Skip to content

chore(deps): bump the web-components-prod group across 1 directory with 6 updates - #468

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web-components/web-components-prod-e16d5d4e9c
Open

chore(deps): bump the web-components-prod group across 1 directory with 6 updates#468
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web-components/web-components-prod-e16d5d4e9c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-components-prod group with 5 updates in the /web-components directory:

Package From To
@napi-rs/canvas 1.0.0 1.0.2
@rrweb/replay 2.0.0 2.1.1
date-fns 4.3.0 4.4.0
monaco-editor 0.55.1 0.56.0
vite 8.0.16 8.1.5

Updates @napi-rs/canvas from 1.0.0 to 1.0.2

Release notes

Sourced from @​napi-rs/canvas's releases.

v1.0.2

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.1...v1.0.2

v1.0.1

What's Changed

Full Changelog: Brooooooklyn/canvas@v1.0.0...v1.0.1

Changelog

Sourced from @​napi-rs/canvas's changelog.

1.0.2 (2026-06-30)

Features

1.0.1 (2026-06-24)

Bug Fixes

  • link aarch64-pc-windows-msvc against static CRT (#1276) (8483662)
  • missing icudtl.dat in win32-arm64 package (#1278) (e1a75d1)
Commits

Updates @rrweb/replay from 2.0.0 to 2.1.1

Release notes

Sourced from @​rrweb/replay's releases.

@​rrweb/replay@​2.1.1

Patch Changes

  • Updated dependencies []:
    • rrweb@2.1.1
    • @​rrweb/types@​2.1.1

@​rrweb/replay@​2.1.0

Patch Changes

@​rrweb/replay@​2.0.1

Patch Changes

  • Updated dependencies [5f52d63]:
    • rrweb@2.0.1
    • @​rrweb/types@​2.0.1
Commits
  • 3deb6e7 Version Packages (#1902)
  • a11f8ef Update vite config to prevent Svelte's SSR lifecycle stubs being bundled (#1901)
  • c382034 Version Packages (#1889)
  • 9121622 Update Changesets dependencies (#1890)
  • fea1f32 Update branch reference from master to main
  • e5ba492 Change default branch from 'master' to 'main'
  • 84a4e11 Add experimental options to config.json (#1888)
  • 14f10ab Change base branch from 'master' to 'main'
  • b488929 [docs] Fix plugin api emit syntax (#1886)
  • 4e501fd Make autostart and includePii attributes optional as is defined in docs (#1885)
  • Additional commits viewable in compare view

Updates @rrweb/types from 2.0.0 to 2.1.1

Release notes

Sourced from @​rrweb/types's releases.

@​rrweb/types@​2.1.1

No release notes provided.

@​rrweb/types@​2.1.0

Minor Changes

@​rrweb/types@​2.0.1

No release notes provided.

Commits
  • 3deb6e7 Version Packages (#1902)
  • a11f8ef Update vite config to prevent Svelte's SSR lifecycle stubs being bundled (#1901)
  • c382034 Version Packages (#1889)
  • 9121622 Update Changesets dependencies (#1890)
  • fea1f32 Update branch reference from master to main
  • e5ba492 Change default branch from 'master' to 'main'
  • 84a4e11 Add experimental options to config.json (#1888)
  • 14f10ab Change base branch from 'master' to 'main'
  • b488929 [docs] Fix plugin api emit syntax (#1886)
  • 4e501fd Make autostart and includePii attributes optional as is defined in docs (#1885)
  • Additional commits viewable in compare view

Updates date-fns from 4.3.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • See full diff in compare view

Updates monaco-editor from 0.55.1 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

  • #5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website
  • #5396: Release Monaco Editor 0.56.0
  • #5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples
  • #5379: Removes leftover debugger statements.
  • #5376: fixes pipeline
  • #5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples
  • #5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website
  • #5371: Bump undici from 7.24.7 to 7.28.0
  • #5372: Fixes CI
  • #5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples
  • #5362: Bump @​babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react
  • #5361: Bump js-yaml from 4.1.1 to 4.2.0
  • #5360: Bump vite from 7.3.2 to 7.3.5
  • #5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples
  • #5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client
  • #5357: Bump esbuild and vite in /samples/browser-esm-vite-react
  • #5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website
  • #5333: Bump dompurify from 3.2.7 to 3.4.5
  • #5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"
  • #5337: Bump qs from 6.14.2 to 6.15.2
  • #5338: Bump qs and express in /samples
  • #5336: Bump qs and express in /website
  • #5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website
  • #5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client
  • #5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples
  • #5326: Run npm audit fix and update lockfile
  • #5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react
  • #5322: Bump postcss from 8.5.6 to 8.5.14 in /website
  • #5320: Bump @​babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react
  • #5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin
  • #5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples
  • #5316: Bump fast-uri from 3.1.0 to 3.1.2
  • #5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website
  • #5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react
  • #5313: Bump postcss from 8.4.31 to 8.5.13 in /samples
  • #5308: Bump postcss from 8.5.6 to 8.5.12
  • #5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin
  • #5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples
  • #5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website
  • #5299: Bump follow-redirects from 1.15.6 to 1.16.0
  • #5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react
  • #5293: Bump lodash from 4.17.23 to 4.18.1 in /website
  • #5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

  • Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:
    • all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;
    • all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;
    • the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.
  • Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.
  • Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

  • Adds editor.doubleClickSelectsBlock.
  • Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.
  • Adds offWhenInlineCompletions to QuickSuggestionsValue.
  • Adds model and provider option support to inline completion providers.
  • Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.
  • Adds advanced-external and advanced-wasm diff algorithms.
  • Exposes typed native LSP client and transport APIs.

Fixes

  • Treats Markdown returned by language servers as untrusted (#5280).
  • Updates the editor core to the version used by 0.56.0-dev-20260625.
Commits
  • 13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
  • b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
  • 9d053ab Improve Monaco Editor 0.56.0 changelog
  • 0ba33d0 Release Monaco Editor 0.56.0
  • 6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
  • d8c9ff0 Removes leftover debugger statements. (#5379)
  • 59285ab fixes pipeline (#5376)
  • aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
  • d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
  • 874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
  • Additional commits viewable in compare view

Updates vite from 8.0.16 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

  • bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
  • client: overlay error message format align rolldown (#22869) (5a72b87)
  • deps: update all non-major dependencies (#22921) (fef682d)
  • deps: update rolldown-related dependencies (#22922) (3c345e4)
  • module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
  • optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
  • ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

  • build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
  • build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

  • avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

Tests

... (truncated)

Commits
  • 5e7fe12 release: v8.1.5
  • 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
  • 5a72b87 fix(client): overlay error message format align rolldown (#22869)
  • f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
  • 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
  • c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
  • b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
  • fef682d fix(deps): update all non-major dependencies (#22921)
  • 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
  • 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 6 updates

Bumps the web-components-prod group with 5 updates in the /web-components directory:

| Package | From | To |
| --- | --- | --- |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `1.0.0` | `1.0.2` |
| [@rrweb/replay](https://github.com/rrweb-io/rrweb) | `2.0.0` | `2.1.1` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.3.0` | `4.4.0` |
| [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.56.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.5` |



Updates `@napi-rs/canvas` from 1.0.0 to 1.0.2
- [Release notes](https://github.com/Brooooooklyn/canvas/releases)
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md)
- [Commits](Brooooooklyn/canvas@v1.0.0...v1.0.2)

Updates `@rrweb/replay` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/rrweb-io/rrweb/releases)
- [Changelog](https://github.com/rrweb-io/rrweb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rrweb-io/rrweb/compare/@rrweb/replay@2.0.0...@rrweb/replay@2.1.1)

Updates `@rrweb/types` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/rrweb-io/rrweb/releases)
- [Changelog](https://github.com/rrweb-io/rrweb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rrweb-io/rrweb/compare/@rrweb/types@2.0.0...@rrweb/types@2.1.1)

Updates `date-fns` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.3.0...v4.4.0)

Updates `monaco-editor` from 0.55.1 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](microsoft/monaco-editor@v0.55.1...v0.56.0)

Updates `vite` from 8.0.16 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

---
updated-dependencies:
- dependency-name: "@napi-rs/canvas"
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-components-prod
- dependency-name: "@rrweb/replay"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: "@rrweb/types"
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: monaco-editor
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-components-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants