ReviewOS

also looking at this

stacks/stx

chore(deps): update all non-major dependencies

#1657
Merged github-actions[bot] wants to merge buddy-bot/update-non-major-updates into main
7 files +39 -33
11 days ago

This PR contains the following updates:

Package Updates Summary

TypeCount
📦 NPM Packages18
Total18

📦 npm Dependencies

npm

18 packages will be updated

PackageChangeAgeAdoptionPassingConfidence
@capacitor/android (source)8.2.0 -> 8.3.0ageadoptionpassingconfidence
@capacitor/app (source)8.0.1 -> 8.1.0ageadoptionpassingconfidence
@capacitor/cli (source)8.2.0 -> 8.3.0ageadoptionpassingconfidence
@capacitor/core (source)8.2.0 -> 8.3.0ageadoptionpassingconfidence
@capacitor/ios (source)8.2.0 -> 8.3.0ageadoptionpassingconfidence
isomorphic-dompurify (source)3.5.1 -> 3.7.1ageadoptionpassingconfidence
ws (source)8.19.0 -> 8.20.0ageadoptionpassingconfidence
@capacitor/haptics (source)8.0.1 -> 8.0.2ageadoptionpassingconfidence
@capacitor/keyboard (source)8.0.1 -> 8.0.2ageadoptionpassingconfidence
@capacitor/status-bar (source)8.0.1 -> 8.0.2ageadoptionpassingconfidence
@cwcss/crosswind (source)0.1.3 -> 0.1.6ageadoptionpassingconfidence
@types/bun (source)1.3.9 -> 1.3.11ageadoptionpassingconfidence
bun (source)1.3.10 -> 1.3.11ageadoptionpassingconfidence
handlebars (source)4.7.8 -> 4.7.9ageadoptionpassingconfidence
happy-dom (source)20.8.4 -> 20.8.9ageadoptionpassingconfidence
liquidjs (source)10.25.0 -> 10.25.2ageadoptionpassingconfidence
marked (source)17.0.4 -> 17.0.5ageadoptionpassingconfidence
ts-broadcasting0.0.3 -> 0.0.4ageadoptionpassingconfidence

Release Notes

ionic-team/capacitor (@capacitor/android)

8.2.0 -> 8.3.0

8.3.0

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

  • android: correctly parsing server.url when they include paths (#8391) (a9f2181)
  • cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
  • http: handle URL objects on fetch (#8386) (003099a)
  • ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
  • SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor-plugins (@capacitor/app)

8.0.1 -> 8.1.0

@capacitor/haptics@7.0.5

Compare Source

7.0.5 (2026-03-27)

Note: Version bump only for package capacitor/haptics

Released by jcesarmobile on 3/27/2026

@capacitor/status-bar@8.0.2

Compare Source

8.0.2 (2026-03-25)

Bug Fixes

Released by jcesarmobile on 3/25/2026

@capacitor/status-bar@7.0.6

Compare Source

7.0.6 (2026-03-25)

Bug Fixes

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor (@capacitor/cli)

8.2.0 -> 8.3.0

8.3.0

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

  • android: correctly parsing server.url when they include paths (#8391) (a9f2181)
  • cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
  • http: handle URL objects on fetch (#8386) (003099a)
  • ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
  • SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor (@capacitor/core)

8.2.0 -> 8.3.0

8.3.0

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

  • android: correctly parsing server.url when they include paths (#8391) (a9f2181)
  • cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
  • http: handle URL objects on fetch (#8386) (003099a)
  • ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
  • SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

ionic-team/capacitor (@capacitor/ios)

8.2.0 -> 8.3.0

8.3.0

Compare Source

8.3.0 (2026-03-25)

Bug Fixes

  • android: correctly parsing server.url when they include paths (#8391) (a9f2181)
  • cli: inline CSS sourcemaps in addition to JS sourcemaps (#8377) (69476ab)
  • http: handle URL objects on fetch (#8386) (003099a)
  • ios: make getArray accesible on Objective-C plugins (#8392) (afb80f2)
  • SystemBars: use native safe area insets on Android (#8384) ([...

[View full release notes]

Released by jcesarmobile on 3/25/2026

kkomelin/isomorphic-dompurify (isomorphic-dompurify)

3.5.1 -> 3.7.1

3.7.1

Compare Source

Bug Fix

  • Fixed missing browser type declarations — browser.d.ts and browser.d.mts were not included in the 3.7.0 published package due to a race condition in the build process. This caused TS7016: Could not find a declaration file for module 'isomorphic-dompurify' errors in tsgo and TypeScript 6 when resolving through the default (browser) exports condition. (#411)

Thanks to asterikx and ElPrudi for their help with the issue.

Released by kkomelin on 3/24/2026

3.7.0

Compare Source

TypeScript 6 compatibility fixes:

  • Add explicit type annotation for sanitize to satisfy TS6
  • Silence baseUrl deprecation warning from tsup dts build in TS6

Dependency updates:

  • bump typescript from 5.9.3 to 6.0.2
  • bump vitest from 4.1.0 to 4.1.1

Released by kkomelin on 3/24/2026

3.6.0

Compare Source

Dependency updates:

  • bump jsdom from 29.0.0 to 29.0.1
  • bump types/jsdom from 28.0.0 to 28.0.1
  • bump biomejs/biome from 2.4.7 to 2.4.8

Released by kkomelin on 3/21/2026

websockets/ws (ws)

8.19.0 -> 8.20.0

8.20.0

Compare Source

Features

  • Added exports for the PerMessageDeflate class and utilities for the Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1).

Released by lpinca on 3/21/2026

8.9.0

Compare Source

Features

  • Added the ability to connect to Windows named pipes (#2079).

Released by lpinca on 9/22/2022

8.8.1

Compare Source

Bug fixes

  • The Authorization and Cookie headers are no longer sent if the original request for the opening handshake is sent to an IPC server and the client is redirected to another IPC server (bc8bd34).

Released by lpinca on 7/15/2022

ionic-team/capacitor-haptics (@capacitor/haptics)

8.0.1 -> 8.0.2

v8.0.2

Compare Source

8.0.2 (2026-03-27)

Documentation updates

  • fix Capitalization on default NotificationType (#23) (797ccbe)

Released by OS-pedrogustavobilro on 3/27/2026

ionic-team/capacitor-keyboard (@capacitor/keyboard)

8.0.1 -> 8.0.2

v8.0.2

Compare Source

8.0.2 (2026-03-25)

Bug Fixes

  • android: calling ViewCompat.onApplyWindowInsets (#59) (cc74b2d)

This release is also available on:

  • [npm package (latest dist-tag)](https://www.npmjs.com/package/@capacitor/keyboard/v/8.0.2)

Released by capacitor-bot on 3/25/2026

ionic-team/capacitor-plugins (@capacitor/status-bar)

8.0.1 -> 8.0.2

@capacitor/haptics@7.0.5

Compare Source

7.0.5 (2026-03-27)

Note: Version bump only for package capacitor/haptics

Released by jcesarmobile on 3/27/2026

@capacitor/status-bar@8.0.2

Compare Source

8.0.2 (2026-03-25)

Bug Fixes

Released by jcesarmobile on 3/25/2026

@capacitor/status-bar@7.0.6

Compare Source

7.0.6 (2026-03-25)

Bug Fixes

Released by jcesarmobile on 3/25/2026

cwcss/crosswind (@cwcss/crosswind)

0.1.3 -> 0.1.6

v0.1.6

Compare Source

Released by github-actions[bot] on 2/6/2026

v0.1.5

Compare Source

Full Changelog: https://github.com/cwcss/crosswind/compare/v0.1.4...v0.1.5

Released by github-actions[bot] on 1/30/2026

v0.1.4

Compare Source

What's Changed

  • feat: new release script using pantry by glennmichael123 in cwcss/crosswind#14

New Contributors

Full Changelog: https://github.com/cwcss/crosswind/compare/v0.1.3...v0.1.4

Released by github-actions[bot] on 1/30/2026

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.9 -> 1.3.11

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

oven-sh/bun (bun)

1.3.10 -> 1.3.11

bun-v1.3.11

Compare Source

To install Bun v1.3.11

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.11:

bun upgrade

Read Bun v1.3.11's release notes on Bun's blog

Thanks to 15 contributors!

[View full release notes]

Released by Jarred-Sumner on 3/18/2026

bun-v1.3.10

Compare Source

To install Bun v1.3.10

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.10:

bun upgrade

Read Bun v1.3.10's release notes on Bun's blog

Thanks to 11 contributors!

[View full release notes]

Released by Jarred-Sumner on 2/26/2026

bun-v1.3.9

Compare Source

To install Bun v1.3.9

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.9:

bun upgrade

Read Bun v1.3.9's release notes on Bun's blog

Thanks to 10 contributors!

[View full release notes]

Released by Jarred-Sumner on 2/8/2026

handlebars-lang/handlebars.js (handlebars)

4.7.8 -> 4.7.9

v4.7.9

Compare Source

[View full release notes]

Released by jaylinski on 3/26/2026

capricorn86/happy-dom (happy-dom)

20.8.4 -> 20.8.9

v20.8.9

Compare Source

:construction_worker_man: Patch fixes

  • Fixes issue where cookies from the current origin was being forwarded to the target origin in fetch requests - By capricorn86 in task #2117

Released by github-actions[bot] on 3/26/2026

v20.8.8

Compare Source

:construction_worker_man: Patch fixes

  • Fixes issue where export names can be interpolated as executable code in ESM - By capricorn86 in task #2113
    • A security advisory (GHSA-6q6h-j7hj-3r64) has been reported that shows a security vulnerability where it may be possible to escape the VM context and get access to process level functionality in unsafe environments using CommonJS. Big thanks to tndud042713 for reporting this!

Released by github-actions[bot] on 3/24/2026

v20.8.7

Compare Source

:construction_worker_man: Patch fixes

  • Replace implementing Node.js Console with common IConsole interface to support latest version of Bun - By YevheniiKotyrlo in task #1845

Released by github-actions[bot] on 3/23/2026

harttle/liquidjs (liquidjs)

10.25.0 -> 10.25.2

v10.25.2

Compare Source

10.25.2 (2026-03-25)

Bug Fixes

  • handle undefined replacement argument in replace filter (#864) (0ad2b11)

Released by github-actions[bot] on 3/25/2026

v10.25.1

Compare Source

10.25.1 (2026-03-22)

Bug Fixes

  • mem limiter for invalid ranges (95ddefc)
  • treat args for replace_first as literal (35d5230)

Released by github-actions[bot] on 3/22/2026

v10.9.4

Compare Source

10.9.4 (2023-11-04)

Bug Fixes

Released by github-actions[bot] on 11/4/2023

markedjs/marked (marked)

17.0.4 -> 17.0.5

v17.0.5

Compare Source

17.0.5 (2026-03-20)

Bug Fixes

[View full release notes]

Released by github-actions[bot] on 3/20/2026

v9.1.6

Compare Source

9.1.6 (2023-11-10)

Bug Fixes

  • fix instance options sent to lexer and parser (#3073) (f9d08cc)

Released by github-actions[bot] on 11/10/2023

v9.1.5

Compare Source

9.1.5 (2023-11-02)

Bug Fixes

Released by github-actions[bot] on 11/2/2023

ts-broadcasting

0.0.3 -> 0.0.4

📦 View on npm


📊 Package Statistics

  • @capacitor/android: 1,455,877 weekly downloads
  • @capacitor/app: 938,565 weekly downloads
  • @capacitor/cli: 1,797,185 weekly downloads
  • @capacitor/core: 1,917,845 weekly downloads
  • @capacitor/ios: 1,287,152 weekly downloads
  • isomorphic-dompurify: 2,617,987 weekly downloads
  • ws: 186,650,071 weekly downloads
  • @capacitor/haptics: 510,783 weekly downloads
  • @capacitor/keyboard: 568,151 weekly downloads
  • @capacitor/status-bar: 688,632 weekly downloads
  • @cwcss/crosswind: 34,828 weekly downloads
  • @types/bun: 5,804,599 weekly downloads
  • bun: 953,648 weekly downloads
  • handlebars: 34,577,988 weekly downloads
  • happy-dom: 6,075,129 weekly downloads
  • liquidjs: 1,370,273 weekly downloads
  • marked: 34,391,705 weekly downloads
  • ts-broadcasting: 881 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

7 changed files on the files tab, with 0 review threads.

Sign in to comment on this pull request.