Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 13 updates - #358

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-8eb2680cd2
Open

chore(deps): bump the production-dependencies group across 1 directory with 13 updates#358
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-8eb2680cd2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown

Bumps the production-dependencies group with 13 updates in the / directory:

Package From To
@fission-ai/openspec 1.6.0 1.11.0
@inquirer/ansi 2.0.5 2.0.7
@inquirer/core 11.1.10 12.0.1
@inquirer/figures 2.0.5 2.0.8
@inquirer/prompts 8.4.3 8.7.0
@inquirer/type 4.0.5 4.1.0
antd 6.5.2 6.6.2
commander 14.0.3 15.0.0
dompurify 3.4.13 3.4.14
highlight.js 11.11.1 11.12.0
marked 18.0.6 18.0.11
mermaid 11.16.1 11.17.2
smol-toml 1.7.1 1.8.0

Updates @fission-ai/openspec from 1.6.0 to 1.11.0

Release notes

Sourced from @​fission-ai/openspec's releases.

v1.11.0 - Spec Diffs & Batch Status

What's New in v1.11.0

This release makes it easier to see exactly what a change proposes, check your whole workspace at a glance, and trust that your specs and skills land right where you expect.

New

  • openspec show <change> --diff - See precisely what a change alters. Because a MODIFIED requirement has to restate every scenario it keeps, the delta you review is mostly text identical to the main spec. --diff isolates the lines that actually change, as a colorized unified diff per requirement, with full text for ADDED, the authored Reason and Migration notes for REMOVED, and clear FROM/TO for RENAMED. --json --diff brings the same detail to your pipelines, and --store <id> diffs against that store.
  • openspec status --all - Check every active change in one command instead of one process per change. The JSON envelope is sorted and stable, and a change that fails to load contributes a diagnostic in place rather than stopping the sweep, so dashboards and CI always get the full picture.

Improved

  • Explore mode asks before it writes - Explore now names the artifacts or files it proposes to create or edit and waits for a clear yes in a separate message before touching anything. Answering its own clarifying questions no longer reads as consent. Read-only exploration stays friction-free.
  • Explore diagrams render consistently everywhere - Worked examples use plain ASCII, so boxes and tables keep their alignment across terminals, fonts, and locales.
  • Fish completions stay on topic - Commands, subcommands, flags, and positionals no longer fall back to filesystem suggestions, while genuine path arguments still complete paths.
  • Antigravity uses the shared .agents/ root - Skills and workflows land where Antigravity looks for them and coexist cleanly with other tools sharing that tree. An existing .agent/ install migrates automatically, and anything you customized is preserved and pointed out rather than overwritten.
  • openspec validate catches an unwritten Purpose - A capability still carrying the placeholder that archive writes is now reported, so specs get a real Purpose instead of quietly keeping a to-do. It stays a warning by default and only fails under --strict.

Fixed

  • Archive keeps requirement order on rename - A renamed requirement stays in its original position instead of moving to the end of the spec, keeping archive diffs small and easy to read.
  • schema init --default sets the default - The command now writes the schema key the config loader actually reads, so a new schema takes effect right away. It also validates and stages config changes before installing, and rolls back cleanly if anything fails.

New Contributors

A warm welcome to six people who made their first contribution to OpenSpec in this release. Thank you.

Full Changelog: Fission-AI/OpenSpec@v1.10.0...v1.11.0

v1.10.0 - Zed support, quieter installs

What's New in v1.10.0

Zed joins the supported tools, init speaks your language, and installing OpenSpec no longer trips npm's alarm.

New

  • Zed Agent - openspec init --tools zed installs the workflow skills into .agents/skills/, where Zed's built-in Agent finds them. Skills-only, so they're invoked as /openspec-propose. Requires Zed v1.4.2 or newer.
  • Non-English artifacts - openspec init --language <language> sets the language for generated artifacts without hand-editing config.yaml. OpenSpec headings and SHALL/MUST stay in English, so your specs still validate.

Improved

  • Installing - the published package now declares no install scripts at all, so npm install -g @fission-ai/openspec no longer emits the allow-scripts warning that read like a packaging fault (and whose suggested fix, npm approve-scripts, never worked for a global install anyway). The shell-completions tip now comes from the CLI itself: once, on stderr, and only when there's a human there to read it.
  • Task plans - generated tasks now have to say how you'd know they're done, whether that's a test, a command, an observable result, or a delivered artifact. "Implement the thing" no longer passes for a plan.

... (truncated)

Changelog

Sourced from @​fission-ai/openspec's changelog.

1.11.0

Minor Changes

  • #1301 a7353ae Thanks @​m-tanner! - Add openspec status --all, which reports every active change in one process instead of one CLI spawn per change. --all --json emits a single { "changes": [ <status>, ... ], "root" } envelope sorted by change name; a change that fails to load contributes { "changeName", "status": [diagnostic] } in place rather than aborting the sweep. A partial failure exits 1 in both text and JSON modes while preserving the complete JSON envelope. Mutually exclusive with --change.

  • #980 dd7cea3 Thanks @​bsmedberg-xometry! - show: add --diff, which renders each delta requirement against the requirement it replaces in the main spec instead of reprinting the whole block. A MODIFIED requirement has to carry every scenario it keeps, so reviewers could not see what a change actually altered without diffing files by hand. openspec show <change> --diff now prints a colorized unified diff per requirement (additions green, removals red), the full text of ADDED requirements, the authored Reason/Migration text of REMOVED ones, and FROM/TO for RENAMED ones; a requirement that is renamed and modified in the same delta is diffed against its old name. --json --diff keeps the existing payload shape and adds each applicable diff and warning field to MODIFIED deltas only. Main specs resolve against the same root as the change, so --store <id> diffs against that store. Without --diff, openspec show <change> prints exactly what it printed before.

Patch Changes

  • #830 109f81f Thanks @​alfred-openspec! - Write Antigravity skills and workflows to .agents/, arbitrate its shared skill tree with other tools, and safely migrate an existing .agent/ install.

  • #1712 04b37ac Thanks @​Marzx13! - archive: preserve a requirement's original position when renaming it instead of moving the renamed block to the end of the spec.

  • #1716 7010e26 Thanks @​aymanxdev! - explore: require explicit, scope-bound confirmation before the skill uses any command or tool that can create, edit, move, or delete a file. The explore skill's guardrails let "if the user asks" cover answers to its own clarifying questions, so an agent could treat a design discussion as a go-ahead and start creating schemas or editing openspec/config.yaml uninvited. The skill and the /opsx:explore command now instruct the agent to name the proposed artifacts or files, ask a direct yes/no question, and wait for confirmation in a separate message before writing. Read-only commands and tools remain available without confirmation, and expanding the confirmed scope requires another confirmation.

  • #1199 ab81a4b Thanks @​leo-ar! - Improve Fish completions so command, subcommand, flag, and indexed positional completions no longer fall back to filesystem suggestions unless the target is a real path.

  • #1010 e5e350d Thanks @​Dansyuqri! - Draw explore-mode diagrams with plain ASCII. The worked examples in the explore skill and /opsx:explore command used Unicode box-drawing, arrow, and marker glyphs, whose display width varies across terminals, fonts, and locales. Agents copied the style, causing padded boxes and aligned tables to drift.

  • 2fa679f Thanks @​ryandemelo! - Make schema init --default validate and stage config changes before installing a schema, and roll back both files if either install fails. The staging and backup directories it creates are excluded from schema discovery, so they are never offered as real schemas.

  • #1671 126c5d6 Thanks @​kitimark! - openspec validate now reports a ## Purpose that is still the placeholder archive writes for a new capability, instead of passing it. The placeholder is longer than the 50-character brevity floor, so until now the one check meant to catch a Purpose nobody wrote was satisfied by the exact text saying nobody wrote one — a spec whose Purpose read Does stuff. failed --strict while a spec whose Purpose said nothing at all passed. A capability could carry the placeholder indefinitely while every command reported success.

    It is a warning, so a project that already has placeholders on disk keeps validating by default and only --strict fails. The message says to edit the main spec directly, since a ## Purpose in a delta is read only when the capability is created and cannot replace an existing one.

    Detection is narrow. The placeholder archive generates is recognised through the same definition that writes it, wherever it appears in the Purpose. Otherwise only a TBD or TODO opening the Purpose counts, so The retry budget is TBD pending benchmarks is still a valid Purpose and a word like TBDs is not a marker. Fenced code inside the Purpose is quoted material rather than the Purpose speaking, so a spec that documents the placeholder keeps passing. An empty Purpose is unchanged, and a Purpose reported as a placeholder is no longer also reported as too brief, so a bare TBD yields one finding rather than two.

    openspec archive is unaffected: it validates rebuilt specs without --strict, so a spec archive writes still passes the validation it would have passed before, and the text archive writes is unchanged.

1.10.0

Minor Changes

  • #1685 c747ed1 Thanks @​clay-good! - Add openspec init --language <language> to configure the language used for artifacts in new projects.

Patch Changes

  • #1704 7276c6c Thanks @​clay-good! - Drop the npm postinstall script. Its only job was printing a one-line tip about opt-in shell completions, but shipping any install script made npm install -g @fission-ai/openspec emit an allow-scripts warning that reads as a packaging fault (and npm approve-scripts then fails with ENOMATCH on a global install, since it looks in the local project). The tip now prints from the CLI on its first run — to stderr, in an interactive terminal, once, and not at all if you already have completions installed — and the published package declares no preinstall/install/postinstall script, so a registry install runs no OpenSpec code. Suppress the tip with OPENSPEC_NO_COMPLETIONS=1.

  • #1656 a72a74d Thanks @​clay-good! - ### Bug Fixes

    • openspec update now suggests restarting an IDE only when it updates an IDE-resident tool. CLI tools such as Claude Code, Codex, and Gemini CLI no longer show an unnecessary restart hint.
  • #1703 9643888 Thanks @​clay-good! - Point the spec-driven specs instruction's main-spec read and edit at the store-aware root. It named openspec/specs/<capability-path>/spec.md, a path relative to the current directory, for both step 1 of the MODIFIED workflow ("locate the existing requirement") and the edit that fixes a leftover TBD Purpose. When the change lives in a store — whether selected with --store, a project store: pointer, or a global default store — the main spec is under the store root, so that read missed it, or silently returned a different capability when a local one happened to share the name, and the MODIFIED block was then copied from the wrong requirement. Both operations now use <planningHome.root>/openspec/specs/..., the root already returned by openspec instructions ... --json and the same convention the sync and archive workflows use. Fixes #1702.

  • #1699 18688c8 Thanks @​clay-good! - archive: tell the author how to retire a capability when the emptied spec also holds content the merge cannot account for. That combination printed only "Spec must have at least one requirement" and no guidance at all; the abort now names the blocking lines and reports a retire_capabilities marker that is present but cannot be honored. Authored content quoted in those messages - the blocking lines, and the marker's own reason, which openspec validate prints too - is stripped of control characters and bounded in length before it reaches the terminal.

  • #1660 7da3f34 Thanks @​clay-good! - Require generated tasks to state how their completion can be verified.

... (truncated)

Commits
  • a0ddb60 Version Packages (#1728)
  • 2fa679f fix(schema): make schema init --default actually set the default (#1709)
  • e5e350d fix(explore): use ASCII in diagram examples (#1010)
  • dd7cea3 feat(show): diff delta requirements against the main specs (#980)
  • ab81a4b fix(completions): stop Fish completions falling back to filenames (#1199)
  • 109f81f fix(antigravity): update skill and workflow paths from .agent to .agents (#830)
  • 04b37ac fix(archive): preserve requirement order when renaming (#1712)
  • 126c5d6 fix(validate): report a Purpose left as the archive placeholder (#1671)
  • a7353ae feat(status): add --all for batch status of every active change (#1301)
  • c0c50f9 chore(deps-dev): bump the development-dependencies group with 2 updates (#1718)
  • Additional commits viewable in compare view

Updates @inquirer/ansi from 2.0.5 to 2.0.7

Release notes

Sourced from @​inquirer/ansi's releases.

@​inquirer/i18n@​1.3.0

What's new

  • Added the toggleMask help tip for the new password reveal shortcut (ctrl+t).
  • yesLabel/noLabel now pass straight through as keywords for localized confirm parsing (replacing the hintYes/hintNo locale fields).

What's fixed

  • Localized yes/no answers are now matched per-locale (e.g. Spanish s, French o, Chinese 是/否) instead of only English y/n.

Dependencies

  • @inquirer/core bumped to ^12.0.1
  • @inquirer/type bumped to ^4.1.0

@​inquirer/i18n@​1.2.0

Dependencies

  • @inquirer/core bumped to ^12.0.0
  • @inquirer/prompts bumped to ^8.6.0

No source changes.

@​inquirer/i18n@​1.0.0

New package - first release!

Drop-in replacement for @inquirer/prompts with localized text.

Commits
  • b43359d chore: Publish new release
  • 24ecae2 chore: fix yarn.lock
  • b078d97 fix: validate package engine compatibility
  • 3a49f9f chore(deps-dev): Bump oxfmt in the formatting group (#2143)
  • 9cc492f chore(deps): Bump fast-wrap-ansi from 0.2.0 to 0.2.2 (#2146)
  • feb7edf chore(deps-dev): Bump @​types/node in the types group (#2145)
  • a05eb68 chore(deps-dev): Bump the build group with 3 updates (#2144)
  • f6ddfce chore(deps-dev): Bump the linting group with 3 updates (#2142)
  • 5ca6d11 chore: Publish new release
  • 2520349 feat(@​inquirer/core): support keybindings env defaults
  • Additional commits viewable in compare view

Updates @inquirer/core from 11.1.10 to 12.0.1

Release notes

Sourced from @​inquirer/core's releases.

@​inquirer/core@​12.0.1

What's new

  • Prettified prompt and theme types for better IDE display: makeTheme now returns a fully flattened theme type, and createPrompt expands the config's top-level keys in the IDE while staying assignable to Config (#2239).

Dependencies

  • @inquirer/type bumped to ^4.1.0

@​inquirer/core@​12.0.0

⚠️ Breaking change

The setter returned by useState now accepts an updater/reducer function (currentValue) => nextValue, mirroring React. The updater always receives the latest state (read from the hook store at call time), which simplifies async and reducer-style state updates.

Type change: the setter signature moves from (newValue: Value) => void to (newValue: NotFunction<Value> | Reducer<Value>) => void.

Impact: any code that stored a function as a value via useState's setter now has that function interpreted as a reducer. This is a type-level breaking change for consumers of the core hook API.

What's new

  • useState setter accepts a reducer function (currentValue) => nextValue (#2225)

Dependencies

  • @inquirer/figures bumped to ^2.0.8
Commits
  • 51ac389 chore: Publish new release
  • 0f1718e feat(@​inquirer/password): add ctrl+t toggle to reveal password
  • 5fa76b1 feat: prettify prompt and theme types for better IDE display (#2239)
  • 6730c32 fix(@​inquirer/i18n): mock Intl in auto-detect test to fix Windows flake (#2235)
  • 00ebec7 fix(@​inquirer/i18n): accept the localized yes/no answers each locale hints at
  • 9637a2a chore(deps-dev): Bump globals in the linting group (#2238)
  • 45b1479 docs: add inquirer-grouped-checkbox to community prompts (#2236)
  • 9997067 fix(release): serialize staging with --concurrency 1
  • 2073546 fix(release): disable auto-install hook event in postpack restore
  • 7f00eb7 fix(release): bypass auto-install hook in postpack restore
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/core since your current version.


Updates @inquirer/figures from 2.0.5 to 2.0.8

Release notes

Sourced from @​inquirer/figures's releases.

@​inquirer/figures@​2.0.8

No source changes. Bumped to keep in lockstep with the @inquirer/* release train.

Commits
  • 9997067 fix(release): serialize staging with --concurrency 1
  • 2073546 fix(release): disable auto-install hook event in postpack restore
  • 7f00eb7 fix(release): bypass auto-install hook in postpack restore
  • 5384fa6 chore(release): add workflow_dispatch trigger to publish workflow
  • d11785f fix(release): warm turbo cache before staging in publish job
  • 36d4928 chore: Publish new release
  • 15dfc54 chore(deps): Bump globby from 16.2.2 to 16.2.3 (#2234)
  • 6678f5f chore(deps-dev): Bump oxfmt in the formatting group (#2233)
  • e57dafa chore: secure release pipeline with npm Trusted Publishing
  • 2d677bb fix: don't restore package.json in postpack before publish (#2231)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/figures since your current version.


Updates @inquirer/prompts from 8.4.3 to 8.7.0

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.0

What's new

  • password gains the toggleMask option (ctrl+t to reveal the typed value).
  • confirm now matches localized yes/no answers per-locale.
  • Prettified prompt and theme types for better IDE display.
  • Added inquirer-grouped-checkbox to the community prompts list (#2236).

Included

  • @inquirer/checkbox@^5.2.3
  • @inquirer/confirm@^6.3.0
  • @inquirer/editor@^5.3.1
  • @inquirer/expand@^5.1.3
  • @inquirer/input@^5.1.4
  • @inquirer/number@^4.2.1
  • @inquirer/password@^5.2.0
  • @inquirer/rawlist@^5.3.3
  • @inquirer/search@^4.3.1
  • @inquirer/select@^5.2.3

@​inquirer/prompts@​8.6.0

The all-in-one prompts package, re-exporting every individual prompt at its latest version.

Highlights

This release rides on @inquirer/core@12.0.0, which makes the useState setter accept a reducer/updater function. It also brings a new initialValue option to search, plus fixes for number, confirm, and editor.

What's new

  • @inquirer/search — new initialValue?: string option to pre-fill the search input (#2205)

What's fixed

  • @inquirer/number — avoid floating-point step errors; accept explicit undefined as default (#2166, #2182)
  • @inquirer/confirm — accept explicit undefined as default (#2182)
  • @inquirer/editor — accept explicit undefined as default (#2182)

Included prompts

  • @inquirer/checkbox@5.2.2
  • @inquirer/confirm@6.2.0
  • @inquirer/editor@5.3.0
  • @inquirer/expand@5.1.2
  • @inquirer/input@5.1.3
  • @inquirer/number@4.2.0
  • @inquirer/password@5.1.2
  • @inquirer/rawlist@5.3.2

... (truncated)

Commits
  • 51ac389 chore: Publish new release
  • 0f1718e feat(@​inquirer/password): add ctrl+t toggle to reveal password
  • 5fa76b1 feat: prettify prompt and theme types for better IDE display (#2239)
  • 6730c32 fix(@​inquirer/i18n): mock Intl in auto-detect test to fix Windows flake (#2235)
  • 00ebec7 fix(@​inquirer/i18n): accept the localized yes/no answers each locale hints at
  • 9637a2a chore(deps-dev): Bump globals in the linting group (#2238)
  • 45b1479 docs: add inquirer-grouped-checkbox to community prompts (#2236)
  • 9997067 fix(release): serialize staging with --concurrency 1
  • 2073546 fix(release): disable auto-install hook event in postpack restore
  • 7f00eb7 fix(release): bypass auto-install hook in postpack restore
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/prompts since your current version.


Updates @inquirer/type from 4.0.5 to 4.1.0

Release notes

Sourced from @​inquirer/type's releases.

@​inquirer/type@​4.1.0

What's new

  • Prettify is now recursive, so makeTheme returns a fully flattened theme type (nested style intersections merged into one object) for better IDE display (#2239).
Commits
  • 51ac389 chore: Publish new release
  • 0f1718e feat(@​inquirer/password): add ctrl+t toggle to reveal password
  • 5fa76b1 feat: prettify prompt and theme types for better IDE display (#2239)
  • 6730c32 fix(@​inquirer/i18n): mock Intl in auto-detect test to fix Windows flake (#2235)
  • 00ebec7 fix(@​inquirer/i18n): accept the localized yes/no answers each locale hints at
  • 9637a2a chore(deps-dev): Bump globals in the linting group (#2238)
  • 45b1479 docs: add inquirer-grouped-checkbox to community prompts (#2236)
  • 9997067 fix(release): serialize staging with --concurrency 1
  • 2073546 fix(release): disable auto-install hook event in postpack restore
  • 7f00eb7 fix(release): bypass auto-install hook in postpack restore
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/type since your current version.


Updates antd from 6.5.2 to 6.6.2

Release notes

Sourced from antd's releases.

6.6.2

  • ♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @​github-actions
  • 🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
  • 🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @​QDyanbing
  • Menu
    • ⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @​zombieJ
    • 🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @​EmilyyyLiu
    • 🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @​QDyanbing
  • Transfer
    • 🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @​QDyanbing
    • 🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @​biubiukam
  • Table
    • 🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @​QDyanbing
    • 🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @​thlovey
  • Tree
    • 🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @​giaBaoJS
    • 🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @​QDyanbing
  • List
  • 🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @​QDyanbing
  • 🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @​dogledogle
  • 🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @​nrps9909
  • 🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @​dogledogle
  • 🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @​QDyanbing
  • 🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @​QDyanbing
  • ♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @​nrps9909
  • ♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @​nrps9909
  • 🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @​QDyanbing
  • 🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @​QDyanbing
  • 🐞 Fix Watermark throwing an error when content is undefined. #59077 @​VamoBao
  • 📖 Fix component LLMs links on website mirrors and local deployments. #59062 @​QDyanbing

  • ♿ 优化 Progress、Steps 和 Tooltip 的无障碍体验,避免进度条 SVG 被重复朗读,确保键盘激活 Steps 项目时触发 onClick,并保留 Tooltip 已有的 aria-describedby 关联。#59139 @​github-actions
  • 🐞 修复 Alert、Empty、Card、Tag、Breadcrumb、Segmented、FloatButton、Form.Item 和 Statistic 无法正确渲染数值 0 内容的问题。#59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
  • 🤖 修复 Alert 全局 closable、Select 和 AutoComplete 的 onPopupVisibleChange 类型定义错误暴露不支持回调或属性的问题。#59100 #59142 @​QDyanbing
  • Menu
    • ⌨️ 修复多个 Menu 实例之间弹层 ID 重复的问题。#59048 @​zombieJ
    • 🐞 修复 Menu 横向模式下鼠标从菜单项移向子菜单弹层时子菜单意外关闭的问题。#59088 @​EmilyyyLiu
    • 🐞 修复 Menu 内联菜单收缩完成后图标仍继续位移的问题。#59085 @​QDyanbing
  • Transfer
    • 🐞 修复 Transfer 搜索结果全部为禁用项时“全选”复选框仍可用的问题。#59121 @​QDyanbing
    • 🐞 修复 Transfer 从空过滤结果恢复数据后不显示列表项的问题。#59074 @​biubiukam
  • Table
    • 🐞 修复 Table 可排序列不触发非 Enter 键自定义 onKeyDown 回调的问题。#59078 @​QDyanbing
    • 🐞 修复 Table 关闭内置筛选面板时重复触发 filterDropdownProps.onOpenChange(false) 的问题。#59023 @​thlovey
  • Tree
    • 🐞 修复 Tree.DirectoryTree 的 expandedKeysselectedKeys 显式传入 undefined 时无法展开或选择的问题。#59076 @​giaBaoJS
    • 🐞 修复 Tree.DirectoryTree 从 key 为数值 0 的节点开始时 Shift 范围选择失效的问题。#59029 @​QDyanbing
  • List

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.2

2026-08-28

  • ♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @​github-actions
  • 🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
  • 🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @​QDyanbing
  • Menu
    • ⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @​zombieJ
    • 🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @​EmilyyyLiu
    • 🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @​QDyanbing
  • Transfer
    • 🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @​QDyanbing
    • 🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @​biubiukam
  • Table
    • 🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @​QDyanbing
    • 🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @​thlovey
  • Tree
    • 🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @​giaBaoJS
    • 🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @​QDyanbing
  • List
  • 🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @​QDyanbing
  • 🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @​dogledogle
  • 🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @​nrps9909
  • 🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @​dogledogle
  • 🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @​QDyanbing
  • 🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @​QDyanbing
  • ♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @​nrps9909
  • ♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @​nrps9909
  • 🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @​QDyanbing
  • 🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @​QDyanbing
  • 🐞 Fix Watermark throwing an error when content is undefined. #59077 @​VamoBao
  • 📖 Fix component LLMs links on website mirrors and local deployments. #59062 @​QDyanbing

6.6.1

2026-08-17

  • ♿ Improve localized accessible names for Upload actions and Modal and Notification close buttons. #58953 #58957 @​nrps9909
  • 🌐 Improve Traditional Chinese terminology across localized components and use Taiwan-preferred week wording in DatePicker. #58947 #58951 @​nrps9909
  • 🐞 Fix Upload dropping newly added files when async onRemove resolves. #58814 @​afc163
  • 🐞 Fix Anchor triggering duplicate onChange callbacks on scroll when using getCurrentAnchor. #58834 @​nikzanda
  • Form
    • 🐞 Fix Form height fluctuation during rapid validation state changes. #59008 @​waterWang
    • 🐞 Fix Form vertical layout labelCol.offset being overridden by label margins. ...

      Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@github-actions

Copy link
Copy Markdown

👋 Thanks for opening your first PR to Comet, @dependabot[bot].

Before review, please make sure the PR title follows Conventional Commits, for example fix: handle project-scope init, and that the checklist in the PR template is up to date.

🧪 The most useful local checks are:

pnpm build
pnpm lint
pnpm format:check
pnpm test

🧰 If your change touches assets/skills/comet/scripts/, please also check script portability across macOS, Linux, and Windows Git Bash. Avoid sed -i, support both sha256sum and shasum -a 256, and guard optional grep pipelines with || true.

✨ We appreciate the contribution and will take a look as soon as we can.

@github-actions

Copy link
Copy Markdown

PR template needs attention

Please update this PR to match the current .github/PULL_REQUEST_TEMPLATE.md:

  • Missing template section: ## ✨ Summary
  • Missing template section: ## 🎯 Scope
  • Missing template section: ## 🧪 Testing
  • Missing template section: ## ✅ Checklist
  • Missing template section: ## 👀 Notes for Reviewers
  • Missing template item: CLI commands (init, status, doctor, update)
  • Missing template item: Core installer / platform detection
  • Missing template item: Comet skills (assets/skills/, assets/skills-zh/)
  • Missing template item: Comet shell scripts (assets/skills/comet/scripts/)
  • Missing template item: Tests / CI
  • Missing template item: Documentation / changelog
  • Missing template item: Other:
  • Missing template item: pnpm build
  • Missing template item: pnpm lint
  • Missing template item: pnpm run lint:architecture
  • Missing template item: pnpm format:check
  • Missing template item: pnpm test
  • Missing template item: pnpm test -- test/domains/comet-classic/comet-scripts.test.ts
  • Missing template item: Not run:
  • Missing template item: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Missing template item: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Missing template item: CHANGELOG.md is updated when behavior changes
  • Missing template item: Skill changes were made in Chinese first when applicable, then synced to English
  • Missing template item: New scripts are included in assets/manifest.json and relevant tests
  • Missing template item: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Missing template item: No unrelated generated files or local artifacts are included
  • Checklist item is not checked: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Checklist item is not checked: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Checklist item is not checked: CHANGELOG.md is updated when behavior changes
  • Checklist item is not checked: Skill changes were made in Chinese first when applicable, then synced to English
  • Checklist item is not checked: New scripts are included in assets/manifest.json and relevant tests
  • Checklist item is not checked: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Checklist item is not checked: No unrelated generated files or local artifacts are included

…y with 13 updates

Bumps the production-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fission-ai/openspec](https://github.com/Fission-AI/OpenSpec) | `1.6.0` | `1.11.0` |
| [@inquirer/ansi](https://github.com/SBoudrias/Inquirer.js) | `2.0.5` | `2.0.7` |
| [@inquirer/core](https://github.com/SBoudrias/Inquirer.js) | `11.1.10` | `12.0.1` |
| [@inquirer/figures](https://github.com/SBoudrias/Inquirer.js) | `2.0.5` | `2.0.8` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.4.3` | `8.7.0` |
| [@inquirer/type](https://github.com/SBoudrias/Inquirer.js) | `4.0.5` | `4.1.0` |
| [antd](https://github.com/ant-design/ant-design) | `6.5.2` | `6.6.2` |
| [commander](https://github.com/tj/commander.js) | `14.0.3` | `15.0.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `11.11.1` | `11.12.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.6` | `18.0.11` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.1` | `11.17.2` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.1` | `1.8.0` |



Updates `@fission-ai/openspec` from 1.6.0 to 1.11.0
- [Release notes](https://github.com/Fission-AI/OpenSpec/releases)
- [Changelog](https://github.com/Fission-AI/OpenSpec/blob/main/CHANGELOG.md)
- [Commits](Fission-AI/OpenSpec@v1.6.0...v1.11.0)

Updates `@inquirer/ansi` from 2.0.5 to 2.0.7
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/ansi@2.0.5...@inquirer/ansi@2.0.7)

Updates `@inquirer/core` from 11.1.10 to 12.0.1
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/core@11.1.10...@inquirer/core@12.0.1)

Updates `@inquirer/figures` from 2.0.5 to 2.0.8
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/figures@2.0.5...@inquirer/figures@2.0.8)

Updates `@inquirer/prompts` from 8.4.3 to 8.7.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.4.3...@inquirer/prompts@8.7.0)

Updates `@inquirer/type` from 4.0.5 to 4.1.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/type@4.0.5...@inquirer/type@4.1.0)

Updates `antd` from 6.5.2 to 6.6.2
- [Release notes](https://github.com/ant-design/ant-design/releases)
- [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md)
- [Commits](ant-design/ant-design@6.5.2...6.6.2)

Updates `commander` from 14.0.3 to 15.0.0
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.3...v15.0.0)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `highlight.js` from 11.11.1 to 11.12.0
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
- [Commits](highlightjs/highlight.js@11.11.1...11.12.0)

Updates `marked` from 18.0.6 to 18.0.11
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.6...v18.0.11)

Updates `mermaid` from 11.16.1 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.1...mermaid@11.17.2)

Updates `smol-toml` from 1.7.1 to 1.8.0
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.7.1...v1.8.0)

---
updated-dependencies:
- dependency-name: "@fission-ai/openspec"
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@inquirer/ansi"
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/core"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@inquirer/figures"
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@inquirer/type"
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: antd
  dependency-version: 6.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: highlight.js
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: mermaid
  dependency-version: 11.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: smol-toml
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the production-dependencies group with 13 updates chore(deps): bump the production-dependencies group across 1 directory with 13 updates Aug 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-8eb2680cd2 branch from 768c900 to de01dd4 Compare August 31, 2026 07:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants