chore(deps): bump the npm-minor-patch group with 12 updates by dependabot[bot] · Pull Request #1116 · coder/vscode-coder

dependabot · 2026-09-16T13:16:24Z

Bumps the npm-minor-patch group with 12 updates:

Package	From	To
@peculiar/x509	`2.0.0`	`2.1.0`
zod	`4.5.4`	`4.6.2`
@types/node	`22.20.1`	`22.20.2`
eslint-plugin-package-json	`1.8.0`	`1.8.1`
memfs	`4.71.0`	`4.75.0`
playwright-core	`1.62.1`	`1.63.0`
@rolldown/plugin-babel	`0.2.3`	`0.2.4`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
vite	`8.2.2`	`8.3.0`

Updates @peculiar/x509 from 2.0.0 to 2.1.0

Release notes

Sourced from @peculiar/x509's releases.

v2.1.0

What's Changed

test: drop access to private X509Crl.tbs getter by @dotCooCoo in PeculiarVentures/x509#134

feat(algorithm): register ML-DSA and SLH-DSA AlgorithmProvider handlers (FIPS 204 / FIPS 205) by @dotCooCoo in PeculiarVentures/x509#135

fix: add crypto arg to findRevoked by @hacdias in PeculiarVentures/x509#137

feat: expose asn1 parse options by @hacdias in PeculiarVentures/x509#141

fix: encode CRL revoked serial numbers as positive INTEGERs by @hacdias in PeculiarVentures/x509#140

chore: upgrade dependencies and migrate to TypeScript 6 by @microshine in PeculiarVentures/x509#146

chore: migrate linting and formatting from ESLint to Oxc by @microshine in PeculiarVentures/x509#147

ci: update GitHub Actions and expand package compatibility checks by @microshine in PeculiarVentures/x509#149

New Contributors

@dotCooCoo made their first contribution in PeculiarVentures/x509#134

@hacdias made their first contribution in PeculiarVentures/x509#137

Full Changelog: PeculiarVentures/x509@v2.0.0...v2.1.0

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @peculiar/x509 since your current version.

Updates zod from 4.5.4 to 4.6.2

Release notes

Sourced from zod's releases.

v4.6.2

A patch on top of 4.6.1.

9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585

0c483c58 docs: the Zod 4.6 announcement post (#6546)

a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577

dd9c36fa fix(v4): defer recursive object index inference (#6580)

3b154992 feat(lang): add Tajik (tg) locale (#6581) by @ismoil77

2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

v4.6.0

Zod 4.6 is now available.
npm install zod@latest
At a glance:

.validate() — checks input validity without building a result (up to 35x faster than .safeParse().success on a compiled schema)

z.instanceof().properties() — validates properties of an instance

fromJSONSchema() — enforces six validation keywords it used to ignore

z.iban() — electronic-format IBAN plus mod-97 checksum

z.withParser() — installs a parser generated elsewhere, for environments without new Function

Faster CommonJS — drops the getter on every export (~3x faster z.validate() under require)

Memory retention in recursive schemas — releases the parsed input, fixing a 4.5 out-of-memory regression

@zod/mini — Zod Mini as a standalone package, versioned in lockstep with zod since 4.5

.validate()

Standalone boolean validation, in Zod, Zod Mini, and Zod Core. It answers "is this input valid?" without constructing a ZodError, which makes rejection cheap. The return type is a guard on the schema's input type.
z.validate(z.string(), "hi"); // true
z.validate(z.string(), 42);   // false
It is a method on Zod Classic schemas too. (#6547)
const Player = z.object({
  username: z.string(),
  xp: z.number(),
});
</tr></table>

... (truncated)

Commits

e359f73 4.6.2
9446b5c fix: preserve undefined prefault outputs and object keys (#6587)
0c483c5 docs: Zod 4.6 announcement post (#6546)
a00c3f3 docs: use Trigger.dev's brand-kit lockups for the platinum card
62311eb 4.6.1
2efa8b8 ci: give the npm wait a real budget and drop the back-publish path (#6583)
b12aa52 fix: preserve unique tags with defaulted discriminators (#6582)
dd9c36f fix(v4): defer recursive object index inference (#6580)
574d480 fix(locales): clarify Tajik discriminator value message
c532d76 test(locales): cover Tajik error branches
Additional commits viewable in compare view

Updates @types/node from 22.20.1 to 22.20.2

Commits

See full diff in compare view

Updates eslint-plugin-package-json from 1.8.0 to 1.8.1

Release notes

Sourced from eslint-plugin-package-json's releases.

v1.8.1

1.8.1 (2026-09-12)

🩹 Bug Fixes

do not rewrite null exports in exports-subpaths-style (#2178) (fad7f58)

Changelog

Sourced from eslint-plugin-package-json's changelog.

1.8.1 (2026-09-12)

🩹 Bug Fixes

do not rewrite null exports in exports-subpaths-style (#2178) (fad7f58)

Commits

14dcd18 chore(main): release 1.8.1 (#2180)
222e2cc chore(deps): update dependency @types/node to v24.13.4 (#2181)
fad7f58 fix: do not rewrite null exports in exports-subpaths-style (#2178)
76a7ac7 chore(deps): update dependency eslint-plugin-jsdoc to v64.3.8 (#2179)
fad596e chore(deps): update dependency knip to v6.35.1 (#2176)
7252e7c chore(deps): update pnpm to v12.4.0 (#2175)
8df9369 chore(deps): update dependency knip to v6.35.0 (#2174)
0ed65ba chore(deps): update astro (#2173)
6b821c6 chore(deps): update dependency typescript-eslint to v8.70.0 (#2171)
77e9f80 chore(deps): update dependency @eslint-community/eslint-plugin-eslint-comment...
Additional commits viewable in compare view

Updates memfs from 4.71.0 to 4.75.0

Release notes

Sourced from memfs's releases.

Release v4.75.0

What's Changed

feat: 🎸 improve error formatting and normalization, dedupe validators by @streamich in streamich/memfs#1291

Full Changelog: streamich/memfs@v4.74.0...v4.75.0

Release v4.74.0

What's Changed

feat: 🎸 improve flags validation errors by @streamich in streamich/memfs#1290

Full Changelog: streamich/memfs@v4.73.0...v4.74.0

Release v4.73.0

What's Changed

feat: 🎸 improve read/write path by @streamich in streamich/memfs#1289

Full Changelog: streamich/memfs@v4.72.2...v4.73.0

Release v4.72.2

What's Changed

fix(memfs): resolve relative streams from virtual cwd by @xianjianlf2 in streamich/memfs#1271

Full Changelog: streamich/memfs@v4.72.1...v4.72.2

Release v4.72.1

What's Changed

fix(fs-node): finish BYOB file stream reads at EOF by @xianjianlf2 in streamich/memfs#1285

Full Changelog: streamich/memfs@v4.72.0...v4.72.1

Release v4.72.0

What's Changed

feat: 🎸 improve path validation errors by @streamich in streamich/memfs#1288

Full Changelog: streamich/memfs@v4.71.1...v4.72.0

Release v4.71.1

What's Changed

fix(fs-node): match Node directory iteration lifecycle by @xianjianlf2 in streamich/memfs#1284

Full Changelog: streamich/memfs@v4.71.0...v4.71.1

Commits

ee154d9 chore: release v4.75.0
348a32e Merge pull request #1291 from streamich/dedupe-errors
3c736f9 style: 💄 remove redundant constant
e4053a7 feat: 🎸 improve error formatting and normalization, dedupe validators
cf63bb7 chore: release v4.74.0
91354b9 Merge pull request #1290 from streamich/fix/arg-validation
6936f27 style: 💄 run Prettier
38ed5d6 Merge remote-tracking branch 'origin/master' into fix/arg-validation
491238d feat: 🎸 improve flags validation errors
2c6ae99 chore: release v4.73.0
Additional commits viewable in compare view

Updates playwright-core from 1.62.1 to 1.63.0

Release notes

Sourced from playwright-core's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:
test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});
A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:
// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();
The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:
await page.locator('button').visible().click();
🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:
await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });
Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

1b025d7 chore: mark v1.63.0 (#42569)
0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
13dbf10 cherry-pick(#42552): docs: release notes for v1.63
e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
2b7a5f2 test: response.body() for content-encoding:identity (#42537)
648a67c fix(mcp): create parent directories for explicitly named files (#42540)
7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
52900a1 devops: restore npm publishing from GitHub Actions (#42550)
8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
Additional commits viewable in compare view

Updates @rolldown/plugin-babel from 0.2.3 to 0.2.4

Release notes

Sourced from @rolldown/plugin-babel's releases.

plugin-babel@0.2.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @rolldown/plugin-babel's changelog.

0.2.4 (2026-09-07)

Bug Fixes

babel: set inputSourceMap: false to avoid combining source map twice (#131) (249a7d2)

deps: update all non-major dependencies (#124) (6373896), references #8203

deps: update all non-major dependencies (#65) (465fb38)

deps: update all non-major dependencies (#88) (0032957), references #8203 #8203 #8203 #8203

deps: update all non-major dependencies (#99) (fa5b6df), references #8203 #8203 #8203 #8203 #8203 #8203 #8203

deps: update rolldown-related dependencies (#59) (e0e474c)

deps: update rolldown-related dependencies (#66) (717a2a6)

deps: update rolldown-related dependencies (#78) (6a57129)

Miscellaneous Chores

deps: update all non-major dependencies (#106) (6b89bca), references #8203 #8203

deps: update all non-major dependencies (#77) (0b70858)

deps: update all non-major dependencies (#90) (b73d0dd), references #8203 #8203

deps: update all non-major dependencies (#92) (59dcaf4), references #8203 #8203 #8203 #8203

deps: update rolldown-related dependencies (#128) (c0365e0)

use pnpm catalog for some packages (#82) (d717e25)

Commits

49dc455 release: plugin-babel@0.2.4
249a7d2 fix(babel): set inputSourceMap: false to avoid combining source map twice (...
c0365e0 chore(deps): update rolldown-related dependencies (#128)
6373896 fix(deps): update all non-major dependencies (#124)
6b89bca chore(deps): update all non-major dependencies (#106)
fa5b6df fix(deps): update all non-major dependencies (#99)
59dcaf4 chore(deps): update all non-major dependencies (#92)
b73d0dd chore(deps): update all non-major dependencies (#90)
0032957 fix(deps): update all non-major dependencies (#88)
d717e25 chore: use pnpm catalog for some packages (#82)
Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling ... Description has been truncated

Bumps the npm-minor-patch group with 12 updates: | Package | From | To | | --- | --- | --- | | [@peculiar/x509](https://github.com/PeculiarVentures/x509) | `2.0.0` | `2.1.0` | | [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `22.20.2` | | [eslint-plugin-package-json](https://github.com/michaelfaith/eslint-plugin-package-json) | `1.8.0` | `1.8.1` | | [memfs](https://github.com/streamich/memfs) | `4.71.0` | `4.75.0` | | [playwright-core](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` | | [@rolldown/plugin-babel](https://github.com/rolldown/plugins/tree/HEAD/packages/babel) | `0.2.3` | `0.2.4` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` | Updates `@peculiar/x509` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/PeculiarVentures/x509/releases) - [Commits](PeculiarVentures/x509@v2...v2.1.0) Updates `zod` from 4.5.4 to 4.6.2 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.5.4...v4.6.2) Updates `@types/node` from 22.20.1 to 22.20.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint-plugin-package-json` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/michaelfaith/eslint-plugin-package-json/releases) - [Changelog](https://github.com/michaelfaith/eslint-plugin-package-json/blob/main/CHANGELOG.md) - [Commits](michaelfaith/eslint-plugin-package-json@v1.8.0...v1.8.1) Updates `memfs` from 4.71.0 to 4.75.0 - [Release notes](https://github.com/streamich/memfs/releases) - [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md) - [Commits](streamich/memfs@v4.71.0...v4.75.0) Updates `playwright-core` from 1.62.1 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.1...v1.63.0) Updates `@rolldown/plugin-babel` from 0.2.3 to 0.2.4 - [Release notes](https://github.com/rolldown/plugins/releases) - [Changelog](https://github.com/rolldown/plugins/blob/main/packages/babel/CHANGELOG.md) - [Commits](https://github.com/rolldown/plugins/commits/plugin-babel@0.2.4/packages/babel) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `vite` from 8.2.2 to 8.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite) --- updated-dependencies: - dependency-name: "@peculiar/x509" dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: zod dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/node" dependency-version: 22.20.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: eslint-plugin-package-json dependency-version: 1.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: memfs dependency-version: 4.75.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: playwright-core dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@rolldown/plugin-babel" dependency-version: 0.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: vite dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Update vitest 5, @vscode/vsce 4, electron 44, and coder v2.37.1, plus the pnpm/action-setup, action-gh-release, and ovsx pins and the devcontainer image digest. Add the Template and AppearanceConfig fields that coder v2.37.1 makes required. Drop the yauzl override. Electron 42 and later use extract-zip, and @vscode/vsce 4 requires yauzl 3 itself, so it resolves to 3 unaided. Install Electron in test-electron.sh with pnpm rather than npx, so majors below 42 still install under npm 12, which blocks the postinstall, and under Node 24.16 and later, where yauzl 2 extracts almost nothing. Hold TypeScript at 6.0.3, because typescript-eslint rejects TypeScript 7.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 16, 2026

EhabY self-requested a review September 16, 2026 14:22

EhabY approved these changes Sep 16, 2026

View reviewed changes

EhabY merged commit e772660 into main Sep 16, 2026
11 of 12 checks passed

EhabY deleted the dependabot/npm_and_yarn/npm-minor-patch-4634ccfccb branch September 16, 2026 15:26

Navigation Menu

chore(deps): bump the npm-minor-patch group with 12 updates - #1116

chore(deps): bump the npm-minor-patch group with 12 updates#1116
EhabY merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-4634ccfccb

dependabot Bot commented on behalf of github Sep 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 16, 2026

v2.1.0

What's Changed

New Contributors

v4.6.2

v4.6.1

v4.6.0

.validate()

v1.8.1

1.8.1 (2026-09-12)

🩹 Bug Fixes

1.8.1 (2026-09-12)

🩹 Bug Fixes

Release v4.75.0

What's Changed

Release v4.74.0

What's Changed

Release v4.73.0

What's Changed

Release v4.72.2

What's Changed

Release v4.72.1

What's Changed

Release v4.72.0

What's Changed

Release v4.71.1

What's Changed

v1.63.0

🔒 Test locks

🪟 Locate across frames

👁️ Visible-only locators

🧾 Step params and subtitles

plugin-babel@0.2.4

0.2.4 (2026-09-07)

Bug Fixes

Miscellaneous Chores

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`.validate()`