Skip to content

chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates - #2667

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-a69fa436e4
Open

chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates#2667
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-a69fa436e4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 5 updates in the / directory:

Package From To
@vitest/browser 3.2.4 3.2.7
vitest 4.0.18 4.1.0
defu 6.1.4 6.1.5
esbuild 0.25.12 0.28.1
astro 6.0.8 7.1.0

Updates @vitest/browser from 3.2.4 to 3.2.7

Release notes

Sourced from @​vitest/browser's releases.

v3.2.7

   🐞 Bug Fixes

    View changes on GitHub

v3.2.6

   🐞 Bug Fixes

    View changes on GitHub

v3.2.5

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • c0c203d chore: release v3.2.7 (#10719)
  • b795e36 fix(browser): check fs access in builtin commands [backport to v3] (#10679)
  • b6d56f8 chore: release v3.2.6
  • 2cbad0a chore: release v3.2.5
  • 385a1ae fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • af88b1f feat(api): add allowWrite and allowExec options to api [backport to v3]...
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitest/browser since your current version.


Updates vitest from 4.0.18 to 4.1.0

Release notes

Sourced from vitest's releases.

v4.1.0

Vitest 4.1 is out!

This release page lists all changes made to the project during the 4.1 beta. To get a review of all the new features, read our blog post.

   🚀 Features

... (truncated)

Commits
  • 4150b91 chore: release v4.1.0
  • 1de0aa2 fix: correctly identify concurrent test during static analysis (#9846)
  • c3cac1c fix: use isAgent check, not just TTY, for watch mode (#9841)
  • eab68ba chore(deps): update all non-major dependencies (#9824)
  • 031f02a fix: allow catch/finally for async assertion (#9827)
  • 3e9e096 feat(reporters): add agent reporter to reduce ai agent token usage (#9779)
  • 0c2c013 chore: release v4.1.0-beta.6
  • 8181e06 fix: hideSkippedTests should not hide test.todo (fix #9562) (#9781)
  • a8216b0 fix: manual and redirect mock shouldn't load or transform original module...
  • 689a22a fix(browser): types of getCDPSession and cdp() (#9716)
  • Additional commits viewable in compare view

Updates defu from 6.1.4 to 6.1.5

Release notes

Sourced from defu's releases.

v6.1.5

compare changes

🩹 Fixes

  • Prevent prototype pollution via __proto__ in defaults (#156)
  • Ignore inherited enumerable properties (11ba022)

✅ Tests

  • Add more tests for plain objects (b65f603)

❤️ Contributors

Changelog

Sourced from defu's changelog.

v6.1.5

compare changes

🩹 Fixes

  • Prevent prototype pollution via __proto__ in defaults (#156)
  • Ignore inherited enumerable properties (11ba022)

🏡 Chore

✅ Tests

  • Add more tests for plain objects (b65f603)

🤖 CI

❤️ Contributors

Commits
  • 23e59e6 chore(release): v6.1.5
  • 11ba022 fix: ignore inherited enumerable properties
  • 3942bfb fix: prevent prototype pollution via __proto__ in defaults (#156)
  • d3ef16d chore(deps): update actions/checkout action to v6 (#151)
  • 869a053 chore(deps): update actions/setup-node action to v6 (#149)
  • a97310c chore(deps): update codecov/codecov-action action to v6 (#154)
  • 89df6bb chore: fix typecheck
  • 9237d9c ci: bump node
  • 23cc432 chore: update repo
  • 70cffe5 chore: add tea.yaml
  • Additional commits viewable in compare view

Updates esbuild from 0.25.12 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to @​dellalibera for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

    Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

    Thanks to @​sondt99 for reporting this issue.

  • Avoid inlining using and await using declarations (#4482)

    Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

    // Original code
{
  using x = new Resource()
  x.activate()
}
// Old output (with --minify)
new Resource().activate();
// New output (with --minify)
{using e=new Resource;e.activate()}

  • Fix module evaluation when an error is thrown (#4461, #4467)

    If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

  • Fix some edge cases around the new operator (#4477)

    Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

    // Original code
new (foo()`bar`)()
new (foo()?.bar)()
// Old output
new foo()bar();
new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2

  • Allow import path specifiers starting with #/ (#4361)

    Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

    This change was contributed by @​hybrist.

  • Automatically add the -webkit-mask prefix (#4357, #4358)

    This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

    /* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}

    This change was contributed by @​BPJEnnova.

  • Additional minification of switch statements (#4176, #4359)

    This release contains additional minification patterns for reducing switch statements. Here is an example:

    // Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.


Updates astro from 6.0.8 to 7.1.0

Release notes

Sourced from astro's releases.

astro@7.1.0

Minor Changes

  • #17302 5f4dc03 Thanks @​astrobot-houston! - Adds a new deferRender option to the glob() content loader

    When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

    This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.

    // src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});

    By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.

  • #17296 30698a2 Thanks @​ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

    By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

    Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: 'chunked',
},
});

    Because each part file is named by a hash of its contents, unchanged parts keep the same name across builds and are not rewritten, and identical parts are deduplicated. The default value is 'single-file', which preserves the current behavior.

  • #17214 44c4989 Thanks @​ematipico! - Adds support for the more specific CSP directives script-src-elem, script-src-attr, style-src-elem, and style-src-attr through a new kind option.

    Previously, CSP was only scoped to generic script-src/style-src directives. Now each source or hash can be scoped to a narrower directive — for example, to allow inline style attributes (such as those from define:vars or Shiki) without loosening the policy for your <style> and <link> elements.

    Scoping sources and hashes in your config

    Each entry in resources and hashes can be an object with a kind property. Depending on whether you use scriptDirective or styleDirective, "element" targets script-src-elem or style-src-elem, "attribute" targets script-src-attr or style-src-attr, and "default" (the same as a bare string or hash) targets script-src or style-src.

    // astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.0

Minor Changes

  • #17302 5f4dc03 Thanks @​astrobot-houston! - Adds a new deferRender option to the glob() content loader

    When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

    This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.

    // src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});

    By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.

  • #17296 30698a2 Thanks @​ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

    By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

    Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: 'chunked',
},
});

    Because each part file is named by a hash of its contents, unchanged parts keep the same name across builds and are not rewritten, and identical parts are deduplicated. The default value is 'single-file', which preserves the current behavior.

  • #17214 44c4989 Thanks @​ematipico! - Adds support for the more specific CSP directives script-src-elem, script-src-attr, style-src-elem, and style-src-attr through a new kind option.

    Previously, CSP was only scoped to generic script-src/style-src directives. Now each source or hash can be scoped to a narrower directive — for example, to allow inline style attributes (such as those from define:vars or Shiki) without loosening the policy for your <style> and <link> elements.

    Scoping sources and hashes in your config

    Each entry in resources and hashes can be an object with a kind property. Depending on whether you use scriptDirective or styleDirective, "element" targets script-src-elem or style-src-elem, "attribute" targets script-src-attr or style-src-attr, and "default" (the same as a bare string or hash) targets script-src or style-src.

    

    • 






... (truncated)





Commits






Updates h3 from 1.15.5 to 1.15.11



Release notes

Sourced from h3's releases.




v1.15.11


compare changes


🏡 Chore



v1.15.10


compare changes


🩹 Fixes


    

  • Preserve percent-encoded req.url in app event handler (#1355)
    • 



❤️ Contributors



v1.15.9


compare changes


🩹 Fixes


    

  • Preserve %25 in pathname (1103df6)
    • 

  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
    • 

  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)
    • 



v1.15.8


compare changes


🩹 Fixes


    

  • Preserve %25 in pathname (1103df6)
    • 



v1.15.7


compare changes


🩹 Fixes


    

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
    • 

  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)
    • 



💅 Refactors


    

  • Remove implicit event handler conversion warning (#1340)
    • 



❤️ Contributors





... (truncated)





Changelog

Sourced from h3's changelog.




v1.15.11


compare changes


🏡 Chore



❤️ Contributors



v1.15.10


compare changes


🩹 Fixes


    

  • Preserve percent-encoded req.url in app event handler (#1355)
    • 



🏡 Chore



❤️ Contributors



v1.15.9


compare changes


🩹 Fixes


    

  • Preserve %25 in pathname (1103df6)
    • 

  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
    • 

  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)
    • 



🏡 Chore



❤️ Contributors






... (truncated)





Commits






Updates js-yaml from 3.14.2 to 3.15.0



Changelog

Sourced from js-yaml's changelog.




4.3.0, 3.15.0 - 2026-06-27


Security


    

  • Backported maxTotalMergeKeys option.
    • 



[5.2.0] - 2026-06-26


Added


    

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of
keys processed by YAML merge (<<) across one load() / loadAll() call.
    • 

  • Added maxAliases (-1) loader option to limit the number of YAML aliases per
document.
    • 



Removed


    

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge
processing.
    • 



Fixed


    

  • Round-trip of integers with exponential form (>= 1e21)
    • 



[5.1.0] - 2026-06-23


Added


    

  • Collection tags can finalize an incrementally populated carrier into a
different result value.
    • 



Changed


    

  • [breaking] quoteStyle now selects the preferred quote style; use the
restored forceQuotes option to force quoting non-key strings.
    • 



[5.0.0] - 2026-06-20


Added


    

  • Added named exports for schemas, tags, parser events and AST utilities.
    • 

  • Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution
rules, and added YAML11_SCHEMA.
    • 

  • Added realMapTag for lossless mappings with non-string and complex keys.
Object-based mappings now reject complex keys instead of stringifying them.
    • 

  • Added dump() transform option for changing the generated AST before
rendering.
    • 

  • Added dump() options seqInlineFirst, flowBracketPadding,
flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and
tagBeforeAnchor.
    • 

  • Added formal data layers (events and AST) for modular data pipelines.

      

    • Added low-level parser (to events), presenter and visitor APIs.
      • 

    

    • 

  • Added the YAML Test Suite to the
test set.
    • 



Changed


    

  • See the migration guide for upgrade notes.
    • 

  • Rewritten in TypeScript and reorganized the public API around flat named
exports.
    • 






... (truncated)





Commits





    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Jun 30, 2026

    

  



  

  
  

  
    

        

              


        

      

            Copilot
AI

              review requested due to automatic review settings


        June 30, 2026 11:16        
        
      

    





    

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Jun 30, 2026

    

  








      

  
        

  

        

          
            
          

            
    

          

          

            

              
                  Copilot
AI

              

              reviewed


              
                  
                    Jun 30, 2026
                  
              
              
            


            



            

          

        


          

  
  
  
              

                      

  

    

      
          
            
      

      
          Copilot
AI

      

      

      left a comment





      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        



        

    

  



                  

                      

  

  
 

  
    

    
Choose a reason for hiding this comment


    

      The reason will be displayed to describe this comment to others. Learn more.
    


    

      
      



  



  
    

      
Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

      
    

  
  




                    

                  
  
  

    
  
    
    

  

  

  



                      

                    
                  








      

  
  
  




  








      

  
      



  

  @github-actions






  



    

      

  

    

      
          
      

      
            github-actions
  Bot

      

      

      commented


        Jun 30, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          
pkg.pr.new


packages

Ready to be installed by your favorite package manager ⬇️


https://pkg.pr.new/software-mansion/TypeGPU/eslint-plugin-typegpu@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/tgpu-gen@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/tinyest-for-wgsl@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/typegpu@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/cli@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/color@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/gl@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/noise@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/radiance-cascades@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/react@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/sdf@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/three@32d4dab3a87917861f1e78955aa08703813f8d60



https://pkg.pr.new/software-mansion/TypeGPU/unplugin-typegpu@32d4dab3a87917861f1e78955aa08703813f8d60



benchmark

view benchmark


commit

view commit


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
      



  

  @github-actions






  



    

      

  

    

      
          
      

      
            github-actions
  Bot

      

      

      commented


        Jun 30, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          

Bundle size comparison (import * as ... in PR vs import * as ... in target):






🟢 Decreased
➖ Unchanged
🔴 Increased
❔ Unknown






0
322
0
0






import { ... } in PR vs import * as ... in PR (is the library tree-Shakeable?):






Test
tsdown






tgpu_init.ts
258.90 kB ($${\color{green}-3.2\%}$$)




tgpu_initFromDevice.ts
258.39 kB ($${\color{green}-3.4\%}$$)




tgpu_resolve.ts
164.59 kB ($${\color{green}-38.5\%}$$)




tgpu_resolveWithContext.ts
164.53 kB ($${\color{green}-38.5\%}$$)




tgpu_bindGroupLayout.ts
68.97 kB ($${\color{green}-74.2\%}$$)




tgpu_mutableAccessor.ts
65.97 kB ($${\color{green}-75.3\%}$$)




tgpu_accessor.ts
65.96 kB ($${\color{green}-75.3\%}$$)




tgpu_privateVar.ts
65.31 kB ($${\color{green}-75.6\%}$$)




tgpu_workgroupVar.ts
65.30 kB ($${\color{green}-75.6\%}$$)




tgpu_const.ts
64.55 kB ($${\color{green}-75.9\%}$$)




tgpu_fn.ts
38.14 kB ($${\color{green}-85.7\%}$$)




tgpu_fragmentFn.ts
38.14 kB ($${\color{green}-85.7\%}$$)




tgpu_vertexFn.ts
37.96 kB ($${\color{green}-85.8\%}$$)




tgpu_computeFn.ts
37.66 kB ($${\color{green}-85.9\%}$$)




tgpu_vertexLayout.ts
26.79 kB ($${\color{green}-90.0\%}$$)




tgpu_comptime.ts
14.48 kB ($${\color{green}-94.6\%}$$)




tgpu_unroll.ts
1.66 kB ($${\color{green}-99.4\%}$$)




tgpu_slot.ts
1.54 kB ($${\color{green}-99.4\%}$$)




tgpu_lazy.ts
1.19 kB ($${\color{green}-99.6\%}$$)






If you wish to run a comparison for other, slower bundlers, run the 'Tree-shake test' from the GitHub Actions menu.


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
      



  

  @github-actions






  



    

      

  

    

      
          
      

      
            github-actions
  Bot

      

      

      commented


        Jun 30, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          

Resolution Time Benchmark



  

    

      
---
config:
  themeVariables:
    xyChart:
      plotColorPalette: "#E63946, #3B82F6, #059669"
---
xychart
  title "Random Branching (🔴 PR | 🔵 main | 🟢 release)"
  x-axis "max depth" [1, 2, 3, 4, 5, 6, 7, 8]
  y-axis "time (ms)"
  line [0.99, 2.09, 4.70, 6.59, 7.76, 13.59, 23.87, 25.86]
  line [0.97, 2.02, 4.99, 6.95, 8.31, 13.95, 24.44, 26.98]
  line [1.00, 2.15, 4.58, 7.00, 8.04, 12.61, 24.48, 26.90]


    

  

  
    
      Loading

  





  

    

      
---
config:
  themeVariables:
    xyChart:
      plotColorPalette: "#E63946, #3B82F6, #059669"
---
xychart
  title "Linear Recursion (🔴 PR | 🔵 main | 🟢 release)"
  x-axis "max depth" [1, 2, 3, 4, 5, 6, 7, 8]
  y-axis "time (ms)"
  line [0.32, 0.55, 0.73, 0.88, 1.23, 1.25, 1.59, 1.69]
  line [0.33, 0.53, 0.70, 0.88, 1.19, 1.30, 1.51, 1.67]
  line [0.39, 0.63, 0.79, 0.90, 1.20, 1.32, 1.57, 1.69]


    

  

  
    
      Loading

  





  

    

      
---
config:
  themeVariables:
    xyChart:
      plotColorPalette: "#E63946, #3B82F6, #059669"
---
xychart
  title "Full Tree (🔴 PR | 🔵 main | 🟢 release)"
  x-axis "max depth" [1, 2, 3, 4, 5, 6, 7, 8]
  y-axis "time (ms)"
  line [0.84, 2.21, 4.63, 7.09, 13.06, 26.63, 59.07, 119.46]
  line [0.87, 2.26, 4.34, 7.03, 12.97, 28.70, 58.70, 119.64]
  line [0.93, 2.35, 4.23, 7.74, 13.62, 27.83, 59.71, 128.10]


    

  

  
    
      Loading

  




      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/npm_and_yarn-a69fa436e4


    
 branch
      2 times, most recently
    from
    d4691e7    to
    ef44a11      
    Compare
  



        June 30, 2026 16:53        
        
      

    





  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/npm_and_yarn-a69fa436e4


    
 branch
    from
    ef44a11    to
    0670fe8      
    Compare
  



        July 21, 2026 14:25        
        
      

    










      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the npm_and_yarn group across 1 directory with 7 up…
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          32d4dab
        
      

    

  

    

      
…dates

Bumps the npm_and_yarn group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `3.2.4` | `3.2.7` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.0` |
| [defu](https://github.com/unjs/defu) | `6.1.4` | `6.1.5` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.12` | `0.28.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.0.8` | `7.1.0` |



Updates `@vitest/browser` from 3.2.4 to 3.2.7
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.7/packages/browser)

Updates `vitest` from 4.0.18 to 4.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)

Updates `defu` from 6.1.4 to 6.1.5
- [Release notes](https://github.com/unjs/defu/releases)
- [Changelog](https://github.com/unjs/defu/blob/main/CHANGELOG.md)
- [Commits](unjs/defu@v6.1.4...v6.1.5)

Updates `esbuild` from 0.25.12 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](evanw/esbuild@v0.25.12...v0.28.1)

Updates `astro` from 6.0.8 to 7.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.0/packages/astro)

Updates `h3` from 1.15.5 to 1.15.11
- [Release notes](https://github.com/h3js/h3/releases)
- [Changelog](https://github.com/h3js/h3/blob/v1.15.11/CHANGELOG.md)
- [Commits](h3js/h3@v1.15.5...v1.15.11)

Updates `js-yaml` from 3.14.2 to 3.15.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.2...3.15.0)

---
updated-dependencies:
- dependency-name: "@vitest/browser"
  dependency-version: 3.2.5
  dependency-type: direct:development
- dependency-name: astro
  dependency-version: 6.4.6
  dependency-type: direct:production
- dependency-name: defu
  dependency-version: 6.1.5
  dependency-type: direct:production
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:development
- dependency-name: h3
  dependency-version: 1.15.11
  dependency-type: indirect
- dependency-name: js-yaml
  dependency-version: 3.15.0
  dependency-type: indirect
- dependency-name: vitest
  dependency-version: 4.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
          

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/npm_and_yarn-a69fa436e4


    
 branch
    from
    0670fe8    to
    32d4dab      
    Compare
  



        July 26, 2026 10:52        
        
      

    














  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    


      

  

    


  
      Copilot code review
      
        
      
  
    Copilot


    
      
        
      
    
    Copilot left review comments





      





  




    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      1 participant