Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 6 updates - #76

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-b7d556559c
Open

chore(deps): bump the production-dependencies group across 1 directory with 6 updates#76
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-b7d556559c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 6 updates in the / directory:

Package From To
typescript 5.9.3 7.0.2
@oxc-project/runtime 0.139.0 0.141.0
ws 8.21.0 8.21.1
vite 7.3.6 8.1.5
linkedom 0.18.12 0.18.13
magic-string 0.30.21 1.1.0

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates @oxc-project/runtime from 0.139.0 to 0.141.0

Release notes

Sourced from @​oxc-project/runtime's releases.

oxc crates_v0.141.0

💥 BREAKING CHANGES

  • 5293431 str: [BREAKING] Move IdentBuildHasher to oxc_str crate (#24717) (overlookmotel)
  • 54cc121 ast: [BREAKING] Split MetaProperty into ImportMeta and NewTarget (#24557) (camc314)

🚀 Features

  • 87823d0 minifier: Merge combined assign expression in conditional expression (#24707) (sapphi-red)
  • 03a54c9 minifier: Merge assign expression against member expression in conditional expression (#24706) (sapphi-red)
  • effd3c8 allocator: Add Vec::from_raw_parts_in (#24732) (overlookmotel)
  • ddacf61 semantic: Add context notes for strict assignments (#24728) (camc314)
  • 7e9b84a data_structures: Add implements! macro (#24721) (overlookmotel)
  • 39e141b data_structures: Add const_str_eq function (#24720) (overlookmotel)
  • cc3d17f semantic: Add context notes for reserved keyword diagnostic (#24715) (camc314)
  • 4c71560 parser: More friendly error for spread element in dynamic imports (#24705) (sapphi-red)
  • 7b045cd minfier: Drop last break from last switch case (#24673) (Armano)
  • 7d3c178 minifier: Remove unreachable recursive functions (#24125) (Dunqing)
  • 94f99b3 ast: Allow NONE to be passed to AST builder methods where Option<ArenaVec> is expected (#24629) (overlookmotel)
  • 77230c5 ast: Accept arrays for ArenaVec params of AST builder methods (#24621) (overlookmotel)
  • f08b152 allocator: Implement FromIn for array to Vec conversion (#24620) (overlookmotel)
  • 2338c13 track-memory-allocations: Track heap deallocs, alloc bytes, and peak growth (#24619) (Boshen)
  • 7aa4739 syntax,transformer: Move JSX entity decoder to oxc_syntax (#24617) (camc314)
  • 2b097c4 str: Export Str as ArenaStr (#24604) (overlookmotel)
  • 3acf4c1 minifier: Expand switch optimiation to remove empty cases (#24520) (Armano)
  • 129b759 parser: Improve diagnostics for unparenthesized LHS on exponential expr (#24569) (camc314)
  • 4d0c601 minifier: Fold arithmetic over undefined and null operands (#24485) (Dunqing)
  • 91541dd minifier: Drop empty switch statements (#24527) (Armano)
  • d05224d ast_visit: Generate VisitJs visitor that skips TypeScript type-space (#24499) (Boshen)
  • 3d22307 parser: Add ParseOptions::enable_ident_hashes (#24491) (Boshen)

🐛 Bug Fixes

  • 61e02bf minifier: Avoid reordering this before super (#24755) (Dunqing)
  • 79e6d77 minifier: Preserve RegExp feature detection (#24712) (Dunqing)
  • 47ddedf semantic: Allow arguments in ambient declarations (#24758) (camc314)
  • 9f3e300 react_compiler: Preserve aliasing diagnostic locations (#24757) (Boshen)
  • 4b81f4d react_compiler: Honor default suppressions (#24747) (Boshen)
  • 6cc4a34 codegen: Wrap negative BigInt literal base of ** in parentheses (#23621) (Jerry Zhao)
  • d85276c minifier: Avoid incorrect logical assignment transformation when base object may be mutated (#24718) (sapphi-red)
  • 99b1dc4 isolated-declarations: Separate static accessors (#24716) (camc314)
  • 76ec104 semantic: Resolve import-equals namespaces (#22696) (camc314)
  • 0ffa88e str: Enable hashbrown feature inline-more (#24719) (overlookmotel)
  • 0e9b460 isolated-declarations: Normalize accessor keys (#24690) (Cameron)
  • 64c2241 minifier: Align class heritage removal with assumptions (#24533) (Dunqing)
  • 48b59f4 parser: Span ambient generator diagnostics (#24711) (camc314)
  • e750a82 ecmascript: Fix false negative for may_have_side_effects on dynamic property access (#24709) (sapphi-red)
  • f145d73 minifier: Guard reordered identifier reads (#24698) (Dunqing)
  • a2ef382 isolated-declarations: Reject window.Symbol as global symbol reference (#24689) (camc314)
  • b1bcf72 minifier: Invalidate facts for redeclared bindings (#24658) (Dunqing)

... (truncated)

Commits

Updates ws from 8.21.0 to 8.21.1

Release notes

Sourced from ws's releases.

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • a2f4e7c [fix] Count empty fragments toward the limit (#2329)
  • e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
  • 4ea355d [doc] Document 32-bit signed integer coercion for option values
  • 2120f4c [example] Remove uuid dependency
  • 4c534a6 [security] Add latest vulnerability to SECURITY.md
  • See full diff in compare view

Updates vite from 7.3.6 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

  • bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
  • client: overlay error message format align rolldown (#22869) (5a72b87)
  • deps: update all non-major dependencies (#22921) (fef682d)
  • deps: update rolldown-related dependencies (#22922) (3c345e4)
  • module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
  • optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
  • ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

  • build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
  • build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

  • avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

Tests

... (truncated)

Commits
  • 5e7fe12 release: v8.1.5
  • 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
  • 5a72b87 fix(client): overlay error message format align rolldown (#22869)
  • f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
  • 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
  • c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
  • b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
  • fef682d fix(deps): update all non-major dependencies (#22921)
  • 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
  • 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
  • Additional commits viewable in compare view

Updates linkedom from 0.18.12 to 0.18.13

Commits
  • fcd88e0 0.18.13
  • 195f7aa brought in better spec-compliant style and getComputed
  • b9ee7fd fix: reading an unset style property returns "" per CSSOM, not undefined (#328)
  • 2450493 Fix #320 - Updated build status
  • d001308 removed unnecessary .npmrc line + updated dev/dependencies - not htmlparser2
  • See full diff in compare view

Updates magic-string from 0.30.21 to 1.1.0

Release notes

Sourced from magic-string's releases.

v1.1.0

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v1.0.0

In magic-string v1.0.0, it's now pure ESM, and the type declarations are built from the TypeScript source. This means the previous CJS, UMD, and IIFE builds are now dropped as we believe the ecosystem is moving forward for ESM. The version was bumped to v1.0.0 instead of v0.31 to distinguish this breaking change, and since magic-string has been verified by the ecosystem for over a decade, the API is stable enough to be marked as v1.

Genreated changelogs:

   🚨 Breaking Changes

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Changelog

Sourced from magic-string's changelog.

1.1.0 (2026-07-23)

Bug Fixes

  • trim replacements longer than the range they replace (#312) (ec1a139)

Performance Improvements

1.0.0 (2026-07-16)

Bug Fixes

  • avoid crash when moving a zero-length range (#307) (56fe8cb)

Performance Improvements

  • add fast path for non-exclusion indent (#308) (992baba)
Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-b7d556559c branch 7 times, most recently from a7ff529 to 8325aad Compare July 23, 2026 14:37
…y with 6 updates

Bumps the production-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [@oxc-project/runtime](https://github.com/oxc-project/oxc/tree/HEAD/npm/runtime) | `0.139.0` | `0.141.0` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.6` | `8.1.5` |
| [linkedom](https://github.com/WebReflection/linkedom) | `0.18.12` | `0.18.13` |
| [magic-string](https://github.com/Rich-Harris/magic-string) | `0.30.21` | `1.1.0` |



Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `@oxc-project/runtime` from 0.139.0 to 0.141.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/runtime/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.141.0/npm/runtime)

Updates `ws` from 8.21.0 to 8.21.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.1)

Updates `vite` from 7.3.6 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

Updates `linkedom` from 0.18.12 to 0.18.13
- [Commits](WebReflection/linkedom@v0.18.12...v0.18.13)

Updates `magic-string` from 0.30.21 to 1.1.0
- [Release notes](https://github.com/Rich-Harris/magic-string/releases)
- [Changelog](https://github.com/Rich-Harris/magic-string/blob/master/CHANGELOG.md)
- [Commits](Rich-Harris/magic-string@v0.30.21...v1.1.0)

---
updated-dependencies:
- dependency-name: "@oxc-project/runtime"
  dependency-version: 0.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: linkedom
  dependency-version: 0.18.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: magic-string
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-b7d556559c branch from 8325aad to f8dbcb0 Compare July 26, 2026 01:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants