Skip to content

build(deps): bump the npm-minor-and-patch group across 1 directory with 14 updates - #673

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/openfeature-provider/js/npm-minor-and-patch-c59f59a145
Open

build(deps): bump the npm-minor-and-patch group across 1 directory with 14 updates#673
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/openfeature-provider/js/npm-minor-and-patch-c59f59a145

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 14 updates in the /openfeature-provider/js directory:

Package From To
@bufbuild/protobuf 2.9.0 2.16.0
@openfeature/core 1.9.0 1.12.0
@openfeature/server-sdk 1.19.0 1.23.0
@testing-library/dom 10.4.1 10.4.2
@testing-library/react 16.3.2 16.3.3
@types/debug 4.1.12 4.1.13
next 16.3.4 16.4.3
prettier 3.9.6 3.9.10
react 19.2.3 19.3.1
@types/react 19.2.9 19.3.0
react-dom 19.2.3 19.3.1
@types/react-dom 19.2.3 19.3.0
rolldown 1.0.0-beta.38 1.2.15
ts-proto 2.7.7 2.18.3

Updates @bufbuild/protobuf from 2.9.0 to 2.16.0

Release notes

Sourced from @​bufbuild/protobuf's releases.

v2.16.0

What's Changed

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.15.0...v2.16.0

v2.15.0

What's Changed

Full Changelog: bufbuild/protobuf-es@v2.14.1...v2.15.0

v2.14.1

What's Changed

This release deprecates configureTextEncoding() from @bufbuild/protobuf/wire. If you run @bufbuild/protobuf in an environment that does not provide the Text Encoding API, please migrate to a polyfill that installs TextEncoder (with the methods encode and optionally encodeInto) and TextDecoder (with the fatal: true constructor argument and the decode method) on globalThis instead. Please see #1517 for the rationale.

Full Changelog: bufbuild/protobuf-es@v2.14.0...v2.14.1

v2.14.0

What's Changed

This is a performance release of protobuf-es. We've made substantial improvements to the runtime, while also reducing bundle size by 5%. Here are the results from our benchmarks (compared against v2.13.0):

fixture toBinary fromBinary toJson fromJson
general 4.66x 1.46x 2.29x 1.67x
scalar 2.91x 1.96x 1.74x 1.64x
repeated-scalar 4.37x 1.53x 3.06x 1.65x

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​bufbuild/protobuf since your current version.


Updates @openfeature/core from 1.9.0 to 1.12.0

Release notes

Sourced from @​openfeature/core's releases.

core: v1.12.0

1.12.0 (2026-07-27)

✨ New Features

  • core: pass bound domain to provider initialize and enforce domain-scoped binding (#1433) (a98f914)

core: v1.11.0

1.11.0 (2026-06-12)

✨ New Features

  • expose js sdk identity on client metadata (#1376) (6c437e7)

core: v1.10.0

1.10.0 (2026-04-21)

✨ New Features

  • add "sideEffects": false to package.json files for all packages (#1343) (d8e968e)
  • support type-safe flag keys via module augmentation (#1349) (fb2ed4a)

web-sdk: v1.10.0

1.10.0 (2026-07-28)

✨ New Features

  • core: pass bound domain to provider initialize and enforce domain-scoped binding (#1433) (a98f914)

core: v1.9.2

1.9.2 (2026-02-18)

🔄 Refactoring

  • move Multi-Provider shared code to core package (#1324) (baf33f0)

core: v1.9.1

1.9.1 (2025-09-26)

🐛 Bug Fixes

  • make OTEL evaluation event attribute types compliant to OTEL types (#1237) (4f71dd4)
Commits
  • 090bf55 chore(main): release core 1.12.0 (#1437)
  • a98f914 feat(core): pass bound domain to provider initialize and enforce domain-scope...
  • bc470dc test: add package export smoke checks (#1406)
  • 3c01041 chore(main): release react-sdk 1.4.1 (#1427)
  • c3833a7 chore(deps): update angular monorepo to v21.2.17 (#1404)
  • 407e06e chore(deps): update dependency rollup-plugin-dts to v6.4.1 (#1393)
  • 3f6ac84 chore(deps): update angular-cli monorepo to v21.2.15 (#1411)
  • 274ea74 chore(deps): update react monorepo to v18.3.31 (#1424)
  • f6da4e2 chore(deps): update dependency ts-jest to v29.4.11 (#1423)
  • 7a7f795 chore(deps): update dependency rollup to v4.62.0 (#1391)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openfeature/core since your current version.


Updates @openfeature/server-sdk from 1.19.0 to 1.23.0

Release notes

Sourced from @​openfeature/server-sdk's releases.

server-sdk: v1.23.0

1.23.0 (2026-07-28)

✨ New Features

  • core: pass bound domain to provider initialize and enforce domain-scoped binding (#1433) (a98f914)

server-sdk: v1.22.0

1.22.0 (2026-06-12)

✨ New Features

  • expose js sdk identity on client metadata (#1376) (6c437e7)

server-sdk: v1.21.0

1.21.0 (2026-04-21)

✨ New Features

  • add "sideEffects": false to package.json files for all packages (#1343) (d8e968e)
  • support type-safe flag keys via module augmentation (#1349) (fb2ed4a)
  • support type-safe variant values for InMemoryProvider (#1356) (431f899)

🧹 Chore

  • replace test-harness submodule with spec submodule (#1359) (7924205)

📚 Documentation

server-sdk: v1.20.2

1.20.2 (2026-02-18)

🔄 Refactoring

  • move Multi-Provider shared code to core package (#1324) (baf33f0)
  • simplify evaluation context updates for before hooks (#1257) (e3c9d79)

server-sdk: v1.20.1

1.20.1 (2025-12-09)

🐛 Bug Fixes

... (truncated)

Commits
  • ba1bfd0 chore(main): release server-sdk 1.23.0 (#1438)
  • 0fffbc0 chore(main): release web-sdk 1.10.0 (#1439)
  • 090bf55 chore(main): release core 1.12.0 (#1437)
  • a98f914 feat(core): pass bound domain to provider initialize and enforce domain-scope...
  • bc470dc test: add package export smoke checks (#1406)
  • 3c01041 chore(main): release react-sdk 1.4.1 (#1427)
  • c3833a7 chore(deps): update angular monorepo to v21.2.17 (#1404)
  • 407e06e chore(deps): update dependency rollup-plugin-dts to v6.4.1 (#1393)
  • 3f6ac84 chore(deps): update angular-cli monorepo to v21.2.15 (#1411)
  • 274ea74 chore(deps): update react monorepo to v18.3.31 (#1424)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​openfeature/server-sdk since your current version.


Updates @testing-library/dom from 10.4.1 to 10.4.2

Release notes

Sourced from @​testing-library/dom's releases.

v10.4.2

10.4.2 (2026-09-13)

Bug Fixes

  • deps: pin @​types/node to a TypeScript 4-compatible version (#1386) (6049cc0)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/dom since your current version.


Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @​testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

  • Avoid act() re-entrant when dispatching events (#1468) (20ce75f)
Commits

Updates @types/debug from 4.1.12 to 4.1.13

Commits

Updates next from 16.3.4 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

High:

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

  • Show compiler plugin warning in more situations: #75682
  • fix(scripts): correct typo in rm.mjs error message: #87015

... (truncated)

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
  • cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
  • 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
  • f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
  • c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • 2864b17 v16.4.2
  • Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • cdd17f2 Release 3.9.9
  • dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
  • f9be58f Git blame ignore 3.9.8
  • 88470cb Bump Prettier dependency to 3.9.8
  • 9559cab Clean changelog_unreleased
  • 4fc8ee8 Update dependents count
  • Additional commits viewable in compare view

Updates react from 19.2.3 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

  • Fast Refresh Fixes
  • Performance Track Fixes
    • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
    • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
    • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
    • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
    • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
    • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
    • Clear potentially large performance measures in DEV (@​hoxyq #34803)
    • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
  • Activity Fixes

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

@dependabot
build(deps): bump the npm-minor-and-patch group across 1 directory wi…
4486a7d 
…th 14 updates

Bumps the npm-minor-and-patch group with 14 updates in the /openfeature-provider/js directory:

| Package | From | To |
| --- | --- | --- |
| [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.9.0` | `2.16.0` |
| [@openfeature/core](https://github.com/open-feature/js-sdk) | `1.9.0` | `1.12.0` |
| [@openfeature/server-sdk](https://github.com/open-feature/js-sdk) | `1.19.0` | `1.23.0` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@types/debug](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/debug) | `4.1.12` | `4.1.13` |
| [next](https://github.com/vercel/next.js) | `16.3.4` | `16.4.3` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.10` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.3.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.9` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.3.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.0.0-beta.38` | `1.2.15` |
| [ts-proto](https://github.com/stephenh/ts-proto) | `2.7.7` | `2.18.3` |



Updates `@bufbuild/protobuf` from 2.9.0 to 2.16.0
- [Release notes](https://github.com/bufbuild/protobuf-es/releases)
- [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.16.0/packages/protobuf)

Updates `@openfeature/core` from 1.9.0 to 1.12.0
- [Release notes](https://github.com/open-feature/js-sdk/releases)
- [Commits](open-feature/js-sdk@core-v1.9.0...core-v1.12.0)

Updates `@openfeature/server-sdk` from 1.19.0 to 1.23.0
- [Release notes](https://github.com/open-feature/js-sdk/releases)
- [Commits](open-feature/js-sdk@server-sdk-v1.19.0...server-sdk-v1.23.0)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@types/debug` from 4.1.12 to 4.1.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/debug)

Updates `next` from 16.3.4 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.4...v16.4.3)

Updates `prettier` from 3.9.6 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.10)

Updates `react` from 19.2.3 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `@types/react` from 19.2.9 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.3 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `rolldown` from 1.0.0-beta.38 to 1.2.15
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG-2025.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.15/packages/rolldown)

Updates `ts-proto` from 2.7.7 to 2.18.3
- [Release notes](https://github.com/stephenh/ts-proto/releases)
- [Changelog](https://github.com/stephenh/ts-proto/blob/main/CHANGELOG.md)
- [Commits](stephenh/ts-proto@v2.7.7...v2.18.3)

---
updated-dependencies:
- dependency-name: "@bufbuild/protobuf"
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@openfeature/core"
  dependency-version: 1.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@openfeature/server-sdk"
  dependency-version: 1.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/debug"
  dependency-version: 4.1.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: rolldown
  dependency-version: 1.2.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: ts-proto
  dependency-version: 2.18.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants