Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 6 updates - #252

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-c9ced44e0d
Closed

chore(deps): bump the npm-minor-and-patch group across 1 directory with 6 updates#252
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-c9ced44e0d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown

Bumps the npm-minor-and-patch group with 6 updates in the / directory:

Package From To
prettier 3.8.3 3.9.6
pako 2.1.0 2.2.0
proj4 2.21.0 2.22.0
vite-plugin-dts 5.0.3 5.1.0
cnfast 0.1.0 0.2.0
next 16.3.3 16.3.4

Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates pako from 2.1.0 to 2.2.0

Changelog

Sourced from pako's changelog.

[2.2.0] - 2026-06-22

Added

  • Alternate deflate hash (ANZAC++) - for nodejs zlib compatibility. A nice bonus ~ 40% speed boost.
  • legacyHash (default: true) deflate option, to switch between original zlib and nodejs binary-compatible output.

Fixed

  • Inflate: fix window not updated after inflateReset (multistream/bgzip), #139.
  • Inflate: emit chunk on flush, #259.
  • Inflate: only continue to next stream for gzip; error on truncated input.
Commits
  • c743a32 2.2.0 released
  • 3be309c dist rebuild
  • 18cbb09 Changelog update
  • f48f81a Improve zlib coverage
  • dd7fdae Improve wrappers coverage
  • 81d3a54 Reorganize tests layout
  • 377845b Use old (zlib) hash by default, until new major release
  • 57a4363 Move wrapper options to separate struct
  • f89d31f Remove orphaned file
  • edf1f60 Inflate: only continue to next stream for gzip; error on truncated input
  • Additional commits viewable in compare view

Updates proj4 from 2.21.0 to 2.22.0

Release notes

Sourced from proj4's releases.

v2.22.0

What's Changed

New Contributors

Full Changelog: proj4js/proj4js@v2.21.0...v2.22.0

Changelog

Sourced from proj4's changelog.

  • 2.22.0: Support latlong, latlon and lonlat as aliases of longlat; preserve z when enforceAxis=true for omerc and robin; apply false easting in ortho projections
Commits
  • 1d68d25 2.22.0
  • 8f4b915 Update changelog for 2.22.0
  • 0873cbc Merge pull request #598 from mutaflux/preserve-z-for-omerc-when-enforceAxis
  • ca8b178 PR feedback
  • 2a3251b Merge pull request #599 from cycsmail/longlat-aliases-167
  • faafa50 Support latlong, latlon and lonlat as aliases of longlat
  • e69ae18 Preserve z when enforceAxis=true for omerc and robin
  • 955bfd6 Merge pull request #595 from JScones/fix/ortho_x0
  • 038c562 update version to 2.21.1-alpha
  • b7bb55f Swap test for test/testData.js fixture
  • Additional commits viewable in compare view

Updates vite-plugin-dts from 5.0.3 to 5.1.0

Changelog

Sourced from vite-plugin-dts's changelog.

5.1.0 (2026-09-01)

Commits

Updates cnfast from 0.1.0 to 0.2.0

Release notes

Sourced from cnfast's releases.

cnfast@0.2.0

Minor Changes

  • 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

    Public API

    • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
    • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
    • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
    • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

    CVA execution

    • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
    • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
    • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
    • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
    • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

    Merge performance

    • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
    • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
    • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
    • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
    • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
    • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

    Tailwind compatibility

    • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
    • Update logical spacing, inset, border, and scroll conflict behavior.
    • Update max-h-none, shadow-inner, and related shadow conflict behavior.
    • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

    Migration command

    • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
    • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
    • Preserve local aliases and quote style when the command rewrites an import.

    API change

    • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

    Verification tools

    • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
    • Add seeded differential tests against tailwind-merge and class-variance-authority.

... (truncated)

Changelog

Sourced from cnfast's changelog.

0.2.0

Minor Changes

  • 8e85f9a: This release adds new public APIs, a new merge engine, more migration support, and a larger verification suite.

    Public API

    • Add cva as a compatible replacement for class-variance-authority 0.7.1. It supports base classes, variants, default variants, compound variants, boolean and numeric variant keys, and the class and className props.
    • Export the CVA types ClassProp, ClassPropKey, CvaConfig, CvaProps, CxOptions, CxReturn, OmitUndefined, StringToBoolean, VariantProps, and VariantSchema.
    • Add cx as an alias for clsx. This supports code that imports cx from class-variance-authority.
    • Add createCallSiteCn. It creates a separate bounded memo for one call site. It accepts the default cn function or a custom function from createCn. It memoizes repeated primitive argument lists. It does not memoize object, array, or function inputs because these values can change without a new identity.

    CVA execution

    • Compile each CVA configuration on its first call. This removes repeated configuration work from later calls.
    • Add a bounded combination table for configurations without compound variants. The table stores stable class results for known variant combinations.
    • Add fast and wide memo lanes for calls that cannot use the combination table. The memo stores primitive prop combinations and keeps mutable class values on the uncached path.
    • Preserve one property-key coercion per variant value. This matches class-variance-authority when an object has a custom toString method.
    • Preserve byte-identical output for the supported CVA input set. CVA configurations must remain unchanged after the first call. Props must be plain objects. Inherited or non-enumerable props can produce different results.

    Merge performance

    • Replace the class merge path with a single-pass token scanner and a right-to-left conflict resolver. The resolver avoids temporary token strings for known classes.
    • Add bounded token, class, argument, and result caches. The caches use admission checks, generation rotation, and adaptive capacity limits.
    • Add specialized paths for calls with one, two, and three arguments. Add a separate path for calls with more arguments.
    • Add argument-sequence lookup for repeated calls. Add successor prediction for common render sequences. Keep mutable values on the full resolution path.
    • Add JavaScriptCore-specific paths for common calls with falsy values. Keep the V8 paths small enough for inlining.
    • Keep custom configurations from createCn on the same optimized execution paths as the default configuration.

    Tailwind compatibility

    • Align the default conflict rules with the pinned tailwind-merge development configuration used by the parity suite.
    • Update logical spacing, inset, border, and scroll conflict behavior.
    • Update max-h-none, shadow-inner, and related shadow conflict behavior.
    • Preserve support for Tailwind CSS 4.0, 4.1, 4.1.5, and 4.2 syntax covered by the test suite.

    Migration command

    • Extend cnfast migrate to replace imports from class-variance-authority and class-variance-authority/types.
    • Support value imports, type-only imports, re-exports, dynamic imports, and CommonJS require calls for the new CVA migration sources.
    • Preserve local aliases and quote style when the command rewrites an import.

    API change

    • Remove tagged-template support from cn and createCn. Use the variadic cn(...) call form.

    Verification tools

    • Expand the stateful parity checks for cn, the merge cache, call-site memoization, and CVA memoization.
    • Add seeded differential tests against tailwind-merge and class-variance-authority.
    • Expand the focused benchmarks for cached and uncached calls, input shapes, Tailwind syntax, cache boundaries, conditional renders, result reuse, CVA variants, call-site replay, page replay, server rendering, and live data grids.
    • Add paired A/B comparison. Expand the bundle-size checks, V8 deoptimization checks, and repository corpora.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cnfast since your current version.


Updates next from 16.3.3 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

Commits
  • 299180d v16.3.4
  • 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
  • 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
  • d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
  • 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 6 updates

Bumps the npm-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.6` |
| [pako](https://github.com/nodeca/pako) | `2.1.0` | `2.2.0` |
| [proj4](https://github.com/proj4js/proj4js) | `2.21.0` | `2.22.0` |
| [vite-plugin-dts](https://github.com/qmhc/unplugin-dts/tree/HEAD/packages/vite-plugin-dts) | `5.0.3` | `5.1.0` |
| [cnfast](https://github.com/aidenybai/cnfast/tree/HEAD/packages/cnfast) | `0.1.0` | `0.2.0` |
| [next](https://github.com/vercel/next.js) | `16.3.3` | `16.3.4` |



Updates `prettier` from 3.8.3 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.6)

Updates `pako` from 2.1.0 to 2.2.0
- [Changelog](https://github.com/nodeca/pako/blob/master/CHANGELOG.md)
- [Commits](nodeca/pako@2.1.0...2.2.0)

Updates `proj4` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/proj4js/proj4js/releases)
- [Changelog](https://github.com/proj4js/proj4js/blob/main/changelog.md)
- [Commits](proj4js/proj4js@v2.21.0...v2.22.0)

Updates `vite-plugin-dts` from 5.0.3 to 5.1.0
- [Release notes](https://github.com/qmhc/unplugin-dts/releases)
- [Changelog](https://github.com/qmhc/unplugin-dts/blob/main/packages/vite-plugin-dts/CHANGELOG.md)
- [Commits](https://github.com/qmhc/unplugin-dts/commits/vite-plugin-dts@5.1.0/packages/vite-plugin-dts)

Updates `cnfast` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/aidenybai/cnfast/releases)
- [Changelog](https://github.com/aidenybai/cnfast/blob/main/packages/cnfast/CHANGELOG.md)
- [Commits](https://github.com/aidenybai/cnfast/commits/cnfast@0.2.0/packages/cnfast)

Updates `next` from 16.3.3 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.3...v16.3.4)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: pako
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: proj4
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: vite-plugin-dts
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: cnfast
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: next
  dependency-version: 16.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 5, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-c9ced44e0d branch September 5, 2026 21:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants