chore(deps): bump the minor-and-patch group with 13 updates by dependabot[bot] · Pull Request #382 · u8array/ZPLab

dependabot · 2026-08-18T18:08:37Z

Bumps the minor-and-patch group with 13 updates:

Package	From	To
konva	`10.3.0`	`10.3.1`
papaparse	`5.5.4`	`5.6.0`
zustand	`5.0.14`	`5.0.15`
@napi-rs/canvas	`1.0.3`	`1.0.6`
@testing-library/user-event	`14.6.1`	`14.6.4`
@types/node	`26.1.2`	`26.2.0`
eslint	`10.8.0`	`10.8.1`
eslint-plugin-react-refresh	`0.5.3`	`0.5.4`
globals	`17.8.0`	`17.11.0`
typescript-eslint	`8.65.0`	`8.67.0`
vite	`8.2.0`	`8.2.1`
esbuild	`0.28.1`	`0.28.2`
tsx	`4.23.1`	`4.23.12`

Updates konva from 10.3.0 to 10.3.1

Release notes

Sourced from konva's releases.

10.3.1

Bug Fixes

Path: return last point for getPointAtLength past a closed path #2053 (Yarchik)

Arc.getSelfRect() reports a full circle for a zero-degree clockwise arc #2054 (Alexander Kireev)

Shape: respect imageSmoothingEnabled for fillPatternImage #2055 (MarkXian)

Util: preserve alpha of the named color "transparent" #2056 (Yarchik)

Util: parse rgb() components written as percentages #2057 (jaybhade)

Util: colorToRGBA() fails to parse non-integer HSL hue #2059 (Xuepoo)

Line: getSelfRect wrong for multi-segment bezier and degenerate-derivative segments #2061 (Xuepoo)

Line: avoid NaN control points on closed tensioned lines with coincident points #2062 (rajanpanth)

Line: guard the zero-distance case inside getControlPoints (Anton Lavrevov)

Line: cover joints and near-degenerate derivatives in bezier bounds (Anton Lavrevov)

Path: exact getSelfRect bounds for quadratic segments (Anton Lavrevov)

Line: exact getSelfRect bounds for lines with a tension (Anton Lavrevov)

Code Refactoring

Line: write the control point distance sum once (Anton Lavrevov)

Performance Improvements

Text: hoist stringToArray(line) out of _setTextData binary search #2044 (Damian Frizzi)

Continuous Integration

remove the formatting check (Anton Lavrevov)

Commits

b5c7a83: Fix ValidatorFunc Type Mistake (foolishflyfox) #1998

ecdf162: Improve Transformer performance with many attached nodes (Anton Lavrevov)

976a63a: Add Transformer perf invariant tests; widen autoDraw suspension (Anton Lavrevov)

7b3cf3b: Simplify a bit (Anton Lavrevov)

a203de9: sandbox (Anton Lavrevov)

6e4025c: clear (Anton Lavrevov)

b92018b: Merge branch 'master' of github.com:konvajs/konva (Anton Lavrevov)

bc123b3: Declare canvas and skia-canvas as optional peer dependencies (Anton Lavrevov)

ed1e0cc: Skip pattern smoothing sanity check on skia-canvas (Anton Lavrevov)

f9bd818: Report full circle for any full-turn angle in Arc.getSelfRect (Anton Lavrevov)

dd90ff4: Merge pull request #2054: fix Arc.getSelfRect for full-turn angles (Anton Lavrevov)

4f8e1a8: color parsing fixes, fix some color values. close #2063, close #2064 (Anton Lavrevov)

4ebadaf: Merge branch 'master' into fix/line-tension-nan (Anton Lavrevov) #2062

Line NaN bounding rect fix (Anton Lavrevov)

cover all unreleased changes since 10.3.0 (Anton Lavrevov)

c7145cc: Merge branch 'master' into fix/line-bezier-selfrect (Anton Lavrevov) #2061

d2b96f5: fix(Line,Path): share one exact solver for cubic bezier bounds (Anton Lavrevov)

9e8a106: update CHANGELOG with new version (Anton Lavrevov)

fb706a2: build for 10.3.1 (Anton Lavrevov)

fad321d: update cdn link (Anton Lavrevov)

Changelog

Sourced from konva's changelog.

10.3.1 (2026-08-14)

Added hsla() support and the space-separated CSS Color 4 syntax to Konva.Util.colorToRGBA()

Declared canvas and skia-canvas as optional peer dependencies, so the node backends resolve under strict package managers

Improved Transformer performance with many attached nodes

Improved Text performance when a long text is resized

Path.getSelfRect() now solves the bounds of a cubic segment exactly instead of sampling it at 100 points. Reported boxes get slightly larger and more accurate, and the calculation is about 9 times faster

Line.getSelfRect() now solves the bounds of a line with a tension exactly, instead of using the box around its tension control points. Reported boxes get smaller and tighter, by about 19% of their area on a typical line

Path.getSelfRect() now also solves the bounds of a quadratic segment (Q, q, T and t) exactly, instead of using the box around its control points. Reported boxes get smaller and tighter

A tween of a color that Konva can not parse now throws a clear error

Fixed several wrong named color values: darkgoldenrod, floralwhite, plum, slategray, slategrey, snow and yellowgreen

Fixed the alpha of the named color transparent, so a tween to or from it fades again

Fixed rgb() colors with percentage components

Fixed hsl() colors with a non-integer hue or extra whitespace

Fixed fillPatternImage ignoring imageSmoothingEnabled

Fixed Arc.getSelfRect() for a zero-degree clockwise arc and for any full-turn angle

Fixed Path.getPointAtLength() returning undefined past the end of a closed path

Fixed NaN bounding rect on a closed Line with a tension and coincident points

Fixed getSelfRect() on a Line with bezier: true, which read only the first curve segment and could report a box of zero height

Fixed the ValidatorFunc type used by custom Factory validators

Commits

fad321d update cdn link
fb706a2 build for 10.3.1
9e8a106 update CHANGELOG with new version
4d01846 fix(Line): exact getSelfRect bounds for lines with a tension
5a23ece fix(Path): exact getSelfRect bounds for quadratic segments
407afa0 Merge pull request #2061 from Xuepoo/fix/line-bezier-selfrect
74af42d ci: remove the formatting check
d2b96f5 fix(Line,Path): share one exact solver for cubic bezier bounds
8282116 fix(Line): cover joints and near-degenerate derivatives in bezier bounds
c7145cc Merge branch 'master' into fix/line-bezier-selfrect
Additional commits viewable in compare view

Updates papaparse from 5.5.4 to 5.6.0

Release notes

Sourced from papaparse's releases.

5.6.0

We are happy to annunce a new minor release of PapaParse.

This release includes the following change:

Remove jQuery as dependency (#1137)

Thanks @Kocayilmaz for contributing it

Changelog

Sourced from papaparse's changelog.

5.6.0

Features

Remove the optional jQuery plugin integration (#1137)

5.5.5

Bug Fixes

Improve automatic delimiter detection by prioritizing row consistency over field count (#1128, #1077)

Serialize dates with Date.toISOString(), preserving expanded years and writing invalid dates as empty fields (#1140)

Commits

bc382b7 Minor version bump
059e656 Patch version bump
62cf0b1 Remove jQuery plugin integration (#1137)
c391b65 Simplify comment
0b9b708 Patch version bump
3e86ccf serialize Dates with toISOString() (#1140)
4eb7eaf fix guess delimiter by row consistency before field count (#1128)
See full diff in compare view

Updates zustand from 5.0.14 to 5.0.15

Release notes

Sourced from zustand's releases.

v5.0.15

Fix some issues in devtools and persist middleware.

What's Changed

fix(devtools): correct V8 stack regex when source path contains spaces by @dai-shi with @Copilot in pmndrs/zustand#3531

fix(persist): clearStorage() should invalidate concurrent async rehydration by @dai-shi with @Copilot in pmndrs/zustand#3555

Full Changelog: pmndrs/zustand@v5.0.14...v5.0.15

Commits

2115efb v5.0.15
1f531ba chore(deps): update dev dependencies (#3560)
aa6d2a1 docs: add zustand-devtools-bridge (#3559)
3febf8c fix(persist): clearStorage() should invalidate concurrent async rehydration (...
f44cecc fix(devtools): correct V8 stack regex when source path contains spaces (#3531)
beca84e fix: update broken README links from docs/guides/ to docs/learn/guides/ (#3542)
038f496 docs(persist): clarify createJSONStorage behavior and warn about production u...
a1f685c docs: fix missing code highlights in tic-tac-toe tutorial (#3527)
07cee61 docs: fix missing highlight on setXIsNext line in tic-tac-toe tutorial (#3524)
566b5bf Fix dead link in README.md: update immer guide path (#3519)
Additional commits viewable in compare view

Updates @napi-rs/canvas from 1.0.3 to 1.0.6

Release notes

Sourced from @napi-rs/canvas's releases.

v1.0.6

What's Changed

fix: keep skia surface alive during async encode (#1312) by @Brooooooklyn in Brooooooklyn/canvas#1314

Full Changelog: Brooooooklyn/canvas@v1.0.5...v1.0.6

v1.0.5

What's Changed

chore(deps): lock file maintenance by @renovate[bot] in Brooooooklyn/canvas#1307

fix: prefer raster signatures over SVG markers by @Brooooooklyn in Brooooooklyn/canvas#1310

fix: reject malformed raster images by @Brooooooklyn in Brooooooklyn/canvas#1311

Full Changelog: Brooooooklyn/canvas@v1.0.4...v1.0.5

v1.0.4

What's Changed

chore(deps): update yarn to v4.18.0 by @renovate[bot] in Brooooooklyn/canvas#1303

fix(shadow): restore blur rendering performance by @Brooooooklyn in Brooooooklyn/canvas#1305

chore(deps): lock file maintenance by @renovate[bot] in Brooooooklyn/canvas#1306

Full Changelog: Brooooooklyn/canvas@v1.0.3...v1.0.4

Changelog

Sourced from @napi-rs/canvas's changelog.

1.0.6 (2026-08-13)

Bug Fixes

keep skia surface alive during async encode (#1312) (#1314) (6be5aa2)

1.0.5 (2026-08-09)

Bug Fixes

prefer raster signatures over SVG markers (#1310) (79c5d30)

reject malformed raster images (#1311) (f471b85)

1.0.4 (2026-08-01)

Bug Fixes

shadow: restore blur rendering performance (#1305) (4dddd0d)

Commits

25ed3f2 1.0.6
6be5aa2 fix: keep skia surface alive during async encode (#1312) (#1314)
e719be9 1.0.5
a8e5416 chore: update @napi-rs/cli
f471b85 fix: reject malformed raster images (#1311)
79c5d30 fix: prefer raster signatures over SVG markers (#1310)
95ec667 chore(deps): lock file maintenance (#1307)
4502cd7 1.0.4
2506ed7 chore(deps): lock file maintenance (#1306)
4dddd0d fix(shadow): restore blur rendering performance (#1305)
Additional commits viewable in compare view

Updates @testing-library/user-event from 14.6.1 to 14.6.4

Release notes

Sourced from @testing-library/user-event's releases.

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

keyboard event repeat property (#1312) (d7e80e3)

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

release: manually release a patch version (#1321) (1d18b1f), closes #1317

v14.6.2

14.6.2 (2026-08-03)

Commits

d7e80e3 fix: keyboard event repeat property (#1312)
43d8e6c ci: remove broken npm backfill step (#1322)
1d18b1f fix(release): manually release a patch version (#1321)
232f3e6 docs: add migration note and clean up README badges (#1320)
83e2b22 ci: remove deprecated CodeSandbox CI (#1318)
e8da819 ci: publish to npm via OIDC trusted publishing (#1317)
13fa4bc ci: stop lint errors from blocking release (#1316)
c3cec18 chore(ci): make releases work with full git history (#1315)
ebab6c6 add Liadshiran as a contributor for doc (#1300)
ec470bf docs: fix wrong default enum value (#1298)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @testing-library/user-event since your current version.

Updates @types/node from 26.1.2 to 26.2.0

Commits

See full diff in compare view

Updates eslint from 10.8.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)

151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)

6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)

4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)

677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)

0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)

678c90b docs: Update README (GitHub Actions Bot)

8a10424 docs: Update README (GitHub Actions Bot)

69bb948 docs: Update README (GitHub Actions Bot)

Chores

0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])

05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)

5611035 test: add error locations info to no-void (#21185) (Lee Daeun)

ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])

f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)

1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)

d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)

65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)

22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)

55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])

7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])

eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)

60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)

f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)

d086293 test: add error locations to no-undef (#21147) (JIYEON)

cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)

688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)

7c1e175 test: add error locations to require-await (#21145) (Grit)

588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)

059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)

5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

Commits

c049dc3 10.8.1
a3f7826 Build: changelog update for 10.8.1
18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173)
0a14800 chore: update github/codeql-action action to v4.37.4 (#21196)
7d0cbf8 docs: Update README
05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191)
5611035 test: add error locations info to no-void (#21185)
ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176)
f131c03 chore: improve ecosystem test failure reporting (#20937)
0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183)
Additional commits viewable in compare view

Updates eslint-plugin-react-refresh from 0.5.3 to 0.5.4

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.4

Add instant to allowExportNames in Next config #112

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.4

Add instant to allowExportNames in Next config #112

Commits

e316617 [publish] Add instant to allowExportNames in Next config (#112)
See full diff in compare view

Updates globals from 17.8.0 to 17.11.0

Release notes

Sourced from globals's releases.

v17.11.0

Add react-native globals (#337) 61eafbf

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

Add GM_cookie to Greasemonkey globals (#349) f468407

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

Update globals (2026-08-01) (#348) 5a958ed

sindresorhus/globals@v17.8.0...v17.9.0

Commits

8c59927 17.11.0
61eafbf Add react-native globals (#337)
7bed4af 17.10.0
f468407 Add GM_cookie to Greasemonkey globals (#349)
8e7b935 17.9.0
5a958ed Update globals (2026-08-01) (#348)
See full diff in compare view

Updates typescript-eslint from 8.65.0 to 8.67.0

Release notes

Sourced from typescript-eslint's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

Evyatar Daud @StyleShit

Kirk Waiblinger @kirkwaiblinger

Steffen Schroeder

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Claude Sonnet 5

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

20a261f chore(release): publish 8.67.0
c245fbb feat(typescript-eslint): export basic globs for using tseslint (#12105)
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
See full diff in compare view

Updates vite from 8.2.0 to 8.2.1

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.1 (2026-08-06)

Bug Fixes

build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)

bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)

css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)

deps: update all non-major dependencies (#23136) (14454fd)

deps: update rolldown-related dependencies (#23070) (7ac6f7f)

don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)

handle shebang ending with uncommon line terminators (#23038) (17f7b2f)

server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

css: look up pure CSS chunks through a Set (#23114) (1331b0b)

Documentation

build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)

deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)

bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

bundled-dev: enable sourcemap playgrounds (#23080) (c2155fe)

reduce logs (#23138) (7673c02)

Commits

4216158 release: v8.2.1
fddf4ea fix(server): use a random port when port is 0 (#23158)
de041a7 fix(css): don't re-run lightningcss visitor during minify (fix #23146) (#23147)
15f0307 fix(build): make client chunkImportMap work with sharedPlugins: true (#23184)
c2155fe test(bundled-dev): enable sourcemap playgrounds (#23080)
ef02435 docs(build): fix incomplete @default for build.minify (#23177)
eac0cc8 fix(bundled-dev): inject client script tag before chunk scripts (#23161)
23b8a08 refactor(bundled-dev): avoid injecting server values in the bundle (#22967)
e72036e refactor(bundled-dev): remove rolldown lazy stub module workaround (#23129)
14454fd fix(deps): update all non-major dependencies (#23136)
Additional commits viewable in compare view

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2
Fix tree shaking bug due to TypeScript import alias (#4507)

This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:
import Base from './dep.js';
import Alias = Base.SomeType;
Fix CSS minification bug involving & (#4497)

This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:
/* Original code */
.a .b {
 & .b:not(& .c) {
 color: red;
 }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}
This should match yes but not no. The old output incorrectly matched both.
Avoid overwriting input files without --allow-overwrite (#4484)

For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

Fix incorrect code generated when using top-level await (#4498)

Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.
Fix a minification bug with lowered logical assignment operators (#4508)

This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:
// Original code
function foo() {
 let x
 bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2
Fix tree shaking bug due to TypeScript import alias (#4507)

This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:
import Base from './dep.js';
import Alias = Base.SomeType;
Fix CSS minification bug involving & (#4497)

This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:
/* Original code */
.a .b {
 & .b:not(& .c) {
 color: red;
 }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}
This should match yes but not no. The old output incorrectly matched both.
Avoid overwriting input files without --allow-overwrite (#4484)

For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

...
Description has been truncated

Bumps the minor-and-patch group with 13 updates: | Package | From | To | | --- | --- | --- | | [konva](https://github.com/konvajs/konva) | `10.3.0` | `10.3.1` | | [papaparse](https://github.com/mholt/PapaParse) | `5.5.4` | `5.6.0` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` | | [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `1.0.3` | `1.0.6` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.2` | `26.2.0` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.4` | | [globals](https://github.com/sindresorhus/globals) | `17.8.0` | `17.11.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.67.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.2.1` | | [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.12` | Updates `konva` from 10.3.0 to 10.3.1 - [Release notes](https://github.com/konvajs/konva/releases) - [Changelog](https://github.com/konvajs/konva/blob/master/CHANGELOG.md) - [Commits](konvajs/konva@v10.3.0...10.3.1) Updates `papaparse` from 5.5.4 to 5.6.0 - [Release notes](https://github.com/mholt/PapaParse/releases) - [Changelog](https://github.com/mholt/PapaParse/blob/master/CHANGELOG.md) - [Commits](mholt/PapaParse@5.5.4...5.6.0) Updates `zustand` from 5.0.14 to 5.0.15 - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.14...v5.0.15) Updates `@napi-rs/canvas` from 1.0.3 to 1.0.6 - [Release notes](https://github.com/Brooooooklyn/canvas/releases) - [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md) - [Commits](Brooooooklyn/canvas@v1.0.3...v1.0.6) Updates `@testing-library/user-event` from 14.6.1 to 14.6.4 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.1...v14.6.4) Updates `@types/node` from 26.1.2 to 26.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.8.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.8.1) Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.4 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.4) Updates `globals` from 17.8.0 to 17.11.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.8.0...v17.11.0) Updates `typescript-eslint` from 8.65.0 to 8.67.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/typescript-eslint) Updates `vite` from 8.2.0 to 8.2.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite) Updates `esbuild` from 0.28.1 to 0.28.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.28.1...v0.28.2) Updates `tsx` from 4.23.1 to 4.23.12 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.1...v4.23.12) --- updated-dependencies: - dependency-name: konva dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: papaparse dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: zustand dependency-version: 5.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@napi-rs/canvas" dependency-version: 1.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@testing-library/user-event" dependency-version: 14.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: globals dependency-version: 17.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.67.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: esbuild dependency-version: 0.28.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 18, 2026

Navigation Menu

chore(deps): bump the minor-and-patch group with 13 updates - #382

chore(deps): bump the minor-and-patch group with 13 updates#382
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-74032a0112

dependabot Bot commented on behalf of github Aug 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 18, 2026

10.3.1

Bug Fixes

Code Refactoring

Performance Improvements

Continuous Integration

Commits

10.3.1 (2026-08-14)

5.6.0

5.6.0

Features

5.5.5

Bug Fixes

v5.0.15

What's Changed

v1.0.6

What's Changed

v1.0.5

What's Changed

v1.0.4

What's Changed

1.0.6 (2026-08-13)

Bug Fixes

1.0.5 (2026-08-09)

Bug Fixes

1.0.4 (2026-08-01)

Bug Fixes

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

v14.6.2

14.6.2 (2026-08-03)

v10.8.1

Bug Fixes

Documentation

Chores

v0.5.4

0.5.4

v17.11.0

v17.10.0

v17.9.0

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

🩹 Fixes

❤️ Thank You

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

8.66.0 (2026-08-03)

plugin-legacy@8.2.1

v8.2.1

8.2.1 (2026-08-06)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

v0.28.2

0.28.2

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants