chore(deps): bump the dev-tooling group with 10 updates by dependabot[bot] · Pull Request #77 · j3w1/theme

dependabot · 2026-10-18T04:34:05Z

Bumps the dev-tooling group with 10 updates:

Package	From	To
@playwright/test	`1.64.0`	`1.64.1`
@vitejs/plugin-vue	`6.0.9`	`6.0.10`
astro	`7.3.7`	`7.3.8`
postcss	`8.5.29`	`8.5.30`
react	`19.3.0`	`19.3.1`
react-dom	`19.3.0`	`19.3.1`
smol-toml	`1.9.0`	`1.9.1`
vite	`8.3.3`	`8.3.4`
vue	`3.5.43`	`3.5.44`
zod	`4.6.5`	`4.6.7`

Updates @playwright/test from 1.64.0 to 1.64.1

Release notes

Sourced from @playwright/test's releases.

v1.64.1

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0

#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

Commits

cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
866cbb8 chore: mark v1.64.1 (#43354)
1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
See full diff in compare view

Updates @vitejs/plugin-vue from 6.0.9 to 6.0.10

Release notes

Sourced from @vitejs/plugin-vue's releases.

[email protected]

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @vitejs/plugin-vue's changelog.

6.0.10 (2026-10-10)

Bug Fixes

plugin-vue: compile transformed normal scripts outside vapor mode (#857) (7b63e3c)

plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)

Documentation

plugin-vue: clarify compiler initialization hooks (55d0cab)

Commits

a03675e release: [email protected]
7b63e3c fix(plugin-vue): compile transformed normal scripts outside vapor mode (#857)
ccc06dd fix(plugin-vue): correct AST reuse checks and allow Vue 3.6 RC
55d0cab docs(plugin-vue): clarify compiler initialization hooks
See full diff in compare view

Updates astro from 7.3.7 to 7.3.8

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

#18293 28e7410 Thanks @astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

#18298 0e9e857 Thanks @matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

#18263 882dd98 Thanks @florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

#18290 31f13c3 Thanks @astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

Changelog

Sourced from astro's changelog.

7.3.8

Patch Changes

#18293 28e7410 Thanks @astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

#18298 0e9e857 Thanks @matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

#18263 882dd98 Thanks @florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

#18290 31f13c3 Thanks @astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

Commits

3571e2d [ci] release (#18292)
0e9e857 Keep existing pnpm allowBuilds approvals in astro add (#18298)
882dd98 Replace esbuild with Vite and Rolldown APIs (#18263)
28e7410 fix(astro): provide Astro.cache when rendering error pages (#18293)
31f13c3 Fix glob() loader watcher ignoring patterns starting with an extglob like `!(...
See full diff in compare view

Updates postcss from 8.5.29 to 8.5.30

Release notes

Sourced from postcss's releases.

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

Changelog

Sourced from postcss's changelog.

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

Commits

f1aca7e Release 8.5.30 version
9d83445 Update dependencies
6c9bc73 Fix invalid source map mapping on escaping before new line (#2169)
1fd8f88 Add missed changes in changelog
See full diff in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
See full diff in compare view

Updates smol-toml from 1.9.0 to 1.9.1

Release notes

Sourced from smol-toml's releases.

v1.9.1

What's Changed

fix: reject invalid extra exponent sign by @cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.9.0...v1.9.1

Commits

69aa050 fix: actually properly fix exponent issues
7be7084 chore: version bump
be3290d chore: upgrade deps
86c7613 fix: reject invalid extra exponent sign
See full diff in compare view

Updates vite from 8.3.3 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)

build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)

build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)

bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)

client: skip rewriting unchanged adopted styles (#23697) (fa71469)

css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)

deps: update all non-major dependencies (#23648) (8a4c19c)

deps: update rolldown-related dependencies (#23649) (794516d)

dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)

don't treat modules ending with js-like query as js (#23687) (fcb6f12)

html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)

html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)

optimizer: scan deep imports with custom extensions (#23678) (8579189)

remove input option unescaping for now (#23694) (facc2fb)

server: match static aliases on path boundaries (#23643) (b28db28)

watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)

build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)

build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)

bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)

client: skip rewriting unchanged adopted styles (#23697) (fa71469)

css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)

deps: update all non-major dependencies (#23648) (8a4c19c)

deps: update rolldown-related dependencies (#23649) (794516d)

dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)

don't treat modules ending with js-like query as js (#23687) (fcb6f12)

html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)

html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)

optimizer: scan deep imports with custom extensions (#23678) (8579189)

remove input option unescaping for now (#23694) (facc2fb)

server: match static aliases on path boundaries (#23643) (b28db28)

watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Commits

b6c20f6 release: v8.3.4 (#23702)
b28db28 fix(server): match static aliases on path boundaries (#23643)
bc0f21c feat(bundled-dev): support import.meta.hot.acceptExports (#23463)
fa71469 fix(client): skip rewriting unchanged adopted styles (#23697)
2a8c0f0 fix(build): correct preloads when chunkImportMap is enabled with non-root bas...
3a7f2ae fix(html): avoid adding filesystem root to watcher (#23689)
facc2fb fix: remove input option unescaping for now (#23694)
70d56ea fix(dev): a restart requested during a restart used to be dropped (fix #23392...
cf52011 fix(css): resolve imported preprocessors from their file path with lightningc...
fcb6f12 fix: don't treat modules ending with js-like query as js (#23687)
Additional commits viewable in compare view

Updates vue from 3.5.43 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)

compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723

compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)

compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)

compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602

custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775

hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)

KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710

reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643

reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009

reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)

reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792

runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632

runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551

runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728

runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)

runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)

runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)

server-renderer: propagate async setup errors (#15857) (6930374), closes #15716

ssr: honor falsy vnode content overrides (#15769) (c11c5c8)

suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639

suspense: skip rendering async components unmounted while pending (4ab865a)

teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817

transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531

transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500

Commits

bf5f0dd release: v3.5.44
6930374 fix(server-renderer): propagate async setup errors (#15857)
8e8c547 chore(deps): update all non-major dependencies (#15585)
4cb0ca8 chore(deps): update playground (#15685)
e38478f chore(deps): update dawidd6/action-download-artifact action to v27 (#15768)
1caed5a chore(deps): update compiler (#15586)
a49f451 chore(deps): update lint (#15680)
219b858 chore(deps): update build (#15679)
ff35014 fix(transition): handle comment-wrapped component roots (#15853)
d084b90 fix(compiler-core): parenthesise v-for key in v-memo cache guard (#15724)
Additional commits viewable in compare view

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini

9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales

34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note

74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)

b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors

8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze

bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles

c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)

a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)

a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)

529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6

9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

Commits

b500a2e 4.6.7
9c21983 ci: stage at verbose so a failed OIDC token exchange says why
529f78d 4.6.6
a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
c42596b release: hold the run on the release-approval environment until the staged ve...
bacad51 docs: square the Code for Japan logo to match the other bronze tiles
8fb2faf docs: crop the Code for Japan logo and list it first in bronze
b2ef983 docs: add Code for Japan to bronze sponsors
74304ce release: stage npm versions instead of publishing them (#6622)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-tooling group with 10 updates: | Package | From | To | | --- | --- | --- | | [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` | | [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.9` | `6.0.10` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.7` | `7.3.8` | | [postcss](https://github.com/postcss/postcss) | `8.5.29` | `8.5.30` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` | | [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.9.0` | `1.9.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.3` | `8.3.4` | | [vue](https://github.com/vuejs/core) | `3.5.43` | `3.5.44` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | Updates `@playwright/test` from 1.64.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.64.0...v1.64.1) Updates `@vitejs/plugin-vue` from 6.0.9 to 6.0.10 - [Release notes](https://github.com/vitejs/vite-plugin-vue/releases) - [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-vue/commits/[email protected]/packages/plugin-vue) Updates `astro` from 7.3.7 to 7.3.8 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/[email protected]/packages/astro) Updates `postcss` from 8.5.29 to 8.5.30 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.29...8.5.30) Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `smol-toml` from 1.9.0 to 1.9.1 - [Release notes](https://github.com/squirrelchat/smol-toml/releases) - [Commits](squirrelchat/smol-toml@v1.9.0...v1.9.1) Updates `vite` from 8.3.3 to 8.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite) Updates `vue` from 3.5.43 to 3.5.44 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.43...v3.5.44) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@vitejs/plugin-vue" dependency-version: 6.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: astro dependency-version: 7.3.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: postcss dependency-version: 8.5.30 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: smol-toml dependency-version: 1.9.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: vue dependency-version: 3.5.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-10-25T04:33:57Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 18, 2026

ce-meta Bot added area:design-system Primary domain or subsystem: design-system type:dependencies Canonical work type: dependency and supply-chain maintenance labels Oct 18, 2026

dependabot Bot closed this Oct 25, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev-tooling-5315390d71 branch October 25, 2026 04:34

Navigation Menu

Repository navigation

chore(deps): bump the dev-tooling group with 10 updates - #77

chore(deps): bump the dev-tooling group with 10 updates#77
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-5315390d71

dependabot Bot commented on behalf of github Oct 18, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 25, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.64.1

Bug Fixes

[email protected]

6.0.10 (2026-10-10)

Bug Fixes

Documentation

[email protected]

Patch Changes

7.3.8

Patch Changes

8.5.30

8.5.30

19.3.1 (October 14th, 2026)

React Server Components

19.3.1 (October 14th, 2026)

React Server Components

v1.9.1

What's Changed

v8.3.4

Features

Bug Fixes

Performance Improvements

Code Refactoring

8.3.4 (2026-10-08)

Features

Bug Fixes

Performance Improvements

Code Refactoring

v3.5.44

3.5.44 (2026-10-13)

Bug Fixes

v4.6.7

Commits:

v4.6.6

Commits:

Uh oh!

dependabot Bot commented on behalf of github Oct 25, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 18, 2026 •

edited

Loading