This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	24
Total	24

📦 npm Dependencies

24 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@capacitor/android (source)	`8.5.2` -> `8.6.0`
@capacitor/cli (source)	`8.5.2` -> `8.6.0`
@capacitor/core (source)	`8.5.2` -> `8.6.0`
@capacitor/ios (source)	`8.5.2` -> `8.6.0`
isomorphic-dompurify (source)	`4.4.0` -> `4.6.0`
js-yaml (source)	`5.4.2` -> `5.5.0`
liquidjs (source)	`10.29.0` -> `10.30.1`
marked (source)	`18.0.14` -> `18.1.2`
@capacitor/app (source)	`8.1.1` -> `8.1.2`
@capacitor/keyboard (source)	`8.0.5` -> `8.0.6`
@capacitor/status-bar (source)	`8.0.3` -> `8.0.4`
@iconify/json (source)	`2.2.535` -> `2.2.552`
@stacksjs/bumpx (source)	`0.2.28` -> `0.2.30`
@stacksjs/ts-cloud (source)	`0.16.15` -> `0.16.91`
@stacksjs/ts-css (source)	`0.3.11` -> `0.3.21`
craft-native (source)	`0.0.393` -> `0.0.424`
jsdom (source)	`30.1.1` -> `30.1.3`
prettier (source)	`3.9.9` -> `3.9.10`
tinybench (source)	`6.2.0` -> `6.2.3`
ts-images (source)	`0.2.22` -> `0.2.32`
ts-syntax-highlighter (source)	`0.2.1` -> `0.2.17`
vscode-languageserver-textdocument (source)	`1.0.15` -> `1.0.16`
vscode-languageserver-types (source)	`3.18.4` -> `3.18.5`
xss (source)	`1.0.15` -> `1.0.17`

Release Notes

ionic-team/capacitor (@capacitor/android)

8.5.2 -> 8.6.0

8.6.0 (2026-10-28)

Bug Fixes

android: keep callbacks on non-public base classes from R8 (02e43f8)
android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
cli: report npm 12 blocked install scripts in doctor and migrate (#8655) ([841017a](http...

[View full release notes]

Released by jcesarmobile on 10/28/2026

8.5.3 (2026-10-07)

Bug Fixes

cli: change Cordova AppDelegate.h imports for SPM (#8618) (145560e)

Released by jcesarmobile on 10/7/2026

ionic-team/capacitor (@capacitor/cli)

8.5.2 -> 8.6.0

8.6.0 (2026-10-28)

Bug Fixes

android: keep callbacks on non-public base classes from R8 (02e43f8)
android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
cli: report npm 12 blocked install scripts in doctor and migrate (#8655) ([841017a](http...

[View full release notes]

Released by jcesarmobile on 10/28/2026

8.5.3 (2026-10-07)

Bug Fixes

cli: change Cordova AppDelegate.h imports for SPM (#8618) (145560e)

Released by jcesarmobile on 10/7/2026

ionic-team/capacitor (@capacitor/core)

8.5.2 -> 8.6.0

8.6.0 (2026-10-28)

Bug Fixes

android: keep callbacks on non-public base classes from R8 (02e43f8)
android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
cli: report npm 12 blocked install scripts in doctor and migrate (#8655) ([841017a](http...

[View full release notes]

Released by jcesarmobile on 10/28/2026

8.5.3 (2026-10-07)

Bug Fixes

cli: change Cordova AppDelegate.h imports for SPM (#8618) (145560e)

Released by jcesarmobile on 10/7/2026

ionic-team/capacitor (@capacitor/ios)

8.5.2 -> 8.6.0

8.6.0 (2026-10-28)

Bug Fixes

android: keep callbacks on non-public base classes from R8 (02e43f8)
android: keep plugin annotation types from R8 full mode (#8646) (9dc5aeb)
cli: bump xcode to ^4.0.0 to drop vulnerable uuid@7 (#8674) (463225f)
cli: redact sensitive values from telemetry payloads (#8665) (d19f1ea)
cli: report npm 12 blocked install scripts in doctor and migrate (#8655) ([841017a](http...

[View full release notes]

Released by jcesarmobile on 10/28/2026

8.5.3 (2026-10-07)

Bug Fixes

cli: change Cordova AppDelegate.h imports for SPM (#8618) (145560e)

Released by jcesarmobile on 10/7/2026

kkomelin/isomorphic-dompurify (isomorphic-dompurify)

4.4.0 -> 4.6.0

Makes it possible to use DOMPurify on server and client in the same way.

📖 View Release Notes

🔗 View Changelog

nodeca/js-yaml (js-yaml)

5.4.2 -> 5.5.0

Compare Source

YAML 1.2 parser and serializer

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

harttle/liquidjs (liquidjs)

10.29.0 -> 10.30.1

10.30.1 (2026-10-28)

Bug Fixes

apply outputEscape to {% echo %} (46ab5d8)
array_to_sentence_string: coerce non-array input with toArray (#968) (e843466), closes #964
base64_decode: throw on invalid input in every build (#971) (83bbfe0), closes #965
date_to_rfc822: use English day and month names (#974) (e94a1c4), closes #973
filters: round must not alter large or high-precision n...

[View full release notes]

Released by github-actions[bot] on 10/28/2026

10.30.0 (2026-10-01)

Bug Fixes

base64_encode: encode large input in browser builds (#969) (8aace78), closes #967
date: compute %C and %y from the numeric year (#961) (e68514f)
date: compute %U and %W week numbers like strftime (#958) (0587ca8)
trim custom characters by Unicode code point (#955) (3fe244f)
truncatewords: ignore leading whitespace when counting words (#954) ([65e200e...

[View full release notes]

Released by github-actions[bot] on 10/1/2026

markedjs/marked (marked)

18.0.14 -> 18.1.2

18.1.2 (2026-10-26)

Bug Fixes

allow a tab or end of input after a type 6 html block tag name (#4128) (e09c40d)
apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145) (5d8e234)
cli: await config functions before parsing (#4138) (3a11ad1)
cli: create no-clobber output files atomically (#4135) (e7c4f64)
do not continue a block quote paragraph from a whitespace-only line (#4134) ([42f34a8](https://github.co...

[View full release notes]

Released by github-actions[bot] on 10/26/2026

18.1.1 (2026-10-12)

Bug Fixes

cli: honor an explicitly empty string input (#4113) (ec3a4e5)
end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)
keep a backslash in a code span from hiding emphasis (#4117) (6a57018)
keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112
let indented and type 3-5 html blocks interrupt a paragraph ([...

[View full release notes]

Released by github-actions[bot] on 10/12/2026

18.1.0 (2026-10-05)

Bug Fixes

avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)
load CLI configs with top-level await (#4100) (c61543e)
reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)

Released by github-actions[bot] on 10/5/2026

ionic-team/capacitor-plugins (@capacitor/app)

8.1.1 -> 8.1.2

Compare Source

The App API handles high level App state and events.For example, this API emits events when the app enters and leaves the foreground, handles deeplinks, opens other apps, and manages persisted plugin state.

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

ionic-team/capacitor-keyboard (@capacitor/keyboard)

8.0.5 -> 8.0.6

`v8.0.6`

Compare Source

8.0.6 (2026-10-02)

Bug Fixes

ios: silence the protocol property synthesis warnings in Keyboard.m (#83) (f28aef4)

This release is also available on:

[npm package (latest dist-tag)](https://www.npmjs.com/package/@capacitor/keyboard/v/8.0.6)

Released by capacitor-bot on 10/2/2026

ionic-team/capacitor-plugins (@capacitor/status-bar)

8.0.3 -> 8.0.4

Compare Source

The StatusBar API Provides methods for configuring the style of the Status Bar, along with showing or hiding it.

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

iconify/icon-sets (@iconify/json)

2.2.535 -> 2.2.552

Compare Source

Hundreds of open source icon sets in IconifyJSON format

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

stacksjs/bumpx (@stacksjs/bumpx)

0.2.28 -> 0.2.30

`v0.2.30`

Compare Source

Released by github-actions[bot] on 10/29/2026

stacksjs/ts-cloud (@stacksjs/ts-cloud)

0.16.15 -> 0.16.91

`v0.16.91`

Compare Source

Changelog

Compare changes

✨ Features

core: resolve profile credentials from config files, including credential_process (d8e44ca) (by Chris Breuer chrisbreuer93@gmail.com)

🐛 Bug Fixes

aws: honor credential_process profiles in AWSClient and resolveCredentials (06785d1) (by Chris Breuer chrisbreuer93@gmail.com)

🔧 Chores

release v0.16.91 (de8b5a2) (by Chris Breuer chrisbreuer93@gmail.com)

Contributors

Chris Breuer chrisbreuer93@gmail.com

Released by github-actions[bot] on 10/31/2026

`v0.16.90`

Compare Source

Changelog

Compare changes

🐛 Bug Fixes

release the storage coordinator before waiting for maintenance (2f9fb88) (by Chris chris@stacksjs.com)

🔧 Chores

release v0.16.90 (5ab2977) (by Chris chris@stacksjs.com)
deps: let buddy-bot own npm, leave renovate only composer (a9f7907) (by glennmichael123 gtorregosa@gmail.com) (#187, #188)

Contributors

Chris chris@stacksjs.com
glennmichael123 gtorregosa@gmail.com

Released by github-actions[bot] on 10/30/2026

`v0.16.89`

Compare Source

Changelog

Compare changes

🐛 Bug Fixes

honor artifact retention windows under disk pressure (a653931) (by Chris Breuer chris@stacksjs.com)

✅ Tests

accept permission reconciliation before package installation (0ba6c34) (by Chris chris@stacksjs.com)

🔧 Chores

release v0.16.89 (f5d8f94) (by Chris Breuer chris@stacksjs.com)

Contributors

Chris chris@stacksjs.com
Chris Breuer chris@stacksjs.com

Released by github-actions[bot] on 10/30/2026

stacksjs/ts-css (@stacksjs/ts-css)

0.3.11 -> 0.3.21

`v0.3.21`

Compare Source

Compare changes

🐛 Bug Fixes

engine: honour colorVariables on the common-colour fast path (a2e35a8) (by Chris Breuer chrisbreuer93@gmail.com)

🔧 Chores

release v0.3.21 (c286fde) (by Chris Breuer chrisbreuer93@gmail.com)

Contributors

Chris Breuer chrisbreuer93@gmail.com

Released by github-actions[bot] on 10/31/2026

`v0.3.20`

Compare Source

Compare changes

🐛 Bug Fixes

engine: read an icon class named by any markup attribute, not only class (617955b) (by Chris Breuer chrisbreuer93@gmail.com)

🔧 Chores

release v0.3.20 (6920a97) (by Chris Breuer chrisbreuer93@gmail.com)

Contributors

Chris Breuer chrisbreuer93@gmail.com

Released by github-actions[bot] on 10/31/2026

`v0.3.19`

Compare Source

Compare changes

🐛 Bug Fixes

engine: expand a shortcut used behind a variant (d2a6366) (by Chris chrisbreuer93@gmail.com)

🔧 Chores

release v0.3.19 (195a0d5) (by Chris chrisbreuer93@gmail.com)

Contributors

Chris chrisbreuer93@gmail.com

Released by github-actions[bot] on 10/22/2026

craft-native/craft (craft-native)

0.0.393 -> 0.0.424

`v0.0.424`

Compare Source

Compare changes

⚡ Performance Improvements

macos: build screens on zig-js a673972, which compiles each regexp once (273e841) (by Chris)
macos: remember each box's measurements through a layout pass (d7cb624) (by Chris)

Contributors

Chris

Released by github-actions[bot] on 11/2/2026

`v0.0.423`

Compare Source

Compare changes

🐛 Bug Fixes

android: query emulator identity through its headless frontend (2ce8af3) (by Chris) (#435)
android: retain native failure evidence before teardown (9551b38) (by Chris) (#438)
android: type native database and notification opt-ins (21d9607) (by Chris) (#439)

Contributors

Chris

Released by github-actions[bot] on 11/2/2026

`v0.0.420`

Compare Source

Compare changes

🚀 Features

macos: screens run on zig-js's precise collector, at zig-js fef92e7 (312c48d) (by Chris)
macos: a web test action runs script in a tab's page (96e593f) (by Chris)
macos: tell the other windows when one closes (4f960f2) (by Chris)

🐛 Bug Fixes

macos: creating a tab that exists answers it, instead of reloading it (cff762d) (by Chris)

Contributors

Chris

Released by github-actions[bot] on 11/2/2026

jsdom/jsdom (jsdom)

30.1.1 -> 30.1.3

`v30.1.3`

Compare Source

Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (scttcper, asamuzaK)
Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (scttcper)
Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (rnavarro)
Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
Fixed CSS sho...

[View full release notes]

Released by domenic on 10/15/2026

`v30.1.2`

Compare Source

Updated URLs to support Unicode v18.0.0 in internationalized domain names.
Reduced package size and memory use for CSS property definitions. (scttcper)
Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (cmdcolin)
Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (scttcper)
Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing th...

[View full release notes]

Released by domenic on 10/4/2026

prettier/prettier (prettier)

3.9.9 -> 3.9.10

`3.9.10`

Compare Source

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by [fisker](https://github.com/fisker))

🔗 Changelog

Released by fisker on 10/10/2026

tinylibs/tinybench (tinybench)

6.2.0 -> 6.2.3

🔎 A simple, tiny and lightweight benchmarking library!

📖 View Release Notes

🔗 View Changelog

stacksjs/ts-images (ts-images)

0.2.22 -> 0.2.32

`v0.2.31`

Compare Source

Released by github-actions[bot] on 10/13/2026

`v0.2.30`

Compare Source

Released by github-actions[bot] on 10/12/2026

`v0.2.29`

Compare Source

Released by github-actions[bot] on 10/6/2026

stacksjs/ts-syntax-highlighter (ts-syntax-highlighter)

0.2.1 -> 0.2.17

`v0.2.15`

Compare Source

Released by github-actions[bot] on 8/19/2026

`v0.2.14`

Compare Source

Released by github-actions[bot] on 8/10/2026

`v0.2.13`

Compare Source

Released by github-actions[bot] on 8/6/2026

Microsoft/vscode-languageserver-node (vscode-languageserver-textdocument)

1.0.15 -> 1.0.16

Compare Source

A simple text document implementation for Node LSP servers

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

Microsoft/vscode-languageserver-node (vscode-languageserver-types)

3.18.4 -> 3.18.5

Compare Source

Types used by the Language server for node

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

leizongmin/js-xss (xss)

1.0.15 -> 1.0.17

Compare Source

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

📊 Package Statistics

@capacitor/android: 5,867,637 weekly downloads
@capacitor/cli: 7,464,057 weekly downloads
@capacitor/core: 7,402,651 weekly downloads
@capacitor/ios: 5,323,708 weekly downloads
isomorphic-dompurify: 7,823,438 weekly downloads
js-yaml: 387,610,806 weekly downloads
liquidjs: 3,341,186 weekly downloads
marked: 121,056,817 weekly downloads
@capacitor/app: 4,696,353 weekly downloads
@capacitor/keyboard: 2,368,635 weekly downloads
@capacitor/status-bar: 2,589,034 weekly downloads
@iconify/json: 440,691 weekly downloads
@stacksjs/bumpx: 76,863 weekly downloads
@stacksjs/ts-cloud: 103,291 weekly downloads
@stacksjs/ts-css: 78,848 weekly downloads
craft-native: 77,655 weekly downloads
jsdom: 150,614,376 weekly downloads
prettier: 178,733,986 weekly downloads
tinybench: 152,408,739 weekly downloads
ts-images: 80,922 weekly downloads
ts-syntax-highlighter: 79,042 weekly downloads
vscode-languageserver-textdocument: 25,329,284 weekly downloads
vscode-languageserver-types: 36,026,985 weekly downloads
xss: 7,879,378 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

{"schemaVersion":1,"updates":[{"name":"@capacitor/android","current":"8.5.2","target":"8.6.0","type":"minor","file":"examples/buddy-mobile/package.json","dependencyType":"dependencies"},{"name":"@capacitor/cli","current":"8.5.2","target":"8.6.0","type":"minor","file":"examples/buddy-mobile/package.json","dependencyType":"dependencies"},{"name":"@capacitor/core","current":"8.5.2","target":"8.6.0","type":"minor","file":"examples/buddy-mobile/package.json","dependencyType":"dependencies"},{"name":"@capacitor/ios","current":"8.5.2","target":"8.6.0","type":"minor","file":"examples/buddy-mobile/package.json","dependencyType":"dependencies"},{"name":"isomorphic-dompurify","current":"4.4.0","target":"4.6.0","type":"minor","file":"packages/benchmarks/package.json","dependencyType":"dependencies"},{"name":"js-yaml","current":"5.4.2","target":"5.5.0","type":"minor","file":"packages/benchmarks/package.json","dependencyType":"dependencies"},{"name":"liquidjs","current":"10.29.0","target":"10.30.1","type":"minor","file":"packages/benchmarks/package.json","dependencyType":"dependencies"},{"name":"marked","current":"18.0.14","target":"18.1.2","type":"minor","file":"packages/benchmarks/package.json","dependencyType":"dependencies"},{"name":"@capacitor/app","current":"8.1.1","target":"8.1.2","type":"patch","file":"examples/buddy-mobile/package.json","dependencyType":"dependencies"},{"name":"@capacitor/keyboard","current":"8.0.5","target":"8.0.6","type":"patch","file":"examples/buddy-mobile/package.json","dependencyType":"dependencies"},{"name":"@capacitor/status-bar","current":"8.0.3","target":"8.0.4","type":"patch","file":"examples/buddy-mobile/package.json","dependencyType":"dependencies"},{"name":"@iconify/json","current":"2.2.535","target":"2.2.552","type":"patch","file":"package.json","dependencyType":"dependencies"},{"name":"@stacksjs/bumpx","current":"0.2.28","target":"0.2.30","type":"patch","file":"package.json","dependencyType":"dependencies"},{"name":"@stacksjs/ts-cloud","current":"0.16.15","target":"0.16.91","type":"patch","file":"packages/deploy/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/ts-css","current":"0.3.11","target":"0.3.21","type":"patch","file":"package.json","dependencyType":"dependencies"},{"name":"craft-native","current":"0.0.393","target":"0.0.424","type":"patch","file":"packages/desktop/package.json","dependencyType":"dependencies"},{"name":"jsdom","current":"30.1.1","target":"30.1.3","type":"patch","file":"packages/benchmarks/package.json","dependencyType":"dependencies"},{"name":"prettier","current":"3.9.9","target":"3.9.10","type":"patch","file":"packages/stx-vscode/package.json","dependencyType":"dependencies"},{"name":"tinybench","current":"6.2.0","target":"6.2.3","type":"patch","file":"packages/benchmarks/package.json","dependencyType":"dependencies"},{"name":"ts-images","current":"0.2.22","target":"0.2.32","type":"patch","file":"packages/stx/package.json","dependencyType":"dependencies"},{"name":"ts-syntax-highlighter","current":"0.2.1","target":"0.2.17","type":"patch","file":"packages/components/package.json","dependencyType":"dependencies"},{"name":"vscode-languageserver-textdocument","current":"1.0.15","target":"1.0.16","type":"patch","file":"packages/vscode/package.json","dependencyType":"dependencies"},{"name":"vscode-languageserver-types","current":"3.18.4","target":"3.18.5","type":"patch","file":"packages/vscode/package.json","dependencyType":"dependencies"},{"name":"xss","current":"1.0.15","target":"1.0.17","type":"patch","file":"packages/benchmarks/package.json","dependencyType":"dependencies"}],"group":"Non-Major Updates","generatedAt":"2026-11-02T15:32:23.012Z"} -->