Bump the prod-deps group across 1 directory with 5 updates by dependabot[bot] · Pull Request #57 · VSC-NeuroPilot/neurontainer

dependabot · 2026-09-01T19:21:38Z

Bumps the prod-deps group with 5 updates in the / directory:

Package	From	To
@mui/material	`9.1.1`	`9.4.0`
preact	`10.29.2`	`10.29.8`
hono	`4.12.25`	`4.13.5`
neuro-game-sdk	`1.1.1`	`1.2.0`
zod	`4.4.3`	`4.5.4`

Updates @mui/material from 9.1.1 to 9.4.0

Release notes

Sourced from @mui/material's releases.

v9.4.0

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.

♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

[theme] Add theme.focusVisible opt-in keyboard focus ring (#48743) @siriwatknp

[buttongroup] Prevent sticky hover border on touch devices (#48993) @petr-kratochvil

[l10n] Complete Traditional Chinese localization (#48946) @nrps9909

[menulist] Preserve custom list padding when adjusting for the scrollbar (#48707) @creazyfrog

[pagination] Manage focus whenever first / last / next / previous buttons become disabled (#48877) @silviuaavram

[tooltip] Improve support for disabled button triggers (#48622) @mayank99

@mui/utils@9.4.0

Fix resolveProps to correctly merge slotProps defined as functions (#48955) @mnajdova

Replace deprecated clip CSS property with clip-path (#48966) @ZeeshanTamboli

@mui/styled-engine-sc@9.4.0

Fix types for components extended with styled (#45988) @megos

Docs

Bump @docsearch/react to ^4.7.0 (#48886) @LukasTy

Fix broken links reported by Ahrefs (#48949) @brijeshb42

Manage focus on Open in Chat button click (#48942) @silviuaavram

Move focus to the main content with the skip link (#48944) @lazerg

Use relative link for LICENSE in README (#49040) @loulanyue

[autocomplete] Remove the "aria-owns" reference (#48958) @silviuaavram

[table] Fix wrong number of rows reported to screen readers (#47653) @seomsoo

[table] Reference DataGrid link in the row header section (#48988) @silviuaavram

[table] Use and document the row header cells (#48965) @silviuaavram

[tabs] Make tab panel focusable and show keep mounted examples (#48939) @silviuaavram

[templates] Remove focusable links from hidden carousel slides (#49003) @gonzoblasco

Core

[code-infra] Fix team sync review requests (#48914) @brijeshb42

[code-infra] Import the test globals from vitest (#49033) @JCQuintas

[code-infra] Point the support validator link at frontend-public (#49041) @Janpot

[code-infra] Update CircleCI orb (#49030) @Janpot

[code-infra] Use ESM current directory syntax for Vitest config (#49032) @ZeeshanTamboli

[core] Use @typescript/typescript6 for the docs tooling (#49025) @Janpot

[core-docs] Remove the globalSelector stylis middleware (#49029) @Janpot

[test] Add an assertions mode to the axe regression harness (#48915) @michelengelen

[test] Automate the CSS-dependent WCAG criteria (#48936) @michelengelen

[test] Fail the regression run when a webfont does not load (#48948) @LukasTy

... (truncated)

Changelog

Sourced from @mui/material's changelog.

9.4.0

Aug 27, 2026

A big thanks to the 19 contributors who made this release possible. Here are some highlights ✨:

♿️ Opt in to a consistent keyboard focus ring across components with the new theme.focusVisible.

♿️ The Tooltip now supports disabled button triggers without an extra wrapper element.

@mui/material@9.4.0

[theme] Add theme.focusVisible opt-in keyboard focus ring (#48743) @siriwatknp

[buttongroup] Prevent sticky hover border on touch devices (#48993) @petr-kratochvil

[l10n] Complete Traditional Chinese localization (#48946) @nrps9909

[menulist] Preserve custom list padding when adjusting for the scrollbar (#48707) @creazyfrog

[pagination] Manage focus whenever first / last / next / previous buttons become disabled (#48877) @silviuaavram

[tooltip] Improve support for disabled button triggers (#48622) @mayank99

@mui/utils@9.4.0

Fix resolveProps to correctly merge slotProps defined as functions (#48955) @mnajdova

Replace deprecated clip CSS property with clip-path (#48966) @ZeeshanTamboli

@mui/styled-engine-sc@9.4.0

Fix types for components extended with styled (#45988) @megos

Docs

Bump @docsearch/react to ^4.7.0 (#48886) @LukasTy

Fix broken links reported by Ahrefs (#48949) @brijeshb42

Manage focus on Open in Chat button click (#48942) @silviuaavram

Move focus to the main content with the skip link (#48944) @lazerg

Use relative link for LICENSE in README (#49040) @loulanyue

[autocomplete] Remove the "aria-owns" reference (#48958) @silviuaavram

[table] Fix wrong number of rows reported to screen readers (#47653) @seomsoo

[table] Reference DataGrid link in the row header section (#48988) @silviuaavram

[table] Use and document the row header cells (#48965) @silviuaavram

[tabs] Make tab panel focusable and show keep mounted examples (#48939) @silviuaavram

[templates] Remove focusable links from hidden carousel slides (#49003) @gonzoblasco

Core

[code-infra] Fix team sync review requests (#48914) @brijeshb42

[code-infra] Import the test globals from vitest (#49033) @JCQuintas

[code-infra] Point the support validator link at frontend-public (#49041) @Janpot

[code-infra] Update CircleCI orb (#49030) @Janpot

[code-infra] Use ESM current directory syntax for Vitest config (#49032) @ZeeshanTamboli

... (truncated)

Commits

809a771 [release] v9.4.0 (#49046)
ba231e3 [material-ui] Add theme.focusVisible opt-in keyboard focus ring (#48743)
3f8d682 [code-infra] Import the test globals from vitest (#49033)
daa0531 Bump code-infra:devDependencies (#49014)
06b5c70 [test] Use the Vitest global expect instead of importing chai (#48996)
7cb351c [ButtonGroup] Prevent sticky hover border on touch devices (#48993)
9d72af3 Bump react monorepo (#48973)
81b2227 [test] Fix typo 'overriden' -> 'overridden' in Alert test comment (#48987)
3c2c353 [test][tooltip] Keep the disabled trigger away from the real pointer (#48947)
e6f58f6 [l10n] Complete Traditional Chinese localization (#48946)
Additional commits viewable in compare view

Updates preact from 10.29.2 to 10.29.8

Release notes

Sourced from preact's releases.

10.29.8

Performance

Batch updates in flushSync (#5173, thanks @JoviDeCroock)

Avoid traversing retained subtrees (#5182, thanks @JoviDeCroock)

10.29.7

Maintenance

Make RTS optional peer dep (#5150, thanks @JoviDeCroock)

10.29.6

We had to revert preactjs/preact#5055 due to an incompatibility with useSignalEffect

10.29.5

Fixes

Compat Suspense hydration children recovery (#5144, thanks @JoviDeCroock)

10.29.4

Fixes

Fix hydration-suspense crashing due to sCU bail (#5134, thanks @JoviDeCroock)

Revert "Fix useId stability across async Suspense (#5108)" (#5135, thanks @JoviDeCroock)

10.29.3

Fixes

Fix error recovery for partially rendered subtrees (#5120, thanks @JoviDeCroock)

Fix useId stability across async Suspense (#5108, thanks @JoviDeCroock)

Flush subtree effects when rendering a pending node (#5055, thanks @JoviDeCroock)

Fix hydrate recovery with null excess DOM children (#5112, thanks @JoviDeCroock)

Performance

Address and guard memory leak hotspots (#5116, thanks @JoviDeCroock)

Avoid redundant allocations and writes (#5115, thanks @JoviDeCroock)

Types

Accept Signalish for input DOM-type (#5096, thanks @JoviDeCroock)

Maintenance

Use npm staged publishing (#5101, thanks @JoviDeCroock)

Add tier 3 sponsor logos (#5098, thanks @JoviDeCroock)

Commits

389c7bc Merge pull request #5189 from preactjs/10.29.8
39edabf 10.29.8
f27f3ec Merge pull request #5173 from preactjs/flush-sync-batch
84778ce Merge pull request #5182 from preactjs/perf/v10-retained-subtree-bailout
8623721 Golf retained-subtree bailout
1ab8135 Optimize retained subtree bailouts
3393c0b Batch updates in flushSync
d7421ad Merge pull request #5152 from preactjs/10.29.7
ce79b96 10.29.7
a2418b8 Merge pull request #5150 from preactjs/preact-rts
Additional commits viewable in compare view

Updates hono from 4.12.25 to 4.13.5

Release notes

Sourced from hono's releases.

v4.13.5

Security fixes

This release includes fixes for the following security issues:

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Affects: Cache Middleware and applications behind a proxy, WAF, or logging layer that inspects query strings. Fixes query parsing that did not stop at the URL fragment, so a ? after a # was treated as the start of a query string and the application could read parameters that the other component never saw. GHSA-crvj-82cr-hjcx

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path normalization gap where consecutive parent-directory segments in ssgParams values were not fully collapsed, bypassing the containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

Affects: parseBody() when dot-notation parsing is enabled. Fixes unbounded expansion of dot-separated field names, where a small request body could allocate a disproportionately large object graph and concurrent requests could exhaust the heap. GHSA-g6gw-c38x-mqfc

Users who use Cache Middleware, deploy behind a proxy or WAF that inspects query strings, use Static Site Generation, or use parseBody({ dot: true }) are strongly encouraged to upgrade to this version.

v4.13.4

What's Changed

fix(request): handle params on unmatched requests in honojs/hono#5268

fix(jsx/dom): execute previous ref cleanup when ref prop changes on re-render in honojs/hono#5264

fix(reg-exp-router): associate wildcard middleware with matching routes in honojs/hono#5266

perf(router): share null object creation in honojs/hono#5267

fix(etag): match If-None-Match tags with optional whitespace before the comma in honojs/hono#5222

fix(client): skip undefined header and cookie values in honojs/hono#5244

fix(client): skip an undefined entry inside a query array in honojs/hono#5272

fix(client): skip an undefined entry inside a form array in honojs/hono#5280

fix(client): support custom buildSearchParams and filter undefined query in $ws() bin honojs/hono#5256

fix(accepts): support wildcard media types and specificity ordering in defaultMatch in honojs/hono#5255

fix(client): omit empty query delimiter in honojs/hono#5283

fix(request): drop stale content length for cloned FormData in honojs/hono#5282

fix(request): serialize cached JSON body in cloneRawRequest in honojs/hono#5288

fix(cookie): allow parsing signed cookies with empty string values in honojs/hono#5246

fix(utils/stream): do not let abort listeners crash abort() in honojs/hono#5274

Full Changelog: honojs/hono@v4.13.3...v4.13.4

v4.13.3

What's Changed

fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in honojs/hono#5227

fix(etag): copy pending stream bytes in honojs/hono#5239

fix(etag): avoid skipping headers when filtering 304 response headers in honojs/hono#5234

fix(cors): append Origin to Vary header on OPTIONS preflight in honojs/hono#5235

docs(context): add custom headers append option example to Context JSDoc in honojs/hono#5248

fix(trie-router): match suffix wildcard routes in honojs/hono#5236

... (truncated)

Commits

06880c4 4.13.5
531e9c5 Merge commit from fork
3a67f7f Merge commit from fork
9c28d72 Merge commit from fork
017000d 4.13.4
5e5b83d fix(utils/stream): do not let abort listeners crash abort() (#5274)
241ae4c fix(cookie): allow parsing signed cookies with empty string values (#5246)
c409d85 fix(request): serialize cached JSON body in cloneRawRequest (#5288)
612b59c fix(request): drop stale content length for cloned FormData (#5282)
73794bd fix(client): omit empty query delimiter (#5283)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hono since your current version.

Updates neuro-game-sdk from 1.1.1 to 1.2.0

Commits

See full diff in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the flagship feature of Zod 4.5

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — 12–19 digits plus Luhn checksum

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the multi-property counterpart to z.property()

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD

... (truncated)

Commits

e8e206f 4.5.4
84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
1a16102 4.5.3
eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
e3a695b docs(v4): record the email regex and container output-shape findings under Open
99fce39 bench(v4): z.compile() against zod-compiler (#6499)
87d6464 fix(docs): drop the OG description when the title wraps past two lines
e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
9a193aa 4.5.2
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `9.1.1` | `9.4.0` | | [preact](https://github.com/preactjs/preact) | `10.29.2` | `10.29.8` | | [hono](https://github.com/honojs/hono) | `4.12.25` | `4.13.5` | | [neuro-game-sdk](https://github.com/AriesAlex/typescript-neuro-game-sdk) | `1.1.1` | `1.2.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | Updates `@mui/material` from 9.1.1 to 9.4.0 - [Release notes](https://github.com/mui/material-ui/releases) - [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/material-ui/commits/v9.4.0/packages/mui-material) Updates `preact` from 10.29.2 to 10.29.8 - [Release notes](https://github.com/preactjs/preact/releases) - [Commits](preactjs/preact@10.29.2...10.29.8) Updates `hono` from 4.12.25 to 4.13.5 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.25...v4.13.5) Updates `neuro-game-sdk` from 1.1.1 to 1.2.0 - [Commits](https://github.com/AriesAlex/typescript-neuro-game-sdk/commits) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) --- updated-dependencies: - dependency-name: "@mui/material" dependency-version: 9.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: preact dependency-version: 10.29.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: hono dependency-version: 4.13.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: neuro-game-sdk dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026

Navigation Menu

Uh oh!

Bump the prod-deps group across 1 directory with 5 updates - #57

Bump the prod-deps group across 1 directory with 5 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-7ec4aea587

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

v9.4.0

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

9.4.0

@mui/material@9.4.0

@mui/utils@9.4.0

@mui/styled-engine-sc@9.4.0

Docs

Core

10.29.8

Performance

10.29.7

Maintenance

10.29.6

10.29.5

Fixes

10.29.4

Fixes

10.29.3

Fixes

Performance

Types

Maintenance

v4.13.5

Security fixes

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

v4.13.4

What's Changed

v4.13.3

What's Changed

v4.5.4

Commits:

v4.5.3

Commits:

v4.5.2

Commits:

v4.5.1

Commits:

v4.5.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@mui/material@9.4.0`

`@mui/utils@9.4.0`

`@mui/styled-engine-sc@9.4.0`

`@mui/material@9.4.0`

`@mui/utils@9.4.0`

`@mui/styled-engine-sc@9.4.0`

Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory

Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion