chore(deps): bump the production-dependencies group across 1 directory with 17 updates

[dependabot]

Bumps the production-dependencies group with 17 updates in the / directory:

Package	From	To
@clack/prompts	0.10.0	0.10.1
@floating-ui/dom	1.6.13	1.7.0
@myriaddreamin/rehype-typst	0.5.4	0.6.0
flexsearch	0.8.147	0.8.158
pixi.js	8.9.1	8.9.2
preact	10.26.4	10.26.5
pretty-bytes	6.1.1	7.0.0
rehype-citation	2.3.0	2.3.1
remark-rehype	11.1.1	11.1.2
sharp	0.33.5	0.34.1
shiki	3.2.1	3.3.0
ws	8.18.1	8.18.2
@types/ws	8.18.0	8.18.1
@types/node	22.13.14	22.15.3
esbuild	0.25.2	0.25.3
tsx	4.19.3	4.19.4
typescript	5.8.2	5.8.3

Updates @clack/prompts from 0.10.0 to 0.10.1

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​0.10.1

Patch Changes

• 11a5dc1: Fixes multiselect only shows hints on the first item in the options list. Now correctly shows hints for all selected options with hint property.
• 30aa7ed: Adds a new selectableGroups boolean to the group multi-select prompt. Using selectableGroups: false will disable the ability to select a top-level group, but still allow every child to be selected individually.
• Updated dependencies [30aa7ed]
• Updated dependencies [5dfce8a]
• Updated dependencies [f574297]
  • @​clack/core@​0.4.2

Changelog

Sourced from @​clack/prompts's changelog.

0.10.1

Patch Changes

• 11a5dc1: Fixes multiselect only shows hints on the first item in the options list. Now correctly shows hints for all selected options with hint property.
• 30aa7ed: Adds a new selectableGroups boolean to the group multi-select prompt. Using selectableGroups: false will disable the ability to select a top-level group, but still allow every child to be selected individually.
• Updated dependencies [30aa7ed]
• Updated dependencies [5dfce8a]
• Updated dependencies [f574297]
  • @​clack/core@​0.4.2

Commits

• 5de191f [ci] release (#262)
• 5dfce8a fix: use placeholder as value when input is empty (#263)
• 11a5dc1 fix: add hints for selected options in multiselect prompts & tests (#279)
• 30aa7ed feat: add selectableGroups option to group multi-select (#255)
• 3c200dd docs(prompts): fix logs image display (#243)
• 5529c89 chore: update repository url (#239)
• d6d9ce7 [ci] format
• See full diff in compare view

Updates @floating-ui/dom from 1.6.13 to 1.7.0

Release notes

Sourced from @​floating-ui/dom's releases.

@​floating-ui/dom@​1.7.0

Minor Changes

• feat(flip): add "alignment" string value for crossAxis option. This value determines if cross axis overflow checking is restricted to the alignment of the placement only. This prevents fallbackPlacements/fallbackAxisSideDirection from too eagerly changing to the perpendicular side (thereby preferring shift() if overflow is detected along the cross axis, even if shift() is placed after flip() in the middleware array).

Patch Changes

• fix: correct position when document scrollbar is on left side with fixed strategy
• Update dependencies: @floating-ui/core@1.7.0

Changelog

Sourced from @​floating-ui/dom's changelog.

1.7.0

Minor Changes

• feat(flip): add "alignment" string value for crossAxis option. This value determines if cross axis overflow checking is restricted to the alignment of the placement only. This prevents fallbackPlacements/fallbackAxisSideDirection from too eagerly changing to the perpendicular side (thereby preferring shift() if overflow is detected along the cross axis, even if shift() is placed after flip() in the middleware array).

Patch Changes

• fix: correct position when document scrollbar is on left side with fixed strategy
• Update dependencies: @floating-ui/core@1.7.0

Commits

• fdcb0a9 chore: version packages (#3310)
• 1150bcf chore: make dom depend on core for minors
• c81f259 feat(flip): "alignment" string value for crossAxis option (#3308)
• 6b43484 fix: correct position when document scrollbar is on left side with fixed stra...
• 86b3154 test: run React tests in Vitest browser mode (#3258)
• 7a80174 chore: lint unused vars
• c09c59d chore: update Playwright (#3214)
• See full diff in compare view

Updates @myriaddreamin/rehype-typst from 0.5.4 to 0.6.0

Updates flexsearch from 0.8.147 to 0.8.158

Commits

• See full diff in compare view

Updates pixi.js from 8.9.1 to 8.9.2

Release notes

Sourced from pixi.js's releases.

v8.9.2

💾 Download

Development Build:

• https://pixijs.download/v8.9.2/pixi.js
• https://pixijs.download/v8.9.2/pixi.mjs

Production Build:

• https://pixijs.download/v8.9.2/pixi.min.js
• https://pixijs.download/v8.9.2/pixi.min.mjs

Documentation:

• https://pixijs.download/v8.9.2/docs/index.html

Changed

pixijs/pixijs@8.9.1...v8.9.2

🐛 Fixed

• fix: render layer detachment when destroying. by @​GoodBoyDigital in pixijs/pixijs#11384
• fix: documentation regarding anchor values in spritesheet by @​SanjoSolutions in pixijs/pixijs#11363
• fix: gradient issue with non 0,0 shapes in graphics by @​GoodBoyDigital in pixijs/pixijs#11383

New Contributors

• @​SanjoSolutions made their first contribution in pixijs/pixijs#11363

Commits

• 2c0f2e5 v8.9.2
• 6b5a573 fix: gradient issue with non 0,0 shapes in graphics (#11383)
• 03c5763 Fixes documentation regarding anchor values in spritesheet (#11363)
• 9e81903 fix: render layer detachment when destroying. (#11384)
• See full diff in compare view

Updates preact from 10.26.4 to 10.26.5

Release notes

Sourced from preact's releases.

10.26.5

Types

• Return 'AllHTMLAttributes' to manually including all attrs (#4728, thanks @​rschristian)
• Correct hydrateRoot return type (#4735, thanks @​plesiecki)
• Update CommandEventHandler type to use EventHandler (#4740, thanks @​robertknight)

Fixes

• Avoid cloning reused nodes (#4733, thanks @​JoviDeCroock)
• Bring back strict-equality bailout for children even w/ context updates (#4724, thanks @​rschristian)
• Effect in memoed boundary should be re-executed when the lazy boundary resolves (#4711, thanks @​CaptainWang98)

Maintenance

• Add case for context w/ strictly-equal children (#4725, thanks @​rschristian)
• Golf down unnecessary strict equality checks (#4723, thanks @​rschristian)

Commits

• f6bbed5 10.26.5 (#4734)
• 0d4f33a Update CommandEventHandler type to use EventHandler (#4740)
• 80ca668 correct hydrateRoot return type (#4735)
• 29b0021 fix: effect in memoed boundary should be re-executed when the lazy boundary r...
• f35272e revert: Return 'AllHTMLAttributes' to manually including all attrs (#4728)
• adb1414 Avoid cloning reused nodes (#4733)
• 64242f4 test: Add test case checking previous behavior (#4725)
• 625aacf revert: Bring back strict-equality bailout for children even w/ context updat...
• a69aada refactor: Golf down unnecessary strict equality checks (#4723)
• See full diff in compare view

Updates pretty-bytes from 6.1.1 to 7.0.0

Release notes

Sourced from pretty-bytes's releases.

v7.0.0

Breaking

• Require Node.js 20 13d3727

Improvements

• Add support for BigInt (#85) 386b35a

---

sindresorhus/pretty-bytes@v6.1.1...v7.0.0

Commits

• 2658a8e 7.0.0
• 13d3727 Require Node.js 20
• 386b35a Add support for BigInt (#85)
• c4252aa Meta tweaks
• See full diff in compare view

Updates rehype-citation from 2.3.0 to 2.3.1

Commits

• c5238b2 2.3.1
• e40b640 Merge pull request #58 from timlrx/fix/remote-url-path
• 732c8b3 fix: remove local path from url construction
• See full diff in compare view

Updates remark-rehype from 11.1.1 to 11.1.2

Release notes

Sourced from remark-rehype's releases.

11.1.2

Types

• eefd5f1 Fix types for bridge mode with missing overload

Full Changelog: remarkjs/remark-rehype@11.1.1...11.1.2

Commits

• b5a2e5b 11.1.2
• 3866b5f Refactor docs
• eefd5f1 Fix types for bridge mode with missing overload
• c76ab4b Refactor some code
• d4f2303 Refactor package.json
• dc2265f Refactor .gitignore
• c94b14b Refactor .editorconfig
• 1be279e Update actions
• ea811e9 Update dev-dependencies
• See full diff in compare view

Updates sharp from 0.33.5 to 0.34.1

Commits

• 5cae1ab Release v0.34.1
• 66ffc48 Changelog entry for #4362
• 3c7dbb8 fix(types): update autoOrient type to include undefined (#4362)
• a9e1913 Prevent glib assertions and checks #4351
• 7323dbe Docs: update path to logo
• d7a771c Docs: update path to logo
• 7d0585f Docs: remove outdated redirects/rewrites
• ddc1eb8 Release v0.34.0 (part 2 - see c26e67c)
• c26e67c Release v0.34.0
• a00ee26 Prevent glib assertions and checks #4351
• Additional commits viewable in compare view

Updates shiki from 3.2.1 to 3.3.0

Release notes

Sourced from shiki's releases.

v3.3.0

   🚀 Features

• Update deps  -  by @​antfu (ac6be)
• core: Add option to merge consecutive tokens with same style  -  by @​yvbopeng and @​antfu in shikijs/shiki#972 and shikijs/shiki#991 (c806a)

   🐞 Bug Fixes

• colorized-brackets: Handle correctly with dual themes  -  by @​oatmealproblem and Anthony Fu in shikijs/shiki#997 (71d1b)
• transformers: Whitespace rendering transformer for inline structure  -  by @​nvlang and Anthony Fu in shikijs/shiki#995 (93251)

    View changes on GitHub

v3.2.2

   🚀 Features

• Add handling for FontStyle.Strikethrough  -  by @​dhruvkb in shikijs/shiki#976 (f14f2)

    View changes on GitHub

Commits

• 3a23e9d chore: release v3.3.0
• bf0174c build: use unbuild to build main package
• e32c28c chore: release v3.2.2
• See full diff in compare view

Updates ws from 8.18.1 to 8.18.2

Release notes

Sourced from ws's releases.

8.18.2

Bug fixes

Fixed an issue that, during message decompression when the maximum size was exceeded, led to the emission of an inaccurate error and closure of the connection with an improper close code (#2285).

Commits

• 0eb8535 [dist] 8.18.2
• 4f20aed [fix] Handle oversized messages with designated error (#2285)
• aa998e3 [pkg] Update globals to version 16.0.0
• cf25954 [minor] Fix nit in error message
• See full diff in compare view

Updates @types/ws from 8.18.0 to 8.18.1

Commits

• See full diff in compare view

Updates @types/node from 22.13.14 to 22.15.3

Commits

• See full diff in compare view

Updates @types/ws from 8.18.0 to 8.18.1

Commits

• See full diff in compare view

Updates esbuild from 0.25.2 to 0.25.3

Release notes

Sourced from esbuild's releases.

v0.25.3

• Fix lowered async arrow functions before super() (#4141, #4142)

  This change makes it possible to call an async arrow function in a constructor before calling super() when targeting environments without async support, as long as the function body doesn't reference this. Here's an example (notice the change from this to null):

  // Original code
  class Foo extends Object {
    constructor() {
      (async () => await foo())()
      super()
    }
  }
  // Old output (with --target=es2016)
  class Foo extends Object {
  constructor() {
  (() => __async(this, null, function* () {
  return yield foo();
  }))();
  super();
  }
  }
  // New output (with --target=es2016)
  class Foo extends Object {
  constructor() {
  (() => __async(null, null, function* () {
  return yield foo();
  }))();
  super();
  }
  }

  Some background: Arrow functions with the async keyword are transformed into generator functions for older language targets such as --target=es2016. Since arrow functions capture this, the generated code forwards this into the body of the generator function. However, JavaScript class syntax forbids using this in a constructor before calling super(), and this forwarding was problematic since previously happened even when the function body doesn't use this. Starting with this release, esbuild will now only forward this if it's used within the function body.

  This fix was contributed by @​magic-akari.

• Fix memory leak with --watch=true (#4131, #4132)

  This release fixes a memory leak with esbuild when --watch=true is used instead of --watch. Previously using --watch=true caused esbuild to continue to use more and more memory for every rebuild, but --watch=true should now behave like --watch and not leak memory.

  This bug happened because esbuild disables the garbage collector when it's not run as a long-lived process for extra speed, but esbuild's checks for which arguments cause esbuild to be a long-lived process weren't updated for the new --watch=true style of boolean command-line flags. This has been an issue since this boolean flag syntax was added in version 0.14.24 in 2022. These checks are unfortunately separate from the regular argument parser because of how esbuild's internals are organized (the command-line interface is exposed as a separate Go API so you can build your own custom esbuild CLI).

  This fix was contributed by @​mxschmitt.

• More concise output for repeated legal comments (#4139)

  Some libraries have many files and also use the same legal comment text in all files. Previously esbuild would copy each legal comment to the output file. Starting with this release, legal comments duplicated across separate files will now be grouped in the output file by unique comment content.

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.25.3

• Fix lowered async arrow functions before super() (#4141, #4142)

  This change makes it possible to call an async arrow function in a constructor before calling super() when targeting environments without async support, as long as the function body doesn't reference this. Here's an example (notice the change from this to null):

  // Original code
  class Foo extends Object {
    constructor() {
      (async () => await foo())()
      super()
    }
  }
  // Old output (with --target=es2016)
  class Foo extends Object {
  constructor() {
  (() => __async(this, null, function* () {
  return yield foo();
  }))();
  super();
  }
  }
  // New output (with --target=es2016)
  class Foo extends Object {
  constructor() {
  (() => __async(null, null, function* () {
  return yield foo();
  }))();
  super();
  }
  }

  Some background: Arrow functions with the async keyword are transformed into generator functions for older language targets such as --target=es2016. Since arrow functions capture this, the generated code forwards this into the body of the generator function. However, JavaScript class syntax forbids using this in a constructor before calling super(), and this forwarding was problematic since previously happened even when the function body doesn't use this. Starting with this release, esbuild will now only forward this if it's used within the function body.

  This fix was contributed by @​magic-akari.

• Fix memory leak with --watch=true (#4131, #4132)

  This release fixes a memory leak with esbuild when --watch=true is used instead of --watch. Previously using --watch=true caused esbuild to continue to use more and more memory for every rebuild, but --watch=true should now behave like --watch and not leak memory.

  This bug happened because esbuild disables the garbage collector when it's not run as a long-lived process for extra speed, but esbuild's checks for which arguments cause esbuild to be a long-lived process weren't updated for the new --watch=true style of boolean command-line flags. This has been an issue since this boolean flag syntax was added in version 0.14.24 in 2022. These checks are unfortunately separate from the regular argument parser because of how esbuild's internals are organized (the command-line interface is exposed as a separate Go API so you can build your own custom esbuild CLI).

  This fix was contributed by @​mxschmitt.

• More concise output for repeated legal comments (#4139)

... (truncated)

Commits

• 677910b publish 0.25.3 to npm
• a41040e fix #4110: support custom non-IP host values
• dfe0e1c fix #4114: add a limit to css nesting expansion
• a54916b fix #4139: deduplicate repeated legal comments
• dc60e60 run make update-compat-table
• d917038 fix #4144: node path resolution edge case
• 7ed1684 fix #4141: Avoid redundant this access during async function lowering (#4142)
• edc3a23 docs(dev): update alias command for make test-go (#4113)
• 1ee8b67 workaround process.exit() not exiting in node
• 5c56e07 changelog note with credit for the fix
• Additional commits viewable in compare view

Updates tsx from 4.19.3 to 4.19.4

Release notes

Sourced from tsx's releases.

v4.19.4

4.19.4 (2025-04-29)

Bug Fixes

• support for Node's --jitless flag (#716) (3c34caa)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 3c34caa fix: support for Node's --jitless flag (#716)
• 3ddd1c4 chore: upgrade pnpm
• 26ef600 chore(deps): update dependency node to v20.18.3 (#677)
• 1982c76 docs: sevalla sponsorship
• See full diff in compare view

Updates typescript from 5.8.2 to 5.8.3

Release notes

Sourced from typescript's releases.

TypeScript 5.8.3

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.8.0 (Beta).
• fixed issues query for Typescript 5.8.1 (RC).
• fixed issues query for Typescript 5.8.2 (Stable).
• fixed issues query for Typescript 5.8.3 (Stable).

Downloads are available on:

• npm

Commits

• 83dc0bb Convert release publishing inputs into parameters (#61523)
• ba663f6 Exclude completions of binding pattern variable initializers (#52723)
• 7205eda Bump github/codeql-action from 3.28.12 to 3.28.13 in the github-actions group...
• 89c572c Fixed a symbol display crash on expando members write locations (#55478)
• 7b26d2e Fix incorrect name in new release pipeline (#61514)
• c7a559e Add new release publisher yaml (#61491)
• 29e6d66 Fix lib.includes('dom') check in containerSeemsToBeEmptyDomElement (#61481)
• 19b7772 Bump the github-actions group with 4 updates (#61474)
• 4dc677b Fix errors on type assertions in erasableSyntaxOnly (#61452)
• ee3dd72 fix(60908): Unexpected "'Type' is declared but its value is never read." erro...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions