Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates#9

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-dd7dc78e42
Open

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates#9
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-dd7dc78e42

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps the minor-and-patch group with 9 updates in the / directory:

Package From To
@auth/core 0.37.0 0.41.1
@codemirror/state 6.5.4 6.6.0
@codemirror/view 6.39.16 6.40.0
@sentry/solid 10.43.0 10.46.0
@tanstack/solid-virtual 3.13.21 3.13.23
convex 1.32.0 1.34.1
solid-js 1.9.11 1.9.12
vite-plugin-solid 2.11.10 2.11.11
vitest 4.1.0 4.1.2

Updates @auth/core from 0.37.0 to 0.41.1

Release notes

Sourced from @​auth/core's releases.

@​auth/core@​0.41.1

Bugfixes

  • security issue from nodemailer (#13305)

Other

  • update links for Credentials-based Authentication (#13258)

@​auth/core@​0.41.0

Features

  • providers: support custom baseURL for Gitlab (#13260) (745751e9)

Other

  • fix build
  • adjust default fusionauth provider details (#10868)

@​auth/core@​0.40.0

Features

  • providers: Mailgun region selection (#13027) (e0168ed1)

Bugfixes

  • core: undefined providerId (#12947) (dd211c56)
  • providers: Microsoft Entra ID (#12616) (e16b07b8)
  • providers: enable OIDC capabilities for Keycloak (#12964) (0adbd101)

Other

  • docs: fix typo Avaliable Scopes -> Available Scopes (#13009) (22c1b8b0)
  • typo succesful -> successful (#12973)
  • fix typo profie -> profile (#12987)
Commits
Maintainer changes

This version was pushed to npm by bekacru, a new releaser for @​auth/core since your current version.


Updates @codemirror/state from 6.5.4 to 6.6.0

Changelog

Sourced from @​codemirror/state's changelog.

6.6.0 (2026-03-12)

New features

EditorSelection.range now takes an optional assoc argument.

SelectionRange.extend can now be given a third argument to specify associativity.

Commits
  • 821d9b7 Mark version 6.6.0
  • e035c74 Support an assoc argument to EditorSelection.range and SelectionRange.extend
  • eef74db Add type conversions to asArray
  • See full diff in compare view

Updates @codemirror/view from 6.39.16 to 6.40.0

Changelog

Sourced from @​codemirror/view's changelog.

6.40.0 (2026-03-12)

Bug fixes

Fix a bug that caused Shift-Enter/Backspace/Delete on iOS to lose the shift modifier when delivered to key event handlers.

Fix an issue where EditorView.moveVertically could move to the wrong place in wrapped lines with a large line height.

Make sure the selection head associativity is properly set for mouse selections made with shift held down.

New features

WidgetType.updateDOM is now called with the previous widget value as third argument.

6.39.17 (2026-03-10)

Bug fixes

Improve touch tap-selection on line wrapping boundaries.

Make drawSelection draw our own selection handles on iOS.

Fix an issue where posAtCoords, when querying line wrapping points, got confused by extra empty client rectangles produced by Safari.

Commits
  • 4773b2e Mark version 6.40.0
  • 773a0ee Properly track associativity for shift-click selections
  • 3612d3f Bring back the vertical scan loop in moveVertically
  • bc58375 Don't put Shift-Enter/Backspace/Del through the iOS pending key hack
  • fd252fa Change WidgetType.updateDOM from type to this
  • 9373f52 Pass the old widget value to WidgetType.updateDOM
  • 3d236d2 Mark version 6.39.17
  • 0a8ddb1 Avoid posAtCoords getting confused by empty wrapping rectangles returned by S...
  • f22a194 Implement iOS selection handle drawing in the selection layer
  • 07d54a0 Use last touch position to assign a side to touch selections in wrapping editors
  • See full diff in compare view

Updates @sentry/solid from 10.43.0 to 10.46.0

Release notes

Sourced from @​sentry/solid's releases.

10.46.0

Important Changes

  • feat(elysia): @sentry/elysia - Alpha Release (#19509)

    New Sentry SDK for the Elysia web framework, supporting both Bun and Node.js runtimes.

    Note: This is an alpha release. Please report any issues or feedback on GitHub.

    Features

    • Automatic error capturing — 5xx errors captured via global onError hook; 3xx/4xx ignored by default. Customizable with shouldHandleError.
    • Automatic tracing — Lifecycle spans for every Elysia phase (Request, Parse, Transform, BeforeHandle, Handle, AfterHandle, MapResponse, AfterResponse, Error) with parameterized route names (e.g. GET /users/:id).
    • Distributed tracing — sentry-trace and baggage headers propagated automatically on incoming/outgoing requests.

    Usage

    import * as Sentry from '@sentry/elysia';
import { Elysia } from 'elysia';
Sentry.init({ dsn: 'DSN', tracesSampleRate: 1.0 });
const app = Sentry.withElysia(new Elysia());
app.get('/', () => 'Hello World');
app.listen(3000);

Other Changes

  • feat(nuxt): Conditionally use plugins based on Nitro version (v2/v3) (#19955)
  • fix(cloudflare): Forward ctx argument to Workflow.do user callback (#19891)
  • fix(cloudflare): Send correct events in local development (#19900)
  • fix(core): Do not overwrite user provided conversation id in Vercel (#19903)
  • fix(core): Preserve .withResponse() on Anthropic instrumentation (#19935)
  • fix(core): Send internal_error as span status for Vercel error spans (#19921)
  • fix(core): Truncate content array format in Vercel (#19911)
  • fix(deps): bump fast-xml-parser to 5.5.8 in @​azure/core-xml chain (#19918)
  • fix(deps): bump socket.io-parser to 4.2.6 to fix CVE-2026-33151 (#19880)
  • fix(nestjs): Add node to nest metadata (#19875)
  • fix(serverless): Add node to metadata (#19878)
  • chore(ci): Fix "Gatbsy" typo in issue package label workflow (#19905)
  • chore(claude): Enable Claude Code Intelligence (LSP) (#19930)
  • chore(deps): bump mongodb-memory-server-global from 10.1.4 to 11.0.1 (#19888)
  • chore(deps-dev): bump @​react-router/node from 7.13.0 to 7.13.1 (#19544)
  • chore(deps-dev): bump effect from 3.19.19 to 3.20.0 (#19926)
  • chore(deps-dev): bump qunit-dom from 3.2.1 to 3.5.0 (#19546)

... (truncated)

Changelog

Sourced from @​sentry/solid's changelog.

10.46.0

Important Changes

  • feat(elysia): @sentry/elysia - Alpha Release (#19509)

    New Sentry SDK for the Elysia web framework, supporting both Bun and Node.js runtimes.

    Note: This is an alpha release. Please report any issues or feedback on GitHub.

    Features

    • Automatic error capturing — 5xx errors captured via global onError hook; 3xx/4xx ignored by default. Customizable with shouldHandleError.
    • Automatic tracing — Lifecycle spans for every Elysia phase (Request, Parse, Transform, BeforeHandle, Handle, AfterHandle, MapResponse, AfterResponse, Error) with parameterized route names (e.g. GET /users/:id).
    • Distributed tracing — sentry-trace and baggage headers propagated automatically on incoming/outgoing requests.

    Usage

    import * as Sentry from '@sentry/elysia';
import { Elysia } from 'elysia';
Sentry.init({ dsn: 'DSN', tracesSampleRate: 1.0 });
const app = Sentry.withElysia(new Elysia());
app.get('/', () => 'Hello World');
app.listen(3000);

Other Changes

  • feat(nuxt): Conditionally use plugins based on Nitro version (v2/v3) (#19955)
  • fix(cloudflare): Forward ctx argument to Workflow.do user callback (#19891)
  • fix(cloudflare): Send correct events in local development (#19900)
  • fix(core): Do not overwrite user provided conversation id in Vercel (#19903)
  • fix(core): Preserve .withResponse() on Anthropic instrumentation (#19935)
  • fix(core): Send internal_error as span status for Vercel error spans (#19921)
  • fix(core): Truncate content array format in Vercel (#19911)
  • fix(deps): bump fast-xml-parser to 5.5.8 in @​azure/core-xml chain (#19918)
  • fix(deps): bump socket.io-parser to 4.2.6 to fix CVE-2026-33151 (#19880)
  • fix(nestjs): Add node to nest metadata (#19875)
  • fix(serverless): Add node to metadata (#19878)
  • chore(ci): Fix "Gatbsy" typo in issue package label workflow (#19905)
  • chore(claude): Enable Claude Code Intelligence (LSP) (#19930)
  • chore(deps): bump mongodb-memory-server-global from 10.1.4 to 11.0.1 (#19888)
  • chore(deps-dev): bump @​react-router/node from 7.13.0 to 7.13.1 (#19544)
  • chore(deps-dev): bump effect from 3.19.19 to 3.20.0 (#19926)

... (truncated)

Commits
  • e5fdc9d release: 10.46.0
  • c01fe86 release: 10.46.0
  • 0f1171b Merge pull request #19973 from getsentry/prepare-release/10.46.0
  • 6f48cc4 meta(changelog): Update changelog for 10.46.0
  • 54abb35 refactor(elysia): drop @​elysiajs/opentelemetry dependency (#19947)
  • a54de04 ref(core): Remove duplicate buildMethodPath utility from openai (#19969)
  • 0156846 feat(nuxt): Conditionally use plugins based on Nitro version (v2/v3) (#19955)
  • 18a624e feat(elysia): Elysia SDK (#19509)
  • c9812ae test(cloudflare): Enable multi-worker tests for CF integration tests (#19938)
  • 83cabf3 fix(core): Preserve .withResponse() on Anthropic instrumentation (#19935)
  • Additional commits viewable in compare view

Updates @tanstack/solid-virtual from 3.13.21 to 3.13.23

Release notes

Sourced from @​tanstack/solid-virtual's releases.

@​tanstack/solid-virtual@​3.13.23

Patch Changes

  • Updated dependencies [7ece2d5]:
    • @​tanstack/virtual-core@​3.13.23

@​tanstack/solid-virtual@​3.13.22

Patch Changes

Changelog

Sourced from @​tanstack/solid-virtual's changelog.

3.13.23

Patch Changes

  • Updated dependencies [7ece2d5]:
    • @​tanstack/virtual-core@​3.13.23

3.13.22

Patch Changes

Commits

Updates convex from 1.32.0 to 1.34.1

Changelog

Sourced from convex's changelog.

1.34.1

  • Hides the --yes flag on npx convex deploy to discourage YOLO agents being run in privileged environments from pushing to production.
  • Improves client backoff strategy to reconnect more quickly. The changes in 1.34.0 did not correctly reset backoff sufficiently after reconnect.
  • AI files will not be installed by default in non-interactive environments.
  • Disabling AI files is now tracked with an "enabled" flag in convex.json that hides nags for initial setup and updates when set to false.
  • Fix ai-files re-prompting to install files on setup when they already exist.
  • Fix local deployments returning stale credentials when ports change.

1.34.0

  • The CLI can now automatically provide Convex AI context files (AGENTS.md, CLAUDE.md, guidelines/state files) to your project when using npx convex dev. You can manage Convex AI files using the new npx convex ai-files command:
    • npx convex ai-files install - Install or refresh AI files
    • npx convex ai-files update - Update to latest available AI files
    • npx convex ai-files status - Show what is installed and what is stale
    • npx convex ai-files disable - Suppress install and staleness messages in npx convex dev
    • npx convex ai-files enable - Re-enable install and staleness messages
    • npx convex ai-files remove - Remove Convex-managed AI files
  • Adds new npx convex deployment commands:
    • npx convex deployment create allows you to create new cloud deployments for a project
    • npx convex deployment select allows you to select the deployment to use in your project directory when running commands
  • CLI commands now support the --deployment flag to select a deployment to target. It accepts a deployment name (e.g. joyful-capybara-123), ref (e.g. dev/james), dev (for your personal dev deployment), or prod (for your project’s default production deployment). You can also select deployments in other projects with project-slug:ref or team-slug:project-slug:ref.
  • Improves websocket client backoff behavior.
  • No longer recreates convex/README.md when convex/ already exists.

1.33.1

  • Fixes the ConvexProviderWithClerk to fetch the JWT template if the (new) Convex integration is not enabled. It is safe to both set the JWT template and enable the integration. In 1.33.0 it broke if you only had the JWT template specified.

1.33.0

  • npx convex env set can now:
    • Accept a value interactively

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ianatconvex, a new releaser for convex since your current version.


Updates solid-js from 1.9.11 to 1.9.12

Commits

Updates vite-plugin-solid from 2.11.10 to 2.11.11

Release notes

Sourced from vite-plugin-solid's releases.

vite-plugin-solid@2.11.11

Patch Changes

  • 7f39675: Add vite 8 in peer deps
Changelog

Sourced from vite-plugin-solid's changelog.

2.11.11

Patch Changes

  • 7f39675: Add vite 8 in peer deps
Commits
  • 9c7a3a5 Merge pull request #246 from solidjs/ci--trusted-publishing-permissions
  • 25fb0a1 ci: trusted publishing permissions
  • 04eec66 Merge pull request #245 from solidjs/chore--bump-github-ci-to-node-24
  • 52f1033 chore: bump github ci to node 24
  • 37dcf09 Version Packages (#244)
  • 7f39675 [main] Allow vite 8 in peerDeps (#242)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite-plugin-solid since your current version.


Updates vitest from 4.1.0 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub

v4.1.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • fc6f482 chore: release v4.1.2
  • 6f97b55 feat: disable colors if agent is detected (#9851)
  • b3c992c fix(coverage): correct coverageConfigDefaults values and types (#9940)
  • 7c06598 fix: ensure sequential mock/unmock resolution (#9830)
  • f54abad chore: add typo-checker skill and fix typos (#9963)
  • 7aa9377 fix: don't resolve setupFiles from parent directory (#9960)
  • 1f2d318 chore: release v4.1.1
  • ebfde79 refactor: rename matchesTagsFilter to matchesTags (#9956)
  • 5611500 feat(experimental): introduce experimental.vcsProvider (#9928)
  • eec53d9 feat(experimental): expose matchesTagsFilter to test if the current filter ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 9…
7ec8433 
… updates

Bumps the minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@auth/core](https://github.com/nextauthjs/next-auth) | `0.37.0` | `0.41.1` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.5.4` | `6.6.0` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.39.16` | `6.40.0` |
| [@sentry/solid](https://github.com/getsentry/sentry-javascript) | `10.43.0` | `10.46.0` |
| [@tanstack/solid-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/solid-virtual) | `3.13.21` | `3.13.23` |
| [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex) | `1.32.0` | `1.34.1` |
| [solid-js](https://github.com/solidjs/solid) | `1.9.11` | `1.9.12` |
| [vite-plugin-solid](https://github.com/solidjs/vite-plugin-solid) | `2.11.10` | `2.11.11` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.0` | `4.1.2` |



Updates `@auth/core` from 0.37.0 to 0.41.1
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/@auth/core@0.37.0...@auth/core@0.41.1)

Updates `@codemirror/state` from 6.5.4 to 6.6.0
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](codemirror/state@6.5.4...6.6.0)

Updates `@codemirror/view` from 6.39.16 to 6.40.0
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](codemirror/view@6.39.16...6.40.0)

Updates `@sentry/solid` from 10.43.0 to 10.46.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.43.0...10.46.0)

Updates `@tanstack/solid-virtual` from 3.13.21 to 3.13.23
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/solid-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/solid-virtual@3.13.23/packages/solid-virtual)

Updates `convex` from 1.32.0 to 1.34.1
- [Release notes](https://github.com/get-convex/convex-backend/releases)
- [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md)
- [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex)

Updates `solid-js` from 1.9.11 to 1.9.12
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/commits)

Updates `vite-plugin-solid` from 2.11.10 to 2.11.11
- [Release notes](https://github.com/solidjs/vite-plugin-solid/releases)
- [Changelog](https://github.com/solidjs/vite-plugin-solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/vite-plugin-solid/compare/vite-plugin-solid@2.11.10...vite-plugin-solid@2.11.11)

Updates `vitest` from 4.1.0 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@auth/core"
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@codemirror/state"
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@codemirror/view"
  dependency-version: 6.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@sentry/solid"
  dependency-version: 10.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/solid-virtual"
  dependency-version: 3.13.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: convex
  dependency-version: 1.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: solid-js
  dependency-version: 1.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vite-plugin-solid
  dependency-version: 2.11.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants