Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 12 updates - #459

Merged
u8array merged 2 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-bbc69798b0
Sep 22, 2026
Merged

chore(deps): bump the minor-and-patch group across 1 directory with 12 updates#459
u8array merged 2 commits into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-bbc69798b0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 12 updates in the / directory:

Package From To
@codemirror/commands 6.11.0 6.11.1
@codemirror/state 6.7.4 6.7.5
@codemirror/view 6.43.11 6.43.12
konva 10.5.0 10.6.0
react-konva 19.2.7 19.3.0
zod 4.6.2 4.6.5
@babel/core 8.0.5 8.0.6
@testing-library/dom 10.4.1 10.4.2
@types/node 26.5.1 26.6.2
eslint 10.10.0 10.11.0
eslint-plugin-react-refresh 0.5.6 0.5.7
jsdom 30.0.1 30.1.0

Updates @codemirror/commands from 6.11.0 to 6.11.1

Commits

Updates @codemirror/state from 6.7.4 to 6.7.5

Commits

Updates @codemirror/view from 6.43.11 to 6.43.12

Commits

Updates konva from 10.5.0 to 10.6.0

Release notes

Sourced from konva's releases.

10.6.0

Bug Fixes

... (truncated)

Changelog

Sourced from konva's changelog.

10.6.0 (2026-09-19)

  • Improved Path arc performance: bounds of an arc segment are computed exactly instead of sampled every degree, and a point on a circular arc is found with a closed form instead of walking the arc
  • Improved Text.getClientRect() and getSelfRect() of underlined text, which no longer measure the font on every call
  • Fixed blurRadius, pixelSize and CSS filter lengths (for example blur(8px)) being applied in cache pixels instead of node coordinates, so a filtered node looked less blurred at a higher cache pixelRatio. Note: custom filter functions now receive (imageData, pixelRatio); use the ratio to convert node lengths to pixels
  • Fixed a drag started from a pointerdown handler (startDrag(e), for example react-konva onPointerDown) never moving or ending and leaving the node stuck as dragging
  • Fixed stopDrag() ending every active drag instead of only the drags of its own gesture, so a node dragged by another finger stopped too. Note: stopDrag() on a node that is not dragging is now a no-op
  • Fixed a touchstart on empty stage area reporting the pointerId of the oldest active touch instead of the finger that just touched down
  • Fixed gotpointercapture and lostpointercapture always reporting pointerId 0 instead of the captured pointer
  • Fixed Transformer resetting a manually set rotation() back to zero on the next update() when useSingleNodeRotation is off
  • Fixed Transformer rotating by the wrong amount when rotateAnchorAngle is used with Konva.angleDeg = false
  • Fixed node.remove() leaving a stale absolute transform when a listener or a Transformer read the node's position during removal
  • Fixed toObject(), toJSON() and clone() dropping an explicit width, height or dragDistance that happened to equal the computed value, so a restored Text re-flowed. Note: such attributes are now present in the serialized output
  • Fixed Konva.Text and toImage()/toBlob() mutating the configuration object passed by the caller, which broke frozen and reused configurations
  • Fixed mutating the array returned by an unset points(), enabledAnchors() or rotationSnaps() corrupting every other node that used the same default. Note: an unset array attribute now returns a new array on each read
  • Fixed compound change events such as scaleChange, offsetChange and skewChange reporting oldVal as undefined
  • Fixed cache() and toCanvas()/toDataURL()/toImage() cropping the last pixel row and column of content at a fractional position. Note: an automatically sized cache or export can now be one pixel larger, and a cache whose origin is past the content is skipped instead of built with a negative size
  • Fixed layer.remove() and layer.destroy() leaving the layer canvases in the stage content when the stage container is not in the document, and never removing a hit canvas shown with toggleHitCanvas()
  • Fixed out-of-range CSS color components, such as rgba(0, 0, 0, 2) or rgb(120%, 0, 0), distorting shadow opacity and color tweens
  • Fixed the types of position(), absolutePosition(), size() and Stage.container() accepting null and undefined, which throw at runtime. Note: node.absolutePosition(stage.getPointerPosition()) no longer compiles, because the pointer position can be null
  • Fixed Text reporting a width smaller than it paints with letterSpacing, align: 'justify' or charRenderFunc, because measurement used kerning while drawing does not
  • Fixed Text bounds ignoring the underline, so cache(), getClientRect() and toDataURL() clipped it. Note: bounds of underlined text are now taller than height()
  • Fixed Text with direction: 'ltr' inheriting the direction of an RTL canvas, because only 'rtl' was applied
  • Fixed Text underline and line-through ignoring fillPriority, radial gradients and patterns instead of using the fill the text is drawn with
  • Fixed TextPath kerningFunc moving glyphs off curved and vertical paths, and not being counted in the text width
  • Fixed TextPath dropping its last character with align: 'right' and a positive letterSpacing, and adding a phantom trailing spacing to its bounds
  • Fixed a close command (z) in Path data not travelling back to the start of the subpath. Note: getLength() of a closed path now includes the closing edge, as in SVG, and a relative command after z starts from the subpath start
  • Fixed Path.getSelfRect() of an arc segment missing its end point, which reported an empty rect for a sub-degree arc
  • Fixed Path.getPointAtLength() on a non-circular arc interpolating the angle instead of the distance, which bunched TextPath glyphs on ovals and made path animations change speed
  • Fixed a negative arc radius in Path data throwing during a draw and aborting the layer. Note: an arc is now drawn with a single ellipse() call
  • Fixed the length of a quadratic curve whose control point lies on the chord, which returned Infinity and made TextPath text disappear
  • Fixed Arrow pointing its head horizontally when the line has repeated endpoints, for example a polyline finished by a double click
  • Fixed Konva.Image created from a fresh new Image() never redrawing when its src is assigned afterwards
  • Fixed Konva.Image.fromURL() calling its callback again, and creating a duplicate node, when the src of the loaded image is changed later
  • Fixed Label stacking a new set of listeners on a child every time it is re-added, which multiplied its internal work and kept a removed child calling a destroyed Label
  • Fixed Konva.Filters.Pixelate darkening blocks that mix opaque and transparent pixels, such as the edges of circles, text and images with alpha
  • Fixed Tween restarting its animation when pause() or destroy() is called from onUpdate, and throwing from finish()/reset() after such a destroy()
  • Fixed tweening strokeLinearGradientColorStops producing invalid colors such as redNaN and breaking every following draw
  • Fixed tweening an array attribute such as dash to a shorter array writing NaN, and tweening between a scalar and an array cornerRadius throwing
Commits
  • 8934205 test: compare path point lists with a tolerance instead of exact floats
  • 5f2dcf7 build for 10.6.0
  • e759195 update CHANGELOG with new version
  • 9a3df66 docs: open the 10.6.0 changelog section and give 10.5.0 its own heading
  • 894429d Merge review-task fix batch: 35 backlog fixes and 12 review repairs
  • 27d1537 docs: record the review-task batch in the changelog and close the audit list
  • df1827b Merge branch 'repair/misc' into review-fixes/all
  • 446e01f Merge branch 'repair/path' into review-fixes/all
  • 05eec26 Merge branch 'repair/text' into review-fixes/all
  • 444a46c Merge branch 'repair/node' into review-fixes/all
  • Additional commits viewable in compare view

Updates react-konva from 19.2.7 to 19.3.0

Release notes

Sourced from react-konva's releases.

19.3.0: React 19.3 support

Upgrade requirements

Upgrade React and React DOM to matching 19.3 versions before you install this release. The minimum React and React DOM version is now 19.3.0.

npm install react@19.3.0 react-dom@19.3.0 react-konva@19.3.0

For React 19.2 projects, pin react-konva to ~19.2.7. The range ^19.2.7 also allows 19.3.0, which requires the React upgrade. For React 18 projects, use the React Konva 18 release line.

Fixes and improvements

  • Fixes the useActionState crash inside Stage with React 19.3. This resolves #859 through #860.
  • Updates the bundled react-reconciler to 0.34.0 and scheduler to 0.28.0 for React 19.3.
  • Canvas roots inherit React StrictMode checks from the DOM tree.
  • Activity and Suspense preserve canvas state and node identity through hiding and reveal. Effects and refs disconnect and reconnect as each boundary requires.
  • Stage removal discards pending child updates and runs effect cleanup, including for hidden Stages.
  • Canvas components read the surrounding DOM form status through useFormStatus, including the submitted data and action.
  • useId values remain stable on updates and distinct across DOM and Stage roots.
  • Both package formats register with React DevTools. Development builds support hook state changes.

Renderer boundaries

Error boundaries inside Stage handle canvas errors and display Konva fallbacks. DOM error boundaries around Stage do not catch errors from canvas children. Uncaught canvas errors appear in the console with the original error and component stack, including errors during cleanup.

Canvas Suspense boundaries display Konva fallbacks. Canvas suspension does not activate a surrounding DOM Suspense boundary. A promise read before Stage renders can activate that DOM fallback.

A DOM ViewTransition can animate the Stage container. A ViewTransition inside Stage with Konva nodes or a ref throws a clear error. Fragment children remain supported, but Fragment refs stay null and provide no DOM methods.

The React compatibility matrix lists the supported hooks, features, fallbacks, and remaining limits. Native input synchronization and the fallback for older Konva versions continue from 19.2.7.

Validation

CI passes with Chromium, Firefox, and WebKit in development and production. The minimum React and React DOM 19.3.0 job also passes. The suite covers 196 correctness tests per build and 38 performance checks. Package checks cover both module formats, server rendering, package exports, consumer types, and the DevTools protocol.

Changelog

Sourced from react-konva's changelog.

19.3.0: React 19.3 support

Upgrade requirements

Upgrade React and React DOM to matching 19.3 versions before you install this release. The minimum React and React DOM version is now 19.3.0.

npm install react@19.3.0 react-dom@19.3.0 react-konva@19.3.0

For React 19.2 projects, pin react-konva to ~19.2.7. The range ^19.2.7 also allows 19.3.0, which requires the React upgrade. For React 18 projects, use the React Konva 18 release line.

Fixes and improvements

  • Fixes the useActionState crash inside Stage with React 19.3. This resolves #859 through #860.
  • Updates the bundled react-reconciler to 0.34.0 and scheduler to 0.28.0 for React 19.3.
  • Canvas roots inherit React StrictMode checks from the DOM tree.
  • Activity and Suspense preserve canvas state and node identity through hiding and reveal. Effects and refs disconnect and reconnect as each boundary requires.
  • Stage removal discards pending child updates and runs effect cleanup, including for hidden Stages.
  • Canvas components read the surrounding DOM form status through useFormStatus, including the submitted data and action.
  • useId values remain stable on updates and distinct across DOM and Stage roots.
  • Both package formats register with React DevTools. Development builds support hook state changes.

Renderer boundaries

Error boundaries inside Stage handle canvas errors and display Konva fallbacks. DOM error boundaries around Stage do not catch errors from canvas children. Uncaught canvas errors appear in the console with the original error and component stack, including errors during cleanup.

Canvas Suspense boundaries display Konva fallbacks. Canvas suspension does not activate a surrounding DOM Suspense boundary. A promise read before Stage renders can activate that DOM fallback.

A DOM ViewTransition can animate the Stage container. A ViewTransition inside Stage with Konva nodes or a ref throws a clear error. Fragment children remain supported, but Fragment refs stay null and provide no DOM methods.

The React compatibility matrix lists the supported hooks, features, fallbacks, and remaining limits. Native input synchronization and the fallback for older Konva versions continue from 19.2.7.

Validation

CI passes with Chromium, Firefox, and WebKit in development and production. The minimum React and React DOM 19.3.0 job also passes. The suite covers 196 correctness tests per build and 38 performance checks. Package checks cover both module formats, server rendering, package exports, consumer types, and the DevTools protocol.

Commits

Updates zod from 4.6.2 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit
Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates @babel/core from 8.0.5 to 8.0.6

Release notes

Sourced from @​babel/core's releases.

v8.0.6 (2026-09-18)

Thanks @​robhogan for your first PR!

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

🏃‍♀️ Performance

  • babel-helper-compilation-targets, babel-helper-transform-fixture-test-runner

Committers: 4

Changelog

Sourced from @​babel/core's changelog.

v8.0.6 (2026-09-18)

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

🏃‍♀️ Performance

  • babel-helper-compilation-targets, babel-helper-transform-fixture-test-runner
Commits

Updates @testing-library/dom from 10.4.1 to 10.4.2

Release notes

Sourced from @​testing-library/dom's releases.

v10.4.2

10.4.2 (2026-09-13)

Bug Fixes

  • deps: pin @​types/node to a TypeScript 4-compatible version (#1386) (6049cc0)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/dom since your current version.


Updates @types/node from 26.5.1 to 26.6.2

Commits

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)
Commits
  • 3c0b7c6 10.11.0
  • 321f0a7 Build: changelog update for 10.11.0
  • 520dd77 perf: Implement fast paths in critical areas (#21210)
  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
  • 24310e3 chore: update ecosystem plugins (#21324)
  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
  • Additional commits viewable in compare view

Updates eslint-plugin-react-refresh from 0.5.6 to 0.5.7

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.

{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}

Enabling this option allows code such as the following:

const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };
Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.7

Add allowCompoundComponents option (#117)

Default: false (true in vite config)

Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.

This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since @vitejs/plugin-react 4.7.0, @vitejs/plugin-react-swc 3.11.0.

{
  "react-refresh/only-export-components": [
    "error",
    { "allowCompoundComponents": true }
  ]
}

Enabling this option allows code such as the following:

const Root = () => <></>;
const Label = () => <></>;
export const Tag = { Root, Label };
Commits

Updates jsdom from 30.0.1 to 30.1.0

Release notes

Sourced from jsdom's releases.

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

  • Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
  • Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
  • Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
  • Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
  • Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
  • Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
  • Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
  • Changed window.close() to preserve access to the document and its DOM through retained references.
  • Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
  • Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
  • Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
  • Fixed :focus matching in shadow trees. (@​asamuzaK)
  • Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
  • Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
  • Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
  • Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
  • Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
  • Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
  • Fixed successful cached resource loads being treated as aborted.
  • Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
  • Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
  • Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
  • Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
  • Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
  • Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
  • Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)
  • Fixed serialization of min() and max() containing nested calc(), which regressed in v30.0.0. (@​asamuzaK)
  • Fixed CSS values mixing lengths or percentages with math functions, such as 'grid-template-columns' values containing both 100px and calc(). (@​rome-xi)
  • Fixed parsing of 'background' and 'border' shorthands with adjacent components, such as url(a.png)no-repeat, including a crash when parsing inline styles. Also fixed handling of invalid shorthand assignments and escaped or unusual characters in CSS declarations. (@​asamuzaK)
  • Fixed parsing of unitless zero values in 'flex' shorthands, such as 35 1 0, and rejection of negative 'flex-basis' lengths and percentages. (@​asamuzaK)
  • Fixed shorthand style assignments producing extra mutation records and custom element callbacks for intermediate values. (@​scttcper)
  • Fixed Range and Selection handling of CDATA sections, including boundary offsets and range cloning, extraction, deletion, insertion, and stringification. (@​scttcper)
  • Fixed text.normalize() incorrectly removing the text node or merging its siblings. (@​scttcper)
  • Fixed cloning and importing CDATA sections and processing instructions whose contents have been modified, and serialization of CDATA sections adopted into HTML documents.
  • Fixed stale named-property collections on window, and incorrect named access from empty or namespaced id="" and name="" values. (@​scttcper)
  • Fixed elements in documents created with DOMParser or document.implementation.createHTMLDocument() appearing as named properties on window and being retained in memory. (@​Iaotle)
  • Fixed memory leaks from mutation observers retaining observed nodes, abort signals retaining removed event listeners, and storage event tracking retaining closed windows. (@​scttcper)
  • Fixed storage events being sent to windows created after the storage change, and ensured surviving recipients still receive events when the source document is destroyed.
  • Fixed attribute lookups after namespace prefix changes, and namespaced attributes incorrectly affecting ID lookups and element behavior. (@​scttcper)
  • Fixed input.list in detached element trees. (@​scttcper)
  • Fixed attr.ownerDocument after setting an attribute node on an element in another document or adopting its element. (@​Kjubikstronk)

... (truncated)

Commits
  • 556b11f 30.1.0
  • 9547fbf Tie queued tasks to document lifetime
  • 3be65d9 Disable unused HTML reports in the WPT runner
  • d555e61 Replace SymbolTree with a DOM-specific tree

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 1…
5cefe16 
…2 updates

Bumps the minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.11.0` | `6.11.1` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.7.4` | `6.7.5` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.11` | `6.43.12` |
| [konva](https://github.com/konvajs/konva) | `10.5.0` | `10.6.0` |
| [react-konva](https://github.com/konvajs/react-konva) | `19.2.7` | `19.3.0` |
| [zod](https://github.com/colinhacks/zod) | `4.6.2` | `4.6.5` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.5` | `8.0.6` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.2` |
| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.6` | `0.5.7` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.0` |



Updates `@codemirror/commands` from 6.11.0 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/state` from 6.7.4 to 6.7.5
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/state/commits)

Updates `@codemirror/view` from 6.43.11 to 6.43.12
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `konva` from 10.5.0 to 10.6.0
- [Release notes](https://github.com/konvajs/konva/releases)
- [Changelog](https://github.com/konvajs/konva/blob/master/CHANGELOG.md)
- [Commits](konvajs/konva@10.5.0...10.6.0)

Updates `react-konva` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/konvajs/react-konva/releases)
- [Changelog](https://github.com/konvajs/react-konva/blob/master/RELEASE_NOTES.md)
- [Commits](https://github.com/konvajs/react-konva/commits/v19.3.0)

Updates `zod` from 4.6.2 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.2...v4.6.5)

Updates `@babel/core` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.6/packages/babel-core)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `@types/node` from 26.5.1 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.10.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.10.0...v10.11.0)

Updates `eslint-plugin-react-refresh` from 0.5.6 to 0.5.7
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.6...v0.5.7)

Updates `jsdom` from 30.0.1 to 30.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.0.1...v30.1.0)

---
updated-dependencies:
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: konva
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-konva
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@babel/core"
  dependency-version: 8.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: jsdom
  dependency-version: 30.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 22, 2026
@u8array
u8array merged commit 7c7076a into main Sep 22, 2026
2 checks passed
@u8array
u8array deleted the dependabot/npm_and_yarn/minor-and-patch-bbc69798b0 branch September 22, 2026 18:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@u8array