ReviewOS

also looking at this

stacks/stx

chore(deps): update all non-major dependencies

#1962
Merged github-actions[bot] wants to merge buddy-bot/update-non-major-updates into main
12 files +136 -166
8 days ago

This PR contains the following updates:

Package Updates Summary

TypeCount
📦 NPM Packages39
🔧 System Dependencies1
Total40

📦 npm Dependencies

npm

39 packages will be updated

PackageChangeAgeAdoptionPassingConfidence
@capacitor/android (source)8.3.0 -> 8.5.2ageadoptionpassingconfidence
@capacitor/cli (source)8.3.0 -> 8.5.2ageadoptionpassingconfidence
@capacitor/core (source)8.3.0 -> 8.5.2ageadoptionpassingconfidence
@capacitor/ios (source)8.3.0 -> 8.5.2ageadoptionpassingconfidence
@stacksjs/ts-cloud (source)0.7.127 -> 0.16.15ageadoptionpassingconfidence
@types/bun (source)1.3.14 -> 1.4.2ageadoptionpassingconfidence
@types/vscode (source)1.110.0 -> 1.138.0ageadoptionpassingconfidence
bun (source)1.3.14 -> 1.4.2ageadoptionpassingconfidence
happy-dom (source)20.10.2 -> 20.14.5ageadoptionpassingconfidence
isomorphic-dompurify (source)4.2.0 -> 4.4.0ageadoptionpassingconfidence
js-yaml (source)5.2.2 -> 5.4.2ageadoptionpassingconfidence
jsdom (source)30.0.0 -> 30.1.1ageadoptionpassingconfidence
prettier (source)3.8.1 -> 3.9.9ageadoptionpassingconfidence
tinybench (source)6.0.2 -> 6.2.0ageadoptionpassingconfidence
vscode-languageserver-types (source)3.17.5 -> 3.18.4ageadoptionpassingconfidence
ws (source)8.21.0 -> 8.22.0ageadoptionpassingconfidence
@11ty/eleventy (source)3.1.5 -> 3.1.6ageadoptionpassingconfidence
@capacitor/app (source)8.1.0 -> 8.1.1ageadoptionpassingconfidence
@capacitor/keyboard (source)8.0.2 -> 8.0.5ageadoptionpassingconfidence
@capacitor/splash-screen (source)8.0.1 -> 8.0.2ageadoptionpassingconfidence
@capacitor/status-bar (source)8.0.2 -> 8.0.3ageadoptionpassingconfidence
@iconify/json (source)2.2.516 -> 2.2.535ageadoptionpassingconfidence
@stacksjs/bumpx (source)0.2.17 -> 0.2.18ageadoptionpassingconfidence
@stacksjs/clapp (source)0.2.14 -> 0.2.16ageadoptionpassingconfidence
@stacksjs/ts-css (source)0.3.2 -> 0.3.6ageadoptionpassingconfidence
@types/sanitize-html (source)2.16.1 -> 2.16.2ageadoptionpassingconfidence
@types/ws (source)8.18.1 -> 8.18.2ageadoptionpassingconfidence
better-dx (source)0.2.22 -> 0.2.25ageadoptionpassingconfidence
bunfig (source)0.15.17 -> 0.15.19ageadoptionpassingconfidence
craft-native (source)0.0.90 -> 0.0.104ageadoptionpassingconfidence
dompurify (source)3.4.13 -> 3.4.16ageadoptionpassingconfidence
markdown-it (source)15.0.1 -> 15.0.2ageadoptionpassingconfidence
marked (source)18.0.7 -> 18.0.14ageadoptionpassingconfidence
pickier (source)0.1.56 -> 0.1.65ageadoptionpassingconfidence
ts-broadcasting (source)0.0.9 -> 0.0.10ageadoptionpassingconfidence
ts-syntax-highlighter (source)0.2.1 -> 0.2.17ageadoptionpassingconfidence
very-happy-dom (source)0.1.10 -> 0.1.11ageadoptionpassingconfidence
vscode-languageclient (source)10.1.0 -> 10.1.2ageadoptionpassingconfidence
vscode-languageserver-textdocument (source)1.0.12 -> 1.0.15ageadoptionpassingconfidence

🔧 System Dependencies

system

PackageChangeTypeFile
bun.com^1.3.4 → ^1.3.11🟢 patchdeps.yaml

Release Notes

ionic-team/capacitor (@capacitor/android)

8.3.0 -> 8.5.2

8.5.2

Compare Source

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

Released by jcesarmobile on 9/11/2026

8.5.1

Compare Source

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Released by jcesarmobile on 8/31/2026

8.4.3

Compare Source

8.4.3 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (745b5f8)
  • block the HTTP proxy path in subframes (af9a287)

Released by jcesarmobile on 8/31/2026

ionic-team/capacitor (@capacitor/cli)

8.3.0 -> 8.5.2

8.5.2

Compare Source

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

Released by jcesarmobile on 9/11/2026

8.5.1

Compare Source

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Released by jcesarmobile on 8/31/2026

8.4.3

Compare Source

8.4.3 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (745b5f8)
  • block the HTTP proxy path in subframes (af9a287)

Released by jcesarmobile on 8/31/2026

ionic-team/capacitor (@capacitor/core)

8.3.0 -> 8.5.2

8.5.2

Compare Source

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

Released by jcesarmobile on 9/11/2026

8.5.1

Compare Source

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Released by jcesarmobile on 8/31/2026

8.4.3

Compare Source

8.4.3 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (745b5f8)
  • block the HTTP proxy path in subframes (af9a287)

Released by jcesarmobile on 8/31/2026

ionic-team/capacitor (@capacitor/ios)

8.3.0 -> 8.5.2

8.5.2

Compare Source

8.5.2 (2026-09-11)

Bug Fixes

  • android: add null checks for plugin annotation when retrieving permissions (#8400) (035b16a)
  • ios: do not forward scene lifecycle events to the page before it has loaded (#8595) (c567328)
  • resolve issues with safe area / systembars plugin (#8535) (e37d9c6)

Released by jcesarmobile on 9/11/2026

8.5.1

Compare Source

8.5.1 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (ee586ae)
  • cli: use POSIX paths in CapApp-SPM Package.swift (#8549) (5e5bb3b)
  • core: prevent removeListener from removing wrong listener (#8271) (5ac4dd6)

Released by jcesarmobile on 8/31/2026

8.4.3

Compare Source

8.4.3 (2026-08-31)

Bug Fixes

  • block navigation to the internal HTTP proxy path (745b5f8)
  • block the HTTP proxy path in subframes (af9a287)

Released by jcesarmobile on 8/31/2026

stacksjs/ts-cloud (@stacksjs/ts-cloud)

0.7.127 -> 0.16.15

v0.16.15

Compare Source

Changelog

Compare changes

🐛 Bug Fixes

🔧 Chores

Contributors

Released by github-actions[bot] on 9/28/2026

v0.16.14

Compare Source

Changelog

Compare changes

🐛 Bug Fixes

🔧 Chores

Contributors

Released by github-actions[bot] on 9/28/2026

v0.16.13

Compare Source

Changelog

Compare changes

🐛 Bug Fixes

🔧 Chores

Contributors

Released by github-actions[bot] on 9/25/2026

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.14 -> 1.4.2

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

DefinitelyTyped/DefinitelyTyped (@types/vscode)

1.110.0 -> 1.138.0

Compare Source

TypeScript definitions for vscode

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

oven-sh/bun (bun)

1.3.14 -> 1.4.2

Compare Source

Bun is a fast all-in-one JavaScript runtime.

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

capricorn86/happy-dom (happy-dom)

20.10.2 -> 20.14.5

v20.14.5

Compare Source

:construction_worker_man: Patch fixes

  • Preserve character references in comment data - By hampustagerud in task #2409

Released by github-actions[bot] on 9/12/2026

v20.14.4

Compare Source

:construction_worker_man: Patch fixes

  • End comments at the first comment end tag when it overlaps a comment start tag - By hampustagerud in task #2407

Released by github-actions[bot] on 9/12/2026

v20.14.3

Compare Source

:construction_worker_man: Patch fixes

  • Avoids cloning all properties in CSSPropertyManager.toString - By erictheswift in task #2363

Released by github-actions[bot] on 9/9/2026

kkomelin/isomorphic-dompurify (isomorphic-dompurify)

4.2.0 -> 4.4.0

Makes it possible to use DOMPurify on server and client in the same way.

📖 View Release Notes

🔗 View Changelog

nodeca/js-yaml (js-yaml)

5.2.2 -> 5.4.2

Compare Source

YAML 1.2 parser and serializer

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

jsdom/jsdom (jsdom)

30.0.0 -> 30.1.1

v30.1.1

Compare Source

  • Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (asamuzaK)
  • Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (asamuzaK)
  • Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (asamuzaK)
  • Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (scttcper)
  • Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (FedgeNo)
  • Fixed !important handling when updating CSS longhands after...

[View full release notes]

Released by domenic on 9/22/2026

v30.1.0

Compare Source

jsdom is feeling the AGI!

This release is dedicated to scttcper, who unleashed codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

  • Added named access to elements on document, such as document.myForm for <form name="myForm">. (vojtisprime11)
  • Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
  • Added support for the relaxed DOM naming rules when creating elements, attributes...

[View full release notes]

Released by domenic on 9/17/2026

v30.0.1

Compare Source

  • Fixed getComputedStyle() with calc() and other functions throwing an exception, which regressed in v30.0.0. (asamuzaK)
  • Sped up up range operations on large documents (leonidaz)

Released by domenic on 7/29/2026

prettier/prettier (prettier)

3.8.1 -> 3.9.9

3.9.9

Compare Source

🔗 Changelog

Released by fisker on 9/23/2026

3.9.8

Compare Source

🔗 Changelog

Released by fisker on 9/17/2026

3.9.7

Compare Source

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

Released by fisker on 9/16/2026

tinylibs/tinybench (tinybench)

6.0.2 -> 6.2.0

🔎 A simple, tiny and lightweight benchmarking library!

📖 View Release Notes

🔗 View Changelog

Microsoft/vscode-languageserver-node (vscode-languageserver-types)

3.17.5 -> 3.18.4

Compare Source

Types used by the Language server for node

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

websockets/ws (ws)

8.21.0 -> 8.22.0

8.22.0

Compare Source

Features

  • Introduced the protocols option (8b918b0).

Bug fixes

  • Calling websocket.close() with invalid arguments no longer transitions the state to WebSocket.CLOSING (#2337).

Released by lpinca on 9/26/2026

8.21.3

Compare Source

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20e).

Released by lpinca on 8/6/2026

8.21.2

Compare Source

Bug fixes

Released by lpinca on 8/3/2026

11ty/eleventy (@11ty/eleventy)

3.1.5 -> 3.1.6

v3.1.6

Compare Source

  • Fixes Node 26 module.register deprecation warning shown in console #4283 (fixed in v4 alphas in #4271)
  • Minor dependency upgrades for npm audit fixes
    • liquidjs upgrade from 1.25.0 to 1.27.0
    • markdown-it upgrade from 14.1.1 to 14.2.0
  • Adds Node 26 to CI for v3 branch
  • Opt out of package manager cache for GitHub Actions CI release workflow (hardening security)

Milestone: https://github.com/11ty/eleventy/milestone/52?closed=1 Full Changelog: https://github.com/11ty/eleventy/compare/v3.1.5...v3.1.6

Released by zachleat on 6/2/2026

ionic-team/capacitor-plugins (@capacitor/app)

8.1.0 -> 8.1.1

Compare Source

The App API handles high level App state and events.For example, this API emits events when the app enters and leaves the foreground, handles deeplinks, opens other apps, and manages persisted plugin state.

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog


Note: This PR body was truncated due to GitHub's character limit. View the full details in the individual commits.

This PR was generated by Buddy 🤖

12 changed files on the files tab, with 0 review threads.

Sign in to comment on this pull request.