Skip to content

build(deps): bump the production-dependencies group with 9 updates - #31

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-56adc00a7b
Closed

build(deps): bump the production-dependencies group with 9 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-56adc00a7b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 9 updates:

Package From To
@capacitor/filesystem 8.1.2 8.1.3
@codemirror/commands 6.10.4 6.11.0
@codemirror/view 6.43.8 6.43.9
dompurify 3.4.13 3.4.14
jsxgraph 1.13.1 1.13.2
katex 0.16.47 0.18.4
mermaid 11.16.1 11.17.2
react 18.3.1 19.2.8
react-dom 18.3.1 19.2.8

Updates @capacitor/filesystem from 8.1.2 to 8.1.3

Release notes

Sourced from @​capacitor/filesystem's releases.

v8.1.3

8.1.3 (2026-08-19)

Bug Fixes

  • android: only apply kotlin-android plugin if not already applied (#83) (3de47a3)

This release is also available on:

v8.1.3-next.1

8.1.3-next.1 (2026-07-23)

This release is also available on:

Changelog

Sourced from @​capacitor/filesystem's changelog.

8.1.3 (2026-08-19)

Bug Fixes

  • android: only apply kotlin-android plugin if not already applied (#83) (3de47a3)
Commits
  • adc1899 chore(release): 8.1.3 [skip ci]
  • 3de47a3 fix(android): only apply kotlin-android plugin if not already applied (#83)
  • 73cde0d chore: force semantic release to release on chore
  • ecb604f chore(ci): Check every maven central version for android publish (#78)
  • 6ef910a docs: minor contributing guide improvements (#77)
  • 2fa6e16 chore(ci): use Xcode 26 (#76)
  • 7ba8af9 chore(ci): fix npm version being installed (#75)
  • See full diff in compare view

Updates @codemirror/commands from 6.10.4 to 6.11.0

Commits

Updates @codemirror/view from 6.43.8 to 6.43.9

Commits

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates jsxgraph from 1.13.1 to 1.13.2

Release notes

Sourced from jsxgraph's releases.

Release of v1.13.2

JSXGraph v1.13.2 is a patch release that resolves several bugs, and - somewhat unusual for a patch release - comes with a few new features and API changes.

The API changes are:

  • Homogeneous Coordinates: The methods surface3d.F and surface3d.evalF now return homogeneous coordinates. These are arrays in the form [1, x, y, z], making them compatible with 3D transformations.
  • JXG.appBox Configuration: The JXG.appBox feature (introduced in v1.13.0) now expects cssStyle instead of style as the key name for JSXGraph board attributes.

New features

  • curve.getCoords(): A new method that returns an array of coordinates for a curve.
  • 3D Enhancements:
    • The default style for 3D front planes has changed to a "frame style."
    • plane3d can now be triangulated.
    • Camera distance handling is now synchronized for both parallel and central projections.

Bug Fixes

  • 2D Plotting Regression: Clipping of curve screen coordinates has been reactivated and improved.
  • Other Fixes: Various issues have been resolved, including the correct handling of media query listeners.

For a complete list of changes, please refer to the CHANGELOG.

Enjoy, Alfred

Changelog

Sourced from jsxgraph's changelog.

1.13.2

API changes:

  • surface3d.F and surface3d.evalF return homogeneous coords
  • appBox - jsxgraph: {cssStyle: ... }, rename attribute from style to cssStyle

New features

  • Curve: new method getCoords
  • Change defaults: display box3d front planes as frames only - if visible

Improvements

  • surface3d, plane3d: allow ranges to contain functions as input for tiling
  • surface3d, plane3d: Enable dynamic colormaps for
  • Refactor handling of camera distance r (in 3D), synchronize handling von attribute r of view3d for parallel and central projection
  • Enable triangulation of planes
  • API docs
  • Type.evaluate: recurse into arrays
  • board.setAttribute() defaultAxes

Bug fixes

  • Plotting while the HTML div has display:none
  • Fix regression: clipping of curve screen coords (in SVG)
  • Curves with transposed input
  • JXG.GeometryElement3D.setAttribute()
  • Fix media query listener cleanup
Commits
  • 02b2fd4 Update cdnjs
  • 4223035 Release of v1.13.2
  • 74b9df2 CHANGELOG for upcoming v1.13.2
  • d09ada3 Fix regression: case view3d.r == 0
  • 66af727 Remove old example in tiling.js
  • f225515 Merge branch 'main' into develop
  • 6409140 Merge pull request #828 from HeyChengdu/codex/fix-media-query-listener-leak
  • 2c8f802 Add comments in colormap part
  • 87c4154 Enable triangulation of planes
  • e145fd9 Update examples in tiling.js
  • Additional commits viewable in compare view

Updates katex from 0.16.47 to 0.18.4

Release notes

Sourced from katex's releases.

v0.18.4

0.18.4 (2026-08-10)

Bug Fixes

v0.18.3

0.18.3 (2026-08-09)

Bug Fixes

v0.18.2

0.18.2 (2026-08-08)

Bug Fixes

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

v0.18.0

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

v0.17.0

0.17.0 (2026-05-22)

Performance Improvements

... (truncated)

Changelog

Sourced from katex's changelog.

0.18.4 (2026-08-10)

Bug Fixes

0.18.3 (2026-08-09)

Bug Fixes

0.18.2 (2026-08-08)

Bug Fixes

0.18.1 (2026-07-19)

Bug Fixes

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

0.17.0 (2026-05-22)

Performance Improvements

  • simplify defineFunction to avoid destructuring, improve typing (#4222) (fb604e6)

BREAKING CHANGES

... (truncated)

Commits
  • 49dc3d9 chore(release): 0.18.4 [ci skip]
  • e507f75 fix(environment): report invalid environment names as ParseError (#4256)
  • f0f46a8 chore(release): 0.18.3 [ci skip]
  • 1c973ae fix: allow braced arguments for delimsizing (#4255)
  • a11ce72 docs: update migration guide (#4248)
  • 95322e1 docs: add Deno section (#4254)
  • dd88e46 chore(deps): update dependency js-yaml to v4.3.1 [security] (#4263)
  • 93c362b chore(release): 0.18.2 [ci skip]
  • 0adf7e7 fix: prevent prototype pollution in settings (#4260)
  • 5a5bf20 chore(deps): update dependency postcss to v8.5.23 [security] (#4259)
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates mermaid from 11.16.1 to 11.17.2

Release notes

Sourced from mermaid's releases.

mermaid@11.17.2

Patch Changes

  • #8125 178d7c7 Thanks @​knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

mermaid@11.17.1

Patch Changes

  • #8092 31ce60a Thanks @​pbrolin47! - fix(c4): wrap element labels to c4.width again

    C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

  • #8088 c66200b Thanks @​ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

  • #8079 281cd7b Thanks @​ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

mermaid@11.17.0

Minor Changes

Patch Changes

  • #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

  • #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

  • #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

  • #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

  • #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

... (truncated)

Commits

Updates react from 18.3.1 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

19.2.3 (Dec 11, 2025)

React Server Components

19.2.2 (Dec 11, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates react-dom from 18.3.1 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

19.2.3 (Dec 11, 2025)

React Server Components

19.2.2 (Dec 11, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the production-dependencies group with 9 updates
f8ec58b 
Bumps the production-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/filesystem](https://github.com/ionic-team/capacitor-filesystem) | `8.1.2` | `8.1.3` |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.4` | `6.11.0` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.8` | `6.43.9` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [jsxgraph](https://github.com/jsxgraph/jsxgraph) | `1.13.1` | `1.13.2` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.4` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.1` | `11.17.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.8` |


Updates `@capacitor/filesystem` from 8.1.2 to 8.1.3
- [Release notes](https://github.com/ionic-team/capacitor-filesystem/releases)
- [Changelog](https://github.com/ionic-team/capacitor-filesystem/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor-filesystem@v8.1.2...v8.1.3)

Updates `@codemirror/commands` from 6.10.4 to 6.11.0
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/view` from 6.43.8 to 6.43.9
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `jsxgraph` from 1.13.1 to 1.13.2
- [Release notes](https://github.com/jsxgraph/jsxgraph/releases)
- [Changelog](https://github.com/jsxgraph/jsxgraph/blob/main/CHANGELOG.md)
- [Commits](jsxgraph/jsxgraph@v1.13.1...v1.13.2)

Updates `katex` from 0.16.47 to 0.18.4
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.18.4)

Updates `mermaid` from 11.16.1 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.1...mermaid@11.17.2)

Updates `react` from 18.3.1 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 18.3.1 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

---
updated-dependencies:
- dependency-name: "@capacitor/filesystem"
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: jsxgraph
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: katex
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mermaid
  dependency-version: 11.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 28, 2026
@adibhanna

adibhanna commented Aug 28, 2026

Copy link
Copy Markdown
Contributor

Closing: this bumps react/react-dom to 19 (and katex, mermaid, CodeMirror majors). The shell's React, its types, and every library app-core imports have to track the pinned ZenNotes source (.zennotes-commit, React 18 today) — a second React or diverging @types/react breaks the pinned-source typecheck, as CI showed (React.ReactNode is not assignable to ReactNode). These move together with the source pin, not via Dependabot; adding ignore rules for them.

@adibhanna adibhanna closed this Aug 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-56adc00a7b branch August 28, 2026 16:48
@adibhanna adibhanna mentioned this pull request Aug 28, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@adibhanna