Bump the javascript-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the javascript-dependencies group with 7 updates in the / directory:

Package	From	To
@codemirror/commands	6.10.4	6.11.0
@codemirror/view	6.43.8	6.43.9
highlight.js	11.11.2	11.12.0
solid-js	1.9.14	1.9.15
typescript	5.8.3	7.0.2
vite	7.3.6	8.2.2
vitest	4.1.10	4.1.11

Updates @codemirror/commands from 6.10.4 to 6.11.0

Commits

• See full diff in compare view

Updates @codemirror/view from 6.43.8 to 6.43.9

Commits

• See full diff in compare view

Updates highlight.js from 11.11.2 to 11.12.0

Release notes

Sourced from highlight.js's releases.

v11.12.0 - Summer, hot and rainy.

Parser Engine:

• fix(parser) count named capture groups when rewriting backreferences [spokodev][]

New Grammars:

• add FreeDesktop config file (.desktop / systemd) grammar [gg582][]
• added 3rd party Cedar grammar to SUPPORTED_LANGUAGES [Dhruv Maniya][]
• added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES [jiaopengzi][]
• added 3rd party Djot grammar to SUPPORTED_LANGUAGES [Mark Scherer][]
• added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES [Ryne Andal][]
• added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES [Lehlogonolo Poole][]
• added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES [Romain Beauxis][]
• added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES [Kaida-Amethyst][]
• added 3rd party Pkl grammar to SUPPORTED_LANGUAGES [Dan Chao][]
• added 3rd party RAScript grammar to SUPPORTED_LANGUAGES [Joshua Raphael][]
• added 3rd party Veryl grammar to SUPPORTED_LANGUAGES [Naoya Hatta][]
• added 3rd party Why3 grammar to SUPPORTED_LANGUAGES [JGalego][]
• added 3rd party Xojo grammar to SUPPORTED_LANGUAGES [patricksalo][]
• referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES [Styx0x6][]

Core Grammars:

• fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 [Mark Xian][]
• fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 [Jayesh Bhade][]
• fix(c, cpp) scope angle-bracket header string to #include, issue #3505 [Pablo][]
• fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 [David Pavlovschii][]
• enh(cmake) add block and endblock keywords [Anonymous Maarten][]
• fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 [Mark Xian][]
• fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 [Mark Xian][]
• fix(crystal) stop treating integer division // as a regex literal [Zain Asif][]
• enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 [Sarath Francis][]
• enh(css) add corner-shape properties [Hama Tanveer][]
• enh(css) support six-digit unicode-range values [Konstantin Baltsat][]
• enh(dart) add highlighting for class and function names [guuido][]
• enh(dns) highlight registered CAA property tags, issue #4475 [Joey Huang][]
• enh(dns) improve grammar: character strings, TXT, classes, escapes, addresses [Checconio][]
• enh(dos) add batch as an alias, issue #4395 [Hashim Khan][]
• enh(gherkin) update keyword list [Hirse][]
• enh(gherkin) variables can't contain whitespace [Hirse][]
• enh(gherkin) docstrings can use backticks [Hirse][]
• enh(go) recognize binary integer literals [spokodev][]
• enh(groovy) support underscores in numeric literals [greymoth][]
• fix(haskell) highlight where in GADT and closed type-family declarations, issue #3753 [Konstantin Baltsat][]
• enh(java) improve detection of types, including generic and array types [Hannes Wallnoefer][]
• enh(javascript) add self to built-in variables [Dsaquel][]
• enh(kotlin) add ktm and ktx aliases [DarkMatter-999][]
• fix(leaf) fix bug in Leaf keyword highlighting [Francesco Paolo Severino][]
• fix(lisp) preserve highlighting after quoted multiplication expressions [arturict][]

... (truncated)

Changelog

Sourced from highlight.js's changelog.

Version 11.12.0

Parser Engine:

• fix(parser) count named capture groups when rewriting backreferences [spokodev][]

New Grammars:

• add FreeDesktop config file (.desktop / systemd) grammar [gg582][]
• added 3rd party Cedar grammar to SUPPORTED_LANGUAGES [Dhruv Maniya][]
• added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES [jiaopengzi][]
• added 3rd party Djot grammar to SUPPORTED_LANGUAGES [Mark Scherer][]
• added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES [Ryne Andal][]
• added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES [Lehlogonolo Poole][]
• added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES [Romain Beauxis][]
• added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES [Kaida-Amethyst][]
• added 3rd party Pkl grammar to SUPPORTED_LANGUAGES [Dan Chao][]
• added 3rd party RAScript grammar to SUPPORTED_LANGUAGES [Joshua Raphael][]
• added 3rd party Veryl grammar to SUPPORTED_LANGUAGES [Naoya Hatta][]
• added 3rd party Why3 grammar to SUPPORTED_LANGUAGES [JGalego][]
• added 3rd party Xojo grammar to SUPPORTED_LANGUAGES [patricksalo][]
• referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES [Styx0x6][]

Core Grammars:

• fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 [Mark Xian][]
• fix(c) do not highlight C++ std types as built-ins, issue #4103 [Arron Zou][]
• fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 [Jayesh Bhade][]
• fix(c, cpp) scope angle-bracket header string to #include, issue #3505 [Pablo][]
• fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 [David Pavlovschii][]
• enh(cmake) add block and endblock keywords [Anonymous Maarten][]
• fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 [Mark Xian][]
• fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 [Mark Xian][]
• fix(crystal) stop treating integer division // as a regex literal [Zain Asif][]
• enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 [Sarath Francis][]
• enh(css) add corner-shape properties [Hama Tanveer][]
• enh(css) support six-digit unicode-range values [Konstantin Baltsat][]
• enh(dart) add highlighting for class and function names [guuido][]
• enh(dns) highlight registered CAA property tags, issue #4475 [Joey Huang][]
• enh(dns) improve grammar: character strings, TXT, classes, escapes, addresses [Checconio][]
• enh(dos) add batch as an alias, issue #4395 [Hashim Khan][]
• enh(gherkin) update keyword list [Hirse][]
• enh(gherkin) variables can't contain whitespace [Hirse][]
• enh(gherkin) docstrings can use backticks [Hirse][]
• enh(go) recognize binary integer literals [spokodev][]
• enh(groovy) support underscores in numeric literals [greymoth][]
• fix(haskell) highlight where in GADT and closed type-family declarations, issue #3753 [Konstantin Baltsat][]
• enh(java) improve detection of types, including generic and array types [Hannes Wallnoefer][]
• enh(javascript) add self to built-in variables [Dsaquel][]
• enh(kotlin) add ktm and ktx aliases [DarkMatter-999][]

... (truncated)

Commits

• f7f7d38 (release) release v11.12.0
• c4c4728 (docs) FreeDesktop + Kotlin aliases; note extra language override
• 9142292 bump version to 11.12.0
• 03d1e7e (chore) rebuild CHANGES.md for 11.12.0
• ca6bb8e enh(sqf) update to A3 v2.22 (#4460)
• 1414c96 fix: use Trusted Publishers in publishing pipeline (#4427)
• 2a9ad7d fix(markdown) don't treat a thematic break as the start of bold text (#4485)
• 375f3f4 build(deps-dev): bump @​rollup/plugin-commonjs from 28.0.1 to 29.0.3 (#4481)
• 2ce1706 build(deps-dev): bump del from 8.0.0 to 8.0.1 (#4484)
• 72084b5 fix(ruby): don't treat scope resolution :: as symbols (#4463)
• Additional commits viewable in compare view

Updates solid-js from 1.9.14 to 1.9.15

Commits

• See full diff in compare view

Updates typescript from 5.8.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

... (truncated)

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vite from 7.3.6 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

• deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

• bundled-dev: handle lazy request error (#23291) (3ba026d)
• bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
• config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
• css: don't pass empty targets to lightningcss (#23295) (2804636)
• define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
• deps: update all non-major dependencies (#23217) (ba958bd)
• deps: update rolldown-related dependencies (#23218) (83ecb2c)
• module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
• optimizer: close custom extension analysis bundles (#23207) (8fb7675)
• reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
• respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
• ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
• vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

• build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

• fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

• use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
• use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

• define: close rolldown bundler after generate (#23231) (b4d66fe)
• module-runner: add TLA circular import case (#23299) (4a261f2)
• module-runner: simplify server-hmr tests (#23300) (599b44b)
• ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

• use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

8.2.1 (2026-08-06)

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)

... (truncated)

Commits

• de1111a release: v8.2.2
• cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
• 9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
• 8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
• 05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
• 495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
• 1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
• 2804636 fix(css): don't pass empty targets to lightningcss (#23295)
• 599b44b test(module-runner): simplify server-hmr tests (#23300)
• 4a261f2 test(module-runner): add TLA circular import case (#23299)
• Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ulpaso	Ready	Preview	Aug 26, 2026 8:47pm