chore(deps): Bump the npm-minor-patch group with 9 updates by dependabot[bot] · Pull Request #102 · finallyjay/csgo-inventory-tracker

dependabot · 2026-10-05T04:19:51Z

Bumps the npm-minor-patch group with 9 updates:

Package	From	To
lucide-react	`1.48.0`	`1.49.0`
next	`16.3.6`	`16.3.8`
react-hook-form	`7.88.0`	`7.89.0`
@types/node	`26.6.2`	`26.6.4`
@vitest/coverage-v8	`5.0.1`	`5.0.3`
lint-staged	`17.5.1`	`17.6.0`
oxfmt	`0.70.0`	`0.71.0`
oxlint	`1.85.0`	`1.86.0`
vitest	`5.0.1`	`5.0.3`

Updates lucide-react from 1.48.0 to 1.49.0

Release notes

Sourced from lucide-react's releases.

Version 1.49.0

What's Changed

feat(icons): added letters icon by @karsa-mistmere in lucide-icons/lucide#4779

fix(packages): declare @types/react as an optional peer dependency by @unrevised6419 in lucide-icons/lucide#4892

feat(icons): added bangladeshi-taka icon by @TanvirMahin24 in lucide-icons/lucide#4869

feat(icons): added printer-3d icon by @Azuzula in lucide-icons/lucide#4414

New Contributors

@unrevised6419 made their first contribution in lucide-icons/lucide#4892

@TanvirMahin24 made their first contribution in lucide-icons/lucide#4869

@Azuzula made their first contribution in lucide-icons/lucide#4414

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

Commits

e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
See full diff in compare view

Updates next from 16.3.6 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Server-Side Request Forgery in Image Optimization

Medium:

Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Pending use cache fill can leak Draft Mode content into regular responses and persisted pages

Cache leak across root param values in nested 'use cache' functions

Low:

Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @lukesandberg for helping!

Commits

b0fad0d v16.3.8
719e4c6 [lts-active] Scope response cache keys to their source route (#218)
e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
4c20699 v16.3.7
2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
See full diff in compare view

Updates react-hook-form from 7.88.0 to 7.89.0

Release notes

Sourced from react-hook-form's releases.

Version 7.89.0

🐞 Fixes

Fix form state select option (#13784)

Remove duplicate default value field (#13783)

Fix validateField skipping refs without setCustomValidity under native validation (#13782)

Fix form-level validation using a stale validate function (#13777)

Fix useFieldArray touched fields handling (#13776)

Fix pending delayError timers for nested paths (#13775)

Fix getValues extracting unmarked field array entries (#13773)

Fix field array touched state not being re-indexed when unsubscribed (#13772)

Fix nested delayError timers remaining when a parent validates clean (#13771)

Fix nested delayError timers remaining after resetField() resets a parent (#13769)

Fix stale field array root errors after an operation satisfies the validation rule (#13767)

Fix setValue() not revalidating dependencies when shouldValidate is enabled (#13765)

Fix stale built-in validation results after reset() during handleSubmit() (#13761)

Fix stale form-level validation results after reset() (#13762)

Fix validation rules removed from register options at runtime remaining active (#13758)

Fix useController required validation not using the controlled value (#13756)

Fix stale form-level errors remaining after successful re-validation (#13755)

Fix useFieldArray marking the form dirty when the array default value is null (#13750)

Fix isValid not being recomputed when the errors prop is emptied (#13748)

Fix form-level validation running more than once per traversal (#13747)

Fix stale built-in validation results after reset() during onChange (#13745)

Fix stale resolver results after reset() during onChange (#13744)

Fix setValue() not triggering field array root validation when shouldValidate is enabled (#13743)

Fix getFieldState(name, formState) updates after reset() (#13741)

Fix dirty state remaining for rows removed from a field array (#13739)

🧹 Refactors

Replace rimraf cleanup with fs.rmSync (#13770)

Reduce bundle size (#13759)

📦 Dependencies

Add optional @types/react peer dependency (#13781)

❤️ Thank You

Thanks to @niketchandivade, @unrevised6419, @Lucasfarg, @dfedoryshchev, @locphamnice, @Abdalluh28, @giaBaoJS, @Mohamedshawky4, @roli-lpci, @soroush5, @zigzagdev and @bluebill1049 for their contributions! 🎉

Changelog

Sourced from react-hook-form's changelog.

[7.89.0] - 2026-09-26

Changed

Add optional @types/react peer dependency

Fixed

validateField calling setCustomValidity on refs that don't implement it under native validation

Form-level validate running a stale function instead of the latest one

Form-level validation leaving stale errors after a successful re-validation

Form-level validation running more than once per traversal

Stale validation results (resolver, built-in, form-level validate) being applied after reset in onChange and handleSubmit

Pending delayError timers for nested paths not being cancelled when a parent validates clean or is reset via resetField

getValues(names, { dirtyFields }) returning every row of a field array instead of only the marked entries

Field array touched state not being re-indexed when touchedFields is not subscribed

useFieldArray emitting touchedFields in form state updates when unnecessary

Stale field array root error not clearing once an array operation satisfies the rule

useFieldArray marking the form dirty when the array default is null

Dirty state lingering for rows removed from a field array

setValue with shouldValidate not revalidating deps

setValue with shouldValidate not triggering validation for a field array root

Validation rules removed from register options at runtime still being applied

useController validating required against the input value instead of the controlled value

isValid not recomputing when the errors prop is emptied

getFieldState(name, formState) with a resolver after reset()

Commits

4722d22 7.89.0
72a4c98 👟 chore: correct form state select option (#13784)
14c7bec 🕵🏻‍♂️ chore: remove duplicate default value field (#13783)
d9cab62 🤖 chore: add optional @types/react peer dependency (#13781)
c12546c 🐞 fix(validateField): skip refs without setCustomValidity under native valida...
5fd9ef6 🐞 fix(validate): run the latest form level validate function (#13777)
7893230 🐞 fix(useFieldArray): improve touched fields handling and add tests (#13776)
ad8abf6 🐴 cancel pending delayError timers for nested paths (#13775)
eb159da 🐞 fix(getValues): extract only the marked entries of a field array (#13773)
4647014 🐞 fix: re-index field array touched state when it is not subscribed (#13772)
Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.4

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 5.0.1 to 5.0.3

Release notes

Sourced from @vitest/coverage-v8's releases.

v5.0.3

   🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11218 (5dbeb)

Don't print an interceptor warning in browser mode - by @sheremet-va in vitest-dev/vitest#11377 (15cc0)

Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11219 (b2458)

Scope cache key generators to projects - by @ecoyoung in vitest-dev/vitest#11281 and vitest-dev/vitest#11301 (92ba7)

browser:

Delay server listen until tests start running - by @sheremet-va in vitest-dev/vitest#11366 (7d8ed)

Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in vitest-dev/vitest#11361 and vitest-dev/vitest#11362 (1c388)

Keep config of browser-consumed environments - by @kasperpeulen and Claude in vitest-dev/vitest#11378 (aafc0)

Ignore page crash while cancelling - by @sheremet-va in vitest-dev/vitest#11386 (7c367)

toMatchScreenshot uses wrong reference on retried tests - by @macarie in vitest-dev/vitest#11393 (c22ab)

cache:

Revalidate imports of cached modules - by @sheremet-va in vitest-dev/vitest#11381 (38f98)

deps:

Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in vitest-dev/vitest#11403 (f6c9a)

expect:

Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in vitest-dev/vitest#11401 (3e794)

jsdom:

Support Blob on jsdom 30.1 - by @sheremet-va in vitest-dev/vitest#11379 (6c49b)

pool:

Preserve unique pool ids when groupOrder is set - by @mtorp in vitest-dev/vitest#11392 (50312)

ui:

Split-pane handle overlapping iframe - by @macarie in vitest-dev/vitest#11221 (f91db)

vitest:

Remove root temp dir on close - by @abhinav-phi in vitest-dev/vitest#11248 (7c711)

vm:

Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11329 and vitest-dev/vitest#11360 (caf28)

Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in vitest-dev/vitest#11395 (346d3)

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

... (truncated)

Commits

33cadea chore: release v5.0.3 (#11409)
a029e76 chore: migrate to oxc (#11367)
428e2e5 chore: release v5.0.2 (#11357)
See full diff in compare view

Updates lint-staged from 17.5.1 to 17.6.0

Release notes

Sourced from lint-staged's releases.

v17.6.0

Minor Changes
#1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*': {
title: 'Fail if PDF files are committed',
task: async (filepaths, { log }) => {
const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
if (pdfFiles.length > 0) {
log('PDF files should not be committed: %s', pdfFiles)
throw new Error('Failed')
}
},
},
})
#1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.
Patch Changes
#1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.
#1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
})
#1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

#1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

Changelog

Sourced from lint-staged's changelog.

17.6.0

Minor Changes
#1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*': {
title: 'Fail if PDF files are committed',
task: async (filepaths, { log }) => {
const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
if (pdfFiles.length > 0) {
log('PDF files should not be committed: %s', pdfFiles)
throw new Error('Failed')
}
},
},
})
#1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.
Patch Changes
#1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.
#1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
})
#1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

#1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

Commits

48f9f4e Merge pull request #1857 from lint-staged/changeset-release/main
16b2e21 chore(changeset): release
195f156 docs: improve changeset
0ba6261 fix: create hidden directory only when required
66ac2de docs: fixes to changesets
80af8d7 Merge pull request #1863 from lint-staged/fix-issues
e433488 fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...
e5019b3 fix: handle trailing newlines when detecting changed files
74efec8 ci: run Cygwin and MSYS2 tests on Node.js 26
655b7dc fix: use TypeScript types instead of JSDoc
Additional commits viewable in compare view

Updates oxfmt from 0.70.0 to 0.71.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.71.0

🚀 Features

e0b1f9f oxfmt: Bump bundled Prettier version to 3.9.9 (#27002) (leaysgur)

342527d oxfmt: Bump bundled Prettier version to 3.9.8 (#26999) (leaysgur)

🐛 Bug Fixes

eeba1db formatter: Skip test-call layout when arguments have comments (#27119) (leaysgur)

1f7b8ad oxfmt: Allow repeated CLI calls in the same process (#27051) (Liang)

7bcb807 formatter_markdown: Keep blank line between HTML and nested list (#27112) (leaysgur)

10b10c5 formatter: Keep comments around = on their side and line (#27041) (leaysgur)

9aad365 formatter: Keep comments deferred before an assignment operator (#26997) (waltu)

8fbddb1 formatter/jsdoc: More alignment with original plugin (#27039) (leaysgur)

50be18e formatter: Keep trailing spaces on normal block comments (#27037) (leaysgur)

56d1880 formatter: Nestle adjacent block comments (#27036) (leaysgur)

3be5d94 formatter: Treat /*** comments as JSDoc (#27035) (leaysgur)

cd45f71 formatter: Keep trailing double spaces on JSDoc lines (#26861) (John Costa)

fd695f4 formatter_markdown: Fix more mismatches found in ecosystem-ci repos (#27003) (leaysgur)

4e77d59 formatter_markdown: Keep a math span after a kept line break from opening a block (#27001) (leaysgur)

584b8b0 formatter_markdown: Keep a shape line after a multi-line inline node or link title (#27000) (leaysgur)

b939645 formatter_markdown: Keep a line break before an inline liquid tag under preserve (#26998) (leaysgur)

Commits

2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
f158bff chore(deps): update npm packages (#26865)
See full diff in compare view

Updates oxlint from 1.85.0 to 1.86.0

Release notes

Sourced from oxlint's releases.

oxlint v1.86.0

🚀 Features

9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)

e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

🐛 Bug Fixes

8306aa4 linter/typescript/no-unnecessary-parameter-property-assignment: Account for parameter property reassignment (#26955) (camc314)

42dfbb5 linter/eslint/one-var: Keep declare when splitting declarations (#27081) (Cheolhee Lee)

2ba7e33 linter/eslint/require-await: Count await using as an await (#27080) (Cheolhee Lee)

611e4ed linter/plugins: Include executing selectors in JS plugin rule timings (#27111) (overlookmotel)

2cac66f react-compiler: Handle recursive function expressions (#26796) (Brennan Butler)

e996e6c react-compiler: Treat zero-argument new Date as impure (#26894) (Boshen)

571cfa3 oxlint: Skip type-aware lint rules in type-check-only mode (#27076) (camc314)

d0b2462 oxlint: Skip undefined children in CFG walker (#27075) (camc314)

5186328 parser: Handle HTML comment values (#22933) (Boshen)

0b630e8 linter/typescript/unified-signatures: Align rule with upstream (#26956) (camc314)

ebb22f1 linter/node/no-exports-assign: Change category from style to suspicious (#26555) (Bartok)

cce28a0 linter/import/no-duplicates: Distinguish import attributes (#26936) (camc314)

feb733b linter/unicorn/prefer-spread: Stop checking string split calls (#26935) (camc314)

929e154 linter/eslint/no-unused-vars: Honor ignore patterns inside array rest bindings (#26923) (camc314)

5bdb9b8 linter/eslint/no-unused-vars: Recognize consumed update expressions (#26782) (camc314)

5c05bef linter/eslint/prefer-const: Ignore embedded assignments (#26920) (camc314)

⚡ Performance

ded4c29 linter/eslint/no-unused-vars: Skip sequence checks when absent (#26921) (camc314)

Changelog

Sourced from oxlint's changelog.

[1.86.0] - 2026-09-28

🚀 Features

9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)

e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)

aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)

36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)

beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)

4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)

285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)

4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)

d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)

5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

9573937 linter/typescript: Validate ban-ts-comment description_format (#25320) (Mikhail Baev)

[1.77.0] - 2026-08-03

🐛 Bug Fixes

... (truncated)

Commits

2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
e05b155 feat(linter): add typescript/no-generated-empty-object-type (#26958)
88a0096 chore(oxlint): require tsgolint 7.0.2003 (#27021)
See full diff in compare view

Updates vitest from 5.0.1 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

   🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11218 (5dbeb)

Don't print an interceptor warning in browser mode - by @sheremet-va in vitest-dev/vitest#11377 (15cc0)

Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11219 (b2458)

Scope cache key generators to projects - by @ecoyoung in vitest-dev/vitest#11281 and vitest-dev/vitest#11301 (92ba7)

browser:

Delay server listen until tests start running - by @sheremet-va in vitest-dev/vitest#11366 (7d8ed)

Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in vitest-dev/vitest#11361 and vitest-dev/vitest#11362 (1c388)

Keep config of browser-consumed environments - by @kasperpeulen and Claude in vitest-dev/vitest#11378 (aafc0)

Ignore page crash while cancelling - by @sheremet-va in vitest-dev/vitest#11386 (7c367)

toMatchScreenshot uses wrong reference on retried tests - by @macarie in vitest-dev/vitest#11393 (c22ab)

cache:

Revalidate imports of cached modules - by @sheremet-va in vitest-dev/vitest#11381 (38f98)

deps:

Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in vitest-dev/vitest#11403 (f6c9a)

expect:

Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in vitest-dev/vitest#11401 (3e794)

jsdom:

Support Blob on jsdom 30.1 - by @sheremet-va in vitest-dev/vitest#11379 (6c49b)

pool:

Preserve unique pool ids when groupOrder is set - by @mtorp in vitest-dev/vitest#11392 (50312)

ui:

Split-pane handle overlapping iframe - by @macarie in vitest-dev/vitest#11221 (f91db)

vitest:

Remove root temp dir on close - by @abhinav-phi in vitest-dev/vitest#11248 (7c711)

vm:

Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11329 and vitest-dev/vitest#11360 (caf28)

Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in vitest-dev/vitest#11395 (346d3)

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vit...
Description has been truncated

Bumps the npm-minor-patch group with 9 updates: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.48.0` | `1.49.0` | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.3.8` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.88.0` | `7.89.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.4` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.1` | `5.0.3` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.5.1` | `17.6.0` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.70.0` | `0.71.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.85.0` | `1.86.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.3` | Updates `lucide-react` from 1.48.0 to 1.49.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react) Updates `next` from 16.3.6 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.3.8) Updates `react-hook-form` from 7.88.0 to 7.89.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.88.0...v7.89.0) Updates `@types/node` from 26.6.2 to 26.6.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/coverage-v8` from 5.0.1 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8) Updates `lint-staged` from 17.5.1 to 17.6.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.5.1...v17.6.0) Updates `oxfmt` from 0.70.0 to 0.71.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.71.0/npm/oxfmt) Updates `oxlint` from 1.85.0 to 1.86.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.86.0/npm/oxlint) Updates `vitest` from 5.0.1 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: react-hook-form dependency-version: 7.89.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@vitest/coverage-v8" dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: lint-staged dependency-version: 17.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: oxfmt dependency-version: 0.71.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: oxlint dependency-version: 1.86.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-05T04:20:20Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: e510809e-617c-4e85-8a1c-bc14c7bdc68c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026

finallyjay approved these changes Oct 8, 2026

View reviewed changes

finallyjay merged commit 5530782 into main Oct 8, 2026
3 checks passed

finallyjay deleted the dependabot/npm_and_yarn/npm-minor-patch-f865034ade branch October 8, 2026 14:55

Navigation Menu

Repository navigation

chore(deps): Bump the npm-minor-patch group with 9 updates - #102

chore(deps): Bump the npm-minor-patch group with 9 updates#102
finallyjay merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-f865034ade

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

coderabbitai Bot commented Oct 5, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

Version 1.49.0

What's Changed

New Contributors

v16.3.8

v16.3.7

Core Changes

Credits

Version 7.89.0

🐞 Fixes

🧹 Refactors

📦 Dependencies

❤️ Thank You

[7.89.0] - 2026-09-26

Changed

Fixed

v5.0.3

🐞 Bug Fixes

View changes on GitHub

v5.0.2

🐞 Bug Fixes

v17.6.0

Minor Changes

Patch Changes

17.6.0

Minor Changes

Patch Changes

oxfmt v0.71.0

🚀 Features

🐛 Bug Fixes

oxlint v1.86.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

[1.86.0] - 2026-09-28

🚀 Features

[1.82.0] - 2026-09-07

🚀 Features

[1.81.0] - 2026-08-31

📚 Documentation

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

🐛 Bug Fixes

[1.78.0] - 2026-08-10

🚀 Features

🐛 Bug Fixes

[1.77.0] - 2026-08-03

🐛 Bug Fixes

v5.0.3

🐞 Bug Fixes

View changes on GitHub

v5.0.2

🐞 Bug Fixes

Uh oh!

coderabbitai Bot commented Oct 5, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant