Skip to content

Conversation

@chrisbbreuer
Copy link
Member

This PR contains the following updates:

Package Updates Summary

Type Count
📦 NPM Packages 11
🔧 System Dependencies 3
🚀 GitHub Actions 4
Total 18

📦 npm Dependencies

npm

11 packages will be updated

Package Change Age Adoption Passing Confidence
@types/vscode (source) 1.80.0 -> 1.105.0 age adoption passing confidence
better-dx (source) 0.1.7 -> 0.2.0 age adoption passing confidence
bun-plugin-dtsx (source) 0.9.5 -> 0.21.12 age adoption passing confidence
dompurify (source) 3.2.7 -> 3.3.0 age adoption passing confidence
isomorphic-dompurify (source) 2.29.0 -> 2.30.1 age adoption passing confidence
prettier (source) 3.4.2 -> 3.6.2 age adoption passing confidence
typescript (source) 5.8.3 -> 5.9.3 age adoption passing confidence
vscode-html-languageservice (source) 5.5.1 -> 5.6.0 age adoption passing confidence
@vscode/vsce (source) 3.6.0 -> 3.6.3-0 age adoption passing confidence
jsdom (source) 27.0.0 -> 27.0.1 age adoption passing confidence
marked (source) 16.4.0 -> 16.4.1 age adoption passing confidence

🔧 System Dependencies

system

3 packages will be updated across 2 file(s): deps.yaml, deps.yaml

Package Change Type File
bun.com ^1.2.10^1.3.0 🟡 minor deps.yaml
node ^23.9.0^23.11.1 🟡 minor deps.yaml
zig ^0.15.0^0.15.1 🟢 patch deps.yaml

🚀 GitHub Actions

github-actions

4 actions will be updated

Action Change Type Files
actions/cache v4v4.3.0 🟢 patch ci.yml
shivammathur/setup-php v2v2.35.5 🟢 patch buddy-bot.yml
actions/checkout v5v5.0.0 🟢 patch ci.yml
oven-sh/setup-bun v2v2.0.2 🟢 patch ci.yml

Release Notes

DefinitelyTyped/DefinitelyTyped (@types/vscode)

1.80.0 -> 1.105.0

Compare Source

TypeScript definitions for vscode

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

stacksjs/development (better-dx)

0.1.7 -> 0.2.0

v0.2.0

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 10/20/2025

stacksjs/dtsx (bun-plugin-dtsx)

0.9.5 -> 0.21.12

Compare Source

A Bun Bundler plugin that auto generates your DTS types extremely fast.

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

cure53/DOMPurify (dompurify)

3.2.7 -> 3.3.0

3.3.0

Compare Source

  • Added the SVG mask-type attribute to default allow-list, thanks prasadrajandran
  • Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks nelstrom
  • Fixed an issue with the slot element being in both SVG and HTML allow-list, thanks Wim-Valgaeren

Released by cure53 on 10/13/2025

kkomelin/isomorphic-dompurify (isomorphic-dompurify)

2.29.0 -> 2.30.1

2.30.1

Compare Source

This release drops support for Node < 20.19.5, so please update your Node accordingly. Node 22 and 24 may need upgrade too if you're affected - read comments here jsdom/jsdom#3963

Changelog

  • Increased minimal supported Node version from 18 to 20.19.5 through package.json engines to reflect recent jsdom switch.

See the complete changelog for more details.

Release

2.30.1

Released by kkomelin on 10/22/2025

2.30.0

Compare Source

This release drops support for Node < 20.19.5, so please update your Node accordingly.

Changelog

  • Updated jsdom.

See the complete changelog for more details.

Release

2.30.0

Released by kkomelin on 10/21/2025

v2.9.0

Compare Source

Changelog

  • Updated dompurify and other dependencies.
  • Switched from npm to pnpm.

See the complete changelog for more details.

Release

2.9.0

Released by kkomelin on 4/30/2024

prettier/prettier (prettier)

3.4.2 -> 3.6.2

3.6.2

Compare Source

What's Changed

🔗 Changelog

Released by fisker on 6/27/2025

3.6.1

Compare Source

  • Fix "Warning: File descriptor 39 closed but not opened in unmanaged mode" error when running --experimental-cli

🔗 Changelog

Released by fisker on 6/25/2025

3.6.0

Compare Source

diff

🔗 Release note "Prettier 3.6: Experimental fast CLI and new OXC and Hermes plugins!"

Released by fisker on 6/23/2025

microsoft/TypeScript (typescript)

5.8.3 -> 5.9.3

v5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

Released by jakebailey on 10/1/2025

v5.9.2

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

Released by jakebailey on 10/1/2025

v5.9-rc

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

Released by jakebailey on 10/1/2025

Microsoft/vscode-html-languageservice (vscode-html-languageservice)

5.5.1 -> 5.6.0

v5.6.0

Compare Source

Changes:

This list of changes was auto generated.

Released by joaomoreno on 10/17/2025

v5.5.2

Compare Source

Changes:

This list of changes was auto generated.

Released by joaomoreno on 9/29/2025

Microsoft/vsce (@vscode/vsce)

3.6.0 -> 3.6.3-0

v3.6.3-0

Compare Source

Changes:

This list of changes was auto generated.

Released by joaomoreno on 9/29/2025

v3.6.2

Compare Source

Changes:

This list of changes was auto generated.

Released by joaomoreno on 9/26/2025

v3.6.2-0

Compare Source

Changes:

This list of changes was auto generated.

Released by joaomoreno on 9/25/2025

jsdom/jsdom (jsdom)

27.0.0 -> 27.0.1

27.0.1

Compare Source

  • Fixed some regressions in CSS selectors. Most such regression fixes were done in a minor update of a dependency, and thus available for all fresh installs of v27.0.0. However, one related to class="" attribute changes is only possible with a new version of jsdom. (asamuzaK)

Released by domenic on 10/18/2025

27.0.0-beta.3

Compare Source

  • Breaking change: upgraded tough-cookie, which now considers URLs like http://localhost/ to be secure contexts (per the spec), and thus will return Secure-flagged cookies for such URLs. (colincasey)
  • Added customElements.getName(). (mash-graz)
  • Changed the <input> element's pattern="" attribute to use the v regular expression flag, instead of u.
  • Fixed jsdom.reconfigure({ url }) not updating document.baseURI or properties derived from it. This regressed in v26.1.0.
  • Fixed CSS system colors, as well as the initial, inherit, and unset keywords, to resolve correctly. This is especially important since the change in v27.0.0-beta.1 to use system colors in the user agent stylesheet. (asamuzaK)
  • Fixed CSS background property parsing and serialization. (asamuzaK)
  • Fixed CSS color parsing and serialization inside of gradients. (asamuzaK)
  • Fixed CSS display style resolution. (asamuzaK)...

[View full release notes]

Released by domenic on 8/31/2025

27.0.0-beta.2

Compare Source

Significantly improved specification conformance for the Window object, including named properties and changing various data properties to accessor properties. This is not likely to be breaking, but since it's a complex change to such a core object, we're happy to do another beta testing release with this included before graduating the v27 line to stable.

Additionally, updated cssstyle to v4.4.0, which brings along various conformance fixes to the CSSStyleDeclaration object and its properties.

Released by domenic on 6/8/2025

markedjs/marked (marked)

16.4.0 -> 16.4.1

v16.4.1

Compare Source

16.4.1 (2025-10-17)

Bug Fixes

Released by github-actions[bot] on 10/17/2025

v9.1.6

Compare Source

9.1.6 (2023-11-10)

Bug Fixes

  • fix instance options sent to lexer and parser (#3073) (f9d08cc)

Released by github-actions[bot] on 11/10/2023

v9.1.5

Compare Source

9.1.5 (2023-11-02)

Bug Fixes

Released by github-actions[bot] on 11/2/2023

bun.com

^1.2.10 → ^1.3.0

📁 File: deps.yaml

🔗 Release Notes: bun.sh

node

^23.9.0 → ^23.11.1

📁 File: deps.yaml

🔗 Package Info: pkgx.com

zig

^0.15.0 → ^0.15.1

📁 File: deps.yaml

🔗 Package Info: pkgx.com

actions/cache

v4 → v4.3.0

Visit actions/cache for release notes.

shivammathur/setup-php

v2 → v2.35.5

Visit shivammathur/setup-php for release notes.

actions/checkout

v5 → v5.0.0

Visit actions/checkout for release notes.

oven-sh/setup-bun

v2 → v2.0.2

Visit oven-sh/setup-bun for release notes.


📊 Package Statistics

  • @types/vscode: 910,773 weekly downloads
  • better-dx: 32,377 weekly downloads
  • bun-plugin-dtsx: 155,242 weekly downloads
  • dompurify: 13,505,611 weekly downloads
  • isomorphic-dompurify: 1,466,473 weekly downloads
  • prettier: 58,128,477 weekly downloads
  • typescript: 98,991,289 weekly downloads
  • vscode-html-languageservice: 764,767 weekly downloads
  • @vscode/vsce: 581,640 weekly downloads
  • jsdom: 30,349,191 weekly downloads
  • marked: 17,861,236 weekly downloads
  • bun.com: Popular JavaScript runtime and package manager
  • node: Available via pkgx package manager
  • zig: Available via pkgx package manager
  • actions/cache: GitHub Action for workflow automation
  • shivammathur/setup-php: GitHub Action for workflow automation
  • actions/checkout: GitHub Action for workflow automation
  • oven-sh/setup-bun: GitHub Action for workflow automation

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

@netlify
Copy link

netlify bot commented Oct 23, 2025

Deploy Preview for stacks-stx failed. Why did it fail? →

Name Link
🔨 Latest commit cca3b62
🔍 Latest deploy log https://app.netlify.com/projects/stacks-stx/deploys/68f9e5d3c4944000089210ba

@chrisbbreuer
Copy link
Member Author

🤖 Auto-closing obsolete PR

This PR was automatically closed because the dependency files it references are no longer present in the project.

Removed files:

  • `## 📦 npm Dependencies

npm

11 packages will be updated`

  • [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/vscode) ([source](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode))
  • [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/%40types%2Fvscode/1.80.0/1.105.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/better-dx/0.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [0.9.5->0.21.12](https://renovatebot.com/diffs/npm/bun-plugin-dtsx/0.9.5/0.21.12)
  • [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/dompurify/3.2.7/3.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [![age](https://developer.mend.io/api/mc/badges/age/npm/isomorphic-dompurify/2.30.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [prettier](https://github.com/prettier/prettier/tree/master) ([source](https://github.com/prettier/prettier/tree/HEAD))
  • [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/prettier/3.4.2/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript/5.9.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [5.5.1->5.6.0](https://renovatebot.com/diffs/npm/vscode-html-languageservice/5.5.1/5.6.0)
  • [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/%40vscode%2Fvsce/3.6.0/3.6.3-0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [![age](https://developer.mend.io/api/mc/badges/age/npm/jsdom/27.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [marked](https://github.com/markedjs/marked/tree/master) ([source](https://github.com/markedjs/marked/tree/HEAD))
  • [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/marked/16.4.0/16.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
  • [deps.yaml](https://github.com/stacksjs/stx/blob/main/packages/vscode/deps.yaml)
  • [deps.yaml](https://github.com/stacksjs/stx/blob/main/packages/zyte/deps.yaml)
  • [ci.yml](https://github.com/stacksjs/stx/blob/main/.github/workflows/ci.yml)
  • [buddy-bot.yml](https://github.com/stacksjs/stx/blob/main/.github/workflows/buddy-bot.yml)

If this was closed in error, please reopen the PR and update the dependency files accordingly.

@github-actions github-actions bot deleted the buddy-bot/update-non-major-updates-1761207743873 branch October 23, 2025 08:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants