Skip to content

chore(deps): bump the npm-minor-patch group across 1 directory with 10 updates - #13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-51d839a327
Open

chore(deps): bump the npm-minor-patch group across 1 directory with 10 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-51d839a327

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown

Bumps the npm-minor-patch group with 10 updates in the / directory:

Package From To
@mux/mux-audio 0.15.26 0.16.4
limax 4.1.0 4.2.3
@astrojs/partytown 2.1.7 2.1.8
@iconify-json/lucide 1.2.133 1.2.136
@iconify-json/tabler 1.2.38 1.2.40
@typescript-eslint/eslint-plugin 8.70.0 8.70.1
@typescript-eslint/parser 8.70.0 8.70.1
prettier 3.9.8 3.9.9
typescript-eslint 8.70.0 8.70.1
wrangler 4.134.0 4.140.0

Updates @mux/mux-audio from 0.15.26 to 0.16.4

Release notes

Sourced from @​mux/mux-audio's releases.

@​mux/mux-audio-react: v0.16.4

0.16.4 (2026-09-15)

Miscellaneous Chores

  • @​mux/mux-audio-react: Synchronize audio versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​mux/playback-core bumped from 0.35.3 to 0.35.4

@​mux/mux-audio: v0.16.4

0.16.4 (2026-09-15)

Bug Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​mux/playback-core bumped from 0.35.3 to 0.35.4

@​mux/mux-audio-react: v0.16.3

0.16.3 (2026-09-09)

Bug Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​mux/playback-core bumped from 0.35.2 to 0.35.3

@​mux/mux-audio: v0.16.3

0.16.3 (2026-09-09)

Bug Fixes

... (truncated)

Changelog

Sourced from @​mux/mux-audio's changelog.

0.16.4 (2026-09-15)

Bug Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​mux/playback-core bumped from 0.35.3 to 0.35.4

0.16.3 (2026-09-09)

Bug Fixes

  • make disableCookies reactive (#1349) (cff2c35)
  • mux-video, mux-audio: don't re-derive src when the element doesn't own the playback id (#1352) (4ba2579)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​mux/playback-core bumped from 0.35.2 to 0.35.3

0.16.2 (2026-07-23)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​mux/playback-core bumped from 0.35.1 to 0.35.2

0.16.1 (2026-05-14)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​mux/playback-core bumped from 0.35.0 to 0.35.1

0.16.0 (2026-04-28)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​mux/mux-audio since your current version.


Updates limax from 4.1.0 to 4.2.3

Changelog

Sourced from limax's changelog.

4.2.3 (2026-03-19)

  • Ensure umlauts are preserved during unicode normalisation (#54) (5351f17), closes #54

4.2.2 (2026-01-09)

  • Remove ambiguous extensionless main field (#53) (2725729), closes #53
  • Replace deburr dependency with string.normalize (67b1022)

4.2.1 (2025-09-29)

  • TypeScript: add type definition tests (5d451e8)
  • TypeScript: ensure correct default export after move to dual package (#52) (280579c), closes #52

4.2.0 (2025-09-28)

  • Bump deps (b71d396)
  • CI: Ensure all Node.js LTS versions from 14 onwards (e97753e)
  • CI: update all runners and actions to latest (e1a7211)
  • Add dual support for ESM and CommonJS (c054e25)
Commits
  • 8f21d05 Release v4.2.3
  • 5351f17 Ensure umlauts are preserved during unicode normalisation (#54)
  • a133c0a Release v4.2.2
  • 2725729 Remove ambiguous extensionless main field (#53)
  • 67b1022 Replace deburr dependency with string.normalize
  • 9f8445c Release v4.2.1
  • 5d451e8 TypeScript: add type definition tests
  • 280579c TypeScript: ensure correct default export after move to dual package (#52)
  • 5f7d1c5 Release v4.2.0
  • b71d396 Bump deps
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for limax since your current version.


Updates @astrojs/partytown from 2.1.7 to 2.1.8

Release notes

Sourced from @​astrojs/partytown's releases.

@​astrojs/partytown@​2.1.8

Patch Changes

  • #17986 b1f9088 Thanks @​hanford! - Updates @qwik.dev/partytown from 0.13.2 to 0.14.4, bringing fixes for analytics event forwarding and iframe loading, support for Google Tag Manager's Tag Assistant preview, and automatic execution of scripts added after client-side navigation.
Changelog

Sourced from @​astrojs/partytown's changelog.

2.1.8

Patch Changes

  • #17986 b1f9088 Thanks @​hanford! - Updates @qwik.dev/partytown from 0.13.2 to 0.14.4, bringing fixes for analytics event forwarding and iframe loading, support for Google Tag Manager's Tag Assistant preview, and automatic execution of scripts added after client-side navigation.
Commits

Updates @iconify-json/lucide from 1.2.133 to 1.2.136

Commits

Updates @iconify-json/tabler from 1.2.38 to 1.2.40

Commits

Updates @typescript-eslint/eslint-plugin from 8.70.0 to 8.70.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

  • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • rule-tester: test the final autofix output instead of the first pass (#12867)
  • scope-manager: merge implicit global definitions (#12809)
  • type-utils: match package specifiers on whole path components (#12838)
  • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
  • typescript-estree: add missing < token opening type arguments (#12821)
  • typescript-estree: require string literal import attribute values (#12894)
  • website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.70.1 (2026-09-21)

🩹 Fixes

  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 23d38ce chore(release): publish 8.70.1
  • 9d82e4b chore: expand eslint-plugin rules test files glob (#12878)
  • f7482f6 fix(eslint-plugin): [no-misused-promises] handle multiple Promise constituent...
  • 2673044 docs(eslint-plugin): [prefer-promise-reject-errors] add option sections and e...
  • 8f141a2 fix(eslint-plugin): [no-useless-default-assignment] convert the fixer to a su...
  • 479cd85 chore: enable assertion option requireData for all rule tests (#12816)
  • f3c190c fix(eslint-plugin): [no-unnecessary-condition] handle union-keyed index acces...
  • b1993df fix(eslint-plugin): [unbound-method] treat Intl.Collator.prototype.compare as...
  • da394bc fix(eslint-plugin): [no-unnecessary-parameter-property-assignment] account fo...
  • 4a742ff fix(eslint-plugin): [await-thenable] prevent autofix from breaking code when ...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.70.0 to 8.70.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

  • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • rule-tester: test the final autofix output instead of the first pass (#12867)
  • scope-manager: merge implicit global definitions (#12809)
  • type-utils: match package specifiers on whole path components (#12838)
  • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
  • typescript-estree: add missing < token opening type arguments (#12821)
  • typescript-estree: require string literal import attribute values (#12894)
  • website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.70.1 (2026-09-21)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

Updates typescript-eslint from 8.70.0 to 8.70.1

Release notes

Sourced from typescript-eslint's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

  • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • rule-tester: test the final autofix output instead of the first pass (#12867)
  • scope-manager: merge implicit global definitions (#12809)
  • type-utils: match package specifiers on whole path components (#12838)
  • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
  • typescript-estree: add missing < token opening type arguments (#12821)
  • typescript-estree: require string literal import attribute values (#12894)
  • website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates wrangler from 4.134.0 to 4.140.0

Release notes

Sourced from wrangler's releases.

wrangler@4.140.0

Minor Changes

Patch Changes

wrangler@4.139.0

Minor Changes

  • #15792 479e1e8 Thanks @​flakey5! - Configure SSH for experimental Durable Object-managed Containers

    Set containers[].ssh and containers[].authorized_keys when using scheduling_policy: "durable_object". These are application-wide settings that follow the same rules as the existing Durable Object-managed Container settings: normal deployments create missing applications and update explicitly configured values, while omitted settings preserve the existing application configuration.

    // wrangler.jsonc
{
  "containers": [
    {
      "name": "sandbox",
      "class_name": "Sandbox",
      "scheduling_policy": "durable_object",
      "ssh": { "enabled": true },
      "authorized_keys": [
        { "name": "laptop", "public_key": "ssh-ed25519 AAAA..." }
      ]
    }
  ]
}

  • #15648 52c0e9f Thanks @​tpmmorris! - Expose configured Cron Triggers to local development consumers

    Wrangler now passes the active environment's exact Cron Trigger expressions to Miniflare so Local Explorer can display them. Headless agent sessions also advertise the Local Explorer scheduled invocation API.

  • #15786 bdda4c3 Thanks @​ThomasRubini! - Support UDP connect handlers in local development

    The experimental connect configuration now accepts protocol: "udp", with optional idle_timeout_ms and max_pending_bytes settings. UDP datagrams are delivered to the Worker's connect() handler using workerd's value-mode socket streams, and can be tested with Miniflare#dispatchConnect({ protocol: "udp" }).

  • #15779 fc3cbaa Thanks @​Naapperas! - Support workflow entries in the exports configuration map

    A Worker can now declare the Workflows it defines in exports, keyed by the WorkflowEntrypoint class name:

    {
  "exports": {
    "MyWorkflow": {

... (truncated)

Commits
  • 84c819f Version Packages (#15857)
  • 8f7916c [deploy-helpers] Containers support for Worker Preview deployments in the Bui...
  • c59dae6 Version Packages (#15828)
  • 15799d4 [wrangler] Update smol-toml to 1.9.0 (#15838)
  • 479e1e8 Allow ssh config for DO containers (#15792)
  • 52c0e9f Add backend support for cron triggers in local explorer (#15648)
  • fc3cbaa [workers-utils,miniflare,wrangler] Accept workflow entries in the exports con...
  • cd60c9c [wrangler] chore: Show --jurisdiction flag in KV Create Namespace help (#15803)
  • bdda4c3 [wrangler] Support UDP connect handlers for local development (#15786)
  • 8d7e380 Version Packages (#15813)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-minor-patch group across 1 directory with 1…
c846793 
…0 updates

Bumps the npm-minor-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@mux/mux-audio](https://github.com/muxinc/elements/tree/HEAD/packages/mux-audio) | `0.15.26` | `0.16.4` |
| [limax](https://github.com/lovell/limax) | `4.1.0` | `4.2.3` |
| [@astrojs/partytown](https://github.com/withastro/astro/tree/HEAD/packages/integrations/partytown) | `2.1.7` | `2.1.8` |
| [@iconify-json/lucide](https://github.com/iconify/icon-sets) | `1.2.133` | `1.2.136` |
| [@iconify-json/tabler](https://github.com/iconify/icon-sets) | `1.2.38` | `1.2.40` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.70.0` | `8.70.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.70.0` | `8.70.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.70.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.134.0` | `4.140.0` |



Updates `@mux/mux-audio` from 0.15.26 to 0.16.4
- [Release notes](https://github.com/muxinc/elements/releases)
- [Changelog](https://github.com/muxinc/elements/blob/main/packages/mux-audio/CHANGELOG.md)
- [Commits](https://github.com/muxinc/elements/commits/@mux/mux-audio@0.16.4/packages/mux-audio)

Updates `limax` from 4.1.0 to 4.2.3
- [Changelog](https://github.com/lovell/limax/blob/main/CHANGELOG.md)
- [Commits](lovell/limax@v4.1.0...v4.2.3)

Updates `@astrojs/partytown` from 2.1.7 to 2.1.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/partytown/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/partytown@2.1.8/packages/integrations/partytown)

Updates `@iconify-json/lucide` from 1.2.133 to 1.2.136
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@iconify-json/tabler` from 1.2.38 to 1.2.40
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@typescript-eslint/eslint-plugin` from 8.70.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.70.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/parser)

Updates `prettier` from 3.9.8 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.8...3.9.9)

Updates `typescript-eslint` from 8.70.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

Updates `wrangler` from 4.134.0 to 4.140.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.140.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@mux/mux-audio"
  dependency-version: 0.16.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: limax
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@astrojs/partytown"
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@iconify-json/lucide"
  dependency-version: 1.2.136
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@iconify-json/tabler"
  dependency-version: 1.2.40
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: wrangler
  dependency-version: 4.140.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@socket-security

socket-security Bot commented Sep 28, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​typescript-eslint/​parser@​8.70.0 ⏵ 8.70.11001007298100
Updatedtypescript-eslint@​8.70.0 ⏵ 8.70.11001007498100
Updated@​iconify-json/​lucide@​1.2.133 ⏵ 1.2.136100 +110079 +196100
Updated@​astrojs/​partytown@​2.1.7 ⏵ 2.1.8100 +11008090 +4100
Updated@​mux/​mux-audio@​0.15.26 ⏵ 0.16.48010093 -199100
Updated@​typescript-eslint/​eslint-plugin@​8.70.0 ⏵ 8.70.199 +110080 +198100
Updated@​iconify-json/​tabler@​1.2.38 ⏵ 1.2.40100 +110081 +194100
Updatedlimax@​4.1.0 ⏵ 4.2.3100 +1100100 +183 -1100
Updatedwrangler@​4.134.0 ⏵ 4.140.098 +110092 +196100
Updatedprettier@​3.9.8 ⏵ 3.9.9981009799100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants