Skip to content

Chore(deps): Bump the production-dependencies group across 1 directory with 31 updates - #1070

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-ad6a69f6fe
Open

Chore(deps): Bump the production-dependencies group across 1 directory with 31 updates#1070
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-ad6a69f6fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the production-dependencies group with 31 updates in the / directory:

Package From To
@codemirror/autocomplete 6.20.1 6.20.4
@codemirror/commands 6.10.3 6.11.1
@codemirror/lang-markdown 6.5.0 6.5.2
@codemirror/language 6.12.3 6.13.1
@codemirror/search 6.6.0 6.7.2
@codemirror/state 6.7.1 6.7.6
@codemirror/view 6.43.8 6.43.15
@lezer/highlight 1.2.3 1.2.5
@modelcontextprotocol/sdk 1.32.0 1.32.2
@replit/codemirror-vim 6.3.0 6.4.0
@xyflow/react 12.11.2 12.12.1
docx 9.7.1 9.15.3
electron-updater 6.8.9 6.8.11
font-list 2.0.2 2.1.0
function-plot 1.25.3 1.26.0
harper.js 2.7.0 3.0.0
highlight.js 11.11.1 11.12.0
jsxgraph 1.12.2 1.14.3
katex 0.16.47 0.19.1
pele 1.12.0 1.13.0
prettier 3.8.3 3.9.10
react 18.3.1 19.3.1
react-dom 18.3.1 19.3.1
smol-toml 1.8.0 1.9.1
unist-util-visit 5.1.0 5.2.0
ws 8.21.3 8.22.1
zustand 5.0.12 5.1.0
@codemirror/lang-html 6.4.11 6.4.12
@codemirror/merge 6.12.2 6.12.3
@lezer/common 1.5.2 1.5.5
hash-wasm 4.12.0 4.13.0

Updates @codemirror/autocomplete from 6.20.1 to 6.20.4

Commits

Updates @codemirror/commands from 6.10.3 to 6.11.1

Commits

Updates @codemirror/lang-markdown from 6.5.0 to 6.5.2

Commits

Updates @codemirror/language from 6.12.3 to 6.13.1

Commits

Updates @codemirror/search from 6.6.0 to 6.7.2

Commits

Updates @codemirror/state from 6.7.1 to 6.7.6

Commits

Updates @codemirror/view from 6.43.8 to 6.43.15

Commits

Updates @lezer/highlight from 1.2.3 to 1.2.5

Commits

Updates @modelcontextprotocol/sdk from 1.32.0 to 1.32.2

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

Commits
  • 3b73021 chore: bump version to 1.32.2 (#3089)
  • fa56d81 [v1.x] fix: allow registering after connect() when the capability was declare...
  • 6919e95 fix: add explicit | undefined to Transport optional properties (v1.x backport...
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • See full diff in compare view

Updates @replit/codemirror-vim from 6.3.0 to 6.4.0

Changelog

Sourced from @​replit/codemirror-vim's changelog.

[@​replit/codemirror-vim@​6.4.0] - 2026-07-28

Added

Fixed

  • gj clipping at the end of the document (c912733, #258)
  • Ex commands with mark and cursor line ranges such as :'a,.y (d19062a, #257)
  • , (repeat character search in reverse) in visual mode (cc81e48, #256)
  • :sort with a pattern and the r flag (66332dd, #253)
  • Status bar display of visual line mode (71919db, #236)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​replit/codemirror-vim since your current version.


Updates @xyflow/react from 12.11.2 to 12.12.1

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.12.1

Patch Changes

  • #6068 7813eeb - Cancel a pending click connection when clicking the pane and call onClickConnectEnd / onclickconnectend

  • #6097 d150c38 - Don't mutate the internal selection state

  • #5650 f7cddb9 - Infer the type of pathOptions in EdgeProps from the edge type instead of using any.

  • #6090 b235ea0 - Respect nodeOrigin in isNodeIntersecting and getIntersectingNodes when you pass a node object instead of { id }

  • #6054 c7d0fcb - Disconnect the ResizeObservers when a flow unmounts

  • Updated dependencies [d150c38, 8483a2f, c7d0fcb, 9dcbd29, cba335d]:

    • @​xyflow/system@​0.0.84

@​xyflow/react@​12.12.0

Minor Changes

  • #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

@​xyflow/react@​12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82

@​xyflow/react@​12.11.5

Patch Changes

  • Updated dependencies [22e0be2]:
    • @​xyflow/system@​0.0.81

@​xyflow/react@​12.11.4

... (truncated)

Changelog

Sourced from @​xyflow/react's changelog.

12.12.1

Patch Changes

  • #6068 7813eeb - Cancel a pending click connection when clicking the pane and call onClickConnectEnd / onclickconnectend

  • #6097 d150c38 - Don't mutate the internal selection state

  • #5650 f7cddb9 - Infer the type of pathOptions in EdgeProps from the edge type instead of using any.

  • #6090 b235ea0 - Respect nodeOrigin in isNodeIntersecting and getIntersectingNodes when you pass a node object instead of { id }

  • #6054 c7d0fcb - Disconnect the ResizeObservers when a flow unmounts

  • Updated dependencies [d150c38, 8483a2f, c7d0fcb, 9dcbd29, cba335d]:

    • @​xyflow/system@​0.0.84

12.12.0

Minor Changes

  • #5998 91a4adf - Always fire onResizeEnd after onResizeStart

Patch Changes

12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

... (truncated)

Commits
  • 7599c7f chore(packages): bump
  • d4bc936 Merge pull request #5650 from keepmhwn/fix/path-options-type
  • c4fdcb1 Merge pull request #6097 from xyflow/fix/internal-selection
  • 5c90af4 fix(react): cleanup internal selection handling #6096
  • 93b7a91 chore(pane): cleanup
  • 7abb6f0 Add Svelte pane cancellation and merge latest main
  • b235ea0 fix: respect flow nodeOrigin in root node intersections
  • 22388df chore(useResizeHandler): cleanup
  • 7813eeb fix(react): cancel click connections on pane click
  • c7d0fcb fix: disconnect ResizeObservers when a flow unmounts
  • Additional commits viewable in compare view

Updates docx from 9.7.1 to 9.15.3

Release notes

Sourced from docx's releases.

9.15.3 makes patchDocument faster on large documents. It searched the document for each placeholder in a way that slowed down quadratically as the document grew, so patching documents with many paragraphs and placeholders took much longer than it should. The search now runs in linear time and finds the same paragraphs in the same order (#3886).

What's Changed

New Contributors

Full Changelog: dolanmiu/docx@9.15.2...9.15.3

9.15.2 fixes the published types and clarifies a packer option in the docs. Since 9.13.0, the types carried a declaration from one of docx's own tests that added glob to import.meta in every project that installed docx, so projects that declare import.meta.glob themselves, such as Next.js 16.4 apps, failed to type-check with TS2300: Duplicate identifier 'glob'. The types no longer change any global (#3879). The docs now say which values the packers' prettify argument takes.

What's Changed

New Contributors

Full Changelog: dolanmiu/docx@9.15.1...9.15.2

9.15.1 adds guides for questions raised in issues, and fixes image names, placeholders that patchDocument skipped, and text boxes in WPS Office. The docs now show how to style a list's numbers and bullets (#2328), number a list in legal style, for 1.1 under a level in Chinese counting (#3425), put space between images in a paragraph (#3021), and put a full-page background image behind the text without the header pushing the text down (#2349). They explain that a table row of exact height never splits across pages (#1615), that a table goes next to paragraphs and never in a paragraph's children (#2711), and how a hanging paragraph's left differs from the Left that Word's Paragraph dialog shows (#2448). The checkbox options now give their real type, their defaults and what alias does (#3007), createMathAccentCharacter is described as an n-ary operator's character, with a pointer to MathAccent for accents (#2511), and the README's browser example now uses the current docx rather than playgrounds on docx 7.1.0 (#2853). On the fixes side, images are now written to the package as image1.png, image2.jpg and so on, as Word names them, rather than under a hash of their data, which Word for the web showed as an empty box (#496). patchDocument and patchDetector now find placeholders in a link's text, in a content control and in text typed with Track Changes on, which they used to skip without an error (#2679). A text box of auto height is now written 1in tall, so WPS Office fits it to its text (#3171), and ImportedXmlComponent.fromXmlString no longer wraps its XML in an <undefined> element (#3862).

What's Changed

... (truncated)

Commits
  • ebd2969 chore: Version bump to 9.15.3 (#3891)
  • d010a7a build(deps-dev): bump @​vitest/coverage-v8 from 5.0.5 to 5.1.0 (#3888)
  • 39d34b9 build(deps-dev): bump parse5 from 8.0.1 to 8.1.0 (#3885)
  • 5f8293b build(deps-dev): bump globals from 17.13.0 to 17.14.0 (#3884)
  • 71ca3c7 build(deps-dev): bump vitest from 5.0.5 to 5.1.0 (#3887)
  • ef26560 build(deps-dev): bump @​vitest/ui from 5.0.5 to 5.1.0 (#3889)
  • 8505651 perf(patcher): traverse document elements linearly in O(n) (#3890)
  • aa47895 chore: Version bump to 9.15.2 (#3883)
  • a986bd6 fix: keep spec files' global declarations out of the published types (#3880)
  • 5639a7f build(deps-dev): bump glob from 13.0.6 to 14.0.3 (#3878)
  • Additional commits viewable in compare view

Updates electron-updater from 6.8.9 to 6.8.11

Release notes

Sourced from electron-updater's releases.

electron-updater@6.8.11

Patch Changes

electron-updater@6.8.10

Patch Changes

  • Fix: make multi-range differential downloads work on real servers. Three independent defects made downloadUpdate fall back to a full download with Response ends without calling any handlers: [#10219](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10219) 7dd7f8a @​claude

    • DataSplitter only recognised CRLF. Some CDNs answer multipart/byteranges with bare LF line endings, so no part was ever split and the whole response accumulated in memory. Header lists now end at whichever of \r\n\r\n / \n\n comes first, and the <EOL>--boundary separator size follows the line ending the server actually uses.
    • A header-list terminator split across two chunks was never found: only the new chunk was searched, the buffered bytes never were, so the parser locked onto the next part's header instead. Only the last few bytes of an unfinished header list are now carried over and searched together with the next chunk, instead of accumulating the whole list.
    • The 10s watchdog armed when a batch response ends was never disarmed after that batch succeeded. With more than 1000 operations (several range requests) it failed the whole download whenever a later batch took longer than the grace period.

  • Fix: keep the cached blockmap consistent with the cached installer. A download round that did not produce a new blockmap (e.g. the differential download was skipped because the cached installer was evicted) now removes the cached current.blockmap instead of leaving a stale one next to the freshly cached file, which poisoned the next differential download and surfaced as a generic sha512 checksum mismatch before falling back to a full download (#10097). Leftover pending blockmaps from previous update rounds are also cleared before a fresh download. sha512-mismatch logging now distinguishes a differential download that failed against stale/corrupt cached inputs (including whether the old blockmap came from the local cache or the server) from a genuine checksum failure of a fully downloaded file. [#10163](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10163) 1dfe1a9 @​claude

Changelog

Sourced from electron-updater's changelog.

6.8.11

Patch Changes

6.8.10

Patch Changes

  • Fix: make multi-range differential downloads work on real servers. Three independent defects made downloadUpdate fall back to a full download with Response ends without calling any handlers: [#10219](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10219) 7dd7f8a @​claude

    • DataSplitter only recognised CRLF. Some CDNs answer multipart/byteranges with bare LF line endings, so no part was ever split and the whole response accumulated in memory. Header lists now end at whichever of \r\n\r\n / \n\n comes first, and the <EOL>--boundary separator size follows the line ending the server actually uses.
    • A header-list terminator split across two chunks was never found: only the new chunk was searched, the buffered bytes never were, so the parser locked onto the next part's header instead. Only the last few bytes of an unfinished header list are now carried over and searched together with the next chunk, instead of accumulating the whole list.
    • The 10s watchdog armed when a batch response ends was never disarmed after that batch succeeded. With more than 1000 operations (several range requests) it failed the whole download whenever a later batch took longer than the grace period.

  • Fix: keep the cached blockmap consistent with the cached installer. A download round that did not produce a new blockmap (e.g. the differential download was skipped because the cached installer was evicted) now removes the cached current.blockmap instead of leaving a stale one next to the freshly cached file, which poisoned the next differential download and surfaced as a generic sha512 checksum mismatch before falling back to a full download (#10097). Leftover pending blockmaps from previous update rounds are also cleared before a fresh download. sha512-mismatch logging now distinguishes a differential download that failed against stale/corrupt cached inputs (including whether the old blockmap came from the local cache or the server) from a genuine checksum failure of a fully downloaded file. [#10163](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10163) 1dfe1a9 @​claude

Commits
  • e2a8604 chore(deploy): Release v26.18.0 (electron-updater@6.8.11) (v26) (#10250)
  • e5e3b41 fix(updater): validate cached update filenames (v26 backport of #10115) (#10300)
  • 5cdf017 chore(deploy): Release v26.17.0 (electron-updater@6.8.10) (v26) (#10191)
  • 7dd7f8a fix(updater): make multi-range differential downloads work on real servers (v...
  • 1dfe1a9 fix(electron-updater): keep cached blockmap consistent with cached installer ...
  • See full diff in compare view

Updates font-list from 2.0.2 to 2.1.0

Commits

Updates function-plot from 1.25.3 to 1.26.0

Release notes

Sourced from function-plot's releases.

v1.26.0

What's Changed

New Contributors

Full Changelog: mauriciopoppe/function-plot@v1.25.4...v1.26.0

v1.25.4

  • chore: bump dependencies 58a7830

mauriciopoppe/function-plot@v1.25.3...v1.25.4

Commits
  • 83a34f6 chore: bump version to 1.26.0 (#376)
  • 3203c1f Merge pull request #375 from mauriciopoppe/codex/1x-build-fix
  • 940d041 ci: skip install scripts in build
  • 9d5322b ci: avoid browser download in tests
  • 3512cb0 fix(build): exclude tests from production tsc
  • 287e5f2 refactor: store coordinate state in options
  • 6ea769d fix: improve polar grid layout and preserve zoom
  • 4e8b2ea test: add polar grid image snapshot
  • 061321c refactor: address polar grid review feedback
  • 38fdc46 fix: refine polar grid labels and clipping
  • Additional commits viewable in compare view

Updates harper.js from 2.7.0 to 3.0.0

Release notes

Sourced from harper.js's releases.

v3.0.0

What's Changed

... (truncated)

Commits

Updates highlight.js from 11.11.1 to 11.12.0

Release no...

Description has been truncated

@dependabot
Chore(deps): Bump the production-dependencies group across 1 director…
ed8cae8 
…y with 31 updates

Bumps the production-dependencies group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.1` | `6.20.4` |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.11.1` |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.0` | `6.5.2` |
| [@codemirror/language](https://github.com/codemirror/language) | `6.12.3` | `6.13.1` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.6.0` | `6.7.2` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.6` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.8` | `6.43.15` |
| [@lezer/highlight](https://github.com/lezer-parser/highlight) | `1.2.3` | `1.2.5` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.0` | `1.32.2` |
| [@replit/codemirror-vim](https://github.com/replit/codemirror-vim/tree/HEAD/packages/codemirror-vim) | `6.3.0` | `6.4.0` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.12.1` |
| [docx](https://github.com/dolanmiu/docx) | `9.7.1` | `9.15.3` |
| [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) | `6.8.9` | `6.8.11` |
| [font-list](https://github.com/oldj/node-font-list) | `2.0.2` | `2.1.0` |
| [function-plot](https://github.com/mauriciopoppe/function-plot) | `1.25.3` | `1.26.0` |
| [harper.js](https://github.com/automattic/harper/tree/HEAD/packages/harper.js) | `2.7.0` | `3.0.0` |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `11.11.1` | `11.12.0` |
| [jsxgraph](https://github.com/jsxgraph/jsxgraph) | `1.12.2` | `1.14.3` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.19.1` |
| [pele](https://github.com/obsidianmd/pele) | `1.12.0` | `1.13.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.10` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.3.1` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.8.0` | `1.9.1` |
| [unist-util-visit](https://github.com/syntax-tree/unist-util-visit) | `5.1.0` | `5.2.0` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.1` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.12` | `5.1.0` |
| [@codemirror/lang-html](https://github.com/codemirror/lang-html) | `6.4.11` | `6.4.12` |
| [@codemirror/merge](https://github.com/codemirror/merge) | `6.12.2` | `6.12.3` |
| [@lezer/common](https://github.com/lezer-parser/common) | `1.5.2` | `1.5.5` |
| [hash-wasm](https://github.com/Daninet/hash-wasm) | `4.12.0` | `4.13.0` |



Updates `@codemirror/autocomplete` from 6.20.1 to 6.20.4
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@codemirror/commands` from 6.10.3 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/lang-markdown` from 6.5.0 to 6.5.2
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/language` from 6.12.3 to 6.13.1
- [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/language/commits)

Updates `@codemirror/search` from 6.6.0 to 6.7.2
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@codemirror/state` from 6.7.1 to 6.7.6
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/state/commits)

Updates `@codemirror/view` from 6.43.8 to 6.43.15
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@lezer/highlight` from 1.2.3 to 1.2.5
- [Changelog](https://github.com/lezer-parser/highlight/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/highlight/commits)

Updates `@modelcontextprotocol/sdk` from 1.32.0 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.0...1.32.2)

Updates `@replit/codemirror-vim` from 6.3.0 to 6.4.0
- [Changelog](https://github.com/replit/codemirror-vim/blob/master/packages/codemirror-vim/CHANGELOG.md)
- [Commits](https://github.com/replit/codemirror-vim/commits/v6.4.0/packages/codemirror-vim)

Updates `@xyflow/react` from 12.11.2 to 12.12.1
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.1/packages/react)

Updates `docx` from 9.7.1 to 9.15.3
- [Release notes](https://github.com/dolanmiu/docx/releases)
- [Commits](dolanmiu/docx@9.7.1...9.15.3)

Updates `electron-updater` from 6.8.9 to 6.8.11
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-updater@6.8.11/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.8.11/packages/electron-updater)

Updates `font-list` from 2.0.2 to 2.1.0
- [Commits](https://github.com/oldj/node-font-list/commits)

Updates `function-plot` from 1.25.3 to 1.26.0
- [Release notes](https://github.com/mauriciopoppe/function-plot/releases)
- [Commits](mauriciopoppe/function-plot@v1.25.3...v1.26.0)

Updates `harper.js` from 2.7.0 to 3.0.0
- [Release notes](https://github.com/automattic/harper/releases)
- [Commits](https://github.com/automattic/harper/commits/v3.0.0/packages/harper.js)

Updates `highlight.js` from 11.11.1 to 11.12.0
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
- [Commits](highlightjs/highlight.js@11.11.1...11.12.0)

Updates `jsxgraph` from 1.12.2 to 1.14.3
- [Release notes](https://github.com/jsxgraph/jsxgraph/releases)
- [Changelog](https://github.com/jsxgraph/jsxgraph/blob/main/CHANGELOG.md)
- [Commits](jsxgraph/jsxgraph@v1.12.2...v1.14.3)

Updates `katex` from 0.16.47 to 0.19.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.19.1)

Updates `pele` from 1.12.0 to 1.13.0
- [Release notes](https://github.com/obsidianmd/pele/releases)
- [Commits](obsidianmd/pele@1.12.0...1.13.0)

Updates `prettier` from 3.8.3 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.10)

Updates `react` from 18.3.1 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 18.3.1 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `unist-util-visit` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/syntax-tree/unist-util-visit/releases)
- [Commits](syntax-tree/unist-util-visit@5.1.0...5.2.0)

Updates `ws` from 8.21.3 to 8.22.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.1)

Updates `zustand` from 5.0.12 to 5.1.0
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.12...v5.1.0)

Updates `@codemirror/lang-html` from 6.4.11 to 6.4.12
- [Changelog](https://github.com/codemirror/lang-html/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-html/commits)

Updates `@codemirror/merge` from 6.12.2 to 6.12.3
- [Changelog](https://github.com/codemirror/merge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/merge/commits)

Updates `@lezer/common` from 1.5.2 to 1.5.5
- [Changelog](https://github.com/lezer-parser/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/common/commits)

Updates `hash-wasm` from 4.12.0 to 4.13.0
- [Release notes](https://github.com/Daninet/hash-wasm/releases)
- [Changelog](https://github.com/Daninet/hash-wasm/blob/master/CHANGELOG.md)
- [Commits](Daninet/hash-wasm@v4.12.0...v4.13.0)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/language"
  dependency-version: 6.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@lezer/highlight"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@replit/codemirror-vim"
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@xyflow/react"
  dependency-version: 12.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: docx
  dependency-version: 9.15.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: electron-updater
  dependency-version: 6.8.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: font-list
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: function-plot
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: harper.js
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: highlight.js
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: jsxgraph
  dependency-version: 1.14.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: katex
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pele
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: smol-toml
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: unist-util-visit
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/lang-html"
  dependency-version: 6.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/merge"
  dependency-version: 6.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@lezer/common"
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: hash-wasm
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from adibhanna as a code owner November 10, 2026 18:59
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 10, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@adibhanna adibhanna Awaiting requested review from adibhanna adibhanna is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants