[dependabot]

Bumps the dev-minor group with 4 updates: geohash-kit, maplibre-gl, typescript-eslint and vite.

Updates geohash-kit from 1.6.1 to 1.6.2

Release notes

Sourced from geohash-kit's releases.

v1.6.2

Documentation

• drop the drop-in ngeohash claim and document the real migration differences: default precision, the bboxes replacement and tie-breaking.
• document decode errors, CoverageOptions and Nostr filter defaults, polygon ring closure, [lon, lat] argument order, return types and the midpoint and convexHull helpers.
• link the benchmark, Android and schema docs by absolute URL, as they are not in the npm package.
• consolidate agent instructions into AGENTS.md.

---

Reproducible build: byte-identical output verified across two independent CI runners.

Artefact integrity

file:      geohash-kit-1.6.2.tgz
size:      33670 bytes
sha256:    075c2d3eccff07b9bc45c3d8d8b49d890e4474179cfd500b232bfa806008e6ea
sha512-egMDa2xsRliJXzydiKQ7EaffaICynKsuRR0AXVkFE08VQTuSYtc0+++/kU4gJkBQ56dStC0bcvuqdbVasVq5oA==

Verify against the registry tarball:

curl -sLO https://registry.npmjs.org/geohash-kit/-/geohash-kit-1.6.2.tgz
shasum -a 256 geohash-kit-1.6.2.tgz

Changelog

Sourced from geohash-kit's changelog.

1.6.2 (2026-10-19)

Documentation

• drop the drop-in ngeohash claim and document the real migration differences: default precision, the bboxes replacement and tie-breaking.
• document decode errors, CoverageOptions and Nostr filter defaults, polygon ring closure, [lon, lat] argument order, return types and the midpoint and convexHull helpers.
• link the benchmark, Android and schema docs by absolute URL, as they are not in the npm package.
• consolidate agent instructions into AGENTS.md.

Commits

• 905aa40 chore(release): 1.6.2 (#27)
• ae8232f docs: align README and llms files with source behaviour (#26)
• 7fce0f0 chore(deps-dev): bump vitest from 5.0.2 to 5.0.3 in the dev-minor group (#25)
• 78421bc chore(deps-dev): bump vitest from 5.0.1 to 5.0.2 in the dev-minor group (#24)
• bdb2bf2 docs: consolidate agent instructions into AGENTS.md
• 6e31da0 chore(deps-dev): bump vitest from 5.0.0 to 5.0.1 in the dev-minor group (#23)
• 9bcc2e7 chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#18)
• 145fb55 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#19)
• 99f2097 chore(deps-dev): bump vitest from 4.1.11 to 5.0.0 (#22)
• 6f53ddd chore(deps-dev): bump vitest in the dev-minor group (#21)
• Additional commits viewable in compare view

Updates maplibre-gl from 6.14.0 to 6.15.0

Release notes

Sourced from maplibre-gl's releases.

v6.15.0

✨ Features and improvements

• Add dragRotate: {around: 'pointer'} to turn and tilt the map around the point under the pointer, and {around: 'center', movement: 'circular' | 'linear'}, which replaces the deprecated aroundCenter (#8628) (by @​birkskyum)
• Redraw fewer layers on terrain when a custom layer's terrainTileRevision or a feature state changes (#8782) (by @​birkskyum)
• Support the hash option in a projection registered with addProjection (#8743) (by @​birkskyum)
• Add experimental addProjection, removeProjection, a built-in identity projection and a {bbox} tile URL token for maps in a custom planar CRS with its own quad tile grid (#168, #5764)
• Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (#8535) (by @​cherenkov)
• Project GeoJSON sources on a map in a registered CRS, in the workers, from a definition string and a projection handler (#8736) (by @​johncarmack1984)
• Support OpenType vert forms in vertical labels rendered with font-faces (#8489) (by @​NEKOYASAN)

🐞 Bug fixes

• Fix a map in a registered projection going blank when its center crosses 180° (#8802) (by @​birkskyum)
• Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (#8803) (by @​birkskyum)
• Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (#8780) (by @​birkskyum)
• Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (#8741) (by @​crackalamoo)
• Fix setWorkerUrl treating a .cjs fragment or query marker as a module worker URL (#8769) (by @​Anandb71)
• Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (#8765) (by @​johncarmack1984)
• Fix the camera dropping to sea level while the terrain under the center of a jumpTo, easeTo or flyTo loads (#8549) (by @​johncarmack1984)
• Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (#8705) (by @​tordans)
• Fix the globe drag rounding its rotation to single precision (#8784) (by @​johncarmack1984)
• Fix load and idle firing before the other tiles finish loading when one tile fails (#8785) (by @​johncarmack1984)
• Avoid using .innerHTML = … for the Popup close icon (#8795) (by @​k-yle)
• Fix a GeoJSON feature without coordinates staying out of the tiles after updateData gives it some, by updating geojson-vt to 6.3.0 (#8797) (by @​johncarmack1984)

Changelog

Sourced from maplibre-gl's changelog.

6.15.0

✨ Features and improvements

• Add dragRotate: {around: 'pointer'} to turn and tilt the map around the point under the pointer, and {around: 'center', movement: 'circular' | 'linear'}, which replaces the deprecated aroundCenter (#8628) (by @​birkskyum)
• Redraw fewer layers on terrain when a custom layer's terrainTileRevision or a feature state changes (#8782) (by @​birkskyum)
• Support the hash option in a projection registered with addProjection (#8743) (by @​birkskyum)
• Add experimental addProjection, removeProjection, a built-in identity projection and a {bbox} tile URL token for maps in a custom planar CRS with its own quad tile grid (#168, #5764)
• Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (#8535) (by @​cherenkov)
• Project GeoJSON sources on a map in a registered CRS, in the workers, from a definition string and a projection handler (#8736) (by @​johncarmack1984)
• Support OpenType vert forms in vertical labels rendered with font-faces (#8489) (by @​NEKOYASAN)

🐞 Bug fixes

• Fix a map in a registered projection going blank when its center crosses 180° (#8802) (by @​birkskyum)
• Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (#8803) (by @​birkskyum)
• Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (#8780) (by @​birkskyum)
• Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (#8741) (by @​crackalamoo)
• Fix setWorkerUrl treating a .cjs fragment or query marker as a module worker URL (#8769) (by @​Anandb71)
• Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (#8765) (by @​johncarmack1984)
• Fix the camera dropping to sea level while the terrain under the center of a jumpTo, easeTo or flyTo loads (#8549) (by @​johncarmack1984)
• Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (#8705) (by @​tordans)
• Fix the globe drag rounding its rotation to single precision (#8784) (by @​johncarmack1984)
• Fix load and idle firing before the other tiles finish loading when one tile fails (#8785) (by @​johncarmack1984)
• Avoid using .innerHTML = … for the Popup close icon (#8795) (by @​k-yle)
• Fix a GeoJSON feature without coordinates staying out of the tiles after updateData gives it some, by updating geojson-vt to 6.3.0 (#8797) (by @​johncarmack1984)

Commits

• 638b3f9 Bump js version to 6.15.0 (#8812)
• ddf4cc6 Fix registered projections going blank when the center crosses 180° (#8802)
• c8e4e34 fix: world projections throwing and wrapping past their edge (#8803)
• 7ec7535 first step towards supporting trusted-types (#8795)
• fc1aa1c docs: separate a registered CRS from the tile grid its sources are cut in (#8...
• 1897306 feat: support dragRotate around pointer (#8628)
• 17ad56d docs: show how custom layers place positions on a registered CRS (#8806)
• fe33962 fix: keep GeoJSON at the far pole of a polar projection off the map (#8798)
• 17eb78b chore: bump @​maplibre/geojson-vt to 6.3.0 and pass its coordinates and wrap o...
• 6c2784f refactor: rename CRSDefinition to CRS and its wkt to definition (#8787)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.71.2 to 8.72.0

Release notes

Sourced from typescript-eslint's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• a4c2603 chore(release): publish 8.72.0
• See full diff in compare view

Updates vite from 8.3.4 to 8.3.5

Release notes

Sourced from vite's releases.

v8.3.5

Bug Fixes

• build: handle missing chunk import maps (#23777) (8d7623d)
• build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
• bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
• bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
• bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
• bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
• bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
• bundled-dev: normalize served output files (#23684) (df4e02c)
• bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
• css: don't fail on a literal % in url() (#23676) (50b382d)
• deps: update all non-major dependencies (#23731) (cf80aa5)
• deps: update all non-major dependencies (#23826) (77d8373)
• deps: update rolldown-related dependencies (#23733) (43f0d05)
• deps: update rolldown-related dependencies (#23827) (c2e0418)
• optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
• optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
• optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
• optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
• resolve: support subpath imports with multiple # (#23631) (0d86b34)
• resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
• server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
• server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

• ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

• migrate to Oxlint (#23746) (5b73935)

Code Refactoring

• deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
• dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
• dev: separate import resolution from URL conversion (#23791) (6116689)
• dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
• dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

Changelog

Sourced from vite's changelog.

8.3.5 (2026-10-21)

Bug Fixes

• build: handle missing chunk import maps (#23777) (8d7623d)
• build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
• bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
• bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
• bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
• bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
• bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
• bundled-dev: normalize served output files (#23684) (df4e02c)
• bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
• css: don't fail on a literal % in url() (#23676) (50b382d)
• deps: update all non-major dependencies (#23731) (cf80aa5)
• deps: update all non-major dependencies (#23826) (77d8373)
• deps: update rolldown-related dependencies (#23733) (43f0d05)
• deps: update rolldown-related dependencies (#23827) (c2e0418)
• optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
• optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
• optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
• optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
• resolve: support subpath imports with multiple # (#23631) (0d86b34)
• resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
• server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
• server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

• ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

• migrate to Oxlint (#23746) (5b73935)

Code Refactoring

• deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
• dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
• dev: separate import resolution from URL conversion (#23791) (6116689)
• dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
• dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

Commits

• 981f07f release: v8.3.5 (#23856)
• 0d86b34 fix(resolve): support subpath imports with multiple # (#23631)
• 6a02780 perf(ssr): extract inline source maps without a regexp (#23775)
• 8e890e1 fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)
• 197daf6 fix(bundled-dev): declare utf-8 charset in fallback page (#23846)
• 4d16e7c fix(build): include preload dependencies to chunk import map hashing (#23793)
• df7b40e refactor(dev): consolidate moduleURL to file path utilities (#23828)
• a162990 refactor(dev): use ModuleURLs throughout HTML transforms (#23815)
• 6116689 refactor(dev): separate import resolution from URL conversion (#23791)
• 446954c refactor(dev): share ModuleURL and BrowserURL conversions (#23790)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions