Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates - #9351

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-598edde8f9
Open

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates#9351
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-598edde8f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 13 updates in the / directory:

Package From To
browserslist 4.28.4 4.28.6
postcss 8.5.15 8.5.17
postcss-preset-env 11.3.1 11.3.2
@babel/cli 8.0.1 8.0.4
@figma/code-connect 1.4.8 1.4.9
@primer/octicons 19.28.1 19.29.2
markdown-it 14.2.0 14.3.0
teamcity-service-messages 0.1.14 0.2.0
vite 8.1.0 8.1.4
webpack 5.108.1 5.108.4
webpack-cli 7.1.0 7.2.1
fs-extra 11.3.5 11.3.6
yauzl 3.2.1 3.4.0

Updates browserslist from 4.28.4 to 4.28.6

Release notes

Sourced from browserslist's releases.

4.28.6

4.28.5

Changelog

Sourced from browserslist's changelog.

4.28.6

4.28.5

Commits
  • 49b3d72 Release 4.28.6 version
  • 0f90a94 Update dependencies
  • e04414e Merge pull request #938 from spokodev/fix/electron-range-semver
  • a2168f7 fix: compare Electron range bounds as semver
  • 28bbe6b Release 4.28.5 version
  • f012581 Merge pull request #937 from spokodev/fix/gt-upper-bound-version-range
  • 47f8fc2 Update dependencies
  • 73d926e fix: exclude joined range when querying above its upper bound
  • 03ba4e2 Remove duplicate
  • 1163800 Unify
  • Additional commits viewable in compare view

Updates postcss from 8.5.15 to 8.5.17

Release notes

Sourced from postcss's releases.

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

Changelog

Sourced from postcss's changelog.

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates postcss-preset-env from 11.3.1 to 11.3.2

Changelog

Sourced from postcss-preset-env's changelog.

11.3.2

June 28, 2026

Commits

Updates @babel/cli from 8.0.1 to 8.0.4

Release notes

Sourced from @​babel/cli's releases.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

Committers: 4

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

Committers: 2

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

Committers: 2

Changelog

Sourced from @​babel/cli's changelog.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env
Commits

Updates @figma/code-connect from 1.4.8 to 1.4.9

Release notes

Sourced from @​figma/code-connect's releases.

v1.4.9

Fixed

General

  • Fixed parser invocation failing when a path or argument contained a space. This affected the Swift parser (Xcode project / Swift package paths), the Compose parser (Gradle wrapper paths), and the custom parser (any user-provided parserCommand referencing a path with spaces).

Template files

  • Fixed template-only projects unnecessarily building and running a native parser. When every Code Connect file is a parserless template (.figma.ts/.figma.js), the CLI no longer invokes the Swift or Compose parser — which is slow at best and can fail outright (for example a Swift package targeting macOS 12 whose Figma dependency requires macOS 13, producing "the library '...' requires macos 12.0, but depends on the product 'Figma' which requires macos 13.0"). Projects that also contain native source files are unaffected and still run the parser.

Swift

  • Raised the supported swift-syntax upper bound to allow the 603.x release. Previously the cap below 603 could silently downgrade swift-syntax in projects that depend on both Code Connect and swift-syntax (directly or transitively) on a Swift 6.3 toolchain. Older toolchains remain supported.

Features

General

  • Added @figma/code-connect/figma-types-no-require, a variant of the template type definitions for projects that have @types/node installed. The default @figma/code-connect/figma-types entry declares a global require (so const figma = require('figma') works without @types/node), but that declaration overrides Node's own require type and causes errors like Property 'resolve' does not exist on require.resolve(...) elsewhere in projects that use @types/node. Such projects can now use "@figma/code-connect/figma-types-no-require" in their types array instead, adding it to their main tsconfig.json without a separate config. The default entry is unchanged, so no existing setup needs to change.

Template files

  • Augmented the getSlot API: getSlot('SlotName') still renders the same way, and the returned value now also exposes connectedInstances (the connected instances directly in the slot). This lets you render a slot's connected children inline. For example getSlot('body').connectedInstances.map((c) => c.executeTemplate().example).

React & HTML

  • Augmented the figma.slot API: figma.slot('SlotName') still maps the slot the same way, and you can now also write figma.slot('SlotName').connectedInstances in a props object to render the slot's code-connected instances inline. For example props: { content: figma.slot('Content').connectedInstances }.
Changelog

Sourced from @​figma/code-connect's changelog.

Code Connect v1.4.9 (6 July 2026)

Fixed

General

  • Fixed parser invocation failing when a path or argument contained a space. This affected the Swift parser (Xcode project / Swift package paths), the Compose parser (Gradle wrapper paths), and the custom parser (any user-provided parserCommand referencing a path with spaces).

Template files

  • Fixed template-only projects unnecessarily building and running a native parser. When every Code Connect file is a parserless template (.figma.ts/.figma.js), the CLI no longer invokes the Swift or Compose parser — which is slow at best and can fail outright (for example a Swift package targeting macOS 12 whose Figma dependency requires macOS 13, producing "the library '...' requires macos 12.0, but depends on the product 'Figma' which requires macos 13.0"). Projects that also contain native source files are unaffected and still run the parser.

Swift

  • Raised the supported swift-syntax upper bound to allow the 603.x release. Previously the cap below 603 could silently downgrade swift-syntax in projects that depend on both Code Connect and swift-syntax (directly or transitively) on a Swift 6.3 toolchain. Older toolchains remain supported.

Features

General

  • Added @figma/code-connect/figma-types-no-require, a variant of the template type definitions for projects that have @types/node installed. The default @figma/code-connect/figma-types entry declares a global require (so const figma = require('figma') works without @types/node), but that declaration overrides Node's own require type and causes errors like Property 'resolve' does not exist on require.resolve(...) elsewhere in projects that use @types/node. Such projects can now use "@figma/code-connect/figma-types-no-require" in their types array instead, adding it to their main tsconfig.json without a separate config. The default entry is unchanged, so no existing setup needs to change.

Template files

  • Augmented the getSlot API: getSlot('SlotName') still renders the same way, and the returned value now also exposes connectedInstances (the connected instances directly in the slot). This lets you render a slot's connected children inline. For example getSlot('body').connectedInstances.map((c) => c.executeTemplate().example).

React & HTML

  • Augmented the figma.slot API: figma.slot('SlotName') still maps the slot the same way, and you can now also write figma.slot('SlotName').connectedInstances in a props object to render the slot's code-connected instances inline. For example props: { content: figma.slot('Content').connectedInstances }.
Commits
Maintainer changes

This version was pushed to npm by mina-asham-figma, a new releaser for @​figma/code-connect since your current version.


Updates @primer/octicons from 19.28.1 to 19.29.2

Release notes

Sourced from @​primer/octicons's releases.

v19.29.2

Patch Changes

v19.29.1

Patch Changes

v19.29.0

Minor Changes

Changelog

Sourced from @​primer/octicons's changelog.

19.29.2

Patch Changes

19.29.1

Patch Changes

19.29.0

Minor Changes

Commits

Updates caniuse-lite from 1.0.30001799 to 1.0.30001806

Commits

Updates markdown-it from 14.2.0 to 14.3.0

Changelog

Sourced from markdown-it's changelog.

[14.3.0] - 2026-07-02

Changed

  • Reworked build pipeline & tools.
  • Added source maps.
  • Bumped linkify-it to 5.0.2.

Fixed

  • Preserve backslash-space hard line breaks, matching CommonMark 6.7, #1185.
Commits
  • ff0ee08 14.3.0 released
  • 52e2749 Bump linkify-it / vite deps
  • 56c2404 fix: keep backslash-space hard line break (CommonMark 6.7) (#1185)
  • 0fbb18b Bump vite from 8.0.14 to 8.0.16 (#1181)
  • 83450e2 Rework benchmark deps and bump versions
  • 57a6863 benchmark => tinybench
  • 7608db1 Update CI config
  • 9d8eb42 Added package-lock and updated versions to latest possible
  • 0aee70d lint: enable @​stylistic/no-multi-spaces rule
  • 8878985 lint => neostandard
  • Additional commits viewable in compare view

Updates teamcity-service-messages from 0.1.14 to 0.2.0

Commits

Updates vite from 8.1.0 to 8.1.4

Release notes

Sourced from vite's releases.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

Tests

Build System

8.1.3 (2026-07-02)

Bug Fixes

8.1.2 (2026-06-30)

Bug Fixes

  • deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
  • restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)

... (truncated)

Commits

Updates webpack from 5.108.1 to 5.108.4

Release notes

Sourced from webpack's releases.

v5.108.4

Patch Changes

v5.108.3

Patch Changes

v5.108.2

Patch Changes

Changelog

Sourced from webpack's changelog.

5.108.4

Patch Changes

5.108.3

Patch Changes

5.108.2

Patch Changes

Commits
  • bb9ccfd chore(release): new release (#21319)
  • 7639066 fix: invalidate provided-exports cache with lazy barrel (#21326)
  • ae28c54 perf: reduce CPU and memory overhead of the HTML and CSS pipelines (#21332)
  • e6fb547 perf: re-encode the HTML AST as struct-of-arrays behind a path-based visitor ...
  • 5ce1c22 fix(html): resolve asset URLs against <base href> (#21329)
  • 0e43c4a test(html): cover generateError, ignored-source, and null-character parse pat...
  • cebd793 refactor: build export-presence guards from a lazy boolean formula (#21320)
  • c2628cf fix: don't resolve new URL() directory references as modules (#21312)
  • 00d8b2f perf: speed up non-CSS-Modules CSS parsing by skipping unused AST work (#21324)
  • f7a3f6d perf: reduce HTML parser memory and CPU with parser-level skip options (#21323)
  • Additional commits viewable in compare view

Updates webpack-cli from 7.1.0 to 7.2.1

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.1

Patch Changes

webpack-cli@7.2.0

Minor Changes

  • feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

  • Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

Changelog

Sourced from webpack-cli's changelog.

7.2.1

Patch Changes

7.2.0

Minor Changes

  • feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

  • Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

Commits
  • 71e34db chore(release): new release (#4800)
  • 97c5541 fix: CLIPlugin dynamic import interop under Bun (#4799)
  • 40b631f chore(release): new release (#4794)
  • f896a9c chore(deps-dev): bump the dependencies group across 1 directory with 4 update...
  • b4ea5a7 test: update target flag tests for webpack 5.108 (#4797)
  • 9a5fef9 feat: support tsx as a fallback loader for TypeScript and JSX configs (#4796)
  • 6cafa00 chore(deps): bump http-proxy-middleware from 2.0.9 to 2.0.10 (#4795)
  • 3bfa81c docs: update (#4789)
  • d122911 chore: update webpack-dev-server peer dependency version (#4793)
  • See full diff in compare view

Updates fs-extra from 11.3.5 to 11.3.6

Changelog

Sourced from fs-extra's changelog.

11.3.6 / 2026-06-29

  • Fix handling of symlinked destination ancestors in copy/move methods (#1071, #1073)
  • Docs typo fixed (#1074)
Commits

Updates yauzl from 3.2.1 to 3.4.0

Commits

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 1…
b88d7d2 
…4 updates

Bumps the minor-and-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [browserslist](https://github.com/browserslist/browserslist) | `4.28.4` | `4.28.6` |
| [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.17` |
| [postcss-preset-env](https://github.com/csstools/postcss-plugins/tree/HEAD/plugin-packs/postcss-preset-env) | `11.3.1` | `11.3.2` |
| [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `8.0.1` | `8.0.4` |
| [@figma/code-connect](https://github.com/figma/code-connect) | `1.4.8` | `1.4.9` |
| [@primer/octicons](https://github.com/primer/octicons) | `19.28.1` | `19.29.2` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `14.2.0` | `14.3.0` |
| [teamcity-service-messages](https://github.com/pifantastic/teamcity-service-messages) | `0.1.14` | `0.2.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.1.4` |
| [webpack](https://github.com/webpack/webpack) | `5.108.1` | `5.108.4` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.1.0` | `7.2.1` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.5` | `11.3.6` |
| [yauzl](https://github.com/thejoshwolfe/yauzl) | `3.2.1` | `3.4.0` |



Updates `browserslist` from 4.28.4 to 4.28.6
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.28.4...4.28.6)

Updates `postcss` from 8.5.15 to 8.5.17
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.15...8.5.17)

Updates `postcss-preset-env` from 11.3.1 to 11.3.2
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/plugin-packs/postcss-preset-env/CHANGELOG.md)
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/plugin-packs/postcss-preset-env)

Updates `@babel/cli` from 8.0.1 to 8.0.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-cli)

Updates `@figma/code-connect` from 1.4.8 to 1.4.9
- [Release notes](https://github.com/figma/code-connect/releases)
- [Changelog](https://github.com/figma/code-connect/blob/main/CHANGELOG.md)
- [Commits](figma/code-connect@v1.4.8...v1.4.9)

Updates `@primer/octicons` from 19.28.1 to 19.29.2
- [Release notes](https://github.com/primer/octicons/releases)
- [Changelog](https://github.com/primer/octicons/blob/main/CHANGELOG.md)
- [Commits](primer/octicons@v19.28.1...v19.29.2)

Updates `caniuse-lite` from 1.0.30001799 to 1.0.30001806
- [Commits](browserslist/caniuse-lite@1.0.30001799...1.0.30001806)

Updates `markdown-it` from 14.2.0 to 14.3.0
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.2.0...14.3.0)

Updates `teamcity-service-messages` from 0.1.14 to 0.2.0
- [Commits](https://github.com/pifantastic/teamcity-service-messages/commits/v0.2.0)

Updates `vite` from 8.1.0 to 8.1.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.4/packages/vite)

Updates `webpack` from 5.108.1 to 5.108.4
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.108.1...v5.108.4)

Updates `webpack-cli` from 7.1.0 to 7.2.1
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.1.0...webpack-cli@7.2.1)

Updates `fs-extra` from 11.3.5 to 11.3.6
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.5...11.3.6)

Updates `yauzl` from 3.2.1 to 3.4.0
- [Commits](thejoshwolfe/yauzl@3.2.1...3.4.0)

---
updated-dependencies:
- dependency-name: browserslist
  dependency-version: 4.28.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: postcss-preset-env
  dependency-version: 11.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@babel/cli"
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@figma/code-connect"
  dependency-version: 1.4.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@primer/octicons"
  dependency-version: 19.29.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001806
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: markdown-it
  dependency-version: 14.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: teamcity-service-messages
  dependency-version: 0.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: webpack
  dependency-version: 5.108.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: webpack-cli
  dependency-version: 7.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fs-extra
  dependency-version: 11.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: yauzl
  dependency-version: 3.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Jul 19, 2026
@github-actions
github-actions Bot enabled auto-merge (rebase) July 19, 2026 00:14
@dependabot @github

dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants