Skip to content

chore: Bump the production group in /app with 8 updates - #239

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/production-910192f6ea
Open

chore: Bump the production group in /app with 8 updates#239
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/production-910192f6ea

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production group in /app with 8 updates:

Package From To
@preact/signals 2.11.2 2.11.4
dompurify 3.4.15 3.4.17
lucide-preact 1.44.0 1.65.0
marked 18.0.12 18.1.2
preact 10.29.8 11.1.0
three 0.186.0 0.186.1
three-mesh-bvh 0.9.15 0.9.17
wouter-preact 3.11.0 3.13.0

Updates @preact/signals from 2.11.2 to 2.11.4

Release notes

Sourced from @​preact/signals's releases.

@​preact/signals@​2.11.4

Patch Changes

@​preact/signals@​2.11.3

Patch Changes

  • #991 04445ba Thanks @​JoviDeCroock! - Don't re-run a useSignalEffect for a component that was unmounted by the same update. Preact 11 disposes it after paint, so the effect could otherwise run once more against an unmounted component.
Changelog

Sourced from @​preact/signals's changelog.

2.11.4

Patch Changes

2.11.3

Patch Changes

  • #991 04445ba Thanks @​JoviDeCroock! - Don't re-run a useSignalEffect for a component that was unmounted by the same update. Preact 11 disposes it after paint, so the effect could otherwise run once more against an unmounted component.
Commits

Updates dompurify from 3.4.15 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible
Commits

Updates lucide-preact from 1.44.0 to 1.65.0

Release notes

Sourced from lucide-preact's releases.

Version 1.65.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.64.0...1.65.0

Version 1.64.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Version 1.63.0

What's Changed

... (truncated)

Commits
  • 49e38c5 chore(deps-dev): bump the preact-deps group across 1 directory with 2 updates...
  • 1668a0c chore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 20aef31 chore(packages): Update sponsors (#5034)
  • e68f4c8 chore(deps-dev): bump preact (#4999)
  • 22ac2a9 chore(deps-dev): bump preact (#4961)
  • 09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
  • 309f440 fix(lucide-preact): add Preact v11 compatibility (#4924)
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • f90f10a feat(packages): export __iconNode data across framework packages (#4761)
  • See full diff in compare view

Updates marked from 18.0.12 to 18.1.2

Release notes

Sourced from marked's releases.

v18.1.2

18.1.2 (2026-10-26)

Bug Fixes

  • allow a tab or end of input after a type 6 html block tag name (#4128) (e09c40d)
  • apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145) (5d8e234)
  • cli: await config functions before parsing (#4138) (3a11ad1)
  • cli: create no-clobber output files atomically (#4135) (e7c4f64)
  • do not continue a block quote paragraph from a whitespace-only line (#4134) (42f34a8)
  • expand a tab after the block quote marker to the next tab stop (#4110) (2d3899b)
  • honor per-call async options when composing hooks (#4139) (379be9d)
  • keep a line starting with # but no space in the list item (#4127) (6b63189)
  • keep duplicate link definitions in the tokens (#4132) (2784acc)
  • keep lazy lines after a list in a nested blockquote (#4137) (38c7e55)
  • keep lazy setext underlines in list items as text (#4126) (398234c)
  • render nested image alt formatting as plain text (#4131) (15f59bb)
  • stop an unclosed inline raw tag from unescaping later blocks (#4130) (4562b6f)

Performance Improvements

  • ~16% faster parsing by skipping em/strong masking for runs without *, _ or ~ (#4142) (f0fd3e0)

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

  • cli: honor an explicitly empty string input (#4113) (ec3a4e5)
  • end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)
  • keep a backslash in a code span from hiding emphasis (#4117) (6a57018)
  • keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112
  • let indented and type 3-5 html blocks interrupt a paragraph (#4124) (eaa1fff)
  • make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120
  • match pre, script, style and textarea as whole tag names (#4114) (0db74cb)
  • preserve enclosing link state after parsing images (#4123) (cc07bb9)
  • respect tab stops in list continuation indentation (#4119) (4bd2528)

Performance Improvements

  • avoid repeated raw string copies in nested lists (#4082) (7e8754d)

v18.1.0

18.1.0 (2026-10-05)

... (truncated)

Commits
  • 5beecae chore(release): 18.1.2 [skip ci]
  • c1e6ca1 chore(deps): update deps (#4168)
  • 3a01ac4 chore: test:redos -> test:recheck (#4167)
  • 15f59bb fix: render nested image alt formatting as plain text (#4131)
  • 2d3899b fix: expand a tab after the block quote marker to the next tab stop (#4110)
  • e09c40d fix: allow a tab or end of input after a type 6 html block tag name (#4128)
  • 398234c fix: keep lazy setext underlines in list items as text (#4126)
  • 6b63189 fix: keep a line starting with # but no space in the list item (#4127)
  • 5d8e234 fix: apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145)
  • 3a11ad1 fix(cli): await config functions before parsing (#4138)
  • Additional commits viewable in compare view

Updates preact from 10.29.8 to 11.1.0

Release notes

Sourced from preact's releases.

11.1.0

Features

  • Add preact/compat/compiler-runtime for apps compiled with React Compiler (#5323, thanks @​JoviDeCroock)

Fixes

  • Harden VNode recognition with a shared symbol marker (#5335, thanks @​JoviDeCroock)
  • Isolate layout-effect errors to the throwing component so unrelated effects and lifecycle callbacks still run (#5321, thanks @​JoviDeCroock)
  • Stop appending px to unitless SVG paint and aspect-ratio values in compat (#5233, thanks @​dylanpulver)

Types

Compatibility

The new VNode marker requires @preact/signals 2.11.4 or later and preact-render-to-string 6.8.2 or later when using those packages.

11.0.2

Fixes

Types

Performance

Maintenance

11.0.1

Fixes

... (truncated)

Commits
  • 66b6e56 Merge pull request #5336 from preactjs/release/11.1.0
  • 9a29751 11.1.0
  • a89164f Merge pull request #5335 from preactjs/harden-vnode-recognition
  • aa97758 chore: restore existing render-to-string peer range
  • 67d3ff9 fix: avoid String coercion when diffing symbol-marked VNodes
  • f39ebc8 Update Signals and SSR for symbol-marked VNodes
  • c8212f3 Merge branch 'main' into harden-vnode-recognition
  • 885a6be Shorten vnode symbol registry key
  • a3d5f76 Harden vnode recognition
  • 1c0f1f8 Merge pull request #5331 from playlikeboy/fix/input-list-attribute-types-5330
  • Additional commits viewable in compare view

Updates three from 0.186.0 to 0.186.1

Commits

Updates three-mesh-bvh from 0.9.15 to 0.9.17

Release notes

Sourced from three-mesh-bvh's releases.

v0.9.17

Added

  • BVHComputeData: "updateAsync" so a "getBVH" override can build BVHs asynchronously.

Changed

  • SAH builds are faster: 8 bins per axis and an exact sweep for small nodes.
  • BVH builds write nodes directly into the packed buffer instead of an intermediate node tree, using a fraction of the memory.

Fixed

  • MeshBVH: Raycasts no longer test triangles when the ray misses a root that is a leaf.
  • OrientedBox: Fixed "distanceToBox" using the wrong axis for one set of box edges.
  • ExtendedTriangle: Fixed "closestPointToSegment" returning a positive distance for segments that pass through the triangle.

v0.9.16

Fixed

  • BVHHelper: Fixed helper not rendering with three.js r186 correctly.
Changelog

Sourced from three-mesh-bvh's changelog.

[0.9.17] - 2026-10-28

Added

  • BVHComputeData: "updateAsync" so a "getBVH" override can build BVHs asynchronously.

Changed

  • SAH builds are faster: 8 bins per axis and an exact sweep for small nodes.
  • BVH builds write nodes directly into the packed buffer instead of an intermediate node tree, using a fraction of the memory.

Fixed

  • MeshBVH: Raycasts no longer test triangles when the ray misses a root that is a leaf.
  • OrientedBox: Fixed "distanceToBox" using the wrong axis for one set of box edges.
  • ExtendedTriangle: Fixed "closestPointToSegment" returning a positive distance for segments that pass through the triangle.

[0.9.16] - 2026-10-08

Fixed

  • BVHHelper: Fixed helper not rendering with three.js r186 correctly.
Commits
  • 26fc97c 0.9.17
  • d181e17 Update CHANGELOG
  • bf1dea8 Update CHANGELOG
  • 3306faa Merge pull request #934 from zzoraemon043/fix/closest-point-to-crossing-segment
  • 220cbdd Merge pull request #945 from gkjohnson/webgpu/node-layout
  • 6dbceea Regenerate API md
  • 596865d Add a method of async bvh generation
  • 5694a66 Improve closest point to point perf
  • 591a2fe Pack child bounds into the parent node, increasing performance
  • 453153a Merge pull request #943 from gkjohnson/sah-flat
  • Additional commits viewable in compare view

Updates wouter-preact from 3.11.0 to 3.13.0

Release notes

Sourced from wouter-preact's releases.

v3.13.0 — URLPattern route matching

Adds an opt-in native URLPattern parser for React and Preact, including nested routes (#576).

import { Router, Route } from "wouter";
import { urlPatternParser } from "wouter/url-pattern";
<Router parser={urlPatternParser}>
<Route path="/users{/:id}?">
{(params) => <>User: {params.id ?? "all"}</>}
</Route>
</Router>;

For Preact, import the adapter from wouter-preact/url-pattern.

  • Requires native URLPattern support. Matching is case-sensitive, distinguishes trailing slashes, and keeps parameter values URL-encoded.
  • The default parser remains unchanged. Complex URLPattern patterns may need explicit TypeScript parameter types.
  • Parser types now accept any compatible exec matcher with optional keys. Code accessing RegExp-specific properties through that return type may need a type adjustment.

Both packages are published as 3.13.0 under the npm latest tag.

v3.12.0 — Preact 11 support

  • wouter-preact: Adds Preact 11 support alongside Preact 10, including compatible Link attribute and event types (#573).
  • wouter: Version bump only; runtime code and TypeScript definitions are unchanged from 3.11.1.

Both packages are published as 3.12.0 under the npm latest tag.

Commits
  • 493c6d0 Release v3.13.0
  • 908a5f1 test(preact): defer generated helper resolution until setup
  • ef10e32 Add opt-in URLPattern parser with nested route support (#576)
  • 9b55097 Release v3.12.0
  • 7682e29 Consolidate agent guidance in AGENTS.md
  • b71f7a5 Set up trusted npm publishing for both packages
  • 0794c29 test(preact): make navigation test cover re-renders in any file order
  • aa7e910 fix(types): resolve wouter-preact Link types on Preact 11
  • ce37de5 feat: allow Preact v11 as a peer dependency of wouter-preact
  • 581485a v3.11.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for wouter-preact since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: Bump the production group in /app with 8 updates
06a01c8 
Bumps the production group in /app with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@preact/signals](https://github.com/preactjs/signals/tree/HEAD/packages/preact) | `2.11.2` | `2.11.4` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.15` | `3.4.17` |
| [lucide-preact](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-preact) | `1.44.0` | `1.65.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.12` | `18.1.2` |
| [preact](https://github.com/preactjs/preact) | `10.29.8` | `11.1.0` |
| [three](https://github.com/mrdoob/three.js) | `0.186.0` | `0.186.1` |
| [three-mesh-bvh](https://github.com/gkjohnson/three-mesh-bvh) | `0.9.15` | `0.9.17` |
| [wouter-preact](https://github.com/molefrog/wouter) | `3.11.0` | `3.13.0` |


Updates `@preact/signals` from 2.11.2 to 2.11.4
- [Release notes](https://github.com/preactjs/signals/releases)
- [Changelog](https://github.com/preactjs/signals/blob/main/packages/preact/CHANGELOG.md)
- [Commits](https://github.com/preactjs/signals/commits/@preact/signals@2.11.4/packages/preact)

Updates `dompurify` from 3.4.15 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.17)

Updates `lucide-preact` from 1.44.0 to 1.65.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.65.0/packages/lucide-preact)

Updates `marked` from 18.0.12 to 18.1.2
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.12...v18.1.2)

Updates `preact` from 10.29.8 to 11.1.0
- [Release notes](https://github.com/preactjs/preact/releases)
- [Commits](preactjs/preact@10.29.8...11.1.0)

Updates `three` from 0.186.0 to 0.186.1
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `three-mesh-bvh` from 0.9.15 to 0.9.17
- [Release notes](https://github.com/gkjohnson/three-mesh-bvh/releases)
- [Changelog](https://github.com/gkjohnson/three-mesh-bvh/blob/master/CHANGELOG.md)
- [Commits](gkjohnson/three-mesh-bvh@v0.9.15...v0.9.17)

Updates `wouter-preact` from 3.11.0 to 3.13.0
- [Release notes](https://github.com/molefrog/wouter/releases)
- [Commits](molefrog/wouter@v3.11.0...v3.13.0)

---
updated-dependencies:
- dependency-name: "@preact/signals"
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: lucide-preact
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: marked
  dependency-version: 18.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: preact
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production
- dependency-name: three
  dependency-version: 0.186.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: three-mesh-bvh
  dependency-version: 0.9.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: wouter-preact
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants