Skip to content

Bump the npm-dependencies group in /website with 6 updates - #4400

Merged
Gedochao merged 1 commit into
mainfrom
dependabot/npm_and_yarn/website/npm-dependencies-617c1d404b
Jul 28, 2026
Merged

Bump the npm-dependencies group in /website with 6 updates#4400
Gedochao merged 1 commit into
mainfrom
dependabot/npm_and_yarn/website/npm-dependencies-617c1d404b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group in /website with 6 updates:

Package From To
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
sass 1.101.0 1.102.0
@svta/cml-cta 1.0.6 1.0.7
@svta/cml-structured-field-values 1.1.3 1.1.4
@svta/cml-utils 1.5.0 1.5.1

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates sass from 1.101.0 to 1.102.0

Release notes

Sourced from sass's releases.

Dart Sass 1.102.0

To install Sass 1.102.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.7

To install Sass 1.101.7, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.6

To install Sass 1.101.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.5

To install Sass 1.101.5, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.4

To install Sass 1.101.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.102.0

  • Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

1.101.7

  • No user-visible changes.

1.101.6

  • No user-visible changes.

1.101.5

  • No user-visible changes.

1.101.4

  • Avoid emitting rgb() or rgba() functions with non-percent decimal channels. Older browsers only support integer values or (potentially decimal) percentages for these functions, so in order to preserve backwards-compatibility while retaining full precision for modern browsers, legacy colors that contain at least one non-integer channel will now use percentages for their channels (for example, rgb(0%, 100%, 50%) rather than rgb(0, 255, 127.5)).

  • Fix a bug where the values of plain-CSS if() expressions were emitted using their meta.inspect() format rather than their CSS serialization format.

1.101.3

  • No user-visible changes.

1.101.2

  • Fix a bug where the deprecation warning for vendor-prefixed expression() functions would incorrectly indicate whether or not the function would be invalid Sass in Dart Sass 2.0.0.

1.101.1

  • Sass stack trace entries are now always either absolute URLs, absolute paths, or paths relative to the current working directory. Previously, if a stylesheet was loaded using a relative URL (as from a load path), that relative URL was listed even if it couldn't be resolved relative to the current working directory. However, this created potential ambiguities, so this behavior has been removed.

Command Line Interface

... (truncated)

Commits

Updates @svta/cml-cta from 1.0.6 to 1.0.7

Release notes

Sourced from @​svta/cml-cta's releases.

@​svta/cml-webvtt v1.0.7

Fixed

  • WebVttTransformStream no longer reads the bare TransformStream global at module scope: importing only non-stream exports is now fully tree-shakeable, and importing the package never throws on runtimes without the Web Streams API. Instantiating WebVttTransformStream on such runtimes throws a descriptive error instead (#382)

@​svta/cml-throughput v1.0.7

Changed

  • Update @svta/cml-utils to 1.5.1

@​svta/cml-dash v1.0.7

Changed

  • Update @svta/cml-utils to 1.5.1

@​svta/cml-cmsd v1.0.7

Changed

  • Update @svta/cml-cta to 1.0.7
  • Update @svta/cml-structured-field-values to 1.1.4
  • Update @svta/cml-utils to 1.5.1

@​svta/cml-cta v1.0.7

Changed

  • Update @svta/cml-utils to 1.5.1
  • Update @svta/cml-structured-field-values to 1.1.4
Commits
  • 6c12ef4 chore: prepare release of 16 packages (#389)
  • ce8aa74 feat(c2pa): support custom continuity methods in manifest-box validation (#379)
  • 01e574e fix: resolve CodeQL alerts for polynomial ReDoS and insecure uuid fallback (#...
  • d8eab69 feat(c2pa): add VOD Merkle segment validation (#378)
  • 3d01b77 chore(deps): resolve all 19 open Dependabot alerts (#387)
  • a486a06 Potential fix for code scanning alert no. 2: Workflow does not contain permis...
  • 9011dca fix: drop eagerly-built module-scope tables from consumer bundles (#384)
  • 5b1f124 fix: guard module-scope reads of web platform globals (#383)
  • abe1065 fix(c2pa): enforce 8-byte offset prefix for the flat v3 manifest-box hash (#381)
  • e2a3e65 fix(c2pa): enforce 8-byte offset prefix for the flat v3 init hash (#380)
  • Additional commits viewable in compare view

Updates @svta/cml-structured-field-values from 1.1.3 to 1.1.4

Release notes

Sourced from @​svta/cml-structured-field-values's releases.

@​svta/cml-structured-field-values v1.1.4

Changed

  • Update @svta/cml-utils to 1.5.1
Commits

Updates @svta/cml-utils from 1.5.0 to 1.5.1

Release notes

Sourced from @​svta/cml-utils's releases.

@​svta/cml-utils v1.5.1

Fixed

  • uuid no longer falls back to Math.random: when crypto.randomUUID is unavailable it derives the UUID from crypto.getRandomValues with RFC 4122 version/variant bits, keeping the blob-URL trick only as a last resort (#388)
Commits
  • 6c12ef4 chore: prepare release of 16 packages (#389)
  • ce8aa74 feat(c2pa): support custom continuity methods in manifest-box validation (#379)
  • 01e574e fix: resolve CodeQL alerts for polynomial ReDoS and insecure uuid fallback (#...
  • d8eab69 feat(c2pa): add VOD Merkle segment validation (#378)
  • 3d01b77 chore(deps): resolve all 19 open Dependabot alerts (#387)
  • a486a06 Potential fix for code scanning alert no. 2: Workflow does not contain permis...
  • 9011dca fix: drop eagerly-built module-scope tables from consumer bundles (#384)
  • 5b1f124 fix: guard module-scope reads of web platform globals (#383)
  • abe1065 fix(c2pa): enforce 8-byte offset prefix for the flat v3 manifest-box hash (#381)
  • e2a3e65 fix(c2pa): enforce 8-byte offset prefix for the flat v3 init hash (#380)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-dependencies group in /website with 6 updates
88341f1 
Bumps the npm-dependencies group in /website with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [sass](https://github.com/sass/dart-sass) | `1.101.0` | `1.102.0` |
| [@svta/cml-cta](https://github.com/streaming-video-technology-alliance/common-media-library) | `1.0.6` | `1.0.7` |
| [@svta/cml-structured-field-values](https://github.com/streaming-video-technology-alliance/common-media-library) | `1.1.3` | `1.1.4` |
| [@svta/cml-utils](https://github.com/streaming-video-technology-alliance/common-media-library) | `1.5.0` | `1.5.1` |


Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `sass` from 1.101.0 to 1.102.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.101.0...1.102.0)

Updates `@svta/cml-cta` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/streaming-video-technology-alliance/common-media-library/releases)
- [Changelog](https://github.com/streaming-video-technology-alliance/common-media-library/blob/main/CHANGELOG.md)
- [Commits](streaming-video-technology-alliance/common-media-library@cta-v1.0.6...cta-v1.0.7)

Updates `@svta/cml-structured-field-values` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/streaming-video-technology-alliance/common-media-library/releases)
- [Changelog](https://github.com/streaming-video-technology-alliance/common-media-library/blob/main/CHANGELOG.md)
- [Commits](streaming-video-technology-alliance/common-media-library@drm-v1.1.3...drm-v1.1.4)

Updates `@svta/cml-utils` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/streaming-video-technology-alliance/common-media-library/releases)
- [Changelog](https://github.com/streaming-video-technology-alliance/common-media-library/blob/main/CHANGELOG.md)
- [Commits](streaming-video-technology-alliance/common-media-library@utils-v1.5.0...utils-v1.5.1)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: sass
  dependency-version: 1.102.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@svta/cml-cta"
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@svta/cml-structured-field-values"
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@svta/cml-utils"
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 27, 2026
@Gedochao
Gedochao merged commit 0c00137 into main Jul 28, 2026
53 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/website/npm-dependencies-617c1d404b branch July 28, 2026 06:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Gedochao Gedochao Gedochao approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Gedochao