Skip to content

chore(deps): bump the minor-and-patch group with 3 updates - #41

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-88bfd4ca93
Open

chore(deps): bump the minor-and-patch group with 3 updates#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-88bfd4ca93

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 3 updates: @lhci/cli, @vitejs/plugin-react and pdfjs-dist.

Updates @lhci/cli from 0.15.1 to 0.16.0

Release notes

Sourced from @​lhci/cli's releases.

v0.16.0

v0.16.0 (2026-11-02)

  • feat: upgrade to lighthouse 13.6.0 (#1152) (5aa2faf), closes #1152
  • feat(cli): support multiple locales in filesystem upload (#1173) (79b609a), closes #1173
  • feat(server): add CLS median graph to project dashboard (#1190) (80c2782), closes #1190
  • feat(server): support subitems in audit detail pane (#1186) (4db2b5d), closes #1186
  • feat(server): support list and checklist audit details in diffing and UI (#1158) (abd2bc0), closes #1158
  • feat(server): add audit_cumulative-layout-shift_median statistic (#1155) (331ec55), closes #1155
  • feat(utils): fix insight presets and map replaced legacy audits (#1151) (0b39a32), closes #1151
  • feat(viewer): add locale switcher to report comparison UI (#1174) (44c608c), closes #1174
  • fix(cli): bind FallbackServer to loopback address (#1182) (966ba2d), closes #1182
  • fix(cli): catch executablePath error for puppeteer-core in getChromiumPath (#1159) (08b9802), closes #1159
  • fix(cli): close Puppeteer browser when collect finishes (#1163) (0359261), closes #1163
  • fix(cli): prefer project Puppeteer installation (#1144) (02021f5), closes #1144
  • fix(cli): decode stdout and stderr as utf8 in node-runner (#1156) (f88133a), closes #1156
  • fix(docker): upgrade base image to node:22-bookworm-slim (#1150) (9c0ee54), closes #1150
  • fix(server): render 0 values in audit table details (#1185) (ba536cc), closes #1185
  • fix(server): use timing-safe comparison for build and admin tokens (#1180) (ca52d40), closes #1180
  • fix(server): use numericUnit and support KiB/MiB in numeric-diff (#1157) (6945cf9), closes #1157
  • fix(utils): reject git refs starting with a dash in build-context (#1183) (9c8f1c1), closes #1183
  • fix(utils): prevent prototype pollution in lodash merge (#1181) (71fc88e), closes #1181
  • fix(utils): match pre-grouped audit items across locales (#1175) (39a3518), closes #1175
  • fix(utils): check url/origin before entity in getItemKey (#1172) (b27cadc), closes #1172
  • fix(utils): avoid filename collision in saveLHR (#1166) (e6aa7c1), closes #1166
  • fix(utils): support string entity key in audit-diff-finder (#1154) (818f6d0), closes #1154
  • fix(utils): respect median-run aggregation in category assertions (#1146) (46b2846), closes #1146
  • docs: document collecting and uploading multiple configurations (mobile/desktop) (#1184) (3c1431e), closes #1184
  • test: fix and update seed-data fixture (#1189) (03514f8)
  • test(cli): normalize report link in autorun-github.test.js (#1153) (a0b25d6), closes #1153
  • test(server): update snapshots in e2e and storybook tests (#1171) (b169a9d), closes #1171
  • test(server): define setImmediate in storybook.test.jsx (#1170) (a3d0ff8), closes #1170
  • chore: bump version references to 0.15.1 (ebee453)
  • chore: bump to node 22 (#1149) (bc6321c), closes #1149
  • chore: bump version references to 0.16 and add node engines requirement (#1194) (6e4f473), closes #1194
  • chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#1193) (9f33b5d), closes #1193
  • chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191) (493c76f), closes #1191
  • chore(deps): update runtime dependencies and security advisories (#1192) (4701152), closes #1192
  • chore(deps): bump fast-uri from 3.1.8 to 3.1.9 in the npm_and_yarn group across 1 directory (#1178) (dae03de), closes #1178
  • chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates (#1177) (85d3343), closes #1177
  • chore(deps): update typescript to 6.0.3 (#1162) (a10daa8), closes #1162
  • chore(deps): update dependencies to address security vulnerabilities (#1161) (e4a892f), closes #1161
  • chore(deps): bump puppeteer to ^24.43.1 (#1164) (3a5808b), closes #1164
  • chore(deps): remove tmp dependency (#1141) (679f74b), closes #1141
  • chore(deps): bump inquirer from 6.x to 8.2.7 (#1140) (d36fdee), closes #1140
  • misc(release): include dist in server and viewer npm packages (#1187) (8c19aa4), closes #1187
  • misc(release): deploy GitHub Pages via publish workflow (#1188) (9c89ccf), closes #1188
  • misc(release): add GHA publish workflow for npm, multi-arch Docker (#1176) (c965460), closes #1176

... (truncated)

Commits
  • 6e4f473 chore: bump version references to 0.16 and add node engines requirement (#1194)
  • 9f33b5d chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#...
  • 493c76f chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191)
  • 4701152 chore(deps): update runtime dependencies and security advisories (#1192)
  • 80c2782 feat(server): add CLS median graph to project dashboard (#1190)
  • 03514f8 test: fix and update seed-data fixture (#1189)
  • 8c19aa4 misc(release): include dist in server and viewer npm packages (#1187)
  • 9c89ccf misc(release): deploy GitHub Pages via publish workflow (#1188)
  • 4db2b5d feat(server): support subitems in audit detail pane (#1186)
  • ba536cc fix(server): render 0 values in audit table details (#1185)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​lhci/cli since your current version.


Updates @vitejs/plugin-react from 6.1.2 to 6.2.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.2.1

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

plugin-react@6.2.0

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.2.1 (2026-11-02)

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

6.2.0 (2026-11-02)

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Commits
  • 29efd1c release: plugin-react@6.2.1 (#1544)
  • 22079fa fix(plugin-react): fix new refreshInclude option (#1543)
  • d0f7234 release: plugin-react@6.2.0 (#1542)
  • 186d1e8 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1541)
  • a554a33 feat(plugin-react): expand oxc-transform-react peer dep range (#1540)
  • ef758ba fix(deps): update all non-major dependencies (#1531)
  • 304a92a feat(plugin-react): add refreshInclude and refreshExclude options (#1516)
  • b3e9835 fix(deps): update all non-major dependencies (#1517)
  • 65a1dd5 fix(deps): update react 19.3.1 (#1509)
  • 443be64 chore(deps): update dependency typescript to v7 (#1422)
  • Additional commits viewable in compare view

Updates pdfjs-dist from 6.4.299 to 6.5.438

Release notes

Sourced from pdfjs-dist's releases.

v6.5.438

This release contains improvements for accessibility, annotation editing, annotation rendering, font conversion, image conversion, performance, scripting, tiling pattern rendering and the viewer.

Changes since v6.4.299

... (truncated)

Commits
  • 0a41533 Merge pull request #22371 from andrewfader/stream-reader-cancel-errored
  • 956f0cd Merge pull request #22375 from andrewfader/xref-discard-corrupt-state
  • 743422f Prevent unhandled rejections when cancelling an errored stream reader
  • 4794c39 Discard the state of a corrupt XRef table/stream before parsing the next one
  • ab3819f Merge pull request #22409 from Snuffleupagus/initAnnotationLayer-inline
  • b1b2849 Merge pull request #22402 from calixteman/truncated-rgb-image-data
  • 5b02155 Merge pull request #22386 from calixteman/bug2084610
  • 4ef78fe Inline the AnnotationLayerBuilder.prototype.#initAnnotationLayer method
  • 079921e Regenerate button appearances for NeedAppearances (bug 2084610)
  • 743102c Merge pull request #22408 from Snuffleupagus/AnnotationElement-shadow-svgFactory
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-and-patch group with 3 updates
84dbb2a 
Bumps the minor-and-patch group with 3 updates: [@lhci/cli](https://github.com/GoogleChrome/lighthouse-ci), [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [pdfjs-dist](https://github.com/mozilla/pdf.js).


Updates `@lhci/cli` from 0.15.1 to 0.16.0
- [Release notes](https://github.com/GoogleChrome/lighthouse-ci/releases)
- [Commits](GoogleChrome/lighthouse-ci@v0.15.1...v0.16.0)

Updates `@vitejs/plugin-react` from 6.1.2 to 6.2.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.2.1/packages/plugin-react)

Updates `pdfjs-dist` from 6.4.299 to 6.5.438
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v6.4.299...v6.5.438)

---
updated-dependencies:
- dependency-name: "@lhci/cli"
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pdfjs-dist
  dependency-version: 6.5.438
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants