chore(deps): bump the production-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #75 · cianc/cianc.github.io

dependabot · 2026-06-08T07:35:27Z

Bumps the production-dependencies group with 7 updates in the / directory:

Package	From	To
@clack/prompts	`1.4.0`	`1.5.1`
@myriaddreamin/rehype-typst	`0.6.0`	`0.7.0`
js-yaml	`4.1.1`	`4.2.0`
pixi.js	`8.18.1`	`8.19.0`
shiki	`4.1.0`	`4.2.0`
@types/node	`25.9.1`	`25.9.2`
tsx	`4.22.3`	`4.22.4`

Updates @clack/prompts from 1.4.0 to 1.5.1

Release notes

Sourced from @clack/prompts's releases.

@clack/prompts@1.5.1

Patch Changes

#548 2356e97 Thanks @43081j! - Remove sourcemaps and enable pretty-ish build output.

#546 56e9d67 Thanks @ghostdevv! - docs: add jsdoc for date, limit-options, and messages

Updated dependencies [2356e97]:

@clack/core@1.4.1

@clack/prompts@1.5.0

Minor Changes
#543 83428ac Thanks @florian-lefebvre! - Adds support for Standard Schema validation

Prompts accept an optional validate() function to validate user input. While a function provides more flexibility and customization over your validation, it can be a bit verbose. To help solve this, there are libraries that provide schema-based validation to make shorthand and type-strict validation substantially easier.

Libraries following the Standard Schema specification are now natively supported. For example, using Arktype:
import { text } from '@clack/prompts';
import { type } from 'arktype';
const name = await text({
message: 'Enter your email',

validate: type('string.email').describe('Invalid email'),
});
Patch Changes

#542 adb6af9 Thanks @ghostdevv! - docs: add jsdoc for box, group, and group-multi-select

#534 3dcb31a Thanks @MattStypa! - Fixed spaces and uppercase characters in multiline prompt

#540 3170ed9 Thanks @ghostdevv! - docs: add jsdoc for autocomplete, confirm, and path prompts

Updated dependencies [83428ac, 3dcb31a]:

@clack/core@1.4.0

Changelog

Sourced from @clack/prompts's changelog.

1.5.1

Patch Changes

#548 2356e97 Thanks @43081j! - Remove sourcemaps and enable pretty-ish build output.

#546 56e9d67 Thanks @ghostdevv! - docs: add jsdoc for date, limit-options, and messages

Updated dependencies [2356e97]:

@clack/core@1.4.1

1.5.0

Minor Changes
#543 83428ac Thanks @florian-lefebvre! - Adds support for Standard Schema validation

Prompts accept an optional validate() function to validate user input. While a function provides more flexibility and customization over your validation, it can be a bit verbose. To help solve this, there are libraries that provide schema-based validation to make shorthand and type-strict validation substantially easier.

Libraries following the Standard Schema specification are now natively supported. For example, using Arktype:
import { text } from '@clack/prompts';
import { type } from 'arktype';
const name = await text({
message: 'Enter your email',

validate: type('string.email').describe('Invalid email'),
});
Patch Changes

#542 adb6af9 Thanks @ghostdevv! - docs: add jsdoc for box, group, and group-multi-select

#534 3dcb31a Thanks @MattStypa! - Fixed spaces and uppercase characters in multiline prompt

#540 3170ed9 Thanks @ghostdevv! - docs: add jsdoc for autocomplete, confirm, and path prompts

Updated dependencies [83428ac, 3dcb31a]:

@clack/core@1.4.0

Commits

02ae191 [ci] release (#549)
56e9d67 docs: add jsdoc for date, limit-options, and messages (#546)
030ba4d [ci] release (#539)
83428ac feat: standard schema for validation (#543)
adb6af9 docs: add jsdoc for box, group, and group-multi-select (#542)
3170ed9 docs: add jsdoc for autocomplete, confirm, and path prompts (#540)
3dcb31a fix: spaces and uppercase characters in multiline input (#534)
See full diff in compare view

Updates @myriaddreamin/rehype-typst from 0.6.0 to 0.7.0

Release notes

Sourced from @myriaddreamin/rehype-typst's releases.

v0.7.0

Bumped typst to v0.14.2 in Myriad-Dreamin/typst.ts#796, Myriad-Dreamin/typst.ts#811, and Myriad-Dreamin/typst.ts#814

Packages

(Fix) Resetting before using high-level compile/renderer APIs in Myriad-Dreamin/typst.ts#778

(Fix) Iterating rects in labelled content in Myriad-Dreamin/typst.ts#783

(Fix) Correct typing of compile format in Myriad-Dreamin/typst.ts#790

(Change) Removing createTypstSvgRenderer in Myriad-Dreamin/typst.ts#779

(Test) Testing renderer initialization in Myriad-Dreamin/typst.ts#791

(Test) Adding all renderer tests in Myriad-Dreamin/typst.ts#792

Added set_fonts API in Myriad-Dreamin/typst.ts#780

Supported compile with root argument in Myriad-Dreamin/typst.ts#781

Supported query with html target in Myriad-Dreamin/typst.ts#786 and Myriad-Dreamin/typst.ts#788

Supported load fonts on demand in Myriad-Dreamin/typst.ts#787

Provided snapshot API in Myriad-Dreamin/typst.ts#777

Compiler

Implemented typst2hast in Myriad-Dreamin/typst.ts#743

rustdoc-typst-demo (New)

Added rustdoc-typst-demo in Myriad-Dreamin/typst.ts#725

Package: typst.ts

(Fix) Fixed race condition in snippet lib in Myriad-Dreamin/typst.ts#725

(Fix) Respecting wrapper script passed on initialization in Myriad-Dreamin/typst.ts#804

(Fix) Set PageMerge to default to get merged content for plain SVGs by @TeddyHuang-00 in Myriad-Dreamin/typst.ts#826

Added PDF standards supported in typst v0.14 in Myriad-Dreamin/typst.ts#800

Added pdf tags options in Myriad-Dreamin/typst.ts#803

Package: typst.react

(Fix) Not using property 'local-fonts', which is missed in Firefox by @caterpillar-1 in Myriad-Dreamin/typst.ts#724

feat: add css format to published files in typst.react by @shipurjan in Myriad-Dreamin/typst.ts#765

Package: typst.vue3

(Fix) Preventing reinitialization of compiler and renderer options during HMR by @bryarrow in Myriad-Dreamin/typst.ts#773

(Fix) Fixed incorrect Typst source code change listener by @bryarrow in Myriad-Dreamin/typst.ts#767

Generating ESM and type declarations for publishing in Myriad-Dreamin/typst.ts#776

Package: typst.svelte (New)

added svelte 5 package by @AquaBx in Myriad-Dreamin/typst.ts#809

... (truncated)

Commits

0501ced docs: clean up release workflow wording (#847)
61cd6bd test: skip flaky page label canvas snapshot (#846)
98319cc fix: allow npm dry-run release reruns (#845)
ad8699f fix: add repository metadata for npm provenance (#844)
d1b5d66 fix: publish npm packages to npm registry (#843)
fc86b40 fix: make typst.node publish reruns tolerant (#842)
750e46c ci: fix release orchestration workflow (#841)
1880ef1 ci: add manual trusted publishing release flow (#839)
2a8b32d fix: publish was not passed
e101afc build: bump version to 0.7.0 (#831)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @myriaddreamin/rehype-typst since your current version.

Updates js-yaml from 4.1.1 to 4.2.0

Changelog

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

Added docs/safety.md with notes about processing untrusted YAML.

Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.

Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.

Added sourcemaps to dist/ builds.

Changed

Stop resolving numbers with underscores as numeric scalars, #627.

Switched dev toolchains to Vite / neostandard.

Updated demo.

Reorganized tests.

dist/ files are no longer kept in the repository.

Fixed

Fix parsing of properties on the first implicit block mapping key, #62.

Fix trailing whitespace handling when folding flow scalar lines, #307.

Reject top-level block scalars without content indentation, #280.

Ensure numbers survive round-trip, #737.

Fix test coverage for issue #221.

Fix flow scalar trailing whitespace folding, #307.

Fix digits in YAML named tag handles.

Security

Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

Backported v4.1.1 fix to v3

Commits

See full diff in compare view

Updates pixi.js from 8.18.1 to 8.19.0

Release notes

Sourced from pixi.js's releases.

v8.19.0

💾 Download

Installation:
npm install pixi.js@8.19.0
Development Build:

https://cdn.jsdelivr.net/npm/pixi.js@8.19.0/dist/pixi.js

https://cdn.jsdelivr.net/npm/pixi.js@8.19.0/dist/pixi.mjs

Production Build:

https://cdn.jsdelivr.net/npm/pixi.js@8.19.0/dist/pixi.min.js

https://cdn.jsdelivr.net/npm/pixi.js@8.19.0/dist/pixi.min.mjs

Documentation:

https://pixijs.download/v8.19.0/docs/index.html

Changed

pixijs/pixijs@v8.18.1...v8.19.0

🚨 Behavior Change
fix: Container.updateTransform honors zero scale (#12044) by @Zyie in pixijs/pixijs#12046

Container.updateTransform({ scaleX: 0, scaleY: 0 }) previously coerced a zero scale to 1 (the code used opts.scaleX || 1), so passing 0 left the container at full size. It now applies zero scale literally, matching scale.set(0, 0). If you relied on updateTransform ignoring a zero scale, stop passing 0 when you mean full scale.
const container = new Container();
container.updateTransform({ scaleX: 0, scaleY: 0 });
// before: scale coerced to (1, 1) — container stayed full-size
// after:  scale applied as (0, 0) — container hidden, matching scale.set(0, 0)
fix: particle container inherit blend mode by @DmitriyGolub in pixijs/pixijs#11978

ParticleContainer now respects the blend mode inherited from its ancestors. Previously the render pipe read the container's own local blendMode instead of the resolved groupBlendMode, so setting e.g. stage.blendMode = 'add' had no effect on particles. Particles nested under a parent with a non-default blend mode will now render differently (e.g. additive brightening) where they were silently ignored before. A blendMode set directly on the ParticleContainer is unchanged.
fix: FillPattern tiling and radial gradient sizing by @Zyie in pixijs/pixijs#12037

FillPattern gains a textureSpace option ('global' | 'local'), while fixing several long-standing pattern/gradient sizing bugs. textureSpace defaults to 'global', so patterns now tile continuously across adjacent shapes instead of remapping per shape; setTransform(matrix) now applies the matrix you pass directly (it previously inverted and rescaled it by the texture size); and textureSpace: 'local' radial gradients now scale to the gradient's outer radius. Existing pattern fills and local radial gradients can render differently.

If you hand-compensated for the old setTransform behavior (pre-inverting or scaling by texture size), remove that compensation. The legacy positional new FillPattern(texture, repetition) form still works.
import { Assets, FillPattern, Graphics } from 'pixi.js';
const texture = await Assets.load('pattern.png');
// new options-object constructor with explicit textureSpace
const pattern = new FillPattern({ texture, repetition: 'repeat', textureSpace: 'local' });
const g = new Graphics().rect(0, 0, 200, 100).fill({ fill: pattern });
🎁 Added

feat: add HTML-in-Canvas texture support by @Zyie in pixijs/pixijs#12053

... (truncated)

Commits

d93c5d3 v8.19.0
23fd143 fix: canvas renderer does not round anchor offset when roundPixels is enabled...
bdf32bd chore: bundle pixijs-skills and add sync workflow (#12045)
b2f8668 feat: add HTML-in-Canvas texture support (#12053)
1d1e44c feat: implement transientAttachment for MSAA RenderTextures for WebGPU (#12050)
765ec7a chore: restrict postMessage origin in playground (#12055)
fa49de2 docs: document blend mode resolution inheritance (#12067)
b967b5e chore: bump parse-svg-path (#12071)
009e338 chore: update GitHub Actions and npm to latest (#12070)
4b8d253 fix: particle container inherit blend mode (#11978)
Additional commits viewable in compare view

Updates shiki from 4.1.0 to 4.2.0

Release notes

Sourced from shiki's releases.

v4.2.0

   🚀 Features

Add @shikijs/stream and @shikijs/magic-move packages - by @antfu in shikijs/shiki#1283 (d031f)

   🐞 Bug Fixes

transformers: Handle YAML comment prefixes correctly for v3 - by @AkaHarshit in shikijs/shiki#1266 (f694a)

vitepress-twoslash: Scroll blocking on mobile viewports - by @micaiguai in shikijs/shiki#1262 (9e0e8)

    View changes on GitHub

Commits

1d56dae chore: release v4.2.0
See full diff in compare view

Updates @types/node from 25.9.1 to 25.9.2

Commits

See full diff in compare view

Updates tsx from 4.22.3 to 4.22.4

Release notes

Sourced from tsx's releases.

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

This release is also available on:

npm package (@latest dist-tag)

Commits

1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 7 updates Bumps the production-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.4.0` | `1.5.1` | | [@myriaddreamin/rehype-typst](https://github.com/Myriad-Dreamin/typst.ts) | `0.6.0` | `0.7.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` | | [pixi.js](https://github.com/pixijs/pixijs) | `8.18.1` | `8.19.0` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.1.0` | `4.2.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `25.9.2` | | [tsx](https://github.com/privatenumber/tsx) | `4.22.3` | `4.22.4` | Updates `@clack/prompts` from 1.4.0 to 1.5.1 - [Release notes](https://github.com/bombshell-dev/clack/releases) - [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md) - [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.5.1/packages/prompts) Updates `@myriaddreamin/rehype-typst` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/Myriad-Dreamin/typst.ts/releases) - [Changelog](https://github.com/Myriad-Dreamin/typst.ts/blob/main/docs/release-workflows.md) - [Commits](Myriad-Dreamin/typst.ts@v0.6.0...v0.7.0) Updates `js-yaml` from 4.1.1 to 4.2.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) Updates `pixi.js` from 8.18.1 to 8.19.0 - [Release notes](https://github.com/pixijs/pixijs/releases) - [Commits](pixijs/pixijs@v8.18.1...v8.19.0) Updates `shiki` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.2.0/packages/shiki) Updates `@types/node` from 25.9.1 to 25.9.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsx` from 4.22.3 to 4.22.4 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.22.3...v4.22.4) --- updated-dependencies: - dependency-name: "@clack/prompts" dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@myriaddreamin/rehype-typst" dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pixi.js dependency-version: 8.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: shiki dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/node" dependency-version: 25.9.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tsx dependency-version: 4.22.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 8, 2026

cianc merged commit 93d90a7 into v4 Jun 8, 2026
3 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-96758b7570 branch June 8, 2026 16:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the production-dependencies group across 1 directory with 7 updates#75

chore(deps): bump the production-dependencies group across 1 directory with 7 updates#75
cianc merged 1 commit into
v4from
dependabot/npm_and_yarn/production-dependencies-96758b7570

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

@​clack/prompts@​1.5.1

Patch Changes

@​clack/prompts@​1.5.0

Minor Changes

Patch Changes

1.5.1

Patch Changes

1.5.0

Minor Changes

Patch Changes

v0.7.0

Packages

Compiler

rustdoc-typst-demo (New)

Package: typst.ts

Package: typst.react

Package: typst.vue3

Package: typst.svelte (New)

[4.2.0] - 2026-06-01

Added

Changed

Fixed

Security

[3.14.2] - 2025-11-15

Security

v8.19.0

💾 Download

Changed

🚨 Behavior Change

🎁 Added

v4.2.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@clack/prompts@1`.5.1

`@clack/prompts@1`.5.0