build(deps): bump the npm-minor-and-patch group with 7 updates by dependabot[bot] · Pull Request #209 · SillyLittleTech/mentell

dependabot · 2026-09-28T18:47:23Z

Bumps the npm-minor-and-patch group with 7 updates:

Package	From	To
framer-motion	`13.4.0`	`13.4.4`
@tauri-apps/cli	`2.11.4`	`2.11.5`
@types/node	`26.6.1`	`26.6.2`
eslint	`10.10.0`	`10.11.0`
jsdom	`30.1.0`	`30.1.1`
typescript-eslint	`8.70.0`	`8.70.1`
vite	`8.3.0`	`8.3.1`

Updates framer-motion from 13.4.0 to 13.4.4

Changelog

Sourced from framer-motion's changelog.

[13.4.4] 2026-09-25

Changed

scroll: 44% smaller.

useScroll: 33% smaller.

Scroll callbacks: 50% faster.

Removed ScrollTimeline support for JS callbacks as benchmarked no improvement over scrollInfo.

Fixed

useDragControls: Fixed snapToCursor origin drift on repeated calls.

drag: Improved pointerend timing.

spring: Check invalid spring values before applying.

AnimatePresence: Ensure children don't stick during reentry.

[13.4.3] 2026-09-24

Fixed

<motion>: Ensure animations replay when Suspense reveals memoized content.

[13.4.2] 2026-09-23

Fixed

Reorder: Don't scale position of elements at origin 0 when dragConstraints changes.

Unrecognised easing names no longer throw.

[13.4.1] 2026-09-22

Fixed

animate: CSS variable writes on SVGs apply to style attribute.

Commits

33f6e72 v13.4.4
e50ec7b Updating changelog
6e98fce Fix spelling mistakes in code comments
a47d6f2 Fix AnimatePresence child stuck at initial after re-entering during exit (#3834)
164be2b v13.4.3
d2747a2 Updating changelog
720530a Merge pull request #3833 from motiondivision/cursor/bc-824bfd3c-7a94-4eee-be1...
7eb469a Fix #3832: Replay animations when Suspense reveals memoized motion content
be8a4b3 Add failing Cypress test for Suspense reveal of memoized content (#3832)
ef59724 Add failing tests for animations after Suspense reveals memoized content (#3832)
Additional commits viewable in compare view

Updates @tauri-apps/cli from 2.11.4 to 2.11.5

Release notes

Sourced from @tauri-apps/cli's releases.

@tauri-apps/cli v2.11.5

[2.11.5]

Security fixes

5a87bab12 Record the app version in the trusted comment of updater signatures, so a signed artifact is bound to the version it was released as.

An update endpoint response is not signed, and the signature only covers the downloaded artifact, so the announced version on its own does not prove which release the url and signature point at. minisign covers the trusted comment with its global signature, which lets the updater plugin compare the two and reject a response that pairs a version number with a different release. Enable requireSignedVersion in the updater plugin configuration to enforce this.

tauri build fills the version in automatically, and tauri plugin add updater now enables requireSignedVersion for the project it is adding the plugin to. tauri signer sign gains an --app-version flag for signing updater artifacts by hand, and warns when it is omitted.

Dependencies

Upgraded to [email protected]

Commits

9452dde fix audit
7c2fe9f run covector version
7d71a8a add publish-hotfix workflow
5a87bab Merge commit from fork
e901f1d Merge commit from fork
7cd7136 apply version updates (#15632)
44594d6 Revert "fix(deps): pin time to <0.3.52" (#15631)
ca90b46 apply version updates (#15621)
ba865f2 fix(windows): dpi getter leaks HDC handles (#15614)
0299da0 fix(deps): pin time to <0.3.52 (#15616)
Additional commits viewable in compare view

Updates @types/node from 26.6.1 to 26.6.2

Commits

See full diff in compare view

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)

397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)

d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)

b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)

26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)

6c789ff docs: Update README (GitHub Actions Bot)

5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)

92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)

9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])

24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)

45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])

ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)

c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)

f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)

fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

Commits

3c0b7c6 10.11.0
321f0a7 Build: changelog update for 10.11.0
520dd77 perf: Implement fast paths in critical areas (#21210)
9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
24310e3 chore: update ecosystem plugins (#21324)
d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
Additional commits viewable in compare view

Updates jsdom from 30.1.0 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@asamuzaK)

Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@asamuzaK)

Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@asamuzaK)

Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@scttcper)

Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@FedgeNo)

Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@FedgeNo)

Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.

Fixed the storageQuota option being ignored by frames.

Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.

Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@FedgeNo)

Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.

Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.

Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@asamuzaK)

Commits

0a117f4 30.1.1
103f67d Remove unnecessary window cleanup from API tests
cdda00a Test HTTP/2 document and subresource loading
7ab92ce Update @asamuzakjp/dom-selector to v9.2.1
d940c20 Share jsdom settings across descendant windows
6ba40cb Fix and simplify option propagation
3b3be70 Preserve CSS priorities across declaration updates
97b2758 Align focusing and unfocusing with HTML
b7b460b Update w3c-xmlserializer to v6
71d562f Update html-encoding-sniffer to v7
Additional commits viewable in compare view

Updates typescript-eslint from 8.70.0 to 8.70.1

Release notes

Sourced from typescript-eslint's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

ast-spec: narrow import attribute keys to identifiers and strings (#12879)

eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)

eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)

eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)

eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)

eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)

eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)

eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)

eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)

eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)

eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)

eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)

eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)

eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)

rule-tester: test the final autofix output instead of the first pass (#12867)

scope-manager: merge implicit global definitions (#12809)

type-utils: match package specifiers on whole path components (#12838)

typescript-estree: resolve symlinked paths when matching files to projects (#12725)

typescript-estree: add missing < token opening type arguments (#12821)

typescript-estree: require string literal import attribute values (#12894)

website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

Amin @amiin-dev

Brad Zacher @bradzacher

Cameron

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Grit @Grit03

Hugo @hugop95

Josh Goldberg ✨

Michael Naumov @mnaoumov

Mikhail Baev @baevm

Om Rawat

overlookmotel

Sanath @sansynx

Shinji

stoicism @stoicism02

Vinccool96

Younsang Na @nayounsang

김채영 @cchaeyoung

송재욱

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

23d38ce chore(release): publish 8.70.1
eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
8c80531 chore: fix typos in comments and docs (#12846)
b6b86a1 chore: migrate to nx 23.2.0 (#12843)
See full diff in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)

server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)

sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)

optimizer: add debug log when waiting for dep before init (#23566) (63567c7)

update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)

remove duplicate configurations (#23532) (9abd99b)

replace find with some (#23554) (af7cdf6)

Commits

39ddf7c release: v8.3.1 (#23573)
f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
e8990c4 fix(deps): update all non-major dependencies (#23537)
af7cdf6 refactor: replace find with some (#23554)
39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
9abd99b refactor: remove duplicate configurations (#23532)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-and-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [framer-motion](https://github.com/motiondivision/motion) | `13.4.0` | `13.4.4` | | [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.11.4` | `2.11.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.1` | `26.6.2` | | [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` | | [jsdom](https://github.com/jsdom/jsdom) | `30.1.0` | `30.1.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.70.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` | Updates `framer-motion` from 13.4.0 to 13.4.4 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v13.4.0...v13.4.4) Updates `@tauri-apps/cli` from 2.11.4 to 2.11.5 - [Release notes](https://github.com/tauri-apps/tauri/releases) - [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.11.4...@tauri-apps/cli-v2.11.5) Updates `@types/node` from 26.6.1 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.10.0 to 10.11.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.10.0...v10.11.0) Updates `jsdom` from 30.1.0 to 30.1.1 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.1.0...v30.1.1) Updates `typescript-eslint` from 8.70.0 to 8.70.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint) Updates `vite` from 8.3.0 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) --- updated-dependencies: - dependency-name: framer-motion dependency-version: 13.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@tauri-apps/cli" dependency-version: 2.11.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: eslint dependency-version: 10.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: jsdom dependency-version: 30.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.70.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: vite dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2026-09-28T18:50:12Z

📸 Automated Checks Complete!

Unit Tests: ✅ 69 passed, 0 failed.

The E2E suite has successfully run and captured the following visual states of the app:

Primary App

home

projector

notes

Features

shop

lab

settings

feedback

privacy

dependabot · 2026-10-05T18:47:29Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026

github-actions Bot enabled auto-merge (squash) September 28, 2026 18:47

Update screenshots for PR 209

38169a2

dependabot Bot closed this Oct 5, 2026

auto-merge was automatically disabled October 5, 2026 18:47
Pull request was closed

dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-ccd2c72f3c branch October 5, 2026 18:47

Navigation Menu

Repository navigation

build(deps): bump the npm-minor-and-patch group with 7 updates - #209

build(deps): bump the npm-minor-and-patch group with 7 updates#209
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-ccd2c72f3c

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

Uh oh!