentication: Added transitional.encodeBasicAuthUsername: true to support Unicode usernames in XHR and Fetch requests. The option defaults to false, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (#11159)

🐛 Bug Fixes

  • Fetch Compatibility: Restored requests in runtimes such as Cloudflare Workers that reject the implicit cache: 'default', while preserving explicit caller settings. Response-size failures now retain their original ERR_BAD_RESPONSE and request context when runtime wrappers replace the underlying stream error. (#11194, #11179)
  • Runtime Consistency: Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with ERR_BAD_OPTION_VALUE, and sparse or non-index numeric form fields serialize as keyed objects. With proxy: false, native proxyEnv agents using unsupported pool-management or TLS-session lifecycle overrides now reject with ERR_BAD_OPTION_VALUE; construct those agents without proxyEnv. (#11242)
  • Header Handling: Preserved headers named __proto__ using safe casing without changing the AxiosHeaders instance prototype. Function matchers in has(), delete(), and clear() now receive the headers instance as this, matching their declared contract. (#11134, #11216)
  • URL and Data URL Parsing: Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (#11138, #11163, #11294)
  • Error Diagnostics: Preserved short reconstructed request stacks and appended wrapped error stacks under Caused by: so tooling that reads only error.stack retains the original failure context. (#11132, #11142)
  • Interceptor Removal: Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (#11139)
  • Proxy TLS: HTTPS CONNECT tunnels now apply current origin TLS options from an explicit httpsAgent, or from https.globalAgent when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (#11178)
  • XHR Lifecycle: Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (#11166, #11225)
  • HTTP/2 Sessions: Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (#11210)
  • TypeScript Declarations: Exposed the response-default marker as a public type to resolve TS2527 when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (#11125)

🔧 Maintenance & Chores

  • Configuration Performance: Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (#11208)
  • Same-Origin Checks: Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (#11174)
  • Dependencies: Updated follow-redirects to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused dayjs from the docs package, root chalk, and chai from CJS module tests. (#11169, #11188, #11189, #11195, #11212, #11213, #11218, #11220, #11221, #11230, #11234, #11244, #11245, #11266, #11267, #11268, #11269, #11270, #11271, #11272, #11298, #11302, #11303, #11304, #11305, #11306, #11313, #11321, #11322, #11323, #11342)
  • Documentation: Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (#11228, #11149, #11335)
  • Contributor Workflow: Consolidated agent instructions in AGENTS.md, standardized PR labels, required prerelease notes and validation evidence, and clarified that npm test requires installed Playwright browsers. (#11238, #11273, #11223, #11284)
  • Sponsors and Support: Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (#11222, #11249, #11252, #11341)
  • Proxy Regression Coverage: Added a long dotted request-hostname test for NO_PROXY handling, extending coverage of an existing denial-of-service fix. (#11235)
  • Release Preparation: Updated package version metadata for 1.21.0. (#11346)

🌟 New Contributors

Welcome to our 24 new contributors. Thank you for helping improve Axios:

... (truncated)

Changelog

Sourced from axios's changelog.

v1.21.0 — October 21, 2026

This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.

⚠️ Breaking Changes & Deprecations

  • Header Defaults: Only plain objects, null-prototype maps, and compatible AxiosHeaders instances are treated as common or method-specific defaults; literal headers such as Link are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example { post: { ...customDefaults } }, or compatible AxiosHeaders. Otherwise, those instances become literal header values, including on requests using other methods. (#11156)

🚀 New Features

  • Response Timing: Added response.duration, in milliseconds, including on error.response when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing duration value supplied by a custom adapter. (#11214)
  • UTF-8 Basic Authentication: Added transitional.encodeBasicAuthUsername: true to support Unicode usernames in XHR and Fetch requests. The option defaults to false, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (#11159)

🐛 Bug Fixes

  • Fetch Compatibility: Restored requests in runtimes such as Cloudflare Workers that reject the implicit cache: 'default', while preserving explicit caller settings. Response-size failures now retain their original ERR_BAD_RESPONSE and request context when runtime wrappers replace the underlying stream error. (#11194, #11179)
  • Runtime Consistency: Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with ERR_BAD_OPTION_VALUE, and sparse or non-index numeric form fields serialize as keyed objects. With proxy: false, native proxyEnv agents using unsupported pool-management or TLS-session lifecycle overrides now reject with ERR_BAD_OPTION_VALUE; construct those agents without proxyEnv. (#11242)
  • Header Handling: Preserved headers named __proto__ using safe casing without changing the AxiosHeaders instance prototype. Function matchers in has(), delete(), and clear() now receive the headers instance as this, matching their declared contract. (#11134, #11216)
  • URL and Data URL Parsing: Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (#11138, #11163, #11294)
  • Error Diagnostics: Preserved short reconstructed request stacks and appended wrapped error stacks under Caused by: so tooling that reads only error.stack retains the original failure context. (#11132, #11142)
  • Interceptor Removal: Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (#11139)
  • Proxy TLS: HTTPS CONNECT tunnels now apply current origin TLS options from an explicit httpsAgent, or from https.globalAgent when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (#11178)
  • XHR Lifecycle: Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (#11166, #11225)
  • HTTP/2 Sessions: Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (#11210)
  • TypeScript Declarations: Exposed the response-default marker as a public type to resolve TS2527 when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (#11125)

🔧 Maintenance & Chores

  • Configuration Performance: Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (#11208)
  • Same-Origin Checks: Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (#11174)
  • Dependencies: Updated follow-redirects to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused dayjs from the docs package, root chalk, and chai from CJS module tests. (#11169, #11188, #11189, #11195, #11212, #11213, #11218, #11220, #11221, #11230, #11234, #11244, #11245, #11266, #11267, #11268, #11269, #11270, #11271, #11272, #11298, #11302, #11303, #11304, #11305, #11306, #11313, #11321, #11322, #11323, #11342)
  • Documentation: Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (#11228, #11149, #11335)
  • Contributor Workflow: Consolidated agent instructions in AGENTS.md, standardized PR labels, required prerelease notes and validation evidence, and clarified that npm test requires installed Playwright browsers. (#11238, #11273, #11223, #11284)
  • Sponsors and Support: Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (#11222, #11249, #11252, #11341)
  • Proxy Regression Coverage: Added a long dotted request-hostname test for NO_PROXY handling, extending coverage of an existing denial-of-service fix. (#11235)
  • Release Preparation: Updated package version metadata for 1.21.0. (#11346)

🌟 New Contributors

Welcome to our 24 new contributors. Thank you for helping improve Axios:

... (truncated)

Commits
  • aa54a5e docs: remove cancelled sponsors from README (#11369)
  • e6b79d9 chore(release): prepare release 1.21.0 (#11346)
  • fceeb10 chore(deps-dev): bump the development_dependencies group with 4 updates (#11342)
  • 7d15df3 docs: refresh sponsor data (#11341)
  • 8d8e844 docs: correct interceptor options and request lifecycle guide (#11335)
  • 326843a test(no-proxy): cover the request-hostname path with a long dotted host (#11235)
  • e5195ec feat(core): expose request duration on the response (#11214)
  • 8d415e6 fix(headers): bind matcher callbacks to the headers instance (#11216)
  • b16dd77 fix(xhr): remove progress event listeners on request completion (#11225)
  • 790b2ca chore(deps): bump the github-actions group with 3 updates (#11323)
  • Additional commits viewable in compare view

Updates @posit-dev/positron from 0.2.12 to 0.2.13

Release notes

Sourced from @​posit-dev/positron's releases.

v0.2.13

@​posit-dev/positron v0.2.13

Built against Positron 2026.10.2

Installation

npm install @posit-dev/positron@0.2.13

What's Changed

Full Changelog: posit-dev/positron-api-pkg@v0.2.12...v0.2.13

Commits

Updates @fluentui/react-components from 9.74.10 to 9.75.0

Release notes

Sourced from @​fluentui/react-components's releases.

@​fluentui/react-components v9.75.0

Minor changes

  • feat(react-components): export existing Menu base hooks and composition types (PR #36978 by PaulGMardling)

Patches

  • fix: use Highlight/HighlightText for MenuItem hover and open-submenu states in forced colors mode (PR #36974 by mainframev)
  • fix: escape theme style delimiters instead of omitting valid nested theme values (PR #36985 by mainframev)

@​fluentui/react-components v9.74.11

Minor changes

  • feat: render Calendar grid rows and cells from picker state with grid-owned keyboard navigation and a roving tab stop; add CalendarDay renderDay and remove the row and cell components; preserve button currentTarget for picker selection events and support selection from SVG and descendant-focusgroup cell content; clear range hover and pressed state when leaving editable day content; preserve cancelled-click focus, a single eligible tab stop through hidden-panel updates and reveal while excluding individually hidden dates, restricted-date focus with allFocusable, focus after synchronous controlled navigation, and explicitly empty navigation-button content (PR #36948 by dmytrokirpa)
  • chore: initial release (PR #36949 by mainframev)

Patches

  • fix: preserve selected toggle button icon contrast in forced-colors mode, including toolbar radio and toggle buttons (PR #36935 by PaulGMardling)
  • fix: use getPercentInRange from react-utilities (PR #36890 by mainframev)
  • fix: use getPercentInRange from react-utilities (PR #36890 by mainframev)
Commits

Updates react-redux from 9.3.0 to 9.3.1

Release notes

Sourced from react-redux's releases.

v9.3.1

This bugfix release fixes connect type inference under TS 7, fixes several connect and Provider runtime bugs, adds dev-mode logging for errors thrown in mapStateToProps, and updates our build tooling and TypeScript support matrix.

[!WARNING] While connect is still published and technically supported, we officially deprecated connect in 9.3.0 and strongly recommend migrating to use the hooks APIs instead.

Changelog

connect Types and TS 7

We had reports that connect sometimes inferred the wrong props when mapStateToProps or mapDispatchToProps was a factory function. The connected component's props would collapse to {}, and a required prop would show up as "missing" at the call site.

Turns out the connect overloads typed those arguments as unions of the factory form (() => (state) => props) and the plain form. TS7 changed the ordering of which union member got selected, so this broke.

As Anders suggested in microsoft/typescript-go#977, we've split those unions into separate overloads listed in order of preference, factory form first. Overload matching no longer depends on how the compiler orders a union. We then applied the same fix to the mergeProps overloads, which still failed under TS 7.

Bug Fixes

Provider now uses serverState when it's a falsy value like 0, false, or ''. Previously it checked for truthiness, so a falsy root state fell back to the client store's state during SSR and hydration. null and undefined are still treated as "no server state".

A connected component's context prop is now honored in production. The assignment that picked up the custom context sat inside the development-only validation block. In production, a component with only a custom provider would throw, and one rendered under both providers would read the default provider's store.

connect no longer overrides a ref passed as a regular prop when forwardRef isn't enabled (#2251). With React 19's ref-as-prop, the wrapper was always passing its own ref (undefined without forwardRef), which replaced the one you passed in.

An explicit dependsOnOwnProps = false on a mapStateToProps or mapDispatchToProps function is now respected. We had been ignoring it for functions declared with two parameters, even though the option exists specifically for functions whose length isn't reliable.

Rendering <Provider> in a React Server Component without "use client" now throws a clear dev-mode error that tells you what's wrong, instead of failing with "useIsomorphicLayoutEffect is not a function" (#2082). Setups that resolve the react-server export condition already got a clear error. This covers the setups that don't.

mapStateToProps Error Logging

Since v8, an error thrown in mapStateToProps during a store update has been caught in the subscription callback and then effectively swallowed. The component just kept rendering its previous props (#1942). connect now logs those errors to console.error in development, so they show up in DevTools. Production behavior is unchanged.

TypeScript Support

The internal NoInfer helper type has been replaced with TypeScript's built-in NoInfer, which was added in TS 5.4. That makes TS 5.4 the minimum version for React-Redux's types. Our CI matrix now covers TS 5.6 through 5.9, 6.0, 7.0, and next.

Build Tooling

We've moved the repo to pnpm, Oxlint, and Oxfmt, and switched the library build from tsup to tsdown. The package exports layout is unchanged, but the build output comes from a different bundler. If you see any packaging or import problems with this release, please file an issue.

What's Changed

... (truncated)

Commits
  • 8e54f5b Release 9.3.1
  • 14ef3ca Merge pull request #2331 from JSap0914/fix/getDependsOnOwnProps-explicit-false
  • ff05531 Merge pull request #2252 from PSpSynedra/master
  • b591c94 Merge pull request #2389 from OskarEichler/codex/provider-state-selection
  • 7bb3092 Merge pull request #2342 from veksa/fix/provider-rsc-dev-check
  • 19e1f83 Merge pull request #2408 from reduxjs/ci/release-commit-skip-forks
  • 99b0bc2 Skip Release Commit workflow in forks
  • 0187826 Remove any casts from wrapMapToProps tests
  • d23a336 Merge remote-tracking branch 'origin/master' into pr-2331
  • 8705869 Trim Provider RSC check comments
  • Additional commits viewable in compare view

Updates sass from 1.106.0 to 1.106.1

Release notes

Sourced from sass's releases.

Dart Sass 1.106.1

To install Sass 1.106.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where an attribute selector with an empty value (such as [class=""]) would crash when serializing.

  • Don't crash when serializing a number with an empty unit. This is only possible through the JavaScript and Dart APIs or the embedded protocol.

Embedded Dart Sass

  • More robustly convert invalid value errors into PARAMS errors.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.106.1

  • Fix a bug where an attribute selector with an empty value (such as [class=""]) would crash when serializing.

  • Don't crash when serializing a number with an empty unit. This is only possible through the JavaScript and Dart APIs or the embedded protocol.

Embedded Dart Sass

  • More robustly convert invalid value errors into PARAMS errors.
Commits

Updates prosemirror-transform from 1.12.2 to 1.12.4

Commits

Updates prosemirror-view from 1.42.6 to 1.42.8

Commits

Updates react-window from 2.4.1 to 2.5.1

Release notes

Sourced from react-window's releases.

2.5.1

  • scrollToRow (and useVirtualizer's scrollToIndex) supports behavior: "smooth" for dynamic row heights. The scroll is animated by the list so that its destination can be corrected as rows are measured along the way. Corrections for a scroll requested while the page is hidden no longer time out before the page is visible again.

2.5.0

Features

  • Add scrollElement prop to List and Grid for lists and grids that scroll along with other content. Pass "window" to scroll with the page, or an ancestor element that scrolls. The list or grid renders at its full height and only renders the rows visible within the scroll element's viewport; its position within the scroll element is measured whenever it renders, scrolls, or resizes, and whenever content before it is resized, inserted, or removed (e.g. an image loading above it). Imperative scroll methods scroll the scroll element. Grid columns scroll with the scroll element too if the grid is as wide as its content (e.g. style={{ width: "max-content" }}); otherwise they scroll within the grid. Add a scrolling with the page page to the docs site.
  • Add useVirtualizer hook for rendering custom (headless) virtualized content, e.g. a semantic <table>. It returns the items to render (with their offsets and sizes), the total size, the visible range, and a scrollToIndex method; options mirror the props of List (including scrollElement and dynamic sizes from useDynamicRowHeight). Add a useVirtualizer page to the docs site.
  • Add useIsScrolling hook for tracking whether a list, grid, or scroll element is scrolling (e.g. to render simplified rows while scrolling). It uses the "scrollend" event where supported. Add a

@dependabot
build: bump the npm-minor-and-patch group with 14 updates
a439e54 
Bumps the npm-minor-and-patch group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [vscode-languageserver-textdocument](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/textDocument) | `1.0.15` | `1.0.16` |
| [vscode-languageserver-types](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/types) | `3.18.4` | `3.18.5` |
| [vite-plugin-css-injected-by-js](https://github.com/marco-prontera/vite-plugin-css-injected-by-js) | `5.0.2` | `5.0.3` |
| [axios](https://github.com/axios/axios) | `1.20.0` | `1.21.0` |
| [@posit-dev/positron](https://github.com/posit-dev/positron-api-pkg/tree/HEAD/positron-api-pkg) | `0.2.12` | `0.2.13` |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.74.10` | `9.75.0` |
| [react-redux](https://github.com/reduxjs/react-redux) | `9.3.0` | `9.3.1` |
| [sass](https://github.com/sass/dart-sass) | `1.106.0` | `1.106.1` |
| [prosemirror-transform](https://github.com/prosemirror/prosemirror-transform) | `1.12.2` | `1.12.4` |
| [prosemirror-view](https://github.com/prosemirror/prosemirror-view) | `1.42.6` | `1.42.8` |
| [react-window](https://github.com/bvaughn/react-window) | `2.4.1` | `2.5.1` |
| [transliteration](https://github.com/yf-hk/transliteration) | `2.6.2` | `2.7.0` |
| [i18next](https://github.com/i18next/i18next) | `26.5.4` | `26.5.11` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.72.0` | `8.72.1` |


Updates `vscode-languageserver-textdocument` from 1.0.15 to 1.0.16
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/textDocument/1.0.16/textDocument)

Updates `vscode-languageserver-types` from 3.18.4 to 3.18.5
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/types/3.18.5/types)

Updates `vite-plugin-css-injected-by-js` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/marco-prontera/vite-plugin-css-injected-by-js/releases)
- [Commits](marco-prontera/vite-plugin-css-injected-by-js@v5.0.2...v5.0.3)

Updates `axios` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.20.0...v1.21.0)

Updates `@posit-dev/positron` from 0.2.12 to 0.2.13
- [Release notes](https://github.com/posit-dev/positron-api-pkg/releases)
- [Commits](https://github.com/posit-dev/positron-api-pkg/commits/v0.2.13/positron-api-pkg)

Updates `@fluentui/react-components` from 9.74.10 to 9.75.0
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/commits/@fluentui/react-components_v9.75.0)

Updates `react-redux` from 9.3.0 to 9.3.1
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](reduxjs/react-redux@v9.3.0...v9.3.1)

Updates `sass` from 1.106.0 to 1.106.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.106.0...1.106.1)

Updates `prosemirror-transform` from 1.12.2 to 1.12.4
- [Changelog](https://github.com/ProseMirror/prosemirror-transform/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-transform/commits)

Updates `prosemirror-view` from 1.42.6 to 1.42.8
- [Changelog](https://github.com/ProseMirror/prosemirror-view/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-view/commits)

Updates `react-window` from 2.4.1 to 2.5.1
- [Release notes](https://github.com/bvaughn/react-window/releases)
- [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-window@2.4.1...2.5.1)

Updates `transliteration` from 2.6.2 to 2.7.0
- [Release notes](https://github.com/yf-hk/transliteration/releases)
- [Changelog](https://github.com/yf-hk/transliteration/blob/main/CHANGELOG.md)
- [Commits](yf-hk/transliteration@v2.6.2...v2.7.0)

Updates `i18next` from 26.5.4 to 26.5.11
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.5.4...v26.5.11)

Updates `typescript-eslint` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: vscode-languageserver-textdocument
  dependency-version: 1.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vscode-languageserver-types
  dependency-version: 3.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vite-plugin-css-injected-by-js
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: axios
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@posit-dev/positron"
  dependency-version: 0.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react-redux
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: sass
  dependency-version: 1.106.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: prosemirror-transform
  dependency-version: 1.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: prosemirror-view
  dependency-version: 1.42.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react-window
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: transliteration
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: i18next
  dependency-version: 26.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 4, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-2df9c665f0 branch November 4, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants