Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 8 updates - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-06ab6feaf5
Open

chore(deps): bump the production-dependencies group across 1 directory with 8 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-06ab6feaf5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 8 updates in the / directory:

Package From To
@capacitor/core 7.6.8 7.6.9
@capacitor/ios 7.6.8 7.6.9
@codemirror/search 6.7.1 6.7.2
@codemirror/state 6.7.1 6.7.4
@codemirror/view 6.43.9 6.43.11
@xyflow/react 12.11.5 12.11.6
dompurify 3.4.14 3.4.15
jsxgraph 1.13.2 1.13.3

Updates @capacitor/core from 7.6.8 to 7.6.9

Release notes

Sourced from @​capacitor/core's releases.

7.6.9

7.6.9 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (430356a)
  • block the HTTP proxy path in subframes (80b6c5e)
Changelog

Sourced from @​capacitor/core's changelog.

7.6.9 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (430356a)
  • block the HTTP proxy path in subframes (80b6c5e)
Commits
  • 60a677e Release 7.6.9
  • 80b6c5e fix: block the HTTP proxy path in subframes
  • 430356a fix: block navigation to the internal HTTP proxy path
  • See full diff in compare view

Updates @capacitor/ios from 7.6.8 to 7.6.9

Release notes

Sourced from @​capacitor/ios's releases.

7.6.9

7.6.9 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (430356a)
  • block the HTTP proxy path in subframes (80b6c5e)
Changelog

Sourced from @​capacitor/ios's changelog.

7.6.9 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (430356a)
  • block the HTTP proxy path in subframes (80b6c5e)
Commits
  • 60a677e Release 7.6.9
  • 80b6c5e fix: block the HTTP proxy path in subframes
  • 430356a fix: block navigation to the internal HTTP proxy path
  • See full diff in compare view

Updates @codemirror/search from 6.7.1 to 6.7.2

Commits

Updates @codemirror/state from 6.7.1 to 6.7.4

Commits

Updates @codemirror/view from 6.43.9 to 6.43.11

Commits

Updates @xyflow/react from 12.11.5 to 12.11.6

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82
Changelog

Sourced from @​xyflow/react's changelog.

12.11.6

Patch Changes

  • #5994 2350158 - Reset all properties in provider store when unmounting flow

  • #5997 0117cc9 - Prevent attribution warning when pane is not rendered either

  • Updated dependencies [0117cc9]:

    • @​xyflow/system@​0.0.82
Commits

Updates dompurify from 3.4.14 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible
Commits

Updates jsxgraph from 1.13.2 to 1.13.3

Release notes

Sourced from jsxgraph's releases.

Release of v1.13.3

JSXGraph v1.13.3 is a patch release that primarily fixes a regression introduced in v1.13.0 affecting the strokeColor of polygon elements.

This release also includes contributions from @​cdeil, who added missing 3D TypeScript declarations, fixed ID collisions in anonymous containers, and improved the Makefile for macOS. Additionally, @​anupamme addressed several minor security issues. Many thanks.

Enjoy, Alfred

Changelog

Sourced from jsxgraph's changelog.

1.13.3

Improvements

  • Add missing 3D TypeScript declarations
  • Update a few npm dev packages

Bug fixes

  • Fix regression: missing strokeColor of polygon
  • Fix resource ID collisions for anonymous containers
  • Fix two security issues
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
975d130 
…y with 8 updates

Bumps the production-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@capacitor/core](https://github.com/ionic-team/capacitor) | `7.6.8` | `7.6.9` |
| [@capacitor/ios](https://github.com/ionic-team/capacitor) | `7.6.8` | `7.6.9` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.7.1` | `6.7.2` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.4` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.9` | `6.43.11` |
| [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.5` | `12.11.6` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.14` | `3.4.15` |
| [jsxgraph](https://github.com/jsxgraph/jsxgraph) | `1.13.2` | `1.13.3` |



Updates `@capacitor/core` from 7.6.8 to 7.6.9
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/7.6.9/CHANGELOG.md)
- [Commits](ionic-team/capacitor@7.6.8...7.6.9)

Updates `@capacitor/ios` from 7.6.8 to 7.6.9
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/7.6.9/CHANGELOG.md)
- [Commits](ionic-team/capacitor@7.6.8...7.6.9)

Updates `@codemirror/search` from 6.7.1 to 6.7.2
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@codemirror/state` from 6.7.1 to 6.7.4
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/state/commits)

Updates `@codemirror/view` from 6.43.9 to 6.43.11
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@xyflow/react` from 12.11.5 to 12.11.6
- [Release notes](https://github.com/xyflow/xyflow/releases)
- [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.6/packages/react)

Updates `dompurify` from 3.4.14 to 3.4.15
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.14...3.4.15)

Updates `jsxgraph` from 1.13.2 to 1.13.3
- [Release notes](https://github.com/jsxgraph/jsxgraph/releases)
- [Changelog](https://github.com/jsxgraph/jsxgraph/blob/main/CHANGELOG.md)
- [Commits](jsxgraph/jsxgraph@v1.13.2...v1.13.3)

---
updated-dependencies:
- dependency-name: "@capacitor/core"
  dependency-version: 7.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@capacitor/ios"
  dependency-version: 7.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@xyflow/react"
  dependency-version: 12.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: jsxgraph
  dependency-version: 1.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants