Skip to content

build(deps): bump the npm_and_yarn group across 3 directories with 7 updates - #570

Merged
prestoncabe merged 1 commit into
mainfrom
dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-99ce791207
Oct 23, 2026
Merged

build(deps): bump the npm_and_yarn group across 3 directories with 7 updates#570
prestoncabe merged 1 commit into
mainfrom
dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-99ce791207

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 4 updates in the /builder-frontend directory: vite, @vitest/mocker, seroval and source-map-js.
Bumps the npm_and_yarn group with 5 updates in the /docs directory:

Package From To
vite 8.3.0 8.3.5
source-map-js 1.2.1 1.2.2
sharp 0.35.4 0.35.5
postcss-selector-parser 6.1.4 7.1.7
smol-toml 1.8.0 1.9.1
source-map-js 1.2.1 1.2.2
vite 8.3.0 8.3.5
postcss-selector-parser 6.1.4 7.1.7
sharp 0.35.4 0.35.5
smol-toml 1.8.0 1.9.1
source-map-js 1.2.1 1.2.2
vite 8.3.0 8.3.5

Bumps the npm_and_yarn group with 4 updates in the /website directory: vite, source-map-js, sharp and smol-toml.

Updates vite from 6.4.3 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates @vitest/mocker from 4.1.11 to 4.1.12

Release notes

Sourced from @​vitest/mocker's releases.

v4.1.12

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates seroval from 1.5.6 to 1.6.12

Commits

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Changelog

Sourced from source-map-js's changelog.

1.2.2

Commits

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Changelog

Sourced from source-map-js's changelog.

1.2.2

Commits

Updates vite from 6.4.3 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Changelog

Sourced from source-map-js's changelog.

1.2.2

Commits

Updates vite from 6.4.3 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates vite from 8.3.0 to 8.3.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Changelog

Sourced from source-map-js's changelog.

1.2.2

Commits

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract and rotate operations. #4606

  • Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract operation. #4606

... (truncated)

Commits
  • 51a990f Release v0.35.5
  • 96de105 Upgrade to sharp-libvips v1.3.4
  • 3a61390 CI: Configure Dependabot with all package.json locations
  • 4940c50 Improve gain map support for rotate/flip/flop ops
  • 20654aa Prerelease v0.35.5-rc.1
  • ef4f934 CI: Upgrade to Ubuntu 26.04
  • 358df95 Upgrade to libvips v8.18.7
  • 49f4903 Improve gain map support for rotate-then-extract #4606
  • 0e2e55e Silence a couple of compiler/static analysis warnings
  • cef3b8c Improve gain map support for extract operation #4606
  • Additional commits viewable in compare view

Updates postcss-selector-parser from 6.1.4 to 7.1.7

Release notes

Sourced from postcss-selector-parser's releases.

7.1.7

  • fix: lossless: true preserves trailing whitespace in a selector that ends empty, such as :not(a, ). Note that :not( ) now yields a selector holding one empty string node rather than an empty selector (#337 by @​theRizwan)
  • fix: consume the whitespace that terminates a hexadecimal escape, so [x="\000061 b"] unescapes to ab (#340 by @​jakezwang)
  • fix: set the parent on every node passed to insertBefore and insertAfter, not only the first (#343 by @​feritcemkahraman)
  • fix: assigning combinator.value clears the stale raw spelling instead of being ignored (#342 by @​SAY-5)
  • fix: keep whitespace around the namespace separator in attribute selectors, so [ foo | bar ] round-trips (#339 by @​dkryaklin)

7.1.6

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4

  • fix: tolerate non-node children when serializing selectors

7.1.3

  • Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2

v7.1.1

7.1.1

  • perf: replace startsWith with strict equality (#308)
  • fix(types): add walkUniversal declaration (#311)

v7.1.0

7.1.0

  • feat: insert(Before|After) support multiple new node

v7.0.0

7.0.0

  • Feat: make insertions during iteration safe (major)

6.1.5

The 6.x line is now in security-only maintenance

This release exists because the advisory above covers every published 6.x version, and until now the only remediation on offer was an upgrade to 7.x. 6.1.5 is the patched version for the 6.x line.

The line is kept alive for the installed base that cannot move to 7 yet, Tailwind

... (truncated)

Changelog

Sourced from postcss-selector-parser's changelog.

7.1.7 - 2026-10-19

  • fix: lossless: true preserves trailing whitespace in a selector that ends empty, such as :not(a, ). Note that :not( ) now yields a selector holding one empty string node rather than an empty selector (#337 by @​theRizwan)
  • fix: consume the whitespace that terminates a hexadecimal escape, so [x="\000061 b"] unescapes to ab (#340 by @​jakezwang)
  • fix: set the parent on every node passed to insertBefore and insertAfter, not only the first (#343 by @​feritcemkahraman)
  • fix: assigning combinator.value clears the stale raw spelling instead of being ignored (#342 by @​SAY-5)
  • fix: keep whitespace around the namespace separator in attribute selectors, so [ foo | bar ] round-trips (#339 by @​dkryaklin)

7.1.6 - 2026-09-03

7.1.5 - 2026-08-07

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4 - 2026-06-11

  • fix: tolerate non-node children when serializing selectors

7.1.3 - 2026-06-11

  • Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2 - 2026-06-09

7.1.1

  • perf: replace startsWith with strict equality (#308)
  • fix(types): add walkUniversal declaration (#311)

7.1.0

  • feat: insert(Before|After) support multiple new node

7.0.0

  • Feat: make insertions during iteration safe (major)

6.1.2

  • Fixed: erroneous trailing combinators in pseudos

6.1.1

... (truncated)

Commits
  • 154c2b0 7.1.7
  • e8dc65f docs: add CVE-2026-104844 to the 7.1.6 changelog entry
  • d5122b0 fix: keep whitespace around the namespace separator in attribute selectors (#...
  • 80ab254 fix: invalidate stale raw spelling on combinator value assignment (#342)
  • ba353c7 fix: set parents for all variadic inserted nodes (#343)
  • 8b2d16d Consume whitespace after hexadecimal CSS escapes (#340)
  • 8f10b8d fix: lossless mode drops whitespace when a selector ends empty (#337)
  • 15c2b45 chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (#347)
  • 4eb3468 7.1.6
  • 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates smol-toml from 1.8.0 to 1.9.1

Release notes

Sourced from smol-toml's releases.

v1.9.1

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.9.0...v1.9.1

v1.9.0

Huge update!!! This is most likely the largest update the library received since its release, with lots of new features and improvements.

Performance improvements

Significant parts of the internal parse logic have been rewritten, improving performance by 1.5x-2x. The library was already comfortably ahead of the others, but it is now faster than ever, sitting at 4x faster parse performance than the closest maintained implementation.

Problematic code paths have also been replaced by safer implementations, solving potential DoS vectors. See GHSA-r4xh-jqrq-34v2.

Note: the objects returned by the library now have a null prototype. This is a transparent change for 99.9% of users, and is one of the most significant contributors to the major performance gains in this version.

Full Temporal support

Version 1.8.0 brought support for Temporal in stringify; now the library is also able to emit Temporal objects instead of its own ad-hoc TomlDate object. It is not enabled by default, but it will become the default in v2. Enable by setting useLegacyDate: false in the parser's options.

Better Temporal support in stringify

Temporal support has been improved since it released: Temporal objects that cannot be represented (such as Temporal.PlainMonthDay) now throw an error (instead of silently emitting a bogus object).

A new option has been added to stringify to disallow Temporal objects that cannot be fully represented in TOML. This includes ZonedDateTime objects with a IANA timezone attached instead of a plain offset, and dates with a specific calendar value set. Enable by setting strictTemporal: true in the options.

Handling of unsafe keys

Since its release the library has been protected against prototype pollution attacks, setting properties like __proto__ using safe mechanisms that do not trigger prototype pollution. However, while the returned objects are safe on their own, they may become problematic if used carelessly.

Inspired by secure-json-parse, the library now offers a way to either drop unsafe properties from the returned object, or to throw an error and reject documents altogether. By default, these potentially unsafe keys are preserved and returned.

Miscellaneous updates

  • Unicode BOM is now gracefully accepted and ignored.
  • Table array headers are now properly checked again. Reported in #65.
  • Closed certain gaps where invalid whitespace would be accepted. Reported in #61.
  • Bogus local date and local time values with a UTC offset are no longer accepted.
  • Certain error messages are more accurate and handle errors at line boundaries better.
  • The default export of the lib is now formally deprecated; use a import * instead. Proposed in #50.
  • On Node 20+, strings that contain lone surrogates are now normalised to well-formed strings.
  • On Node 20+, keys that contain lone surrogates are now rejected.

Full Changelog: squirrelchat/smol-toml@v1.8.0...v1.9.0

Commits
  • 69aa050 fix: actually properly fix exponent issues
  • 7be7084 chore: version bump
  • be3290d chore: upgrade deps
  • 86c7613 fix: reject invalid extra exponent sign
  • 6f9739a fix: gate [is|to]WellFormed (Node 18 compat)
  • a73ca32 fix: no Temporal with toml-test when Node < 26
  • 7727890 chore: version bump
  • 641903d chore: rewrite README.md
  • 2df14c5 fix(types): make it work if Temporal doesn't exist
  • 3eaa44e chore: update benchmark harness
  • Additional commits viewable in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Changelog

Sourced from source-map-js's changelog.

1.2.2

Commits

Updates vite from 8.3.0 to 8.3.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

6.4.4 (2026-10-06)

Commits

Updates postcss-selector-parser from 6.1.4 to 7.1.7

Release notes

Sourced from postcss-selector-parser's releases.

7.1.7

  • fix: lossless: true preserves trailing whitespace in a selector that ends empty, such as :not(a, ). Note that :not( ) now yields a selector holding one empty string node rather than an empty selector (#337 by @​theRizwan)
  • fix: consume the whitespace that terminates a hexadecimal escape, so [x="\000061 b"] unescapes to ab (#340 by @​jakezwang)
  • fix: set the parent on every node passed to insertBefore and insertAfter, not only the first (#343 by @​feritcemkahraman)
  • fix: assigning combinator.val...

    Description has been truncated

@dependabot
dependabot Bot requested a review from prestoncabe as a code owner October 21, 2026 22:48
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@prestoncabe

prestoncabe commented Oct 22, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
build(deps): bump the npm_and_yarn group across 3 directories with 7 …
33af27d 
…updates

Bumps the npm_and_yarn group with 4 updates in the /builder-frontend directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker), [seroval](https://github.com/lxsmnsyc/seroval) and [source-map-js](https://github.com/7rulnik/source-map-js).
Bumps the npm_and_yarn group with 5 updates in the /docs directory:

| Package | From | To |
| --- | --- | --- |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.5` |
| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |
| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |
| [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) | `6.1.4` | `7.1.7` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.8.0` | `1.9.1` |
| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.5` |
| [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) | `6.1.4` | `7.1.7` |
| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.8.0` | `1.9.1` |
| [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.5` |

Bumps the npm_and_yarn group with 4 updates in the /website directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [source-map-js](https://github.com/7rulnik/source-map-js), [sharp](https://github.com/lovell/sharp) and [smol-toml](https://github.com/squirrelchat/smol-toml).


Updates `vite` from 6.4.3 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `@vitest/mocker` from 4.1.11 to 4.1.12
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.12/packages/mocker)

Updates `seroval` from 1.5.6 to 1.6.12
- [Release notes](https://github.com/lxsmnsyc/seroval/releases)
- [Commits](https://github.com/lxsmnsyc/seroval/commits)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `vite` from 6.4.3 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `vite` from 6.4.3 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `vite` from 8.3.0 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `postcss-selector-parser` from 6.1.4 to 7.1.7
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@6.1.4...7.1.7)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `vite` from 8.3.0 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `postcss-selector-parser` from 6.1.4 to 7.1.7
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@6.1.4...7.1.7)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `vite` from 8.3.0 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `vite` from 8.3.0 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `vite` from 8.3.0 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `smol-toml` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.8.0...v1.9.1)

Updates `source-map-js` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

Updates `vite` from 8.3.0 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

---
updated-dependencies:
- dependency-name: "@vitest/mocker"
  dependency-version: 4.1.12
  dependency-type: indirect
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.7
  dependency-type: indirect
- dependency-name: seroval
  dependency-version: 1.6.12
  dependency-type: indirect
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: direct:production
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: indirect
- dependency-name: smol-toml
  dependency-version: 1.9.1
  dependency-type: indirect
- dependency-name: smol-toml
  dependency-version: 1.9.1
  dependency-type: indirect
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
- dependency-name: vite
  dependency-version: 6.4.5
  dependency-type: direct:development
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: indirect
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-99ce791207 branch from 5cb3d9c to 33af27d Compare October 22, 2026 23:54
@prestoncabe
prestoncabe merged commit 6fcf691 into main Oct 23, 2026
5 checks passed
@prestoncabe
prestoncabe deleted the dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-99ce791207 branch October 23, 2026 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@prestoncabe prestoncabe Awaiting requested review from prestoncabe prestoncabe is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@prestoncabe