Skip to content

chore(deps): bump the web-components-prod group across 1 directory with 7 updates - #490

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web-components/web-components-prod-94fe6b0179
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web-components/web-components-prod-94fe6b0179

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-components-prod group with 6 updates in the /web-components directory:

Package From To
@napi-rs/canvas 1.0.0 1.0.8
@rrweb/replay 2.0.0 2.1.1
@types/lodash 4.17.24 4.17.25
date-fns 4.3.0 4.4.0
monaco-editor 0.55.1 0.56.0
vite 8.0.16 8.2.2

Updates @napi-rs/canvas from 1.0.0 to 1.0.8

Release notes

Sourced from @​napi-rs/canvas's releases.

v1.0.8

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.7...v1.0.8

v1.0.7

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.6...v1.0.7

v1.0.6

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.5...v1.0.6

v1.0.5

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.4...v1.0.5

v1.0.4

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.3...v1.0.4

v1.0.3

What's Changed

... (truncated)

Changelog

Sourced from @​napi-rs/canvas's changelog.

1.0.8 (2026-08-24)

Bug Fixes

  • capture call-time snapshot in async encode APIs (#1313) (#1323) (18c52bf)
  • snapshot canvas source in drawImage to avoid per-call pixel copy (#1325) (d98574c)

1.0.7 (2026-08-18)

Bug Fixes

  • putImageData no longer inherits transform/clip after getImageData (#1320) (8ed2b59)

Performance Improvements

  • fast getImageData readback with runtime-dispatched SIMD unpremultiply (#1319) (196bff9)

1.0.6 (2026-08-13)

Bug Fixes

1.0.5 (2026-08-09)

Bug Fixes

1.0.4 (2026-08-01)

Bug Fixes

  • shadow: restore blur rendering performance (#1305) (4dddd0d)

1.0.3 (2026-07-28)

Bug Fixes

  • deps: update rust crate imagesize to 0.15 (#1290) (2ad119e)
  • deps: update rust crate infer to 0.22 (#1294) (dc3377f)
  • shadow: align Canvas2D shadows with Chromium (#1300) (5646339)
  • shadow: apply shadowColor alpha once instead of squaring it (#1298) (2cd4e1a), closes #1297

Features

... (truncated)

Commits
  • 95db9ae 1.0.8
  • d98574c fix: snapshot canvas source in drawImage to avoid per-call pixel copy (#1325)
  • a7878df chore(deps): update rust to v1.98.0 (#1324)
  • d651130 chore(deps): update dependency canvaskit-wasm to ^0.42.0 (#1322)
  • dc8aef3 chore: preapporve canvaskit-wasm
  • 18c52bf fix: capture call-time snapshot in async encode APIs (#1313) (#1323)
  • 062130c 1.0.7
  • 8ed2b59 fix: putImageData no longer inherits transform/clip after getImageData (#1320)
  • 196bff9 perf: fast getImageData readback with runtime-dispatched SIMD unpremultiply (...
  • 25ed3f2 1.0.6
  • Additional commits viewable in compare view

Updates @rrweb/replay from 2.0.0 to 2.1.1

Release notes

Sourced from @​rrweb/replay's releases.

@​rrweb/replay@​2.1.1

Patch Changes

  • Updated dependencies []:
    • rrweb@2.1.1
    • @​rrweb/types@​2.1.1

@​rrweb/replay@​2.1.0

Patch Changes

@​rrweb/replay@​2.0.1

Patch Changes

  • Updated dependencies [5f52d63]:
    • rrweb@2.0.1
    • @​rrweb/types@​2.0.1
Commits
  • 3deb6e7 Version Packages (#1902)
  • a11f8ef Update vite config to prevent Svelte's SSR lifecycle stubs being bundled (#1901)
  • c382034 Version Packages (#1889)
  • 9121622 Update Changesets dependencies (#1890)
  • fea1f32 Update branch reference from master to main
  • e5ba492 Change default branch from 'master' to 'main'
  • 84a4e11 Add experimental options to config.json (#1888)
  • 14f10ab Change base branch from 'master' to 'main'
  • b488929 [docs] Fix plugin api emit syntax (#1886)
  • 4e501fd Make autostart and includePii attributes optional as is defined in docs (#1885)
  • Additional commits viewable in compare view

Updates @rrweb/types from 2.0.0 to 2.1.1

Release notes

Sourced from @​rrweb/types's releases.

@​rrweb/types@​2.1.1

No release notes provided.

@​rrweb/types@​2.1.0

Minor Changes

@​rrweb/types@​2.0.1

No release notes provided.

Commits
  • 3deb6e7 Version Packages (#1902)
  • a11f8ef Update vite config to prevent Svelte's SSR lifecycle stubs being bundled (#1901)
  • c382034 Version Packages (#1889)
  • 9121622 Update Changesets dependencies (#1890)
  • fea1f32 Update branch reference from master to main
  • e5ba492 Change default branch from 'master' to 'main'
  • 84a4e11 Add experimental options to config.json (#1888)
  • 14f10ab Change base branch from 'master' to 'main'
  • b488929 [docs] Fix plugin api emit syntax (#1886)
  • 4e501fd Make autostart and includePii attributes optional as is defined in docs (#1885)
  • Additional commits viewable in compare view

Updates @types/lodash from 4.17.24 to 4.17.25

Commits

Updates date-fns from 4.3.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • See full diff in compare view

Updates monaco-editor from 0.55.1 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

  • #5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website
  • #5396: Release Monaco Editor 0.56.0
  • #5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples
  • #5379: Removes leftover debugger statements.
  • #5376: fixes pipeline
  • #5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples
  • #5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website
  • #5371: Bump undici from 7.24.7 to 7.28.0
  • #5372: Fixes CI
  • #5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples
  • #5362: Bump @​babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react
  • #5361: Bump js-yaml from 4.1.1 to 4.2.0
  • #5360: Bump vite from 7.3.2 to 7.3.5
  • #5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples
  • #5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client
  • #5357: Bump esbuild and vite in /samples/browser-esm-vite-react
  • #5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website
  • #5333: Bump dompurify from 3.2.7 to 3.4.5
  • #5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"
  • #5337: Bump qs from 6.14.2 to 6.15.2
  • #5338: Bump qs and express in /samples
  • #5336: Bump qs and express in /website
  • #5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website
  • #5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client
  • #5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples
  • #5326: Run npm audit fix and update lockfile
  • #5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react
  • #5322: Bump postcss from 8.5.6 to 8.5.14 in /website
  • #5320: Bump @​babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react
  • #5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin
  • #5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples
  • #5316: Bump fast-uri from 3.1.0 to 3.1.2
  • #5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website
  • #5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react
  • #5313: Bump postcss from 8.4.31 to 8.5.13 in /samples
  • #5308: Bump postcss from 8.5.6 to 8.5.12
  • #5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin
  • #5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples
  • #5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website
  • #5299: Bump follow-redirects from 1.15.6 to 1.16.0
  • #5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react
  • #5293: Bump lodash from 4.17.23 to 4.18.1 in /website
  • #5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

  • Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:
    • all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;
    • all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;
    • the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.
  • Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.
  • Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

  • Adds editor.doubleClickSelectsBlock.
  • Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.
  • Adds offWhenInlineCompletions to QuickSuggestionsValue.
  • Adds model and provider option support to inline completion providers.
  • Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.
  • Adds advanced-external and advanced-wasm diff algorithms.
  • Exposes typed native LSP client and transport APIs.

Fixes

  • Treats Markdown returned by language servers as untrusted (#5280).
  • Updates the editor core to the version used by 0.56.0-dev-20260625.
Commits
  • 13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
  • b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
  • 9d053ab Improve Monaco Editor 0.56.0 changelog
  • 0ba33d0 Release Monaco Editor 0.56.0
  • 6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
  • d8c9ff0 Removes leftover debugger statements. (#5379)
  • 59285ab fixes pipeline (#5376)
  • aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
  • d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
  • 874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
  • Additional commits viewable in compare view

Updates vite from 8.0.16 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

  • deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

  • bundled-dev: handle lazy request error (#23291) (3ba026d)
  • bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
  • config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
  • css: don't pass empty targets to lightningcss (#23295) (2804636)
  • define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
  • deps: update all non-major dependencies (#23217) (ba958bd)
  • deps: update rolldown-related dependencies (#23218) (83ecb2c)
  • module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
  • optimizer: close custom extension analysis bundles (#23207) (8fb7675)
  • reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
  • respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
  • ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
  • vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

Miscellaneous Chores

Code Refactoring

  • use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
  • use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

  • define: close rolldown bundler after generate (#23231) (b4d66fe)
  • module-runner: add TLA circular import case (#23299) (4a261f2)
  • module-runner: simplify server-hmr tests (#23300) (599b44b)
  • ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

  • use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

8.2.1 (2026-08-06)

Bug Fixes

  • build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
  • bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)

... (truncated)

Commits
  • de1111a release: v8.2.2
  • cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
  • 9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
  • 8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
  • 05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
  • 495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
  • 1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
  • 2804636 fix(css): don't pass empty targets to lightningcss (#23295)
  • 599b44b test(module-runner): simplify server-hmr tests (#23300)
  • 4a261f2 test(module-runner): add TLA circular import case (#23299)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web-components/web-components-prod-94fe6b0179 branch 5 times, most recently from 3f4ad09 to 3adc53e Compare August 17, 2026 08:35
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web-components/web-components-prod-94fe6b0179 branch from 3adc53e to 33fa50a Compare August 24, 2026 08:35
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web-components/web-components-prod-94fe6b0179 branch 2 times, most recently from 3d75599 to 3189b81 Compare September 7, 2026 08:34
…th 7 updates

Bumps the web-components-prod group with 6 updates in the /web-components directory:

| Package | From | To |
| --- | --- | --- |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `1.0.0` | `1.0.8` |
| [@rrweb/replay](https://github.com/rrweb-io/rrweb) | `2.0.0` | `2.1.1` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.24` | `4.17.25` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.3.0` | `4.4.0` |
| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.56.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.2.2` |



Updates `@napi-rs/canvas` from 1.0.0 to 1.0.8
- [Release notes](https://github.com/Brooooooklyn/canvas/releases)
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md)
- [Commits](Brooooooklyn/canvas@v1.0.0...v1.0.8)

Updates `@rrweb/replay` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/rrweb-io/rrweb/releases)
- [Changelog](https://github.com/rrweb-io/rrweb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rrweb-io/rrweb/compare/@rrweb/replay@2.0.0...@rrweb/replay@2.1.1)

Updates `@rrweb/types` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/rrweb-io/rrweb/releases)
- [Changelog](https://github.com/rrweb-io/rrweb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rrweb-io/rrweb/compare/@rrweb/types@2.0.0...@rrweb/types@2.1.1)

Updates `@types/lodash` from 4.17.24 to 4.17.25
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `date-fns` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.3.0...v4.4.0)

Updates `monaco-editor` from 0.55.1 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.55.1...v0.56.0)

Updates `vite` from 8.0.16 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

---
updated-dependencies:
- dependency-name: "@napi-rs/canvas"
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-components-prod
- dependency-name: "@rrweb/replay"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: "@rrweb/types"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: "@types/lodash"
  dependency-version: 4.17.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-components-prod
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: monaco-editor
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: vite
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web-components/web-components-prod-94fe6b0179 branch from 3189b81 to 3187dee Compare September 7, 2026 10:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants