chore(deps-dev): bump the development-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #1081 · JollyPixel/editor

dependabot · 2026-10-23T06:09:10Z

Bumps the development-dependencies group with 7 updates in the / directory:

Package	From	To
@playwright/test	`1.64.0`	`1.64.1`
happy-dom	`20.14.6`	`21.0.3`
mermaid	`12.1.0`	`12.2.0`
oxlint	`1.87.0`	`1.88.0`
fake-indexeddb	`6.2.5`	`6.2.6`
tinybench	`6.2.1`	`6.2.2`
electron	`44.7.0`	`44.9.0`

Updates @playwright/test from 1.64.0 to 1.64.1

Release notes

Sourced from @playwright/test's releases.

v1.64.1

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0

#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

Commits

cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
866cbb8 chore: mark v1.64.1 (#43354)
1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
See full diff in compare view

Updates happy-dom from 20.14.6 to 21.0.3

Release notes

Sourced from happy-dom's releases.

v21.0.3

👷‍♂️ Patch fixes

Fixes security vulnerability where authorization header was forwarded when redirecting - By @capricorn86

v21.0.2

👷‍♂️ Patch fixes

Fixes SSRF security vulnerability by doing a target-origin bypass in the proxy server in @happy-dom/server-renderer - By @capricorn86

v21.0.1

👷‍♂️ Patch fixes

Adds aliases --css and --iframe for enabling CSS and iframe loading to @happy-dom/server-renderer - By @capricorn86

v21.0.0

💣 Breaking Changes

Disables CSS and IFrame loading by default to prevent server-side request forgery (SSRF) - By @capricorn86

An attacker could embed <iframe> or <link rel="stylesheet"> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.

The settings property disableCSSFileLoading has been deprecated

Added the new settings properties enableCSSFileLoading and enableIframePageLoading

If you don't believe that you are at risk, you can keep the same behavior as in <=v20.14.6 by sending in { enableCSSFileLoading: true, enableIframePageLoading: true } as broswer settings (e.g. new Window({ settings }));

Commits

875ef5c fix: Fixes security vulnerability where authorization header was forwarded wh...
1f3ffdf fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...
f55c7e0 chore: Update security documentation (#2509)
2b91e68 fix: Adds alias for enabling CSS and iframe loading in server-renderer (#2503)
0a99c75 BREAKING CHANGE: Disables CSS and IFrame loading by default (#2502)
See full diff in compare view

Updates mermaid from 12.1.0 to 12.2.0

Release notes

Sourced from mermaid's releases.

mermaid@12.2.0

Minor Changes

#8394 6ac38cb Thanks @jackroberts236! - feat: Add opt-in mindmap coloring by hierarchy depth using mindmap.colorBy: depth and the existing theme palette.

Patch Changes

#8409 419ee68 Thanks @ashishjain0512! - fix: size circle and double-circle nodes from their label instead of minNodeWidth, and trim neo circle padding

#8395 2fb3ff1 Thanks @ashishjain0512! - fix: ELK no longer straightens an edge terminal when that would put a label over another edge, or an edge through a label

#8394 cbf89ab Thanks @jackroberts236! - fix: Keep mindmap HTML labels readable in the neo look on themes that repaint node backgrounds

#8390 430ac9b Thanks @ashishjain0512! - fix: Centre mindmap node labels when htmlLabels is false

#8161 d7532ed Thanks @filipsajdak! - fix: scope a swimlane cluster's DOM id like every other cluster, so two diagrams on one page do not collide

#8270 ad8d61a Thanks @filipsajdak! - fix(rendering): clip an edge for the layout engine that drew it, so a diagram pinning its own engine (bpmn, swimlanes) still renders when the configured default is another one

#8383 9d41c0f Thanks @filipsajdak! - fix(swimlanes): split shared terminal lanes again after crossing cleanup, so an edge that detours around another lane no longer ends on the same attachment point as a neighbouring edge

#8384 6c67397 Thanks @filipsajdak! - fix(swimlanes): move a lane's title band clear of an edge that crosses it, in LR diagrams whose lanes carry no direction of their own and when the edge runs along the band's border

#8366 40124c3 Thanks @SwastikTripathi! - fix: swimlane nodes with no edges keep their source order inside a lane instead of being sorted by ID

Commits

1fb7869 Merge pull request #8432 from mermaid-js/changeset-release/master
34772ca Version Packages
42292ea Merge pull request #8428 from mermaid-js/release/12.2.0
e6c8059 Wrong version set previously
6c55f56 Set mermaid version when Coloring by depth supported in Mindmap
5a0d8cf Fix missing parallel uploads
788f396 Update according to discussion with core-team members
33d0a49 Merge pull request #8411 from mermaid-js/renovate/npm-katex-vulnerability
6538fde Update dependency katex to ^0.18.0 [SECURITY]
ba3022d Merge pull request #8398 from mermaid-js/pebr/12.1.0-tmp
Additional commits viewable in compare view

Updates oxlint from 1.87.0 to 1.88.0

Release notes

Sourced from oxlint's releases.

oxlint v1.88.0

💥 BREAKING CHANGES

7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)

c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)

🚀 Features

bde9f69 oxlint/lsp: Show config errors to LSP client (#25486) (Sysix)

3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

🐛 Bug Fixes

82ecc43 linter/sort-keys: Compare natural order like ESLint (#27579) (Dunqing)

598ac03 linter/unicorn/prefer-bigint-literals: Unwrap redundant constructor call; don't auto-fix for lost precision (#25690) (Jacob Bandes-Storch)

2512213 linter: Prevent conflicting type import fixes (#27409) (camc314)

2349a31 oxfmt: Follow symlinked configs in discovery (#27389) (leaysgur)

6e573f9 oxlint,oxfmt: Set stderr blocking (#27363) (leaysgur)

⚡ Performance

91b588c linter/oxc/bad-array-method-on-arguments: Check arguments references once (#26930) (camc314)

c5f47ed linter/plugins: Inline firstCommentAtOrAfter into call sites (#27539) (overlookmotel)

c5f9235 linter/plugins: Use shift over multiply for powers of 2 (#27536) (overlookmotel)

8c57c5e linter: Share one source per file across type-aware diagnostics (#27462) (Max Schwenk)

19c227d minifier: Use ident when checking specific id names (#27208) (Armano)

📚 Documentation

98cc2b4 linter/plugins: Improve documentation for firstCommentAtOrAfter (#27538) (overlookmotel)

3bb54f6 linter: Update stale comment (#27519) (overlookmotel)

848a4e7 linter: Update fix metadata for tsgolint rules that already provide fixes (#27408) (Mikhail Baev)

Changelog

Sourced from oxlint's changelog.

[1.88.0] - 2026-10-13

🚀 Features

3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)

e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)

aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)

36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)

beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)

4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)

285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)

4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)

d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)

5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

... (truncated)

Commits

6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
See full diff in compare view

Updates fake-indexeddb from 6.2.5 to 6.2.6

Release notes

Sourced from fake-indexeddb's releases.

v6.2.6

Improve performance (#169 by @jlucaso1)

Fixed memory leak of finished transasctions (#171 by @nolanlawson)

Changelog

Sourced from fake-indexeddb's changelog.

6.2.6 (2026-10-16)

Improve performance (#169 by @jlucaso1)

Fixed memory leak of finished transasctions (#171 by @nolanlawson)

Commits

e4b7e01 6.2.6
e39bf45 Changelog
d2eb002 Merge pull request #171 from nolanlawson/nolan/mem-leak
d8a47c5 fix race conditions in the test
4ce4af2 fix typo in comment
127a066 try a double macrotask since one CI job failed
4c7ba4d Fix memory leak in database.transactions
b92592f Node 26 and pnpm 11
84a3238 Changelog
3f98e1a Merge pull request #169 from jlucaso1/perf-improve-comparison
Additional commits viewable in compare view

Updates tinybench from 6.2.1 to 6.2.2

Release notes

Sourced from tinybench's releases.

v6.2.2

🐞 Bug Fixes

Remove concurrency abort listeners after runs - by @feritcemkahraman in tinylibs/tinybench#699 (93c5f)

View changes on GitHub

Commits

fb4fd79 chore: release v6.2.2
0bba26c chore(deps): lock file maintenance (#694)
7e14282 ci: tighten bundle size limit to 6 kB
93c5fdc fix: remove concurrency abort listeners after runs (#699)
dbe9ce1 chore(deps): update all non-major dependencies (#698)
02ed115 chore(deps): update all non-major dependencies (#697)
325098c chore(deps): update all non-major dependencies (#695)
3840a7d chore: ignore hidden local mise files
ad89e8f chore: ignore environment-specific local mise files
2659dc0 chore: replace Volta with mise (#696)
Additional commits viewable in compare view

Updates electron from 44.7.0 to 44.9.0

Release notes

Sourced from electron's releases.

electron v44.9.0

Release Notes for v44.9.0

Features

Added app shims on macOS to show windows under another app's Dock icon. #55073 (Also in 45)

Fixes

Fixed link-opened windows not using the opener's session and webPreferences. #55048 (Also in 42, 43, 45)

Fixed setCertificateVerifyProc occasionally not being applied to a request issued concurrently with the first request to a host. #55046 (Also in 42, 43, 45)

electron v44.8.0

Release Notes for v44.8.0

Features

Added support for Notification action buttons on Linux. #54890 (Also in 45)

Fixes

Fixed mouse cursor missing over native dialogs in certain scenarios on Windows. #54987

Fixed net.fetch and session.fetch failing permanently with net::ERR_FAILED after the Network Service process restarts. #54909 (Also in 42, 43, 45)

Fixed utilityProcess dropping messages posted with process.parentPort.postMessage() right before the process exits. #54960 (Also in 42, 43, 45)

Fixed win.isFullScreen() being stale in fullscreen events on Windows. #55009 (Also in 45)

Other Changes

Backported fixes from upstream Chromium and V8. #55034

Updated Chromium to 152.0.7977.167. #54928

Updated Node.js to v24.22.0. #55004

electron v44.7.2

Release Notes for v44.7.2

Fixes

Fixed an issue where clicks posted to a background app were dropped on macOS. #54819 (Also in 45)

Fixed interrupted macOS updates leaving a broken app behind. #54844 (Also in 45)

Other Changes

Backported fixes from upstream ANGLE, Chromium, PDFium and V8. #54898

Documentation

Documentation changes: #54880

electron v44.7.1

Release Notes for v44.7.1

... (truncated)

Commits

fd148b9 feat: add app shims on macOS (#55073)
fe5dd7e fix: avoid misaligned char16_t reads in crdtp string deserialization (#55061)
c6874c5 fix: use the opener's session and webPreferences for windows opened from link...
790b4b8 ci: skip native builds when installing deps for type generation (#55066)
d5d34ca fix: intermittent certificate errors for concurrent requests with setCertific...
f1d9772 docs: update tutorials for Electron Forge 8 (#55052)
723d9f1 chore: rework BoringSSL with Node.js incompatibilities patch (#55040)
cb73799 build: update PGO profiles (#55036)
60169b4 chore: cherry-pick 10 changes from chromium and v8 (#55034)
ae54339 ci: bump build-tools to pick up the Windows clang-cl siso timeout (#55026)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 7 updates Bumps the development-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `20.14.6` | `21.0.3` | | [mermaid](https://github.com/mermaid-js/mermaid) | `12.1.0` | `12.2.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.87.0` | `1.88.0` | | [fake-indexeddb](https://github.com/dumbmatter/fakeIndexedDB) | `6.2.5` | `6.2.6` | | [tinybench](https://github.com/tinylibs/tinybench) | `6.2.1` | `6.2.2` | | [electron](https://github.com/electron/electron) | `44.7.0` | `44.9.0` | Updates `@playwright/test` from 1.64.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.64.0...v1.64.1) Updates `happy-dom` from 20.14.6 to 21.0.3 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v20.14.6...v21.0.3) Updates `mermaid` from 12.1.0 to 12.2.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.1.0...mermaid@12.2.0) Updates `oxlint` from 1.87.0 to 1.88.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.88.0/npm/oxlint) Updates `fake-indexeddb` from 6.2.5 to 6.2.6 - [Release notes](https://github.com/dumbmatter/fakeIndexedDB/releases) - [Changelog](https://github.com/dumbmatter/fakeIndexedDB/blob/master/CHANGELOG.md) - [Commits](dumbmatter/fakeIndexedDB@v6.2.5...v6.2.6) Updates `tinybench` from 6.2.1 to 6.2.2 - [Release notes](https://github.com/tinylibs/tinybench/releases) - [Commits](tinylibs/tinybench@v6.2.1...v6.2.2) Updates `electron` from 44.7.0 to 44.9.0 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v44.7.0...v44.9.0) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: happy-dom dependency-version: 21.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: mermaid dependency-version: 12.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint dependency-version: 1.88.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: fake-indexeddb dependency-version: 6.2.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: tinybench dependency-version: 6.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: electron dependency-version: 44.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-10-23T06:09:19Z

⚠️ No Changeset found

Latest commit: 78d6549

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

fraxken · 2026-10-24T16:06:01Z

@dependabot please rebase

dependabot · 2026-10-24T16:07:34Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026

dependabot Bot closed this Oct 24, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-a8fbb57538 branch October 24, 2026 16:07

Navigation Menu

Repository navigation

chore(deps-dev): bump the development-dependencies group across 1 directory with 7 updates - #1081

chore(deps-dev): bump the development-dependencies group across 1 directory with 7 updates#1081
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-a8fbb57538

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Oct 23, 2026

Uh oh!

fraxken commented Oct 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.64.1

Bug Fixes

v21.0.3

👷‍♂️ Patch fixes

v21.0.2

👷‍♂️ Patch fixes

v21.0.1

👷‍♂️ Patch fixes

v21.0.0

💣 Breaking Changes

mermaid@12.2.0

Minor Changes

Patch Changes

oxlint v1.88.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

[1.88.0] - 2026-10-13

🚀 Features

[1.86.0] - 2026-09-28

🚀 Features

[1.82.0] - 2026-09-07

🚀 Features

[1.81.0] - 2026-08-31

📚 Documentation

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

🐛 Bug Fixes

[1.78.0] - 2026-08-10

🚀 Features

🐛 Bug Fixes

v6.2.6

6.2.6 (2026-10-16)

v6.2.2

🐞 Bug Fixes

View changes on GitHub

electron v44.9.0

Release Notes for v44.9.0

Features

Fixes

electron v44.8.0

Release Notes for v44.8.0

Features

Fixes

Other Changes

electron v44.7.2

Release Notes for v44.7.2

Fixes

Other Changes

Documentation

electron v44.7.1

Release Notes for v44.7.1

Uh oh!

changeset-bot Bot commented Oct 23, 2026

⚠️ No Changeset found

Uh oh!

fraxken commented Oct 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading