Skip to content

chore(deps-dev): bump the npm-dependencies group across 1 directory with 9 updates - #173

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-9520e58d00
Closed

chore(deps-dev): bump the npm-dependencies group across 1 directory with 9 updates#173
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-9520e58d00

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 9 updates in the / directory:

Package From To
@crxjs/vite-plugin 2.7.1 3.0.0
@types/node 26.6.2 26.6.3
fs-extra 11.4.0 11.4.1
geckodriver 6.1.1 7.0.0
jsdom 30.1.0 30.1.1
postcss-styled-syntax 0.7.2 0.7.3
prettier 3.9.8 3.9.9
vite 8.3.0 8.3.1
ws 8.21.3 8.22.0

Updates @crxjs/vite-plugin from 2.7.1 to 3.0.0

Changelog

Sourced from @​crxjs/vite-plugin's changelog.

3.0.0

Major Changes

  • b5df87d: Drop CommonJS support and ship ESM only. The require export condition, the dist/index.cjs build and the root index.cjs/index.d.cts shims were removed; main now points at the ESM output. CommonJS consumers must use dynamic import().

Minor Changes

  • 74756c1: Add support for loading content scripts in Vite 8.1 experimental bundled dev mode.

Patch Changes

  • acfda2e: Expose CSS imported by dynamic content script chunks as web-accessible resources so Chrome can load those styles at runtime.

  • 3992a44: Replace every live reload placeholder in the background worker client so it can reconnect after a dev server restart.

  • e8d7422: Avoid adding directly injected content script entries to web_accessible_resources when no loader is emitted.

  • ba08d5a: Fix dev server crash when a monorepo workspace package imports assets (images, SVGs, etc.) from its own source tree outside the Vite root. prepAsset was reading the file with join(server.config.root, id), but pathe.join does not treat a /@fs/… Vite URL as an absolute path and produces an incorrect path like <root>/@fs/<abs-path>. Strip the /@fs prefix to recover the real absolute filesystem path before calling readFile.

  • 4b194b0: Refresh content scripts when imported JSON and other query-string modules change during development.

  • Fix content script path collisions in Vite 8 builds when multiple extension entries share the same basename.

  • 076ef06: Warn when manifest-declared document_start scripts are not configured as IIFE/standalone, since the async loader can miss the earliest host page scripts.

    Keep live reload available for declared and dynamic IIFE content scripts without deferring their execution through the dev loader.

    Handle dynamic content script placeholders when Rolldown emits them inside array literals, keeping dynamic IIFE registrations working in Vite 8.

  • 03dd39c: Use Vite 8.1+ WebSocket configuration without deprecated server.hmr fields while retaining compatibility with Vite 3 through 8.0.

  • 1a995e9: Keep no-import content scripts syntactically valid with source maps by closing their generated IIFE before the trailing sourceMappingURL comment.

  • 8db8ca0: Shorten dev-mode filenames for outside-root Vite modules to avoid Windows path length failures.

  • 0b66ecb: Serve manifest-declared IIFE content scripts (.iife.* files and

... (truncated)

Commits

Updates @types/node from 26.6.2 to 26.6.3

Commits

Updates fs-extra from 11.4.0 to 11.4.1

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

  • Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)
  • Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)
Commits

Updates geckodriver from 6.1.1 to 7.0.0

Release notes

Sourced from geckodriver's releases.

Release 7.0.0

7.0.0 (2026-09-22)

Bug Fixes

  • repository metadata and stale doc links across driver packages (#15) (8c88982)

Miscellaneous Chores

  • deps: Bump modern-tar from 0.7.7 to 0.8.5 in the minor-deps-updates-main group across 1 directory (#2) (bb0cbb8)
  • exclude geckodriver's CHANGELOG.md from the npm package (#12) (940e0dd)
  • Migrate to oxlint as done in webdriverio project (#6) (8dd718f)
  • Migrate to tsc 6 (#4) (83bdba5)
  • Project review (#9) (8331115)
Commits
  • 8c88982 fix: repository metadata and stale doc links across driver packages (#15)
  • 2e144ba ci: make great release's changelog (#13)
  • 940e0dd chore: exclude geckodriver's CHANGELOG.md from the npm package (#12)
  • bb0cbb8 chore(deps): Bump modern-tar from 0.7.7 to 0.8.5 in the minor-deps-updates-ma...
  • 8331115 chore: Project review (#9)
  • 8dd718f chore: Migrate to oxlint as done in webdriverio project (#6)
  • 21effab ci: Run e2e in the ci (#5)
  • 83bdba5 chore: Migrate to tsc 6 (#4)
  • 8e79073 working migrations with pnpm
  • See full diff in compare view

Updates jsdom from 30.1.0 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

  • Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
  • Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
  • Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
  • Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
  • Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
  • Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
  • Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
  • Fixed the storageQuota option being ignored by frames.
  • Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
  • Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
  • Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
  • Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
  • Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)
Commits
  • 0a117f4 30.1.1
  • 103f67d Remove unnecessary window cleanup from API tests
  • cdda00a Test HTTP/2 document and subresource loading
  • 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
  • d940c20 Share jsdom settings across descendant windows
  • 6ba40cb Fix and simplify option propagation
  • 3b3be70 Preserve CSS priorities across declaration updates
  • 97b2758 Align focusing and unfocusing with HTML
  • b7b460b Update w3c-xmlserializer to v6
  • 71d562f Update html-encoding-sniffer to v7
  • Additional commits viewable in compare view

Updates postcss-styled-syntax from 0.7.2 to 0.7.3

Release notes

Sourced from postcss-styled-syntax's releases.

0.7.3

  • Fixed stripping of a U+FEFF (byte-order mark) that opens a template
Changelog

Sourced from postcss-styled-syntax's changelog.

0.7.3

  • Fixed stripping of a U+FEFF (byte-order mark) that opens a template
Commits

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

  • deps: update all non-major dependencies (#23482) (3c752c8)
  • deps: update all non-major dependencies (#23537) (e8990c4)
  • deps: update rolldown-related dependencies (#23483) (9aecbbf)
  • handle server.ws: false in mergeConfig (#23511) (f68c0d5)
  • merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
  • optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
  • optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
  • server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
  • sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

Code Refactoring

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

  • deps: update all non-major dependencies (#23482) (3c752c8)
  • deps: update all non-major dependencies (#23537) (e8990c4)
  • deps: update rolldown-related dependencies (#23483) (9aecbbf)
  • handle server.ws: false in mergeConfig (#23511) (f68c0d5)
  • merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
  • optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
  • optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
  • server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
  • sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

Code Refactoring

Commits
  • 39ddf7c release: v8.3.1 (#23573)
  • f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
  • 6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
  • 04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
  • 5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
  • 63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
  • e8990c4 fix(deps): update all non-major dependencies (#23537)
  • af7cdf6 refactor: replace find with some (#23554)
  • 39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
  • 9abd99b refactor: remove duplicate configurations (#23532)
  • Additional commits viewable in compare view

Updates ws from 8.21.3 to 8.22.0

Release notes

Sourced from ws's releases.

8.22.0

Features

  • Introduced the protocols option (8b918b01).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).
Commits
  • 297202c [dist] 8.22.0
  • 8b918b0 [feature] Introduce the protocols option
  • 73e03eb [ci] Update actions/setup-node action to v7
  • d9b8954 [fix] Change the ready state after validating the arguments (#2337)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the npm-dependencies group across 1 directory w…
88c130e 
…ith 9 updates

Bumps the npm-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@crxjs/vite-plugin](https://github.com/crxjs/chrome-extension-tools/tree/HEAD/packages/vite-plugin) | `2.7.1` | `3.0.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.3` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.4.0` | `11.4.1` |
| [geckodriver](https://github.com/webdriverio/driver/tree/HEAD/packages/node-geckodriver) | `6.1.1` | `7.0.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.0` | `30.1.1` |
| [postcss-styled-syntax](https://github.com/hudochenkov/postcss-styled-syntax) | `0.7.2` | `0.7.3` |
| [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` |
| [ws](https://github.com/websockets/ws) | `8.21.3` | `8.22.0` |



Updates `@crxjs/vite-plugin` from 2.7.1 to 3.0.0
- [Release notes](https://github.com/crxjs/chrome-extension-tools/releases)
- [Changelog](https://github.com/crxjs/chrome-extension-tools/blob/main/packages/vite-plugin/CHANGELOG.md)
- [Commits](https://github.com/crxjs/chrome-extension-tools/commits/v3.0.0/packages/vite-plugin)

Updates `@types/node` from 26.6.2 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `fs-extra` from 11.4.0 to 11.4.1
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.4.0...11.4.1)

Updates `geckodriver` from 6.1.1 to 7.0.0
- [Release notes](https://github.com/webdriverio/driver/releases)
- [Changelog](https://github.com/webdriverio/driver/blob/main/packages/node-geckodriver/CHANGELOG.md)
- [Commits](https://github.com/webdriverio/driver/commits/[email protected]/packages/node-geckodriver)

Updates `jsdom` from 30.1.0 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.0...v30.1.1)

Updates `postcss-styled-syntax` from 0.7.2 to 0.7.3
- [Release notes](https://github.com/hudochenkov/postcss-styled-syntax/releases)
- [Changelog](https://github.com/hudochenkov/postcss-styled-syntax/blob/main/CHANGELOG.md)
- [Commits](hudochenkov/postcss-styled-syntax@0.7.2...0.7.3)

Updates `prettier` from 3.9.8 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.8...3.9.9)

Updates `vite` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite)

Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.3...8.22.0)

---
updated-dependencies:
- dependency-name: "@crxjs/vite-plugin"
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fs-extra
  dependency-version: 11.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: geckodriver
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: postcss-styled-syntax
  dependency-version: 0.7.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vite
  dependency-version: 8.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: ws
  dependency-version: 8.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown

PR tester build for 88c130e has been published:

Artifact folder: https://github.com/cloud-ru-tech/cloudhood/tree/artifacts/pull-requests/173

Commit: 88c130e07f1972b683ee2c63e38ddd5fce653f1a

github-actions Bot pushed a commit that referenced this pull request Oct 1, 2026
ci: publish PR #173 artifacts for 88c130e
6d2e2b8
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-9520e58d00 branch October 8, 2026 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Kirrrusha Kirrrusha Awaiting requested review from Kirrrusha Kirrrusha is a code owner
@AndreyTheWeb AndreyTheWeb Awaiting requested review from AndreyTheWeb AndreyTheWeb is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants