chore(deps): bump the npm group with 10 updates

[dependabot]

Bumps the npm group with 10 updates:

Package	From	To
@codemirror/commands	6.11.0	6.11.1
@codemirror/state	6.7.4	6.7.5
@codemirror/view	6.43.11	6.43.12
@handsontable/react-wrapper	18.1.0	18.1.1
@tauri-apps/plugin-updater	2.11.0	2.12.0
handsontable	18.1.0	18.1.1
motion	13.2.0	13.4.0
@tauri-apps/cli	2.11.4	2.11.5
@types/node	26.5.1	26.6.2
jsdom	30.0.1	30.1.0

Updates @codemirror/commands from 6.11.0 to 6.11.1

Commits

• See full diff in compare view

Updates @codemirror/state from 6.7.4 to 6.7.5

Commits

• See full diff in compare view

Updates @codemirror/view from 6.43.11 to 6.43.12

Commits

• See full diff in compare view

Updates @handsontable/react-wrapper from 18.1.0 to 18.1.1

Release notes

Sourced from @​handsontable/react-wrapper's releases.

18.1.1

Fixed

• Fixed copying, cutting, and pasting doing nothing in a grid embedded in a Salesforce Lightning Web Component. #13388
• Fixed a filters plugin crash thrown when a cell in a filtered column was edited, or the data was replaced with a filter active, after updateSettings() was called with the filters option (as the React and Angular wrappers do on every update). #13480

18.1.1-rc

Fixed

• Fixed copying, cutting, and pasting doing nothing in a grid embedded in a Salesforce Lightning Web Component. #13388
• Fixed a filters plugin crash thrown when a cell in a filtered column was edited, or the data was replaced with a filter active, after updateSettings() was called with the filters option (as the React and Angular wrappers do on every update). #13480

Changelog

Sourced from @​handsontable/react-wrapper's changelog.

[18.1.1] - 2026-09-15

Fixed

• Fixed copying, cutting, and pasting doing nothing in a grid embedded in a Salesforce Lightning Web Component. #13388
• Fixed a filters plugin crash thrown when a cell in a filtered column was edited, or the data was replaced with a filter active, after updateSettings() was called with the filters option (as the React and Angular wrappers do on every update). #13480

Commits

• b2a6b74 Merge remote-tracking branch 'origin/release/18.1.1'
• 57f0c9e 18.1.1
• a77e04b 18.1.1-rc2
• 19489aa Add the 18.1.1 release notes to the changelog-18 page (#13494)
• a418f85 18.1.1-rc1
• fb7d976 Seed 18.1.1 RC changelog heading for the release pipeline
• b92bd3d DEV-2889: Fix Filters crash on data replace with an active filter (#13480)
• 520dc24 DEV-2795: Fix copy and paste in a Salesforce Lightning Web Component (#13389)
• See full diff in compare view

Updates @tauri-apps/plugin-updater from 2.11.0 to 2.12.0

Release notes

Sourced from @​tauri-apps/plugin-updater's releases.

updater-js v2.12.0

[2.12.0]

• 1308bfa3 Breaking change: the allowDowngrades option was removed from the check command and is now read from the plugin configuration instead.

  Previously any code running in the webview could pass allowDowngrades: true to plugin:updater|check and relax the version check from "the update must be newer" to "the update must be different", overriding the comparator the application had configured on the Rust side. The flag is now an application-level setting:

  {
    "plugins": {
      "updater": {
        "allowDowngrades": true
      }
    }
  }

  It defaults to false, and is ignored when the application provides its own Builder::default_version_comparator, which continues to take precedence.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.12.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 3.2kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 3.2kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.12.0
npm notice filename: tauri-apps-plugin-updater-2.12.0.tgz
npm notice package size: 3.9 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: f3b47d4bae20f5499efe043f4debb7c85f88b9b3
npm notice integrity: sha512-74+g7rSIHXQje[...]osT+6nphSa8Og==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2893838281
</tr></table> 

... (truncated)

Commits

• 5baf71a fix: pnpm audit
• 2393188 publish new versions (#3591)
• 1198a52 Merge commit from fork
• 1308bfa Merge commit from fork
• 690dcfd Merge commit from fork
• 67cd25a fix(single-instance): let the first instance come to front on Windows (#3592)
• 2df3d93 refactor(log): log webview location after double colon (#3574)
• 4b5c954 chore(deps): update dependency typescript-eslint to v8.70.0 (#3536)
• 3c5d267 publish new versions (#3567)
• c050e07 fix(store): apply_pending_auto_save can deadlock (#3572)
• Additional commits viewable in compare view

Updates handsontable from 18.1.0 to 18.1.1

Release notes

Sourced from handsontable's releases.

18.1.1

Fixed

• Fixed copying, cutting, and pasting doing nothing in a grid embedded in a Salesforce Lightning Web Component. #13388
• Fixed a filters plugin crash thrown when a cell in a filtered column was edited, or the data was replaced with a filter active, after updateSettings() was called with the filters option (as the React and Angular wrappers do on every update). #13480

18.1.1-rc

Fixed

• Fixed copying, cutting, and pasting doing nothing in a grid embedded in a Salesforce Lightning Web Component. #13388
• Fixed a filters plugin crash thrown when a cell in a filtered column was edited, or the data was replaced with a filter active, after updateSettings() was called with the filters option (as the React and Angular wrappers do on every update). #13480

Changelog

Sourced from handsontable's changelog.

[18.1.1] - 2026-09-15

Fixed

• Fixed copying, cutting, and pasting doing nothing in a grid embedded in a Salesforce Lightning Web Component. #13388
• Fixed a filters plugin crash thrown when a cell in a filtered column was edited, or the data was replaced with a filter active, after updateSettings() was called with the filters option (as the React and Angular wrappers do on every update). #13480

Commits

• b2a6b74 Merge remote-tracking branch 'origin/release/18.1.1'
• 57f0c9e 18.1.1
• a77e04b 18.1.1-rc2
• 19489aa Add the 18.1.1 release notes to the changelog-18 page (#13494)
• a418f85 18.1.1-rc1
• fb7d976 Seed 18.1.1 RC changelog heading for the release pipeline
• b92bd3d DEV-2889: Fix Filters crash on data replace with an active filter (#13480)
• 520dc24 DEV-2795: Fix copy and paste in a Salesforce Lightning Web Component (#13389)
• See full diff in compare view

Updates motion from 13.2.0 to 13.4.0

Changelog

Sourced from motion's changelog.

[13.4.0] 2026-09-14

Added

• AnimateView: View transitions for React 19.3, built on React's ViewTransition.

[13.3.0] 2026-09-14

Added

• Hooks for Motion Editor.

Changed

• springValue/useSpring: 80% reduction in time when retargeting.
• animate: 10% smaller.
• animate: 20% reduction in startup time.
• animate: 10% reduction in per-frame JS.
• frame: Frame scheduling 10% faster.

Fixed

• animate: Fixed path drawing calculations.

Commits

• a6ea2f9 v13.4.0
• d6ef844 Changelog
• 75c4dcf Merge pull request #3824 from motiondivision/codex/react-animate-view
• a5a7856 Co-locate AnimateView layer animation in framer-motion
• 5c8bc09 Keep AnimateView group morph with custom values; gate view tests in Playwright
• 12018e8 Add AnimateView via motion/react-animate-view
• 939c267 Updating changelog
• 16cf742 Latest
• 49f1fe1 v13.3.0
• f777c92 Updating changelog
• Additional commits viewable in compare view

Updates @tauri-apps/cli from 2.11.4 to 2.11.5

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.11.5

[2.11.5]

Security fixes

• 5a87bab12 Record the app version in the trusted comment of updater signatures, so a signed artifact is bound to the version it was released as.

  An update endpoint response is not signed, and the signature only covers the downloaded artifact, so the announced version on its own does not prove which release the url and signature point at. minisign covers the trusted comment with its global signature, which lets the updater plugin compare the two and reject a response that pairs a version number with a different release. Enable requireSignedVersion in the updater plugin configuration to enforce this.

  tauri build fills the version in automatically, and tauri plugin add updater now enables requireSignedVersion for the project it is adding the plugin to. tauri signer sign gains an --app-version flag for signing updater artifacts by hand, and warns when it is omitted.

Dependencies

• Upgraded to tauri-cli@2.11.5

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• 7cd7136 apply version updates (#15632)
• 44594d6 Revert "fix(deps): pin time to <0.3.52" (#15631)
• ca90b46 apply version updates (#15621)
• ba865f2 fix(windows): dpi getter leaks HDC handles (#15614)
• 0299da0 fix(deps): pin time to <0.3.52 (#15616)
• Additional commits viewable in compare view

Updates @types/node from 26.5.1 to 26.6.2

Commits

• See full diff in compare view

Updates jsdom from 30.0.1 to 30.1.0

Release notes

Sourced from jsdom's releases.

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

• Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
• Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
• Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
• Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
• Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
• Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
• Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
• Changed window.close() to preserve access to the document and its DOM through retained references.
• Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
• Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
• Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
• Fixed :focus matching in shadow trees. (@​asamuzaK)
• Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
• Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
• Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
• Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
• Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
• Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
• Fixed successful cached resource loads being treated as aborted.
• Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
• Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
• Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
• Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
• Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
• Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
• Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)
• Fixed serialization of min() and max() containing nested calc(), which regressed in v30.0.0. (@​asamuzaK)
• Fixed CSS values mixing lengths or percentages with math functions, such as 'grid-template-columns' values containing both 100px and calc(). (@​rome-xi)
• Fixed parsing of 'background' and 'border' shorthands with adjacent components, such as url(a.png)no-repeat, including a crash when parsing inline styles. Also fixed handling of invalid shorthand assignments and escaped or unusual characters in CSS declarations. (@​asamuzaK)
• Fixed parsing of unitless zero values in 'flex' shorthands, such as 35 1 0, and rejection of negative 'flex-basis' lengths and percentages. (@​asamuzaK)
• Fixed shorthand style assignments producing extra mutation records and custom element callbacks for intermediate values. (@​scttcper)
• Fixed Range and Selection handling of CDATA sections, including boundary offsets and range cloning, extraction, deletion, insertion, and stringification. (@​scttcper)
• Fixed text.normalize() incorrectly removing the text node or merging its siblings. (@​scttcper)
• Fixed cloning and importing CDATA sections and processing instructions whose contents have been modified, and serialization of CDATA sections adopted into HTML documents.
• Fixed stale named-property collections on window, and incorrect named access from empty or namespaced id="" and name="" values. (@​scttcper)
• Fixed elements in documents created with DOMParser or document.implementation.createHTMLDocument() appearing as named properties on window and being retained in memory. (@​Iaotle)
• Fixed memory leaks from mutation observers retaining observed nodes, abort signals retaining removed event listeners, and storage event tracking retaining closed windows. (@​scttcper)
• Fixed storage events being sent to windows created after the storage change, and ensured surviving recipients still receive events when the source document is destroyed.
• Fixed attribute lookups after namespace prefix changes, and namespaced attributes incorrectly affecting ID lookups and element behavior. (@​scttcper)
• Fixed input.list in detached element trees. (@​scttcper)
• Fixed attr.ownerDocument after setting an attribute node on an element in another document or adopting its element. (@​Kjubikstronk)

... (truncated)

Commits

• 556b11f 30.1.0
• 9547fbf Tie queued tasks to document lifetime
• 3be65d9 Disable unused HTML reports in the WPT runner
• d555e61 Replace SymbolTree with a DOM-specific tree
• f28983d Clone CDATA and processing instructions without revalidation
• 33e4fa7 Invalidate computed styles after CSS imports load
• ec6fd5b Select storage event recipients at mutation time
• bcc037a Honor script type and legacy event attributes
• faa5c4f Preserve currentScript across nested scripts
• 8d7a37f Avoid quadratic HTML collection iteration
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
ebb	Ready	Preview	Sep 24, 2026 6:07am UTC

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.