Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 35 updates - #859

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-48d1a6739e
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-48d1a6739e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •

Copy link
Copy Markdown

Bumps the minor-and-patch group with 35 updates in the / directory:

Package From To
@biomejs/biome 2.5.14 2.5.15
@types/node 26.6.3 26.6.4
seroval 1.6.7 1.6.8
solid-js 1.9.15 1.9.16
@babel/core 8.0.6 8.0.7
@babel/preset-typescript 8.0.1 8.0.7
babel-preset-solid 1.9.15 1.9.16
@scalar/hono-api-reference 0.12.6 0.12.10
hucre 1.1.0 1.2.0
pdfjs-dist 6.3.289 6.4.299
@napi-rs/canvas 1.0.9 1.0.10
@tabler/icons 3.48.0 3.49.0
@modelcontextprotocol/sdk 1.30.1 1.32.1
hono-openapi 1.3.3 1.3.4
katex 0.18.9 0.19.0
liquidjs 10.29.0 10.30.0
marked 18.0.14 18.1.0
mermaid 12.0.0 12.1.0
nodemailer 10.0.10 10.0.15
postcss 8.5.28 8.5.29
sanitize-html 2.17.7 2.18.0
@types/sanitize-html 2.16.1 2.16.2
web-vitals 6.2.2 6.2.3
@types/sanitize-html 2.16.1 2.16.2
hono 4.13.9 4.13.13
zxing-wasm 3.1.4 3.1.5
@stackforge-eu/factur-x 1.4.2 1.4.3
@zone-eu/mailsplit 5.4.17 5.4.20
fast-xml-parser 5.11.1 5.11.2
mailparser 3.9.28 3.9.36
@types/mailparser 3.4.6 3.9.0
@types/mailparser 3.4.6 3.9.0
@lezer/highlight 1.2.4 1.2.5
ical-generator 11.1.1 11.1.2
elysia 1.4.29 1.4.30
@tabler/icons-webfont 3.48.0 3.49.0
axe-core 4.11.0 4.14.0

Updates @biomejs/biome from 2.5.14 to 2.5.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes

  • #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

    For example, the following snippet triggers the rule.

    function Component({ items = [] }) {
      return items;
    }
  • #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

    <script>
      export let name;
    </script>
  • #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

    {
      "linter": {
        "rules": {
          "nursery": {
            "useLogicalProperties": {
              "level": "warn",
              "options": {
                "direction": "rtl"
              }
            }
          }
        }
      }
    }
  • #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

    import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.15

Patch Changes

  • #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

    For example, the following snippet triggers the rule.

    function Component({ items = [] }) {
      return items;
    }
  • #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

    <script>
      export let name;
    </script>
  • #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

    {
      "linter": {
        "rules": {
          "nursery": {
            "useLogicalProperties": {
              "level": "warn",
              "options": {
                "direction": "rtl"
              }
            }
          }
        }
      }
    }
  • #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

    import { page } from "$app/stores";
  • #11723 3b429d1 Thanks @​m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

Updates @types/node from 26.6.3 to 26.6.4

Commits

Updates seroval from 1.6.7 to 1.6.8

Commits

Updates solid-js from 1.9.15 to 1.9.16

Commits
  • 761f89f chore: version packages for 1.9.16 release
  • e341da9 fix(server): reassign Suspense completed closure on each render to prevent st...
  • 37a9d35 Update DOM Expressions to 0.40.11 and seroval to 1.6.8
  • 1af7cac chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 (#3357)
  • e901df4 docs: fix grammar in h/README.md 'Differences from JSX' section (#3588)
  • b25c557 ci: bump cve-lite-cli action from v1.29.0 to v1.32.0 (#3273)
  • f47845f chore: refresh lockfile after 1.9.15 peer bump
  • See full diff in compare view

Updates @babel/core from 8.0.6 to 8.0.7

Release notes

Sourced from @​babel/core's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

Changelog

Sourced from @​babel/core's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
Commits

Updates @babel/preset-typescript from 8.0.1 to 8.0.7

Release notes

Sourced from @​babel/preset-typescript's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

v8.0.6 (2026-09-18)

Thanks @​robhogan for your first PR!

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @​babel/preset-typescript's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

v8.0.6 (2026-09-18)

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

... (truncated)

Commits

Updates babel-preset-solid from 1.9.15 to 1.9.16

Commits
  • 761f89f chore: version packages for 1.9.16 release
  • e341da9 fix(server): reassign Suspense completed closure on each render to prevent st...
  • 37a9d35 Update DOM Expressions to 0.40.11 and seroval to 1.6.8
  • 1af7cac chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 (#3357)
  • e901df4 docs: fix grammar in h/README.md 'Differences from JSX' section (#3588)
  • b25c557 ci: bump cve-lite-cli action from v1.29.0 to v1.32.0 (#3273)
  • f47845f chore: refresh lockfile after 1.9.15 peer bump
  • See full diff in compare view

Updates @scalar/hono-api-reference from 0.12.6 to 0.12.10

Changelog

Sourced from @​scalar/hono-api-reference's changelog.

0.12.10

0.12.9

0.12.8

0.12.7

Patch Changes

  • #10375: Raise muted text, code-string blue and the deprecated schema row to the 4.5:1 text contrast minimum across the shipped themes

    An accessibility audit turned up text that is legible in the default theme but not in several of the presets, which pair the default greys and blues with an off-white page background. Nine presets and four integration themes get a hue-preserving nudge:

    • Light --scalar-color-2 now clears 4.5:1 on both the page background and the grey card background in every preset. That covers alternate, bluePlanet, mars and saturn, which paired the default grey with an off-white page, and custom-theme-starter, deepSpace, elysiajs, fastify, kepler and purple, which copied the default grey and were left behind when the default moved.
    • Light --scalar-color-blue, which colours code strings, now clears 4.5:1 on the grey example background in alternate, bluePlanet, deepSpace, elysiajs, fastify, kepler and moon, and in the Docusaurus, NestJS, Next.js and SvelteKit themes.
    • Dark --scalar-color-blue now clears 4.5:1 in purple and saturn, and in the Hono and Docusaurus dark themes.
    • Deprecated schema rows no longer fade their contents to 75% opacity, which had dropped their muted text to 3.0:1. The diagonal stripes, the strikethrough on the property name and the Deprecated badge still mark the row.
    • The AsyncAPI send and receive pills blend their label further toward the body text colour, so they read against the tinted fill in every preset but laserwave.
    • --scalar-focus-color sits further from the accent so a keyboard focus ring clears 3:1 on --scalar-background-3 as well, which some presets use for the selected sidebar item.

    laserwave still misses in light mode, where it reuses its dark accents unchanged; bringing it up is a redesign of the preset rather than a nudge.

Commits

Updates hucre from 1.1.0 to 1.2.0

Release notes

Sourced from hucre's releases.

v1.2.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • d5fbbcf chore: release v1.2.0
  • 82916ed perf(xlsx): spin the Agile password hash synchronously (#575)
  • 680e3c2 fix: bound XLSX allocation and number-format work (#577)
  • db9ef7a chore: migrate to Bun and update security contact (#576)
  • c9ed738 feat(xlsx): support autoFilter and conditionalRules in stream writer (#571)
  • 8ad01ff feat(xls): read BIFF5/7 workbooks (Excel 5.0/95) (#572)
  • de00ffc fix(xls,xlsb): a FORMAT record redefining a built-in id wins (#568) (#569)
  • See full diff in compare view

Updates pdfjs-dist from 6.3.289 to 6.4.299

Release notes

Sourced from pdfjs-dist's releases.

v6.4.299

This release contains improvements for annotation rendering, font conversion, form handling, pattern rendering, performance, text selection and the viewer.

Changes since v6.3.289

... (truncated)

Commits
  • d0991a0 Merge pull request #22064 from Snuffleupagus/_requestChunks-avoid-pointless-r...
  • d7e7101 Merge pull request #22062 from timvandermeij/updates
  • bcf8943 Avoid creating a pointless requestId in the `ChunkedStreamManager.prototype...
  • d03359c Merge pull request #22061 from Snuffleupagus/SupportedImageMimeTypes-Set
  • 76f6eb6 Fix vulnerability in the fast-uri dependency
  • e987c74 Upgrade eslint-plugin-unicorn to version 77.0.0
  • bf5f6ea Upgrade eslint-plugin-jsdoc to version 65.0.2
  • 7dc3cf0 Update dependencies to the most recent versions
  • e9d1c85 Merge pull request #22041 from calixteman/sampled-fn-arity
  • c67fe15 Check shading function dimensions and bound sampled interpolation
  • Additional commits viewable in compare view

Updates @napi-rs/canvas from 1.0.9 to 1.0.10

Release notes

Sourced from @​napi-rs/canvas's releases.

v1.0.10

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.9...v1.0.10

Changelog

Sourced from @​nap...

Description has been truncated

…5 updates

Bumps the minor-and-patch group with 35 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.14` | `2.5.15` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.4` |
| [seroval](https://github.com/lxsmnsyc/seroval) | `1.6.7` | `1.6.8` |
| [solid-js](https://github.com/solidjs/solid) | `1.9.15` | `1.9.16` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.6` | `8.0.7` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `8.0.1` | `8.0.7` |
| [babel-preset-solid](https://github.com/solidjs/solid) | `1.9.15` | `1.9.16` |
| [@scalar/hono-api-reference](https://github.com/scalar/scalar/tree/HEAD/integrations/hono) | `0.12.6` | `0.12.10` |
| [hucre](https://github.com/productdevbook/hucre) | `1.1.0` | `1.2.0` |
| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.3.289` | `6.4.299` |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `1.0.9` | `1.0.10` |
| [@tabler/icons](https://github.com/tabler/tabler-icons) | `3.48.0` | `3.49.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.1` | `1.32.1` |
| [hono-openapi](https://github.com/rhinobase/hono-openapi) | `1.3.3` | `1.3.4` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.18.9` | `0.19.0` |
| [liquidjs](https://github.com/harttle/liquidjs) | `10.29.0` | `10.30.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.14` | `18.1.0` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `12.0.0` | `12.1.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.10` | `10.0.15` |
| [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.29` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.7` | `2.18.0` |
| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.1` | `2.16.2` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `6.2.2` | `6.2.3` |
| [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html) | `2.16.1` | `2.16.2` |
| [hono](https://github.com/honojs/hono) | `4.13.9` | `4.13.13` |
| [zxing-wasm](https://github.com/Sec-ant/zxing-wasm) | `3.1.4` | `3.1.5` |
| [@stackforge-eu/factur-x](https://github.com/StackForge-EU/factur-x) | `1.4.2` | `1.4.3` |
| [@zone-eu/mailsplit](https://github.com/zone-eu/mailsplit) | `5.4.17` | `5.4.20` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.11.1` | `5.11.2` |
| [mailparser](https://github.com/nodemailer/mailparser) | `3.9.28` | `3.9.36` |
| [@types/mailparser](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mailparser) | `3.4.6` | `3.9.0` |
| [@types/mailparser](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mailparser) | `3.4.6` | `3.9.0` |
| [@lezer/highlight](https://github.com/lezer-parser/highlight) | `1.2.4` | `1.2.5` |
| [ical-generator](https://github.com/sebbo2002/ical-generator) | `11.1.1` | `11.1.2` |
| [elysia](https://github.com/elysiajs/elysia) | `1.4.29` | `1.4.30` |
| [@tabler/icons-webfont](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-webfont) | `3.48.0` | `3.49.0` |
| [axe-core](https://github.com/dequelabs/axe-core) | `4.11.0` | `4.14.0` |



Updates `@biomejs/biome` from 2.5.14 to 2.5.15
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.15/packages/@biomejs/biome)

Updates `@types/node` from 26.6.3 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `seroval` from 1.6.7 to 1.6.8
- [Release notes](https://github.com/lxsmnsyc/seroval/releases)
- [Commits](https://github.com/lxsmnsyc/seroval/commits)

Updates `solid-js` from 1.9.15 to 1.9.16
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/compare/solid-js@1.9.15...v1.9.16)

Updates `@babel/core` from 8.0.6 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-core)

Updates `@babel/preset-typescript` from 8.0.1 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-preset-typescript)

Updates `babel-preset-solid` from 1.9.15 to 1.9.16
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/compare/babel-preset-solid@1.9.15...v1.9.16)

Updates `@scalar/hono-api-reference` from 0.12.6 to 0.12.10
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/integrations/hono/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/integrations/hono)

Updates `hucre` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/productdevbook/hucre/releases)
- [Commits](productdevbook/hucre@v1.1.0...v1.2.0)

Updates `pdfjs-dist` from 6.3.289 to 6.4.299
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v6.3.289...v6.4.299)

Updates `@napi-rs/canvas` from 1.0.9 to 1.0.10
- [Release notes](https://github.com/Brooooooklyn/canvas/releases)
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md)
- [Commits](Brooooooklyn/canvas@v1.0.9...v1.0.10)

Updates `@tabler/icons` from 3.48.0 to 3.49.0
- [Release notes](https://github.com/tabler/tabler-icons/releases)
- [Commits](tabler/tabler-icons@v3.48.0...v3.49.0)

Updates `@modelcontextprotocol/sdk` from 1.30.1 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.1...1.32.1)

Updates `hono-openapi` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/rhinobase/hono-openapi/releases)
- [Changelog](https://github.com/rhinobase/hono-openapi/blob/main/CHANGELOG.md)
- [Commits](rhinobase/hono-openapi@1.3.3...1.3.4)

Updates `katex` from 0.18.9 to 0.19.0
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.18.9...v0.19.0)

Updates `liquidjs` from 10.29.0 to 10.30.0
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.29.0...v10.30.0)

Updates `marked` from 18.0.14 to 18.1.0
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.14...v18.1.0)

Updates `mermaid` from 12.0.0 to 12.1.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.0.0...mermaid@12.1.0)

Updates `nodemailer` from 10.0.10 to 10.0.15
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.10...v10.0.15)

Updates `postcss` from 8.5.28 to 8.5.29
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.28...8.5.29)

Updates `sanitize-html` from 2.17.7 to 2.18.0
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.18.0/packages/sanitize-html)

Updates `@types/sanitize-html` from 2.16.1 to 2.16.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `web-vitals` from 6.2.2 to 6.2.3
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v6.2.2...v6.2.3)

Updates `@types/sanitize-html` from 2.16.1 to 2.16.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

Updates `hono` from 4.13.9 to 4.13.13
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.9...v4.13.13)

Updates `zxing-wasm` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/Sec-ant/zxing-wasm/releases)
- [Changelog](https://github.com/Sec-ant/zxing-wasm/blob/main/CHANGELOG.md)
- [Commits](Sec-ant/zxing-wasm@v3.1.4...v3.1.5)

Updates `@stackforge-eu/factur-x` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/StackForge-EU/factur-x/releases)
- [Changelog](https://github.com/StackForge-EU/factur-x/blob/main/CHANGELOG.md)
- [Commits](StackForge-EU/factur-x@v1.4.2...v1.4.3)

Updates `@zone-eu/mailsplit` from 5.4.17 to 5.4.20
- [Release notes](https://github.com/zone-eu/mailsplit/releases)
- [Changelog](https://github.com/zone-eu/mailsplit/blob/master/CHANGELOG.md)
- [Commits](zone-eu/mailsplit@v5.4.17...v5.4.20)

Updates `fast-xml-parser` from 5.11.1 to 5.11.2
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.11.1...v5.11.2)

Updates `mailparser` from 3.9.28 to 3.9.36
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v3.9.28...v3.9.36)

Updates `@types/mailparser` from 3.4.6 to 3.9.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mailparser)

Updates `@types/mailparser` from 3.4.6 to 3.9.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mailparser)

Updates `@lezer/highlight` from 1.2.4 to 1.2.5
- [Changelog](https://github.com/lezer-parser/highlight/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/highlight/commits)

Updates `ical-generator` from 11.1.1 to 11.1.2
- [Release notes](https://github.com/sebbo2002/ical-generator/releases)
- [Changelog](https://github.com/sebbo2002/ical-generator/blob/develop/CHANGELOG.md)
- [Commits](sebbo2002/ical-generator@v11.1.1...v11.1.2)

Updates `elysia` from 1.4.29 to 1.4.30
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.4.29...1.4.30)

Updates `@tabler/icons-webfont` from 3.48.0 to 3.49.0
- [Release notes](https://github.com/tabler/tabler-icons/releases)
- [Changelog](https://github.com/tabler/tabler-icons/blob/main/packages/icons-webfont/CHANGELOG.md)
- [Commits](https://github.com/tabler/tabler-icons/commits/v3.49.0/packages/icons-webfont)

Updates `axe-core` from 4.11.0 to 4.14.0
- [Release notes](https://github.com/dequelabs/axe-core/releases)
- [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core@v4.11.0...v4.14.0)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: seroval
  dependency-version: 1.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: solid-js
  dependency-version: 1.9.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@babel/core"
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@babel/preset-typescript"
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: babel-preset-solid
  dependency-version: 1.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@scalar/hono-api-reference"
  dependency-version: 0.12.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: hucre
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pdfjs-dist
  dependency-version: 6.4.299
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@napi-rs/canvas"
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@tabler/icons"
  dependency-version: 3.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: hono-openapi
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: katex
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: liquidjs
  dependency-version: 10.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: marked
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mermaid
  dependency-version: 12.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 10.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sanitize-html
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: web-vitals
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/sanitize-html"
  dependency-version: 2.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: hono
  dependency-version: 4.13.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zxing-wasm
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@stackforge-eu/factur-x"
  dependency-version: 1.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@zone-eu/mailsplit"
  dependency-version: 5.4.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fast-xml-parser
  dependency-version: 5.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: mailparser
  dependency-version: 3.9.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/mailparser"
  dependency-version: 3.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/mailparser"
  dependency-version: 3.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@lezer/highlight"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ical-generator
  dependency-version: 11.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: elysia
  dependency-version: 1.4.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@tabler/icons-webfont"
  dependency-version: 3.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: axe-core
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates. label Oct 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 11, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/minor-and-patch-48d1a6739e branch October 11, 2026 06:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants