Skip to content

build(deps): bump the npm_and_yarn group across 1 directory with 4 updates - #19

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-737fe92ce2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-737fe92ce2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 4 updates in the / directory: electron, vite, @vitest/mocker and undici.

Updates electron from 41.6.1 to 42.11.16

Release notes

Sourced from electron's releases.

electron v42.11.16

Release Notes for v42.11.16

[!NOTE] This release contains the fix for GHSA-jr5w-w6x2-84p9, the mitigation for compromised eMudhra intermediate certificates

Fixes

  • Fixed link-opened windows not using the opener's session and webPreferences. #55050 (Also in 43, 44, 45)
  • Fixed setCertificateVerifyProc occasionally not being applied to a request issued concurrently with the first request to a host. #55054 (Also in 43, 44, 45)

electron v42.11.15

Release Notes for v42.11.15

Fixes

  • Fixed a crash on Linux at startup or on theme change with GTK modules loaded. #55015
  • Fixed an issue where clicks posted to a background app were dropped on macOS. #54906 (Also in 43, 44, 45)
  • Fixed net.fetch and session.fetch failing permanently with net::ERR_FAILED after the Network Service process restarts. #54925 (Also in 43, 44, 45)
  • Fixed utilityProcess dropping messages posted with process.parentPort.postMessage() right before the process exits. #55000 (Also in 43, 45)

Other Changes

  • Backported fixes from upstream Chromium and V8. #55035

electron v42.11.14

Release Notes for v42.11.14

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, PDFium and V8. #54900

electron v42.11.13

Release Notes for v42.11.13

Fixes

  • Fixed a crash when starting without an available display server on Linux. #54796 (Also in 45)

electron v42.11.12

Release Notes for v42.11.12

Fixes

  • Fixed a renderer crash when a ResizeObserver loop-limit error handler modified layout. #54610 (Also in 43, 44, 45)

Other Changes

  • Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. #54668

... (truncated)

Commits
  • 093583c fix: apply the certificate SPKI blocklist to Node and add entries (42-x-y) (#...
  • d39162f docs: fix code block line highlighting after docs reformats (#55104)
  • b3de384 test: keep WebContentsView visibility specs' windows on top on Windows (42-x-...
  • 7495684 build: update PGO profiles (#55091)
  • 83a6c43 ci: skip native builds when installing deps for type generation (#55064)
  • 716c0b2 fix: intermittent certificate errors for concurrent requests with setCertific...
  • a333668 ci: use Cloudflare DNS directly on macOS runners (#55069)
  • ab438f1 fix: use the opener's session and webPreferences for windows opened from link...
  • 0d40700 chore: cherry-pick 10 changes from chromium and v8 (#55035)
  • 2276df8 test: wait for service worker activation before stopping it (#55019)
  • Additional commits viewable in compare view

Updates vite from 8.1.0 to 8.1.6

Release notes

Sourced from vite's releases.

v8.1.6

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.6 (2026-10-06)

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (e46fc9c)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (4ff2522)
  • server: store ids to safeModulePaths rather than URLs (#23656) (170b927)

8.1.5 (2026-07-16)

Bug Fixes

  • bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
  • client: overlay error message format align rolldown (#22869) (5a72b87)
  • deps: update all non-major dependencies (#22921) (fef682d)
  • deps: update rolldown-related dependencies (#22922) (3c345e4)
  • module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
  • optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
  • ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

  • build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
  • build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

  • avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

... (truncated)

Commits
  • dade886 release: v8.1.6
  • 170b927 fix(server): store ids to safeModulePaths rather than URLs (#23656)
  • e46fc9c fix(deps): update launch-editor to v2.14.2 (#23654)
  • 4ff2522 fix(html): filename passed to transformIndexHtml should not include queries (...
  • 5e7fe12 release: v8.1.5
  • 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
  • 5a72b87 fix(client): overlay error message format align rolldown (#22869)
  • f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
  • 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
  • c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
  • Additional commits viewable in compare view

Updates @vitest/mocker from 4.1.9 to 5.1.0

Release notes

Sourced from @​vitest/mocker's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates undici from 8.5.0 to 7.30.2

Commits
  • 6be5720 Bumped v7.30.2 (#6163)
  • 4bca0ab test: support Node.js 20 in cache replay tests
  • 520d95b docs: add v7.30.2 security release notes
  • bcba54b fix(redirect): normalize tuple headers on v7
  • faba415 fix(cache): adapt security fixes to v7 lifecycle
  • 3df9ff5 test(cache): align redirect caching with hop policy
  • 4d54152 fix(cache): detect an actual redirect, not a plain revalidation
  • c363766 test(cache): cover credentialed revalidation refresh
  • b790905 fix(cache): treat proxy-authorization as a credential when caching redirects
  • 95a17aa test(cache): cover proxy-authorization credential on same-origin redirect
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates

Bumps the npm_and_yarn group with 4 updates in the / directory: [electron](https://github.com/electron/electron), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) and [undici](https://github.com/nodejs/undici).


Updates `electron` from 41.6.1 to 42.11.16
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v41.6.1...v42.11.16)

Updates `vite` from 8.1.0 to 8.1.6
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v8.1.6/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.6/packages/vite)

Updates `@vitest/mocker` from 4.1.9 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/mocker)

Updates `undici` from 8.5.0 to 7.30.2
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.5.0...v7.30.2)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 42.11.16
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 8.1.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@vitest/mocker"
  dependency-version: 5.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 7.30.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants