deps: bump the npm-patch group with 9 updates by dependabot[bot] · Pull Request #59 · zerox80/RustBlogCMS

dependabot · 2025-12-09T12:09:22Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the npm-patch group with 9 updates:

Package	From	To
dompurify	`3.3.0`	`3.3.1`
i18next	`25.7.1`	`25.7.2`
katex	`0.16.25`	`0.16.27`
react	`19.2.0`	`19.2.1`
react-dom	`19.2.0`	`19.2.1`
@vitejs/plugin-react	`5.1.1`	`5.1.2`
@vitest/coverage-v8	`4.0.14`	`4.0.15`
@vitest/ui	`4.0.14`	`4.0.15`
vite	`7.2.6`	`7.2.7`

Updates dompurify from 3.3.0 to 3.3.1

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.1

Updated ADD_FORBID_CONTENTS setting to extend default list, thanks @MariusRumpf

Updated the ESM import syntax to be more correct, thanks @binhpv

Commits

6fc446a Merge pull request #1175 from cure53/main
3b3bf91 Merge branch 'main' of github.com:cure53/DOMPurify
9863f41 chore: Preparing 3.3.1 release
b4e0295 chore: Preparing 3.3.0 release
077746b build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1170)
4de68bb build(deps): bump actions/checkout from 5 to 6 (#1171)
4c76b6f Use correct ESM import syntax (#1173)
27e8496 Merge pull request #1168 from MariusRumpf/add-forbid-contents
a920096 Add ADD_FORBID_CONTENTS setting to extend default list
ac64660 Merge pull request #1163 from cure53/dependabot/github_actions/actions/setup-...
Additional commits viewable in compare view

Updates i18next from 25.7.1 to 25.7.2

Release notes

Sourced from i18next's releases.

v25.7.2

fix: Invalid overwrite of default value for overloadTranslationOptionHandler 2374.

Changelog

Sourced from i18next's changelog.

25.7.2

fix: Invalid overwrite of default value for overloadTranslationOptionHandler 2374.

Commits

3bd82e3 25.7.2
547c785 fix: Invalid overwrite of default value for overloadTranslationOptionHandler ...
1ea14dd jsr update
See full diff in compare view

Updates katex from 0.16.25 to 0.16.27

Release notes

Sourced from katex's releases.

v0.16.27

0.16.27 (2025-12-07)

Features

support equals sign and surrounding whitespace in \htmlData attribute values (#4112) (c77aaec)

v0.16.26

0.16.26 (2025-12-07)

Bug Fixes

\mathop followed by integral symbol (6fbad18)

Changelog

Sourced from katex's changelog.

0.16.27 (2025-12-07)

Features

support equals sign and surrounding whitespace in \htmlData attribute values (#4112) (c77aaec)

0.16.26 (2025-12-07)

Bug Fixes

\mathop followed by integral symbol (6fbad18)

Commits

cc5eee5 chore(release): 0.16.27 [ci skip]
c77aaec feat: support equals sign and surrounding whitespace in \htmlData attribute v...
9151d5e chore(release): 0.16.26 [ci skip]
6fbad18 fix: \mathop followed by integral symbol
785315c chore(deps): update dependency js-yaml to v4.1.1 [security] (#4106)
See full diff in compare view

Updates react from 19.2.0 to 19.2.1

Release notes

Sourced from react's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

053df4e Version 19.2.1
See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.1

Release notes

Sourced from react-dom's releases.

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

Commits

053df4e Version 19.2.1
See full diff in compare view

Updates @vitejs/plugin-react from 5.1.1 to 5.1.2

Changelog

Sourced from @vitejs/plugin-react's changelog.

5.1.2 (2025-12-08)

Commits

f127a24 release: plugin-react@5.1.2
db1c665 fix(react): newer full bundle mode compat (#1011)
1f372b6 fix(deps): update all non-major dependencies (#1008)
d52455e fix(deps): update react 19.2.1 (#998)
bcda041 fix(deps): update all non-major dependencies (#995)
c80546d fix(deps): update all non-major dependencies (#982)
See full diff in compare view

Updates @vitest/coverage-v8 from 4.0.14 to 4.0.15

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.0.15

   🚀 Experimental Features

cache: Add opt-out on a plugin level, fix internal root cache - by @sheremet-va in vitest-dev/vitest#9154 (a68f7)

reporters: Print import duration breakdown - by @sheremet-va in vitest-dev/vitest#9105 (122ff)

   🐞 Bug Fixes

Keep built-in id as is in bun and deno - by @sheremet-va in vitest-dev/vitest#9117 (075ab)

Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true - by @hi-ogawa in vitest-dev/vitest#9121 (fd8bd)

Fix external behavior with deps.optimizer - by @hi-ogawa in vitest-dev/vitest#9125 (4c754)

Very minor typo in "Chrome DevTools Protocol" - by @HowToTestFrontend in vitest-dev/vitest#9146 (20997)

browser: Run toMatchScreenshot only once when used with expect.element - by @macarie in vitest-dev/vitest#9132 (0d2e7)

coverage: Istanbul provider to not break source maps - by @AriPerkkio in vitest-dev/vitest#9040 (e4ca9)

deps: Update dependency tinyexec to v1 - in vitest-dev/vitest#9122 (fd786)

docs: Remove --browser.provider from docs - by @sheremet-va in vitest-dev/vitest#9115 (120b3)

expect: Preserve currentTestName in extended matchers - by @macarie in vitest-dev/vitest#9106 (e4345)

pool: Terminate workers on CTRL+c forceful exits - by @AriPerkkio in vitest-dev/vitest#9140 (d57d8)

reporters: Show project in github reporter - by @sheremet-va in vitest-dev/vitest#9138 (bb65e)

spy: Do not mock overriden method, if parent was automocked - by @sheremet-va in vitest-dev/vitest#9116 (1a246)

web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native" - by @whitphx in vitest-dev/vitest#9118 (deee8)

    View changes on GitHub

Commits

eb1abf0 chore: release v4.0.15
See full diff in compare view

Updates @vitest/ui from 4.0.14 to 4.0.15

Release notes

Sourced from @vitest/ui's releases.

v4.0.15

   🚀 Experimental Features

cache: Add opt-out on a plugin level, fix internal root cache - by @sheremet-va in vitest-dev/vitest#9154 (a68f7)

reporters: Print import duration breakdown - by @sheremet-va in vitest-dev/vitest#9105 (122ff)

   🐞 Bug Fixes

Keep built-in id as is in bun and deno - by @sheremet-va in vitest-dev/vitest#9117 (075ab)

Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true - by @hi-ogawa in vitest-dev/vitest#9121 (fd8bd)

Fix external behavior with deps.optimizer - by @hi-ogawa in vitest-dev/vitest#9125 (4c754)

Very minor typo in "Chrome DevTools Protocol" - by @HowToTestFrontend in vitest-dev/vitest#9146 (20997)

browser: Run toMatchScreenshot only once when used with expect.element - by @macarie in vitest-dev/vitest#9132 (0d2e7)

coverage: Istanbul provider to not break source maps - by @AriPerkkio in vitest-dev/vitest#9040 (e4ca9)

deps: Update dependency tinyexec to v1 - in vitest-dev/vitest#9122 (fd786)

docs: Remove --browser.provider from docs - by @sheremet-va in vitest-dev/vitest#9115 (120b3)

expect: Preserve currentTestName in extended matchers - by @macarie in vitest-dev/vitest#9106 (e4345)

pool: Terminate workers on CTRL+c forceful exits - by @AriPerkkio in vitest-dev/vitest#9140 (d57d8)

reporters: Show project in github reporter - by @sheremet-va in vitest-dev/vitest#9138 (bb65e)

spy: Do not mock overriden method, if parent was automocked - by @sheremet-va in vitest-dev/vitest#9116 (1a246)

web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native" - by @whitphx in vitest-dev/vitest#9118 (deee8)

    View changes on GitHub

Commits

eb1abf0 chore: release v4.0.15
122ff32 feat(reporters): print import duration breakdown (#9105)
See full diff in compare view

Updates vite from 7.2.6 to 7.2.7

Release notes

Sourced from vite's releases.

v7.2.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.2.7 (2025-12-08)

Bug Fixes

plugin shortcut support (#21211) (721f163)

Commits

317b3b2 release: v7.2.7
721f163 fix: plugin shortcut support (#21211)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-patch group with 9 updates: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.3.0` | `3.3.1` | | [i18next](https://github.com/i18next/i18next) | `25.7.1` | `25.7.2` | | [katex](https://github.com/KaTeX/KaTeX) | `0.16.25` | `0.16.27` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.0` | `19.2.1` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.0` | `19.2.1` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `5.1.1` | `5.1.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.14` | `4.0.15` | | [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.0.14` | `4.0.15` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.2.6` | `7.2.7` | Updates `dompurify` from 3.3.0 to 3.3.1 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.0...3.3.1) Updates `i18next` from 25.7.1 to 25.7.2 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v25.7.1...v25.7.2) Updates `katex` from 0.16.25 to 0.16.27 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.25...v0.16.27) Updates `react` from 19.2.0 to 19.2.1 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react) Updates `react-dom` from 19.2.0 to 19.2.1 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.1/packages/react-dom) Updates `@vitejs/plugin-react` from 5.1.1 to 5.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.2/packages/plugin-react) Updates `@vitest/coverage-v8` from 4.0.14 to 4.0.15 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/coverage-v8) Updates `@vitest/ui` from 4.0.14 to 4.0.15 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/ui) Updates `vite` from 7.2.6 to 7.2.7 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.2.7/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.2.7/packages/vite) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: i18next dependency-version: 25.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: katex dependency-version: 0.16.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: react dependency-version: 19.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: react-dom dependency-version: 19.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: "@vitejs/plugin-react" dependency-version: 5.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: "@vitest/ui" dependency-version: 4.0.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: vite dependency-version: 7.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 9, 2025

zerox80 merged commit e769666 into main Dec 13, 2025
1 check passed

dependabot Bot deleted the dependabot/npm_and_yarn/npm-patch-586d4e33bf branch December 13, 2025 10:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the npm-patch group with 9 updates#59

deps: bump the npm-patch group with 9 updates#59
zerox80 merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-patch-586d4e33bf

dependabot Bot commented on behalf of github Dec 9, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Dec 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DOMPurify 3.3.1

v25.7.2

25.7.2

v0.16.27

0.16.27 (2025-12-07)

Features

v0.16.26

0.16.26 (2025-12-07)

Bug Fixes

0.16.27 (2025-12-07)

Features

0.16.26 (2025-12-07)

Bug Fixes

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.1 (Dec 3, 2025)

React Server Components

5.1.2 (2025-12-08)

v4.0.15

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.0.15

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v7.2.7

7.2.7 (2025-12-08)

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Dec 9, 2025 •

edited

Loading