Skip to content

Bump react-lite-youtube-embed from 3.3.3 to 3.6.0 - #149

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/react-lite-youtube-embed-3.6.0
Open

Bump react-lite-youtube-embed from 3.3.3 to 3.6.0#149
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/react-lite-youtube-embed-3.6.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps react-lite-youtube-embed from 3.3.3 to 3.6.0.

Release notes

Sourced from react-lite-youtube-embed's releases.

v3.6.0

What's Changed

Bug Fixes

  • Fix autoplay prop not working (#265) — autoplay now loads the iframe immediately on mount so YouTube's autoplay=1 parameter is actually respected. Previously the iframe only loaded on click, making autoplay a no-op. Note: browsers require muted for unmuted autoplay (browser autoplay policy). Thanks to @​virasasan for the detailed report and reproduction case.

  • Fix params prop TypeScript type (#257) — params now correctly accepts both string and Record<string, string | number> as the documentation always stated. The TypeScript type was incorrectly narrowed to string only. Thanks to @​SKOLZ for the report.

  • Fix npm provenance attestation in release CI (#256) — The publish-npm workflow step was missing NODE_AUTH_TOKEN, causing CI publishes to fail silently and packages to be published manually (without provenance). Going forward all releases will include cryptographic provenance attestation verifiable via npm audit signatures.

Contributors

Thank you to everyone who reported issues and helped improve this package:

Full Changelog: ibrahimcesar/react-lite-youtube-embed@v3.5.1...v3.6.0

v3.5.0

No release notes provided.

v3.4.0

#247 #250

What's Changed

New Contributors

Full Changelog: ibrahimcesar/react-lite-youtube-embed@v3.3.3...v3.4.0

Commits
  • c79e582 chore: update package-lock.json for v3.6.0
  • 5d575d1 feat: fix autoplay behavior, params type, and release provenance (v3.6.0)
  • a8edfa1 fix: use unscoped package name for NPM publish and bump to 3.5.0 (#253)
  • 353f098 Update test badge [skip ci]
  • 4f610f5 chore: switch to NPM Trusted Publishers and remove dist from git (#252)
  • da1f585 Update size badges [skip ci]
  • 84d0683 feat: add hideButtonOnActivate prop to hide play button after activation (#247)
  • f90e8fe fix: remove redundant role="img" when lazyLoad is enabled (#249) (#250)
  • c56452c chore: remove all-contributors-cli and related scripts
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [react-lite-youtube-embed](https://github.com/ibrahimcesar/react-lite-youtube-embed) from 3.3.3 to 3.6.0.
- [Release notes](https://github.com/ibrahimcesar/react-lite-youtube-embed/releases)
- [Commits](ibrahimcesar/react-lite-youtube-embed@v3.3.3...v3.6.0)

---
updated-dependencies:
- dependency-name: react-lite-youtube-embed
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: pr: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from ajay-dhangar as a code owner July 31, 2026 20:24

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great job, @dependabot[bot]! 🎉 Thank you for submitting your pull request to CodeHarborHub. We appreciate your contribution and enthusiasm! Our team will review it soon. If you have any questions or need further assistance, feel free to reach out. Thanks for contributing!

@github-actions

Copy link
Copy Markdown

⚡️ Lighthouse Report for the Deploy Preview of this PR 🚀

🔗 Site: CodeHarborHub | Live Site

URL 🌐 Performance Accessibility Best Practices SEO 📊
/blog/ 🔴 45 🟢 92 🟢 96 🟢 100 📄
/blog/authors/ 🟡 69 🟢 90 🟢 96 🟡 86 📄
/blog/tags/ 🟡 68 🟢 90 🟢 96 🟡 86 📄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants