Skip to content

chore(deps): bump the prod-dependencies-patch group across 1 directory with 10 updates#52

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-patch-19552debdd
Open

chore(deps): bump the prod-dependencies-patch group across 1 directory with 10 updates#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-patch-19552debdd

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps the prod-dependencies-patch group with 10 updates in the / directory:

Package From To
@floating-ui/react 0.27.16 0.27.19
@rollup/rollup-linux-x64-gnu 4.60.1 4.60.4
@table-nav/core 0.0.7 0.0.9
@table-nav/react 0.0.7 0.0.9
dayjs 1.11.19 1.11.20
fast-average-color 9.5.0 9.5.2
qs 6.15.0 6.15.2
remark-flexible-toc 1.2.4 1.2.5
shell-quote 1.8.3 1.8.4
ws 8.20.0 8.20.1

Updates @floating-ui/react from 0.27.16 to 0.27.19

Release notes

Sourced from @​floating-ui/react's releases.

@​floating-ui/react@​0.27.19

Patch Changes

  • fix(useDismiss): ignore non-primary inside mouse presses for click outside dismissal
  • fix(react): fix shadow root host lookup when one of the parent elements is an anchor
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/react-dom@2.1.8

@​floating-ui/react@​0.27.18

Patch Changes

  • fix(FloatingFocusManager): use WeakRef for previously focused elements
Changelog

Sourced from @​floating-ui/react's changelog.

0.27.19

Patch Changes

  • fix(useDismiss): ignore non-primary inside mouse presses for click outside dismissal
  • fix(react): fix shadow root host lookup when one of the parent elements is an anchor
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/react-dom@2.1.8

0.27.18

Patch Changes

  • fix(FloatingFocusManager): use WeakRef for previously focused elements

0.27.17

Patch Changes

  • feat: detectOverflow configurable via platform
  • fix(FloatingPortal): ensure accessibility of non-modal dialogs with iOS/Safari/Voice Control
  • Update dependencies: @floating-ui/react-dom@2.1.7
Commits
  • d8020ee chore: version packages (#3445)
  • fa093f3 fix(react): right-click dismiss with click outside (#3449)
  • d2681d5 fix(react): markOthers shadow root host lookup when parent chain contains anc...
  • d729054 chore: version packages (#3430)
  • f96865c fix(FloatingFocusManager): use WeakRef for previouslyFocusedElements (#3427)
  • b4d1407 chore: version packages (#3415)
  • e7d3f00 feat: detectOverflow configurable via platform (#3423)
  • 0681dbb fix(FloatingPortal): fix non-modal dialog accessibility with iOS/Safari/Voice...
  • 197e7b7 refactor: simplify useMergeRefs by removing redundant type assertions and tig...
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​floating-ui/react since your current version.


Updates @rollup/rollup-linux-x64-gnu from 4.60.1 to 4.60.4

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.60.4

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

v4.60.2

4.60.2

2026-04-18

Bug Fixes

  • Resolve a variable rendering bug when generating different formats from the same build (#6350)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.60.4

2026-05-14

Bug Fixes

  • Improve stability of chunk hashes (#6362)

Pull Requests

4.60.3

2026-05-04

Bug Fixes

  • Ensure nested "exports" variables are not renamed (#6360)

Pull Requests

4.60.2

2026-04-18

Bug Fixes

  • Resolve a variable rendering bug when generating different formats from the same build (#6350)

Pull Requests

... (truncated)

Commits
  • d311a84 4.60.4
  • 6aa3248 fix: stabilize chunk assignment across parallel file reads (#6362)
  • 82a0fe7 Resolve vulnerabilities (#6375)
  • 71f5ebc chore(deps): update dependency lru-cache to v11 (#6371)
  • af91d77 chore(deps): lock file maintenance (#6373)
  • 65e7b94 chore(deps): update react monorepo to v19 (major) (#6372)
  • 642587f fix(deps): update minor/patch updates (#6370)
  • b47bdab 4.60.3
  • 15c5f33 Add again some unneeded dev dependencies, to make some builds succeed
  • 12195dc fix: do not rename nested "exports" bindings that do not conflict (#6360)
  • Additional commits viewable in compare view

Updates @table-nav/core from 0.0.7 to 0.0.9

Changelog

Sourced from @​table-nav/core's changelog.

0.0.9

Patch Changes

  • 044643a: bump broken workspace reference

0.0.8

Patch Changes

  • 79c91ba: fix rapid arrow navigation handling
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​table-nav/core since your current version.


Updates @table-nav/react from 0.0.7 to 0.0.9

Changelog

Sourced from @​table-nav/react's changelog.

0.0.9

Patch Changes

  • 044643a: bump broken workspace reference
  • Updated dependencies [044643a]
    • @​table-nav/core@​0.0.9

0.0.8

Patch Changes

  • 79c91ba: fix rapid arrow navigation handling
  • Updated dependencies [79c91ba]
    • @​table-nav/core@​0.0.8
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​table-nav/react since your current version.


Updates dayjs from 1.11.19 to 1.11.20

Release notes

Sourced from dayjs's releases.

v1.11.20

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118
Changelog

Sourced from dayjs's changelog.

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dayjs since your current version.


Updates fast-average-color from 9.5.0 to 9.5.2

Release notes

Sourced from fast-average-color's releases.

v9.5.2

Fixed image loading completion check.

v9.5.1

Fixed binding of event handler for image.

Changelog

Sourced from fast-average-color's changelog.

v9.5.2

  • Fixed image loading completion check.

v9.5.1

  • Fixed binding of event handler for image.
Commits

Updates qs from 6.15.0 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
  • e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
  • 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
  • 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
  • 96755ab [readme] fix grammar
  • a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
  • 3f5e1c5 v6.15.1
  • Additional commits viewable in compare view

Updates remark-flexible-toc from 1.2.4 to 1.2.5

Release notes

Sourced from remark-flexible-toc's releases.

v1.2.5

The changes made by @​talatkuyuk:

  • Update unist-util-visit
  • Update output directory as "dist" instead of "dist/esm"
  • Update export conditions in package.json
  • Update npm scripts in package.json
  • Update sourcemaps by adding inlineSources into tsconfig, and removing "src/" directory from files in package.json
  • Add declarationMap to tsconfig
  • Add .tsbuildinfo to .npmignore
  • Update github actions
  • Update devDependencies
  • Update eslint to version 10
  • Update eslint config using defineConfig instead of tseslint.config
  • Add a sponsorship banner into README.md
  • Add a new remark plugin to plugin list in README.md
Commits
  • d53cd88 v1.2.5
  • 79d7629 Fix an eslint issue about assigned value is not used in subsequent statements
  • ad375a8 Add a new remark plugin to plugin list in README.md
  • 6abd775 Update unist-util-visit
  • 1482954 Update npm scripts
  • b14952b Update export conditions in package.json
  • a9d78fc pdate output directory as dist instead of dist/esm
  • a290e07 Add .tsbuildinfo to .npmignore
  • a7242f8 Add declarationMap to tsconfig
  • 8243d58 Update sourcemaps by adding inlineSources into tsconfig, and removing `src/...
  • Additional commits viewable in compare view

Updates shell-quote from 1.8.3 to 1.8.4

Changelog

Sourced from shell-quote's changelog.

v1.8.4 - 2026-05-22

Commits

  • [Fix] quote: validate object-token shapes 4378a6e
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, npmignore 22ebec0
  • [Tests] increase coverage 9f3caa3
  • [readme] replace runkit CI badge with shields.io check-runs badge 3344a04
  • [Dev Deps] update @ljharb/eslint-config 699c511
Commits
  • ff166e2 v1.8.4
  • 4378a6e [Fix] quote: validate object-token shapes
  • 22ebec0 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, `npmig...
  • 9f3caa3 [Tests] increase coverage
  • 3344a04 [readme] replace runkit CI badge with shields.io check-runs badge
  • 699c511 [Dev Deps] update @ljharb/eslint-config
  • See full diff in compare view

Updates ws from 8.20.0 to 8.20.1

Release notes

Sourced from ws's releases.

8.20.1

Bug fixes

  • Fixed an uninitialized memory disclosure issue in websocket.close() (c0327ec1).

Providing a TypedArray (e.g. Float32Array) as the reason argument for websocket.close(), rather than the supported string or Buffer types, caused uninitialized memory to be disclosed to the remote peer.

import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer(
{ port: 0, skipUTF8Validation: true },
function () {
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port}, {
skipUTF8Validation: true
});
ws.on('close', function (code, reason) {
  deepStrictEqual(reason, Buffer.alloc(80));
});

}
);
wss.on('connection', function (ws) {
ws.close(1000, new Float32Array(20));
});

The issue was privately reported by Nikita Skovoroda.

Commits
  • 5d9b316 [dist] 8.20.1
  • c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
  • ce2a3d6 [ci] Test on node 26
  • 58e45b8 [ci] Do not test on node 25
  • 5f26c24 [ci] Run the lint step on node 24
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the prod-dependencies-patch group across 1 director…
0dc63f9 
…y with 10 updates

Bumps the prod-dependencies-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@floating-ui/react](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react) | `0.27.16` | `0.27.19` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.1` | `4.60.4` |
| [@table-nav/core](https://github.com/konsalex/table-nav/tree/HEAD/packages/core) | `0.0.7` | `0.0.9` |
| [@table-nav/react](https://github.com/konsalex/table-nav/tree/HEAD/packages/react) | `0.0.7` | `0.0.9` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.19` | `1.11.20` |
| [fast-average-color](https://github.com/fast-average-color/fast-average-color) | `9.5.0` | `9.5.2` |
| [qs](https://github.com/ljharb/qs) | `6.15.0` | `6.15.2` |
| [remark-flexible-toc](https://github.com/ipikuka/remark-flexible-toc) | `1.2.4` | `1.2.5` |
| [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.8.4` |
| [ws](https://github.com/websockets/ws) | `8.20.0` | `8.20.1` |



Updates `@floating-ui/react` from 0.27.16 to 0.27.19
- [Release notes](https://github.com/floating-ui/floating-ui/releases)
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/react/CHANGELOG.md)
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/react@0.27.19/packages/react)

Updates `@rollup/rollup-linux-x64-gnu` from 4.60.1 to 4.60.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.60.1...v4.60.4)

Updates `@table-nav/core` from 0.0.7 to 0.0.9
- [Changelog](https://github.com/konsalex/table-nav/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/konsalex/table-nav/commits/@table-nav/core@0.0.9/packages/core)

Updates `@table-nav/react` from 0.0.7 to 0.0.9
- [Changelog](https://github.com/konsalex/table-nav/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/konsalex/table-nav/commits/@table-nav/react@0.0.9/packages/react)

Updates `dayjs` from 1.11.19 to 1.11.20
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.19...v1.11.20)

Updates `fast-average-color` from 9.5.0 to 9.5.2
- [Release notes](https://github.com/fast-average-color/fast-average-color/releases)
- [Changelog](https://github.com/fast-average-color/fast-average-color/blob/master/CHANGELOG.md)
- [Commits](fast-average-color/fast-average-color@v9.5.0...v9.5.2)

Updates `qs` from 6.15.0 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `remark-flexible-toc` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/ipikuka/remark-flexible-toc/releases)
- [Commits](ipikuka/remark-flexible-toc@v1.2.4...v1.2.5)

Updates `shell-quote` from 1.8.3 to 1.8.4
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.8.3...v1.8.4)

Updates `ws` from 8.20.0 to 8.20.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.20.0...8.20.1)

---
updated-dependencies:
- dependency-name: "@floating-ui/react"
  dependency-version: 0.27.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.60.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: "@table-nav/core"
  dependency-version: 0.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: "@table-nav/react"
  dependency-version: 0.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: dayjs
  dependency-version: 1.11.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: fast-average-color
  dependency-version: 9.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: remark-flexible-toc
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: shell-quote
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
- dependency-name: ws
  dependency-version: 8.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants