Skip to content

Bump the js-patch-and-minor group in /js-applet with 7 updates#348

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/js-applet/js-patch-and-minor-98d8b2fa3a
Open

Bump the js-patch-and-minor group in /js-applet with 7 updates#348
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/js-applet/js-patch-and-minor-98d8b2fa3a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the js-patch-and-minor group in /js-applet with 7 updates:

Package From To
@anywidget/react 0.2.0 0.2.2
react 19.2.4 19.2.5
react-dom 19.2.4 19.2.5
@anywidget/vite 0.2.2 0.3.0
@types/node 25.4.0 25.6.0
vite-plugin-singlefile 2.3.0 2.3.3
vitest 4.0.18 4.1.5

Updates @anywidget/react from 0.2.0 to 0.2.2

Release notes

Sourced from @​anywidget/react's releases.

@​anywidget/react@​0.2.2

Patch Changes

Commits
  • 5789879 Version Packages (#986)
  • 4d15a1f Draft v0.11 release blog post (#991)
  • bd746a4 chore(deps): bump esbuild from 0.21.5 to 0.28.0 in the prod-dependencies grou...
  • c575c88 chore(deps-dev): bump @​typescript/native-preview from 7.0.0-dev.20260410.1 to...
  • aec303e chore(deps): bump @​types/node from 12.20.55 to 25.6.0 (#981)
  • 77c5b81 chore(deps): bump react-dom and @​types/react-dom (#982)
  • cb1f469 chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 up...
  • b76b9c6 Fix orphaned ready promise on widget rebind (#988)
  • 0399b9a Fix HMR race when _esm changes during widget load (#987)
  • bad65ae Rename snake_case identifiers to camelCase (#977)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anywidget/react since your current version.


Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates @anywidget/vite from 0.2.2 to 0.3.0

Release notes

Sourced from @​anywidget/vite's releases.

@​anywidget/vite@​0.3.0

Minor Changes

  • Add signal (AbortSignal) to initialize and render props for lifecycle cleanup (#974)

    Both initialize and render now receive an AbortSignal via the signal prop. The signal is aborted when the widget is destroyed (or during HMR). This is the preferred way to manage cleanup going forward — it composes with the broader web platform (addEventListener, fetch, child widgets) and avoids the need to manually track teardown logic.

    The previous callback-based pattern continues to work but is no longer recommended:

    // before
export default {
  render({ model, el }) {
    let handler = () => { /* ... */ };
    model.on("change:value", handler);
    return () => model.off("change:value", handler);
  },
};
// after
export default {
render({ model, el, signal }) {
let handler = () => { /* ... */ };
model.on("change:value", handler);
signal.addEventListener("abort", () => model.off("change:value", handler));
},
};

    signal also works with addEventListener and fetch directly:

    export default {
  render({ model, el, signal }) {
    el.addEventListener(
      "click",
      () => {
        /* ... */
      },
      { signal }
    );
  },
};
Commits
  • 5789879 Version Packages (#986)
  • 4d15a1f Draft v0.11 release blog post (#991)
  • bd746a4 chore(deps): bump esbuild from 0.21.5 to 0.28.0 in the prod-dependencies grou...
  • c575c88 chore(deps-dev): bump @​typescript/native-preview from 7.0.0-dev.20260410.1 to...
  • aec303e chore(deps): bump @​types/node from 12.20.55 to 25.6.0 (#981)
  • 77c5b81 chore(deps): bump react-dom and @​types/react-dom (#982)
  • cb1f469 chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 up...
  • b76b9c6 Fix orphaned ready promise on widget rebind (#988)
  • 0399b9a Fix HMR race when _esm changes during widget load (#987)
  • bad65ae Rename snake_case identifiers to camelCase (#977)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anywidget/vite since your current version.


Updates @types/node from 25.4.0 to 25.6.0

Commits

Updates vite-plugin-singlefile from 2.3.0 to 2.3.3

Changelog

Sourced from vite-plugin-singlefile's changelog.

Change Log

Date Version Notes
2021-01-09 0.1.0 First post!
2021-01-14 0.2.0 Fix for newest Vite beta, including CSS support
2021-01-14 0.3.0 Borked npm update
2021-01-14 0.4.0 Work around regex accidental replacement variables issue.
2021-01-21 0.5.0 Add TypeScript declaration file (originally 0.1.1 with the wrong base, forgot to push 0.2-0.4)
2021-03-21 0.6.1 Minor tweak to allow node 12.x support
2021-12-12 0.6.2 Update deps. Fix relative asset paths (thanks @​prog-rajkamal!). Improved docs.
2021-12-31 0.6.3 Update deps. Fix parent relative asset paths (#17).
2022-03-01 0.7.0 Update deps. Warn for assets not inlined rather than adding comments (#21, thanks @​taybart!)
2022-03-02 0.7.1 Downgrade chalk, fixes #22
2022-04-03 0.7.2 Update deps. Remove unneeded code (#24).
2022-04-19 0.8.0 Option to remove unnecessary Vite loader (#26). Switch to ESM, update/remove deps (#25).
BREAKING CHANGE NOTE: requires that your package.json use type:module.
2022-04-23 0.9.0 Auto-config by default (#27).
Remove manualChunks (incompatible with inlineDynamicImports=true in vite 2.9.5
2022-06-14 0.10.0-beta Dual ESM/CJS exports (#30 and others)
Switched from transformIndexHtml to generateBundle to fix issue with UnoCSS (#32)
BREAKING: Removes inlined chunks before they are written to the file system.
Add new optional inlinePattern glob pattern to limit inlining (implements #31)
Removed Chalk -- it's pretty, but not worth the ESM-only hassle
More permissive script tag parsing (solves #37)
Added some basic tests (Jest)
Added eslint, removed unnecessary escapes for "." in regex patterns
2022-06-16 0.10.0-beta.2 Add support for .mjs and .cjs file extensions (#38)
2022-07-01 0.10.0 Fix where some bundles are undefined (#41)
Remove filename comment from injected scripts (#39)
Remove unneeded Vite Preload marker (#34)
Make jest a dev dependency only (#40)
2022-07-23 0.11.0 Widen version range for Vite peer dependency to support Vite 3.0 (#46, #47, thanks @​valtism!)
2022-08-06 0.11.1 Check for null code due to worker URLs (#49, thanks @​daniel-kun!)
2022-09-21 0.12.0 Set config base to undefined in recommended options (#56)
Remove optional type attribute from style tags (#53, thanks @​kidonng!)
Remove all VITE_PRELOAD markers (#55)
Point package.json to types file (#54, thanks @​kidonng!)
Update various dependencies
Add README note about SVG (#52)
2022-09-21 0.12.1 Rebase... doh!
2022-10-01 0.12.2 Resolve preload script issue (#58)
2022-10-15 0.12.3 Update various dependencies (including Rollup 3.x), ran tests, no other changes
2022-11-07 0.13.0 Add deleteInlinedFiles option (#62, thanks @​jaerod95!). Update dependencies.
2022-11-10 0.13.1 Add node v14 support for non-Vue projects (#64, thanks @​aloisklink! See also #60, #61)
Add CI testing via GitHub action (#65, thanks @​aloisklink!)
2022-12-10 0.13.2 Confirmed compatibility with Rollup v3 and Vite v4, loosened package.json versions required
2023-02-11 0.13.3 Bump build dependencies, update README
2023-04-01 0.13.5 Allow reporting of compressed bundle size (#70, #71, thanks @​mojoaxel!)
Fix where polfill not removed when minify disabled (#72)

... (truncated)

Commits

Updates vitest from 4.0.18 to 4.1.5

Release notes

Sourced from vitest's releases.

v4.1.5

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

... (truncated)

Commits
  • e399846 chore: release v4.1.5
  • 7dc6d54 Revert "fix: respect diff config options in soft assertions (#8696)"
  • 9787ded fix: respect diff config options in soft assertions (#8696)
  • 325463a fix(ast-collect): recognize _vi_import prefix in static test discovery (#10...
  • 0e0ff41 feat(coverage): istanbul to support instrumenter option (#10119)
  • 663b99f fix: alias agent reporter to minimal (#10157)
  • 122c25b fix: fix vi.defineHelper called as object method (#10163)
  • 6abd557 feat(api): make test-specification options writable (#10154)
  • 596f739 fix: project color label on html reporter (#10142)
  • 9423dc0 fix: --project negation excludes browser instances (#10131)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the js-patch-and-minor group in /js-applet with 7 updates
5fe5bca 
Bumps the js-patch-and-minor group in /js-applet with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@anywidget/react](https://github.com/manzt/anywidget) | `0.2.0` | `0.2.2` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [@anywidget/vite](https://github.com/manzt/anywidget) | `0.2.2` | `0.3.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.4.0` | `25.6.0` |
| [vite-plugin-singlefile](https://github.com/richardtallent/vite-plugin-singlefile) | `2.3.0` | `2.3.3` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.5` |


Updates `@anywidget/react` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/manzt/anywidget/releases)
- [Commits](https://github.com/manzt/anywidget/compare/@anywidget/react@0.2.0...@anywidget/react@0.2.2)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `@anywidget/vite` from 0.2.2 to 0.3.0
- [Release notes](https://github.com/manzt/anywidget/releases)
- [Commits](https://github.com/manzt/anywidget/compare/@anywidget/vite@0.2.2...@anywidget/vite@0.3.0)

Updates `@types/node` from 25.4.0 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vite-plugin-singlefile` from 2.3.0 to 2.3.3
- [Release notes](https://github.com/richardtallent/vite-plugin-singlefile/releases)
- [Changelog](https://github.com/richardtallent/vite-plugin-singlefile/blob/main/CHANGELOG.md)
- [Commits](https://github.com/richardtallent/vite-plugin-singlefile/commits)

Updates `vitest` from 4.0.18 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@anywidget/react"
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-patch-and-minor
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-patch-and-minor
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-patch-and-minor
- dependency-name: "@anywidget/vite"
  dependency-version: 0.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-patch-and-minor
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-patch-and-minor
- dependency-name: vite-plugin-singlefile
  dependency-version: 2.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-patch-and-minor
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 4, 2026
This was referenced May 4, 2026
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants