Skip to content

deps: bump the npm-minor-and-patch group across 1 directory with 23 updates - #15

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-15ce61bd7d
Open

deps: bump the npm-minor-and-patch group across 1 directory with 23 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-15ce61bd7d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the npm-minor-and-patch group with 23 updates in the / directory:

Package From To
@octokit/rest 22.0.0 22.0.1
@rdfjs/parser-n3 2.1.0 2.2.0
cors 2.8.5 2.8.6
electron-log 5.4.3 5.4.4
electron-updater 6.8.9 6.8.11
express-rate-limit 8.5.2 8.7.3
heic-to 1.5.2 1.6.7
hono 4.13.11 4.13.16
jsonwebtoken 9.0.2 9.0.3
papaparse 5.5.3 5.7.0
react-virtuoso 4.18.3 4.18.20
sparql-http-client 3.0.1 3.1.0
use-debounce 10.0.5 10.1.1
zustand 5.0.3 5.1.0
@cloudflare/workers-types 5.20260929.1 5.20261106.1
@playwright/test 1.63.0 1.65.0
@testing-library/react 16.3.0 16.3.3
@testing-library/user-event 14.6.1 14.6.8
electron-builder 26.15.3 26.18.0
eslint-plugin-react 7.35.0 7.37.5
eslint-plugin-react-refresh 0.4.11 0.5.7
wait-on 9.0.3 9.5.1
wrangler 4.144.0 4.158.0

Updates @octokit/rest from 22.0.0 to 22.0.1

Release notes

Sourced from @​octokit/rest's releases.

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

  • deps: update octokit monorepo (major) (#538) (ded2f17)
Commits
  • daa3ec9 ci(action): update actions/setup-node action to v6 (#534)
  • 1dec0c7 ci(action): update peter-evans/create-or-update-comment action to v5 (#531)
  • ded2f17 fix(deps): update octokit monorepo (major) (#538)
  • 0e0eaea chore(deps): update dependency @​types/node to v24 (#537)
  • c04acc8 chore(deps): update vitest monorepo to v4 (major) (#536)
  • e6dd306 chore(deps): update dependency undici to v7 (#474)
  • 5f380d0 build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (#520)
  • dc6827d build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (#516)
  • See full diff in compare view

Updates @rdfjs/parser-n3 from 2.1.0 to 2.2.0

Commits
  • 9342f5f 2.2.0
  • 17717a5 Merge pull request #30 from rdfjs-base/n3-update
  • 35df859 Merge pull request #29 from rdfjs-base/ci-update
  • daf713d chore: updated ci dependencies
  • 01b9daf feat: updated n3.js dependency, added support/tests for triple terms
  • 4148a09 Merge pull request #27 from rdfjs-base/dependabot/npm_and_yarn/c8-11.0.0
  • 73ac52b Bump c8 from 10.1.3 to 11.0.0
  • a31aaa2 Merge pull request #24 from rdfjs-base/dependabot/github_actions/actions/chec...
  • dde2259 Bump actions/checkout from 5 to 6
  • 37db73d Merge pull request #23 from rdfjs-base/dependabot/github_actions/actions/setu...
  • Additional commits viewable in compare view

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.


Updates electron-log from 5.4.3 to 5.4.4

Commits

Updates electron-updater from 6.8.9 to 6.8.11

Release notes

Sourced from electron-updater's releases.

electron-updater@6.8.11

Patch Changes

electron-updater@6.8.10

Patch Changes

  • Fix: make multi-range differential downloads work on real servers. Three independent defects made downloadUpdate fall back to a full download with Response ends without calling any handlers: [#10219](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10219) 7dd7f8a @​claude

    • DataSplitter only recognised CRLF. Some CDNs answer multipart/byteranges with bare LF line endings, so no part was ever split and the whole response accumulated in memory. Header lists now end at whichever of \r\n\r\n / \n\n comes first, and the <EOL>--boundary separator size follows the line ending the server actually uses.
    • A header-list terminator split across two chunks was never found: only the new chunk was searched, the buffered bytes never were, so the parser locked onto the next part's header instead. Only the last few bytes of an unfinished header list are now carried over and searched together with the next chunk, instead of accumulating the whole list.
    • The 10s watchdog armed when a batch response ends was never disarmed after that batch succeeded. With more than 1000 operations (several range requests) it failed the whole download whenever a later batch took longer than the grace period.

  • Fix: keep the cached blockmap consistent with the cached installer. A download round that did not produce a new blockmap (e.g. the differential download was skipped because the cached installer was evicted) now removes the cached current.blockmap instead of leaving a stale one next to the freshly cached file, which poisoned the next differential download and surfaced as a generic sha512 checksum mismatch before falling back to a full download (#10097). Leftover pending blockmaps from previous update rounds are also cleared before a fresh download. sha512-mismatch logging now distinguishes a differential download that failed against stale/corrupt cached inputs (including whether the old blockmap came from the local cache or the server) from a genuine checksum failure of a fully downloaded file. [#10163](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10163) 1dfe1a9 @​claude

Changelog

Sourced from electron-updater's changelog.

6.8.11

Patch Changes

6.8.10

Patch Changes

  • Fix: make multi-range differential downloads work on real servers. Three independent defects made downloadUpdate fall back to a full download with Response ends without calling any handlers: [#10219](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10219) 7dd7f8a @​claude

    • DataSplitter only recognised CRLF. Some CDNs answer multipart/byteranges with bare LF line endings, so no part was ever split and the whole response accumulated in memory. Header lists now end at whichever of \r\n\r\n / \n\n comes first, and the <EOL>--boundary separator size follows the line ending the server actually uses.
    • A header-list terminator split across two chunks was never found: only the new chunk was searched, the buffered bytes never were, so the parser locked onto the next part's header instead. Only the last few bytes of an unfinished header list are now carried over and searched together with the next chunk, instead of accumulating the whole list.
    • The 10s watchdog armed when a batch response ends was never disarmed after that batch succeeded. With more than 1000 operations (several range requests) it failed the whole download whenever a later batch took longer than the grace period.

  • Fix: keep the cached blockmap consistent with the cached installer. A download round that did not produce a new blockmap (e.g. the differential download was skipped because the cached installer was evicted) now removes the cached current.blockmap instead of leaving a stale one next to the freshly cached file, which poisoned the next differential download and surfaced as a generic sha512 checksum mismatch before falling back to a full download (#10097). Leftover pending blockmaps from previous update rounds are also cleared before a fresh download. sha512-mismatch logging now distinguishes a differential download that failed against stale/corrupt cached inputs (including whether the old blockmap came from the local cache or the server) from a genuine checksum failure of a fully downloaded file. [#10163](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater/issues/10163) 1dfe1a9 @​claude

Commits
  • e2a8604 chore(deploy): Release v26.18.0 (electron-updater@6.8.11) (v26) (#10250)
  • e5e3b41 fix(updater): validate cached update filenames (v26 backport of #10115) (#10300)
  • 5cdf017 chore(deploy): Release v26.17.0 (electron-updater@6.8.10) (v26) (#10191)
  • 7dd7f8a fix(updater): make multi-range differential downloads work on real servers (v...
  • 1dfe1a9 fix(electron-updater): keep cached blockmap consistent with cached installer ...
  • See full diff in compare view

Updates express-rate-limit from 8.5.2 to 8.7.3

Release notes

Sourced from express-rate-limit's releases.

v8.7.3

You can view the changelog here.

v8.7.2

You can view the changelog here.

v8.7.1

You can view the changelog here.

v8.7.0

You can view the changelog here.

v8.6.2

You can view the changelog here.

v8.6.1

You can view the changelog here.

v8.6.0

You can view the changelog here.

Commits
  • b0d0c1f 8.7.3
  • 307ca31 v8.7.3 changelog
  • 34729c8 fix: forward async rate limit handler errors (#708)
  • 3fa4577 8.7.2
  • 7427a5c v8.7.2 changelog
  • da5b115 fix: don't un-count requests that complete after the window resets (#707)
  • 28331a7 docs: Restore hyphenated anchor links for error codes (#705)
  • 404bc3a docs: show how to reset the key of an IPv6 client (#704)
  • e0b3886 docs: fix inverted skipSuccessfulRequests and ipv6Subnet descriptions (#703)
  • 97bc073 chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 (#702)
  • Additional commits viewable in compare view

Updates heic-to from 1.5.2 to 1.6.7

Release notes

Sourced from heic-to's releases.

v1.6.7

What's Changed

New Contributors

Full Changelog: hoppergee/heic-to@v1.6.6...v1.6.7

v1.6.6

What's Changed

New Contributors

Full Changelog: hoppergee/heic-to@v1.6.5...v1.6.6

v1.6.5

Full Changelog: hoppergee/heic-to@v1.6.4...v1.6.5

v1.6.4

Full Changelog: hoppergee/heic-to@v1.6.3...v1.6.4

v1.6.3

Full Changelog: hoppergee/heic-to@v1.6.2...v1.6.3

v1.6.2

Full Changelog: hoppergee/heic-to@v1.6.1...v1.6.2

v1.6.1

Full Changelog: hoppergee/heic-to@v1.6.0...v1.6.1

v1.6.0

... (truncated)

Commits
  • 78345a3 Bump to v1.6.7
  • b0cfc1f Upgrade libheif to v1.23.7
  • 1e6eaee Rename arrow parameter in primary image lookup
  • 237b1e9 Merge pull request #36 from mkantautas/fix/primary-image
  • 6ef32b6 fix: convert the primary image of multi-image HEIF files
  • 4045b8d Bump to v1.6.6
  • 3509f60 Upgrade libheif to v1.23.6
  • 2248383 Merge pull request #34 from davidhu2000/perf/read-heic-header-only
  • d9d400b Merge upstream/main into perf/read-heic-header-only
  • f6b3c42 Bump to 1.6.5
  • Additional commits viewable in compare view

Updates hono from 4.13.11 to 4.13.16

Release notes

Sourced from hono's releases.

v4.13.16

Security fixes

This release includes fixes for the following security issues:

mount() and app.mount() can forward a path that bypasses middleware scoped inside the mount prefix

Affects: mount() in hono/mount and app.mount(). A dynamic prefix such as /api/:tenant/* was removed by the length of the route pattern. The forwarded path was also re-normalized by the URL parser, so a decoded \ became / and .. collapsed. Both let a crafted request skip middleware scoped inside the mount prefix. Routes such as /assets* and duplicate parameter names now throw. GHSA-4m76-xfj5-7975

RegExpRouter skips wildcard middleware for certain route patterns and for paths with an encoded line terminator

Affects: RegExpRouter, including the default SmartRouter. Wildcard middleware was not applied in three cases: a parameter written as {[^/]+} in the middleware path only, a /prefix* route next to /prefix/* middleware, and a path with an encoded line terminator. RegExpRouter now covers the same routes as the other routers. Custom patterns that can match the empty string, such as {[0-9]*}, throw UnsupportedPathError. Regenerate PreparedRegExpRouter data. GHSA-h7mg-cq63-vhpq

validator('form') skips validation for multipart/form-data requests with extra parameters

Affects: validator('form') in hono/validator. A multipart/form-data request with an extra parameter such as charset was not recognized as a form. The validator then saw an empty object while the handler could read all fields. GHSA-4h7h-rv7c-7m2v

css helper does not escape a closing tag assembled from template parts and values, allowing HTML injection

Affects: css in hono/css. A </style> split between the template and a value, or between two values, was not escaped. Closing tags are now escaped after minification. GHSA-3gg2-335m-rxc6

csrf() does not check requests sent by hyperlink auditing (text/ping)

Affects: csrf() in hono/csrf. A POST sent by Chromium's <a ping> has the content type text/ping and was not checked against Origin and Sec-Fetch-Site. GHSA-46wx-v44x-9hh2

Users who rely on path-scoped middleware with mount(), wildcard middleware with the default router, validator('form'), the css helper with untrusted values, or csrf() are strongly encouraged to upgrade to this version.

What's Changed

  • fix(jwt): reject a signature segment outside the base64url alphabet and a header with crit in honojs/hono#5597

Full Changelog: honojs/hono@v4.13.15...v4.13.16

v4.13.15

What's Changed

Full Changelog: honojs/hono@v4.13.14...v4.13.15

v4.13.14

What's Changed

... (truncated)

Commits
  • c91b60a 4.13.16
  • e1dd588 fix(jwt): reject a signature segment outside the base64url alphabet and a hea...
  • bf16471 Merge commit from fork
  • d88fab3 Merge commit from fork
  • 34f9043 Merge commit from fork
  • 8a103aa Merge commit from fork
  • 15bbd96 Merge commit from fork
  • 3cb29de 4.13.15
  • 17ad0e2 fix(context): allow c.header() after the response body is consumed (#5587)
  • ee88684 docs(contributing): drop the note about linking a fork branch (#5593)
  • Additional commits viewable in compare view

Updates jsonwebtoken from 9.0.2 to 9.0.3

Changelog

Sourced from jsonwebtoken's changelog.

9.0.3 - 2025-12-04

  • updates jws version to 4.0.1.
Commits

Updates papaparse from 5.5.3 to 5.7.0

Release notes

Sourced from papaparse's releases.

5.7.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

Add the `downloadTimeout` option to abort slow remote requests after a configurable duration (https://github.com/mholt/PapaParse/pull/1138)

Thanks @​Kocayilmaz for contributing it

5.6.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

  • Remove jQuery as dependency (#1137)

Thanks @​Kocayilmaz for contributing it

Changelog

Sourced from papaparse's changelog.

5.7.0

Features

  • Add the downloadTimeout option to abort slow remote requests after a configurable duration (#1138, #786)

5.6.1

Bug Fixes

  • Call transformHeader only once per header in streaming mode (#1130)
  • Prevent header de-duplication from running again after resuming parsing (#1135)

5.6.0

Features

  • Remove the optional jQuery plugin integration (#1137)

5.5.5

Bug Fixes

  • Improve automatic delimiter detection by prioritizing row consistency over field count (#1128, #1077)
  • Serialize dates with Date.toISOString(), preserving expanded years and writing invalid dates as empty fields (#1140)

5.5.4

Bug Fixes

  • Strip the byte order mark (BOM) from header column names
  • Correctly quote and escape custom quote characters when unparsing (#1124, #1068)

Maintenance

  • Update supported Node.js versions in CI (#1097)
  • Document Papa.BYTE_ORDER_MARK (#1096)
  • Add regression coverage for renamedHeaders with duplicate headers (#1024, #1102)
  • Use HTTPS for README links (#1104)
Commits
  • 555c1c1 Minor version bump
  • a5cc2dc Patch version bump
  • 29e3a09 Add downloadTimeout option to abort slow remote requests (#1138)
  • 2e20001 Use tabs for identation on comment
  • b98bd0e Simplify comments
  • a869cd9 Fix header de-duplication re-running on every resumed row (#1135)
  • b3b6a64 Remove coment describing old behaviour
  • 8dd3318 call transformHeader once per header in streaming mode (#1130)
  • e6c2b7b Update CHANGELOG
  • bc382b7 Minor version bump
  • Additional commits viewable in compare view

Updates react-virtuoso from 4.18.3 to 4.18.20

Release notes

Sourced from react-virtuoso's releases.

react-virtuoso@4.18.20

Patch Changes

  • #1553 cc5d11e Thanks @​petyosi! - Fixed initialTopMostItemIndex and scrollToIndex having no effect inside VirtuosoMockContext. The scroller now reports the requested scroll position directly, so the list renders the target items in tests instead of staying empty or starting from the first item.

react-virtuoso@4.18.19

Patch Changes

react-virtuoso@4.18.18

Patch Changes

  • #1521 c923e6d Thanks @​cpruijsen! - Fixed GroupedVirtuoso calling computeItemKey and itemContent with a non-existent item index when all groups are empty (e.g. groupCounts={[0]}) or when initialTopMostItemIndex is LAST. The initial size probe now stays within the existing items, and probes only the group headers when there are no items. When the empty groups later receive items, the size state is reset, so the list measures a group header and an item again instead of sizing every item as a header.

react-virtuoso@4.18.17

Patch Changes

  • #1520 e519b85 Thanks @​cpruijsen! - Fixed endReached receiving an index that includes the group headers in GroupedVirtuoso and GroupedTableVirtuoso. The callback now receives the index of the last real item - e.g. 499 instead of 522 for a list of 500 items with 23 groups. If your endReached handler subtracts the group count from the index as a workaround, remove that adjustment. endReached no longer fires when every group is empty.

react-virtuoso@4.18.16

Patch Changes

  • #1512 b7238f3 Thanks @​cpruijsen! - Map skipAnimationFrameInResizeObserver through TableVirtuoso's urx optional props so the table resize observer consumes it instead of leaving the leftover prop on the scroller DOM.

react-virtuoso@4.18.15

Patch Changes

  • #1461 364c071 Thanks @​aehmt! - Fixed "Zero-sized element, this should not happen" error when initialItemCount exceeds the available data. The initial list state builder now clamps the item count to the data remaining after initialTopMostItemIndex, and renders no items when data is explicitly empty, preventing phantom items with undefined data from being rendered. initialItemCount also became a reactive input of the list state computation, so changing it after mount recomputes the list instead of leaving stale state until an unrelated update.

react-virtuoso@4.18.14

Patch Changes

  • #1497 ac8a5f4 Thanks @​cpruijsen! - Allow a custom List wrapper to render a ul instead of a div, keeping its forwarded ref typed to the chosen element. Item is unchanged.

react-virtuoso@4.18.13

Patch Changes

  • #1493 d3c437e Thanks @​albertcalasanzs! - Fix the transcript blanking for a frame when an older page is prepended.

    The compensation for a prepend was a deviation that grows the content followed, one requestAnimationFrame later, by the scroll that cancels it. In between there is a painted frame in which the list is displaced by the whole page — and because prepends fire near scrollTop 0, that displacement is the entire viewport.

    The scroll now runs as soon as the renderer acknowledges, from a layout effect, that the deviation has reached the DOM: after the mutation, before paint. Both land in the same paint, and because the content has already grown the scroll can no longer be clamped to the old maximum. If nothing acknowledges by the next frame the previous deferred behaviour still applies, so the worst case is unchanged.

... (truncated)

Changelog

Sourced from react-virtuoso's changelog.

4.18.20

Patch Changes

  • #1553 cc5d11e Thanks @​petyosi! - Fixed initialTopMostItemIndex and scrollToIndex having no effect inside VirtuosoMockContext. The scroller now reports the requested scroll position directly, so the list renders the target items in tests instead of staying empty or starting from the first item.

4.18.19

Patch Changes

4.18.18

Patch Changes

  • #1521 c923e6d Thanks @​cpruijsen! - Fixed GroupedVirtuoso calling computeItemKey and itemContent with a non-existent item index when all groups are empty (e.g. groupCounts={[0]}) or when initialTopMostItemIndex is LAST. The initial size probe now stays within the existing items, and probes only the group headers when there are no items. When the empty groups later receive items, the size state is reset, so the list measures a group header and an item again instead of sizing every item as a header.

4.18.17

Patch Changes

  • #1520 e519b85 Thanks @​cpruijsen! - Fixed endReached receiving an index that includes the group headers in GroupedVirtuoso and GroupedTableVirtuoso. The callback now receives the index of the last real item - e.g. 499 instead of 522 for a list of 500 items with 23 groups. If your endReached handler subtracts the group count from the index as a workaround, remove that adjustment. endReached no longer fires when every group is empty.

4.18.16

Patch Changes

  • #1512 b7238f3 Thanks @​cpruijsen! - Map skipAnimationFrameInResizeObserver through TableVirtuoso's urx optional props so the table resize observer consumes it instead of leaving the leftover prop on the scroller DOM.

4.18.15

Patch Changes

  • #1461 364c071 Thanks @​aehmt! - Fixed "Zero-sized element, this should...

    Description has been truncated

@dependabot
dependabot Bot requested a review from theredstring as a code owner October 30, 2026 07:12
@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-15ce61bd7d branch 2 times, most recently from 06aa1aa to b88e2b6 Compare November 6, 2026 07:02
@dependabot
deps: bump the npm-minor-and-patch group across 1 directory with 23 u…
ec60f0b 
…pdates

Bumps the npm-minor-and-patch group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@octokit/rest](https://github.com/octokit/rest.js) | `22.0.0` | `22.0.1` |
| [@rdfjs/parser-n3](https://github.com/rdfjs-base/parser-n3) | `2.1.0` | `2.2.0` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [electron-log](https://github.com/megahertz/electron-log) | `5.4.3` | `5.4.4` |
| [electron-updater](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-updater) | `6.8.9` | `6.8.11` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.7.3` |
| [heic-to](https://github.com/hoppergee/heic-to) | `1.5.2` | `1.6.7` |
| [hono](https://github.com/honojs/hono) | `4.13.11` | `4.13.16` |
| [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.2` | `9.0.3` |
| [papaparse](https://github.com/mholt/PapaParse) | `5.5.3` | `5.7.0` |
| [react-virtuoso](https://github.com/petyosi/react-virtuoso/tree/HEAD/packages/react-virtuoso) | `4.18.3` | `4.18.20` |
| [sparql-http-client](https://github.com/rdf-ext/sparql-http-client) | `3.0.1` | `3.1.0` |
| [use-debounce](https://github.com/xnimorz/use-debounce) | `10.0.5` | `10.1.1` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.3` | `5.1.0` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260929.1` | `5.20261106.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.65.0` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.8` |
| [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `26.15.3` | `26.18.0` |
| [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.35.0` | `7.37.5` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.11` | `0.5.7` |
| [wait-on](https://github.com/jeffbski/wait-on) | `9.0.3` | `9.5.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.144.0` | `4.158.0` |



Updates `@octokit/rest` from 22.0.0 to 22.0.1
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](octokit/rest.js@v22.0.0...v22.0.1)

Updates `@rdfjs/parser-n3` from 2.1.0 to 2.2.0
- [Commits](rdfjs-base/parser-n3@v2.1.0...v2.2.0)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `electron-log` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/megahertz/electron-log/blob/master/CHANGELOG.md)
- [Commits](megahertz/electron-log@v5.4.3...v5.4.4)

Updates `electron-updater` from 6.8.9 to 6.8.11
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-updater@6.8.11/packages/electron-updater/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-updater@6.8.11/packages/electron-updater)

Updates `express-rate-limit` from 8.5.2 to 8.7.3
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.7.3)

Updates `heic-to` from 1.5.2 to 1.6.7
- [Release notes](https://github.com/hoppergee/heic-to/releases)
- [Commits](hoppergee/heic-to@v1.5.2...v1.6.7)

Updates `hono` from 4.13.11 to 4.13.16
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.11...v4.13.16)

Updates `jsonwebtoken` from 9.0.2 to 9.0.3
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jsonwebtoken@v9.0.2...v9.0.3)

Updates `papaparse` from 5.5.3 to 5.7.0
- [Release notes](https://github.com/mholt/PapaParse/releases)
- [Changelog](https://github.com/mholt/PapaParse/blob/master/CHANGELOG.md)
- [Commits](mholt/PapaParse@5.5.3...5.7.0)

Updates `react-virtuoso` from 4.18.3 to 4.18.20
- [Release notes](https://github.com/petyosi/react-virtuoso/releases)
- [Changelog](https://github.com/petyosi/react-virtuoso/blob/main/packages/react-virtuoso/CHANGELOG.md)
- [Commits](https://github.com/petyosi/react-virtuoso/commits/react-virtuoso@4.18.20/packages/react-virtuoso)

Updates `sparql-http-client` from 3.0.1 to 3.1.0
- [Changelog](https://github.com/rdf-ext/sparql-http-client/blob/master/CHANGELOG.md)
- [Commits](rdf-ext/sparql-http-client@v3.0.1...v3.1.0)

Updates `use-debounce` from 10.0.5 to 10.1.1
- [Release notes](https://github.com/xnimorz/use-debounce/releases)
- [Changelog](https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xnimorz/use-debounce/commits)

Updates `zustand` from 5.0.3 to 5.1.0
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.3...v5.1.0)

Updates `@cloudflare/workers-types` from 5.20260929.1 to 5.20261106.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@playwright/test` from 1.63.0 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.65.0)

Updates `@testing-library/react` from 16.3.0 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.0...v16.3.3)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.8
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.8)

Updates `electron-builder` from 26.15.3 to 26.18.0
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-builder@26.18.0/packages/electron-builder/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.18.0/packages/electron-builder)

Updates `eslint-plugin-react` from 7.35.0 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.35.0...v7.37.5)

Updates `eslint-plugin-react-refresh` from 0.4.11 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.11...v0.5.7)

Updates `wait-on` from 9.0.3 to 9.5.1
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v9.0.3...v9.5.1)

Updates `wrangler` from 4.144.0 to 4.158.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.158.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20261027.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@octokit/rest"
  dependency-version: 22.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@rdfjs/parser-n3"
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: electron-builder
  dependency-version: 26.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: electron-log
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: electron-updater
  dependency-version: 6.8.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: eslint-plugin-react
  dependency-version: 7.37.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: express-rate-limit
  dependency-version: 8.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: heic-to
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: hono
  dependency-version: 4.13.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: jsonwebtoken
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: papaparse
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react-virtuoso
  dependency-version: 4.18.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: sparql-http-client
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: use-debounce
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: wait-on
  dependency-version: 9.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: wrangler
  dependency-version: 4.153.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: zustand
  dependency-version: 5.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-15ce61bd7d branch from b88e2b6 to ec60f0b Compare November 9, 2026 23:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@theredstring theredstring Awaiting requested review from theredstring theredstring is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants