[dependabot]

Bumps the demo-dependencies group in /demo with 4 updates: @codemirror/view, prettier, firebase and vite.

Updates @codemirror/view from 6.43.13 to 6.43.14

Commits

• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Updates firebase from 12.19.0 to 13.0.0

Release notes

Sourced from firebase's releases.

firebase@13.0.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​3.0.0

Major Changes

• 42ce99c #10380 - Refactored TemplateGenerativeModel.generateContent and TemplateGenerativeModel.generateContentStream to accept a unified TemplateRequest object ({ templateId, templateVariables, toolConfig? }) as the first parameter. Made templateVariables required in both TemplateRequest and StartTemplateChatParams.

• f83cc32 #10392 - Removed APIs that were previously deprecated.

  Removed the previously deprecated VertexAIBackend (and BackendType.VERTEX_AI). Use AgentPlatformBackend (and BackendType.AGENT_PLATFORM) instead.

  The only difference for AgentPlatformBackend is the default location for accessing the model. The default location for AgentPlatformBackend is global, whereas the default location for VertexAIBackend was us-central1. To use us-central1 with AgentPlatformBackend, specify getAI(app, { backend: new AgentPlatformBackend('us-central1') }) when initializing the SDK. However, note that most new Gemini models do not support us-central1.

  Updated default hybrid-in-cloud model to gemini-3.5-flash-lite.

• b70fa6f #10398 - Refactored Part into a discriminated union with explicit type properties, introduced UnknownPart for raw wire and user-provided inputs, stripped type discriminators on wire egress, and ensured defensive deep copying for chat history.

Minor Changes

• 87adc59 #10362 - Deprecated candidateCount, temperature, topP, topK, presencePenalty, and frequencyPenalty in both GenerationConfig and LiveGenerationConfig. These parameters are unsupported in Gemini 3.x and later models.

• 565da23 #10334 - Exported a ChatSession interface instead of the ChatSession class.

  Cleaned up AI Logic doc comments.

Patch Changes

• ac44c69 #10363 - Migrate test suite to Vitest and update type-only re-exports.

firebase@13.0.0

Major Changes

• 42ce99c #10380 - Refactored TemplateGenerativeModel.generateContent and TemplateGenerativeModel.generateContentStream to accept a unified TemplateRequest object ({ templateId, templateVariables, toolConfig? }) as the first parameter. Made templateVariables required in both TemplateRequest and StartTemplateChatParams.

• f83cc32 #10392 - Removed APIs that were previously deprecated.

  Removed the previously deprecated VertexAIBackend (and BackendType.VERTEX_AI). Use AgentPlatformBackend (and BackendType.AGENT_PLATFORM) instead.

  The only difference for AgentPlatformBackend is the default location for accessing the model. The default location for AgentPlatformBackend is global, whereas the default location for VertexAIBackend was us-central1. To use us-central1 with AgentPlatformBackend, specify getAI(app, { backend: new AgentPlatformBackend('us-central1') }) when initializing the SDK. However, note that most new Gemini models do not support us-central1.

... (truncated)

Commits

• 0c331cc Version Packages (#10411)
• ecb4aa5 Merge main into release
• 31a2016 chore(ai): update changeset (#10449)
• 9c9664c test: convert smoke tests to vitest and fix some vitest config (#10440)
• 4092e80 Merge main into release
• 9b3d815 test(storage): migrate tests to Vitest (#10388)
• b4c4695 test(analytics): migrate analytics to Vitest (#10375)
• 952694d ci: fix e2e polling logic (#10441)
• c26b8f0 test(compat): migrate installations, analytics, functions, and app compat to ...
• 05946e9 Merge main into release
• Additional commits viewable in compare view

Updates vite from 8.3.1 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

v8.3.3

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

v8.3.2

Bug Fixes

• build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
• bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
• bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
• deps: update all non-major dependencies (#23601) (9944fa6)
• deps: update rolldown-related dependencies (#23602) (88c1741)
• html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
• limit size of object and array printing via forwardConsole (#23565) (e64a587)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

8.3.3 (2026-10-06)

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

8.3.2 (2026-10-01)

Bug Fixes

• build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
• bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
• bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
• deps: update all non-major dependencies (#23601) (9944fa6)
• deps: update rolldown-related dependencies (#23602) (88c1741)
• html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
• limit size of object and array printing via forwardConsole (#23565) (e64a587)

... (truncated)

Commits

• b6c20f6 release: v8.3.4 (#23702)
• b28db28 fix(server): match static aliases on path boundaries (#23643)
• bc0f21c feat(bundled-dev): support import.meta.hot.acceptExports (#23463)
• fa71469 fix(client): skip rewriting unchanged adopted styles (#23697)
• 2a8c0f0 fix(build): correct preloads when chunkImportMap is enabled with non-root bas...
• 3a7f2ae fix(html): avoid adding filesystem root to watcher (#23689)
• facc2fb fix: remove input option unescaping for now (#23694)
• 70d56ea fix(dev): a restart requested during a restart used to be dropped (fix #23392...
• cf52011 fix(css): resolve imported preprocessors from their file path with lightningc...
• fcb6f12 fix: don't treat modules ending with js-like query as js (#23687)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions